df8a6feb356d10bd605323be5f9842f959d40d99d7d100d6c37cafbe6f179d51

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 04:39

Sharing

Target
Risxn Cracked Tweak (1).rar
Size 939KB
Sample261023-e97r2shw8w
SHA256 df8a6feb356d10bd605323be5f9842f959d40d99d7d100d6c37cafbe6f179d51
MD5 1591879409594670740f21ee85209f52
SHA1 29079c5dcaa61670f6a6d0533ad1c4b2cd591105
SHA512 4a67fc8ca4f66a3d34b3de31528669e55841ca70333e769b3a0557444aa8020ef5d74b9e500950861ee86edeacf5d30e58bef1b06578f73bab720165ecc539b9
SSDEEP 12288:j095NKP+3EPq7q20w36ZL0x9aW/OoST4ziA364ZwMY5okOaYTvXIvPEK8POB:Q95qS+BZ299/OoScziQhZwMYnaTv4Iu
TLSH
T1B02533CC98F2C09BA167A3331D991D8446E2F2992633937E5EF70B652BE40D150B877B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5876	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5876	7zFM.exe
Token: 35	5876	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5876	7zFM.exe