971db7968dc37ec50b18d64a1de7f693e137f6793a7368e4d5c27bd9522eccd8

Analysis

max time kernel
148s
max time network
177s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 16:26

Target
AzerothSurvivorsWindowsNew (1).rar
Size 725.3MB
Sample261026-txvdhsf16r
SHA256 971db7968dc37ec50b18d64a1de7f693e137f6793a7368e4d5c27bd9522eccd8
MD5 7748bfdffaccd2f46d868cf69ad3e72c
SHA1 d5ccf2d6df6bacc2efaf36661edd1e4c6216ad07
SHA512 77930d1d1840ed83816e2bb829847ed9e74c7324857516f4c3677d6280a6601de4e879c888adef368a51c45f5030bee6f533afc45a5d3f8bff892816002dfe5b
SSDEEP 12582912:EkTIrBujUbLzdbVgQwsqpir8As2nufAZ4LlRw0VKzg/HNyk1AfnuoRM+dGym8jJ:xTIrlblbOfsAtAL545Rw0AzoHEhfuoqc
TLSH
T1FD8933E5210F5A8CD81FBF378F84E527B5E922ACC6ACD7A434164663B425BD881139FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1404	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1404	7zFM.exe
Token: 35	1404	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1404	7zFM.exe