19548262fc34bd4f421e7b9673b1576609c6063d9764fcafd3fea8b411bea806

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 11:43

Target
d01fdf241aa9e0a1.tar
Size 2.8MB
Sample261110-nvx4qsfa34
SHA256 19548262fc34bd4f421e7b9673b1576609c6063d9764fcafd3fea8b411bea806
MD5 850781a3de92391ddf6016da298f7445
SHA1 2c2bef8b30ef1871d3e3fbd55f7a1c462b0e9095
SHA512 9f61e79b4f8d4ac87215629a004a6fc0ece9c9a6b3f85cfebba1a4fa9578ee891e6d2aaa0660c6390043f115f8d7a195fdf3a5008d041af6081639bf4198c663
SSDEEP 24576:65bxr0D8nYwiHWZQ1v3bn5WcRIrsS2LTLOH+nZ3NsEUd1F:2r0DqYw+WZQ1v3bMrmTLOH+nZ3NsEg
TLSH
T14FD52B8735F7E130C7A322F25A9B4144B334F556356490B1B99C82AC2F86B38F1F796A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4816	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4816	7zFM.exe
Token: 35	4816	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4816	7zFM.exe