a5f7a588b6565178e5f62c724e8b6c1727f0ead4d14fe77dab91b4f89ea63f84

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/maps.gz
Size 171KB
Sample260627-e7rm2sht9p
SHA256 a5f7a588b6565178e5f62c724e8b6c1727f0ead4d14fe77dab91b4f89ea63f84
MD5 48e2242ea719e6a1b6ab8863a73c792d
SHA1 8af63bc3e6b70d2924cfa7166564f7855b7d0658
SHA512 686ba167b1ed429d13fc8d2ef03d7ab4f7a44eb5f57579f02526b3af16c846436dfc9233401581c1a9dfaaeaa74b8d3ae2f367323f09280c990a1c0d455ca5ba
SSDEEP 3072:pEf8rKWQkpEYWvJiVR0oqiq3Ax2Lay1wFLQdAFPulx9nE1VDmdPokzAVBD:a0rKIpYvJiViihoehcmFOPE1wokzAX
TLSH
T1A90412417E679254030573A55F2866FC70F6A8195E2A3C1A37FCF0E2806B3FF119667A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2064	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2064	7zFM.exe
Token: 35	2064	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2064	7zFM.exe