a2093d6262cd2d20b9c814d8352f586cd4242711da926fe38290ca62321fcfc9

Analysis

max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/particles.gz
Size 1.5MB
Sample260627-e7rm2sht9p
SHA256 a2093d6262cd2d20b9c814d8352f586cd4242711da926fe38290ca62321fcfc9
MD5 c4819a7ed51949f8ef3a9685bf2bcb10
SHA1 706ba62a41dcbdb4e153b5f2aa1bc9fb0c723161
SHA512 b3508e669291d911d7bc35d311807b0b29a225ac968ed4d2b9bf7b154536f27dca18ecf4218bf08cc21610da341e9807085148e68735036f66d1d4193b72cc70
SSDEEP 24576:czc8Em+i9ND0EE6+N2IEbmMulwDlo2Pg4tJJK7SAwcKMHAlSqWN3wLtviC:HcNQ6+kIEbPt+R4tHK7SEKMHWStNQtD
TLSH
T12C7533E874338A14634495FFFFE14D991A4C93EAE2AA0D270D989CF07A40165C3B5FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
904	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	904	7zFM.exe
Token: 35	904	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
904	7zFM.exe