ecccb2eaaeb53c39d429edef3e399fcba5d94ee535da2fb66a8811ae4590f426

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/dialogue4.gz
Size 11KB
Sample260627-e7rm2sht9p
SHA256 ecccb2eaaeb53c39d429edef3e399fcba5d94ee535da2fb66a8811ae4590f426
MD5 e5b8ef2ea0f896800d9b65a8ae582c69
SHA1 64b6c24b9db816e7ea49c8e8b3911d6495f9fdec
SHA512 28f6ba353577a79ab88226b6358c264f69dc6740b3d543106b9f2ecbef5bb5c7c1ef394f7863e4112e015992bf37a62a08914a98a88bb3c22d1a55d07bd4319e
SSDEEP 192:xEAu3KJPAcF3Raf/Y2ak1Z5NCcK/56ok2dus27QnURi3pWNhVbXEOhk3e:xEaXIf/uyVCH56okHszn2Vbr
TLSH
T13032C0785302CCC2FE8320B118BDC526C5D825B8C9EAC62F6F85E027566E951DE7B38C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5540	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5540	7zFM.exe
Token: 35	5540	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5540	7zFM.exe