fa2c9b325be1d5da798eb0bbe6596019858904368d2acf275acb4d923bc38fc7

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/dialogue6.gz
Size 8KB
Sample260627-e7rm2sht9p
SHA256 fa2c9b325be1d5da798eb0bbe6596019858904368d2acf275acb4d923bc38fc7
MD5 e947dc9f910c8da301e707e304ba0d42
SHA1 f8e17d8a90db5db386c3c6611ff31f11041217b5
SHA512 85228b22cca95865d7bae8acccbc6606d92a5a52142d40383423e0eb38a467ba8f77943fb7d636063655e4b94bfa6ee572bf7e4ebaac28d1c539cfe438176471
SSDEEP 192:6PrULmag8PUz9aW+JMOnbnl/AG9ycC+PPCXwTrn2krr4kXuKrqn:6jUy+NLhAG9U+Wob1rzZY
TLSH
T15212AF02DA13915C437EB7E5A10AFE3734817B5FE522521B236972CD294AE0D142EF4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1040	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1040	7zFM.exe
Token: 35	1040	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1040	7zFM.exe