d4fc3fa6cfe98cbd775db61076ad4a702b295f6369cf416162cd4e39258c0427

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/entity.gz
Size 20KB
Sample260627-e7rm2sht9p
SHA256 d4fc3fa6cfe98cbd775db61076ad4a702b295f6369cf416162cd4e39258c0427
MD5 ab1be3d2da1780bdd7628ad72f8330dd
SHA1 47e3936cc2ecbdeccbc87cd1a9a6eac4e414e3f6
SHA512 90f6be689005a932d46a1d9aebe9346a25248f8fcef4fff869895ad0d419e3adcb70c9a1f8a789d7bc7c1d1e0357aa8be5f37c5866bdd7b91ff0cddd0e0392ce
SSDEEP 384:TeoOXzY2UeYQ5iJeGeTSyQ3Nip19v7uiWe6sI5gVe1yuj2M7qOUC2JY04BMyJygL:TefBUo5ijeZQ38t4sUgQ1yu32+yY0sVB
TLSH
T11592D1AD7B78158EF33A0C98BBC0134C4524EAD39F765969600649AA37E32E73C4CC66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2568	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2568	7zFM.exe
Token: 35	2568	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2568	7zFM.exe