5496999f3d315143d96c96d00ba0a46afad9ce734d799ce359f3cfc6d6a7fe6d

Resubmissions

10/07/2026, 18:01

10/07/2026, 17:56

10/07/2026, 17:46

max time kernel
153s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 17:56

Target
FoulzExternal.exe
Size 163.5MB
Sample260710-wh2kdsd12k
SHA256 5496999f3d315143d96c96d00ba0a46afad9ce734d799ce359f3cfc6d6a7fe6d
MD5 18617c2cc9dd799d60a65dcb33b08c31
SHA1 1f6870ecf465712986403b3f48b0a5c213555dbc
SHA512 345089024fcf7f1a255ba4b18b60c47a74646e075fd6e4e158d0c321af79846ba3e3ed1763aa602e868138246ae82cc19828f74cff190a7c4cc486cede48c0e6
SSDEEP 786432:B230A8Oa89TsG5YWV5OtsFGtatWbhsCrTG5mfOm5cuA0zm7/RIS+vF:ckA838JsHWEd2CvG8fOkZiM
TLSH
T119888C01A3E85A05E67B867897738161E6B1FC535711C2CF0094FA5A2F73BC2BA36376
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3304	FoulzExternal.exe

C:\Users\Admin\AppData\Local\Temp\FoulzExternal.exe
"C:\Users\Admin\AppData\Local\Temp\FoulzExternal.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3304