f5cdecb2055cb491e34adcf95ad3e2b2baae848f27d5e49425f79d3ebf2a0bc4

Analysis

user interaction
yes
max time kernel
30s
max time network
30s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 04:47

Target
EMulator Free Cheqatglobal.exe
Size 577KB
Sample260724-fenlcssema
SHA256 f5cdecb2055cb491e34adcf95ad3e2b2baae848f27d5e49425f79d3ebf2a0bc4
MD5 53fcee6b7e76afeaa43aedc44b3bcdaf
SHA1 39ca156a22622c44c51a83663aae19d14326e630
SHA512 df437ef198bfe94f3ee48c0df32ba273c5a094933c51a67ddb408c3e9d8672476577144e7d4c4b8723195a92ec2d0eb7e8e57363e490a137c3335c9311823d99
SSDEEP 12288:CrukD4OTQ6HZgGTWIKTp4725cC1OeD1eXs9zQBdW+Yi9nhKe0:rE4OnHZgGTW9p4741O21WHdWJi9n4e0
TLSH
T144C49E41F1E410F8D02FD178CAC6A61BFB773C84132055DB63D055A92FB76E4ABBA621
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5816	EMulator Free Cheqatglobal.exe

C:\Users\Admin\AppData\Local\Temp\EMulator Free Cheqatglobal.exe
"C:\Users\Admin\AppData\Local\Temp\EMulator Free Cheqatglobal.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5816