7ee950238f1b1cd901a3a5c00f9af6b12bbfbc6840105c3f0fa66057f084d4eb

Analysis

max time kernel
150s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 03:45

Target
localtonet.exe
Size 156.1MB
Sample261102-ea8kasgz5q
SHA256 7ee950238f1b1cd901a3a5c00f9af6b12bbfbc6840105c3f0fa66057f084d4eb
MD5 2e3f468d642614acda6f855fe5f9eab2
SHA1 6c814fae9e45d1fc280cd0e3382e33053abd8975
SHA512 ee5fd6c6e67601337af9673191908f000092a4b47720e548a8bbb0854be208d6106b2791a34c096f263b2be4c6be1bdfc903e640a97fa826c39be8474d48e578
SSDEEP 786432:VjKpVJ+FUyUQL0E25Z3oCMVfBm3Tgfvk2IltlokhrDoOoTM5ouGzK73WQfngvv9q:V+bQFUj6C2kFpoIrUcWQPgvvI
TLSH
T1EE78AD10A3E84F16D26FC6B8D1628512D7B1F8479321E7CF0598E9993F637D0AA32367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1840	localtonet.exe

C:\Users\Admin\AppData\Local\Temp\localtonet.exe
"C:\Users\Admin\AppData\Local\Temp\localtonet.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1840