96e8601228cb119e422d5e2f67150bb6e356cfc457859b8f4101bd46902368e8

Analysis

max time kernel
150s
max time network
159s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 12:11

Target
Private Bypass.exe
Size 60.5MB
Sample260729-pc26eafn8x
SHA256 96e8601228cb119e422d5e2f67150bb6e356cfc457859b8f4101bd46902368e8
MD5 bd8c1538f692e5ff9c3a026d894592ff
SHA1 9f8441761ca1365099f86f9d9a5ced04f2daad5e
SHA512 3ad677e0ba7601b5f50fe12ed67142b4802130d4978b0bc2b8e7e1066e89803446885ecbc6c18ccc7475b079c0d573ad22434a719f3fbce914c495d0877da3b3
SSDEEP 1572864:ZjjuJMoBQaQJ8loVVtHzWBYBULMjKewocw2p:9jFa9loVVdBUn
TLSH
T110D73367A1D5A2E5C4C34A44A24A02DB51C0D8BACBFE452C2BCB6C037925DEB478DF77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4564	Private Bypass.exe
4564	Private Bypass.exe

C:\Users\Admin\AppData\Local\Temp\Private Bypass.exe
"C:\Users\Admin\AppData\Local\Temp\Private Bypass.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4564