11c42d0e0724c6435f3d4529cda72c9aca19c6580cbc5c4f9e530d3ad0cc25b7

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 12:24

Target
bypass11111.exe
Size 18.3MB
Sample260912-plfzjay1ay
SHA256 11c42d0e0724c6435f3d4529cda72c9aca19c6580cbc5c4f9e530d3ad0cc25b7
MD5 9a2911e1b56d33ea7d960870313acc1a
SHA1 f39df243ef93338211993fed90cdfa536f74eecb
SHA512 df881e38efcaf5acd36cf8e0fad380a47439129f47164d9ae517fd9881af0bf9af03f9e8575b061d27aa3cfcb6e092be197e6a706439a4bbbf40efcb885f8d3f
SSDEEP 393216:9w96wVVhENu/5X/ldPlktyLCgZK0rVC766Zhwu:yRVfeUJ9dPfugZKj66Qu
TLSH
T1121723C7AADFE288C0871A4419C663DE24C1B6C985FD852D39CF6C07B411D6A4BCA7B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4364	bypass11111.exe
4364	bypass11111.exe

C:\Users\Admin\AppData\Local\Temp\bypass11111.exe
"C:\Users\Admin\AppData\Local\Temp\bypass11111.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4364