652a288fb01f98ac44d5af2ed8ea6d43e3448fe82a9afed8370b6c08bbc78a06

Analysis

user interaction
yes
max time kernel
108s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 02:01

Target
LiteWare.exe
Size 52.1MB
Sample260710-cf1qjac13t
SHA256 652a288fb01f98ac44d5af2ed8ea6d43e3448fe82a9afed8370b6c08bbc78a06
MD5 c0ca8df3163309ad0f070d7911e245c6
SHA1 17cd850d44255653e6a004f0ccb7c6307d4769e8
SHA512 4eef4852ed5bffed1e7534be54a89ddb2a8a27b5f25a9f197135c51dc3d06e9671dd36d6c9036a9a45d4400f47e244ccc2b45f87201adebff6a5bd85237bcd7f
SSDEEP 786432:7IRuBeTDhKD0QMsvPFcVL8j30A7IIYBZrL7BlKUzpt1Oj:7INhrQjvPmQJGL7jKUV
TLSH
T1A4C701DA38E191ECCBC2C534D2891BFAE1C678A94EB9542F7FC609022531D95CCE5E36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3416	LiteWare.exe
3416	LiteWare.exe

C:\Users\Admin\AppData\Local\Temp\LiteWare.exe
"C:\Users\Admin\AppData\Local\Temp\LiteWare.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3416