c59e5b3ebc1f1fd01edeaa06d795a242c70a857708e9af0f279178cc752dfe92

Analysis

max time kernel
150s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/05/2026, 22:26

Target
GenP-v4.0.3.exe
Size 2.1MB
Sample260502-2cr2nact2k
SHA256 c59e5b3ebc1f1fd01edeaa06d795a242c70a857708e9af0f279178cc752dfe92
MD5 c82c8702aff2bd6799baf7ecc79c2302
SHA1 efffc7128a9308554c1265942152aa39e208d8c2
SHA512 54031e96a5932708250d4fc35b4c51f29b8db133ab48696935257eaafde0b9bd6fd791449e43d854e10c22e8d9d24c0f50ef652d558dd358120da145f689da80
SSDEEP 49152:R1H4jR2TYrQbDTr0Heqta/Gra7YqrU4u6tBvALfuG+:0UOtIGecqrUF6tBvAju
TLSH
T17BA5D00573E442DDFEABE1768A13C50BD7B27C450673865F02A46A766F33B712A2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4832	GenP-v4.0.3.exe

C:\Users\Admin\AppData\Local\Temp\GenP-v4.0.3.exe
"C:\Users\Admin\AppData\Local\Temp\GenP-v4.0.3.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4832

config.ini

Path C:\Users\Admin\AppData\Local\Temp\config.ini
Size 13KB
SHA256 0c499bf43fca5620168c7e2fc52b8bda0cba8f0aaff1148459b326b517c011bc
MD5 b6706ecca9e5349ed1eb3e330cc762de
SHA1 ce49bc131bfedc22d941b3e0e3ad1fece9ab7b02
SHA512 4275e462c17c9c9d1a278894396e1a017533930217cba9da4329ec7e1d66cc222958394afb5cd082cbf4612c851ec1184f855c84279e8721826ebadcfd03526d
SSDEEP 384:seWH2qZpwecdQ78vcjO0pvc0L9sGvLadEC29tKEm8hJv:seWWqZpwe75dAEC29tKa
TLSH
T12152B709C5D34362D990AD5E32B17DC32F3BB1CC99CE1391DB9A857E39D300852ABDA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4832-17-0x000001EC56E60000-0x000001EC56F4C000-memory.dmp

Download