77f639609382fd36dcaf5a0d8b778e1c58e6acc0691a35e6a6083e1282b54a70

Analysis

max time kernel
150s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 01:16

Target
GenP-v4.0.3.exe
Size 2.1MB
Sample260503-bmtecsat2s
SHA256 77f639609382fd36dcaf5a0d8b778e1c58e6acc0691a35e6a6083e1282b54a70
MD5 b62c2c7495025fabc870fd1a127a6267
SHA1 76ed268fab2491d552e3bc5a793cfa703d2139a4
SHA512 977b3fa4674fdbd675ef6d777c3261a34cc7498fcf74966c0e77c4630f3b8d361c5bd531f0eb5466e7f6bec94a28f024252fe54260f27c05a96a8faf164af7a9
SSDEEP 49152:61H4jR2TYrQbDTrSHeqtasGBa7YqrU4u6tBvALfuGw:3UstnG4cqrUF6tBvAju
TLSH
T196A5D00573E442DDFEABE1768A13C50BD7B27C450673865F06A06A766F33B712A2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2912	GenP-v4.0.3.exe

C:\Users\Admin\AppData\Local\Temp\GenP-v4.0.3.exe
"C:\Users\Admin\AppData\Local\Temp\GenP-v4.0.3.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2912

config.ini

Path C:\Users\Admin\AppData\Local\Temp\config.ini
Size 13KB
SHA256 0c499bf43fca5620168c7e2fc52b8bda0cba8f0aaff1148459b326b517c011bc
MD5 b6706ecca9e5349ed1eb3e330cc762de
SHA1 ce49bc131bfedc22d941b3e0e3ad1fece9ab7b02
SHA512 4275e462c17c9c9d1a278894396e1a017533930217cba9da4329ec7e1d66cc222958394afb5cd082cbf4612c851ec1184f855c84279e8721826ebadcfd03526d
SSDEEP 384:seWH2qZpwecdQ78vcjO0pvc0L9sGvLadEC29tKEm8hJv:seWWqZpwe75dAEC29tKa
TLSH
T12152B709C5D34362D990AD5E32B17DC32F3BB1CC99CE1391DB9A857E39D300852ABDA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2912-17-0x0000018D9EA00000-0x0000018D9EA31000-memory.dmp

Download