d392d11ab4be794522121bf2c4a70e1c850734e699326a13206368a4bb9569e9

Analysis

user interaction
yes
max time kernel
8s
max time network
12s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 23:39

Target
gen1_spf.exe
Size 74.9MB
Sample260804-3nc8batblb
SHA256 d392d11ab4be794522121bf2c4a70e1c850734e699326a13206368a4bb9569e9
MD5 1825b29cb75ba0b2f7e7eb751aee4deb
SHA1 9c67b947d2b504070535cf345c9b16d3531c585e
SHA512 16cd69b78fdfbad0be39e77ccf9add6e5ab2182394047b8b3eca6a85219496c51bcce738ccb931d021d706d9b28ac592a242171a2ad67ed7a4026fc40825ced0
SSDEEP 1572864:3F5aI6j0RM2nyqhEhvkU2LzuMeNp/YXwAiP3/TCFfoc:z0j0RvyyY2LzaNCgt/
TLSH
T1EA0833AB65DAB2D084CF4940A18772DF21D1D1998CDE44191EFF6C022F30EFB958AA77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1764	gen1_spf.exe
1764	gen1_spf.exe

C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe
"C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1764