922a44bd3f11dea60f4e1c80a63021736dc49e933814eff5286ad78c67fd7090

Analysis

max time kernel
899s
max time network
455s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 03:58

Target
Release/Extensions.txt
Size 1KB
Sample260620-ejg4pset3x
SHA256 922a44bd3f11dea60f4e1c80a63021736dc49e933814eff5286ad78c67fd7090
MD5 2c0113989ea6a02265352c6fe456cab7
SHA1 fe9837f346965996b20cc880123248b923245fde
SHA512 5c2650641e3341c429f9f477a57fee31de3f34202a2f36a05fae972cca422619fbfd272e15bb6d12bdfc35d60a044e83700015e9b408409e008c851b1ec2becc
TLSH
T12E3144AEC91EC4C59C4E8DE63AC8DC80559775C674CA06D1CB40D23C6BFE1BB02D0A67
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5760	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Release\Extensions.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3156

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1612