6629566f5caa7f7fcd4b2bb7ec0b6727a8216d939ad8cb4372b6bef2b5b8194b

Analysis

max time kernel
899s
max time network
463s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 13:12

Target
output.log
Size 7KB
Sample260716-qfvfeah18x
SHA256 6629566f5caa7f7fcd4b2bb7ec0b6727a8216d939ad8cb4372b6bef2b5b8194b
MD5 c166afec9f0ee2a761a61da8803d41d2
SHA1 9bf8e12ec7827a4efda1abc5959379ef3975283d
SHA512 b060f41dc17cadc5d9a7c54f4ef10211c67eab74ce217a3b2f4a065d14402b8a1337d879e13b082d960b6e7c84f6762b06d9ea4cec86d3c87297cf50e46905a6
SSDEEP 96:XLF1ISVMbhhhUkZ4eBvR5WNcOLF1ISVMp5y/FamdchhcuBkRfd5Jkwktuc:XR1ISVMzhUktuR1ISVMzytZ87Kfo
TLSH
T104E13316D8E47424B229D00D3EBEDEF7A2092D05267704BE748D5EFD2B4142E67B9E82
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
364	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\output.log
1⤵
- Opens file in notepad (likely ransom note)
PID:364

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3460

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2508