4af639c5c9f9106f73985a8c53a916d73c78a3bf67b450eaf4b06387129c3975

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 11:16

Target
vxnperm/deps/iqvsw64e.inf
Size 2KB
Sample260804-nc4hssvsfv
SHA256 4af639c5c9f9106f73985a8c53a916d73c78a3bf67b450eaf4b06387129c3975
MD5 9fc2029a6ebf64e1af9f656b82fdea1a
SHA1 20c6e51b5dacde55d80b0873720f987d2593c47a
SHA512 1ccbb5c488e7967baadca45d241f5d66ea1559d886662bc25c86b91634a7639416d5a8777f1e07a1b7d3cc638b857d32a52ef2960e935cb03c682abe4827dd02
TLSH
T1D141CCAD19E34E49767B34A193A3CAC2F210200609443D8D345EF4A5AB3ED9DD3659BE
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
552	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\vxnperm\deps\iqvsw64e.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:552