f0c93de8da4c242b4ee9c762634b69e37d802c2faec6ff0cc6aae3105442b8f4

Analysis

max time kernel
298s
max time network
255s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 07:51

Target
lang/Language.txt
Size 1KB
Sample260806-jqb89afr21
SHA256 f0c93de8da4c242b4ee9c762634b69e37d802c2faec6ff0cc6aae3105442b8f4
MD5 3876bcf558cdf1496521ce160c16729c
SHA1 651da7ff1747d5113cc0e6d5b7a39a3313c5481e
SHA512 295ca39476c5f6052c9e5780e46f9d640e8aae75fc9a0e4945c15c3051795466150629b35181731824e156213a6a9ce4bc475224b75d2f8d92de1140baabc127
TLSH
T16631FE20751067B822160DC2313A1E255A8580A8D3318D3A371D44EE9FF3918DEBA2A1
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4480	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\lang\Language.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4480