4ca9e0465ad06404487e4840d843189545eb3406715fa08a5a742a298209ed61

Analysis

max time kernel
300s
max time network
260s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 07:51

Target
Terms_Of_Use.txt
Size 1KB
Sample260806-jqb89afr21
SHA256 4ca9e0465ad06404487e4840d843189545eb3406715fa08a5a742a298209ed61
MD5 4059d41d6e4c5fef0edbc5aec877b81e
SHA1 46c2ba7e9a6b1081a450270ccde8447e155ebfe3
SHA512 90107fdfb9d08d41f6794f68befeb248100715359ba80cf16847a051e4d3009c737236a44b0a208b1a7d940c8f578564d3619719598468138d7ef416744a5126
TLSH
T17931D2B9731157B626830E621A735FA1B36768F0F21041A1705D80C42F72A34CFBA59C
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4316	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Terms_Of_Use.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4316