32f25947ef6f60529622a2a1a7ed6340b17ca92ba2d11e9cbaefb5a0436c2216

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 04:38

Target
Patches.txt
Size 3KB
Sample260820-e9lvksbd55
SHA256 32f25947ef6f60529622a2a1a7ed6340b17ca92ba2d11e9cbaefb5a0436c2216
MD5 cc4e6c113f3463f27a1a0ead96fc3441
SHA1 0a828ee8ec5d13298ace43431a175f2117e90c06
SHA512 874b7c27f90081b6435b5a3755f6ca8bf64db5eeb529633de266f629815e9d582f7491f723a83606ed5ec592bcd36d3a125b8ae39690799a31c83662ce299a2c
TLSH
T1208135D58483029DC3227F4D6F32BAE8A1B54C5B78C14EC7B55CA6B4F66FD226633812
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1864	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Patches.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1864