fac52c509c45cc00f237756a2bd16b4205bb79cad5834b2e28e8023d5cd17c79

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/08/2026, 04:33

Target
paoR.txt
Size 277B
Sample260821-e6mbyagm7w
SHA256 fac52c509c45cc00f237756a2bd16b4205bb79cad5834b2e28e8023d5cd17c79
MD5 d84e90b0952027d923bf18d00c1bad8d
SHA1 91e5680eda863f76f597c9c7d3c98d7f973a7b42
SHA512 97ae02c78876b999694f5bc96aeecbe34730f0811345e4aa1972e40378a76a9c6e555376dcc3d56f521dfb53d536e59da227c7a8ab1db8813d17c9fbfbe54d66
TLSH
T10ED02BCA4F1E40989788C678C0E33A409CF1BC23E599CC023063428DEB53163F58C13C
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2116	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\paoR.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2116