0651a45197d6e7d8bd107f45c945c75557d01bb44c7ccb814910e88f70423c26

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 15:04

Target
RobloxExternal/CMakeLists.txt
Size 965B
Sample260825-sf2kts1set
SHA256 0651a45197d6e7d8bd107f45c945c75557d01bb44c7ccb814910e88f70423c26
MD5 511d70305dc65b7c35e9ec48c152d3cc
SHA1 36720230fb40089a4bb1172935ba7313ee61be87
SHA512 65fe0e37ac7cd56f9ef745f16b5805ed404e804589ff0023af5e07784852c7c78d27afadb184e1e5d108536597db44c73c38a45410da494229ff5a21170d5da3
TLSH
T1B111EDB35A7B6487A2C705D177D4812A41AAC397FD0B4044FB30368C1F770D15407DA9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
640	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\RobloxExternal\CMakeLists.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:640