866c6e90c40c9c3b0e5b71ae8bf91944c94606cb7aa8f1c738e3dc573c7977a1

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/InventoryEditor_Hashes.txt
Size 8KB
Sample260925-k5tbracg79
SHA256 866c6e90c40c9c3b0e5b71ae8bf91944c94606cb7aa8f1c738e3dc573c7977a1
MD5 f517ab706217cbaea655c08bf35a27fa
SHA1 24a20a752d3cd851c3921b0660420c0e023cd04f
SHA512 9190a65eab3f948a5c8ce1aa46962754c0c6acb8f62fc8c5360f20570f27a05052b35e6fd75e7912f932295db2d4ae24e293acad110938ce953d74aea5774e6a
SSDEEP 96:rG10zWlFLqWReecihouUmqmI1u3fmWjKYQ7bKWnlMZwJucr0IrVYgVaEThZa3lxh:YxlIWN5wZm4uON76k8a0IKETheaZyB
TLSH
T10D12C698B3D8C59D7C18292FF131750AAF2C7A32FBF220C8B2055E66B71214CAB59D94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4180	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\InventoryEditor_Hashes.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4180