59b2405ba798f64cdb14dda08c14666d212bff697da78cf22b9cd9ca06dc4ea8

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/InventoryEditor_ItemHash.txt
Size 10KB
Sample260925-k5tbracg79
SHA256 59b2405ba798f64cdb14dda08c14666d212bff697da78cf22b9cd9ca06dc4ea8
MD5 887350bbcb3dd2c9e75c729818181e98
SHA1 a2f076d321ddcd2bbdac26d8efc2d02ec8837f1c
SHA512 4f1cd81df3a9950382682345e337d6c00962d9b7a9129968819aa5791fa9eeba0f2f5250aa4435576082c0d25b9f1058f5a552ea997bf16536ed1615efa60bee
SSDEEP 192:FS2Lf76k8a0IGmIhHm9ISKQOL4KblMAhD3CIr4WtM6b:Uxkr0eIhGOSKQod5thDdZ
TLSH
T1EA324AE476B098CD4D343F5EF32020562A3D7673E7B260C4636A2F86B41266D8B68F75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3176	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\InventoryEditor_ItemHash.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3176