4453c6a068b34905f73cf7c063c279f14c79d2cbde6f6ca6f65820a044f3806f

Analysis

max time kernel
149s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/AppearanceEditor.txt
Size 11KB
Sample260925-k5tbracg79
SHA256 4453c6a068b34905f73cf7c063c279f14c79d2cbde6f6ca6f65820a044f3806f
MD5 a9f28e702704f72efdd04862c54886c5
SHA1 5fda5d0b7a9051cc1738fd3e7c5ab6b441d2dcc1
SHA512 8e742024be08dbf89974b8db9650931d5b8ec81d1fc81d56116ea6951e2b4043b978ec2a1c1e3b6473e4b47834f3497ee42f95a3e39711062fd064edd14772db
SSDEEP 192:UHwbaj0HQS0qj10ZixmvhRC1r9oZAZcjQx/bJbQqKkpfkmMaadMKw8KOaOV8FQnD:UHmaj0HQS0qjKZioa9sAmUv4mdaqKxKM
TLSH
T198320BEE398A63DC5B12265DA105718AF17FC770D23042357FBA978636440B9DFB6318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3428	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\AppearanceEditor.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3428