37b3f5bfce4d80dfeae90581a9d9dcb4fa64488fa0ac1abc1f10f4d112164f9a

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 21:20

Target
AutoClip_feature_handoff_prompts.txt
Size 10KB
Sample261001-z679mazake
SHA256 37b3f5bfce4d80dfeae90581a9d9dcb4fa64488fa0ac1abc1f10f4d112164f9a
MD5 bbe0fd9af18cf72deeb3b460a9446ff8
SHA1 d1e63261fa5cb45e5775fefce5c5d9291b0703c0
SHA512 f8351f1fbc6d92788e7a8869e235e388c8bca77580bf797c3acf66ed3fbdee30af3fdc41b7a72c277078f7db76e64c3ce597dfc44c35d3e716e8d0fe890b372a
SSDEEP 192:ypHThjBHTrmIMOWeL7nqV1GTgEjNrapim12eczakb3mu/HgZHglD:yB1jBlnW+nqVgTVNGpNEecOkb3mu/egB
TLSH
T1EA22D8277B04637E4BD200D3E799E2C6EF7E9838334D4D60996E949C229036E857B7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5312	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\AutoClip_feature_handoff_prompts.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5312