Windows Analysis Report
new 1.txt

Overview

General Information

Sample name: new 1.txt
Analysis ID: 1428825
MD5: b444775d7852a816e4f8845a097714f7
SHA1: 9b0d47ef351de2e016f660f3f44f19726f7c8d40
SHA256: 1f79b33fd2b749c6dbd91b1128cd05597c36e101a09c3b7514e04e1bf62d3e4e

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Queries the volume information (name, serial number etc) of a device

Classification

Source: classification engine Classification label: clean0.winTXT@1/0@0/0
Source: C:\Windows\System32\notepad.exe Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Windows\System32\notepad.exe Section loaded: version.dll Jump to behavior
Source: C:\Windows\System32\notepad.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Windows\System32\notepad.exe Section loaded: dwmapi.dll Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Windows\System32\notepad.exe Queries volume information: C:\Users\user\Desktop\new 1.txt VolumeInformation Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1428825 Sample: new 1.txt Startdate: 19/04/2024 Architecture: WINDOWS Score: 0 4 notepad.exe 2->4         started       
⊘No contacted IP infos