: It may trigger applications like Notepad, a common behavior for ransomware to display ransom notes to the user.
Based on malware analysis reports from ANY.RUN , is identified as a malicious executable often associated with trojan or ransomware-like behavior.
If you are looking to understand its "features" (malicious capabilities) or generate a technical profile for security research, here are its primary behaviors: Key Malicious Features