3516daea39ccb9fead27e8ba5879375a08b20a428264a7c1be6db1be7765b0fe

Analysis

max time kernel
161s
max time network
212s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
22/11/2023, 05:58

Target

UVR_v5.6.0_setup.exe
Size

1615.3MB
MD5

448638eb178e28f925a9bb1e368ca4ea
SHA1

27420bdc9ae2ea6bd680523013e10a7ce5204815
SHA256

3516daea39ccb9fead27e8ba5879375a08b20a428264a7c1be6db1be7765b0fe
SHA512

61a3899b763dd91b0821c451c241d5b304f64cc239d5c09f1ea675483b410521184da1ad8c76ad9249bc904ed58a3798ad61adfc9b4dce1e35a63122513be61d
SSDEEP

50331648:T6kVP5utbj9gwCLULByDfnfR4bOeUjQMVgvwZt5l5Z:T6kVP5uVJRgmefSGQM6vwvj

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4784	UVR_v5.6.0_setup.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 64 wrote to memory of 4784	64	UVR_v5.6.0_setup.exe	89
PID 64 wrote to memory of 4784	64	UVR_v5.6.0_setup.exe	89
PID 64 wrote to memory of 4784	64	UVR_v5.6.0_setup.exe	89

C:\Users\Admin\AppData\Local\Temp\UVR_v5.6.0_setup.exe
"C:\Users\Admin\AppData\Local\Temp\UVR_v5.6.0_setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:64
- C:\Users\Admin\AppData\Local\Temp\is-KO56C.tmp\UVR_v5.6.0_setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-KO56C.tmp\UVR_v5.6.0_setup.tmp" /SL5="$A0068,1692846395,1187328,C:\Users\Admin\AppData\Local\Temp\UVR_v5.6.0_setup.exe"
  2⤵
  - Executes dropped EXE
  PID:4784

C:\Users\Admin\AppData\Local\Temp\is-KO56C.tmp\UVR_v5.6.0_setup.tmp

Filesize
3.4MB

MD5
cb917e494c99ad24fe6d7f1e4317b522

SHA1
60d9d175f23b0a6e6caefa4012c4f34a8d99e6e5

SHA256
dc8a688c932faa4d1163100675b4218de7b8a8eefa73d213cc09ca9ff9fdf9e0

SHA512
18cb9935f4cd75a4ef4a603ce6536e4f122b921c3ccddeb4d8fdaec95adafd015751551a92af1ff50ad157680b35c4a59159b13a9ae2cbcdfa422b88fed5d7fd

Download Submit
memory/64-0-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/64-2-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/64-3-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/64-9-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/4784-7-0x0000000000870000-0x0000000000871000-memory.dmp

Filesize
4KB

Download
memory/4784-10-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4784-13-0x0000000000870000-0x0000000000871000-memory.dmp

Filesize
4KB

Download
memory/4784-37-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download