1f22d55482334a82f19d44f9f2562266ae4feed1047ef543f333f08e7af0d669

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 12:28

Target
uvw.exe
Size 331KB
Sample260731-pnrh2stvbz
SHA256 1f22d55482334a82f19d44f9f2562266ae4feed1047ef543f333f08e7af0d669
MD5 ad212d9d8d1ebe2f42d1927864782f0f
SHA1 2fc2dc010f3d71a9b2af9162b4558cdda5d3398b
SHA512 21ce0df4509cd24fbc1312d696c450650091baaebc814b72e6c5291861f239e0542e983b7038045ec63239db9a419982a6e92c631b0ca6f105ae3a3865008364
SSDEEP 6144:cXQqpE4bad0KdnellEeX7WgnJIl+r7P4Jjmp3KDkGzT:4pKd+PNJIk+KFKgGn
TLSH
T187746C21FB5558FCE557C07882458663AA3378C60B22B9FF12A441393F2BAE56F3DB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2316	2420	uvw.exe	89

C:\Users\Admin\AppData\Local\Temp\uvw.exe
"C:\Users\Admin\AppData\Local\Temp\uvw.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Users\Admin\AppData\Local\Temp\uv.exe
  "C:\Users\Admin\AppData\Local\Temp\uv.exe"
  2⤵
  PID:2316