0948ec795a3eedc576372bb56612b0e7be2bb193bdd83524bea55d11140254a2

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 12:13

Target
uvw.exe
Size 321KB
Sample260804-pd4evswtdw
SHA256 0948ec795a3eedc576372bb56612b0e7be2bb193bdd83524bea55d11140254a2
MD5 7d9951b45b040356b88fcf5f404affb7
SHA1 9de8cfe9d1961315c40cc75efb4d3837e0ea67cb
SHA512 1fd936e419a8c3e0daa9830acc8ae815a004fb2878a2442895c8b71c2c9fddb0dffaca9393a627af94a1a3783634d42c71c6ffc55aab018221c82a0b89350f91
SSDEEP 6144:Pyj8Z9FVfZJ668B05NAgrU0+FS0lbAmbLqsIN/lyHOQbVg2:PyjSce5yVbA5tlEv
TLSH
T164645B11FAA558FDE557C0788245C573AA3378860B21ADFF11A442393F2BAE56F3CB24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3004 wrote to memory of 4648	3004	uvw.exe	89

C:\Users\Admin\AppData\Local\Temp\uvw.exe
"C:\Users\Admin\AppData\Local\Temp\uvw.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3004
- C:\Users\Admin\AppData\Local\Temp\uv.exe
  "C:\Users\Admin\AppData\Local\Temp\uv.exe"
  2⤵
  PID:4648