0b479d8776a5b1e0f15be73d26babd7bebf47b58eaa38177ed0641a6d192efab

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 18:11

Target
uvx.exe
Size 325KB
Sample260805-wsn22sshjf
SHA256 0b479d8776a5b1e0f15be73d26babd7bebf47b58eaa38177ed0641a6d192efab
MD5 1f1de136bc2bdbcbf0f6c0395de551d7
SHA1 12e119650f3563a2168ef67f00a5e3b1096aa936
SHA512 68927336d2cef97e70c405a65f5e824beb917f359160760f2c9d3816c4dfb759b9223891ee4edf8d5329bf71ae5808417108410123af74deee57b12fa647d779
SSDEEP 6144:LYgOqTSHu0GANQ1ycujzifs4ymGpRApnph6vFCvs:3LSfNNQoA3ySWCU
TLSH
T199644B21BAA558FDE556C078C3428A735A337C861B22B9FF129541353F2BAE16F3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3640 wrote to memory of 2092	3640	uvx.exe	85

C:\Users\Admin\AppData\Local\Temp\uvx.exe
"C:\Users\Admin\AppData\Local\Temp\uvx.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3640
- C:\Users\Admin\AppData\Local\Temp\uv.exe
  "C:\Users\Admin\AppData\Local\Temp\uv.exe" tool uvx
  2⤵
  PID:2092