3e7db94f660c9684735ff8e7fc8273f6a14f9adaf746fa2ea6d068e12d796493

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 00:14

Target
uvw.exe
Size 322KB
Sample260818-ajsg8aee26
SHA256 3e7db94f660c9684735ff8e7fc8273f6a14f9adaf746fa2ea6d068e12d796493
MD5 22bd48de9a82c6c888aaabe122cc9b49
SHA1 4cdd6c4e24006da2bde39745a50adbfb485dc31c
SHA512 30fb082c4cbb3fc702cd36cfe3f05201e478d3bc843387efb9ecccc5100acef4d57938b2803dcbb5fbdd1338bd1a024eb3228ba27f57cd407338544f26206bd3
SSDEEP 6144:2aybaGFsZRGZm0+N+EtPB5+B8lbAmbLqsIxGHoHuy:2ay6M+c4bA50w
TLSH
T17C646C51BB9955FDE557C0788241C573AA3378860B21A9FF11E842393F2BAE56F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3884 wrote to memory of 2508	3884	uvw.exe	85

C:\Users\Admin\AppData\Local\Temp\uvw.exe
"C:\Users\Admin\AppData\Local\Temp\uvw.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3884
- C:\Users\Admin\AppData\Local\Temp\uv.exe
  "C:\Users\Admin\AppData\Local\Temp\uv.exe"
  2⤵
  PID:2508