9afa3c21d620a03f68f35adc084925ab48167e619ca9a765a4694cd054fef260

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 00:14

Target
uvx.exe
Size 322KB
Sample260818-ajsg8aee26
SHA256 9afa3c21d620a03f68f35adc084925ab48167e619ca9a765a4694cd054fef260
MD5 23f4fa4c38d671fbcdd848424b53d753
SHA1 b2312c7bd5421f3d605d63ec240d4a60cc107598
SHA512 526decbbd2cf95840e42c6077a767e709dd347c9b34be30ac68c5967a266d60ffb35fddbc4c3b05831047c9c60197b5f0b5ef3341cbadd8ababee5eee534b364
SSDEEP 6144:chMba5SQpjo0S5XE0SdvEHR63sQQ7khkJIvA/3ZL3:cJbSN83s85Y/JT
TLSH
T14C646C11FB9555FDF557C07882458973AA7378860B22A9FF12A442393F2BAE16F3CB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4440 wrote to memory of 1484	4440	uvx.exe	86

C:\Users\Admin\AppData\Local\Temp\uvx.exe
"C:\Users\Admin\AppData\Local\Temp\uvx.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4440
- C:\Users\Admin\AppData\Local\Temp\uv.exe
  "C:\Users\Admin\AppData\Local\Temp\uv.exe" tool uvx
  2⤵
  PID:1484