ecc0af00f31d356a214049e82c994ee85169942a2d3c410718b86c3fe488e77a

Analysis

user interaction
yes
max time kernel
898s
max time network
474s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 14:23

Target
TweakPanel.exe
Size 290KB
Sample261002-rqendaca49
SHA256 ecc0af00f31d356a214049e82c994ee85169942a2d3c410718b86c3fe488e77a
MD5 6fbc9fbc5c6edd0311e6157f8a10093c
SHA1 5a65c54bf3fcdc9af27cb6c0b39d57408ba5dec5
SHA512 b3b72f36f9833c887dec68dd9493ce1250e8e48c91c43f00cd34d2f2693744e23c86fce2311e8cee29d561e308b2d6747523dc862ef5fbdd6de9e4d78c8887e5
SSDEEP 6144:WHRu7F1nQnB8lXuIRJoPLg9xMvic86El:WxOF1JlnO0vzmEl
TLSH
T199548D07EFA951AEE0BFD678C9A25842E772781947B0E6CF075049B70F76AD09E39301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88
PID 4376 wrote to memory of 4068	4376	TweakPanel.exe	88

C:\Users\Admin\AppData\Local\Temp\TweakPanel.exe
"C:\Users\Admin\AppData\Local\Temp\TweakPanel.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4376
- C:\Users\Admin\AppData\Local\Temp\TweakPanel.exe
  "C:\Users\Admin\AppData\Local\Temp\TweakPanel.exe"
  2⤵
  PID:4068

memory/4376-0-0x0000000140000000-0x000000014007E000-memory.dmp

Download

memory/4376-1-0x0000000140000000-0x000000014007E000-memory.dmp

Download