e57d0c7fefebaeb0575d769128e68c8ac47fe7c0610519760839b6249f5bca66

Analysis

user interaction
yes
max time kernel
10s
max time network
12s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 19:50

Target
bestclient-updater.exe
Size 262KB
Sample261024-ykqa9abz21
SHA256 e57d0c7fefebaeb0575d769128e68c8ac47fe7c0610519760839b6249f5bca66
MD5 1c1671273f580cd5162d8586af4b1d46
SHA1 18285214a696780d71d2dc955c250cb9340da20b
SHA512 0466781eb92801d0b9740ff0125cb20831a26a8f28ead894d8c4802a4aa8a18d3192c4b1e52bf2f4acb3ee74ba007897f0d608f6a36bc8a722613a039990f2c4
SSDEEP 6144:ubt1AYd8ExK9X0jMUtwhgSqXGhd4hdtn:4xckjMUtwROGhYdtn
TLSH
T1EC449E06B6A60CF6D6774578C8D20A06DB367C2107A0D9DB47906E9E7F23AD08F3D7A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4548	bestclient-updater.exe

C:\Users\Admin\AppData\Local\Temp\bestclient-updater.exe
"C:\Users\Admin\AppData\Local\Temp\bestclient-updater.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4548