5c782ae4013ef66abab451505c548560f54efbd4da80e9f7412bf35af2e4192c

Analysis

user interaction
yes
max time kernel
56s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 14:19

Target
zenith-tweaker.exe
Size 10.2MB
Sample261110-rm1rfabs7s
SHA256 5c782ae4013ef66abab451505c548560f54efbd4da80e9f7412bf35af2e4192c
MD5 7dc13e1676b3323463ecc0670334c8f7
SHA1 541ac220e8da9ca4e92d84edead6bf4d336417cc
SHA512 73862778fd49c3b404ce91af45cb6feab31f5315c5814028b90b71651e41570553a4cdb5fd16eb5449cffa38367e0c4723c56952294b1cb3bf397e365af3b3f7
SSDEEP 98304:Puqku2IuZNmeYapd4lsk79FdBt8sro2f2+NA6VVLzebjNm+Ej9I:GLKfCs8jshOEX
TLSH
T1B5B67C02B79B99ECD15AC8B0834696735E2174CB0B26B9FF02C455393F6ABE05F2C719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4948	zenith-tweaker.exe

C:\Users\Admin\AppData\Local\Temp\zenith-tweaker.exe
"C:\Users\Admin\AppData\Local\Temp\zenith-tweaker.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4948