MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e
SHA3-384 hash:	5f7395561124ef0455cd2e275e25f7dc529091b6dd81089ece152b054ac4288e8888c801aedb96a8291cad19b92ea783
SHA1 hash:	12b5cf3d4943d2643ba2c34ee2b534c7352ad7fa
MD5 hash:	13c272204cd47eef5c5b9c1fe4d2d6b4
humanhash:	artist-uncle-oscar-cup
File name:	TaskbarFinder.exe.7z
Download:	download sample
File size:	2'394 bytes
First seen:	2026-03-31 21:36:09 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
Note:	This file is a password protected archive. The password is: infected
ssdeep	48:JGeiOQeaESNK5/eMfL8sNY/lj10ByjPn1y7Iw+daWmt:JG4Q9ESzMT8sNYlj671pWmt
TLSH	T1E5411A32C6479773F67BB2B52B9E04299AB188FAB4651818BA11BA4401AD1782582A37
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	cypherpunk472
Tags:	7z

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

CO

File Archive Information

This file is a password protected archive. The password is: infected

This file archive contains 1 file(s), sorted by their relevance:

Potential files of interest 1

File name:	TaskbarFinder.exe
File size:	5'632 bytes
SHA256 hash:	b43f3e6a94f286e904f0cb55051b4be26450fd5c27716d5327d83adf1c3af36f
MD5 hash:	0cbb1aac90e557fc6f26b4c0c21d2368
MIME type:	application/x-dosexec

Vendor Threat Intelligence

ACCE

Gathering data

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69cc3e553a18a6e1ddf028a0

Tags:

n/a

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PE File

Link:

https://app.docguard.net/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e/results/dashboard

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

7z

Link:

https://opentip.kaspersky.com/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e/results?tab=lookup

Nucleon Malprob Malware

Score:

87%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

3 match(es)

Tags:

.Net 7z Archive Executable Managed .NET PE (Portable Executable) PE File Layout SFX 7z SOS: 0.29

Link:

https://app.malva.re/file/13c272204cd47eef5c5b9c1fe4d2d6b4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e/

Neiki Malicious

Verdict:

Malicious

Link:

https://tip.neiki.dev/file/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-03-31 21:23:26 UTC

File Type:

Binary (Archive)

Extracted files:

2

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yxmfv46b754pqaud5px7eg6eju65f5i3v4ehc72u3v6v6la2ru7a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/c5d85af3c1ff78f80283ebeff21bc44d3dd2f51baf08717f54dd7d5f2c1a8d3e