b22b561cf1e60ab0346159273cbc30d8231b391738975ae7ec0915c45565b16c

Resubmissions

04/07/2026, 06:36

04/07/2026, 06:18

max time kernel
898s
max time network
903s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/07/2026, 06:36

Target
SkyMP [1c3b345].exe
Size 652KB
Sample260704-hcw6tsb16w
SHA256 b22b561cf1e60ab0346159273cbc30d8231b391738975ae7ec0915c45565b16c
MD5 b9d8898f708e0b811dfaacbb9abffc72
SHA1 759d9f5bbac9a3827aa688ae9c8284d2b855af86
SHA512 7cff9059a0f59d3967f553bd97a99a60afdb23d3a66582e86b6263746e91293ec633c34b50d1bb8254a28ac51ac3a3ad9ddee99f4d40c8dc746846fdbdb1565e
SSDEEP 12288:yQcEKuROFvjvhNmkTI151XMzaR31BFGd87W:yQdFGLvfTI1vM25pGdgW
TLSH
T19BE46C1A669401F9E0ABD139CE568A56F7767C1607619BCF13A0326B2F376E40F3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Downloads MZ/PE file 1 IoCs

flow	pid	Process
5	5156	SkyMP [1c3b345].exe

C:\Users\Admin\AppData\Local\Temp\SkyMP [1c3b345].exe
"C:\Users\Admin\AppData\Local\Temp\SkyMP [1c3b345].exe"
1⤵
- Downloads MZ/PE file
PID:5156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4864

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4972