Overview

overview

3

Static

static

3

boiii.exe

windows10-2004-x64

1

boiii.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    26s
  • max time network
    571s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 21:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    boiii.exe
  • Size 5.9MB
  • Sample261029-1bsfcsce56
  • SHA256 e6c49cc3ecb145a05f92bd1051ebcafd9b201cf8c522b26308cce18156491a62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\boiii.exe
    "C:\Users\Admin\AppData\Local\Temp\boiii.exe"
    1⤵
      PID:5880
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:37392
      • C:\Windows\system32\sihost.exe
        sihost.exe
        1⤵
          PID:17804
          • C:\Windows\explorer.exe
            explorer.exe /LOADSAVEDWINDOWS
            2⤵
              PID:19364
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
              PID:24252
            • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
              "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
              1⤵
                PID:44348
              • C:\Windows\System32\SecurityHealthHost.exe
                \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                1⤵
                  PID:54160

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      prep_Activatable Class_Hermes_perf.cache
                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 607B
                      • SHA256 7c21835f01895c1ee4e12f81e71ef06a0f6e2b9281de493ff8ec95f913e9680d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      prep_Activatable Class_Hermes_perf.cache
                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 599B
                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      game_path.txt
                      • Path C:\Users\Admin\AppData\Local\boiii\user\game_path.txt
                      • Size 72B
                      • SHA256 bd686e3e0a229c70c7982d37134dcd4815c59226d227520b30c2c9ece76afb29
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      memory/19364-656197-0x000000000EB30000-0x000000000EBB0000-memory.dmp
                      Download

                      memory/24252-656198-0x0000028E00750000-0x0000028E00824000-memory.dmp
                      Download

                      memory/44348-657132-0x0000026C83DA0000-0x0000026C83DC0000-memory.dmp
                      Download

                      memory/44348-657114-0x0000026C83EA0000-0x0000026C83FA0000-memory.dmp
                      Download

                      memory/44348-657146-0x0000026C95700000-0x0000026C95720000-memory.dmp
                      Download

                      memory/44348-657112-0x0000026C83C80000-0x0000026C83CA0000-memory.dmp
                      Download