skymonk2.bin
Skymonk Solutions Limited
The file skymonk2.bin by Skymonk Solutions Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. While running, it connects to the Internet address v-5-326-d3695-85.webazilla.com on port 80 using the HTTP protocol.
MD5:
b02bff2a950f82efdfc9348254cfd132
SHA-1:
6cb15b77cc95638290ae4614ffb631559a7dd6af
SHA-256:
d93eb678b0559788ebdae3a4dd4ebb3b6fed9335be7d87c1677934fcce26ffd0
Scanner detections:
1 / 68
Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.
Analysis date:
4/27/2024 2:20:02 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.SkymonkSolutionsLimited.L
14.5.19.1
File size:
353.1 KB (361,616 bytes)
Common path:
C:\users\{user}\appdata\local\skymonk2\skymonk2.bin
Valid from:
4/9/2012 2:00:00 AM
Valid to:
4/10/2015 1:59:59 AM
Subject:
CN=Skymonk Solutions Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Skymonk Solutions Limited, L=Tortola, S=Tortola, C=VG
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
632A5F301191DF03C4933D982BAD525F
The executing file has been seen to make the following network communications in live environments.