VipOpti[.]exe | Triage™

Resubmissions

30/08/2026, 23:28

260830-3fyt2stzcy

30/08/2026, 23:27

260830-3fgwjasard3

Sharing

Copy URL Twitter E-mail

General

Target
VipOpti.exe
Size 1.4MB
Sample260830-3fyt2stzcy
SHA256 aaf18d51ba292649fe67980d44e30004f616506093182d6dd004ec3bcdd75f1b
MD5 6e80c1e6bf622814616b76d0ed02a9a2
SHA1 226784d798cb4827d0f10f74cfda83b6227a0410
SHA512 96dc428dd40eb00f5d1a68a2bd56ecfc57c5b2908f743c9d6bd419477a59e709b7f4c927efb5ecf3ef00b8d53191c9495f02cd541a9ff6add44d3df58f8db164
SSDEEP 24576:TdVRg/77cxF86c9dGN6Xz5NpA9faKp8kCe+0Ni85CnLkzwPi/BRMxMmABlNGwBcH:5VWUxO6c9dGN6Xz5DaJ4evNvEnLEsLm6
TLSH
T14565BF03E3A401E9E06BA435CA93A313EB73748217209BCB679009694FB77E15E7B7D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VipOpti.exe

File Explorer

VipOpti.exe

.exe 1.4MB

VipOpti.exe

IMPHASH 6273aa96a2e739c73702d8b6debe7bb0
SHA256 aaf18d51ba292649fe67980d44e30004f616506093182d6dd004ec3bcdd75f1b
MD5 6e80c1e6bf622814616b76d0ed02a9a2
SHA1 226784d798cb4827d0f10f74cfda83b6227a0410
SHA512 96dc428dd40eb00f5d1a68a2bd56ecfc57c5b2908f743c9d6bd419477a59e709b7f4c927efb5ecf3ef00b8d53191c9495f02cd541a9ff6add44d3df58f8db164
SSDEEP 24576:TdVRg/77cxF86c9dGN6Xz5NpA9faKp8kCe+0Ni85CnLkzwPi/BRMxMmABlNGwBcH:5VWUxO6c9dGN6Xz5DaJ4evNvEnLEsLm6
TLSH
T14565BF03E3A401E9E06BA435CA93A313EB73748217209BCB679009694FB77E15E7B7D5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

764304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\rizzl\Downloads\PCTweaker_VIPOpti_v18_startup_prompt_fixed\PCTweaker\Release\VipOpti.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

ntdll

VerSetConditionMask

kernel32

FormatMessageA EnterCriticalSection LeaveCriticalSection SleepEx GetSystemDirectoryA VerifyVersionInfoA GetTickCount MoveFileExA WaitForSingleObjectEx GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects GetFileSizeEx ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW WakeAllConditionVariable GetModuleHandleW GetSystemTimeAsFileTime InitializeSListHead DeleteCriticalSection InitializeCriticalSectionEx K32EnumProcessModules CreateProcessA GlobalMemoryStatusEx GetCurrentProcessId ExitProcess LocalFree GetLocalTime SetLastError K32GetModuleBaseNameA CreateFileA GetLastError GetTickCount64 GetCommandLineA GetCurrentThreadId WaitForSingleObject GetVolumeInformationA GetModuleFileNameW GetDriveTypeA GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA IsDebuggerPresent OutputDebugStringW LoadLibraryA GetProcAddress FreeLibrary QueryPerformanceCounter FindFirstFileA FindNextFileA GetEnvironmentVariableA FindClose OpenProcess Sleep K32GetModuleFileNameExA GetFileAttributesA CloseHandle K32EnumProcesses GetModuleFileNameA GetLogicalDrives GetCurrentProcess QueryPerformanceFrequency GlobalFree GlobalAlloc MultiByteToWideChar GetExitCodeProcess SetUnhandledExceptionFilter GetSystemInfo GetComputerNameA CreateDirectoryA GetDiskFreeSpaceExA

user32

SetClipboardData SetCursorPos ScreenToClient DispatchMessageA DefWindowProcW GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow SetCapture SetCursor GetKeyState UpdateWindow GetClipboardData PeekMessageA LoadIconA TranslateMessage SetLayeredWindowAttributes MoveWindow MessageBoxA EmptyClipboard GetWindowLongA SetWindowLongA GetAsyncKeyState ShowWindow RegisterClassExW MessageBeep UnregisterClassW GetSystemMetrics CreateWindowExW DestroyWindow GetWindowRect CloseClipboard OpenClipboard PostQuitMessage GetCursorPos GetClientRect IsWindowUnicode LoadCursorA ReleaseCapture

advapi32

CryptGenRandom CryptGetHashParam CryptReleaseContext CryptAcquireContextA CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegCloseKey GetTokenInformation OpenServiceA RegEnumValueA OpenProcessToken OpenSCManagerA RegEnumKeyExA LookupPrivilegeValueA QueryServiceConfigA RegQueryValueExA CloseServiceHandle RegGetValueA EnumServicesStatusExA AdjustTokenPrivileges

shell32

ShellExecuteW SHEmptyRecycleBinA ShellExecuteA SHQueryRecycleBinA

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z _Thrd_detach _Cnd_do_broadcast_at_thread_exit ?_Xbad_function_call@std@@YAXXZ ?_Throw_Cpp_error@std@@YAXH@Z ?good@ios_base@std@@QEBA_NXZ ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_frequency ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Query_perf_counter ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

imm32

ImmReleaseContext ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow

dwmapi

DwmExtendFrameIntoClientArea

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

powrprof

PowerGetActiveScheme PowerReadFriendlyName

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

normaliz

IdnToAscii

wldap32

ord217 ord46 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord143

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryA CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain PFXImportCertStore

ws2_32

getsockname getpeername connect htons WSAGetLastError send closesocket getsockopt ntohs setsockopt socket WSAIoctl WSAStartup WSACleanup accept htonl listen ioctlsocket __WSAFDIsSet select getaddrinfo freeaddrinfo recvfrom sendto gethostname bind ntohl WSASetLastError recv

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove __current_exception memcpy memcmp __C_specific_handler memset memchr __std_exception_destroy __std_exception_copy __std_terminate strstr strchr strrchr _CxxThrowException __current_exception_context

api-ms-win-crt-stdio-l1-1-0

fopen_s fputs fopen fwrite feof _popen fgets _pclose _lseeki64 _set_fmode _open __p__commode _close _write __stdio_common_vsscanf fread _read __stdio_common_vsprintf _wfopen fputc ftell __stdio_common_vfprintf fseek fclose fflush __acrt_iob_func

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode realloc free malloc calloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_c_exit _register_thread_local_exe_atexit_callback __p___argv __p___argc _initterm_e _initterm _get_initial_narrow_environment _set_app_type _seh_filter_exe _wassert _cexit __sys_nerr _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv strerror _getpid _exit _errno _invalid_parameter_noinfo_noreturn exit _beginthreadex _set_invalid_parameter_handler terminate system

api-ms-win-crt-string-l1-1-0

strlen strncpy _strdup isupper strspn strcspn strcmp strncmp strpbrk _stricmp _strnicmp tolower

api-ms-win-crt-convert-l1-1-0

strtoul atoi strtol strtoll

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

roundf sinf fmodf __setusermatherr powf acosf ceilf sqrtf cosf logf

api-ms-win-crt-time-l1-1-0

_gmtime64 _time64

api-ms-win-crt-filesystem-l1-1-0

_stat64 _fstat64 _unlink _access