Analysis
- max time kernel
149s - max time network
127s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
13/09/2026, 15:12
General
- Target WinOptimizer-Portable (1).exe
- Size 63.0MB
- Sample260913-sk7yeahm5s
- SHA256 097a3722998274327807a8f2c37ea2a46d34cc2dd876c2903269d0ae86e0a00a
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 25 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinOptimizer-Portable (1).exe"C:\Users\Admin\AppData\Local\Temp\WinOptimizer-Portable (1).exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4836-6-0x000002103FDC0000-0x0000021040A50000-memory.dmp
memory/4836-9-0x0000021041BD0000-0x00000210428C0000-memory.dmp
memory/4836-13-0x000002103D400000-0x000002103D420000-memory.dmp
memory/4836-17-0x00000250D7660000-0x00000250D7940000-memory.dmp
memory/4836-41-0x0000021040EC0000-0x0000021040EE0000-memory.dmp
memory/4836-51-0x0000021042AB0000-0x0000021042AF0000-memory.dmp
memory/4836-67-0x00000250D7B60000-0x00000250D7B80000-memory.dmp
memory/4836-63-0x00000210428C0000-0x00000210428E0000-memory.dmp
memory/4836-59-0x0000021042A40000-0x0000021042A70000-memory.dmp
memory/4836-55-0x00000250D7D50000-0x00000250D7ED0000-memory.dmp
memory/4836-47-0x0000021042910000-0x0000021042940000-memory.dmp
memory/4836-37-0x000002103F100000-0x000002103F120000-memory.dmp
memory/4836-33-0x0000021040E50000-0x0000021040EA0000-memory.dmp
memory/4836-29-0x000002103F070000-0x000002103F100000-memory.dmp
memory/4836-25-0x000002103F040000-0x000002103F060000-memory.dmp
memory/4836-71-0x00000250D7BC0000-0x00000250D7BD0000-memory.dmp
memory/4836-21-0x000002103EFF0000-0x000002103F010000-memory.dmp
memory/4836-75-0x00000250DB250000-0x00000250DB280000-memory.dmp
memory/4836-79-0x00000250DC420000-0x00000250DC440000-memory.dmp
memory/4836-83-0x00000250DC460000-0x00000250DC480000-memory.dmp
memory/4836-87-0x00000250DCF90000-0x00000250DD050000-memory.dmp
memory/4836-91-0x00000250DC440000-0x00000250DC450000-memory.dmp
memory/4836-95-0x00000250DD4E0000-0x00000250DD530000-memory.dmp
memory/4836-99-0x00000250DD460000-0x00000250DD470000-memory.dmp
memory/4836-103-0x000002103D3E0000-0x000002103D3F0000-memory.dmp
memory/4836-109-0x00000250DD6C0000-0x00000250DD6D0000-memory.dmp
memory/4836-117-0x00000250DDF70000-0x00000250DE040000-memory.dmp
memory/4836-113-0x00000250DDD90000-0x00000250DDEA0000-memory.dmp