Overview
overview
5Static
static
3WindowMeTh...is.exe
windows10-2004-x64
3WindowMeTh...is.exe
windows11-ltsc_2024-x64
3WindowMeTh...40.dll
windows10-2004-x64
1WindowMeTh...40.dll
windows11-ltsc_2024-x64
1WindowMeTh..._1.dll
windows10-2004-x64
1WindowMeTh..._1.dll
windows11-ltsc_2024-x64
1WindowMeTh...z2.dll
windows10-2004-x64
1WindowMeTh...z2.dll
windows11-ltsc_2024-x64
1WindowMeTh...es.dll
windows10-2004-x64
1WindowMeTh...es.dll
windows11-ltsc_2024-x64
1WindowMeTh...al.dll
windows10-2004-x64
1WindowMeTh...al.dll
windows11-ltsc_2024-x64
1WindowMeTh...ib.dll
windows10-2004-x64
1WindowMeTh...ib.dll
windows11-ltsc_2024-x64
1WindowMeTh...ma.dll
windows10-2004-x64
1WindowMeTh...ma.dll
windows11-ltsc_2024-x64
1WindowMeTh...ue.dll
windows10-2004-x64
1WindowMeTh...ue.dll
windows11-ltsc_2024-x64
1WindowMeTh...sl.dll
windows10-2004-x64
1WindowMeTh...sl.dll
windows11-ltsc_2024-x64
1WindowMeTh...to.vbs
windows10-2004-x64
5WindowMeTh...to.vbs
windows11-ltsc_2024-x64
5WindowMeTh...ck.vbs
windows10-2004-x64
5WindowMeTh...ck.vbs
windows11-ltsc_2024-x64
5WindowMeTh...tp.ps1
windows10-2004-x64
3WindowMeTh...tp.ps1
windows11-ltsc_2024-x64
3WindowMeTh...it.vbs
windows10-2004-x64
5WindowMeTh...it.vbs
windows11-ltsc_2024-x64
5WindowMeTh...se.vbs
windows10-2004-x64
5WindowMeTh...se.vbs
windows11-ltsc_2024-x64
5WindowMeTh...ge.vbs
windows10-2004-x64
5WindowMeTh...ge.vbs
windows11-ltsc_2024-x64
5Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/10/2026, 15:16
Behavioral task
behavioral1
Sample
WindowMeThis/WindowMeThis.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
WindowMeThis/WindowMeThis.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
WindowMeThis/_internal/VCRUNTIME140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
WindowMeThis/_internal/VCRUNTIME140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
WindowMeThis/_internal/VCRUNTIME140_1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
WindowMeThis/_internal/VCRUNTIME140_1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
WindowMeThis/_internal/_bz2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
WindowMeThis/_internal/_bz2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
WindowMeThis/_internal/_ctypes.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
WindowMeThis/_internal/_ctypes.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
WindowMeThis/_internal/_decimal.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
WindowMeThis/_internal/_decimal.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
WindowMeThis/_internal/_hashlib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
WindowMeThis/_internal/_hashlib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
WindowMeThis/_internal/_lzma.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
WindowMeThis/_internal/_lzma.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
WindowMeThis/_internal/_queue.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
WindowMeThis/_internal/_queue.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
WindowMeThis/_internal/_ssl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
WindowMeThis/_internal/_ssl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
WindowMeThis/_internal/_tcl_data/auto.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
WindowMeThis/_internal/_tcl_data/auto.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
WindowMeThis/_internal/_tcl_data/clock.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
WindowMeThis/_internal/_tcl_data/clock.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
WindowMeThis/_internal/_tcl_data/http1.0/http.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
WindowMeThis/_internal/_tcl_data/http1.0/http.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
WindowMeThis/_internal/_tcl_data/init.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
WindowMeThis/_internal/_tcl_data/init.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
WindowMeThis/_internal/_tcl_data/opt0.4/optparse.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
WindowMeThis/_internal/_tcl_data/opt0.4/optparse.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
WindowMeThis/_internal/_tcl_data/package.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
WindowMeThis/_internal/_tcl_data/package.vbs
Resource
win11ltsc2024-20260911-en
General
- Target WindowMeThis/WindowMeThis.exe
- Size 2.9MB
- Sample261012-snfckadh92
- SHA256 130760c765711453947d4d7c5e4f72329e9224d0ee59fa6be0189d7c84c41126
- MD5 e2bbe933f0f0469c479a1fe2f0186651
- SHA1 7404c1c9c5c1149103df7cb9fdd672dbedaa0517
- SHA512 4188865944c5250c4f879370a4c69250b21cbda4c79c701825c3506b29292581d3d1b6a28d8fa3ac43d3afe06f3780e0cf782432ec5f847eb826d4ba2c5dcdf3
- SSDEEP 49152:nP5Kg2mEOEdk2g0gfSqvCy9mCa9EqLAygC6S0WXuvD/6ELxvsZp6D:CmEBgvCy/c0TC6S1i/6ELtsn6D
- TLSH T1CFE52359EBE114F9F8F3923DDAA3C406CA7278610774D9DF4390463A3E236D6183A7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname WindowMeThis.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain WindowMeThis.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4500 WindowMeThis.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\WindowMeThis\.updates.json.xte5ql1x.tmp
- Size 115B
- SHA256 4934d6688b901e55e26cccf28d28391c0118bfc2c63462b9ac0d529c385e7e1f
- MD5 7c5a3aa3be9439845b90f535cf67cde3
- SHA1 3c281b5a4e8a16f01351df2c4523cde501dd473a
- SHA512 02ef9b037e35f78d94ae6bec4afae9fb8d2841c87c97c933d742bf80404a96cc0d635187f797c1283a01f68166677afa412b45a6c1eeea232e5104cae724b04a
- TLSH T1DAB09280A2981E260C42CA0AB012BF21962C4833A7B5AC7891494BA049E76344222186
- MD5 SHA1 SHA512 TLSH