Overview
overview
5Static
static
3WindowMeTh...is.exe
windows10-2004-x64
3WindowMeTh...is.exe
windows11-ltsc_2024-x64
3WindowMeTh...40.dll
windows10-2004-x64
1WindowMeTh...40.dll
windows11-ltsc_2024-x64
1WindowMeTh..._1.dll
windows10-2004-x64
1WindowMeTh..._1.dll
windows11-ltsc_2024-x64
1WindowMeTh...z2.dll
windows10-2004-x64
1WindowMeTh...z2.dll
windows11-ltsc_2024-x64
1WindowMeTh...es.dll
windows10-2004-x64
1WindowMeTh...es.dll
windows11-ltsc_2024-x64
1WindowMeTh...al.dll
windows10-2004-x64
1WindowMeTh...al.dll
windows11-ltsc_2024-x64
1WindowMeTh...ib.dll
windows10-2004-x64
1WindowMeTh...ib.dll
windows11-ltsc_2024-x64
1WindowMeTh...ma.dll
windows10-2004-x64
1WindowMeTh...ma.dll
windows11-ltsc_2024-x64
1WindowMeTh...ue.dll
windows10-2004-x64
1WindowMeTh...ue.dll
windows11-ltsc_2024-x64
1WindowMeTh...sl.dll
windows10-2004-x64
1WindowMeTh...sl.dll
windows11-ltsc_2024-x64
1WindowMeTh...to.vbs
windows10-2004-x64
5WindowMeTh...to.vbs
windows11-ltsc_2024-x64
5WindowMeTh...ck.vbs
windows10-2004-x64
5WindowMeTh...ck.vbs
windows11-ltsc_2024-x64
5WindowMeTh...tp.ps1
windows10-2004-x64
3WindowMeTh...tp.ps1
windows11-ltsc_2024-x64
3WindowMeTh...it.vbs
windows10-2004-x64
5WindowMeTh...it.vbs
windows11-ltsc_2024-x64
5WindowMeTh...se.vbs
windows10-2004-x64
5WindowMeTh...se.vbs
windows11-ltsc_2024-x64
5WindowMeTh...ge.vbs
windows10-2004-x64
5WindowMeTh...ge.vbs
windows11-ltsc_2024-x64
5Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/10/2026, 15:16
Behavioral task
behavioral1
Sample
WindowMeThis/WindowMeThis.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
WindowMeThis/WindowMeThis.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
WindowMeThis/_internal/VCRUNTIME140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
WindowMeThis/_internal/VCRUNTIME140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
WindowMeThis/_internal/VCRUNTIME140_1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
WindowMeThis/_internal/VCRUNTIME140_1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
WindowMeThis/_internal/_bz2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
WindowMeThis/_internal/_bz2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
WindowMeThis/_internal/_ctypes.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
WindowMeThis/_internal/_ctypes.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
WindowMeThis/_internal/_decimal.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
WindowMeThis/_internal/_decimal.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
WindowMeThis/_internal/_hashlib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
WindowMeThis/_internal/_hashlib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
WindowMeThis/_internal/_lzma.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
WindowMeThis/_internal/_lzma.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
WindowMeThis/_internal/_queue.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
WindowMeThis/_internal/_queue.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
WindowMeThis/_internal/_ssl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
WindowMeThis/_internal/_ssl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
WindowMeThis/_internal/_tcl_data/auto.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
WindowMeThis/_internal/_tcl_data/auto.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
WindowMeThis/_internal/_tcl_data/clock.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
WindowMeThis/_internal/_tcl_data/clock.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
WindowMeThis/_internal/_tcl_data/http1.0/http.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
WindowMeThis/_internal/_tcl_data/http1.0/http.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
WindowMeThis/_internal/_tcl_data/init.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
WindowMeThis/_internal/_tcl_data/init.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
WindowMeThis/_internal/_tcl_data/opt0.4/optparse.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
WindowMeThis/_internal/_tcl_data/opt0.4/optparse.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
WindowMeThis/_internal/_tcl_data/package.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
WindowMeThis/_internal/_tcl_data/package.vbs
Resource
win11ltsc2024-20260911-en
General
- Target WindowMeThis/WindowMeThis.exe
- Size 2.9MB
- Sample261012-snfckadh92
- SHA256 130760c765711453947d4d7c5e4f72329e9224d0ee59fa6be0189d7c84c41126
- MD5 e2bbe933f0f0469c479a1fe2f0186651
- SHA1 7404c1c9c5c1149103df7cb9fdd672dbedaa0517
- SHA512 4188865944c5250c4f879370a4c69250b21cbda4c79c701825c3506b29292581d3d1b6a28d8fa3ac43d3afe06f3780e0cf782432ec5f847eb826d4ba2c5dcdf3
- SSDEEP 49152:nP5Kg2mEOEdk2g0gfSqvCy9mCa9EqLAygC6S0WXuvD/6ELxvsZp6D:CmEBgvCy/c0TC6S1i/6ELtsn6D
- TLSH T1CFE52359EBE114F9F8F3923DDAA3C406CA7278610774D9DF4390463A3E236D6183A7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname WindowMeThis.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain WindowMeThis.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4196 WindowMeThis.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\WindowMeThis\.updates.json.88sldaqe.tmp
- Size 116B
- SHA256 8fdd373542cdc977a051dfc6938b27e0aed58a7dab8361bc5eab39cab7c66bdc
- MD5 e68804f0bab5bd774e7522170b4f4f75
- SHA1 2705627480c1a802085157a387ced9462bab61d3
- SHA512 928418fcf8f2554d46eebed3b8010c5a33a6c9e5267f0b0a285ff04fcc5dded67de6021bd08cde78023324a19a0b42b2ce57a6485c64df65f495017531dc361d
- TLSH T121B012C0D6580E2A0846CA0FB1127F21D63C5873F3B2AC7C9049AB900AE76348332587
- MD5 SHA1 SHA512 TLSH