Analysis
- user interaction
yes - max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/10/2026, 17:28
General
- Target WinBoostOptimizer.exe
- Size 68.5MB
- Sample261024-v2ghwsbs81
- SHA256 51f0e6c524a2d7ad7f952b085d3ae36633bc166372f4fe1166499faa4e94e208
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 4 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinBoostOptimizer.exe"C:\Users\Admin\AppData\Local\Temp\WinBoostOptimizer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1176-7-0x000001A981200000-0x000001A981E90000-memory.dmp
memory/1176-10-0x000001A980450000-0x000001A980480000-memory.dmp
memory/1176-14-0x000001A9804B0000-0x000001A9804D0000-memory.dmp
memory/1176-18-0x000001A983020000-0x000001A983D10000-memory.dmp
memory/1176-42-0x000001A981F70000-0x000001A981F90000-memory.dmp
memory/1176-50-0x000001A984250000-0x000001A984270000-memory.dmp
memory/1176-64-0x000001A984330000-0x000001A984340000-memory.dmp
memory/1176-60-0x000001A984510000-0x000001A984690000-memory.dmp
memory/1176-56-0x000001A9842C0000-0x000001A9842F0000-memory.dmp
memory/1176-26-0x000001A983D10000-0x000001A983FF0000-memory.dmp
memory/1176-46-0x000001A9822F0000-0x000001A982330000-memory.dmp
memory/1176-38-0x000001A981F20000-0x000001A981F70000-memory.dmp
memory/1176-30-0x000001A981E90000-0x000001A981EB0000-memory.dmp
memory/1176-34-0x000001A981EE0000-0x000001A981F00000-memory.dmp
memory/1176-22-0x000001A980530000-0x000001A980550000-memory.dmp
memory/1176-68-0x000001A985090000-0x000001A985200000-memory.dmp
memory/1176-76-0x000001A986F50000-0x000001A986F70000-memory.dmp
memory/1176-72-0x000001A985660000-0x000001A985690000-memory.dmp
memory/1176-80-0x000001A987100000-0x000001A987110000-memory.dmp
memory/1176-84-0x000001EA1F520000-0x000001EA1F5E0000-memory.dmp
memory/1176-88-0x000001EA20E00000-0x000001EA20E90000-memory.dmp
memory/1176-92-0x000001EA21040000-0x000001EA21090000-memory.dmp
memory/1176-96-0x000001EA21090000-0x000001EA210B0000-memory.dmp
memory/1176-100-0x000001EA20FE0000-0x000001EA20FF0000-memory.dmp
memory/1176-105-0x000001EA21370000-0x000001EA21480000-memory.dmp
memory/1176-108-0x000001EA21550000-0x000001EA21620000-memory.dmp