wmosetup_4.2.3.129.tmp

by Lespeed Technology Co., Ltd

Sources: observed in the EchoTrail lab on Windows 11.

Summary

Setup/Uninstall (-, -)

wmosetup_4.2.3.129.tmp is not in the 2025 snapshot. It was observed in EchoTrail's behavior lab on Windows 11 24H2 on 2026-09-15 installed from winget package WiseCleaner.WiseMemoryOptimizer.

Get this in your tools

The same record for wmosetup_4.2.3.129.tmp, by REST or as an MCP tool. Free key, no card.

Get a free key
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/wmosetup_4.2.3.129.tmp

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

n/a
most commonly executed Windows program
n/a
observed endpoint executions

Behavior

Top Paths

  • C:\Users\lab\AppData\Local\Temp\is-G5B6K.tmp

Top Hashes (SHA256)

  • 2760fc3c0f187353b1e0d3c27fd18704ac745e8ed5c0bcd9de5b7069994934f3

Process Ancestry

Top Grandparents

Top Parents

Lab record

Installed from
winget WiseCleaner.WiseMemoryOptimizer 4.2.3
Publisher
Lespeed Technology Co., Ltd
Persistence
none
Network
none
Command lines
1 pattern (1 launch)
DLL loads
50 patterns (50 loads)
Registry writes
7 patterns (9 writes)
File writes
3 patterns (5 writes)
HTTP requests
0 patterns (0 requests)
TLS connections
0 patterns (0 handshakes)
Named pipes
0 patterns (0 events)
Process access
0 patterns (0 events)
Driver loads
0 patterns (0 loads)
PowerShell blocks
0 patterns (0 blocks)
Remote threads
0 patterns (0 events)
Audit events
1 pattern (1 event)

Full record on Team.

Ask Rocky about wmosetup_4.2.3.129.tmp

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for wmosetup_4.2.3.129.tmp. The free tier returns the summary, 500 lookups a month. Or ask Rocky.