d8f771ca3bf96dadb24767603acf01255c2b3bc509c9d7faf463edc388dbcd99

Login
Reports

Overview

overview

Static

static

windhawk_setup.exe

windows11-21h2-x64

$LOCALAPPD...im.dll

windows11-21h2-x64

$LOCALAPPD...im.dll

windows11-21h2-x64

$PLUGINSDI...ol.dll

windows11-21h2-x64

Compiler/i...ing.js

windows11-21h2-x64

Compiler/x...++.dll

windows11-21h2-x64

Compiler/x...nd.dll

windows11-21h2-x64

Compiler/x...im.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

UI/resourc...dle.js

windows11-21h2-x64

UI/resourc...b6.svg

windows11-21h2-x64

UI/resourc...324.js

windows11-21h2-x64

UI/resourc...b27.js

windows11-21h2-x64

UI/resourc...892.js

windows11-21h2-x64

UI/resourc...ain.js

windows11-21h2-x64

UI/resourc...on.svg

windows11-21h2-x64

UI/resourc...rk.svg

windows11-21h2-x64

UI/resourc...rk.svg

windows11-21h2-x64

UI/resourc...ht.svg

windows11-21h2-x64

UI/resourc...ht.svg

windows11-21h2-x64

UI/resourc...ain.js

windows11-21h2-x64

uninstall.exe

windows11-21h2-x64

windhawk-x...er.exe

windows11-21h2-x64

windhawk.exe

windows11-21h2-x64

Analysis

max time kernel
598s
max time network
386s
platform
windows11-21h2_x64
resource
win11-20260130-es
resource tags

arch:x64arch:x86image:win11-20260130-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 07:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

windhawk_setup.exe

Resource

win11-20260130-es

windows11-21h2-x64

32 signatures

600 seconds

Behavioral task

behavioral2

Sample

$LOCALAPPDATA/Windhawk/Engine/Mods/32/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral3

Sample

$LOCALAPPDATA/Windhawk/Engine/Mods/64/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

discovery

Behavioral task

behavioral5

Sample

Compiler/include/wil/windowing.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral6

Sample

Compiler/x86_64-w64-mingw32/bin/libc++.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

Compiler/x86_64-w64-mingw32/bin/libunwind.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral8

Sample

Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral9

Sample

Engine/$R1/32/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

discovery

Behavioral task

behavioral10

Sample

Engine/$R1/32/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral11

Sample

Engine/$R1/32/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral12

Sample

Engine/$R1/64/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

persistence privilege_escalation

Behavioral task

behavioral13

Sample

Engine/$R1/64/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral14

Sample

Engine/$R1/64/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

Engine/$R1/arm64/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral16

Sample

Engine/$R1/arm64/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral17

Sample

Engine/$R1/arm64/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral18

Sample

UI/resources/app/extensions/clangd/out/bundle.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral19

Sample

UI/resources/app/extensions/windhawk/webview/logo-white.8c7b2e26389a94a26b1ffdd44cf241b6.svg

Resource

win11-20260130-es

windows11-21h2-x64

13 signatures

600 seconds

discovery

Behavioral task

behavioral20

Sample

UI/resources/app/extensions/windhawk/webview/main.00022388fd0b5324.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

UI/resources/app/extensions/windhawk/webview/polyfills.40a6837842596b27.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

UI/resources/app/extensions/windhawk/webview/runtime.6e3546d6c0e0e892.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

UI/resources/app/out/vs/code/electron-main/main.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

UI/resources/app/out/vs/workbench/browser/media/code-icon.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral25

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-dark.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral26

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-hcDark.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral27

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-hcLight.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral28

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-light.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral29

Sample

UI/resources/app/out/vs/workbench/workbench.desktop.main.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral30

Sample

uninstall.exe

Resource

win11-20260130-es

windows11-21h2-x64

5 signatures

600 seconds

discovery

Behavioral task

behavioral31

Sample

windhawk-x64-helper.exe

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral32

Sample

windhawk.exe

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

discovery

Report Analysis Logs

General

Target
windhawk-x64-helper.exe
Size 18KB
Sample260420-jph1eact2k
SHA256 d8f771ca3bf96dadb24767603acf01255c2b3bc509c9d7faf463edc388dbcd99
MD5 a11128109315ed9c31b397cdcd411392
SHA1 2ef9d4f3518acb95a67f17e5fd0c6bc6acea6cf3
SHA512 dcf3539a68a1a359ac5c11d33842be6d48493bda2ed37b5f17352f4db82b0e25c2e17ae52d7b5202e20c3b13970105bf1860610c1f81a1e13ec7698e4ccf3837
SSDEEP 384:BImrj8kK8KkK8pvZYLX2Ip4Q0Q/qjdAA1m5wMr5DRuV6Nlm+d:y3J8RYT2Ip4Q0Eqxf1mlr5AUNlR
TLSH
T12A824CCA4A784103EF83BE70E3D8D983BA7C97E3A862865774A9D18509473D1F74513E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\windhawk-x64-helper.exe
"C:\Users\Admin\AppData\Local\Temp\windhawk-x64-helper.exe"
1⤵
PID:4024

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads