cb4808ede8e31abb5142657187ebf51449331112c1679a3bca6792d6d1fe09bf

Login
Reports

Overview

overview

Static

static

windhawk_setup.exe

windows11-21h2-x64

$LOCALAPPD...im.dll

windows11-21h2-x64

$LOCALAPPD...im.dll

windows11-21h2-x64

$PLUGINSDI...ol.dll

windows11-21h2-x64

Compiler/i...ing.js

windows11-21h2-x64

Compiler/x...++.dll

windows11-21h2-x64

Compiler/x...nd.dll

windows11-21h2-x64

Compiler/x...im.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

Engine/$R1...wk.dll

windows11-21h2-x64

UI/resourc...dle.js

windows11-21h2-x64

UI/resourc...b6.svg

windows11-21h2-x64

UI/resourc...324.js

windows11-21h2-x64

UI/resourc...b27.js

windows11-21h2-x64

UI/resourc...892.js

windows11-21h2-x64

UI/resourc...ain.js

windows11-21h2-x64

UI/resourc...on.svg

windows11-21h2-x64

UI/resourc...rk.svg

windows11-21h2-x64

UI/resourc...rk.svg

windows11-21h2-x64

UI/resourc...ht.svg

windows11-21h2-x64

UI/resourc...ht.svg

windows11-21h2-x64

UI/resourc...ain.js

windows11-21h2-x64

uninstall.exe

windows11-21h2-x64

windhawk-x...er.exe

windows11-21h2-x64

windhawk.exe

windows11-21h2-x64

Analysis

max time kernel
598s
max time network
475s
platform
windows11-21h2_x64
resource
win11-20260130-es
resource tags

arch:x64arch:x86image:win11-20260130-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 07:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

windhawk_setup.exe

Resource

win11-20260130-es

windows11-21h2-x64

32 signatures

600 seconds

Behavioral task

behavioral2

Sample

$LOCALAPPDATA/Windhawk/Engine/Mods/32/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral3

Sample

$LOCALAPPDATA/Windhawk/Engine/Mods/64/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

discovery

Behavioral task

behavioral5

Sample

Compiler/include/wil/windowing.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral6

Sample

Compiler/x86_64-w64-mingw32/bin/libc++.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

Compiler/x86_64-w64-mingw32/bin/libunwind.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral8

Sample

Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral9

Sample

Engine/$R1/32/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

discovery

Behavioral task

behavioral10

Sample

Engine/$R1/32/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral11

Sample

Engine/$R1/32/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

discovery

Behavioral task

behavioral12

Sample

Engine/$R1/64/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

2 signatures

600 seconds

persistence privilege_escalation

Behavioral task

behavioral13

Sample

Engine/$R1/64/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral14

Sample

Engine/$R1/64/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

Engine/$R1/arm64/msdia140_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral16

Sample

Engine/$R1/arm64/symsrv_windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral17

Sample

Engine/$R1/arm64/windhawk.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral18

Sample

UI/resources/app/extensions/clangd/out/bundle.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral19

Sample

UI/resources/app/extensions/windhawk/webview/logo-white.8c7b2e26389a94a26b1ffdd44cf241b6.svg

Resource

win11-20260130-es

windows11-21h2-x64

13 signatures

600 seconds

discovery

Behavioral task

behavioral20

Sample

UI/resources/app/extensions/windhawk/webview/main.00022388fd0b5324.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

UI/resources/app/extensions/windhawk/webview/polyfills.40a6837842596b27.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

UI/resources/app/extensions/windhawk/webview/runtime.6e3546d6c0e0e892.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

UI/resources/app/out/vs/code/electron-main/main.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

UI/resources/app/out/vs/workbench/browser/media/code-icon.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral25

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-dark.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral26

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-hcDark.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral27

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-hcLight.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral28

Sample

UI/resources/app/out/vs/workbench/browser/parts/editor/media/letterpress-light.svg

Resource

win11-20260130-es

windows11-21h2-x64

12 signatures

600 seconds

discovery

Behavioral task

behavioral29

Sample

UI/resources/app/out/vs/workbench/workbench.desktop.main.js

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral30

Sample

uninstall.exe

Resource

win11-20260130-es

windows11-21h2-x64

5 signatures

600 seconds

discovery

Behavioral task

behavioral31

Sample

windhawk-x64-helper.exe

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral32

Sample

windhawk.exe

Resource

win11-20260130-es

windows11-21h2-x64

1 signatures

600 seconds

discovery

Report Analysis Logs

General

Target
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Size 88KB
Sample260420-jph1eact2k
SHA256 cb4808ede8e31abb5142657187ebf51449331112c1679a3bca6792d6d1fe09bf
MD5 946e03bbb184c44ca1a5e08be297ef53
SHA1 65b6bc5fcf858943dbbdc13c1113c15d1bab9bd2
SHA512 7e16c3787d6a06859cc950d4037fb4b9f744263154396272afebb75d3d271bea0d1e5ab664f32503d2a8a427d0cabe4f028cea297a909a9c64906e379fe08d23
SSDEEP 1536:PtnI5t/JW5hsfgMHU5M/xS74Z1aJboKWRs8bXhnR9bfI7uw:FnI5tlx64Z1+us2G7d
TLSH
T1E3935B8B8761DB67DD408B32C1A7471ABB35E2430B424BDB692542385F53BE88F7B709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Compiler\x86_64-w64-mingw32\bin\windhawk-mod-shim.dll,#1
1⤵
PID:3108

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads