Analysis
- max time kernel
149s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 20:56
Behavioral task
behavioral1
Sample
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Hollow Knight Silksong – Trainer.url
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Hollow Knight Silksong – Trainer.url
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Hollow Knight Silksong – YouTube.url
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Hollow Knight Silksong – YouTube.url
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
- Size 10.0MB
- Sample260810-zrf7laybng
- SHA256 759fad066d3fd1be9ac7b92f73b6ccbd55286c1e2629d76f5c38fefb82a6e7ef
- MD5 9d4495c3d2b4c4b435a46af574df0004
- SHA1 d3abc3654cf30d0583fafda9d3e7947ea0a186a0
- SHA512 bfe7fd48acb71360facbc37eec6a793be8e9dd2f04fdb453ee31fe2274e3967c31ebefb6a75f8955acb465869ce462d75fc15ac1c686ea7bff74bcd76631df24
- SSDEEP 196608:hnCyib4/t8Ah/OSRdIihUdnsOanyTm2SnNwkQk1+vKTLiABoNqO1HEOe2mRyj:h0m+qmSRSyqsOad2SnNwkJ0STLlUh1kD
- TLSH T1BDB63397034952FBE102BE3C9946FFA1842877929C89BF61ED1DD2D0C9F9BC3A481607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2252-0-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-8-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-59-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-60-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-73-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-74-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-75-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-76-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-77-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-78-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-79-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-80-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-81-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-82-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-85-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-86-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-88-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-89-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-90-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-91-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-93-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-94-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-95-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-96-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-97-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-98-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-99-0x0000000000C70000-0x000000000246D000-memory.dmp upx behavioral2/memory/2252-100-0x0000000000C70000-0x000000000246D000-memory.dmp upx - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2252 Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe