Analysis
- user interaction
yes - max time kernel
0s - max time network
10s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
20/08/2026, 02:50
General
- Target Hollow Knight (+26) {mul0} [v1.5.12620].exe
- Size 10.0MB
- Sample260820-db2byabb23
- SHA256 659a96462bb826d4d60c1d956f51bb6833415e38de7caaa361eb8e8c582e3edc
Malware Config
Signatures
- UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Hollow Knight (+26) {mul0} [v1.5.12620].exe"C:\Users\Admin\AppData\Local\Temp\Hollow Knight (+26) {mul0} [v1.5.12620].exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2172-6-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-4-0x0000000001A70000-0x0000000001A71000-memory.dmp
memory/2172-7-0x0000000000342000-0x0000000000343000-memory.dmp
memory/2172-3-0x0000000001A70000-0x0000000001A71000-memory.dmp
memory/2172-2-0x0000000001A70000-0x0000000001A71000-memory.dmp
memory/2172-0-0x0000000001A70000-0x0000000001A71000-memory.dmp
memory/2172-44-0x0000000001AD0000-0x0000000001AD1000-memory.dmp
memory/2172-56-0x0000000001AE0000-0x0000000001AE1000-memory.dmp
memory/2172-55-0x0000000001AE0000-0x0000000001AE1000-memory.dmp
memory/2172-69-0x00007FFCF96F0000-0x00007FFCF96F1000-memory.dmp
memory/2172-68-0x00007FFCF96F0000-0x00007FFCF96F1000-memory.dmp
memory/2172-63-0x00007FFCF81F0000-0x00007FFCF81F1000-memory.dmp
memory/2172-62-0x00007FFCF81F0000-0x00007FFCF81F1000-memory.dmp
memory/2172-58-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-50-0x00007FFCF74E0000-0x00007FFCF74E1000-memory.dmp
memory/2172-49-0x00007FFCF74E0000-0x00007FFCF74E1000-memory.dmp
memory/2172-43-0x0000000001AD0000-0x0000000001AD1000-memory.dmp
memory/2172-38-0x0000000001AC0000-0x0000000001AC1000-memory.dmp
memory/2172-37-0x0000000001AC0000-0x0000000001AC1000-memory.dmp
memory/2172-32-0x0000000001AB0000-0x0000000001AB1000-memory.dmp
memory/2172-31-0x0000000001AB0000-0x0000000001AB1000-memory.dmp
memory/2172-26-0x0000000001AA0000-0x0000000001AA1000-memory.dmp
memory/2172-25-0x0000000001AA0000-0x0000000001AA1000-memory.dmp
memory/2172-20-0x0000000001A90000-0x0000000001A91000-memory.dmp
memory/2172-19-0x0000000001A90000-0x0000000001A91000-memory.dmp
memory/2172-18-0x0000000001A90000-0x0000000001A91000-memory.dmp
memory/2172-17-0x0000000001A90000-0x0000000001A91000-memory.dmp
memory/2172-12-0x0000000001A80000-0x0000000001A81000-memory.dmp
memory/2172-11-0x0000000001A80000-0x0000000001A81000-memory.dmp
memory/2172-71-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-72-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-73-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-74-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-75-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-76-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-77-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-78-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-79-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-80-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-81-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-82-0x0000000000280000-0x0000000001A6B000-memory.dmp
memory/2172-83-0x0000000000280000-0x0000000001A6B000-memory.dmp