Overview
overview
10Static
static
3windhawk_setup.exe
windows10-2004-x64
10windhawk_setup.exe
windows11-ltsc_2024-x64
10Compiler/i...ing.js
windows10-2004-x64
3Compiler/i...ing.js
windows11-ltsc_2024-x64
3Compiler/x...++.dll
windows10-2004-x64
1Compiler/x...++.dll
windows11-ltsc_2024-x64
1Compiler/x...nd.dll
windows10-2004-x64
1Compiler/x...nd.dll
windows11-ltsc_2024-x64
1Compiler/x...im.dll
windows10-2004-x64
1Compiler/x...im.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
5Engine/$R1...wk.dll
windows11-ltsc_2024-x64
5Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
6Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
8Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1UI/resourc...dle.js
windows10-2004-x64
3UI/resourc...dle.js
windows11-ltsc_2024-x64
3UI/resourc...on.svg
windows10-2004-x64
3UI/resourc...on.svg
windows11-ltsc_2024-x64
7UI/resourc...ck.svg
windows10-2004-x64
3UI/resourc...ck.svg
windows11-ltsc_2024-x64
7Analysis
- max time kernel
899s - max time network
427s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 12:08
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
windhawk_setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Compiler/include/wil/windowing.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Compiler/include/wil/windowing.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Engine/$R1/32/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Engine/$R1/32/windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Engine/$R1/32/windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
Engine/$R1/64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Engine/$R1/64/windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Engine/$R1/64/windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
UI/resources/app/extensions/windhawk/assets/tab-icon-black.svg
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target Engine/$R1/arm64/msdia140_windhawk.dll
- Size 4.8MB
- Sample261003-payp7sda86
- SHA256 385ce9aae0dc0cdcbfa21e86abca5a9ea4a7fbf891d43b51852fa7d023a629cf
- MD5 134053ab9dc9f855bc0bad52a05e3abc
- SHA1 4bd552ab8f7f21c370aec808363b358c9140d71c
- SHA512 9ffc60ab29e8e6fdddbd58e775b9efad4c8fb438a4f63b92ffae2004b7814d7abefb107eb79998f3f549f1743ee2da131fa3e6e8a64546710b07edbdbc7ed1ab
- SSDEEP 98304:EzqS75B5XaeJ/ggFx6sQ22LJIwK/gr+o0KB7cFLDiXEpYk23pnaV2sd2xF6tjRxy:RS75B5XaeJ/ggFx6sQ22LJIwK/gr+o0e
- TLSH T1AF365C11AE8CA835D2DAD33CEFA34F60213BF574C0688D87F25A035CED96FC19596296
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Engine\$R1\arm64\msdia140_windhawk.dll,#11⤵PID:5160
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:6044
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:1600