Overview
overview
10Static
static
3windhawk_setup.exe
windows10-2004-x64
10windhawk_setup.exe
windows11-ltsc_2024-x64
10Compiler/i...ing.js
windows10-2004-x64
3Compiler/i...ing.js
windows11-ltsc_2024-x64
3Compiler/x...++.dll
windows10-2004-x64
1Compiler/x...++.dll
windows11-ltsc_2024-x64
1Compiler/x...nd.dll
windows10-2004-x64
1Compiler/x...nd.dll
windows11-ltsc_2024-x64
1Compiler/x...im.dll
windows10-2004-x64
1Compiler/x...im.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
5Engine/$R1...wk.dll
windows11-ltsc_2024-x64
5Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
6Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
8Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1UI/resourc...dle.js
windows10-2004-x64
3UI/resourc...dle.js
windows11-ltsc_2024-x64
3UI/resourc...on.svg
windows10-2004-x64
3UI/resourc...on.svg
windows11-ltsc_2024-x64
7UI/resourc...ck.svg
windows10-2004-x64
3UI/resourc...ck.svg
windows11-ltsc_2024-x64
7Analysis
- max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 12:08
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
windhawk_setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Compiler/include/wil/windowing.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Compiler/include/wil/windowing.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Engine/$R1/32/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Engine/$R1/32/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
Engine/$R1/32/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
Engine/$R1/64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
Engine/$R1/64/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Engine/$R1/64/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
UI/resources/app/extensions/windhawk/assets/tab-icon-black.svg
Resource
win10v2004-20260911-en
General
- Target UI/resources/app/extensions/clangd/out/bundle.js
- Size 797KB
- Sample261003-payp7sda86
- SHA256 4537d7e62ce3fd248775b44a8df926d183417767d83510f3ec96193d2bdc8400
- MD5 2a1e30271097955b02d3d2e68f0a16b0
- SHA1 5620916ca1cfb36e23bbd9ffa91f7fae0a13993f
- SHA512 0398c9be10070deedec92572241b7687293c865262970734bc0b8e17d63100e727ec28231afab89a2a5bc4de7c4012d1fc13c9c68ce6ed5f610290ebba78fd9e
- SSDEEP 6144:rZGO52dyh05f+g5jw1oMoZdjduXI5WzzRCy0tCL5qSyUQ5/usqY03XEI4elgPyef:dGO5sgWVTIUTnBhLOo7P6K
- TLSH T18C05E6D5F2A122AE229E938CDCA6006EA5B710F8600DB434F5C4ECDD149DECD5267A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\UI\resources\app\extensions\clangd\out\bundle.js1⤵PID:5612
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4384
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3408