Overview
overview
10Static
static
3windhawk_setup.exe
windows10-2004-x64
10windhawk_setup.exe
windows11-ltsc_2024-x64
10Compiler/i...ing.js
windows10-2004-x64
3Compiler/i...ing.js
windows11-ltsc_2024-x64
3Compiler/x...++.dll
windows10-2004-x64
1Compiler/x...++.dll
windows11-ltsc_2024-x64
1Compiler/x...nd.dll
windows10-2004-x64
1Compiler/x...nd.dll
windows11-ltsc_2024-x64
1Compiler/x...im.dll
windows10-2004-x64
1Compiler/x...im.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows10-2004-x64
3Engine/$R1...wk.dll
windows11-ltsc_2024-x64
3Engine/$R1...wk.dll
windows10-2004-x64
5Engine/$R1...wk.dll
windows11-ltsc_2024-x64
5Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
6Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
8Engine/$R1...wk.dll
windows10-2004-x64
1Engine/$R1...wk.dll
windows11-ltsc_2024-x64
1UI/resourc...dle.js
windows10-2004-x64
3UI/resourc...dle.js
windows11-ltsc_2024-x64
3UI/resourc...on.svg
windows10-2004-x64
3UI/resourc...on.svg
windows11-ltsc_2024-x64
7UI/resourc...ck.svg
windows10-2004-x64
3UI/resourc...ck.svg
windows11-ltsc_2024-x64
7Analysis
- max time kernel
899s - max time network
428s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 12:08
Static task
static1
Behavioral task
behavioral1
Sample
windhawk_setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
windhawk_setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Compiler/include/wil/windowing.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Compiler/include/wil/windowing.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Compiler/x86_64-w64-mingw32/bin/libc++.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Compiler/x86_64-w64-mingw32/bin/libunwind.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Compiler/x86_64-w64-mingw32/bin/windhawk-mod-shim.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Engine/$R1/32/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Engine/$R1/32/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Engine/$R1/32/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
Engine/$R1/32/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
Engine/$R1/64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
Engine/$R1/64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
Engine/$R1/64/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Engine/$R1/64/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Engine/$R1/arm64/msdia140_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Engine/$R1/arm64/symsrv_windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Engine/$R1/arm64/windhawk.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
UI/resources/app/extensions/clangd/out/bundle.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
UI/resources/app/extensions/windhawk/assets/main-icon.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
UI/resources/app/extensions/windhawk/assets/tab-icon-black.svg
Resource
win10v2004-20260911-en
General
- Target Compiler/include/wil/windowing.js
- Size 5KB
- Sample261003-payp7sda86
- SHA256 1a998285702f7fe94c5c4173d469a209b04555dbae3c5bec7162d68b8a7a138c
- MD5 af05d6d951339159040c6e90b4baeeed
- SHA1 cf0222d8e1225c1d65351cd9e55d11383f0e6ae3
- SHA512 1ceedf7a24fd29e86c9799de89841fcf0b6736cc03257fb70ff8589ca62f29a682cc48da1286d4e78f45bf91c73563fa99c3736eaecedf22f403398859270799
- SSDEEP 48:0C8QHFs0L7PBCilMHoBnkwE6HObkRTzMfUMXoJnUwQ/5PBFjxZ4Ux5+PBad49mBd:0C8QH9PBFooBbxBz4oJLQhz/Uce6noBG
- TLSH T151C10D4420376FA60DB1DFBA8605A3D1E62F64430F6F0612709DB3A16FFE5228399DC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\Compiler\include\wil\windowing.js1⤵PID:6136
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4564
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5640