Overview
overview
7Static
static
3hytale-f2p....8.exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1Hytale F2P...er.exe
windows11-21h2-x64
7LICENSE.electron.txt
windows11-21h2-x64
3d3dcompiler_47.dll
windows11-21h2-x64
1dxcompiler.dll
windows11-21h2-x64
1dxil.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1icudtl.dat
windows11-21h2-x64
3libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1resources/...r.node
windows11-21h2-x64
3resources/...dex.js
windows11-21h2-x64
3resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...rd.bmp
windows11-21h2-x64
$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/07/2026, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
hytale-f2p-launcher_2.4.8.exe
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Hytale F2P Launcher.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
LICENSE.electron.txt
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
dxcompiler.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
dxil.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
ffmpeg.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
icudtl.dat
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
libEGL.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
libGLESv2.dll
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
resources/app.asar.unpacked/node_modules/register-scheme/build/Release/register-protocol-handler.node
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
resources/app.asar.unpacked/node_modules/register-scheme/index.js
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
resources/elevate.exe
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
vulkan-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
$R0/Uninstall Hytale F2P Launcher.exe
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
General
- Target $PLUGINSDIR/app-64.7z
- Size 92.5MB
- Sample260722-2bhrlach75
- SHA256 a5e025018712cfb0432e1af5998ef2f60c3ebfee35dcc547c769a7b98a2dcdb4
- MD5 cca47e22fab320ec8f41793e47a52ce2
- SHA1 05d72199641cd855140129a6e778f47f89b0f5f2
- SHA512 49aa154da3473d349b358cbd3b1e3a02f602cc61327977f3da6a9f03ae49652c686d44031fa1b5a8367639e629f9c58f11a4d0965b7cf2aa94866fdcc35fbef4
- SSDEEP 1572864:BqNJTZ6pshYgFFWxyA4CYfgTbc6cDbOPEVhBL7CXVK6PdlH426OcdhlVDYcD+MsE:UX9HYOFWMbgTQ12ETBXkNdlFah7b9
- TLSH T11128336D96202B06CB1BC2A56D205EE5FC737DAFDD316C07A199FE383E419A0924C973
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2592 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2592 7zFM.exe Token: 35 2592 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2592 7zFM.exe