Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 06:26

General

  • Target
    HeldenianLauncher.exe
  • Size 2.9MB
  • Sample260925-g7e1csvses
  • SHA256 2a827bf40198adb19b35526abcd89423d33acc83cae527fc235c7cc3b8af14dc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HeldenianLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\HeldenianLauncher.exe"
    1⤵
    • Downloads MZ/PE file
    • Suspicious use of AdjustPrivilegeToken
    PID:4444

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tahoma.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\Game\FONTS\tahoma.ttf
        • Size 897KB
        • SHA256 9af03d4ad44a3b413d92f7de48b94aa7cc8a1471a75d498406eae837f62ee1d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Cmdhall_2.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\Cmdhall_2.amd
        • Size 97KB
        • SHA256 732622f1850d192d1b156ceaf0c624cac1243caeec8648e134f1b9fba121f7f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Resurr2.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\Resurr2.amd
        • Size 390KB
        • SHA256 f5e11a32b71fb936cab4bb7d0827c2cf63e41dbeb8fa9e5c85baa73a32b36464
        • MD5 SHA1 SHA512 SSDEEP TLSH

        arebrk12.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\arebrk12.amd
        • Size 219KB
        • SHA256 d8becac589873f19426f3ac81bd10caf54aeed6aae8b426366725df46056e6d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bsmith_1.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\bsmith_1.amd
        • Size 219KB
        • SHA256 59b489562bcdb2d478e696bfad01789299936c444b0fa96b0094c68de3070e81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bsmith_2.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\bsmith_2.amd
        • Size 97KB
        • SHA256 f17f393db7f1875bd1f9470f8dbd9364835889f4c867829394c382a4d03828ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cath_2.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\cath_2.amd
        • Size 97KB
        • SHA256 2f4d7b326b9b3e2d08a04565f251e59c9e62ecb10067700ed2b3e7cdba70cc6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvjail.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\elvjail.amd
        • Size 234KB
        • SHA256 5f7216f5c2559f8494175e2c90b28c6d0a904c20d123d41f3dedc0d7aa9dc22a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvwrhus.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\elvwrhus.amd
        • Size 97KB
        • SHA256 c21ff35254d6801f98c5bbb7630590c7414c731670c8788b1a1bc4c0b6660a34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fightzone1.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\fightzone1.amd
        • Size 219KB
        • SHA256 d974a47814c5ae798041b772c518fe9a869315b96dedc12674b9f68bb8a56489
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fightzone3.amd

        • Path C:\Users\Admin\AppData\Local\Temp\Game\MAPDATA\fightzone3.amd
        • Size 97KB
        • SHA256 8df950113e7e6aef8bff2c0adac4931e83e69a484d7f5f9cd9eb0756dfc377e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        m144.wav

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sounds\monster\m144.wav
        • Size 130KB
        • SHA256 d418c3d3b7ac5aa8fee4e042a2a3c8d96eb2c3cd112fbb571474f4e7091cbc6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_armor.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_armor.pak
        • Size 1.1MB
        • SHA256 c696f2067cf6ba6d24a8200735944df9fe0d60e83215d6d8d1ea91f089d433a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_cap.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_cap.pak
        • Size 268KB
        • SHA256 260ae5649e7192eb2ae9490ee33f8c2621a680fc7bd4d70078db5d50890caece
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_hauberk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_hauberk.pak
        • Size 708KB
        • SHA256 0dbae8009f0a760501af19a89b64d08140392ce5a27194ccfb883e76d5984f80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_helm.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_helm.pak
        • Size 299KB
        • SHA256 28a70239a9ed15eb71701a10c8284e1b6c30d1659e2c15bf34c481b5ee661dcb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_leggings.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_leggings.pak
        • Size 1.2MB
        • SHA256 dd89286f20fafdb2830d223b5e9bf86de9635407f456d46b540c686b99616728
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elvine_god_robe.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\items\elvine_god_robe.pak
        • Size 3.2MB
        • SHA256 d21d9d16ab31383eaa899c595681a9f064dfcae9959b2832df0299a0ed4562ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        intermediate_screens.pak

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\new\intermediate_screens.pak
        • Size 3.8MB
        • SHA256 01e056ec18f5ef555a094116f6e3f53318b052dd3a7a6157d5a9610cfd466147
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sheet1_frame_001.png

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\new\intermediate_screens\sheet1_frame_001.png
        • Size 679KB
        • SHA256 0e4432b7ea3d452f819db78eee86b4a73003438ab97b7f0d8c85bcc54d94caee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sheet2_frame_001.png

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\new\intermediate_screens\sheet2_frame_001.png
        • Size 317KB
        • SHA256 fdf458b714c2c12b4e3ba451dfa305ee9fca3dd78f3f974771ceff407e598fba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sheet4_frame_001.png

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\new\intermediate_screens\sheet4_frame_001.png
        • Size 1KB
        • SHA256 7e70b939fbe4257b93583ed88bcfdc8ae091ea71827aff28b6506d5bc8b05159
        • MD5 SHA1 SHA512 TLSH

        sheet4_frame_006.png

        • Path C:\Users\Admin\AppData\Local\Temp\Game\sprites\new\intermediate_screens\sheet4_frame_006.png
        • Size 662KB
        • SHA256 1747a5aa69b27b31c29376381dd568fdaa406b085f460077237672dcfb176c92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4444-5-0x000000001C630000-0x000000001C640000-memory.dmp

        memory/4444-0-0x00000000009E0000-0x0000000000CD6000-memory.dmp

        memory/4444-1-0x000000001C630000-0x000000001C640000-memory.dmp

        memory/4444-2-0x000000001E070000-0x000000001E082000-memory.dmp

        memory/4444-3-0x0000000020820000-0x000000002085C000-memory.dmp

        memory/4444-134-0x000000001C630000-0x000000001C640000-memory.dmp

        memory/4444-4-0x000000001C630000-0x000000001C640000-memory.dmp

        memory/4444-69-0x000000001C630000-0x000000001C640000-memory.dmp

        memory/4444-118-0x000000001C630000-0x000000001C640000-memory.dmp