Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

L2NPC/HFExt.dll

windows7-x64

1

L2NPC/HFExt.dll

windows10-2004-x64

1

L2NPC/L2NPC.exe

windows7-x64

3

L2NPC/L2NPC.exe

windows10-2004-x64

3

L2Server/GGauth70.dll

windows7-x64

3

L2Server/GGauth70.dll

windows10-2004-x64

3

L2Server/HFExt.dll

windows7-x64

1

L2Server/HFExt.dll

windows10-2004-x64

1

L2Server/L2Server.exe

windows7-x64

3

L2Server/L2Server.exe

windows10-2004-x64

7

L2Server/Loader.exe

windows7-x64

3

L2Server/Loader.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    27s
  • max time network
    88s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2022, 05:03 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    L2NPC/HFExt.dll

  • Size

    1.1MB

  • MD5

    771a913655b7cf44986878a2310642c3

  • SHA1

    29cfb5009cfb7020d9037999b56cc7a976183af5

  • SHA256

    b21aad37dce35c48b2774f0de2ed19e48f1cb1146c3ba553778d208a19178815

  • SHA512

    071fdfad4c5f371f4366c6f8834c901ddc3ff5b898d10702063183ee767c71b2d616741e1bc161c42240126b785798dc4b2081088f33e95ccaf31286ed781c22

  • SSDEEP

    24576:gDV22RQmpUoTJ++KBSlWndFT+PmmRpjDo98gk6NjBdwFSStQwla/Mwmq1/VQvlwl:gDV22RQJoTJ++/lyT+PmmRpnkNjBdwFq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\L2NPC\HFExt.dll,#1
    1⤵
      PID:1200

    Network

      No results found
    • 104.109.143.75:80
      46 B
       40 B
       1
      1
    • 23.2.164.159:80
      46 B
       40 B
       1
      1
    • 104.109.143.71:80
      46 B
       40 B
       1
      1
    • 104.123.41.162:80
      46 B
       40 B
       1
      1
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.