82784f298bed670d3d77b9de449c2c486ac12f587d74740f906c592f54ff5688

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 21:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe
Size 14.8MB
Sample261107-1thzmsgc82
SHA256 82784f298bed670d3d77b9de449c2c486ac12f587d74740f906c592f54ff5688
MD5 d819e28a36a66f8d187d20d1b58d0458
SHA1 d1f1852af05cb64994db9e7dc1affdc58e823ac3
SHA512 e355405f663c8816aa0c9790a90b942925afa8f57d91d2045cf46f51b15149ab271461e4b2f0bd537bf7098e9406ad5923eb2fdb9fd66a4af4e0d9dea0d7d24d
SSDEEP 49152:0WEyQY7v79HbAGqFFx6IC3wEPeCBW1VbUSD5aNtCR22rbzM0949FxHXUAJA1hsZt:049OpIh
TLSH
T122F6EF3163F81789F1F74BBC9A7666018E72FC5B9B21C6DF1298504E0E22AD48975B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
3	4224	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\L2GoldLauncher = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe\""	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1221327845\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1221327845\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1221327845\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1221327845\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\_metadata\verified_contents.json	msedgewebview2.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2428	msedgewebview2.exe
2428	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
52	msedgewebview2.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 4224 wrote to memory of 52	4224	2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe	88
PID 52 wrote to memory of 2720	52	msedgewebview2.exe	89
PID 52 wrote to memory of 3488	52	msedgewebview2.exe	90
PID 52 wrote to memory of 3488	52	msedgewebview2.exe	90
PID 52 wrote to memory of 3488	52	msedgewebview2.exe	90
PID 52 wrote to memory of 3488	52	msedgewebview2.exe	90
PID 52 wrote to memory of 3432	52	msedgewebview2.exe	91
PID 52 wrote to memory of 1296	52	msedgewebview2.exe	92
PID 52 wrote to memory of 1296	52	msedgewebview2.exe	92
PID 52 wrote to memory of 1296	52	msedgewebview2.exe	92
PID 52 wrote to memory of 1984	52	msedgewebview2.exe	93
PID 52 wrote to memory of 1984	52	msedgewebview2.exe	93
PID 52 wrote to memory of 1984	52	msedgewebview2.exe	93
PID 52 wrote to memory of 1984	52	msedgewebview2.exe	93
PID 52 wrote to memory of 1984	52	msedgewebview2.exe	93
PID 52 wrote to memory of 3392	52	msedgewebview2.exe	94
PID 52 wrote to memory of 3392	52	msedgewebview2.exe	94
PID 52 wrote to memory of 3392	52	msedgewebview2.exe	94
PID 52 wrote to memory of 2072	52	msedgewebview2.exe	101
PID 52 wrote to memory of 2072	52	msedgewebview2.exe	101
PID 52 wrote to memory of 2072	52	msedgewebview2.exe	101
PID 52 wrote to memory of 4840	52	msedgewebview2.exe	102
PID 52 wrote to memory of 4840	52	msedgewebview2.exe	102
PID 52 wrote to memory of 4840	52	msedgewebview2.exe	102
PID 52 wrote to memory of 2428	52	msedgewebview2.exe	103
PID 52 wrote to memory of 5060	52	msedgewebview2.exe	104
PID 52 wrote to memory of 5060	52	msedgewebview2.exe	104
PID 52 wrote to memory of 5060	52	msedgewebview2.exe	104

C:\Users\Admin\AppData\Local\Temp\2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe"
1⤵
- Downloads MZ/PE file
- Adds Run key to start application
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:4224
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4224.4108.11768036345648464095 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:52
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView /prefetch:4 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffff4005fd8,0x7ffff4005fe4,0x7ffff4005ff0
    3⤵
    PID:2720
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1792 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:3488
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2188 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:3432
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2472 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:1296
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3400 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268 /prefetch:1
    3⤵
    PID:1984
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3984 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:3392
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4852 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:2072
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4960 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:4840
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4960 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2428
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView" --webview-exe-name=2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=844 --field-trial-handle=1796,i,18355086466633984317,14638041990252961388,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1566378d878c6c8a1314451418e7ef7c66309268
    3⤵
    PID:5060

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4808

C:\Users\Admin\AppData\Local\Temp\2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-06_d819e28a36a66f8d187d20d1b58d0458_cobalt-strike_glassworm_icedid_njrat.exe"
1⤵
PID:4440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\background.png
Size 2.2MB
SHA256 2c4219dd1703168182a692944f6e27ea3dfe6365f914b8cf1100ecfb96555c2b
MD5 611fa058075e20c0c30ab07cb839128b
SHA1 04b06aaa8bcbd2255bc58a9073e959942096198d
SHA512 a97c8822b5094db3f4635de0dc746c2b1a993e1da29e51d85db440601362df0dc1acc39a78a3a1d9db5c5217dc7f5052a01dfb49b75c00672652b7edce02136a
SSDEEP 49152:LjPZMvSaSDpBIfbBFygKsK2LSrEzCMq9ghXs5G5+:XSwPIFxpJ4S4
TLSH
T15DB533FF5E237322C9849DF8592254C439A2DF496721C0A04B73B4B8FE9BE750E34A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client1-logo.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\client1-logo.png
Size 5KB
SHA256 4168c873898cd3bd36ad33a4b9e23582c0d1f99a75590b009cd1a7c21f3b68fd
MD5 c5edc0843a9260403930d1d01e11ff32
SHA1 2f92146ef9c43b16d0192b1a828a426296936a93
SHA512 51581ed2d9dba4842eddc0c37eca080fd5a284c5d4181d7f9cd417ce55a5f18cf06c581e8ddae77d94858584f71271539a010d3ffb53002733dbf9b6464c5c91
SSDEEP 96:FSi/4tn4LiiolrlC4z7q3klkMSOyw+2LhDpMJX4AOTpiS7AiyOCrdfqPCxLn/omd:FSm4OhCr4EPkMnyuLhDpkorTIVi05xLz
TLSH
T146B19E90FFC3BE13B18C482E9C1A63251D21745AEBCE636CA152D1E30BE646E00C7371
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client1-media.webp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\client1-media.webp
Size 23KB
SHA256 3e45cbe5660339fb486718bbcbba83ff97207d01f02b7b5847ea4d9a561b5382
MD5 fd5b89fee8fe3cdbf4168f5e56beea44
SHA1 0bfe66c30c78413f67f6f6a99ac3096691c47dab
SHA512 7ceb7d5c517c1fdfe6ae8f3e9fa6df3800c6f251ffdd6922d02ce60b1238fe0827ea108a0cb30e946a18388a7b69c25c71f879194d0ac97d311c60066266a3bf
SSDEEP 384:WNBQRxeAr6yWMQBFtx8KF/pAzBrP3Sy6jl5g0B5EDVO0vtYnRiGtuAe4XZUbIAhW:oQRx3vi8KTOP/6Zd7WI0vt0QeuALmY
TLSH
T12AB2E1141D5FC5626E353F4918DC02467EB128DA81C1E16CFEECF21BB6F58B23682D6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client2-logo.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\client2-logo.png
Size 6KB
SHA256 e8a6d0b23c7b747e08d3fe83c59e2249954f19b4cfba9263b79af0928c675c8b
MD5 9cdda9bad42fdffffcbea473871161db
SHA1 2fa011514a880f3e3ffa00a5c492ebb7a263f8b3
SHA512 60506b3de7bcdf98b507350cd95d5188d1fc4af06bc4761b2a6c39656bf446222fec6aede036942d0ba00c8be2b46d2530f9a4c96580e7c36d6157fd84c46b23
SSDEEP 192:FShTVk/6LThp8YP5bOMo/3GgQuJIsNcfwcPcCQuTePOP:khTVq6nXbhb/MGgHLv/7JPOP
TLSH
T148D1AE48B838B8C5CF56069CB8D4F0B1501B3C49C821BDE2C2D7E6A96B66E4716BF423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client2-media.webm

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\client2-media.webm
Size 765KB
SHA256 29c2d84a789b476ac758d5625c93a36490bbf32cd7d8366b37b3660fa76277b4
MD5 1159ec2c859c6628e7e3f43fe7ddc37f
SHA1 b68a3bbf4708a8968c339094e7a56f8f40daec9d
SHA512 8a35ee77bd3dbb097418d7846c781f1ef7c335d8b7256202dc233776dd0d21d80727fe3c36a549fa607d845970681e7e6a8c176725aa75db45c3ffca138f840d
SSDEEP 12288:uib32IgaimBxl5Yl2YOunAKnERwd7q6VmXd7WX8Ay3SiwFfnEkWqwV6nD0sL:uibn+mBL5Yl2gxX7qUmXdiXrKSvFckWa
TLSH
T1D3F433439F570605EA81A6E9CA1913F2FF2DD917AB2BC39538C04F13EB9500E625C6E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

epic-antharas.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-antharas.png
Size 2KB
SHA256 46fedefba8f9579796b8c40377185b5e94302439a926bcc692380c735ceeedeb
MD5 ea1ec71660ef9df38c97fb828cce6fbf
SHA1 c9ea968e5d8eafe74615dd6d7f37ae62dca590e3
SHA512 f91f29e7ce8c67b2f809e3d7d7ffb70aee662e8c6b336e066f9f680ad0d147dece001ac5d62a507e8ac8652a3516d2c02490282728c505baf65a2c12af298181
TLSH
T10B41291324DB28AC6BDF8A1ABC51D2315AFC0F09513E094CEB9D89097EBC4F029D55E9
MD5 SHA1 SHA512 TLSH

Submit Download

epic-baium.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-baium.png
Size 1KB
SHA256 fdca4527c830b5d9a4f79f845d3ae150ee00a74c7e829a66e3b9b53acd149dd6
MD5 672097a74eaf224a55c554ab8cbb77b1
SHA1 5898e15c7b67112cad17895c9a901e7bc06c5532
SHA512 4de355dd74b607d37488eb96b788916840bafccb5810c6e1f02aa439ee9dc6d8537fd88731b3fc7e9221578c045ddd8720fa4c2f7c400032c8d571ee75995dfa
TLSH
T1E8412CA413B4AAE5D4A36D3016338653A0F239CC3C9A3821BEB0671D0350F3302CD48B
MD5 SHA1 SHA512 TLSH

Submit Download

epic-core.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-core.png
Size 1KB
SHA256 b88487903131ed6b630db9221eb3535444e3a608212c0a9d024c60ac95f11bba
MD5 8a7543daf6b3c24a4853e8e7ac649190
SHA1 f84c8c5cb5fde1cd8c6a08172015efb4e8fb507f
SHA512 206a97b3dac9e76d38c7da60dcdd2d4aca0ad56b87f6b447bc340ed143daccad3aea7949b254fbdc08d5d4a2d32dbce373a4fdb0f93c73716f9439bbcf843449
TLSH
T1F1414C9F4900FFEE51802FCB2E255E62FDB2C485FDB1310CD21AB009FAA03990104A0E
MD5 SHA1 SHA512 TLSH

Submit Download

epic-frintezza.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-frintezza.png
Size 1KB
SHA256 c5d9dec4890feb2b277bfad00f4b679fe919f2a4e3c6ad7470cf8945126de2e2
MD5 e9d1d73bd332fbed82bb481f8b24f7cc
SHA1 3b6067ab0f0956e1eb91db094aca535edd2d87bc
SHA512 0786820e3808de70ad593bd4a59a834a54ab33fdd8e3ddaadaaec90086f994ff801296be4ac09ff921e46c6c4f72ffa273de9c0766125afd3ce9eab509da1020
TLSH
T1CF412AD9F7048B4B05E08A5280B4907A297E7054592F168FBB46A37B8527C955CAE378
MD5 SHA1 SHA512 TLSH

Submit Download

epic-orfen.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-orfen.png
Size 1KB
SHA256 39e5f4a4df0a06b857fe4539d8629cc8251ff3d657d8813b6382dc1d7b5cf00c
MD5 8bf6ad15ae745032951e337342461ec8
SHA1 95fe8bff8115c8a71e774710d5a1b5c2157268a2
SHA512 8a35ac81f81374651ec452bfe4cd3864afc1ad8e7f9a7d313c4c6e9c84b87c3d19ec8d9f71b27672ab7c67ad3dd51e807c50e3b2dcf37d52d8c59670779f8354
TLSH
T1AD31198FB5B793AA86A9B619684C0A95ED45393C3FCED948C018006C09BCE47491EF47
MD5 SHA1 SHA512 TLSH

Submit Download

epic-queen-ant.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-queen-ant.png
Size 2KB
SHA256 88c5470bd5a940929aca6164cc583bc83b216a06b628d8a3aad3a4b9c82f6e96
MD5 a90b1be5482f18fe98328659a08acb9a
SHA1 9e347c939c179d5b3464e78076578582ca0e80f2
SHA512 b7bffdf0ea63cd4f65e964561d8b51a5f7a6c0d10625fc06830291f8e27aa534fd5d2b9e02f7bb0e4cbe685c22e8f5704883047bc38d591325c76f12226d05f5
TLSH
T1AF410988EA66F6E4D628F705600E1B4E4CF429448ABF90C43474937F90BB0D76A08848
MD5 SHA1 SHA512 TLSH

Submit Download

epic-valakas.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-valakas.png
Size 1KB
SHA256 c6e31206190172291c0541a197bb9899b9ed5214f382739cc96be25d997c035d
MD5 fdf1bb183975f7bdad12a9f644f8181a
SHA1 53669aabd0a8ca4159c5f1ccbb8cf689069fce87
SHA512 46f8af4909ec909d892411d6965a2a63a75129c6fe4b7748f168c043bfc7283700a836613f7cd4449a6bac43a8f21f124ad6c6695b9fcd2ae99a9d057e2e9c35
TLSH
T1FE314DC743B2FE486768CA70E88085D0E831240F5FA716D73679C4B7B112F214489BE7
MD5 SHA1 SHA512 TLSH

Submit Download

epic-zaken.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\epic-zaken.png
Size 1KB
SHA256 0924cc641e04951dd48b450b625dee27d3bcf00fd2495060e5b3827847191ddc
MD5 09541a86c18def40760d1363bad80605
SHA1 9129ec635542e0e6df69c9ee37e04d0b01c8b7c9
SHA512 da03a9054ca4b79b18e8e9672e86b69e7a5eae0aa4d4b065e470fa9e8655992307cfed78b226c8f0d1ff93e2d11220424074a9cdd9eff0666f86a5db419049e6
TLSH
T1C531F8278260CD70668A49E3825C808BB6E84F2958A9C0146D785AAD5FA5C5723A5CCE
MD5 SHA1 SHA512 TLSH

Submit Download

launcher-logo.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\launcher-logo.png
Size 307KB
SHA256 ef6bef93dc11097d98b601f8f58007681fed2b014fa44e6fa735009cb2c9bb5e
MD5 cdf9d84e1c7bcb43b084aff60337ccf0
SHA1 01fa732e45f4815d8fb51ff1f82ec2480675d4f3
SHA512 e4c0bda20c938faa4dfc9eda7bafafa84fd010f33ebd6af64aa4f95a1ffdddf0e6bcce18995409bd33faebe6c780473a0236e83831fb64c7b222b0111be6f562
SSDEEP 6144:trEggooxvIxS4Id8Mne8o+Fo65Vbl5g3VMvoOy4V2HnDgXN/CrQGQvoS:tr4vxsOuW5TiluyAsgXsQL
TLSH
T1346423BAEE67813765305E62985CEB3113ABA0F0E7B140601F22D18379FCB654365BBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

news-logo.png

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\news-logo.png
Size 91KB
SHA256 e8571c28bf71c6c1258d2ecedd42fd3006ae7b6c3e27556f8bdd84eab1dcd95c
MD5 3d664a2235cd85fbaf58c158c0398c29
SHA1 45c1775668ca0a7859b078addf26a43b632d624d
SHA512 8cd095001305fe0bb5a79cc32e18e06dea7530e4e18261661254ee82e776f02f091ab3a24e1e0b6360f3d279359c80aa0d8a6267949559c2e6d712c49864ca7f
SSDEEP 1536:N4wLeoEKCoLPSpdrjzEZIk2c51w+SuR1kCZgIQEwhNx9C8ckuCJLP5wXszFy5I:KaHEKCoLPqr3E52cDVOikEiNvCnkuQLD
TLSH
T164931286D421B9905C5EB6467F994FCCF119B3B9A3AA10B0F38E505E24323C1DFCEA58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

theme.mp3

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2Assets\theme.mp3
Size 3.7MB
SHA256 247beec77cef2e1942f25d5fb0558eeb5445b71f1c6412a7c7dd9cfbf9d7efde
MD5 3924cc682bb3d440faa91b7b2df50d4e
SHA1 23954468f83131541e19d4a499d578be19464ebe
SHA512 9349a8640a817eae56964697d43f2faa8604ba20e8720e94318016cb5f1e2ee0d77233fb75706f269ad18286e9f58a9fb178cd5207db104279a13e576527c5cd
SSDEEP 49152:TpR1n8uHIVj057qi+6nYog6orT86/AsUFVCXNuibIjv+qkYyDvqyfZr7TvAnpMNp:d/BoVOmiNJgZrZ/FuFGvbpU4+T0
TLSH
T1CA0633D7EB359ACF6319211F1A82CB69CB0117581E3D7AC4D9C68F832636C45B363E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

052dbd0c-f22b-4e6c-b94e-f660693dda05.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\052dbd0c-f22b-4e6c-b94e-f660693dda05.tmp
Size 2KB
SHA256 46e2e973645c9bf0f8f34225875c7e08402b025064ce14bf2b8a5da57bd0a6d3
MD5 00d5d41e6edfd1bf3896a186fe2ca0b3
SHA1 cbb06244b2982f564394f39cdf26da5b1a1bbfab
SHA512 a5cdb81d6779ec8d3aba4945a598edb2d400cbbb9a1eaf356bf49700e21548c4f7ea0bea7ae703d370ba2fcefebe6fc83652c41c8adddbc98c9632552747bd8a
TLSH
T17C519533B920AB77EDE397097A8B3B23C9359051EA521F1095ED0B1800D625D2382C7B
MD5 SHA1 SHA512 TLSH

Submit Download

1f134614-f5cc-4444-bfeb-e4c4ac806171.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\1f134614-f5cc-4444-bfeb-e4c4ac806171.tmp
Size 3KB
SHA256 b5f3576ad00906e3eee91da2606ba3ebe02bc01d0ab862a9ae9588224d1b66a8
MD5 7d47e0d9a74741915095109f1bfa7cce
SHA1 dcdcf53bdd2d182aec284f59bb542db38a491fd4
SHA512 a45ed776b4cd7fc78c04f8bc49fea6a09ba4793c09ee3df15a74a4ae8cc7517a02ebcef0f0ac57ba77cc386bacfc06f1ba1412c2f0fa4a61380158d455b1d34d
TLSH
T1CC616337A970EA77EDE39A05B9C63B16E6659026E5853F55C5EC0F0C01D73882382C27
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 41a3fbea2bac44fe6883e590869d74adab874bac7c18f13327f69bd00789e6f0
MD5 93c99ac078aab9ab6d7c85c619300359
SHA1 856a9e3e33804ac9512202cbf08c8ae17b848aa2
SHA512 74fef9c326a20272191a3f8d080ff76d80213c7853be55475c4bd253baca6f4e1259443a1fb18a3f09d6fe3eecb21260f73907ba77db90f6b7c53a0472b20513
TLSH
T19CD0043071404077D01C1177C011430417145F10515147000014450C4DDD04501D1100
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 91739eab30aecbf9997c882f9436b0538bfdf6b5b24f3baa7e78ecca1c6c5c75
MD5 a8ae5ac8f4c92ef60b1e10aed699af1b
SHA1 5a99cd5ffd056cbc236323e33bfe49c1dbf382bb
SHA512 7484d46281191b3f73bfd8e93a13d26247848d3510606c952121748b1b8fe6a3a6edc9acb0373002722b830d34ac5623dafdcb105ff5fb0b59ae2e0580a860fb
TLSH
T114D0122232414179C02421734003620C1900D71B81458200542CCA1D5F5C0940A52441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

07109fff-0301-426e-81a4-5941ed10cfd1.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\07109fff-0301-426e-81a4-5941ed10cfd1.tmp
Size 5KB
SHA256 a17c4b3289e10bbdd76291f4412915eff56dc82fc5eb93eebde44cf12fefbe46
MD5 6ea9bd7ee3c38e31f74626e17ece0471
SHA1 19643b10673862f44a50580bb4f6e9ff729e2991
SHA512 551dd42438717f179d05cc42ba65237d9a97a6093789a320dbaa502814735441c8aa4a0c2905a6b38d1292a57e79febf8bda5ee6b8085f9599a0d72315d59161
SSDEEP 96:stu/dM+mraiZb97kFo5h16ZZs7/x+6Mhmuecmjec/K+guhr28XM1C7K:st2OzbXwo+sV+Fij5CshrG6K
TLSH
T1D3C196125E28B97B8CC6E619BA25BB03D2F96032B4D51E58E7F8461C08DA6DC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c03d3f02-2901-4e65-bb51-cf0d7606a8f2.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\Network\c03d3f02-2901-4e65-bb51-cf0d7606a8f2.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

db058ecb-3068-4b3b-8683-ecfdec65d423.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Default\db058ecb-3068-4b3b-8683-ecfdec65d423.tmp
Size 5KB
SHA256 c1646971530d3949e116b46e47bb6ddff9090a85bcd2a768419ee17b1dce1550
MD5 17b918d0b6d584486327d80ab4920378
SHA1 8d4062bdb7148f2511c4351b903cffcbd7d6dfbc
SHA512 db54ca020ae4134b3bdb3e070c51dc92cb77ac7e755590b0673f6aa0d1a715f303fae4848bb0676ea6c39ded415f80d024ee33fef9d1e898210a63e731e21f23
SSDEEP 96:stu/dM+mrBGiZb97kFo5h16ZZs7/x+6Mhmuecmjec/K+g6Cr28XM1C7K:st2OzVXwo+sV+Fij5C4CrG6K
TLSH
T176C1A7125E64797B8CC6E619BB29BB03D2F96032B5D51E58E7F8461C08DB6DC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\Local State
Size 1KB
SHA256 dfcfa1e2782352b1e2fb14ecc830ee11bdfb7340127fe87d89d9bdfdf76aec7d
MD5 f131418d866d28f138ef9574db0e6eb7
SHA1 3b37091136c4b532033306f7488f0d4529cc9f40
SHA512 1650fc2c21000b1f9671b88254a243353d50c5690f6a9cf94dfe0dea411b864f450ef3568ae87f0b118da463696ce9908239e95ed8dcabe9e6ad1b1afb6d5f9e
TLSH
T1F02135B3F1B09FB3FCD2635A72867B5B8D31A016D2514F0050EE8B1901E614EA5DAC37
MD5 SHA1 SHA512 TLSH

Submit Download

d19839f1-c9cf-4349-88df-e858296ddcf3.tmp

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\WebView2\EBWebView\d19839f1-c9cf-4349-88df-e858296ddcf3.tmp
Size 15KB
SHA256 4fbbfc345294e5acb736e5e93734bfa008383be18d36c64c6e8f76c01a0657e6
MD5 66c184e5a3faca789dfe780f9250d199
SHA1 3d044105ef2c6450fff4b4b129caa1b28458f985
SHA512 a7166c8fa207fee935177f28ccd18e204b4d7dc666dc8f91794b19f9a6aaba5b5150cb0d156466f08f127e0af39857ed5390cff675d851adc26f4dc0e6951067
SSDEEP 384:g+OBqImmJvGBLx3NaFMJFNNBSOS31+g6rP:ZcvGtlNaFIT
TLSH
T1DA72AE7B28756F637CF7890ABA8A374BCB75A253C0D57BD8C8EC9F0F016A0841391856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

L2Gold Launcher.exe

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\self-update\94d2176cb4362c6910bdfb30be9cfbf862e31610e76bd3c3e870e9b016916a71\staging\1.0.67-240758468\files\L2Gold Launcher.exe
Size 14.8MB
SHA256 2abb0ce4f16f3c378a331fd6521ed8685048e2c3741bbf473a14b5c3752ff7ce
MD5 90cbdf1581a743415e2350a0404662ed
SHA1 d7840a2894ee48a9752c61f24e5bac2fb5e72db6
SHA512 7ff258c9d6a174e49adaaf98fad88b03c040b92ceec9a8640e2b732a80b10e4cc97c85c7d236a12988149366a2107aa046f29121be550863c6bca2d6379df4ab
SSDEEP 49152:eWv+6YfOyTH2Q2JPWU26IIVwEPeCBW1VbUSg5aNtCR22rbzM0949FxHXUAJA1hsB:eWrYGkJHFj
TLSH
T1DFF6E03163F81789F1F74BBC9A7A66018E72FC5B9B21C6DF1258504E0E22AD48975B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\self-update\94d2176cb4362c6910bdfb30be9cfbf862e31610e76bd3c3e870e9b016916a71\staging\1.0.67-240758468\manifest.json
Size 367B
SHA256 cbf4c86cdd9e6318e2bc60f9e498fabee7e7a0c0cbe60ff697762b56806a09d1
MD5 d70491b69ed7e54487c0ad1c204243f0
SHA1 9e0275fe582e832d582ff29dda5b40397b9114df
SHA512 017f9d307849a9b918c93781f43508329a38f77f1d1fddb11b33522a18217a633b5451c7a40f8dd60a10488b40c7f25cced72dc25415ed49a8932ad8ff3ade53
TLSH
T158E0C0204586AC7149F11300CEAE3CE31F0B109A14E783E48AD7C54C48AF87E986AC11
MD5 SHA1 SHA512 TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\L2GoldLauncher\state.json
Size 94B
SHA256 50c139a8af7748bc46f5f932e89936658eb7d11a6db57a7870005824718a05eb
MD5 500a79e01fd3b00f49e31f777ce0997d
SHA1 4f1e025fbb118edc2a4a68ff8c358c7012ef5538
SHA512 53e071de67bedb1c7c65680fcdde431414d9f9409d65fbf2d4774c5cbb9c286c68af0032e7cf6cf58a6750238b9d525239cd921080794a7f39819883cd22fcd7
TLSH
T1EEB01200041E00B1EE409357C002FC3AD3B101C00105107C8EDB1C8D0C5B0AC2355012
MD5 SHA1 SHA512 TLSH

Submit Download

version.ini

Path C:\Users\Admin\AppData\Local\Temp\version.ini
Size 7B
SHA256 62f7bf8f38c847be903e1ef5503a38e1ea7230c5945e9a0177e7410c802b812b
MD5 01371ee04e51a35ba33863f472e53b40
SHA1 9843008b34fd5d5ad815c946d7a02b3f175e1010
SHA512 fef2eb7a226fe71bf1b6315cbb6584ca80d2c776022875bb615bdf0cfb35ba9b58510074ae9e7edac1a455965db75f685e0eea10def348cb930f11f6f426474e
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1213512390\manifest.json
Size 80B
SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
MD5 3790d9257ba14f8be2ba08acf259a57f
SHA1 c54ab2e79d0ac9dc27425c7450e01ad593f02d60
SHA512 9568fef732369f06aafd8270638a38531a26f6f40a1c7c65fb7254eed36807789756e1c6efabaec86017b3decead2773de9ef5814650dbb334e6000ebd44a467
TLSH
T1A8A012605811E13310C403700260438243E01C112015240405461140218823713A3129
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1221327845\manifest.json
Size 108B
SHA256 8d58f4f4ef20dff6cd1c27243ddbe12d50713f2cf8bb22ba73696bbb04b36f4c
MD5 8e9357dbfee2ec0378af047a76d0b453
SHA1 794f8cce8fbea87b2b62162769bee35c319ebfa0
SHA512 85b5f52013803198e6af0ba37c9c3c66ce4bed4df5a7ee86ca1fc7c3658e2c973e92eed88fd36864d4743db44ad81fda7b24e70ef7530212e85b12c13d5db29d
TLSH
T1E2B012A13C007DBB1DCD03760060E3D783B63E0A1659190006DB6D422A4C9FB137253F
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping52_1823800530\manifest.json
Size 102B
SHA256 0ed889bea99f74fede865222f4cacca4277c63023db98efa666d42ba1f7f9502
MD5 329ad25b265a82c711c72c02a553a353
SHA1 a9a666d4182caad82edd399fdab141473670c5a7
SHA512 b81005847e76dc513b255b36704dec0ae84c922d23dc152cc42bb3eec9e18cb083e601bb90562b3f3c9b2ac540e801866f59277b9c43c0b97fd3e90b688f26c5
TLSH
T178B01220EC10B4B3000403AC0C6CC3C063372F032C4079180DE59F84E80D9DBE071E29
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1984-152-0x00007FF814F10000-0x00007FF814F11000-memory.dmp

Download

memory/2072-284-0x00007FF815BF0000-0x00007FF815BF1000-memory.dmp

Download

memory/2072-285-0x00007FF815C00000-0x00007FF815C01000-memory.dmp

Download

memory/2428-373-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-361-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-374-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-372-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-371-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-370-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-369-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/2428-364-0x0000023CF08F0000-0x0000023CF08F1000-memory.dmp

Download

memory/3488-63-0x00007FF814F10000-0x00007FF814F11000-memory.dmp

Download