popup

Report - update.exe

Gen1 Emotet Generic Malware EnigmaProtector Malicious Library .NET framework(MSIL) UPX Downloader PE File .NET EXE PE32 JPEG Format DLL OS Processor Check CAB PE64
  1. Resubmit analysis
  2. Detailed report
ScreenShot
Created 2025.04.21 13:51 Machine s1_win7_x6403
Filename update.exe
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
AI Score
3
 Behavior Score
5.0
ZERO API file : mailcious
VT API (file) 26 detected (Lazy, Save, malicious, confidence, Attribute, HighConfidence, high confidence, GameTool, AGen, BG potentially unsafe, MalwareX, Misc, Vebzenpak, dGZlOgx9BXGM4SS2Fg, Static AI, Malicious PE, Detected, Wacapew, Androm, susgen)
md5 cb8cb16aa24029b84a3c40b2d61e3eb0
sha256 c7cdd2f873541ea8719b50f54bb624d725c3a2df5a9743b30d3d145345b273b6
ssdeep 196608:r88mbmIklyu9YIk1Ig7HM311ytQJ15kP43:tw0hh3v3T3
imphash f34d5f2d4577ed6d9ceec516c1f5a744
impfuzzy 3:rGsLdAIEK:tf
  Network IP location

Signature (9cnts)

Level Description
danger Connects to an IP address that is no longer responding to requests (legitimate services will remain up-and-running usually)
warning Drops 215 unknown file mime types indicative of ransomware writing encrypted files back to disk
warning File has been identified by 26 AntiVirus engines on VirusTotal as malicious
watch Communicates with host for which no DNS query was performed
notice Drops an executable to the user AppData folder
notice HTTP traffic contains suspicious features which may be indicative of malware related traffic
notice Performs some HTTP requests
notice The binary likely contains encrypted or compressed data indicative of a packer
info This executable has a PDB path

Rules (24cnts)

Level Name Description Collection
danger Win32_Trojan_Emotet_2_Zero Win32 Trojan Emotet binaries (download)
danger Win32_Trojan_Emotet_RL_Gen_Zero Win32 Trojan Emotet binaries (download)
danger Win32_Trojan_Gen_1_0904B0_Zero Win32 Trojan Emotet binaries (download)
warning EnigmaProtector_IN EnigmaProtector binaries (download)
warning Generic_Malware_Zero Generic Malware binaries (download)
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (download)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch Network_Downloader File Downloader binaries (download)
watch UPX_Zero UPX packed file binaries (download)
watch UPX_Zero UPX packed file binaries (upload)
watch Win32_Trojan_PWS_Net_1_Zero Win32 Trojan PWS .NET Azorult binaries (download)
watch Win32_Trojan_PWS_Net_1_Zero Win32 Trojan PWS .NET Azorult binaries (upload)
info CAB_file_format CAB archive file binaries (download)
info Is_DotNET_EXE (no description) binaries (download)
info Is_DotNET_EXE (no description) binaries (upload)
info IsDLL (no description) binaries (download)
info IsPE32 (no description) binaries (download)
info IsPE32 (no description) binaries (upload)
info IsPE64 (no description) binaries (download)
info JPEG_Format_Zero JPEG Format binaries (download)
info OS_Processor_Check_Zero OS Processor Check binaries (download)
info PE_Header_Zero PE File Signature binaries (download)
info PE_Header_Zero PE File Signature binaries (upload)

Network (362cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_location.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/warning.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a06r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/axpap_axp.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/warning_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Heil_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/mb_kill.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/12.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a11r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pet_equip.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pettraining_slot.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_pro_lose_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/warning_r2.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/nation_choice01.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/tab_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_pro_win.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemequip_holding.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/03.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/guild_invite.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_4.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_target.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/overloadmastery_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/12r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_cap_lose_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/stellar_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/hurryup.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/essencerune_requirement.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/hurryup_r2.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_G.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/11.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/essencerune_equip.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/combostart.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/help.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Skill_Enhanced_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/ChallengeMissionMsg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/01.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/balloon_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/21r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemkind_equip.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Awaken_auramode_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemtake_inven.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/chat_cmd.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/battlebasic_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/blendedrune_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/char_auto.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/huuryup_loop.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/language.dec
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a13r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/13.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/gps_icon.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/combo_continue.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/extract_result.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/mercenary_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_arena.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/mb_victory.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemlook_restore.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a03.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Collection_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_pro_win.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_pro_lose.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_info.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemequip_Rclick.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/partyleave_dungeon.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a02.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/15.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_9.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/move.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pvp_guild.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/cabalmainen.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/iptdict.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/pvp_bteam_win.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/klog.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_death_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CC_O.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy_y.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_3.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/chat_enter.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/menu_basicmenu.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/chat_btn.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/cabalmain.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemlook_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/honor_medal_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/11.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/14.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/costume_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_cap_lose.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/extra_obj_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/VC_redist.x64.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/npcshop_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/extract_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_called.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/partyinvite_02.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/pvp_ateam_win_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/dxwebsetup.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/09r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/natives_x64.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a14r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_2.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemup_auto.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/test.txt
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a12r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/nation_blacktransmuter.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/03r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/blendedrune_apply.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy_a.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/char_C.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/BaseChar.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a21r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/petup_etc.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_S.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/craft_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/mb_death.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_ready.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/NPCstore_control02.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/04.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/gpa_nationwarp.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemup_use.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/10.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/_start.bat
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/VC_redist.x86.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/D3DX9_43.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/partyleave_leave.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/cont3_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_QD.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/pvp_ateam_win.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CC_M.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/12.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a10r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_21.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_pointr.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/tewordbreak.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_called.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemlook_item.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/11r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start_t.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/ui.dts
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a02r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a11.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_DX.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/drop_list_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/nation_othernation.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/honor_take.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/16_01.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/gps_difficulty.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/combo.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/caz_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/04r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/02.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_victory_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a08r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/hurryup.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_cap_win.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a01.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/forcewing_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/Nsmith_requirement.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_arenago.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/buddy_block.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/hurryup_loop.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a07.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a01r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_kill.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/NPCstore_control03.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a21.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/petup_lvup.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/mb_waiting.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_ready_on.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/03.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/battlebasic_auto.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a06.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/14r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_take.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_entry.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/00.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemuse_inven.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/seteffect_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_called_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_defeat.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/missionbattle_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemtake.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/02r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/achievement_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/libogg.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/06.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a05r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_victory.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/d3dx9_30.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/etcup_enhancer.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/mercenary_ui.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/EventPass_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy_d.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/byPassWinD.bat
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a00r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/act_select.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/axpap_ap.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/honor_advantage.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_H.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/angle_zoom.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_point.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/bascismith_up.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_search.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/mb_defeat.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a12.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemkind_itemlv.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start_s.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/NPCstore_control01.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/script_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemuse_qslot.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/hurryup_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start_a.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_favorite.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/13r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_A.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/language.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/etcup_slotext01.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_A.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy_e.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemup_upcore.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_fail.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/UI/Icon/Loading.dds
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a00.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/09.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/04.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/pvpbattle_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a03r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemlook_duration.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/01r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_cap_win.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_C.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/war_start.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/buddy_add.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemup_fail.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_pro_lose.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/02.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/08r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/gps_m.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_18.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemequip_unable.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/00r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/06r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_w.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CC_B.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a08.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/01.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/nation_choice02.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/angle_key_new.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/cont2_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/pvp_bteam_win_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/menu_chrmenu.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a13.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dungeon_MD.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/06.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/07.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/gps_warp.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/cabal_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/basicsmith_transmuter.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/natives_x86.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/combo_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_I.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a05.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/char_lvup.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/keymap_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/tip.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_defeat_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pvp_try.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a04r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59//resources.xml
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/option.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/fmodex.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/blendedrune_del.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/libvorbis.dll
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/etcup_bike.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_2.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/guild_lvup.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/05.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a09.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/bossarena_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_R.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a14.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_kill_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a04.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_raedy_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/21.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/warning.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_requirement.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a10.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_I.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/guild_requirement.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/09.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/huuryup.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a09r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Myth_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/dummy.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_N.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/battlemode_1.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/21.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/battlemode_2.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/angle.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/10r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/LoginUi.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/warning_loop.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CC_C.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/script.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/05.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/combo_use01.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_T.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/a07r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemlook_tooltip.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_M.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/guild_warehouse.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/partyoption.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_cap_lose.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/cont_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/partyinvite_01.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_info.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemup_target.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/act_Lclick.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/pvp_bteam_win.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/combo_use02.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_1.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_waiting_T.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/blendedrune_equip.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/cabal_msg.dec
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/etcup_slotext02.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/MissionFestival_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/05r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_start_mark.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/auramode.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/07.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/Nsmith_register.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/essencerune_del.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_average.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemkind_use.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/mb_death.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/meritsystem_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/cabalmainth.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_pro_win_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/07r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/pvp_ateam_win.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_B.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pet_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/10.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/itemopt_basic.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/DungeonBossKill_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/agentshop_register.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/08.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/pettraining_howto.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/fefx/16_02.efx
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/08.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/FieldBossRaid_msg.enc
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/updates/Guild/1_6.gld
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/UI/Help/angle_key.jpg
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/cabal.exe
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/CS_O.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
http://45.91.133.59/client/Data/Aanguage/Thai/Font/war_cap_win_r.ebs
whois
NL Legaco Networks B.V. 45.91.133.59 clean
185.215.113.41
whois
Unknown 185.215.113.41 malware
185.215.113.59
whois
Unknown 185.215.113.59 mailcious
45.91.133.59
whois
NL Legaco Networks B.V. 45.91.133.59 mailcious

Suricata ids

ET DROP Spamhaus DROP Listed Traffic Inbound group 32
ET INFO Executable Download from dotted-quad Host
ET POLICY PE EXE or DLL Windows file download HTTP
ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download
ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response
ET INFO Dotted Quad Host DLL Request

PE API

IAT(Import Address Table) Library

mscoree.dll
 0x402000 _CorExeMain

EAT(Export Address Table) is none


Similarity measure (PE file only) - Checking for service failure