home

lineage2.patcher.ncsoft.com

NCSOFT Corporation

Domain Information

The domain lineage2.patcher.ncsoft.com registered by NCSOFT Corporation was initially registered in August of 1995 through GABIA, INC.. The hosted servers are located in Campbell, California within the United States which resides on the CDNetworks Inc. network.
Registrar:
GABIA, INC.

Server location:
California, United States (US)

Create date:
Friday, August 11, 1995

Expires date:
Wednesday, August 10, 2016

Updated date:
Thursday, July 16, 2015

Root domain:
ncsoft.com

Whois:
2 ncsoft.com records

The domain lineage2.patcher.ncsoft.com has been seen to resolve to the following 6 IP addresses.

174.35.43.5
June 8, 2016

174.35.43.4
June 8, 2016

174.35.43.6
April 10, 2016

174.35.43.3
April 10, 2016

66.114.52.19
December 29, 2013

66.114.52.13
December 29, 2013

File downloads found at URLs served by lineage2.patcher.ncsoft.com.

0 / 68
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (f092545c559a2b94af0e3a5450eac59e)

1 / 68
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (93e253cb4b902d710108da8c853ca715)

1 / 68
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (0b8838310945ad031eb749f64b9269fe)

10 / 68    (Infected)
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (8e5bab0a0a24187421af5ca3e117259f)

0 / 68
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (ce399f820c3b391acebe8eff3f50d796)

0 / 68
http://lineage2.patcher.ncsoft.com/.../Lineage2Installer.exe  (9f7abd162e4c739275eed9fc41ed97c8)

The following 18 files have been seen to comunicate with lineage2.patcher.ncsoft.com in live environments.

TCP » 66.114.52.19:80
1468567241.exe

TCP » 66.114.52.13:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.13:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.19:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.13:443
browser.exe (Browser)

TCP » 66.114.52.13:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.13:80
{6ae11fc7-5aaf-401c-8438-ef3bbc2bb80b}.exe (toolmini Application)

TCP » 66.114.52.13:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.13:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.13:80
Iminent.exe (Iminent)

TCP » 66.114.52.19:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.19:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

TCP » 66.114.52.13:80
kmplayer_3.7.0.109.exe

TCP » 66.114.52.13:80
Iminent.exe (Iminent)

TCP » 66.114.52.13:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.19:80
3.9.0.124_20140513022949.exe (The KMPlayer by PandoraTV)

 
Latest 20 of 40 files

URL:
http://lineage2.patcher.ncsoft.com/

Web server:
PWS/8.1.36

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.