home

ngwin.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain ngwin.com is registered by proxy through ENOM, INC. and was originally registered in August of 2015. The hosted servers are located in Beauharnois, Quebec within Canada which resides on the OVH Hosting, Inc. network.
Registrar:
ENOM, INC.

Server location:
Quebec, Canada (CA)

Create date:
Friday, August 7, 2015

Expires date:
Monday, August 7, 2017

Updated date:
Monday, February 22, 2016

Whois:
2 ngwin.com records

The domain ngwin.com has been seen to resolve to the following 2 IP addresses.

192.99.63.220
wiziple.net
March 2, 2016

67.20.101.202
67-20-101-202.unifiedlayer.com
August 28, 2015

File downloads found at URLs served by ngwin.com.

0 / 68
http://ngwin.com/.../picpick_inst.exe  (b616e2f8765de8619e7d6bb798d7252d)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (9095100602e66617d061ef2a642a0156)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (picpick_inst_v4.1.3.exe)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (af2218714d7d0b323424ec04ed7dd121)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (9f3eeeeb44ae59c5a1247f7628205249)

0 / 68
http://ngwin.com/.../picpick_portable.zip  (f15a22e27d77d9475722aa0a54a276ab)

2 / 68      (false positives)
http://ngwin.com/.../picpick_inst.exe  (wrar420.exe)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (a20c7bc6d10645ed35452fa86150ac81)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (a53b4b0cce3388bbdc749857a27104fc)

36 / 68    (Malware)
http://ngwin.com/.../picpick_inst.exe  (ab91da4f13e94d0d47de9d03c8a50393)

0 / 68
http://ngwin.com/.../picpick_inst.exe  (40beeae3499b16b7409872329f356bde)

The following 19 files have been seen to comunicate with ngwin.com in live environments.

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NTeWORKS)

TCP » 67.20.101.202:80
picpick.exe (PicPick by NGWIN)

October 12, 2015
www.ngwin.com

URL:
http://ngwin.com/

Google Analytics:
UA-66571825

Title:
“PicPick - by NGWIN, All-in-one design tool, Screen Capture, Image Editor, Color Picker, Pixel Ruler and More”

Description:
“PicPick screen capture software enable you to grab an image on your computer screen, save, print, add effects, and share.”

Web server:
Apache (PHP/5.3.3)

Facebook:
Likes:  46
Shares:  34
Comments:  31

Statistics above are for the previous month of March 2024.

nteworks.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.