home

rf-xtrap-patch-jp2.logickorea.co.kr

Domain Information

Server location:
California, United States (US)

ASN:
AS36408 CDNETWORKSUS-02 CDNetworks Inc.

Root domain:
logickorea.co.kr

The domain rf-xtrap-patch-jp2.logickorea.co.kr has been seen to resolve to the following 4 IP addresses.

66.114.52.17
May 17, 2016

174.35.27.72
May 17, 2016

174.35.27.76
May 16, 2016

174.35.27.73
May 16, 2016

File downloads found at URLs served by rf-xtrap-patch-jp2.logickorea.co.kr.

0 / 68
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../psapi.dll  (b79041843539564904144ff5b5c5cffa)

1 / 68      (inconclusive)
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../XTrapExt.dll  (79f97b31cd7607a429292daca5562dd9)

1 / 68
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../XTrapVa.dll  (07869afea7eb8190ec5aa48401f6141f)

0 / 68
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../psapi.dll  (b79041843539564904144ff5b5c5cffa)

1 / 68      (inconclusive)
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../XTrapExt.dll  (79f97b31cd7607a429292daca5562dd9)

0 / 68
http://rf-xtrap-patch-jp2.logickorea.co.kr/PatchData/XTrap_Patch/.../XTrapVa.dll  (78658bad7c4ccc1adbdf58b21af04942)

The following 29 files have been seen to comunicate with rf-xtrap-patch-jp2.logickorea.co.kr in live environments.

TCP » 174.35.27.72:80
1468567241.exe

TCP » 174.35.27.73:80
1468567241.exe

TCP » 174.35.27.76:80
1468567241.exe

TCP » 66.114.52.17:80
1468567241.exe

TCP » 174.35.27.72:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.17:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.72:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.27.73:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 174.35.27.73:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.72:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 174.35.27.76:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.73:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.72:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.17:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.73:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 174.35.27.72:80
appsoft.exe (KBGX9C8ZY by KBGX9C)

TCP » 174.35.27.72:80
kmplayer-3.7.0.109-6295.exe

 
Latest 20 of 82 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.