home

LineageII.exe

Lineage 2 SW:IL Autoupdater

Shock-World.com

This is a setup program which is used to install the application. The file has been seen being downloaded from file-st12.karelia.ru.
Publisher:
Shock-World.com

Product:
Lineage 2 SW:IL Autoupdater

Version:
1.2.0.0

MD5:
612c746b97188a397db2a5c31872c032

SHA-1:
3392f59e39d145ff750b3de7b4c18b26319b29db

SHA-256:
5c885c585e4a72c9a81d7bde6ad8c22670138d66f82cea33051c6dc0dc051119

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:55:47 PM UTC  (today)

File size:
2.7 MB (2,803,200 bytes)

Product version:
1.2.0.0

Copyright:
Shock-World.com

Original file name:
LineageII.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\lineageii.exe

File PE Metadata
Compilation timestamp:
7/6/2015 12:25:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:63RaxDHEph80pZXxMOJTAUtulII8sJBwSt3piQdgT7Crfvh7Scv0Rq+sb+gznXnJ:u0AXRYN8sJaS1Lgyh2Rq+sEs

Entry address:
0x15040C

Entry point:
55, 8B, EC, 83, C4, F0, B8, A8, 87, 54, 00, E8, 18, A4, EB, FF, BA, 98, 04, 55, 00, 33, C0, E8, 50, E1, FE, FF, 84, C0, 74, 05, E8, 63, 64, EB, FF, A1, 6C, 69, 55, 00, 8B, 00, E8, DF, 60, FC, FF, A1, 6C, 69, 55, 00, 8B, 00, B2, 01, E8, D1, 7D, FC, FF, 8B, 0D, 58, 66, 55, 00, A1, 6C, 69, 55, 00, 8B, 00, 8B, 15, 70, 3C, 54, 00, E8, D1, 60, FC, FF, 8B, 0D, 80, 66, 55, 00, A1, 6C, 69, 55, 00, 8B, 00, 8B, 15, 20, 2D, 54, 00, E8, B9, 60, FC, FF, A1, 6C, 69, 55, 00, 8B, 00, E8, 05, 62, FC, FF, E8, 08, 64, EB, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.3 MB (1,373,696 bytes)

The file LineageII.exe has been seen being distributed by the following URL.

http://file-st12.karelia.ru/k626g8/20a0023ac4fd432051021501a01adeaa/.../LineageII.exe

Scan LineageII.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.