home

2037d4efa09ceed0a9f0f8ed.filasthrougher.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 2037d4efa09ceed0a9f0f8ed.filasthrougher.ru is registered by proxy through REGRU-RU and was originally registered in May of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Wednesday, May 18, 2016

Expires date:
Thursday, May 18, 2017

Root domain:
filasthrougher.ru

Whois:
1 filasthrougher.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCube.INFORMTO (M), PUP.InstallCube (M)
100.00%

File downloads found at URLs served by 2037d4efa09ceed0a9f0f8ed.filasthrougher.ru.

1 / 68      (PUP)
http://2037d4efa09ceed0a9f0f8ed.filasthrougher.ru/api/web/getInstaller?transaction_id=241371783&token=4758ad4013c70bf156afdb3c0ca94e8f&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (corel_draw_graphic_suite_x4.exe)

1 / 68      (PUP)
http://2037d4efa09ceed0a9f0f8ed.filasthrougher.ru/api/web/getInstaller?transaction_id=241379463&token=fea8d80af8352f9991c9ebbf641248ab&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (grand_theft_auto_3.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.