» 24.upgrade4secure.com
Overview
Analysis
IPs Addresses (1)
Downloads (3)
Related Domains (9)

24.upgrade4secure.com

Domain Information

Server location:

Virginia, United States (US)

ASN:

AS30633 LEASEWEB-US - Leaseweb USA, Inc.,US

Root domain:

upgrade4secure.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.AstroDeliveryFriedCookie.R, PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)

100.00%

Dr.Web

Trojan.InstallCore.15

33.33%

ESET NOD32

Win32/InstallCore.RZ potentially unwanted application

33.33%

VIPRE Antivirus

Threat.4786018

33.33%

Sophos

PUA 'InstallCore ToDownload'

33.33%

K7 AntiVirus

Unwanted-Program

33.33%

Comodo Security

TrojWare.Win32.InstallCore.FDA

33.33%

Avira AntiVirus

ADWARE/InstallCore.Gen9

33.33%

G Data

Win32.Application.InstallCore.DI

33.33%

AVG

Generic

33.33%

The domain 24.upgrade4secure.com has been seen to resolve to the following IP address.

198.7.56.107

January 24, 2015

File downloads found at URLs served by 24.upgrade4secure.com.

1 / 68 (Adware)

http://24.upgrade4secure.com/download.php?conversion_id=14172944909199&site_id=612&app_id=4&lp_id=614&v=ico&stub_id=62&v_id=a69e979e1709724f4a7d7db4d650f169&dist_id=355&channel=mrk_grf&dast=YnJzcj0zODQxJmJvPTImY2lwaWQ9MjAyMjA3MCZjaXNpZD1CNTk4NjNBRjYzMDE4OTIxNDYyODE4MTQzJmNpcmlkPUI1OTg2M0FGNjMwMTg5MjIyMDkyNzc4NDUmc2xpZD0wJnN1YmlkPTIwMDE3OTUwNTYxOTAwMDAwMCZjaXVpZD0tNzI3NzIzNjMzODM0NjE0MzcwMCZzbz0yJmNyaWQ9MjkyNDQ3OCZleGNpZD0yMiZtbXQ9LTEmb3NpZD01MzMmY250cnk9ODAmY2ljbXA9NDYyODI4JmN1ND0xNyZwdWJpZD01OTU2OA== (adobe_flash_setup.exe)

1 / 68 (Adware)

http://24.upgrade4secure.com/download.php?conversion_id=14173630232208&site_id=612&app_id=4&lp_id=613&v=ico&stub_id=61&v_id=78da2d5f4060fd5afc14318d6e32ccad&dist_id=356&channel=mrk_frf&dast=YnJzcj0zODc2JmJvPTImc2xpZD0wJnN1YmlkPTIwMDAxOTYwNzQwODAwMDAwMCZzbz0yJmNpY21wPTQ2Mjc4OCZwdWJpZD0zMzkwNiZjdTQ9MTcmY2lwaWQ9MjAyMjA3MCZjaXNpZD02NUMwMjFCQUYzMTg4NjAxOTIxNzk1MDE5JmNpcmlkPTY1QzAyMUJBRjMxODg2MDI4OTQ0MzE0MTgmY2l1aWQ9NDk3MzgxMjAxNDUzMDUzNDc0OCZjcmlkPTI5NTc2MTgmZXhjaWQ9MjImbW10PS0xJm9zaWQ9NTM1JmNudHJ5PTcz (adobe_flash_setup.exe)

10 / 68 (Adware)

http://24.upgrade4secure.com/download.php?conversion_id=14173599705677&site_id=612&app_id=4&lp_id=613&v=ico&stub_id=61&v_id=c134593dab24f027aa06f141ca727b1b&dist_id=356&channel=mrk_frf&dast=YnJzcj0zODQxJmJvPTImY2lwaWQ9MjAyMjA3MCZjaXNpZD1GRTlBQkMyRjFCMzE5MTY0NTExNjI1OTA2MTMmY2lyaWQ9RkU5QUJDMkYxQjMxOTE2NDY5Njk4Njk3OTQmc2xpZD0wJnN1YmlkPTIwMDEwMjYwNzQxMDAwMDAwMCZjaXVpZD03MzYwMzY1OTMzNTc2NTY2MDEwJnNvPTImY3JpZD0yOTU3NjE4JmV4Y2lkPTIyJm1tdD0tMSZvc2lkPTUzMyZjbnRyeT03MyZjaWNtcD00NjI3ODgmY3U0PTE3JnB1YmlkPTQyODIy (adobe_flash_setup.exe)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.