home

24upgrade.freeinstallsoft.xyz

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
freeinstallsoft.xyz

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

F-Secure
Variant.MSILPerseus.30942
66.67%

Norman
Gen:Variant.MSILPerseus.30942
66.67%

Reason Heuristics
PUP.DigitalZ.Installer (M), PUP.OOOELEKT.Installer (M)
66.67%

ESET NOD32
MSIL/TrojanDownloader.Adload.AZ trojan
33.33%

The domain 24upgrade.freeinstallsoft.xyz has been seen to resolve to the following IP address.

163.172.197.165
163-172-197-165.rev.poneytelecom.eu
June 5, 2016

File downloads found at URLs served by 24upgrade.freeinstallsoft.xyz.

3 / 68      (Malware)
http://24upgrade.freeinstallsoft.xyz/dl.php?sdfgg=9esj4dWjCSiqP8SxWmRpeoyfP2UMcCr020S1UAiOIhA.&sub=235800&cid=5182845243&conversion_id=14631727465209&app_id=4&lp_id=1315&v=tribat&stub_id=305&v_id=1LgmvFnUIdxbFWEnbTVyrk3RduEetYUML5OOR35S8Xw.&lpp=w10*-*-*  (flash_player_setup.exe)

3 / 68      (PUP)
http://24upgrade.freeinstallsoft.xyz/dl.php?sdfgg=mwK9xqzoV7CJFZFuMzUljhhSqRfSzOS0OjpXu8EpXWQ.&cid=MTA4MHw1MjEyfFVTfDN8MXwxNTJfNl8xNDYzMjMwNjYzbWI2MzAyNjIyMjY2MV84OTF8YzNWaWFXUSpNVFV5fmN6SnoqVGtSVmFrMXFWVFJPYVUxNVRYcG5hazlFYTNobVJHTXdUV3BhT0ZaV1RqaE5NM2Q0WmtSYVprMVVVVEpOZWtsNlRVUlpNazB5TVdsT2FrMTNUV3BaZVUxcVNUSk9ha1k0V1ROd1MyVnBjRTVXTURCNFYxZHdSazVWTVRaVFZGSmFWa1ZzTmxkWWNISk9SVFZZVTIxNFQyVnRkRFJVVkVwR1pEQTFWV0Y2Vms1aGJHdDVWMnhrU21aRVRqVmxSM1I2V1ZkR05VNUVaSFJqYm5jfHw&conversion_id=14632306760292&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=NwdLrqdIDZeDFxnFdd3Jb1MlVpdtuwgR5Awpwg6LoME.&lpp=*-*-*  (flash_player_setup.exe)

3 / 68      (PUP)
http://24upgrade.freeinstallsoft.xyz/dl.php?sdfgg=mwK9xqzoV7CJFZFuMzUljhhSqRfSzOS0OjpXu8EpXWQ.&cid=MTA1MHw1MjEyfFVTfDN8MXx8Y3pKeipTa1ZETVRFMU1WOXFXblpqVVhwaFF6Tm1MVkJqVmxKQ1YzVTBVR0kyfHw&conversion_id=14631881659824&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=6SjpeuY4XFlMekDtWBQDQMi2MJ1gWJ01BO2Mdw2_3rQ.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://24upgrade.freeinstallsoft.xyz/dl.php?sdfgg=Iu5sv4NYl_zlgN93nmUm2GAAg-MzAOgMZUlagyP7ABQ.&cid=MTA1MHw1MjA1fFVTfDN8MXx8Y3pKeipTazFETVRFME5WOVBlbWxrTlRkdVMwWnpMVkJqVmxKQ1YzVTBVR0kyfHw&conversion_id=14634101434717&app_id=4&lp_id=1600&v=tribat&stub_id=305&v_id=JUwsHDBMB5Sclu2cWie4fHGXTuRa-_iSwDjTWswmCe8.&lpp=*-*-*  (adobe_flash_player.exe)

3 / 68      (Malware)
http://24upgrade.freeinstallsoft.xyz/dl.php?sdfgg=ww0ZyS3LXwXbcfAyYDv7Oa6aYcM6SogE5Pl-haYHK6c.&cid=[CLICK_ID]&sub=[3]&conversion_id=14631760536723&app_id=4&lp_id=1606&v=tribat&stub_id=305&v_id=g1wPsKyrYKgHcQ0MbNSFJ2ibb0y5o-fk1ABivakJKug.&lpp=*-*-*  (flash_player_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.