» alldown.b0.upaiyun.com
Overview
IPs Addresses (2)
Downloads (9)
Network (8)
Related Domains (18)

alldown.b0.upaiyun.com

Domain Information

Server location:

Virginia, United States (US)

ASN:

AS2914 NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US

Root domain:

The domain alldown.b0.upaiyun.com has been seen to resolve to the following 2 IP addresses.

firewall.systemarts.com

July 5, 2016

205-177-113-34.static.pccwglobal.net

June 27, 2016

File downloads found at URLs served by alldown.b0.upaiyun.com.

0 / 68

http://alldown.b0.upaiyun.com/testdll/.../0002200001.dll (f9535ece34b3d67c83e70895210a25db)

0 / 68

http://alldown.b0.upaiyun.com/testdll/.../0000600001.dll (85fd16bce74eb3cae98732fc3ceed456)

0 / 68

http://alldown.b0.upaiyun.com/testdll/.../num.dll (d0bed478685cdaf1da6ec630126cfb67)

0 / 68

http://alldown.b0.upaiyun.com/1/2/3/mydll/.../jlcxscBaiduX64.dll (f60bcdb10663c5433d019accff83b131)

0 / 68

http://alldown.b0.upaiyun.com/1/.../testx.exe (7bb51177c23a61c445f25c429b4b040f)

0 / 68

http://alldown.b0.upaiyun.com/1/2/3/mydll/.../jlcxsc360X64.dll (48aefbc0254c2f298b6f3e8dc7e8b693)

0 / 68

http://alldown.b0.upaiyun.com/1/2/3/mydll/.../jlcxscBaiduX64.dll (4327bc04c5a4f431f413528e78ccc1ea)

0 / 68

http://alldown.b0.upaiyun.com/1/2/3/mydll/.../jlcxsc360X64.dll (54a37d9483c81e0833c2671b4bfec989)

0 / 68

http://alldown.b0.upaiyun.com/1/2/3/.../0002200001.dll (f9535ece34b3d67c83e70895210a25db)

The following 8 files have been seen to comunicate with alldown.b0.upaiyun.com in live environments.

TCP » 165.254.60.146:80

TCP » 165.254.60.146:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 165.254.60.146:443

TCP » 165.254.60.146:443

TCP » 165.254.60.146:80

TCP » 165.254.60.146:80

TCP » 165.254.60.146:80

-¸-+¦ª-¸-+¦µ.exe (liuliangbao by www.liuliangbao.cn)

TCP » 165.254.60.146:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 165.254.60.146:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

Related Domains

3c-automation.com.cn

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.