» bestsoft-ab.myjino.ru
Overview
Analysis
IPs Addresses (1)
Downloads (4)
Network (6)
Website Detail
Related Domains (9)

bestsoft-ab.myjino.ru

Avguro Technologies, Ltd.

Domain Information

The domain bestsoft-ab.myjino.ru registered by Avguro Technologies, Ltd. was initially registered in October of 2011 through R01-RU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.

Registrant:

Avguro Technologies, Ltd.

Registrar:

R01-RU

Server location:

Moscow City, Russia (RU)

Create date:

Wednesday, October 5, 2011

Expires date:

Wednesday, October 5, 2016

Root domain:

myjino.ru

Whois:

1 myjino.ru record

Google Safe Browsing:

unwanted

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Amonitize (M)

100.00%

The domain bestsoft-ab.myjino.ru has been seen to resolve to the following IP address.

81.177.165.31

srv163-h-st.jino.ru

April 17, 2016

File downloads found at URLs served by bestsoft-ab.myjino.ru.

1 / 68 (Adware)

http://bestsoft-ab.myjino.ru/go.php?url=http://.../wotspeak_modpack.zip&name=wotspeak&size=120 (wotspeak.exe)

1 / 68 (Adware)

http://bestsoft-ab.myjino.ru/go.php?url=http://.../stats_in_battle_v1.1.zip&name=StatsInBattle_v1.1&size=1 (statsinbattle-v1.1.exe)

1 / 68 (Adware)

http://bestsoft-ab.myjino.ru/go.php?url=http://.../wotspeak_modpack.zip&name=wotspeak&size=120 (wotspeak.exe)

1 / 68 (Adware)

http://bestsoft-ab.myjino.ru/go.php?url=http://.../sbornik_chitov.zip&name=??????? ?????&size=23 (sbornik-chitov.exe)

The following 6 files have been seen to comunicate with bestsoft-ab.myjino.ru in live environments.

TCP » 81.177.165.31:80

7eda.tmp.exe

TCP » 81.177.165.31:80

produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 81.177.165.31:80

onlineguardian-v2.exe

TCP » 81.177.165.31:80

chromesetup.exe (ProductNames by Software company)

TCP » 81.177.165.31:80

produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 81.177.165.31:80

online-guardian-v2.0.9.exe

URL:

http://bestsoft-ab.myjino.ru/

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.