home

cfile235.uf.daum.net

Kakao Corp.

Domain Information

The domain cfile235.uf.daum.net registered by Kakao Corp. was initially registered in March of 1996 through NETPIA.COM, INC.. The hosted servers are located in Seoul, Seoul-T'Ukpyolsi within Korea which resides on the Asia Pacific Network Information Centre network.
Registrar:
NETPIA.COM, INC.

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

Create date:
Tuesday, March 5, 1996

Expires date:
Friday, March 6, 2020

Updated date:
Thursday, November 19, 2015

ASN:
AS3786 LGDACOM LG DACOM Corporation,KR

Root domain:
daum.net

Whois:
2 daum.net records

The domain cfile235.uf.daum.net has been seen to resolve to the following 5 IP addresses.

114.108.157.208
December 15, 2015

66.114.52.19
June 26, 2015

66.114.52.5
June 26, 2015

174.35.76.20
May 4, 2015

174.35.73.105
May 4, 2015

File downloads found at URLs served by cfile235.uf.daum.net.

0 / 68
http://cfile235.uf.daum.net/.../257DC937541BFDC508155A  (d4c3530b-072e-73c0-5c45-aabc02e4b4c5_1d1e4823406101e)

0 / 68
http://cfile235.uf.daum.net/.../177159164C32BFE11B3155  (월드컵의 미인.exe)

0 / 68
http://cfile235.uf.daum.net/.../134BC4424F82E16B01880D  (re lapiz m 28 by bunnybell @ swl.rar)

0 / 68
http://cfile235.uf.daum.net/.../1911A6384DC8AE8F05761F  (아저씨.hwp)

1 / 68      (Malware)
http://cfile235.uf.daum.net/.../220719465159ADAD0529C1  (project1-오스트리아 짤즈 캄마굿4.exe)

2 / 68      (inconclusive)
http://cfile235.uf.daum.net/.../11529C0D4B6E9019458FD1  (sfc_super_robot_wars_4_kai.part1.exe)

7 / 68      (PUP)
http://cfile235.uf.daum.net/.../2539FD495343C53B2ACF97  (12-울타리11378_setup.exe)

The following 22 files have been seen to comunicate with cfile235.uf.daum.net in live environments.

TCP » 66.114.52.19:80
1468567241.exe

TCP » 66.114.52.5:80
tools_update.exe

TCP » 66.114.52.5:80
1468567241.exe

TCP » 66.114.52.5:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.105:80
tools_update.exe

TCP » 66.114.52.5:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.5:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.73.105:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.19:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 174.35.73.105:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.105:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 174.35.73.105:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

TCP » 66.114.52.19:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.19:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

 
Latest 20 of 60 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.