home

dl-vip.pcfaster.baidu.co.th

Domain Information

Server location:
Al Qahirah, Egypt (EG)

ASN:
AS36992 ETISALAT-MISR,EG

Root domain:
baidu.co.th

The domain dl-vip.pcfaster.baidu.co.th has been seen to resolve to the following 8 IP addresses.

104.193.88.96
July 4, 2016

180.76.10.155
June 25, 2016

180.76.10.134
June 7, 2016

103.235.44.79
June 7, 2016

105.203.253.152
host-105.203.253.152.etisalat.com.eg
June 2, 2016

200.229.203.152
April 14, 2016

63.217.158.152
63-217-158-152.static.pccwglobal.net
March 27, 2014

63.217.158.169
63-217-158-169.static.pccwglobal.net
December 27, 2013

File downloads found at URLs served by dl-vip.pcfaster.baidu.co.th.

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_GL.exe  (a50ae28019d87b0906f6df2ebb2db58e)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_019.exe  (baidu_secure_systemup_4.0.7.72269.exe)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_ID.exe  (48d35759735eb062ff6bcfddaae8ea87)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_GL.exe  (a78bed3540567437769cfc0f12cc7a7e)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini.exe  (1a408ed091e60f25580a75cf299c79c7)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup.exe  (2eaf5db29fe364575b952fddda63a874)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_050.exe  (9e40a36d89ac52f2942d674c57d701d7)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/Baidu_Cleaner_Setup_Mini_B142.exe  (6a3d75112f793ea8015ab6e8f0019806)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_019.exe  (719e0d9831dfa6958496592b51d31c93)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_ID.exe  (c42123b9ee35b2dc90fba5fcc38ffd5e)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_Nod32_222.exe  (d5c3ef5b2d43dfa66d126ca432d0f1c0)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_076.exe  (e9bff7e31e73cc539fdbcd22dd8e2882)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_291.exe  (07a9dc0696c3fe858c22997944593e84)

5 / 68      (inconclusive)
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_031.exe  (17ba1ed7001c5f6f5939c2724a24ebc5)

0 / 68
http://dl-vip.pcfaster.baidu.co.th/PC_Faster_Setup_Mini_074.exe  (c08f9f716a9cec0a6f20cb9b6c5e5c20)

The following 4 files have been seen to comunicate with dl-vip.pcfaster.baidu.co.th in live environments.

TCP » 105.203.253.152:80
re-markitry161.exe

TCP » 105.203.253.152:80
pc_faster_setup_mini_e18_s.exe (Baidu PC Faster by Baidu)

TCP » 105.203.253.152:80
pc_faster_setup_mini_056.exe (Baidu PC Faster by Baidu)

TCP » 105.203.253.152:80
baidu pc faster.exe (Baidu PC Faster by Baidu)

baidu.com

baidupcs.com

com.eg

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.