home

download.adobe-flash.eu

Domain Information

Server location:
New York, United States (US)

ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US

Root domain:
adobe-flash.eu

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.DownloadAssistant.Bundler (M)
66.67%

Dr.Web
JS.Muldrop.30
33.33%

The domain download.adobe-flash.eu has been seen to resolve to the following 2 IP addresses.

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
January 28, 2016

104.131.2.201
useast.gtdlrfwd.com
July 23, 2015

File downloads found at URLs served by download.adobe-flash.eu.

1 / 68      (Adware)
http://download.adobe-flash.eu/v2/click/jsttxfb6/?d=http://adobe-flash.eu/files/adobe_flash_player.exe&key=fb57713401040ee80cb85560f292d69ee03c779a3c567123564e27a76e856ed2&sid=flashnet&uid=&affiliate_image=&product_image=http://adobe-flash.eu/.../flash-product.png&icon=http://adobe-flash.eu/.../flash.ico&n=Adobe Flash Player&filename=adobe_flash_player  (05d339c9ae4d3d11e7ab92d190de42e4)

1 / 68      (Adware)
http://download.adobe-flash.eu/v2/click/fimjsqkl/?d=http://adobe-flash.eu/files/adobe_flash_player.exe&key=fb57713401040ee80cb85560f292d69ee03c779a3c567123564e27a76e856ed2&sid=flashnet&uid=&affiliate_image=&product_image=http://adobe-flash.eu/.../flash-product.png&icon=http://adobe-flash.eu/.../flash.ico&n=Adobe Flash Player&filename=adobe_flash_player  (700a5351afca1a391196e87f9d270a21)

1 / 68      (inconclusive)
http://download.adobe-flash.eu/v2/click/fimjsqkl/?d=http://adobe-flash.eu/files/adobe_flash_player.exe&key=fb57713401040ee80cb85560f292d69ee03c779a3c567123564e27a76e856ed2&sid=flashnet&uid=&affiliate_image=&product_image=http://adobe-flash.eu/.../flash-product.png&icon=http://adobe-flash.eu/.../flash.ico&n=Adobe Flash Player&filename=adobe_flash_player  (adobe_flash_player.jse)

The following 14 files have been seen to comunicate with download.adobe-flash.eu in live environments.

TCP » 104.131.2.201:80
setup.exe (Google Chrome by Download Assistant)

TCP » 104.131.2.201:80
setup.exe (DVD Shrink by Download Publisher)

TCP » 104.131.2.201:80
setup.exe (Java Runtime by Download Assistant)

TCP » 104.131.2.201:80
setup.exe (WinZip by Download Assistant)

TCP » 104.131.2.201:80
Microsoft_Security_Essentials_Setup.exe (Microsoft Security Essentials by Download Assistant)

TCP » 104.131.2.201:80
Setup.exe (Java Runtime by Download Manager)

TCP » 104.131.2.201:80
Avast_Setup_2015.exe (Avast by Download Assistant)

TCP » 104.131.2.201:80
googlechromeupdatesetup.exe (Google Chrome by Install Helper)

TCP » 104.131.2.201:80
setup_adobe_reader.exe (Adobe Reader by Install Helper)

TCP » 104.131.2.201:80
AdobeReaderSetup-22796854.exe (Adobe Reader by Install Helper)

TCP » 104.131.2.201:80
chrome_installer.exe (Google Chrome Browser by DownloadAsst_New)

TCP » 104.131.2.201:80
microsoftsilverlightupdatesetup.exe (Microsoft Silverlight by Download Assistant)

TCP » 104.131.2.201:80
Firefox Setup.exe (Firefox by Install Assistant)

TCP » 104.131.2.201:80
malwarebytes anti-malware setup.exe (Malwarebytes Anti-Malware by Download Assistant)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.