» download.modhosting.net
Overview
Analysis
IPs Addresses (3)
Downloads (42)

download.modhosting.net

WHOISGUARD, INC. (Proxy Registrant)

Domain Information

The domain download.modhosting.net is registered by proxy through ENOM, INC. and was originally registered in August of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

WHOISGUARD, INC.

Registrar:

ENOM, INC.

Server location:

Virginia, United States (US)

Create date:

Tuesday, August 13, 2013

Expires date:

Saturday, August 13, 2016

Updated date:

Tuesday, July 14, 2015

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.

Root domain:

modhosting.net

Whois:

3 modhosting.net records

Scanner detections:

Detections (97% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.MaxSetup.J, PUP.Installer.DirectionSoftware.J, PUP.installCore.DirectionSoftware.Installer (M), PUP.installCore.Directio.Installer (M), PUP.installCore (M)

100.00%

Malwarebytes

PUP.Optional.InstallCore, PUP.Optional.Direction, PUP.Optional.InstallCore.A

24.32%

Agnitum Outpost

PUA.InstallCore

24.32%

VIPRE Antivirus

InstallCore.b, Threat.4788237, Threat.4150696

24.32%

Avira AntiVirus

ADWARE/InstallCore.Gen7, PUA/InstallCore.Gen7

24.32%

Sophos

Install Core Click run software, PUA 'Install Core'

24.32%

AVG

MalSign.InstallC, Ransomer

24.32%

ESET NOD32

Win32/InstallCore.MJ (variant), Win32/InstallCore.JE.gen potentially unwanted (variant)

18.92%

G Data

Win32.Application.InstallCore

16.22%

Dr.Web

Adware.InstallCore.133, Trojan.Packed.24524

8.11%

K7 AntiVirus

Unwanted-Program

8.11%

Vba32 AntiVirus

Downware.InstallCore

8.11%

Rising Antivirus

PE:Malware.XPACK-LNR/Heur!1.5594

8.11%

ESET NOD32

Win32/InstallCore.BY potentially unwanted application, Win32/InstallCore.JE.gen potentially unwanted application

5.41%

avast!

Win32:Adware-gen [Adw]

5.41%

The domain download.modhosting.net has been seen to resolve to the following 3 IP addresses.

54.221.234.56

ec2-54-221-234-56.compute-1.amazonaws.com

September 3, 2014

23.23.240.198

ec2-23-23-240-198.compute-1.amazonaws.com

September 3, 2014

54.225.220.83

ec2-54-225-220-83.compute-1.amazonaws.com

February 3, 2014

File downloads found at URLs served by download.modhosting.net.

1 / 68 (Adware)

http://download.modhosting.net/cid/1601888745.1397443170/download/dl.modhosting.net/.../Mod_Setup.exe (0dce292ae8b84e174a12ec5380c20083)

1 / 68 (Adware)

http://download.modhosting.net/cid/1754225761.1391198986/download/dl.modhosting.net/.../Mod_Setup.exe (043a4b0c762e5f4a5d54d92cd3a563df)

1 / 68 (Adware)

http://download.modhosting.net/cid/675848867.1389227155/download/dl.modhosting.net/.../Mod_Setup.exe (5abfe80d449aaa39d7daea45e660f1fe)

1 / 68 (Adware)

http://download.modhosting.net/cid/1183057824.1391571337/download/dl.modhosting.net/.../Mod_Setup.exe (838b6d896fcc6a0891a4be3b02b5a028)

1 / 68 (Adware)

http://download.modhosting.net/cid/358413670.1390002766/download/dl.modhosting.net/.../Mod_Setup.exe (eb68333d99eb1c302eeee1ca793e62f7)

1 / 68 (Adware)

http://download.modhosting.net/download/dl.modhosting.net/.../Mod_Setup.exe (4d2487ffa4af8fc61eae5d6195176736)

1 / 68 (Adware)

http://download.modhosting.net/cid/1101834150.1390949405/download/dl.modhosting.net/.../Mod_Setup.exe (38ac2bb8d37c9785acdeea2b29c385ab)

1 / 68 (Adware)

http://download.modhosting.net/cid/202449291.1388441011/download/dl.modhosting.net/.../Mod_Setup.exe (bb6c2f0dbea348388adfd9f32356c434)

1 / 68 (Adware)

http://download.modhosting.net/cid/1225712466.1388882031/download/dl.modhosting.net/.../Mod_Setup.exe (938d9ef373f29af8dfae76e7a7ae31b8)

1 / 68 (Adware)

http://download.modhosting.net/cid/1068809978.1387657857/download/dl.modhosting.net/.../Mod_Setup.exe (576f092a5fe29c4a9971430c6a7cb3dd)

1 / 68 (Adware)

http://download.modhosting.net/cid/1892585004.1388966331/download/dl.modhosting.net/.../Mod_Setup.exe (549575a74d09823ddbc828890ff090ce)

1 / 68 (Adware)

http://download.modhosting.net/cid/1078037552.1395872188/download/dl.modhosting.net/.../Mod_Setup.exe (cf660066bbb9888f6d78668717edd279)

1 / 68 (Adware)

http://download.modhosting.net/cid/448141569.1390086753/download/dl.modhosting.net/.../Mod_Setup.exe (da5b68883175071fccb052f0ca5efd5d)

1 / 68 (Adware)

http://download.modhosting.net/cid/602570379.1396358245/download/dl.modhosting.net/.../Mod_Setup.exe (8774e8e6c5cf5e4189a5d4b202abb240)

0 / 68

http://download.modhosting.net/cid/1164632221.1392502835/download/dl.modhosting.net/.../Mod_Setup.exe (fomm-36901-0-13-21.exe)

1 / 68 (Adware)

http://download.modhosting.net/cid/232657716.1396990495/download/dl.modhosting.net/.../Mod_Setup.exe (e376be220fb6aed45b0a53b7bd080ac5)

1 / 68 (Adware)

http://download.modhosting.net/cid/722909731.1389066745/download/dl.modhosting.net/.../Mod_Setup.exe (417b34939cb60e93d1546807158e21de)

1 / 68 (Adware)

http://download.modhosting.net/cid/664468087.1389488421/download/dl.modhosting.net/.../Mod_Setup.exe (9d2a939d6c657e64afb6858e06fcd4c1)

1 / 68 (Adware)

http://download.modhosting.net/cid/1032325443.1394990773/download/dl.modhosting.net/.../Mod_Setup.exe (0bb472081dc54939729c2ac11313b274)

1 / 68 (Adware)

http://download.modhosting.net/cid/1892859205.1391987564/download/dl.modhosting.net/.../Mod_Setup.exe (8e45e86bd789e4139dce8f94000bd904)

1 / 68 (Adware)

http://download.modhosting.net/cid/1312197643.1393723959/download/dl.modhosting.net/.../Mod_Setup.exe (253f6eff52750b2eea10e9c45c72325d)

1 / 68 (Adware)

http://download.modhosting.net/cid/561691865.1397080772/download/dl.modhosting.net/.../Mod_Setup.exe (b04d46fb8b985228fd092efa3cc7e2ca)

1 / 68 (Adware)

http://download.modhosting.net/cid/1285693887.1389471692/download/dl.modhosting.net/.../Mod_Setup.exe (7f94d96db9c0637d4dfad097c3b2c18b)

1 / 68 (Adware)

http://download.modhosting.net/cid/394332919.1389235065/download/dl.modhosting.net/.../Mod_Setup.exe (462b972528d1d4bc4efc506296c2993e)

19 / 68 (Adware)

http://download.modhosting.net/cid/1031884294.1396136968/download/dl.modhosting.net/.../Mod_Setup.exe (73c932682d60bfc7e178a2f11a66c356)

17 / 68 (Adware)

http://download.modhosting.net/cid/1353940612.1394424106/download/dl.modhosting.net/.../Mod_Setup.exe (09ebd8f0670360cf2fbabb2ef0912a17)

13 / 68 (Adware)

http://download.modhosting.net/cid/2043839941.1389064185/download/dl.modhosting.net/.../Mod_Setup.exe (e2945119fa3f5f58177bb512038c07ba)

0 / 68

http://download.modhosting.net/cid/1133992946.1388014311/download/dl.modhosting.net/.../Mod_Setup.exe (fomm-36901-0-13-21.exe)

0 / 68

http://download.modhosting.net/cid/1645995815.1393103784/download/dl.modhosting.net/.../Mod_Setup.exe (fomm-36901-0-13-21.exe)

9 / 68 (Adware)

http://download.modhosting.net/cid/911112573.1390414813/download/dl.modhosting.net/.../Mod_Setup.exe (2006abf808ea6307d1f289edf8bf4270)

Latest 30 of 42 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.