home

edba6994c60cd44543a2511ffd0e43c5.sjkfhksdfh.ru

Private Person  (Proxy Registrant)

Domain Information

The domain edba6994c60cd44543a2511ffd0e43c5.sjkfhksdfh.ru is registered by proxy through REGRU-RU and was originally registered in September of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Monday, September 14, 2015

Expires date:
Wednesday, September 14, 2016

Root domain:
sjkfhksdfh.ru

Whois:
1 sjkfhksdfh.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize
100.00%

File downloads found at URLs served by edba6994c60cd44543a2511ffd0e43c5.sjkfhksdfh.ru.

1 / 68      (Adware)
http://edba6994c60cd44543a2511ffd0e43c5.sjkfhksdfh.ru/.../?f=YTo2OntzOjc6InNpdGVfaWQiO3M6NDoiMTUxNyI7czo4OiJmaWxlX3VybCI7czozMToiaHR0cHM6Ly95YWRpLnNrL2QvSFJuU0ZmOTlnNEw4YiI7czo5OiJmaWxlX25hbWUiO3M6MTM6Ikp1bXBzdGFydC5leGUiO3M6OToiZmlsZV90eXBlIjtzOjU6InNldHVwIjtzOjk6ImZpbGVfc2l6ZSI7czo3OiI3MDAwMDAwIjtzOjY6InJhbmRvbSI7ZDowLjYzMTYzNjc5Mzk1ODAyMzI7fTs  (jumpstart.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.