home

fastium.fr

Darkium Group OU

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Le Mans, Pays De La Loire within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI

Server location:
Pays De La Loire, France (FR)

ASN:
AS44976 HIWIT_AS AZNET s.a.r.l.,FR

Whois:
1 fastium.fr record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

NANO AntiVirus
Trojan.Win32.Downware.ctonas
100.00%

Reason Heuristics
PUP.Installer.DarkiumGroupOU.M
100.00%

Malwarebytes
PUP.Optional.SoftwareUpdate.A
100.00%

VIPRE Antivirus
Boxore
100.00%

Trend Micro House Call
Suspicious_GEN.F47V1107
100.00%

Dr.Web
Adware.Downware.1463
100.00%

G Data
Win32.Trojan-Dropper.BoxoreInject
100.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
100.00%

Avira AntiVirus
TR/Trash.Gen
100.00%

The domain fastium.fr has been seen to resolve to the following IP address.

194.150.236.156
ns04.hiwit.net
June 7, 2016

File downloads found at URLs served by fastium.fr.

9 / 68      (Adware)
http://fastium.fr/fastium-setup-fr.exe  (fastiumsetup.exe)

The following 21 files have been seen to comunicate with fastium.fr in live environments.

TCP » 194.150.236.156:80
Boxore.exe (Boxore by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
MediaStreamingAgent.exe (MediaStreamingAgent by Boxore OU)

TCP » 194.150.236.156:80
Boxore.exe (Boxore by Boxore OU)

TCP » 194.150.236.156:80
Boxore.exe (Boxore by Boxore OU)

TCP » 194.150.236.156:80
Boxore.exe (Boxore by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 194.150.236.156:80
MediaStreamingAgent.exe (MediaStreamingAgent by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
internetenhancer.exe (0174V7)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
Client.exe

TCP » 194.150.236.156:80
offerboxhttpproxy.exe (OfferBoxHTTPProxy by Aedge Performance BCN SL)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
boxore.exe (Boxore Client by Boxore OU)

TCP » 194.150.236.156:80
Boxore.exe (Boxore by Boxore OU)

 
Latest 20 of 21 files

URL:
http://fastium.fr/

Google Analytics:
UA-39793185

Title:
“Fastium”

Description:
“Fastium”

Web server:
nginx/1.8.0

fastium.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.