home

files4.filefly513.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
filefly513.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

VIPRE Antivirus
DownloadAdmin
100.00%

Reason Heuristics
PUP.DownloadAdmin.SuperCli.Installer (M)
100.00%

The domain files4.filefly513.com has been seen to resolve to the following 4 IP addresses.

104.96.221.112
a104-96-221-112.deploy.static.akamaitechnologies.com
July 23, 2016

104.96.221.80
a104-96-221-80.deploy.static.akamaitechnologies.com
July 23, 2016

23.220.148.8
a23-220-148-8.deploy.static.akamaitechnologies.com
July 3, 2016

23.220.148.19
a23-220-148-19.deploy.static.akamaitechnologies.com
July 3, 2016

File downloads found at URLs served by files4.filefly513.com.

2 / 68      (PUP)
http://files4.filefly513.com/dl-pure/1200355/.../?bc=1200355&checksum=131962035&cb=-58818248&usefilename=true&executableroutePath=1202171&stub=true  (the-sims-freeplay_setup-118629151.exe)

2 / 68      (PUP)
http://files4.filefly513.com/dl-pure/1200355/.../?bc=1200355&checksum=134885557&cb=-1958740114&usefilename=true&executableroutePath=1202171&stub=true  (the-sims-freeplay_setup-118629151.exe)

The following 3 files have been seen to comunicate with files4.filefly513.com in live environments.

TCP » 104.96.221.112:80
plkbbbidibjhgcplclokadllebnkaled.crx

TCP » 104.96.221.112:80
fbmlgkfdggnbfingaidmaamfhnpiejcj.crx

TCP » 104.96.221.80:80
nkopijddpkmggacdghppacglggodkcod.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.