home

fileshare1030.dfiles.ru

Songul Corporation

Domain Information

The domain fileshare1030.dfiles.ru registered by Songul Corporation was initially registered in February of 2009 through R01-RU. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Friday, February 20, 2009

Expires date:
Monday, February 20, 2017

ASN:
AS5577 ROOT root SA,LU

Root domain:
dfiles.ru

Whois:
2 dfiles.ru records

The domain fileshare1030.dfiles.ru has been seen to resolve to the following IP address.

94.242.227.142
ip-static-94-242-227-142.as5577.net
December 19, 2015

File downloads found at URLs served by fileshare1030.dfiles.ru.

0 / 68
http://fileshare1030.dfiles.ru/auth-146772937581aabbfb87b96f32606f5c-5.77.174.127-2613068735-165206437-guest/.../Sobeit by Slono Boyko.zip  (111a9655b71a7af1cd3b72d6807a83d4)

0 / 68
http://fileshare1030.dfiles.ru/auth-146990381996557ce123a7471c3ceee8-82.199.207.248-2636050396-164796106-guest/.../?????????????? Dll.rar  (восстановитель dll.rar)

0 / 68
http://fileshare1030.dfiles.ru/auth-1454569485184efd981a9b38925532ef-109.238.239.150-2457537322-150106628-guest/.../??????? - ??????????????.rar  (смертин - электротехника.rar)

0 / 68
http://fileshare1030.dfiles.ru/auth-1466676008c4c4633938b954d31eb513-46.36.71.42-2601962749-162208995-guest/.../MaxPayne3.exe  (45d6d14d444419a33e4a2a6e79c4c42e)

0 / 68
http://fileshare1030.dfiles.ru/auth-14664424302a23170d849b60a63e32c3-88.119.45.183-2599453607-165403328-guest/.../GTAIV.exe  (98ce345523dc762ecae8327498eeddf0)

0 / 68
http://fileshare1030.dfiles.ru/auth-1466181364064005d6236a17ecb298ce-91.221.154.109-2596428830-59192730-guest/.../ADVDC.4.0.1.KOMAP.NET.RU_USDE.RU.exe  (8bdd20ee9da5e86693a696524302c6a1)

1 / 68      (Malware)
http://fileshare1030.dfiles.ru/auth-1458493493a2a528fa27acadd3efb085-195.49.206.245-2505692313-151758327-guest/.../?????.exe  (прога.exe)

0 / 68
http://fileshare1030.dfiles.ru/auth-145483693019bf24782ecad016e9915e-46.172.239.30-2461230163-151921890-guest/.../vl-80_all.rar  (87806e042c6f122babb0d317b8034e85)

0 / 68
http://fileshare1030.dfiles.ru/auth-14516667478cee812897a7dacd775311-91.204.150.133-2415644149-160365765-guest/.../Spinler 100 - Lotus 80 M.Andretti.rar  (36ed51a596245079f3a3d10536dbfdd5)

0 / 68
http://fileshare1030.dfiles.ru/auth-14498413252aef37e6b54e4a9d63547b-37.131.222.76-2388863577-163217653-guest/.../GlazTV-Setup.exe  (4857e405a29156e03e5b221e51d2c705)

The following file have been seen to comunicate with fileshare1030.dfiles.ru in live environments.

TCP » 94.242.227.142:80
UCBrowser.exe (UC Browser by UCWeb)

URL:
http://fileshare1030.dfiles.ru/

Web server:
nginx

depositfiles.com

depositfiles.org

dfiles.eu

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.