home

hipershare.com

Corp New Ventures Services

Domain Information

The domain hipershare.com registered by Corp New Ventures Services was initially registered in January of 2016 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
ATLANTICFRIENDNAMES.COM LLC

Server location:
Arizona, United States (US)

Create date:
Friday, January 22, 2016

Expires date:
Sunday, January 22, 2017

Updated date:
Friday, January 29, 2016

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Whois:
2 hipershare.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Amonitize, PUP.Amonitize.Deyyazilimveinternethizmetlerisanticsti.Installer (M)
100.00%

Sophos
Generic PUA PB, Generic PUA NL, Generic PUA EM, Generic PUA NF, Generic PUA LK, Generic PUA FI, Generic PUA IM
87.50%

Avira AntiVirus
Adware/Amonetize.568024, TR/Agent.568024, Adware/Joedown.568536, Adware/Joedown.570584, Adware/Joedown.569048, Adware/Joedown.569048.1
87.50%

ESET NOD32
MSIL/Adware.Joedown (variant)
87.50%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, Trojan-Dropper.Win32.Agent, not-a-virus:AdWare.MSIL.Agent
75.00%

Fortinet FortiGate
Adware/Joedown, W32/Agent.A!tr, Adware/Agent
75.00%

McAfee
Artemis!89BFE86FF4F9, Artemis!2E110BE725A5, Artemis!71C2BB8C0EAC, Artemis!ECA70284EAAA, Artemis!8E3EB3D1936B, Artemis!34DE4F606467
75.00%

Trend Micro House Call
Suspicious_GEN.F47V1115, Suspicious_GEN.F47V1210, Suspicious_GEN.F47V1217, Suspicious_GEN.F47V1223, Suspicious_GEN.F47V0107
75.00%

AVG
Generic
62.50%

Dr.Web
Trojan.KillFiles.18730
50.00%

Comodo Security
ApplicUnwnt
37.50%

G Data
Win32.Application.Agent.JURJH3, Win32.Application.Agent.C0VTDJ, Win32.Application.Agent.A3LZ9Z
37.50%

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen, Win32/Virus.Adware.b3d
37.50%

K7 AntiVirus
Adware , Unwanted-Program
25.00%

VIPRE Antivirus
Trojan.Win32.Generic
25.00%

The domain hipershare.com has been seen to resolve to the following 3 IP addresses.

204.11.56.48
February 1, 2016

104.27.131.182
October 13, 2015

104.27.130.182
October 13, 2015

File downloads found at URLs served by hipershare.com.

1 / 68      (Adware)
http://hipershare.com/.../downloader.aspx?s=3&p=10446&filename=PowerPointViewer(60.6MB)  (powerpointviewer(60.6mb)_10446.exe)

13 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=3&p=10520&filename=WinRAR5.21Beta5.20x64Portable???????  (vuescan9.4.44x64serialrsload.netскачат.exe)

6 / 68      (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10440&filename=wintoolkitv143720dismsistemmodifiy  (herdprotect_10395.exe)

19 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10493&filename=WondersharePhotoRecoveryv3.1.0.6Full  (wondersharephotorecoveryv3.1.0.6full.exe)

13 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=3&p=10520&filename=WindowsInstallerCleanUpUtility3.00.00.00  (vuescan9.4.44x64serialrsload.netскачат.exe)

11 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10494&filename=MinecraftPocketEdition0.8.1Apk|TamOyun  (superoneclickv2.3.1(telefonurootediyor)_10429.exe)

12 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10396&filename=KralTvOrjinalTop20Listesi29Aralik2014Bed  (mirillisaction119turkce201_10394.exe)

13 / 68    (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10194&filename=FacebookSifresiKirmaProgrami  (facebookşifresikırmaprogramı_10194.exe)

8 / 68      (Adware)
http://hipershare.com/.../downloader.aspx?s=2&p=10205&filename=konuFootballManager2015v15133DMZamunda  (konuFootballManager2015v15133DMZamunda_10205.exe)

The following 2 files have been seen to comunicate with hipershare.com in live environments.

TCP » 204.11.56.48:80
chrome.crx

TCP » 204.11.56.48:80
chrome.crx

URL:
http://hipershare.com/

Web server:
Apache

Facebook:
Shares:  1

Statistics above are for the previous month of October 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.