home

projects.m32.ir

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH , FR

Root domain:
m32.ir

The domain projects.m32.ir has been seen to resolve to the following IP address.

137.74.151.210
210.151.74.137.fr.axspace.com
August 8, 2016

File downloads found at URLs served by projects.m32.ir.

0 / 68
http://projects.m32.ir/up/2012/.../ServoControl.rar  (1197702e13ae602a6803061ec5b4c7b3)

The following 10 files have been seen to comunicate with projects.m32.ir in live environments.

TCP » 137.74.151.210:80
userinit.exe (honey)

TCP » 137.74.151.210:80
SolvusoftTray.exe (Solvusoft by Solvusoft)

TCP » 137.74.151.210:80
services.exe

TCP » 137.74.151.210:80
updates.exe

TCP » 137.74.151.210:80
regsvr.exe

TCP » 137.74.151.210:80
winseven.exe

TCP » 137.74.151.210:80
new folder.exe

TCP » 137.74.151.210:80
updates.exe

TCP » 137.74.151.210:80
lsass.exe

TCP » 137.74.151.210:80
msn.exe

nikatel.ir

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.