home

www.wedownload.net

Anonymous Domain Registration Service

Domain Information

The domain www.wedownload.net registered by Anonymous Domain Registration Service was initially registered in February of 2016 through KEY-SYSTEMS GMBH. The hosted servers are located in Tilburg, Noord-Brabant within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
KEY-SYSTEMS GMBH

Server location:
Noord-Brabant, Netherlands (NL)

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS50673 SERVERIUS-AS , NL

Root domain:
wedownload.net

Whois:
1 wedownload.net record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Dr.Web
Adware.Downware.13038
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%

Reason Heuristics
PUP.Air Software.Installe.Installer (M)
100.00%

The domain www.wedownload.net has been seen to resolve to the following IP address.

185.56.145.91
premium07.totaalholding.nl
June 27, 2016

File downloads found at URLs served by www.wedownload.net.

0 / 68
http://www.wedownload.net/uploads/.../install_flash_player_20_plugin.exe  (42baac9b9330a217bb40af6ddaa91eb5)

3 / 68      (Adware)
http://www.wedownload.net/installer.php?id=31  (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68      (Adware)
http://www.wedownload.net/installer.php?id=32  (kik for computer setup-efb5180a561c2ec1.exe)

0 / 68
http://www.wedownload.net/uploads/.../AcroRdrDC1501020060_en_US.exe  (adobe_acrobat_reader_dc_v2015.010.20060.exe)

The following 2 files have been seen to comunicate with www.wedownload.net in live environments.

TCP » 185.56.145.91:80
browser.exe (Browser)

TCP » 185.56.145.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.wedownload.net/

Google Analytics:
UA-72940345

Title:
“DLSoftware - Find all your downloads easily”

Description:
“With DLSoftware you can find your downloads easy and install them for free!”

Web server:
Apache (PHP/5.6.21)

apponpc.net

driverhd.com

easydl.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.