az804920.vo.msecnd.net

Microsoft Corporation

Domain Information

The domain az804920.vo.msecnd.net registered by Microsoft Corporation was initially registered in September of 2008 through CSC CORPORATE DOMAINS, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the EdgeCast Networks, Inc. network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
California, United States (US)

Create date:
Monday, September 29, 2008

Expires date:
Thursday, September 29, 2016

Updated date:
Saturday, September 26, 2015

ASN:
AS15133 EDGECAST - EdgeCast Networks, Inc.,US

Root domain:

Scanner detections:
Detections  (74% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.Win.Reputation, PUP.InstallCore.Internet.Installer.Meta (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.Softpulse.Softforce.Bundler (M), PUP.Softpulse.DIGITALP.Bundler (M), PUP.InstallCore.RES (M)
82.35%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant), Win32/InstallCore.XU potentially unwanted (variant), Win32/InstallCore.VX potentially unwanted (variant)
41.18%

Malwarebytes
PUP.Optional.InstallCore
11.76%

Baidu Antivirus
Adware.Win32.InstallCore
11.76%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
11.76%

Trend Micro House Call
TROJ_GEN.F47V1017
5.88%

Norman
Smalltroj.ZKXT
5.88%

AVG
InstallCore
5.88%

SUPERAntiSpyware
PUP.InstallCore/Variant
5.88%

Avira AntiVirus
W32/Sality.AT
5.88%

Fortinet FortiGate
Riskware/InstallCore
5.88%

The domain az804920.vo.msecnd.net has been seen to resolve to the following 2 IP addresses.

February 4, 2016

September 10, 2015

File downloads found at URLs served by az804920.vo.msecnd.net.

1 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (06aab22855645fb60e29950159153bc3)

1 / 68      (Malware)

1 / 68      (inconclusive)

0 / 68
http://az804920.vo.msecnd.net/Setup.exe  (c68a4dab43e8a414cfc58e6f250cad26)

1 / 68      (Adware)
http://az804920.vo.msecnd.net/Setup.exe  (16ee48abd5c4c7c5ac15b920b6cb5434)

1 / 68      (inconclusive)
http://az804920.vo.msecnd.net/Setup.exe  (28ccd5b486b99111802151e262f057e2)

3 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (553e96ab84d2b2b95251ebbb534c9ff5)

1 / 68      (Adware)
http://az804920.vo.msecnd.net/Setup.exe  (99c19f04423a56335fd43dfc40c325b0)

1 / 68
http://az804920.vo.msecnd.net/Setup.exe  (b5a7969b00b939efc50455f9f075b9c0)

0 / 68
http://az804920.vo.msecnd.net/Setup.exe  (7ccdb06729e2731af9d0dfbd86b437de)

3 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (unconfirmed 781016.torchdownload)

5 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (2fb1c5968b4cee83fd90a7f1d2ccc900)

1 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (5c1c4e71c930be352d458befd5b9011e)

3 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (431aa5d90baecf8879751517857697b7)

1 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (14c11e59896a11fd49f864dab7417cdb)

2 / 68      (PUP)

3 / 68      (PUP)

4 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (3f271a0c9f93ecf17c18c2b351cd0399)

1 / 68      (PUP)
http://az804920.vo.msecnd.net/Setup.exe  (7f4b0e247e2cba024fceee12ade4cf3f)

URL:
http://az804920.vo.msecnd.net/

SSL certificate subject:
CN=*.vo.msecnd.net

SSL certificate issuer:
CN=Microsoft IT SSL SHA2, OU=Microsoft IT, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Web server:
Blob Service Version 1.0 Microsoft-HTTPAPI/2.0