Server location:
Arizona, United States (US)
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc., US
Scanner detections:
Malware distribution (88% detected)
Scan engine
Details
Detections
ESET NOD32
MSIL/Injector.OVC trojan, MSIL/Injector.OUU trojan, MSIL/Kryptik.FRN trojan, MSIL/Kryptik.EXJ trojan, MSIL/Kryptik.GRX trojan, MSIL/Kryptik.GWF trojan, MSIL/GenKryptik.LJ trojan
100.00%
McAfee
Trojan.Trojan-FIHN!A81AFE00D9C7, Trojan.Trojan-FIHN!83D43C18B648, Trojan.Trojan-FIHN!9F82105AEA42, Trojan.Trojan-FIHN!E2B9B8D351D4, Trojan.Trojan-FIHN!F26816065E64, Trojan.Trojan-FIHN!4B7A1BDC5ED8, Trojan.Trojan-FIHN!737C7B94DE4B, Trojan.Trojan-FIHN!AC92C4DE15CD, Trojan.Trojan-FIHN!32F064704F4E, Trojan.Trojan-FIHN!E04A4B8ACDF5, Trojan.Trojan-FIHN!473E8F5F9962, Trojan.Trojan-FIHN!685434E39712, Trojan.Trojan-FIHN!8B8C87DE5488
81.25%
Reason Heuristics
PUP.ViatlioC (M), Threat.Adware.Dropper.Suas (H), PUP (M), Adware.Cobind.Kryptic (M)
37.50%
Norman
Gen:Variant.Razy.37189, Gen:Variant.Barys.53261, Gen:Variant.Razy.39219, Gen:Variant.Razy.37415
37.50%
avast!
Win32:Dropper-gen [Drp], Win32:Malware-gen
6.25%
Kaspersky
Trojan-Dropper.Win32.Injector, Trojan.Win32.Inject
6.25%
The domain cloudcrypter.pw has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by cloudcrypter.pw.
Latest 30 of 32 download URLs