» d1a7230587134e4adc366a64.fileskaholic.ru
Overview
Analysis
Downloads (4)

d1a7230587134e4adc366a64.fileskaholic.ru

Private Person (Proxy Registrant)

Domain Information

The domain d1a7230587134e4adc366a64.fileskaholic.ru is registered by proxy through REGRU-RU and was originally registered in June of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.

Registrant:

Private Person

Registrar:

REGRU-RU

Create date:

Thursday, June 2, 2016

Expires date:

Friday, June 2, 2017

Root domain:

fileskaholic.ru

Whois:

1 fileskaholic.ru record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCube.ROSKONNE (M)

100.00%

ESET NOD32

Win32/Kryptik.EZLC trojan

25.00%

File downloads found at URLs served by d1a7230587134e4adc366a64.fileskaholic.ru.

1 / 68 (PUP)

http://d1a7230587134e4adc366a64.fileskaholic.ru/api/web/getInstaller?transaction_id=250309657&token=dd204a1023643e9c1f694edf8f9fb41a&source=default&return_url=http://.../GetGoDMSetup.exe (battle_rage_the_robot_wars_game.exe)

1 / 68 (PUP)

http://d1a7230587134e4adc366a64.fileskaholic.ru/api/web/getInstaller?transaction_id=250305718&token=ebd6cd422c69612e77bfd20a3244d508&return_url=http://www.bithal.com/content/files/.../HALSetup.exe&source=&format=json (starkraft_serdtse_roya_torrent.exe)

1 / 68 (PUP)

http://d1a7230587134e4adc366a64.fileskaholic.ru/api/web/getInstaller?transaction_id=250319160&token=59b744b1f32262820da9ba7a970f2909&return_url=http://.../GetGoDMSetup.exe&source=&format=json (lego_marvel_super_heroes_game.exe)

2 / 68 (PUP)

http://d1a7230587134e4adc366a64.fileskaholic.ru/api/web/getInstaller?transaction_id=250319445&token=12ece24d11822145b26327fb9258d756&return_url=http://.../GetGoDMSetup.exe&source=&format=json (delta_force_1_game.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.