dl2.iq7download.com

InstallX, LLC  (via a Proxy Registrant)

Domain Information

The domain dl2.iq7download.com is registered by proxy through ENOM, INC. and was originally registered in February of 2016. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher InstallX, LLC who is located in Sartell, Minnesota in the United States.
Registrar:
ENOM, INC.

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, February 14, 2016

Expires date:
Tuesday, February 14, 2017

Updated date:
Sunday, February 14, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.W3i.R, PUP.Installer.InstallX.J, PUP.Installer.W3i.X, PUP.Installer.W3i.U, PUP.Installer.W3i.O, PUP.Installer.W3i.T, PUP.Installer.W3i.H, PUP.InstallX.W3i.Installer (M), PUP.InstallX (M)
100.00%

Dr.Web
Adware.W3i.9, Adware.W3i.32, Adware.W3i.4, Trojan.Domaiq.225
86.00%

Avira AntiVirus
APPL/InstallIQ.Gen5, Adware/InstallC.B.1, PUA/InstallIQ.Gen5
84.00%

ESET NOD32
Win32/InstallIQ (variant), Win32/InstallIQ.A potentially unwanted (variant)
84.00%

VIPRE Antivirus
InstallIQ Installer, Trojan.Win32.Generic, Threat.4783689
82.00%

Malwarebytes
PUP.Optional.InstallIQ.A
80.00%

AVG
AdInstaller.InstallQ, MalSign.Generic, Adware AdInstaller.InstallQ, InstallIQ.R
80.00%

Trend Micro House Call
TROJ_GEN.R00JH0ALJ13, TROJ_GEN.F47V0404, TROJ_FAKEAV.BMC, TROJ_GEN.F47V0826, TROJ_GEN.RCBH1H7, TROJ_GEN.R00JH0AJ413, TROJ_GEN.R0CBH0AJ713, TROJ_GEN.F47V0825, TROJ_GEN.R06H1EH
78.00%

Sophos
InstallQ, InstallQ (PUA)
76.00%

Fortinet FortiGate
Adware/InstallIQ, Riskware/InstallIQ
74.00%

K7 Gateway Antivirus
Unwanted-Program
68.00%

K7 AntiVirus
Unwanted-Program
68.00%

Rising Antivirus
PE:PUF.InstallIQ!1.9E4F, PE:Trojan.Win32.Generic.137215B6!326243766, PE:PUF.InstallIQ!1.9E4F[F1]
68.00%

Comodo Security
UnclassifiedMalware, Application.Win32.InstallIQ.B, Application.Win32.InstallIQ.NTZK
66.00%

Emsisoft Anti-Malware
Trojan.Win32.InstallIQ.AMN, Riskware.Win32.InstallIQ!A2, Trojan.Win32.InstallIQ.AMN!A2, Riskware.Win32.InstallIQ.AMN, Malware.Win32.AMN!A2
66.00%

The domain dl2.iq7download.com has been seen to resolve to the following 9 IP addresses.

July 15, 2016

July 3, 2016

ec2-52-18-157-175.eu-west-1.compute.amazonaws.com
June 8, 2016

May 18, 2016

April 5, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
February 19, 2016

September 3, 2014

November 19, 2013

November 19, 2013

File downloads found at URLs served by dl2.iq7download.com.

15 / 68    (Adware)

32 / 68    (Adware)
http://dl2.iq7download.com/lm/.../7zipap_1320.exe  (782913991c86a04ecd4e2efb1d0db8c3)

17 / 68    (Adware)
http://dl2.iq7download.com/lm/.../mplayer_tuguu_1275.exe  (7afb3a8149662c9b74342de130c3b61a)

27 / 68    (Adware)
http://dl2.iq7download.com/lm/.../mediaplayer_1573.exe  (8b2a57dda3a45ab710cb6dc9f870a0c5)

1 / 68      (Adware)
http://dl2.iq7download.com/lm/.../gimp_1356.exe  (d0c98fe9709270caad556248d89438b7)

19 / 68    (Adware)
http://dl2.iq7download.com/lm/.../playalotgames_1347.exe  (f427a5e6f34d61e770ca44d0049ae8e0)

1 / 68      (Adware)
http://dl2.iq7download.com/lm/.../gimp_installer_2068.exe  (3b16cdc39e74c036df0e0cacd6a3ba0f)

16 / 68    (Adware)

34 / 68    (Adware)
http://dl2.iq7download.com/lm/.../games.exe  (5eaf0285d93bb15797ea35c1305016fa)

30 / 68    (Adware)
http://dl2.iq7download.com/lm/.../mediaplayer.exe  (92ecf8f99bd0367f0f5bc5e7153c6281)

25 / 68    (Adware)
http://dl2.iq7download.com/lm/.../movie_player_1280.exe  (77c1f65c8c4b7633af017caee4881307)

12 / 68    (Adware)
http://dl2.iq7download.com/lm/.../7zip_installer_1650.exe  (650f93f33975981e92c81c428f6e466a)

28 / 68    (Adware)
http://dl2.iq7download.com/lm/.../musicoasis.exe  (1d26ee1a598dcfb54bf96ed70dc4360e)

1 / 68      (Adware)
http://dl2.iq7download.com/lm/.../fliptoast.exe  (5a90edf4e51d0b80998e0e31ce908966)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl2.iq7download.com/lm/.../mplayer_installer.exe  (44c98120b6851ab898c5702fbb0d7fb3)

35 / 68    (Adware)
http://dl2.iq7download.com/lm/.../openfreely_1296.exe  (1e6cb5f2a6de2a0f66134c683860966f)

1 / 68      (Adware)
http://dl2.iq7download.com/lm/.../dolphin.exe  (db9c5a35b5179b461bf8840a08dfb54f)

19 / 68    (Adware)
http://dl2.iq7download.com/lm/.../freeopener_715.exe  (a0fbb5b6b26c1a53ede45aa7eda9b6d2)

28 / 68    (Adware)
http://dl2.iq7download.com/lm/.../freefileviewer_730.exe  (5dd486a45923f5f6d435bed734755fb8)

26 / 68    (Adware)

27 / 68    (Adware)
http://dl2.iq7download.com/lm/.../ac3filter_app_1200.exe  (e64337b010210b054704e8c81c49cf24)

27 / 68    (Adware)
http://dl2.iq7download.com/lm/.../tvshows.exe  (5c56881b3db38169bcb5523c23cd750d)

28 / 68    (Adware)
http://dl2.iq7download.com/lm/.../clipartcollection.exe  (e6423ff4f248583bc7eb169615ee13ce)

10 / 68    (Adware)

10 / 68    (Adware)
http://dl2.iq7download.com/lm/.../musicss.exe  (dbc2048c13d141c65325d3af049cd043)

6 / 68      (Adware)
http://dl2.iq7download.com/lm/.../marine2.exe  (730aa9c8e319db35e5e9fdafcedc2f2e)

26 / 68    (Adware)
http://dl2.iq7download.com/lm/.../7zip_installer_1649.exe  (772ae27745cdc72fab659521811faa4c)

26 / 68    (Adware)

18 / 68    (Adware)

 
Latest 30 of 139 download URLs

The following 351 files have been seen to comunicate with dl2.iq7download.com in live environments.

 
Latest 20 of 423 files

URL:
http://dl2.iq7download.com/

Google Analytics:
UA-48689684

Title:
“Loading”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.8.0

30 of 631 related domains