dl5.iq7download.com

InstallX, LLC  (via a Proxy Registrant)

Domain Information

The domain dl5.iq7download.com is registered by proxy through ENOM, INC. and was originally registered in February of 2016. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher InstallX, LLC who is located in Sartell, Minnesota in the United States.
Registrar:
ENOM, INC.

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, February 14, 2016

Expires date:
Tuesday, February 14, 2017

Updated date:
Sunday, February 14, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.W3i.S, PUP.Installer.W3i.T, PUP.Installer.W3i.K, PUP.Installer.W3i.Q, PUP.Installer.W3i.R, PUP.Installer.W3i.M, PUP.InstallX.Installer, PUP.InstallX.W3i.Installer (M), Adware.InstallIQ.Bundle.Meta (M), PUP.InstallX (M)
100.00%

Dr.Web
Adware.W3i.9, Adware.W3i.4
50.00%

Avira AntiVirus
Adware/InstallC.B.1, APPL/InstallIQ.Gen5
50.00%

ESET NOD32
Win32/InstallIQ (variant)
50.00%

Trend Micro House Call
TROJ_GEN.RCBH1HR, TROJ_GEN.R0CBH0AJ713, TROJ_SPNR.0CG612, TROJ_GEN.RFFH1G5, TROJ_GEN.RCBH1GH, TROJ_FAKEAV.BMC, TROJ_GEN.RCEOHH9, TROJ_GEN.F47V0817
48.00%

Comodo Security
UnclassifiedMalware, Application.Win32.InstallIQ.NTZK
48.00%

Sophos
InstallQ, PUA 'InstallQ'
48.00%

Fortinet FortiGate
Adware/InstallIQ, Riskware/InstallIQ
48.00%

AVG
AdInstaller.InstallQ
46.00%

Malwarebytes
PUP.Optional.InstallIQ.A
46.00%

VIPRE Antivirus
InstallIQ Installer, Trojan.Win32.Generic
46.00%

Emsisoft Anti-Malware
Trojan.Win32.InstallIQ.AMN, Trojan.Win32.InstallIQ.AMN!A2, Riskware.Win32.InstallIQ.AMN, Gen:Variant.Adware.Graftor.125844
44.00%

K7 AntiVirus
Unwanted-Program, Unwanted-Program
42.00%

McAfee Web Gateway
Artemis!132905E8A5FF, Artemis!A180F19D2FCE, BehavesLike.Win32.Obfuscated.th, Artemis!772480DBD233, Artemis!7047F8FF4233
42.00%

K7 Gateway Antivirus
Unwanted-Program
42.00%

The domain dl5.iq7download.com has been seen to resolve to the following 8 IP addresses.

July 19, 2016

June 23, 2016

ec2-52-18-157-175.eu-west-1.compute.amazonaws.com
June 7, 2016

May 17, 2016

April 1, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
February 16, 2016

September 2, 2014

November 19, 2013

File downloads found at URLs served by dl5.iq7download.com.

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../dolphinaw.exe  (8ec8548377adad607e34a30e3af30b3a)

1 / 68      (Adware)

1 / 68      (Adware)

27 / 68    (Adware)
http://dl5.iq7download.com/lm/.../jenkatarcade.exe  (f6a4075e57810a43e555c601e39835f6)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../mediaplayer_1575.exe  (b784a75c99d5b41e2428fbcc2df3bf8f)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../whales.exe  (7a78ab74d01b4f5a75e04c246f8c5ea5)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../freefileviewer_2.exe  (f4f5c0efa0142c937afa2462cdd29001)

32 / 68    (Adware)
http://dl5.iq7download.com/lm/.../games.exe  (56c48fe70124dfa92832bd5cfc38479d)

12 / 68    (Adware)
http://dl5.iq7download.com/lm/.../mediaplayer_1573.exe  (23f47520a9d6bf9a5aab1e49dc066d3d)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../playalotgames.exe  (884c83da288ddd0473223d15c656e3dd)

30 / 68    (Adware)
http://dl5.iq7download.com/lm/.../musicoasis.exe  (11ca86fededbfb0f799972fecf1796cd)

27 / 68    (Adware)
http://dl5.iq7download.com/lm/.../mplayer_tuguu.exe  (6c5eddf123b7f1339abb52650b91a8cf)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../mediaplayer.exe  (ba0b881999fdf85adeebdd1ffa2c1ddc)

15 / 68    (Adware)
http://dl5.iq7download.com/lm/.../7zip_installer_1650.exe  (987c5c9d185aef969752f20553f78e62)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../encouragingversesss.exe  (8df48f103724cfaec8e8e8349c5a44e0)

1 / 68      (PUP)
http://dl5.iq7download.com/lm/.../movie_player_1280.exe  (250aaa74b677707359a72af059cb182f)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../fliptoast.exe  (7272d8de7c821dc7e91488314f86b353)

23 / 68    (Adware)
http://dl5.iq7download.com/lm/.../mplayer_tuguu_1285.exe  (714b84d8d27d84886377fe68c39fe91b)

36 / 68    (Adware)
http://dl5.iq7download.com/lm/.../dolphin.exe  (d4bce6733570876d7d788e81b3b6813a)

34 / 68    (Adware)
http://dl5.iq7download.com/lm/.../playalotgames_1347.exe  (abf047a4d73bc70e96a35f982c9afcaa)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../wallpapercollection.exe  (b8a4b155ceeca0c2a7110b70766d2efa)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../ezlyrics.exe  (a9eb9587e18eef759418a4cd8d9cc44d)

30 / 68    (Adware)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../musicoasis_1599.exe  (0fd201c58a195100b094e83d282f9d4c)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../musicrockstar_1582.exe  (34dc6baba2cab3c202c6bacb84fb6bad)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../wallpapers.exe  (1cdfdff620737519318645a6e1426f90)

5 / 68      (Adware)
http://dl5.iq7download.com/lm/.../audioconverter_1460.exe  (ed5d723c10c3855418270418a7a780f7)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../digitaldj_1913.exe  (c86106fb1c7c1f401f13d9947e15fde1)

1 / 68      (Adware)
http://dl5.iq7download.com/lm/.../digitaldj.exe  (1d0305424ca1f00c92e5b8cac164ca98)

 
Latest 30 of 378 download URLs

The following 261 files have been seen to comunicate with dl5.iq7download.com in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 266 files

URL:
http://dl5.iq7download.com/

Google Analytics:
UA-48689684

Title:
“Loading”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.8.0

30 of 631 related domains