dl5.iq8download.com

InstallX, LLC

Domain Information

The domain dl5.iq8download.com registered by Whois Privacy Shield Services was initially registered in February of 2016 through ENOM, INC.. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform. The domain is associated with the publisher InstallX, LLC who is located in Sartell, Minnesota in the United States.
Registrar:
LEONIDAS, LLC

Server location:
Virginia, United States (US)

Create date:
Thursday, February 11, 2016

Expires date:
Saturday, February 11, 2017

Updated date:
Sunday, February 14, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.W3i.M, PUP.Installer.W3i.V, PUP.Installer.W3i.W, PUP.Installer.W3i.R, PUP.Installer.W3i.N, PUP.Installer.W3i.U, PUP.InstallX.W3i.Installer (M), PUP.InstallX.W3i (M), PUP.InstallX (M)
100.00%

Sophos
InstallQ
65.96%

Trend Micro House Call
TROJ_GEN.R0CBH0ABF14, TROJ_GEN.F47V1114, TROJ_SPNR.0CA214, TROJ_GEN.R00JH0ALJ13, TROJ_GEN.R0CBH0AID13, TROJ_FAKEAV.BMC, TROJ_GEN.F47V1003, TROJ_GEN.R0C1H01H913
63.83%

Dr.Web
Adware.Downware.888, Adware.W3i.9, Trojan.Domaiq.225, Adware.W3i.4
63.83%

ESET NOD32
Win32/InstallIQ (variant), Win32/InstallIQ.A potentially unwanted (variant)
63.83%

VIPRE Antivirus
InstallIQ Installer, Trojan.Win32.Generic
61.70%

Avira AntiVirus
APPL/InstallIQ.Gen5, Adware/InstallC.B.1, PUA/InstallIQ.Gen5
59.57%

Malwarebytes
PUP.Optional.InstallIQ.A
57.45%

McAfee Web Gateway
Artemis!772480DBD233, Artemis!B42519620ED3, Artemis!7AA77A9C1E24, Artemis!F008A5420B73, BehavesLike.Win32.Obfuscated.th
51.06%

K7 Gateway Antivirus
Unwanted-Program , Trojan
48.94%

K7 AntiVirus
Unwanted-Program , Trojan
48.94%

Comodo Security
UnclassifiedMalware, Application.Win32.InstallIQ.NTZK
48.94%

McAfee
Artemis!772480DBD233, Artemis!B42519620ED3, Artemis!7AA77A9C1E24, Artemis!F008A5420B73, Artemis!F5D376FA74BF, Artemis!0DC21F8310B4, Artemis!32CBB271DCA1, Artemis!9DAE36631201
48.94%

Trend Micro
TROJ_FAKEAV.BMC, TROJ_SPNR.0CA214, TROJ_SPNR.0CI312, TROJ_GEN.R0C1C0OL414, TROJ_SPNR.15A115, TROJ_GEN.FCBCBLA
42.55%

Baidu Antivirus
Trojan.Win32.InstallIQ, Trojan.Win32.Agent, Adware.Win32.InstallIQ
42.55%

The domain dl5.iq8download.com has been seen to resolve to the following 4 IP addresses.

125.34.148.146.bc.googleusercontent.com
February 15, 2016

ec2-54-210-47-225.compute-1.amazonaws.com
February 15, 2016

May 4, 2015

December 27, 2013

File downloads found at URLs served by dl5.iq8download.com.

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../musicwallpapers.exe  (7d0c435c0d8d169d05c018523044c078)

14 / 68    (Adware)

25 / 68    (Adware)
http://dl5.iq8download.com/lm/.../movie_player_1280.exe  (772480dbd233bc58c70ed776623bbce1)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../amazinguniversess.exe  (10093e78f10139a8ab3588a4381e136f)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../virtualdub.exe  (1a05f108826d37c6cdb0477e64f7d9fc)

16 / 68    (Adware)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../marine2aw.exe  (24b9e025b4912fc13e18f0b20699d70d)

36 / 68    (Adware)
http://dl5.iq8download.com/lm/.../dolphin.exe  (6c86777de0e4d7cf13c6a70b511fb32e)

16 / 68    (Adware)

1 / 68      (Adware)

10 / 68    (Adware)

36 / 68    (Adware)
http://dl5.iq8download.com/lm/.../openfreely_1296.exe  (c8ac8d157e48341cc7b44185003e2410)

19 / 68    (Adware)

30 / 68    (Adware)

13 / 68    (Adware)

23 / 68    (Adware)
http://dl5.iq8download.com/lm/.../freeeditor_1787.exe  (b7fdcc7e42e3cdd606f30239344cc7c2)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../applianflv.exe  (8b8b727a45e3d8aa00d241c31a564be8)

14 / 68    (Adware)

14 / 68    (Adware)

25 / 68    (Adware)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../soundfxhalloween.exe  (c38b5afcd180a2d0f185b49185e4dc25)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../fbdownloader.exe  (3589e96c11d5778e3482f5eff3790935)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl5.iq8download.com/lm/.../speeditup3_1769.exe  (4734e6db0448f2cb192071df5e79fb0d)

12 / 68    (Adware)

8 / 68      (Adware)

24 / 68    (Adware)

40 / 68    (Adware)
http://dl5.iq8download.com/lm/.../marine2.exe  (0492853abd5e7ae5f1935d945bf4d629)

 
Latest 30 of 136 download URLs

The following 6 files have been seen to comunicate with dl5.iq8download.com in live environments.

URL:
http://dl5.iq8download.com/

Google Analytics:
UA-48689684

Title:
“iq8download.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx

30 of 631 related domains