dll.zhonghuchina.com

tianyucai

Domain Information

The domain dll.zhonghuchina.com registered by tianyucai was initially registered in December of 2015 through HANGZHOU AIMING NETWORK CO.,LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tianjin, Tianjin within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
22NET, INC.

Server location:
Tianjin, China (CN)

Create date:
Thursday, December 10, 2015

Expires date:
Saturday, December 10, 2016

Updated date:
Thursday, December 10, 2015

ASN:
AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone,CN

Root domain:

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Clam AntiVirus
Win.Trojan.691128
100.00%

Dr.Web
Trojan.KillFiles.28526
100.00%

McAfee
Artemis!715698FF9659, Artemis!032F86F10013
66.67%

NANO AntiVirus
Riskware.Win32.ShouQu.dmnfjx
66.67%

ESET NOD32
Win32/Packed.NSISmod.A suspicious (variant)
66.67%

avast!
Win32:Malware-gen
66.67%

Fortinet FortiGate
W32/Generic.AC.18053
66.67%

Baidu Antivirus
Hacktool.Win32.NSISmod
33.33%

ESET NOD32
Win32/Packed.NSISmod.A suspicious application
33.33%

AegisLab AV Signature
Troj.Generic
33.33%

AhnLab V3 Security
PUP/Win32.ShortCut
33.33%

The domain dll.zhonghuchina.com has been seen to resolve to the following 6 IP addresses.

February 22, 2016

February 22, 2016

no-data
February 22, 2016

no-data
February 22, 2016

no-data
February 22, 2016

254.255.221.60.adsl-pool.sx.cn
February 22, 2016

File downloads found at URLs served by dll.zhonghuchina.com.

9 / 68      (PUP)

3 / 68      (inconclusive)

8 / 68      (PUP)

URL:
http://dll.zhonghuchina.com/

Web server:
Microsoft-IIS/6.0 (ASP.NET)