home

download10.cdn.expresdownload.com

Domain Information

Server location:
Louisiana, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
expresdownload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!7EFD1599C665
100.00%

Malwarebytes
PUP.Optional.Bandoo
100.00%

avast!
Win32:Rootkit-gen [Rtk]
100.00%

Dr.Web
Adware.Bandoo.19
100.00%

VIPRE Antivirus
Threat.5059975
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

ESET NOD32
Win32/iLivid.A potentially unwanted application
100.00%

IKARUS anti.virus
PUA.iLivid
100.00%

Fortinet FortiGate
Riskware/ILivid
100.00%

AVG
Generic
100.00%

Baidu Antivirus
Adware.Win32.iLivid
100.00%

Reason Heuristics
PUP.Optional.Installer.W
100.00%

herdProtect (fuzzy)
a variant of 4c6dccbf763f59425cb6d8cdca7d5e314947e66e
100.00%

The domain download10.cdn.expresdownload.com has been seen to resolve to the following 2 IP addresses.

184.51.126.96
a184-51-126-96.deploy.static.akamaitechnologies.com
January 9, 2015

184.51.126.82
a184-51-126-82.deploy.static.akamaitechnologies.com
January 9, 2015

File downloads found at URLs served by download10.cdn.expresdownload.com.

13 / 68    (PUP)
http://download10.cdn.expresdownload.com/cdn/r/.../iLividSetup-r1982-n-bc.exe  (ilividsetup-r1720-n-bc.exe)

The following 126 files have been seen to comunicate with download10.cdn.expresdownload.com in live environments.

TCP » 184.51.126.96:80
plugin.exe

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.96:443
browser.exe (speed browser by Fast Applications)

TCP » 184.51.126.82:80
plugincontainer.exe

TCP » 184.51.126.96:443
messengertime.exe

TCP » 184.51.126.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.96:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 184.51.126.82:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.51.126.96:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.96:443
whatsapptime.exe

TCP » 184.51.126.82:80
ccSvcHst.exe (Symantec Security Technologies by Symantec)

TCP » 184.51.126.82:80
iomkkponpgpldpidplmaphhlmbhmjngg.crx

TCP » 184.51.126.82:80
macpejfjpneigchdbhbigjepfombefga.crx

TCP » 184.51.126.82:80
hepmgfjddaikelkifekhcgmfoghepfaf.crx

TCP » 184.51.126.82:80
loaijddfgbgdmididoklildabncemoog.crx

 
Latest 20 of 133 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.