home

download12.virtual2.space

Domain Information

Server location:
California, United States (US)

ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc., US

Root domain:
virtual2.space

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Vittalia.Software.Installer (M)
100.00%

The domain download12.virtual2.space has been seen to resolve to the following IP address.

159.203.253.236
fd-04-do-w-sf-1.gtdlrfwd.com
July 23, 2016

File downloads found at URLs served by download12.virtual2.space.

1 / 68      (PUP)
http://download12.virtual2.space/v2/click/2701db90/?affiliate_image=http://.../32x32msp.png&d=http://.../FREE_STARCOINS_AND_DIAMONDS_ON_MSP.zip&filename=MOVIESTAR PLANET&key=95abca1d93e45d8cbc0cb2e6defba3cfc5eb37699673ed0d7f90baede10fb4ca&n=MOVIESTAR PLANET&product_image=http://.../moviestarplanet.png&sid=MOVIESTAR PLANET&uid=&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV09XNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MS4wLjI3MDQuMTAzIFNhZmFyaS81MzcuMzY_&scid=c9eb0494-3e4a-11e6-bfdd-0401abff8d01  (setup.exe)

1 / 68      (PUP)
http://download12.virtual2.space/v2/click/2701db90/?affiliate_image=http://.../32x32msp.png&d=http://.../FREE_STARCOINS_AND_DIAMONDS_ON_MSP.zip&filename=MOVIESTAR PLANET&key=95abca1d93e45d8cbc0cb2e6defba3cfc5eb37699673ed0d7f90baede10fb4ca&n=MOVIESTAR PLANET&product_image=http://.../moviestarplanet.png&sid=MOVIESTAR PLANET&uid=&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBXT1c2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUxLjAuMjcwNC4xMDMgU2FmYXJpLzUzNy4zNg__&scid=d6c55a8e-39c2-11e6-8341-0401bb479d01  (moviestar planet.exe)

The following 32 files have been seen to comunicate with download12.virtual2.space in live environments.

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup_imgburn_2.5.8.0_download.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
kik for computer setup-efb5180a561c2ec1.exe

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
mpc-hc.1.7.10.x86_download.exe (Media Player Classic HomeCinema Edition by Software Assistant)

TCP » 159.203.253.236:80
setupimgburn_2.5.8.0_installer.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
microsoft toolkit-4f2c4058580128b8.exe

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
chrome setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Minecraft by Software Assistant)

TCP » 159.203.253.236:80
n.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
setup.exe (FIFA 15 by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
extreme injector.exe (Extreme Injector v3.6 by Software Assistant)

TCP » 159.203.253.236:80
the forest setup.exe (The Forest by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (File Downloader by Software Assistant)

 
Latest 20 of 33 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.