home

dropbox.descargar.es

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.,ES

Root domain:
descargar.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxSetup.Z, PUP.installCore.FreeSoft (M)
100.00%

MicroWorld eScan
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

Malwarebytes
PUP.Optional.InstallCore
50.00%

Agnitum Outpost
Trojan.Kryptik
50.00%

Norman
Kryptik.CDMO
50.00%

Bitdefender
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

Lavasoft Ad-Aware
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

Sophos
PUA.Install Core Click run software
50.00%

Comodo Security
Application.Win32.InstallCore.BWAM
50.00%

F-Secure
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

VIPRE Antivirus
InstallCore.b
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7
50.00%

Emsisoft Anti-Malware
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

G Data
Gen:Trojan.Heur2.GZ.QGZ@bunJw4gi
50.00%

ESET NOD32
Win32/InstallCore.LB potentially unwanted application
50.00%

The domain dropbox.descargar.es has been seen to resolve to the following 4 IP addresses.

185.57.173.188
June 23, 2016

109.70.130.155
155.130.70.109.factoriadigital.com
June 23, 2016

93.189.35.249
September 10, 2014

93.189.35.250
September 10, 2014

File downloads found at URLs served by dropbox.descargar.es.

1 / 68      (Adware)
http://dropbox.descargar.es/.../down.php?p=CA-7SEARCH&kw=dropbox  (installer_dropbox_english.exe)

29 / 68    (Adware)
http://dropbox.descargar.es/.../down.php?p=UK-7SEARCH  (installer_dropbox_english.exe)

The following 6 files have been seen to comunicate with dropbox.descargar.es in live environments.

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
cyberclient.exe (CyberPlanet by Proyecto Redes)

TCP » 109.70.130.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.