express-files.com

Faglaro Enterprises Limited

Domain Information

The domain express-files.com registered by Faglaro Enterprises Limited was initially registered in December of 2011 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Create date:
Tuesday, December 06, 2011

Expires date:
Tuesday, December 06, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FaglaroEnterprisesLimited.Q, PUP.FaglaroEnterprisesLimited.S, PUP.Installer.FaglaroEnterprisesLimited.L, PUP.Installer.FaglaroEnterprisesLimited.N, PUP.FaglaroEnterprisesLimited.J, PUP.FaglaroEnterprisesLimited.R, PUP.FaglaroEnterprisesLimited.P, Adware.FaglaroEnterprisesLimited.J, Adware.httpwwwexpressfiles, Win32.Generic.Installer.Meta, PUP.Blisbury.FaglaroEnterprises.Bundler (M), Threat.Win.Reputation.IMP, PUP.Blisbury.FaglaroE.Bundler (M), PUP.Blisbury (M)
100.00%

VIPRE Antivirus
ExpressFiles Installer, Threat.4783941, Trojan.Win32.Generic
63.27%

McAfee
Artemis!400F93A19DC0, Artemis!F6D0AA29E5A1, Artemis!93AB60794E97, PUP-FJJ!FD90B2D4980C, Artemis!332D3639F52B, Artemis!1FBDCF9C1254
57.14%

avast!
Win32:Downloader-TSH [PUP], Win32:Expressfiles-A [PUP], Win32:Malware-gen
57.14%

Trend Micro House Call
TROJ_GEN.F47V0809, TROJ_GEN.F47V1127, TROJ_GEN.F47V1101, TROJ_GEN.F47V0430, TROJ_GEN.F47V0821, TROJ_GEN.F47V1229, TROJ_GEN.F47V0114
55.10%

G Data
Win32.Application.ExpressFiles, Win32.Application.ExpressDownloader, Win32.Application.Agent.FGGEND
55.10%

Dr.Web
Adware.Downware.1440, Adware.Downware.747, Adware.Downware.1872, Adware.Downware.9548, Trojan.InstallCore.978, Adware.Downware.2735
55.10%

Sophos
Express Files, PUA 'Express Files', Install Core (PUA)
53.06%

Avira AntiVirus
ADWARE/Adware.Gen2, Adware/ExpressFiles.DA, ADWARE/BrowseFox.aox, PUA/InstallCore.506793
53.06%

Rising Antivirus
PE:PUF.ExpressFiles!1.9E64, PE:Malware.Generic/QRS!1.9E2D [F]
53.06%

McAfee Web Gateway
Artemis!400F93A19DC0, Artemis!F6D0AA29E5A1, Artemis!93AB60794E97, PUP-FJJ!FD90B2D4980C, Artemis!332D3639F52B, Artemis!1FBDCF9C1254
51.02%

Malwarebytes
PUP.Optional.ExpressFiles.A
51.02%

K7 AntiVirus
Unwanted-Program
48.98%

AVG
MalSign.Faglaro Enterprises Limited, Skodna.Generic_c, Suspicion: unknown virus
48.98%

Antiy Labs AVL
Downloader/Win32.Agent, Trojan/Win32.Tgenic
48.98%

The domain express-files.com has been seen to resolve to the following 4 IP addresses.

ReasonOne
October 29, 2015

mail.express-files.com
August 26, 2014

June 20, 2014

199.195.194.4.static.midphase.com
December 26, 2013

File downloads found at URLs served by express-files.com.

1 / 68      (Adware)
http://express-files.com/EFinstaller.exe  (663e37444941fc23a8e6323b61147566)

1 / 68      (PUP)
http://express-files.com/.../g_installer.exe  (aca950b1066825004e1deee1d290370d)

The following 2 files have been seen to comunicate with express-files.com in live environments.

September 5, 2014

February 6, 2014

December 26, 2013

December 28, 2013

Facebook:
Likes:  6,626
Shares:  3,445
Comments:  2,246

Statistics above are for the previous month of July 2017.