home

files.storagefreedomnload.com

Domain Information

Server location:
California, United States (US)

ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc., US

Root domain:
storagefreedomnload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.Installe.Installer (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia.Software.Installer (M)
100.00%

Dr.Web
Adware.Downware.13038
25.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
25.00%

The domain files.storagefreedomnload.com has been seen to resolve to the following 2 IP addresses.

159.203.253.236
fd-04-do-w-sf-1.gtdlrfwd.com
July 19, 2016

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
June 29, 2016

File downloads found at URLs served by files.storagefreedomnload.com.

3 / 68      (Adware)
http://files.storagefreedomnload.com/v2/click/332e5738/?d=http://mirrors.kodi.tv/releases/win32/kodi-16.1-Jarvis.exe&key=05d99950674ab5ca1edf2dd799761a9162de6d1dcad656cba72e2577fd953029&affiliate_image=http://www.freedomnload.com/.../kodi100.jpg&product_image=http://www.freedomnload.com/.../kodi325.jpg&sid=kodi&filename=kodi-TV-16.1&n=KODI  (kik for computer setup-efb5180a561c2ec1.exe)

3 / 68      (Adware)
http://files.storagefreedomnload.com/v2/click/332e5738/?d=https://github.com/jp9000/obs-studio/releases/download/0.14.2/OBS-Studio-0.14.2-Installer.exe&key=8b7e3eab70713ae1740998d18cfd0bcfb6a588896e5c54f4e40b42fbff701273&affiliate_image=http://www.freedomnload.com/.../obs100.jpg&product_image=http://www.freedomnload.com/.../obs325.jpg&sid=OBS STUDIO&filename=OBS-Studio&n=OBS STUDIO  (kik for computer setup-efb5180a561c2ec1.exe)

1 / 68      (PUP)
http://files.storagefreedomnload.com/v2/click/332e5738/?affiliate_image=http://www.freedomnload.com/.../obs100.jpg&d=https://github.com/jp9000/obs-studio/releases/download/0.14.2/OBS-Studio-0.14.2-Installer.exe&filename=OBS-Studio&key=8b7e3eab70713ae1740998d18cfd0bcfb6a588896e5c54f4e40b42fbff701273&n=OBS STUDIO&product_image=http://www.freedomnload.com/.../obs325.jpg&sid=OBS STUDIO&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV09XNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MS4wLjI3MDQuMTAzIFNhZmFyaS81MzcuMzY_&scid=94718104-3ce6-11e6-8dbb-0401bb479d01  (obs-studio.exe)

3 / 68      (Adware)
http://files.storagefreedomnload.com/v2/click/332e5738/?d=http://www.freedomnload.com/uTorrent.exe&key=61758c95f343cbb40fb78e56ebfa94a782a99588b1b40cad3f0d006150ec808b&affiliate_image=http://www.freedomnload.com/.../utorrent100.jpg&product_image=http://www.freedomnload.com/.../utorrent325.jpg&sid=utorrent&filename=uTorrent&n=uTorrent  (kik for computer setup-efb5180a561c2ec1.exe)

1 / 68      (Adware)
http://files.storagefreedomnload.com/v2/click/332e5738/?affiliate_image=http://www.freedomnload.com/.../utorrent100.jpg&d=http://www.freedomnload.com/uTorrent.exe&filename=uTorrent&key=61758c95f343cbb40fb78e56ebfa94a782a99588b1b40cad3f0d006150ec808b&n=uTorrent&product_image=http://www.freedomnload.com/.../utorrent325.jpg&sid=utorrent&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUxLjAuMjcwNC44NCBTYWZhcmkvNTM3LjM2&scid=b5e478b2-2fdc-11e6-8303-0401bb479d01  (setup.exe)

1 / 68      (PUP)
http://files.storagefreedomnload.com/v2/click/332e5738/?affiliate_image=http://www.freedomnload.com/.../utorrent100.jpg&d=http://www.freedomnload.com/uTorrent.exe&filename=uTorrent&key=61758c95f343cbb40fb78e56ebfa94a782a99588b1b40cad3f0d006150ec808b&n=uTorrent&product_image=http://www.freedomnload.com/.../utorrent325.jpg&sid=utorrent&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUxLjAuMjcwNC44NCBTYWZhcmkvNTM3LjM2&scid=f76d4cb2-346b-11e6-80cb-0401abff8d01  (doq5pydu.exe)

The following 32 files have been seen to comunicate with files.storagefreedomnload.com in live environments.

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup_imgburn_2.5.8.0_download.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
kik for computer setup-efb5180a561c2ec1.exe

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
mpc-hc.1.7.10.x86_download.exe (Media Player Classic HomeCinema Edition by Software Assistant)

TCP » 159.203.253.236:80
setupimgburn_2.5.8.0_installer.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
microsoft toolkit-4f2c4058580128b8.exe

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
chrome setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Minecraft by Software Assistant)

TCP » 159.203.253.236:80
n.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
setup.exe (FIFA 15 by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
extreme injector.exe (Extreme Injector v3.6 by Software Assistant)

TCP » 159.203.253.236:80
the forest setup.exe (The Forest by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (File Downloader by Software Assistant)

 
Latest 20 of 33 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.