home

files4.downloadnet258.com

Domain Information

Server location:
Stockholms Lan, Sweden (SE)

ASN:
AS20940 AKAMAI-ASN1 , US

Root domain:
downloadnet258.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DownloadAdmin.SafeInst.Installer (M), PUP.DownloadAdmin (M)
100.00%

The domain files4.downloadnet258.com has been seen to resolve to the following 6 IP addresses.

23.219.88.200
a23-219-88-200.deploy.static.akamaitechnologies.com
September 13, 2016

23.219.88.159
a23-219-88-159.deploy.static.akamaitechnologies.com
September 13, 2016

104.96.220.233
a104-96-220-233.deploy.static.akamaitechnologies.com
July 24, 2016

104.112.235.19
a104-112-235-19.deploy.static.akamaitechnologies.com
July 24, 2016

104.96.221.91
a104-96-221-91.deploy.static.akamaitechnologies.com
May 28, 2016

104.96.221.98
a104-96-221-98.deploy.static.akamaitechnologies.com
May 28, 2016

File downloads found at URLs served by files4.downloadnet258.com.

1 / 68      (Adware)
http://files4.downloadnet258.com/dl-pure/.../?bc=1191997&checksum=816957&cb=-1179836263  (fileviewerlite133-setup.exe)

1 / 68      (Adware)
http://files4.downloadnet258.com/dl-pure/.../?bc=1191997&checksum=1572861&cb=-2142821517  (fileviewerlite133-setup.exe)

1 / 68      (Adware)
http://files4.downloadnet258.com/dl-pure/.../?bc=1191997&checksum=800249&cb=-111304018  (fileviewerlite133-setup.exe)

The following 15 files have been seen to comunicate with files4.downloadnet258.com in live environments.

TCP » 104.112.235.19:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 23.219.88.200:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.200:80
updateadanak.exe

TCP » 23.219.88.159:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.112.235.19:443
browser.exe (Browser)

TCP » 23.219.88.159:80
set_hnrmfrgr.exe (Credited Handy System Installer)

TCP » 23.219.88.159:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.159:80
pi1vgjqw.exe

TCP » 23.219.88.159:80
instatime.exe

TCP » 104.112.235.19:80
bkkcggnfceffbniddanpoeeacgkmgnal.crx

TCP » 104.96.220.233:80
updatebuzzsearch.exe

TCP » 104.96.221.98:80
dafaaepnbnaanbegenoanblhkmchohlj.crx

TCP » 23.219.88.159:80
utilfindright.exe

TCP » 23.219.88.159:80
download_mcafee_internet_security_2015_-_36_months.exe (Download Assistant by arvato digital services llc)

TCP » 23.219.88.159:80
updateadmin.exe

TCP » 23.219.88.200:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.