home

files4.filedownload15.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
filedownload15.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Tightrope.Blueis.Bundler (M)
100.00%

The domain files4.filedownload15.com has been seen to resolve to the following 6 IP addresses.

184.51.126.66
a184-51-126-66.deploy.static.akamaitechnologies.com
April 9, 2016

184.51.126.51
a184-51-126-51.deploy.static.akamaitechnologies.com
April 9, 2016

184.51.126.50
a184-51-126-50.deploy.static.akamaitechnologies.com
April 9, 2016

184.51.126.48
a184-51-126-48.deploy.static.akamaitechnologies.com
April 9, 2016

184.51.126.43
a184-51-126-43.deploy.static.akamaitechnologies.com
April 9, 2016

184.51.126.26
a184-51-126-26.deploy.static.akamaitechnologies.com
April 9, 2016

File downloads found at URLs served by files4.filedownload15.com.

1 / 68      (Adware)
http://files4.filedownload15.com/download/.../dl?bc=1084396&pid=piratebay&brand=piratebay.com&country=IN&variation=chwebsite&cb=709434931&filename=vlcmediaplayer-setup.exe&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1  (3a05df542e4a3bd4e8526aa85820b9b4)

The following 25 files have been seen to comunicate with files4.filedownload15.com in live environments.

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.66:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.43:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 184.51.126.51:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.51.126.26:80
Avira.OE.ServiceHost.exe (Avira.OE.ServiceHost by Avira Operations GmbH & Co. KG)

TCP » 184.51.126.26:443
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 184.51.126.26:80
fpnnogogihegcbpaodbnepofjfiepfcb.crx

TCP » 184.51.126.43:80
comcastantispyservice.exe

TCP » 184.51.126.43:80
kolhglholjmoidcmgkojghhjllnbehim.crx

TCP » 184.51.126.43:80
omhchlgiohmfombbbjhoahjmofeienlg.crx

TCP » 184.51.126.43:80
phknmhmjgifnnalncpcilipgoaophoog.crx

TCP » 184.51.126.43:80
olkpfcgompgkeceodpodleppkhdjoeom.crx

TCP » 184.51.126.50:80
ceiapeodjfjcbfkfkfbdpgbhbgiidjdb.crx

TCP » 184.51.126.50:80
gdjeihkmglmapgifllngcdlaoeemaacf.crx

TCP » 184.51.126.50:80
gflpcjeoeocanhomdojchhdmmidhgake.crx

 
Latest 20 of 32 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.