home

files4.mirror7.net

mark marrocco

Domain Information

The domain files4.mirror7.net registered by mark marrocco was initially registered in July of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, July 31, 2013

Expires date:
Monday, July 31, 2017

Updated date:
Saturday, August 1, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
mirror7.net

Whois:
2 mirror7.net records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadAdmin.U, PUP.Installer.DownloadAdmin.T, PUP.Installer.DownloadAdmin.R, PUP.Installer.DownloadAdmin.O, PUP.Installer.DownloadAdmin.V, PUP.Installer.Tightrope, Threat.Tightrope.Bundler, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.TightRope.Bundler.Installer.Meta (M), PUP.Tightrope.Download.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
82.61%

VIPRE Antivirus
DownloadAdmin, Threat.4783369, Threat.4150696
82.61%

Dr.Web
Adware.Downware.2220, Adware.DAdmin.151, Threat.Undefined
82.61%

Sophos
Download Admin, PUA 'DownloadAdmin' (of type Adware)
82.61%

Avira AntiVirus
ADWARE/Adware.Gen, ADWARE/Adware.Gen9
73.91%

F-Secure
Adware:W32/WebInstallBundle
69.57%

AVG
Generic, MalSign.InstallC
69.57%

NANO AntiVirus
Riskware.Win32.Downware.crgjbr, Trojan.Win32.Downware.crgjbr, Trojan.Win32.DAdmin.djhtdm, Riskware.Win32.Downware.djahkt
65.22%

herdProtect (fuzzy)
a variant of bee4a545f7b9705f6d3dc2c45e3e095135d3a543, a variant of 2cc1784de9a99e051538cf8b0f4e525e8f9031be, a variant of 515fd89eed11d6fde64e6fe643ad90a83ca6d9ff
60.87%

Comodo Security
Application.Win32.Agent.OCK, Application.Win32.DownloadAdmin.TTK, ApplicUnwnt, Application.Win32.DownloadAdmin.ANGL
56.52%

Clam AntiVirus
Win.Adware.Agent-6650, Win.Adware.Downloadadmin, Win.Adware.Downloadadmin-1
52.17%

ESET NOD32
Win32/DownloadAdmin
47.83%

avast!
Adware-OH [Adw], DownloadAdmin-K [PUP]
47.83%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application, Win32/DownloadAdmin.H potentially unwanted application
34.78%

The domain files4.mirror7.net has been seen to resolve to the following 21 IP addresses.

23.15.7.105
a23-15-7-105.deploy.static.akamaitechnologies.com
June 3, 2016

23.15.7.97
a23-15-7-97.deploy.static.akamaitechnologies.com
June 3, 2016

104.96.221.91
a104-96-221-91.deploy.static.akamaitechnologies.com
May 29, 2016

104.96.221.98
a104-96-221-98.deploy.static.akamaitechnologies.com
May 29, 2016

23.15.9.58
a23-15-9-58.deploy.static.akamaitechnologies.com
April 21, 2016

23.15.9.18
a23-15-9-18.deploy.static.akamaitechnologies.com
April 21, 2016

23.0.160.72
a23-0-160-72.deploy.static.akamaitechnologies.com
February 29, 2016

23.67.243.59
a23-67-243-59.deploy.static.akamaitechnologies.com
May 3, 2015

23.62.7.33
a23-62-7-33.deploy.static.akamaitechnologies.com
December 1, 2014

23.62.7.9
a23-62-7-9.deploy.static.akamaitechnologies.com
December 1, 2014

23.0.160.74
a23-0-160-74.deploy.static.akamaitechnologies.com
December 1, 2014

184.50.229.177
a184-50-229-177.deploy.static.akamaitechnologies.com
September 5, 2014

184.50.229.137
a184-50-229-137.deploy.static.akamaitechnologies.com
September 5, 2014

184.51.126.32
a184-51-126-32.deploy.static.akamaitechnologies.com
September 5, 2014

184.51.126.56
a184-51-126-56.deploy.static.akamaitechnologies.com
September 5, 2014

23.0.160.65
a23-0-160-65.deploy.static.akamaitechnologies.com
September 2, 2014

23.0.160.11
a23-0-160-11.deploy.static.akamaitechnologies.com
September 2, 2014

63.88.100.168
July 31, 2014

63.88.100.147
July 31, 2014

23.67.243.19
May 16, 2014

23.67.243.24
a23-67-243-24.deploy.static.akamaitechnologies.com
May 16, 2014

File downloads found at URLs served by files4.mirror7.net.

1 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=1579&bc=1082472&v.url=o1t8viv8bqfcgfsf10podntvp6&country=CO&cb=577090983&zTmp=1  (mytopfreegames-setup.exe)

1 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mightymagoo.com&pid=Kitara&aid=1579&bc=616453&v.url=iir0l0aa9puor1mjhq4d1oeik4&country=ES&cb=-1332544417  (mightymagoo-setup.exe)

1 / 68      (PUP)
http://files4.mirror7.net/download/.../dl?bc=610535&pid=Horizon&brand=xboxmb.com&country=US&cb=-1968478671&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1  (horizon-setup.exe)

1 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ie&brand=puzzlezone.com&pid=Kitara&aid=1591&bc=616469&v.url=9mi317d92lbus2t7r13oisdnt7&country=RO&cb=1939019487  (puzzlezone-setup.exe)

23 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=4721&bc=616473&v.url=n1v8hi78htov0758ihc36mtqp4&country=CA&cb=1716679396&zTmp=1  (mytopfreegames-setup.exe)

12 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mightymagoo.com&pid=Kitara&aid=1579&bc=1082474&v.url=iaesaar802vbtpapsop2hn1fj0&country=SE&cb=-1525557922&zTmp=1  (mightymagoo-setup.exe)

26 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?bc=616473&pid=Kitara&brand=mytopfreegames.com&aid=4721ca&s=kitara&c=ch&country=CA&v.url=ugreht5j2m3tfph1moqkcdglc5&cb=-1943623609&osName=Windows&osVersion=Vista&browserName=Chrome&browserVersion=39&zTmp=1  (mytopfreegames-setup.exe)

17 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=1579&bc=1082472&v.url=ruadfqiq69keoe2nf3kg1lubt6&cb=688712341&zTmp=1  (mytopfreegames-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=gamenutt.com&pid=Kitara&aid=4721ISM&bc=616467&v.url=2rj1pe38gh4pg5v6u7pd9hint3&country=US&cb=-1348288985&zTmp=1  (gamenutt-setup.exe)

12 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=1579&bc=1082472&v.url=t4ps70tfpn452u2btos85qs425&country=TR&cb=237115250&zTmp=1  (mytopfreegames-setup.exe)

14 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=hcoe0127jkia7losbs00rgs880&country=US&cb=-828861578  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=gamenutt.com&pid=Kitara&aid=1591&bc=616467&v.url=m17b7mbn2gekfo77ie3hgqgje4&country=US&cb=-775044497  (gamenutt-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591KMIF&bc=616469&v.url=6cljnb9051h4mbtmpd8q01ggm2&country=US&cb=651885192  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=j9gk0ir4sts5vn5deun5onebd7&country=US&cb=2140417794  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=qpj1l38roavi35d4g3es22pd82&country=US&cb=1252020392  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=qpj1l38roavi35d4g3es22pd82&country=US&cb=665235902  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591KMIF&bc=616469&v.url=n66hkmsn4v7450lq4p4sruup51&country=US&cb=-810874473  (puzzlezone-setup.exe)

15 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=em3lap713muo5hvhot41l2i8k6&country=US&cb=-1215126734  (puzzlezone-setup.exe)

14 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591us&bc=616469&v.url=h9fiipo9jl3jjun9mbq8aocrg7&country=US&cb=1843524727  (puzzlezone-setup.exe)

14 / 68    (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=puzzlezone.com&pid=Kitara&aid=1591KMIF&bc=616469&v.url=uocqe51fb0k02qujukl07udkf2&country=US&cb=1889213795  (puzzlezone-setup.exe)

7 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=greengamesandham.com&pid=Kitara&aid=4721ISM&bc=616463&v.url=ikp5at31hdvrki97549f3cf784&country=US&cb=1520834648  (greengamesham-setup.exe)

9 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mightymagoo.com&pid=Kitara&aid=1579&bc=1082474&v.url=26v035a5des0ptsjktcfn3fs67&country=PH&cb=-483899186&zTmp=1  (mightymagoo-setup.exe)

7 / 68      (Adware)
http://files4.mirror7.net/download/.../dl?s=kitara&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=1579&bc=616441&v.url=q5jged6k7mfsvuve3kq7qnjsg2&country=CH&cb=-77064261  (mytopfreegames-setup.exe)

The following 380 files have been seen to comunicate with files4.mirror7.net in live environments.

TCP » 23.15.9.18:80
browser.exe (Browser)

TCP » 184.51.126.56:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.97:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 184.51.126.56:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 23.15.7.105:80
whatsapptime.exe

TCP » 23.15.7.97:80
browser.exe (Browser)

TCP » 23.15.9.58:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.32:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.56:80
browser.exe (Speed Browser by Smart Applications)

TCP » 23.15.7.105:80
browser.exe (Browser)

TCP » 184.51.126.32:443
dailywiki.exe

TCP » 23.15.9.18:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.56:80
Weather.exe (WeatherBug Desktop by AWS Convergence Technologies)

TCP » 104.96.221.98:80
dafaaepnbnaanbegenoanblhkmchohlj.crx

TCP » 184.50.229.177:80
Client.exe

TCP » 184.51.126.32:80
PastaLeadsService.exe (PastaLeadsService)

TCP » 184.51.126.32:80
kdompfkmgahepamkcopabhgippnigpij.crx

TCP » 184.51.126.32:80
kdompfkmgahepamkcopabhgippnigpij.crx

TCP » 184.51.126.56:80
dheaaopifmmgglpijealphadgejcjfhb.crx

TCP » 184.51.126.56:80
pbpjplgmaeigbnpadeajipebdlihpcfn.crx

 
Latest 20 of 389 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.