home

files5.galsmedia.uz

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
galsmedia.uz

The domain files5.galsmedia.uz has been seen to resolve to the following 2 IP addresses.

54.210.47.225
ec2-54-210-47-225.compute-1.amazonaws.com
May 27, 2016

146.148.34.125
125.34.148.146.bc.googleusercontent.com
May 27, 2016

File downloads found at URLs served by files5.galsmedia.uz.

0 / 68
http://files5.galsmedia.uz/DjimBoB/.../LenovoShareIt.exe  (shareitsetup.exe)

The following 5 files have been seen to comunicate with files5.galsmedia.uz in live environments.

TCP » 54.210.47.225:80
online-guardian-v2.0.9.exe

TCP » 146.148.34.125:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.210.47.225:80
GoogleUpdate.exe (Google Update Services by Google lnc)

TCP » 146.148.34.125:80
online-guardian-v2.0.9.exe

TCP » 146.148.34.125:25
remwepqixynn.exe

TCP » 54.210.47.225:80
rtplugin.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.