home

flash.7k7k.com

Domain Information

Server location:
Beijing, China (CN)

ASN:
AS54994 QUANTIL - QUANTIL, INC, US

Root domain:
7k7k.com

The domain flash.7k7k.com has been seen to resolve to the following 5 IP addresses.

203.130.53.126
203.130.53.126-BJ-CNC
August 4, 2016

112.67.255.198
May 23, 2016

112.67.255.196
May 23, 2016

112.67.255.194
May 23, 2016

112.67.255.200
May 23, 2016

File downloads found at URLs served by flash.7k7k.com.

0 / 68
http://flash.7k7k.com/cms/cms10/20150101/1054283032/.../Rmain.swf  (7ad1fb61c308ff1f17eaa52aa7ca13f8)

0 / 68
http://flash.7k7k.com/cms/cms10/20111206/1632033129/.../CA3D5RQ2.swf  (134e07b81200c71a760077ec313b42b8)

0 / 68
http://flash.7k7k.com/cms/cms10/20120320/1135147967/.../bob.swf  (28d6bfdf85060595a1cb4e26ae5a496f)

The following 12 files have been seen to comunicate with flash.7k7k.com in live environments.

TCP » 203.130.53.126:80
update.exe (KzUpdate)

TCP » 203.130.53.126:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 203.130.53.126:80
UpdateChecker.exe (UpdateChecker.exe)

TCP » 203.130.53.126:80
UCBrowser.exe (by UCWeb)

TCP » 203.130.53.126:80
jingling.exe

TCP » 203.130.53.126:80
jingling.exe

TCP » 203.130.53.126:80
jingling.exe

TCP » 203.130.53.126:80
pptvsetup_3.1.4.0025.exe (PPTV by PPLive)

TCP » 203.130.53.126:80
extension.crx

TCP » 203.130.53.126:80
VStart.exe

TCP » 203.130.53.126:80
online-guardian-v2.0.9.exe

TCP » 203.130.53.126:80
KZReport.exe (by Kuaizip Compression software)

7k7kimg.cn

3lsoft.com

497.com

6d7f.com

7230.com

diyiyou.com

gamedog.cn

rayjump.com

wn51.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.