home

get-files.taimienphi.vn

Domain Information

Server location:
Ha Noi, Vietnam (VN)

Root domain:
taimienphi.vn

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.XMediaJS (M)
100.00%

The domain get-files.taimienphi.vn has been seen to resolve to the following IP address.

123.30.238.26
static.vdc.vn
June 6, 2016

File downloads found at URLs served by get-files.taimienphi.vn.

1 / 68      (Adware)
http://get-files.taimienphi.vn/sf.ashx  (office-2013.exe)

1 / 68      (Adware)
http://get-files.taimienphi.vn/sf.ashx  (cyberlink-youcam_6023260.exe)

The following 14 files have been seen to comunicate with get-files.taimienphi.vn in live environments.

TCP » 123.30.238.26:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 123.30.238.26:80
browser.exe (CocCoc by Coc Coc Co.)

TCP » 123.30.238.26:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 123.30.238.26:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 123.30.238.26:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.26:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.