home

mediaplayer1.descargar.es

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.,ES

Root domain:
descargar.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.VittaliaLimited.FF, PUP.Vittalia.Bundler (M), PUP.Vittalia.100Blogs.Bundler (M), PUP.installCore.FreeSoft (M), PUP.installCore (M)
100.00%

Dr.Web
Trojan.Packed.26758
14.29%

VIPRE Antivirus
Threat.4782551
14.29%

ESET NOD32
Win32/InstallCore.OY potentially unwanted application
14.29%

McAfee
Adware-DomaIQ
14.29%

Malwarebytes
PUP.Optional.InstallCore.A
14.29%

K7 AntiVirus
Adware
14.29%

NANO AntiVirus
Riskware.Text.Drop.dejjmr
14.29%

Comodo Security
Application.Win32.InstallCore.AIX
14.29%

Sophos
Install Core Click run software
14.29%

F-Prot
W32/A-6c5f2e7b
14.29%

Avira AntiVirus
ADWARE/InstallCore.Gen9
14.29%

Vba32 AntiVirus
Downware.InstallCore
14.29%

AVG
InstallC
14.29%

herdProtect (fuzzy)
a variant of 1a931b89f5e0fb51c36ef3ae7d15cb4e8d7a76b8
14.29%

The domain mediaplayer1.descargar.es has been seen to resolve to the following 5 IP addresses.

109.70.130.155
155.130.70.109.factoriadigital.com
June 5, 2016

185.57.173.188
April 17, 2016

185.47.13.82
April 17, 2016

93.189.35.250
December 1, 2014

93.189.35.249
December 1, 2014

File downloads found at URLs served by mediaplayer1.descargar.es.

1 / 68      (Adware)
http://mediaplayer1.descargar.es/.../down.php?p=ADCASH&trckid=14303340311394116336  (installer_vlc_english.exe)

1 / 68      (Adware)
http://mediaplayer1.descargar.es/.../down.php?p=ADCASH&trckid=33930673281401010441  (installer_mediaplayer_english.exe)

1 / 68      (Adware)
http://mediaplayer1.descargar.es/down.php?p=ADCASH&trckid=ubaa7f2e552e6e1b210cb218e5f  (installer_mediaplayer_spanish.exe)

1 / 68      (Adware)
http://mediaplayer1.descargar.es/down.php?p=ADCASH&trckid=31956991271407548685  (installer_mediaplayer_spanish.exe)

1 / 68      (Adware)
http://mediaplayer1.descargar.es/down.php?p=ADCASH&trckid=34723910311398572513  (installer_mediaplayer_spanish.exe)

1 / 68      (Adware)
http://mediaplayer1.descargar.es/down.php?p=ADCASH&trckid=32012487881402500527  (installer_mediaplayer_spanish.exe)

15 / 68    (Adware)
http://mediaplayer1.descargar.es/.../down.php?p=ADCASH&trckid=13554643751402344009  (installer_mediaplayer_norwegian.exe)

The following 6 files have been seen to comunicate with mediaplayer1.descargar.es in live environments.

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
cyberclient.exe (CyberPlanet by Proyecto Redes)

TCP » 109.70.130.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.