home

n2rfgu2vqy.1fichier.com

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS198792 DSTORAGE DSTORAGE s.a.s.

Root domain:
1fichier.com

The domain n2rfgu2vqy.1fichier.com has been seen to resolve to the following IP address.

5.39.224.140
www.1fichier.com
January 4, 2015

File downloads found at URLs served by n2rfgu2vqy.1fichier.com.

1 / 68
http://n2rfgu2vqy.1fichier.com/  (aida64_network_audit_portable_multiversion_multilingual_online.exe)

The following 14 files have been seen to comunicate with n2rfgu2vqy.1fichier.com in live environments.

TCP » 5.39.224.140:443
online-guardian-v2.0.9.exe

TCP » 5.39.224.140:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.39.224.140:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.39.224.140:443
onlineguardian-v2.exe

TCP » 5.39.224.140:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.39.224.140:443
online-guardian-v2.0.9.exe

TCP » 5.39.224.140:80
online-guardian-v2.0.9.exe

TCP » 5.39.224.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.39.224.140:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.39.224.140:443
JDownloader2Update.exe (JDownloader Update by AppWork GmbH)

TCP » 5.39.224.140:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 5.39.224.140:443
online-guardian.exe

TCP » 5.39.224.140:80
online-guardian.exe

TCP » 5.39.224.140:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 5.39.224.140:443
autostarter.exe

TCP » 5.39.224.140:443
jdownloaderexp.exe

TCP » 5.39.224.140:443
Fazala.exe (by FelineSoft)

pjointe.com

tenvoi.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.