home

sharp.escriptionasp.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS23355 NUANCE-COMMUNICATION-INC-HEALTHCARE-US01 - Dictaphone Healthcare Solutions, US

Root domain:
escriptionasp.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
50.00%

VIPRE Antivirus
Threat.4721115
50.00%

Microsoft Security Essentials
Threat.Undefined
50.00%

Emsisoft Anti-Malware
Win32.Sality
50.00%

F-Prot
W32/Sality.gen2
50.00%

ESET NOD32
Win32/Sality.NBA virus
50.00%

avast!
Win32:SaliCode
50.00%

AVG
Win32/Sality
50.00%

Dr.Web
Win32.Sector.30
50.00%

Norman
Win32.Sality.3
50.00%

McAfee
Trojan.Artemis!F415CF9520D7
50.00%

Kaspersky
Virus.Win32.Sality
50.00%

The domain sharp.escriptionasp.com has been seen to resolve to the following IP address.

208.94.121.137
April 12, 2016

File downloads found at URLs served by sharp.escriptionasp.com.

11 / 68    (Infected)
https://sharp.escriptionasp.com/Downloads/.../downloader.exe  (fdaeae4606f62f9e1b9a0aa81f0038ee)

1 / 68      (Malware)
https://sharp.escriptionasp.com/Downloads/.../downloader.exe  (eScriptionDownloader.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.