The domain www.express-files.com registered by Faglaro Enterprises Limited was initially registered in December of 2011 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software.
INTERNET DOMAIN SERVICE BS CORP
Tuesday, December 06, 2011
Tuesday, December 06, 2016
Saturday, December 12, 2015
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN
Google Safe Browsing:
Detections (100% detected)
PUP.FaglaroEnterprisesLimited.L, PUP.FaglaroEnterprisesLimited.S, PUP.FaglaroEnterprisesLimited.J, PUP.FaglaroEnterprisesLimited.M, PUP.FaglaroEnterprisesLimited.Q
Express Files, PUA 'Express Files'
ExpressFiles Installer, Threat.4783941
MalSign.Faglaro Enterprises Limited
Artemis!1FBDCF9C1254, Artemis!F6D0AA29E5A1, Artemis!0AC7EE6F0F3B, PUP-FJJ!FD90B2D4980C, Artemis!21E11F84FA19, Artemis!3B7DBC48D072, Artemis!6DCDD6F0C665
McAfee Web Gateway
Artemis!1FBDCF9C1254, Artemis!F6D0AA29E5A1, Artemis!0AC7EE6F0F3B, PUP-FJJ!FD90B2D4980C, Artemis!21E11F84FA19, Artemis!3B7DBC48D072
AhnLab V3 Security
Win32/ExpressFiles (variant), Win32/ExpressDownloader (variant)
AdWare.Win32.ExpressFiles, not-a-virus:Downloader.Win32.Agent, PUA.ExpressFiles, Win32.Application.ExpressFiles
Trend Micro House Call
TROJ_GEN.F47V1123, TROJ_GEN.F47V1127, TROJ_GEN.F47V0721, TROJ_GEN.F47V0430, TROJ_GEN.F47V0922, TROJ_GEN.F47V0629, TROJ_GEN.F47V1101
The domain www.express-files.com has been seen to resolve to the following 3 IP addresses.
February 9, 2016
December 28, 2013
File downloads found at URLs served by www.express-files.com.
The following file have been seen to comunicate with www.express-files.com in live environments.
Statistics are for the previous month.