home

wxvu5g.by3301.livefilestore.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation

Root domain:
livefilestore.com

The domain wxvu5g.by3301.livefilestore.com has been seen to resolve to the following 2 IP addresses.

134.170.108.48
February 17, 2015

134.170.108.96
February 8, 2015

File downloads found at URLs served by wxvu5g.by3301.livefilestore.com.

5 / 68      (inconclusive)
https://wxvu5g.by3301.livefilestore.com/.../ComboFix.exe  (1d26bab4fbb015ab4c9a123ab3554763)

0 / 68
https://wxvu5g.by3301.livefilestore.com/.../HitmanPro_3.7.9.234.exe  (hitmanpro.exe)

0 / 68
https://wxvu5g.by3301.livefilestore.com/.../herdProtectScan_Portable.exe  (f_00d578)

The following 15 files have been seen to comunicate with wxvu5g.by3301.livefilestore.com in live environments.

TCP » 134.170.108.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.48:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.48:443
browser.exe (Browser)

TCP » 134.170.108.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.96:443
client.exe

TCP » 134.170.108.96:443
browser.exe (speed browser by Smart Applications)

TCP » 134.170.108.96:443
browser.exe (Browser)

TCP » 134.170.108.48:443
53634e3068b26b4745b78fe30ce47f82.exe

TCP » 134.170.108.48:443
Client.exe

TCP » 134.170.108.48:443
EagleGet.exe (EagleGet Downloader by EagleGet.com)

TCP » 134.170.108.48:443
ntcontrolsvc.exe (by RapidLights)

TCP » 134.170.108.48:443
client.exe (ClientWrapper)

TCP » 134.170.108.96:443
OneDrive.exe (Microsoft OneDrive by Microsoft)

TCP » 134.170.108.96:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 134.170.108.96:443
spd.exe

live.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.