Domain > files.viva64.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to files.viva64.com

MD5	A/V
7d7730b225175130f554999401a60749	[HEUR.VBA.Trojan.d] [W2KM_LOCK.A] [W2KM_LOCKY.BYZ] [Macro.Trojan.Dropperd.Auto] [O97M/Downloader]
d65cfebfdce86a37df465186440eaf38	[W2KM_LOCK.A] [W2KM_LOCKY.BYZ] [HEUR.VBA.Trojan.d] [Macro.Trojan.Dropperd.Auto] [O97M/Downloader]
75d2476d7191f17357e77d9cd7b23fc5	[JS.Swabfex.JU] [JS/Nemucod.kw] [JS/Nemucod.CA!Eldorado] [JS.Downloader] [JS/TrojanDownloader.Nemucod.AHR] [JS_LOCKY.DLDUZ] [Trojan.Encoder.3976] [JS_LOCKY.DLDUZ] [BehavesLike.JS.DecKryptik.lv] [JS/Nemucod.CA!Eldorado] [TrojanDownloader:JS/Nemucod.GA] [HEUR.JS.Trojan.b] [JS/Obfuscated] [Js.Trojan.Raas.Auto] [Trojan-Ransom.Script.Nemucod]
913c5680c9072fd2d34f406b91109acc	[JS.Swabfex.JU] [JS/Nemucod.kw] [JS/Nemucod.CA!Eldorado] [JS.Downloader] [JS/TrojanDownloader.Nemucod.AHR] [JS/Nemucod.CA!Eldorado] [TrojanDownloader:JS/Nemucod.GA] [HEUR.JS.Trojan.b] [JS/Obfuscated] [Js.Trojan.Raas.Auto] [Trojan-Downloader.JS.Nemucod] [PossibleThreat.SCRIPT.9ACC] [Win32/Trojan.Downloader.3f5]

Whois

Property	Value
Email	evg@viva64.com
NameServer	NS2.1GB.RU
Created	2006-11-09 00:00:00
Changed	2016-02-13 00:00:00
Expires	2016-11-09 00:00:00
Registrar	REGIONAL NETWORK INF

DNS Resolutions

Date	IP Address
2025-05-31	172.255.232.179 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
pvs-studio.viva64.com	2015-04-06	81.177.24.20
files.viva64.com	2025-05-31	172.255.232.179

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]