home

bbfs.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
Active Registrar, Inc.

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ezdownloadpro.info

Whois:
2 ezdownloadpro.info records

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

ESET NOD32
Win32/Adware.MultiPlug.FC application
57.14%

Emsisoft Anti-Malware
Gen:Variant.Adware.Mikey.8516
42.86%

avast!
Win32:MultiPlug-VY [PUP], Win32:MultiPlug-WR [PUP]
42.86%

Dr.Web
Trojan.DownLoader12.35534
42.86%

Lavasoft Ad-Aware
Gen:Variant.Adware.Mikey.8516
42.86%

F-Secure
Gen:Variant.Adware.Mikey
42.86%

McAfee
Program.MultiPlug-FWG
42.86%

AVG
Adware Generic6.SVC
42.86%

Sophos
PUA 'MultiPlug' (of type Adware)
42.86%

MicroWorld eScan
Gen:Variant.Adware.Mikey.8516
42.86%

Malwarebytes
PUP.Optional.Unizeto
42.86%

Zillya! Antivirus
Adware.MultiPlug.Win32.225844
42.86%

K7 AntiVirus
Unwanted-Program
42.86%

F-Prot
W32/MultiPlug.H.gen
42.86%

The domain bbfs.ezdownloadpro.info has been seen to resolve to the following 3 IP addresses.

185.53.177.10
June 2, 2016

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 5, 2015

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by bbfs.ezdownloadpro.info.

1 / 68      (Malware)
http://bbfs.ezdownloadpro.info/hp/?q=cQ7P2ruatnT9dCDWYSJTy4Rli6gZzPAc7/K95b0VV1 MXZjrDqdA2OuC7LJKqcsbbnsTBH9LWIfyoUQcFtKxSGScGREIOZYq9P6X3n58yLkE3zDqkUjD5uaI8i9/EB80yn26/0JzD4VGKCrpYayA6RyMjX0I3g4krHEXeXG36/euv0CrFANqAQbf0nOHmpGynVwkC0Y1 S7l4UvzW09WlNeliCaifeOXRrFQBO81VX/3g8FovdO5nOuIqo46GwH0Acno/yfUizXn2h7JT59warAqzRWV02I4p4ANQaiZUB60KVArxAYSohlIgHVw88RMRwTeaq8 HbKJXHrqH7GCKnPLTmykRHuSBZM8elrTs59JimpVxb81sW1Ate4Q9qOzl8N g5fbgbAzUal/ngudu8ZNotZhWWv cDAZRWTQ0RHJrz7GAubZwP6beeFlnuloz5PAmv DBN8s yuj0ap7KqqfcTTpEo2TeEgL3etsvYjdgZxfEoU1zMqwze8AgMd29A/Njb4cqfeChkPnbQpbnqGqet0QZWRq8NZan3DBDiGv bjoB3Dia2t2RfX7qiJTTMVYS R5igVpdB3AShjXT9brJ5ea5TpTJULeNzH6poM9N9ePngZn8HzggWIoYJJe1zV hoh6Djke5CYx6G3emWRiSxMx/3tb8dGIaOYlB8y6 NOff4TumU37Fl6NrStrOe/VQfhU2qqTV/2pasLEX97OCPODvrunYacJccJDnQ910XEzTuKT9u3L9WqXiC8Z49aBsQwF3TVGLLfgzc37P /GlljrYzo7rvOqTYIayrCbknM5JfcM5q5O3iZiUT9/.../k4hz3owq9Ra6eqIBBRJFaqY4CCCWEQeMu smcsegkv4KP ciJ5clRJbs8QJEI&external_id=1425331053628448846&uuid=3QcaE7srTf9uT6fnDd2Dxa6yL  (downloader_for_gba bios.exe)

1 / 68      (Malware)
http://bbfs.ezdownloadpro.info/hp/?q=8zvcG4b/hZv/eZTVNP FJIgnW5UanhqiltcT1R0fcx2T6APSX/rl5cjvVS6cGoLMdyQj9XcknRYmhI5LEz2gVLnr1DSO7E3Yrfk52aIye5Efis 3yhGvUUQZ0CUibEiJXgkcp3aD22V0Je3gPqrpbW8ikcf37vlXAiL4J2BagkRdxt8G/dOUr4rMdzk18eZRR2XrOZmqOVTuDdKTuek3Rf7KRpvhT5FfKy1j8KQG rKUvzBBlArnjI Ig1Uv6FR OTA5XFEXNLrpX3ROpXrSaVFaz15N9YIDgeRoPCcZPwkGoXE2dIUufT7sT7/nvv2TP4IYBDZYEXwcAfUXOFtbiX40cVuo3Rsag9VmM2KvKVQIe8P5dz/.../WfsL3i3g4X94nkoeYIeuRlNe o0T4z6Zk4QJzGCVHdLgCLplRYtGjRK59IlDvuEGJnNhxGaMS9PHBYcrj248K1Fh1JpwmyIX9X5XmQ 5q27LMnijUJumDqcfhjGqJblYUAxsB&external_id=1425332500194473084&uuid=GoGUYb7fpGSfjubfAGgbvm3wChVWjvjqLYJ119B7Cnzng8MLmxGhoFGML1dkae2qhBdl9U0UPy3dx2PwwQuIs0q6ETbmEWvaoxkABmbJ3YahG1smebnwLPked4lzi4kEDhTKbxFJoo12nkhSmKQFwskUPunjFRAfAid2Qe8yc8kRld63LN4ZgvO7r1tDCFCfqhcPm2w6IhcWJjtl9Fwy8CWCU4MKOdjpV6Y7czw1amVImAcJTfpCirRD2VuuTeg75Q5FZzpA56i6PmnNc66m8W3iUWMc8CQfLWSoSUhIr50HI9J69gWS  (removewat_2.2.6.exe)

1 / 68      (Malware)
http://bbfs.ezdownloadpro.info/hp/?q=y/xhIySIbv09n789/XQJ0IpaDRIobdBoB3A xR9K1Tvj/YdpAzmvamyABpOrkA65MUHFtja8s9Mnc6L5LZxEp6udHYQG0dflaSeCfb CFNDJ8u0BuA95gBsXemcdkhFMm XGsrFNcEWSJhl7BqsEF9RlVh5b4Euz/sBS0sy4tEGv1nwlbyQ5Q/45Ob91Ad93AkKNE7Tr2IvdR3pdxWPMi13fCkVWFsJw2yYUSbft6UZ8wXUkmPEBn6Q/k52Gp8DUfNi9NeR/eXbfdFJSpMxZN9bbAhHQLrIRXljYZhpE8ouIrBywlt1e1OTaSflqay7F9 iLN12K8iHkH6mynP7Zy5SJrBBv1Kgq THZi1O8gA6cH9NYnQaO8sNY98N9xXoSMrhUDnOJxpLh92ppzqsxHBW7KyhERovp5tk/NxznPCVnapBYo23osHKpAOKxKT0QKkDi OXGOawXAO7wh3FelJOvpMv4F48eJZVG69AY MzE9DTHJ9X//skLRNv0jMB7g3NQ zKfcLLgvYdh50HDriGbVU1 Y4sx1s /Ye0hVh35ESz2c0oG0Kf/X4g/GkPdS3QNkEjWFsuLhv4KoSMiumjx 1tsqYyajagXtTijI0kwQnBl1GgcqMsWGOhvQZOP/uBb98gC4iS3vTC/imOO75BS mcdzCJOyq9HYXKMAUzMdKXBVhgH9HQvXgd/977l2fA/.../o hYTSztXUvBOuTSPZ6L18nyrEZtW g6Ie83Bi7Rwt0LbQw2XfGkncDVleleidnK84Rhv5dOoHXKaF7V apwjdYhfSJ6W11  (dff0.exe)

25 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=K4fMOtvoXgnrCM6ysuMNR70Eb6uCAGvlQ DuRsbtO RSo QrjJUXXdeggG8g3J9mO6NYUa1H6KwNMyMb029n1iRUgANZv5a HUKkWYALCBC3FlaY3V/Pj5z8O7SqzkLL11tYvVV9uRVQu8z8ubLwvunAHXq517atHntsVZBlwPeIh8KvKEVzGufg5SCs/2gvdG7s69EGvoKdjo0kKlYpUOuUpZQG A tARCatKGuaJDgweF6R8aR472CLxwEdwU9hoTYROv/DcRU9xvHgONkakqApgwOaSM7y5xG//KZXkMeNET5 7gDhFalVWHdrl5tzluH8c8BEJ6tp387aRaVk1kQQ oxUIAUc9MBJPd7uQPheVrDV0NC0r9iEWyUSgw0DTCWoIkJiLgQ6gq3F08rMuw9&uuid=9GQdgdeh87NOgC6n45AIVBfZrGEXouCK06pl3RiinS7A6lpScbULNbhDMByGM9blMs3km3mTAoAqfb6a4oH88ynokD82fvyGvWA0wJX9mpkWigiZlFdr5inEXIVMGnNt0gaddYDZCC6iVTvdErWB8Hh1IJ3XLwQs6Nao6AXZhVh6Hi719U7NCIzJNMGunTopR7lChASoOh1HqIhyfTdCJrvoR130EW9mFd5ExfwhBQcYg0kXlumSSxzRwOVGkOOlDHwEg3dSqmlptW79uCd5H5dM9PQxf2uii12S5VMYGSeUdNAAykU3MA7RJuEJ9qhT5BAyfwY6amn90y159QjnRLGHRm24Wp0ngOfjSPllXCJdAa9k4x1BCJybsDIxovtMAg102tnct49qDafCQuOV3WA8pbpwnln8NkuEXbxJdQRiXVJgI9VYSpRsf0HKEfIQSBXJxSAUnKdABKeyDK3yx1dyxkUFhyXVn0NLuOyMiAgyDfs8p99fKmcxM4JbbXNlj5Ga2mSOwLK  (better-call-saul-s01e04-arabic-subtitle.exe)

25 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=ykcYU7SQSWBSOSUMOQwHPJKldAHjau2EL47kVfAVK1osnB8 YlvTNxDkGyYhWNZfbc2Mq3rFxtbYJkVpOLTDAf6 HNvr0HQIyIbZM6N30HdsoSe13Z9Nuth Yua6LmsPHNrhKHqJMmR2vzk4Lo4yjJfdOvAhVtfiv55T GBD3BDvnGOPIwt2gM7XhuhxwcwK3DaLqHZhYt0LAeC/9NrgQNnvMmIe24pnLoYf7poPtkTG21n8ukUpEyqIACUIba12oowe0dv0O/EPPP6XaISPfgh2BcYj6gseyE48lDkqnHPtWHLpN4ouNgBVzk6vBd8 rYceghv/zmxJVCAdVjEBZpeDbRQeTQqiN0Ky1QF6Nr1Uzj50o7TadpD6izALvgns5B2f2Qn0mUXlQsZDCOk5drs8JfyEZMUhq/umOWs3uuX1z9SQ3DLU9YaPNsmrQGRLY3MWci5W5dVqW5 txL/cpBNv2zM9Ir6PY0GV/.../g3Kj0U9Bkc&external_id=1425319665164875279&uuid=gQt5mGQWa9DQe19aYrOu8cnMfVwioF0Q3hINsvHbLNDZKIfufJajxRZJj5jgb1In2Nv5DQu63FWDsbFPit1Dd6yNcH73QMNBT5YnWZuA3WJb8AQhvnc9ErV0Jb  (better-call-saul-s01e04-arabic-subtitle.exe)

24 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=Vx7P1/XEnZjAcNs9/XapzLa9f7DNGjBChow5GWV6TQbBI/j4I8IOy ioDXDCGc9hE05h4GP5zMn1O0cCMLYIKfEm26gvKBWmoJh9B/qvChb Y0c3dTRa/U1DrjT4z0HkrPbD9KZW1Nkkoyqs4Tmh114FiWUWHYeHJ PLUsZXy/.../G3x 9cTSz8sSXqnbYAicRUA3AaydzX bn2ZaHHFg2uh9hNI3ZJAsbVSUpj5vmi5W6AcvKY&uuid=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  (house-of-cards-s03e01-english-subtitle.exe)

27 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=nU7P2vzmjQ/ngefABCVeygZ8N8NCNc1w0up4WZMiA5hdzkvo42jateALw5vtIz1R82q1KoUSmYnzhC5RQbqxZbbpndSrzkc6AugjvnH6q71VuAJG4SBkhllgI3uvIv55z/MnrXF0MAY9Y1/0WbF1fkYSUHoBQB7tjwPGPfXHLZqtkIn8TiHYzmjkVnmq1kplhlIBWIiWgs7GyJG1Bz0ksblb9CmtRowyI5SSF1Rtnslow6ZsbDywy63WEa0LgDftm/.../SbIbonuYtxKVKNAU mBmiFadhCu02a2FtwJP9GrhKR30XUW8omFMJT 7chhWUcdPOI IcvmyqVN5T7XRPK4oyIoDohdL5cTrvBfXgb7qZoBEKg4d4vp8GWeYYHr8uV2bMgNa0v3hNHNeMCX5v6Kzh6XnyaLQ0IXwszBTDiK7o3MCmCaDjd9EnDMS 7jgmbvecqHrV7Smn9L9maMB&external_id=1425327733847249144&uuid=k2XL3ijmOuVtzLtH8NReQC1EM8FtFG7zHKCxTZTmbOjFm4tnXtCEMATilxpUoAmWyEREy5vgLSx6Hl2GqBVzEVplMZGHdsyzfUoHsuHcmCfsrudnYxLhJ8ySkNTOVirbD0Wpdg9oPQJFFEXa8aJxeZKEheEfD191gtOqjjMXiBI2zFCbgaMEfr3h4JufrSWYOWDlXtCpXLIE84C8m1nkVLctLbhIHproHmEcwg1D9eDIhoIm2UJmGleGOxRemyr4CiA4giRCl3v4rOKAQjZfDWMxuCExGAbrM7da7vWVim5qnsOXjQUHu2vAe40DAn16V31TqFZQnITH4McZqcuMNuLhaQ1jPPXmv70sFMg1M7GJ4v4y7qfJT8eXpNjczAyNcbGMREt2r9If3nd9po9NmLfqwuNXqmtG9hTxAuhmuTHOqZG5ppfN  (clash of clans.exe)

1 / 68      (Malware)
http://bbfs.ezdownloadpro.info/hp/?q=eL3ZVWokc5zEQYSUMOHqybqdEljLGrK0/PwTIs7lwKt m6z5AqFpLBAeDc3VcHCPTflc8D6 SB3gSCosugnaTu3UWGStQel56VNhMyI wp2Tu5gSEoYPVbDcb9cAODzq94shH3Kx3f8au5CDimriY1ljf37jpYq4CQs99H6AdeeeLb4QMgEPOmi9lZNxs43nOUg lzYv3/mVwVNnnYHmhx63xgrTVXQeayk55ULU0rjawO/Mtvm BNlHjqzYVxAWSoeKkD7p3fYsKc3N8Ez0TFxzRwVW/m/F0WulnCVrVH9b0LiiLRYSHCyrYjcIW69HkpFaZ4tGgJnuAfhd jX3QBzOtyWRlc2Dz2LmeS0BXeMwF2qaSXW/P6f8WLVsITzooyF42z66aJJXPNixRAzz3JioTOleqGVKgUS7e/W20oHRg/Eg57Gv 5y06d5ppCq1gDfD 9CwWTTFJjcZUdM4vksdOk6E7ic3yZIw8jMpABS9RKMnrZfYj3zjub9fsxglzb18qJnVgAb hqos9Lq1tUUsZhmxklKbrMRNK vrtCZekCIzja9TVVHV6wA0901TAhNmNxRJLBmQuzyXJp/.../J4X1ARjiIixIK0A&external_id=1425326989789464849&uuid=u5ZgueZidG1G4M7f5xFVNXX9XK3xvyyOkk1zsTYmWWHKpYm7QAouvkMgoVXj0mS4vb17IoVCEVRA6QyGU1TpbRJefWZxz4BGfnXKoUAnsuAnnPOv2obXzDDV31pydfPqwp1LWih0dsPLYgVmMIrMOkFhzyOMxSHeHe9UZz6EhKtaVuC4DhpITIm4KNZzjJT2q26gzLKQAVGOgpM3xnCePlpAYNMKJ2CoBRnu2vThUheVKYio9rGP40Hu1OjdTtol  (truecaller.exe)

24 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=Vx7P1/XEnZjAcNs9/XapzLa9f7DNGjBChow5GWV6TQbBI/j4I8IOy ioDXDCGc9hE05h4GP5zMn1O0cCMLYIKfEm26gvKBWmoJh9B/qvChb Y0c3dTRa/U1DrjT4z0HkrPbD9KZW1Nkkoyqs4Tmh114FiWUWHYeHJ PLUsZXy/.../G3x 9cTSz8sSXqnbYAicRUA3AaydzX bn2ZaHHFg2uh9hNI3ZJAsbVSUpj5vmi5W6AcvKY&uuid=9YOFDijKXND5Y8TjDpRcJtuwSaG4IiFaOjMjh2JPgeGRvZTl2ttT0W2lnYNYDN7FgI1OC60z7tLCyhFR38MrOa5qlsdthXSn7QiElMRmZhs0ZOWnew7r0JbFp8jQLa8lNWWT3MXlz5KYjMJxNMFZg2q5nXR9KLjpwLUTO1uWP6CHQhQ7Ex2SNveQSIYPjcS1D1948z2KMuw3OoJRViMHRyxk0G9zcAEENjmYYm8lgIrukN7m2ueghbHo8cYTiwxc27Rqe6kLoELvkKUT1lDYqmLKoJn2t0fQRzTJe1xmA0OMIBGkC6z6bBVlNzjQCExipLrxhEk8FQcOJ8iRuxiWLz5zhhDIp5XSyZ79pDMWpTzPWgF212XfJM7GacdAL5hXBMpdFW4qk9dDdzJFAFtwQeUp6y8A8Ez7Cc2KspF9wi9FjZSzeq1QWPVwJ5xgCA7ytox5bEOfrFyuW6NQZybFSD0Zly0paRZ6anlS4IeyNF9Ch4WzufD5Kz2Mcr3guLpP6tYUlJOP24Isv1XAc6g0pHrRIlde8qFar  (house-of-cards-s03e01-english-subtitle.exe)

25 / 68    (PUP)
http://bbfs.ezdownloadpro.info/hp/?q=ykcYU7SQSWBSOSUMOQwHPJKldAHjau2EL47kVfAVK1osnB8 YlvTNxDkGyYhWNZfbc2Mq3rFxtbYJkVpOLTDAf6 HNvr0HQIyIbZM6N30HdsoSe13Z9Nuth Yua6LmsPHNrhKHqJMmR2vzk4Lo4yjJfdOvAhVtfiv55T GBD3BDvnGOPIwt2gM7XhuhxwcwK3DaLqHZhYt0LAeC/9NrgQNnvMmIe24pnLoYf7poPtkTG21n8ukUpEyqIACUIba12oowe0dv0O/EPPP6XaISPfgh2BcYj6gseyE48lDkqnHPtWHLpN4ouNgBVzk6vBd8 rYceghv/zmxJVCAdVjEBZpeDbRQeTQqiN0Ky1QF6Nr1Uzj50o7TadpD6izALvgns5B2f2Qn0mUXlQsZDCOk5drs8JfyEZMUhq/umOWs3uuX1z9SQ3DLU9YaPNsmrQGRLY3MWci5W5dVqW5 txL/cpBNv2zM9Ir6PY0GV/.../g3Kj0U9Bkc&external_id=1425319665164875279&uuid=gQt5mGQWa9DQe19aYrOu8cnMfVwioF0Q3hINsvHbLNDZKIfufJajxRZJj5jgb1In2Nv5DQu63FWDsbFPit1Dd6yNcH73QMNBT5YnWZuA3WJb8AQhvnc9ErV0JbSBEQXhHyjE2Jfe8Vs4YRFZm4wBcAkrzfx7BqFp  (better-call-saul-s01e04-arabic-subtitle.exe)

The following 3 files have been seen to comunicate with bbfs.ezdownloadpro.info in live environments.

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.69.228.231:80
download.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.