home

c.proffi-sun.work

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
proffi-sun.work

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Normands (M)
100.00%

The domain c.proffi-sun.work has been seen to resolve to the following 3 IP addresses.

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
March 2, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
March 2, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by c.proffi-sun.work.

1 / 68      (PUP)
http://c.proffi-sun.work/hp/?q=xQ3ZV/uknpJnH6789/OOHgRn0Q WxYYjsBDO5hZ8SZOFDldDCu8emtNxS6E1klOUXE98BFO2kba8hT5AMd1xUCPjy/sa3Gpf HevogJzcEoI1 Bnzqh0gH1dXiWjl2qQcyK1ARPd52KFGLunMruTGsSvg3dOe8F8n4jDulrdxNiUSk5SAC5DZ6RKwKP89Pwd3o 2K5EdakToNyC8WfXkIUhUuqSjilYzk8ET2bHJ3ThwH2w2iFBdoj7XJkQb3IA/.../Lowp9qMavY61JhoIb8hDEOIYy2EuMnBOAIO6y22SeCI6LOo5c00bAzyPdjQ8W&external_id=1437888239796425565  (half_life_1_update_counter_strike_1_3.exe)

The following 2 files have been seen to comunicate with c.proffi-sun.work in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.