home

cdn.download4windowsfiles.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.download4windowsfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Monday, May 5, 2014

Expires date:
Friday, May 5, 2017

Updated date:
Sunday, May 1, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
download4windowsfiles.com

Whois:
3 download4windowsfiles.com records

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.SoftInstall.Z, PUP.Installer.GeryonAdsSL.O, PUP.GeryonAds.Installer (M), PUP.installCore.SoftInstall (M), PUP.installCore.SoftInst (M), PUP.installCore.MaxSetup (M), PUP.installCore.SoftInst.Installer (M), PUP.installCore (M)
94.59%

AVG
Generic, Worm/Delf.KHX
27.03%

VIPRE Antivirus
Threat.4150696, Threat.4786018, InstallCore
24.32%

K7 AntiVirus
Trojan , Unwanted-Program
24.32%

Baidu Antivirus
Adware.Win32.InstallCore
24.32%

Dr.Web
Trojan.InstallCore.151, Trojan.Inject1.28681
21.62%

Bkav FE
W32.HfsAdware
21.62%

ESET NOD32
Win32/InstallCore.PO potentially unwanted application, Win32/InstallCore.ZM potentially unwanted application, Win32/Delf.NRJ worm
18.92%

Malwarebytes
PUP.Optional.InstallCore
13.51%

ESET NOD32
Win32/InstallCore.PZ (variant), Win32/InstallCore.ZM potentially unwanted (variant)
10.81%

Avira AntiVirus
W32/Mabezat, ADWARE/InstallCore.Gen9
5.41%

Trend Micro House Call
Suspicious_GEN.F47V0531, Suspicious_GEN.F47V0609
5.41%

McAfee
Artemis!546E3503A1D1, Artemis!31642F7B9428
5.41%

Fortinet FortiGate
Riskware/InstallCore
5.41%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
5.41%

The domain cdn.download4windowsfiles.com has been seen to resolve to the following 39 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 15, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 23, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 28, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 23, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 14, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 20, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 20, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 20, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 12, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 12, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 3, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 3, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 3, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 5, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 5, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 5, 2016

52.24.62.64
ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 12, 2015

54.149.60.150
ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 12, 2015

54.148.75.228
ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 12, 2015

52.26.172.249
ec2-52-26-172-249.us-west-2.compute.amazonaws.com
August 21, 2015

54.186.33.198
ec2-54-186-33-198.us-west-2.compute.amazonaws.com
June 19, 2015

52.25.88.134
ec2-52-25-88-134.us-west-2.compute.amazonaws.com
June 19, 2015

 
Showing 30 of 39 IP Addresses

File downloads found at URLs served by cdn.download4windowsfiles.com.

1 / 68      (Adware)
http://cdn.download4windowsfiles.com/?ic_user_id=678  (skype.exe)

4 / 68      (Malware)
http://cdn.download4windowsfiles.com/c?x=Pc0ioqtoxIYzSYKn0MRpxlV4EAc2CyleO6KHVmD1XQ0=&c=UXGM4QYWhsDW9L0UTUjFagUEfd8FjWSaVcLnVOuoPzRaWWeUn0dld9lRxzeG OY7Ik/xenshx/q7Ygc/XJRwbw==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (4f6ff52f54d08fde2f7a5fe83ed2cebf)

10 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=dRKbDokoADH0P4fYmMpvhQmhuUpYrI8fiNgl4tgGoV8=&c=kAc71cobe0D9ZlUPmrelB3rbQ8/ssQNEEratPAo85dwi4HmjKyTNCHMWgBqB8eksdMrDC5hEwlrmzE0d/dounqqh5b8wbIjiSYut7b45rlV3POoFsRmMm2lYgN9o/ZSY&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (0e2fa87cb60003d3a4acae0d583a3495)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=9MQZlwWPnLJZbZmgHzqVhpxtjPRyO0P8VNChhcktO7Y=&c=VqwHYmllaTBsb3gzEpbo3UcF jkHW0wjhSNNB5KB60gG9M3QHHaUW i/7B2PYOClrtrU1HjPt1JWZVfuaz2Yqg==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (c5cb45943ad37b0ad6b184d243ca17f4)

10 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=SfCSd3pGCaGhAL8wUR8beun 4 kfu3fkdSSyXab6xyQ=&c=P1xyWTWwUcOSJcU6eyV30GR07GGIk71 3wgAghyMvt /8da5FVhmt31fcuAtoGeW9/9baI7Yb9RC1Q0AmyrKMiOLdpFDh6E61 8Z KDdCCiXLGHz0R K MgQGrEX2ox&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (0e2fa87cb60003d3a4acae0d583a3495)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=YkerlH42cwX4JM/zqM6pUKH/rCnIY9OtZ3AXqdQNubc=&c=jBU22Ji99JrwMV81X6iClX 3ksG7BlTTPFU3iG12wFXmDWgfyvk uQEpdkGS7MIeTpSOzv5HUc 4Q1dOcTdSbA==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (Setup.exe)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=TI3GUnnc ySiC49hUMOPhPyi9ABprEiVsxQDAdlV q8=&c=nivU6pJ5KLUxQ4FGjfBYqveuACwnQVTAs80Wl XX1szNYxQdJ7ETDHYIjNDduFOaJ7RmU50svpjtk5okTVdKhQ==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=CItzJjfspLx24PQ04wLGbgfmTJT8TVdk9c6U9Rl5eAc=&c=I y0kJyMwTmLCC /CMdd4v/GauDnSbiyBcXKER5ZoLMfRhwiATHYs66qh3fkfzEaEtEznlfPRImXiQcQV/IWnw==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=P0dkjJqwpO1PLvpiwpX8zgOTGmk3Mt3xrNHWz74pj7A=&c=jRQ5fbw1qrk9ARuHYnBLyt07NE6uadeHp8XMNCZcwHBkRRgcpfEoYKH4f95GPmPMyfknZdaIrdrlKPnOSTemBw==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=w96bJhiSzBLvcfoynbrQE/ePURbpO7h36DQ6buPHjJo=&c=buwY6AK1O680gG/R9PC3/r/dt9sEpsMilJuNN84ZdHGPnbm7fG/4KTfP9qtBceEPtvSmsVx2MTzUMn/Ow1xnnQ==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=JXpmVqBDcScwx/NjkhihUnw9yiyuxRAjIcfGGB1gLKA=&c=Xfi xOCnOooKqXiaJg2Y3VTRypEKCBLYi5bqqQmgX fTSyeM2bMhYVNZdoMG/qAhFnEi7sedxLGP3x1qOoMypA==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (3832f6393e21b62aec76e9a85eb1a0e7)

8 / 68      (Malware)
http://cdn.download4windowsfiles.com/c?x=FznY aB9adV0RbM2HdDxUf76thS8M0 kip6c58OoJIA=&c=7QQRuSUeX3fWwuI4FC8sA1 BvZp1HausZD2CUGcvR0qQBj1ud9FtxPELh OKIOPe876Y7cfuAtuK8QfT6RNLAw==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (c1bcb3720af80edfdf3310ac1fef958a)

10 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=dIUNIgRFL86lmsHWBddpVNtq1/gtZscWx0nTltTZ7dY=&c=NggaO8jxLj7BWpu4l0RdYFfGkeAEq64eLGmLK7CEkn6IeV7Fd/2d92Hpoeep/RMU0bPl7bub24nrQ0aYybYZXciKQcSxRbuu/E/AhOF/qTzcoma45/4Vvz6bjEWgXRAZ&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (0e2fa87cb60003d3a4acae0d583a3495)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=vSyan3qYEDE2Bkq1QimNYbRoLbQZz9BYzza2agFULI0=&c=p//8AEKlOS6F13O5mSfokolPNLwsxVfBSL3Lsz/p2H/EgEWTa9qhkfFktIDbJd qM8xtZGuGDlzcCK3OJ9mmDg==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

9 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=awf6p17nEoTqmjWNxKKmU2cOp/JiX5IR9bTxTIbzwiA=&c=7KodkxGJnI3elyRcYk9d0pBEuqWQlPrCbZgdurOHE63vK32uIqDQi0ojOs41gzW5Ab/qXeg1HF nmLVH5LFbYA==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (8dda8b04faaa022782926cc98d2dde94)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=RtR5g1vhjAYBxRe1BnBP41l96Mr7 SR x4uvlwMbb6E=&c=L9JABWOqr16OLZWRtZ9VDCmw gTY tRAizwdBELNF2SVIGgXEQ2ve3/9FAgTHNAn7WeFkfMv2nvr1dLT316pbg==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

10 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=B19q2rfJbJNshQOeVF7lF5ENLczNGhhe9vo7s2Y0ysE=&c=Niy7K1lRJdzPmKQQI2fYVVoWJ3UPxsCAmbggnD/HiPtxEP7sWnzet6zZkQcbqk/hcD7vBNakqCikllEleThhgwyRT Ge/u4yKErUQV2AUheF5vndzUPD T8T0hoFl6Db&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (0e2fa87cb60003d3a4acae0d583a3495)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=lLGfHO9 KtjCRhSp NEkoIdkJBI8taJw7lqDRk5wLaQ=&c=0KWveARNaXqZcH2l4bhpT19KMSDLEwkBdhEuHaddtJw9yqctAZDNOrF fPDZCGda/s/y1E 7tVBdNZ0pdGW7hA==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (98b7d2f0146dc9064e26aacc72f7fcd6)

10 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=8VEQqGSgsbUqimWbJFk gmWi1daW J6GLwKvn/G6D3A=&c=COaQDzSX2qvqnkLYoql6L/Q6qrPVUIL2GiTffkziZmIV1XtNkEYSHgvFdFbAKtNTpt1Dt3JlFWA0eAi1CVzldxANw/svO2dkCqySv00K0RsIfGS6b3a8hc8RC1 CKOJD&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (0e2fa87cb60003d3a4acae0d583a3495)

15 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=J7R2KR77gvmosRH/mxYJ0D73DTr2xPAqskZOefSDqec=&c=jUzenqOFylMiD7O3CJN9bYqNa/BE/N99MjtDvOPZPo9f7nCqdjrO3SF wrsnZMgVRsAbqizFpXDnHQWmbh9s8C85pzWWci3Br9Y2cUH04I0fiJ/WF4J 8wM3jUp1f6zD&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (31642f7b942868f12bab4e5e8a180464)

8 / 68      (Adware)
http://cdn.download4windowsfiles.com/c?x=WFiNrx/rsz7nvuUcvZqpbYkjanF8jf8t8zm8fUT7YW0=&c=8MlRj8/XEsOptmGQeuOlZ9j5 s44kZJ3jAA2tax8a4dq26eHjv4/ZkvC6fDeIQBmApAlY9Z4gkDQpteij3Cv A==&fallback_url=http://cdn.download4windowsfiles.com&downloadAs=Java_Update.exe  (c5cb45943ad37b0ad6b184d243ca17f4)

11 / 68    (Adware)
http://cdn.download4windowsfiles.com/c?x=jhdBay/21OpfbtaF64Diw7p8S4TBIohtwWke6 Xt2eA=&c=0tkmsnWuQFPP9MSJvBh45ygE0UrcJLIgoeyo gOsoQXe4X5sxLu8vPEov9xgmpf4y/CbrBzzEJUGI fKToyTkw==&downloadAs=Java_Update.exe&fallback_url=http://cdn.download4windowsfiles.com  (Setup.exe)

The following 51 files have been seen to comunicate with cdn.download4windowsfiles.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 101 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.