home

cdn.driversquadfiles.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.driversquadfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in December of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Thursday, December 18, 2014

Expires date:
Sunday, December 18, 2016

Updated date:
Saturday, December 19, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
driversquadfiles.com

Whois:
2 driversquadfiles.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DownloadBlast.Installer (M), PUP.installCore.DownloadRocket.Installer (M), PUP.installCore.Download.Installer (M)
100.00%

Dr.Web
Trojan.InstallCore.1151, Trojan.InstallCore.1327
50.00%

Malwarebytes
PUP.Optional.Installcore
45.45%

herdProtect (fuzzy)
a variant of b7970a230a924979d0a7a701d1535ae8c04dc86d, a variant of 336bafb104eda68b0ac069ddece71dc42790a0f7
45.45%

ESET NOD32
Win32/InstallCore.TP potentially unwanted (variant)
40.91%

ESET NOD32
Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.ACZ potentially unwanted application
9.09%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
9.09%

VIPRE Antivirus
Threat.4150696
4.55%

Bkav FE
W32.HfsAdware
4.55%

K7 AntiVirus
Adware
4.55%

Comodo Security
Application.Win32.InstallCore.DQB
4.55%

Avira AntiVirus
PUA/InstallCore.KU
4.55%

AVG
InstallCore
4.55%

Qihoo 360 Security
QVM06.1.Malware.Gen
4.55%

Zillya! Antivirus
Trojan.Bladabindi.Win32.62185
4.55%

The domain cdn.driversquadfiles.com has been seen to resolve to the following 6 IP addresses.

54.186.184.17
ec2-54-186-184-17.us-west-2.compute.amazonaws.com
August 16, 2015

52.26.172.249
ec2-52-26-172-249.us-west-2.compute.amazonaws.com
August 16, 2015

54.218.9.198
ec2-54-218-9-198.us-west-2.compute.amazonaws.com
August 13, 2015

54.186.33.198
ec2-54-186-33-198.us-west-2.compute.amazonaws.com
July 23, 2015

54.201.218.17
ec2-54-201-218-17.us-west-2.compute.amazonaws.com
July 19, 2015

52.25.88.134
ec2-52-25-88-134.us-west-2.compute.amazonaws.com
July 19, 2015

File downloads found at URLs served by cdn.driversquadfiles.com.

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=EZ/KEF1tG6acFoX/XYAyNBm4LRFcMjXo6sL5tOh1HyY=&c=jHVvb1l3rawRF2 Fm/84f/WUUpLMFP1nxli YUkqnLtYJUxKFzi/8PoN4tXikLoxEAgIUd5zNap8jG87l0uP5HSsmqIHYrngVlBjOZeUdpqAZuTTnfZBQ DWUtEczlVXJbXLa0fTJX5SReV0AHspOQ==&downloadAs=Audacity_Setup.exe&fallback_url=http://audacity.googlecode.com/.../audacity-win-2.0.3.exe  (741ef9a6ffb33ed5d4489b80e4ae1c42)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=k7mo49dHLCOGOyzfjJlfSm2A1TPTO6E5FW0TRZgrHqs=&c=vzUnbi0XRg4V2DPas73wxaUitNDyfIrzpmoSNYab9JVZocQBpYb/gecPykZgl624x6ioAEaltRvwBr5 uJ42Bs1pFF52s6IX147 tTXXIM2tjIuprVVG3uJDVzZDJ25lwEDSw7l9ATlnewIDiVBlZQ==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe  (82bfd7277ae8f8bc8350ebc082276add)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=nGnWtgJe0zJkEDJdYyDNHGjx wENLMHSnAMVLLdGCOU=&c=7 1/3QoWf153qlw JFphGoV/VLH9 Yo6378JsbmYL0TEfNxnltui1z5dpNlWesIwvkcLB9HubcXopcrp6Wp3de4X3222iLHVh7dhKYr9lRmweX4bbMPIOgDJ4vNsFcRG47PpWbHqJcq0Atu7Y iakg==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (90de92d233bc5d303b2339d2841e0176)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=I4JYuGKbWpknaKv1Q7gr Z7gLYhzVuLlP3tTBmHddKQ=&c=6KsNlQFx6E53AQkRYRCyVmvak5zG28yyWSpqwJbL9ew TE2hx83jNCmtxy2sDToCSOlZPhMjVdx6 2BQ47IYP3c1xXVIV4qZ4zqXDBNNty6wnXBCMcu5cGCq7S0keba8Aa Y5m6fc1/Fl/CJZyn5DQ==&downloadAs=Google_Chrome_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../ChromeSetup.exe  (e0a8dcd00366b0434e5eeadfd5636725)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=mc1D0iksn1WAogKHy6Dbr6DMRyyFPpUvZqfQigbQdTo=&c=f/8z5VuyL6Kn1Jms88l8ta5IDNREcNQWPAHrdJqTdO5ZaeaKiYVzWda77IEC0CY1HE3QVvZkJ 6ws8qs2PxZQjjTyt3vFsAczSSGT5PsqCby5KX1eIO2OiltmQybXDaH8wOwc7C7Kdy4omC4c/ gWA==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (10b5d3a925caebc4d801aa9607e6a55e)

13 / 68    (PUP)
http://cdn.driversquadfiles.com/c?x=37g7/blC8I BI6db2fy89zDDLyONOx1MczEhVEl4cRg=&c=AMFN8yJtmlHCGPpS8yi1WFZgSNUNA5JOl9Rwe3yKOL/S3DD8wBpE27It61TRXZjtEn1QBcyR47F2l0yx5/EzQWhVDjyEc9HH5w5u504 PppKsNxfrAk BFR73vGHpRUGgGfBmtMTar2Dv Ezcloe1Q==&downloadAs=Google_Chrome_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../ChromeSetup.exe  (af0672dd470a1f1646b752985b96f5f1)

4 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=Ldp8A4tnMijA7b2V4WTOW3lepPAff48DId8q2Lna7ss=&c=ebtSLKjZxlWkGp/99Q8Th8JMer7k4C92K/zAEpQlhgyAPQFB4VRo4VICOMBQbGLDuju3Xi3txyCB879zhbJNuI1dxA aSxZ4KUAHZfiALnKMUQIj44YgUvhinL3juhaH8cr03Yf1tBJZ0IDfpvEylA==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (299b8682abd689153a328944554f5902)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=SjjsmPMIP8RG4jNsTRtNID3BrHJPZ77R65Z7VO26CJA=&c=6gqpBksX33gwXDR7ElK/o/hUuTq6 z8ovgaXY16pm4ILOfl6NpxVIN9v0yD5UeDNjubfUsw /UJ8H1tHrE2f501EhheSyQBQ/YJGHW/QbmUo776jFA7shyKmr8gFGXzP3yNeYIfzMDfiVhXYP7AXMQ==&downloadAs=Java_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../java.exe  (04359d7c47f4ee6c984d6b2df2166a2f)

2 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=dbBDt0P4FGO88w79Vf8YMEaGFORJNgtoXWs1nav7CKY=&c=vH8F lDhiqTwsRdBVOBnRT7deX52Bp5Iy31AM6hhXi9PAgIhn1MYuWtzRxYpKu4teK2EM9P8ca fO6iqBVgGorNGdXU7m5IJbrP4e97tAo/2zNKDHzcsFRXVgcMFPn3B0drZdUacq2ZcA7sidJ6OGA==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe  (4a774818c17608dd0e7dc39a2b50acd0)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=tb7AOCywHHo3DbXV/ae8VdCMh8qKMot6 oB0grCmBWQ=&c=tMEuW4/cVmvojhcDUsoU/jyl gx2d3 kugzv02gmq/7WHw0ZWtOhaiDqGqYgg7HjXQf9P2bHuEGko6UzTSYlY IS2vEaFNBO5BxKjTwvf09Sf0346Zh1A0IaRWJ65WBXBi3U9QIw1HYlgozdGXIGvg==&downloadAs=Google_Chrome_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../ChromeSetup.exe  (1b45c7ca226ffcaedd17f4598bbcebec)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=2KR7NY1Ku3vjE3W4SI2piIfxWWRbagc2TSI5OPfdb3U=&c=7 MtSp7EwhyRPEQO/oijsrTBT2DzDuFW3W09cA6w6dSK s7jDGZB mqQDJariApYAiaxLHzg1StT6Y3xZzslYoWvWjFoMnQGYdl pTUnxSzJ/SiV0yYnRO1wUDeO6xnMA0C/FVx D0NHjo4BowiVlw==&downloadAs=Java_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../java.exe  (java_setup.cpl)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=vgFSRnnxGubi6FRT9wf2DZvQ 9zowq7tQlfguTGFPLs=&c=TjZ6H 2Ec9Q5Tb1KIU7nNRRjgzIhjSMHXelPdK0S5eCAa1HWy6gnbIE1ZPITlT/pS426fKyWSsdIQ Fg4BMmF77/ ap/pjxa68JK/OERQlexMMoaRtJclyMA4TfUciYl22ujpBVo9Hg Nu0LRN5PFA==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (219b869261c65670edbc5817bf3fd3c8)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=ksataTLkiQkpnRJGc/JmL0CdKl4T8RA9ROSU4ITayyw=&c=TjcvB/KCSC98pdh2rj3I2nashoo5 oHrzMZzZ9eRIYwlsenfzOrt1b7TJ3/ZY9ER0MaPJciWIQzlcW/YtuC3ki333SyF4qAJkInI42WPRl aXh7oHladRPljDkHn/2gEw8QPzwkGClHXMQ196uRKZQ==&downloadAs=Java_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../java.exe  (2550d1e339d3747bff28cce9a4a68335)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=/sdM6VIuffrX0k4L3M3myHCnd2wsxxuvQGZQzSTAORc=&c=aOKMNh0g80JNyGQVizMFCYtffjRci5c8fTRmsfGHp7kOi1IgWljJzgl3L80GIkxNGbSd9jRovV5qJ4FaOpcUYutkh4zEoBzuHSAr/ D84WNtNlnWB6rVImmGz KK6BU6mES mvW6/6v6R/JxiaXRwA==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (a6aa84feeaba67620a2769d3bd2337b1)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=DL7fUBv78lm6/KfPoSWtrATnVQkdWJiamsNHEDKkaIQ=&c=5f29LU3mHEqu010eZNXQ13O10yeFvSDP//R8zSzPKuKzZs5yoN6N6AeUMkNdc4 ISpJzSWpvR0D/tSQS25qIpLViBOu4n/JUlvQzowE4bD08ZT7T 5X8 azOYSWq/dPzZDFObKGFlRmIObPkXn HOA==&downloadAs=Java_Setup.exe&fallback_url=https://s3-eu-west-1.amazonaws.com/.../java.exe  (d665094a71a5cdcbcb6cdbed99d475d5)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=yno1KOUQb0pWNDIump5Iq p1ZWgRHQc UAYzvFIOFMM=&c=1Z5 yxEn52DY7IDIpVKEljikhJbFmJ01GJBgvD7nOy5j44WvUxYNkpd/RgN6KD4sjgSlFn1QTe9haD8uPs2Q9ZDft C75ElcOMf6FZN89NGDzu2axZQOdO8eqDyIlqLXeP/XgDz9JUI iShF2C2rw==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (1c0565e73a756c6c77feb3138e99c29f)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=yno1KOUQb0pWNDIump5Iq p1ZWgRHQc UAYzvFIOFMM=&c=1Z5 yxEn52DY7IDIpVKEljikhJbFmJ01GJBgvD7nOy5j44WvUxYNkpd/RgN6KD4sjgSlFn1QTe9haD8uPs2Q9ZDft C75ElcOMf6FZN89NGDzu2axZQOdO8eqDyIlqLXeP/XgDz9JUI iShF2C2rw==&downloadAs=Firefox_Setup.exe&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe  (1c0565e73a756c6c77feb3138e99c29f)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=Cq7LvC/azMLGMZQHSfJZCwNu0Sb1MDdVoVpkqNjK4Es=&c=Sa58Lrl6DuPN9J5v3pwMXCz4YUZdkZiss/rkalJK8lgj7tFHmvlTvCiMyqHFj4d8vB54syQgEprSvDcDVH1Wc35K4kF9FAIHiudMckgPCsApzAC2axEsMbqzxRkKcUQK h5CXU13IMlxH30 9Rutzg==&fallback_url=https://s3-eu-west-1.amazonaws.com/.../ChromeSetup.exe&downloadAs=Google_Chrome_Setup.exe  (9e5778a33a014c768f986c6e7866736b)

5 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=KiHtHNEJMZmYeOObKa TTXe/WO1qPyg51T5B4TdTT/o=&c=A ySAlQUTeLPkKbLeHwiLaJk6VpvX1Ci0EqSTQWJwlBh0MWdc4Lrp3wqRM6 xjJmqVRNwmfL8xyI06877NRnY M92WUjoapoUjADqJqv35PR8O3HNlfvIeTj5J4xNUpEOuFWL6YFJ42fbnAiR5hG8Q==&fallback_url=https://s3-eu-west-1.amazonaws.com/.../ChromeSetup.exe&downloadAs=Google_Chrome_Setup.exe  (19b0e1acd4c68cf50fe226f7ade7956d)

6 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x= j0IHAi/L er4CmWd5IyiUvX3t1uT4fu6OSc/uETtYk=&c=4NngXFEfPczDodJX/WUiOwdyu8J6seKTUWtK3ahcj5XyYV2U ZVmc4 mP8EFbHMlkr/xt WzmKAMtoaVt GmbNFewNqZZ2WiOB46p XB0ZvMwL1eotBZTeY7 N3xgRExvThWkSO7qhMTnPxwnjpidw==&fallback_url=http://104.236.185.158/.../Popcorn-Time-0.3.7.2-Setup.exe&downloadAs=Popcorn_Time_Setup.exe  (f1d19ec1c1591984ddf63e2fc41f28ad)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=OMzwOYauREFzX4MhpCvKXwhcM6qVlu7W2JUkewLOT3o=&c=WrFgXJozf5Uo3biUF0oiuIXoLsNgirQQnwepkjZHNQHrmw55OBnHtmq CyRWLI0ucQ3VTpZ/8C6psBnyAgQMzvd60m/9/W8EJrw2O4SgJEW1JWSL7XTDWYO 8Lq4dlw z/w8 syYphULcqAZfYTumw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe  (99a2c4f8005ebb9233610c071a779c3b)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=OMzwOYauREFzX4MhpCvKXwhcM6qVlu7W2JUkewLOT3o=&c=WrFgXJozf5Uo3biUF0oiuIXoLsNgirQQnwepkjZHNQHrmw55OBnHtmq CyRWLI0ucQ3VTpZ/8C6psBnyAgQMzvd60m/9/W8EJrw2O4SgJEW1JWSL7XTDWYO 8Lq4dlw z/w8 syYphULcqAZfYTumw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe  (99a2c4f8005ebb9233610c071a779c3b)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=QtbEVHBpa1/bZJdo2N8Y7GBUPiHvspl7Zk4e7c8W2DQ=&c=nC5IJwB9MAQdTcwC94jJ151nAikFqXafYxjTgS13gnH 25Nk FHm1FDFWXhxzwjL8aHc zq0Ho8QDOh6EVNxnyKVvCXrqzvxn09v8rlXP3QSqw6TyJnQeyNtn8nVhpeegV123TbZHPu/SCx14s d3g==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/38.0.5/win32/.../Firefox Setup Stub 38.0.5.exe&downloadAs=Firefox_Setup.exe  (d2a3a9e34c44f9e6687ee67e0eeca7da)

1 / 68      (PUP)
http://cdn.driversquadfiles.com/c?x=sMJXfnpp2rYXi3IK7WKlyIeCyyJJMpc9tsDvN fdXQE=&c=0leRqCw7OBgX5aiImTKKFIaNg GgHAw0JOBdyxilmCBeJ9JVHt6M4B8BncvwVDUOe2191AzWnwOZT10x2u6QwwapdI6O11PMHqQP2Li/72FTgPhQkkWuecXoJpGShhLD33JbEkg6WXyGunw6fIDohA==&fallback_url=http://audacity.googlecode.com/.../audacity-win-2.0.3.exe&downloadAs=Audacity_Setup.exe  (205baa4ea17dfc580b69201021e9112a)

The following file have been seen to comunicate with cdn.driversquadfiles.com in live environments.

TCP » 54.201.218.17:80
openoffice-4-0-1.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.