home

cdn.goodfilesground.com

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
goodfilesground.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
66.67%

Dr.Web
Adware.Toolbar.576
33.33%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
33.33%

Fortinet FortiGate
Riskware/OpenCandy
33.33%

The domain cdn.goodfilesground.com has been seen to resolve to the following IP address.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 30, 2016

File downloads found at URLs served by cdn.goodfilesground.com.

3 / 68      (PUP)
http://cdn.goodfilesground.com/c?x=USPrFQPVauOvynv/udlk7vNSRBIuI8954DFqMCCfkyU=&c=FRY0/XdD56wTYjzjRb5QKT02V0I6l/9gVsYhAn9drV0l7UPlWnH/4XbFkOoDLWiBzEZTspSyVYe0OE4kXGul1mWG79ZarQTJ/UOElaolu/tqVK xQKqqfUutZgZDEHY0&fallback_url=http://download.dvdvideosoft.com/.../FreeYouTubeDownload.exe&downloadAs=free-youtube-download-32-bits.exe  (freeyoutubedownload_3.2.56.324.exe)

1 / 68      (Adware)
http://cdn.goodfilesground.com/c?x=USPrFQPVauOvynv/udlk7vNSRBIuI8954DFqMCCfkyU=&c=FRY0/XdD56wTYjzjRb5QKT02V0I6l/9gVsYhAn9drV0l7UPlWnH/4XbFkOoDLWiBzEZTspSyVYe0OE4kXGul1mWG79ZarQTJ/UOElaolu/tqVK xQKqqfUutZgZDEHY0&fallback_url=http://download.dvdvideosoft.com/.../FreeYouTubeDownload.exe&downloadAs=free-youtube-download-32-bits.exe  (d4ee08843f8fc97c6bd04486172ead13)

1 / 68      (Adware)
http://cdn.goodfilesground.com/c?x=y2TutlFIeTNCYwhMfDmrr8C q608oRcJiu9EMItk1OY=&c=3Wv42tYPvNduJEoZbplTe0sB3LxoVw688RugRfj4b9x4QFV8ox3v3B6KrjdVrnZU7HxhXb/S1Zjx4I7qbG6WsMSA4B77QUgZnt9rHiUrWp5W6WIqBJcSngVNMmjO7ZLX&fallback_url=https://.../#!XE9SWRwI!XGVB6OhvEdg1P2g127_FXcAJrJ8DZgo9oF2L1-kfHC0&downloadAs=k-lite-mega-codec-pack-32-bits.exe  (2454bafdba8ba1a8d31fd46abcd21629)

The following 215 files have been seen to comunicate with cdn.goodfilesground.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.