home

cdn.jddfmlafmdamracsoftwarepresent.com

Communigal Communication Ltd

Domain Information

The domain cdn.jddfmlafmdamracsoftwarepresent.com registered by Communigal Communication Ltd was initially registered in July of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Sunday, July 26, 2015

Expires date:
Tuesday, July 26, 2016

Updated date:
Sunday, July 26, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
jddfmlafmdamracsoftwarepresent.com

Whois:
1 jddfmlafmdamracsoftwarepresent.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic
100.00%

Dr.Web
Trojan.InstallCore.890
11.11%

AVG
Adware InstallCore
11.11%

VIPRE Antivirus
Threat.4786018
11.11%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
11.11%

Kaspersky
not-a-virus:AdWare.Win32.Eorezo
11.11%

Clam AntiVirus
Win.Adware.Installcore-803
11.11%

Sophos
PUA 'Install Core Click run software'
11.11%

Bkav FE
W32.HfsAdware
11.11%

nProtect
Trojan-Clicker/W32.Eorezo.841752
11.11%

Malwarebytes
PUP.Optional.InstallCore
11.11%

SUPERAntiSpyware
PUP.InstallCore/Variant
11.11%

K7 AntiVirus
Unwanted-Program
11.11%

NANO AntiVirus
Riskware.Win32.InstallCore.dwrvta
11.11%

F-Prot
W32/InstallCore.BB.gen
11.11%

The domain cdn.jddfmlafmdamracsoftwarepresent.com has been seen to resolve to the following 18 IP addresses.

185.53.178.22
July 31, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 20, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 20, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 20, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 31, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 31, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 27, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 27, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 3, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 3, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 3, 2016

File downloads found at URLs served by cdn.jddfmlafmdamracsoftwarepresent.com.

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=J62fVlVseXJIftBE9K6B2RiyZoQdrT6LB1BtMZXg2sg=&c=IQ7t0S5410bre590f7iHcann6eoCe5ia3sewqsbvIN65Ig5cH/s/dV6rqawqoCH5p6dRPdYUk//.../nDA==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=XRUmHGPFxNB4JsFDtWw8jiRiP/bH14FizN1iYwHUGTk=&c=iuvMtl19EONWnm2XS2VWW0FlDSmefyEnXlaJGWv3jm1rJ8/GWuVWIrV9wraOOI9oOAqNMePqITQumX4JWS/.../uFgY2mCChCwWpRaauH4b71nUNugtV6GXvf0IvzETXA==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=esqJ2k80OoWvBVy9jrcLPVBAK94xMIzVYq02SBI TcA=&c=GblzPO1qL/i7vnzAR4cYaRZTIP7d1fU9/R6QAt yg42MWDnQNIE 9ymt1anY/mfv7x50zZBFaka8OuZcY5fhELOiEKgPLl5rpIBPm1JM9Cj1nsQjAF/.../Ezgw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=xqCzPgfzqc9iYRax8RHehF6gmFDpw6AXeWuP3seDwuM=&c=QzQZKZRiytwT0Ew8Ym20r7XesA5SDJsRhMfTNG 6OS on9MyT4iE4tlPoRRBLKVxfygDutJ1/8Kob2rW0Yu8Zsw4ZRmoxVrt4zLWDS2U//91XgTA9ws6nvO3jbh0kHcCMa2Z4EpOlx7hUircoV3fsQ==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=IwunWmWp1YRIVh59ALsGvzffPCeW3q9cl wrCRN0aCM=&c=tiGC//StMoYpFrF32vzW3LXBzgdbK0E59wSnSKQXLGJjIXSIlvPntr/.../FLtug5zn48I2h5Ur AVRL8qeLOi6wmiuoC2X1B3KHyZ3Ifz3txpIEpOOd7tJy8P0BZS7Kw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=h5X5l2Q62dSCmfN3OBR4ebt8L5X3PPBToxSwm/CvgnQ=&c=UvFBGJrVs7JKuS2Q3J3UnLUm58WYMIcolAjIVLUL/.../khNmUi3xUA76SRCerFk0SgNE0oejgahVk QisiCwjDoBFjTCIZ8DmOzMxw9ErZ Zw7zmHAi8kUBZ2xOGtCASf3euYQ==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=IgBXq3xTNrKzb2/ZXMmvdGEer3LPN ECefdpjhvUWpU=&c=fM6r289SKA8pMcY6w6PHKx6IfMdIBWCaWkAQZ8HHoxgfkoHkPyErTNJnW0U9bj/.../aw4yqdfTWZG1PS1nr2pmMvKW5YDV3OpkCf63dCP5CbGRsvOw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/.../j5k3OpkHtCx3lM7KjcJjw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=qzDhG5WaTYkjUTWlJreENFFZpFCLbulonBxDnOqn40w=&c=Y4fC8VWdJXy90 4cMR76BxRo3oggx6FjO4W3Cs6eEh3 ahnnEi8gdCfsUN5Rf2TWzS/hbTfUde/OuL5q/VAqkolr/.../snawDQUpYQpAF3tiKeqRVd6SUpBRvkw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/.../wYCOB8sI6e2aPYEo9qWyYId7zRsA1LIYLVIpK4VBOA00ZkR7ptt43z7KKKhCaHcmmEZ5bo UCtwUxq9qKkozkT7w7p6siJd2xUoFtoGmqRwwqqw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=vO2wmuObH4MyYYncvzG9PKQdG/v2grtcAw7jXN3qgtI=&c=h/29h 3ucHXQ EBl tNf FeWRBEDHtrRr/Hgfq3E0AxMLVesW9ME ysh3Jrxn3MvRxwZ8bc6JgKR/.../bvmd9pw 3xDWkMJiZqKxmlEyow==  (videoplayersetup.exe)

23 / 68    (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=0fwPayvLKIOi9tY4Kodr vi112UftxzMFV4frnhMvfI=&c=K83zcg8QPYMzjLv663wZwITcrwijULQJ8gcr43SZgL4OJ6OWSF57js9lhFiGv7REPswftBypWuB2E3hL5Yk60xtw50aPERBNQrS30hUnmptuYJ0xzDqIkzLOqXLRbFg/.../zlZ17bbbS 1IRc4FJg==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/.../wX1QtfiqhA==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=lASrvY0l70vMtQSe PqoO12GwuM4geXs3zMo54Y9sek=&c=sh3XpoV05JGq0Euwil6kQotDws23FFRs/.../flAb2uO6hzoH9DCUMHHqx9waRRBND9 P9ZCotF m2aRFf9Se65h90vm 3kuelVp5XhFFerD0RK8MrKKtlOnSuG1T65AZjGlHug==  (videoplayersetup.exe)

23 / 68    (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/.../B5hLktyqJI5wAUgIXmnIuJgyPMdx5laDqgiRMR0HnlB1UzlFDuc35MxtwS1UGZJrugvqz1uakom mcS9FjsUx8Xo7SgDXOuHANJ2h6h2 N8EAhcAQ nSw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=6CDAq0c14cY0b6ZWoXT1ftgj5P5Oj3FNCN32NN44QE8=&c=tMd6PKdK1fPzlMe9N/KhcwiEeQcIE/.../fGUd6Imw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/.../SwcVCYmME7mabPqcJ7EK2EIzMfIYVszGAb3UtPAf2SaIU7uIjGNorbGHdvNsI7v9CxTlvnWn cGYSe1aMI2NkDGNuSLvtS6uQLkD48 nZ9qPfZotQZ6P1SfIrog057rZVr4wswDioS3ZzKbDw==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=aSRpuMDU zvkxsuH2ANp4ZEgcM/FzGObBJvljTtVl2Y=&c=huKrTAJmmtKi6f80vfaSiWQF Ho9cDlkhHc047JjL1loCDFZah9lc9CUgTbBfZPrnKult6yNXA4x ZF/0hdnN/IVKN/DR/1Ndvop4rnkR5oB6Ss 1LzC9B1/.../NeX63IxD1YTPHjBEQ==  (videoplayersetup.exe)

1 / 68      (PUP)
http://cdn.jddfmlafmdamracsoftwarepresent.com/c?x=dSKi4vsOgdVwiZQKGXbGv mKovFdHritqbH87 NWyaA=&c=DaZ CqhV tYJ9ozDGMCo9QTCnhWTd156mlIyw6AG kZdhlNEzjOMkyhsvr82WMlygDkrtlw0Mge1eJYBKsotQRtR7IPrlJGUSNhf9mDhl/.../jsh4K1KPkfskloO8glED1XUPiDAx2FxVg==  (videoplayersetup.exe)

The following 23 files have been seen to comunicate with cdn.jddfmlafmdamracsoftwarepresent.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.