» cirepo.s3.amazonaws.com
Overview
Analysis
IPs Addresses (24)
Downloads (35)
Website Detail

cirepo.s3.amazonaws.com

Amazon.com, Inc

Domain Information

The domain cirepo.s3.amazonaws.com registered by Amazon.com, Inc was initially registered in August of 2005 through MARKMONITOR INC.. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the RIPE Network Coordination Centre network. The domain uses the Amazon Web Services (AWS) cloud computing platform. It utilizes the Amazon Simple Storage Service (Amazon S3) a scalable storage web service for hosting content.

Registrant:

Amazon.com, Inc

Registrar:

MARKMONITOR INC.

Server location:

Dublin City, Ireland (IE)

Create date:

Thursday, August 18, 2005

Expires date:

Tuesday, January 16, 2018

Updated date:

Friday, May 2, 2014

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

amazonaws.com

Whois:

2 amazonaws.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.MaxSetup.EE, PUP.Installer.STMSetup.i, PUP.Installer.MaxSetup.FF, PUP.Installer.MaxSetup.j, PUP.Installer.STMSetup.n, PUP.ironSource, PUP.Bundler.Adlogica, PUP.InstallCore.Installer.Installer (M), PUP.GifmaniaCB.Installer (M), PUP.NewMedia.Installer.Installer (M), PUP.installCore.CpcNetAdvertising.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.AC.Installer (M), PUP.installCore.AVSoftwa.Installer (M), PUP.InstallCore.RES (M)

97.06%

Sophos

Install Core Click run software, Generic PUA GH, Generic PUA IM, Generic PUA JO, PUA 'Install Core Click run software', PUA 'Install Core'

44.12%

AVG

MalSign.InstallCore, Generic

44.12%

Dr.Web

Trojan.MulDrop5.10078, Trojan.Packed.25266, Adware.InstallCore.386, Trojan.InstallCore.32, Trojan.InstallCore.49, Trojan.InstallCore.37

41.18%

VIPRE Antivirus

Trojan.Win32.Generic, InstallCore, Threat.4786018

41.18%

Fortinet FortiGate

Riskware/InstallCore

35.29%

ESET NOD32

Win32/InstallCore.LB (variant), Win32/InstallCore.OL (variant), Win32/InstallCore.MJ (variant), Win32/InstallCore.OU (variant)

32.35%

Baidu Antivirus

Adware.Win32.InstallCore

32.35%

K7 AntiVirus

Unwanted-Program , Trojan

29.41%

Avira AntiVirus

ADWARE/InstallCore.Gen9, Adware/InstallCore.A.499, Adware/InstallCore.OU.1, ADWARE/InstallCore.Gen7, Adware/InstallCo.zkz

29.41%

ESET NOD32

Win32/InstallCore.OU potentially unwanted application, Win32/InstallCore.PK potentially unwanted application, Win32/InstallCore.PZ potentially unwanted application, Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.YK potentially unwanted application

23.53%

Trend Micro House Call

TROJ_GEN.F47V0423, Suspicious_GEN.F47V0701, Suspicious_GEN.F47V0622, Suspicious_GEN.F47V1127, Suspicious_GEN.F47V1204, Suspicious_GEN.F47V0128

20.59%

Norman

InstallCore.CERT

20.59%

Vba32 AntiVirus

Downware.InstallCore, Malware-Cryptor.InstallCore.gen

17.65%

Comodo Security

Application.Win32.InstallCore.JEIR, ApplicUnwnt, Application.Win32.InstallCore.DB, Application.Win32.InstallCore.KK

17.65%

The domain cirepo.s3.amazonaws.com has been seen to resolve to the following 24 IP addresses.

54.231.131.106

s3-3-w.amazonaws.com

August 22, 2016

54.231.140.2

s3-3-w.amazonaws.com

July 27, 2016

54.231.131.130

s3-3-w.amazonaws.com

June 7, 2016

54.231.133.201

s3-3-w.amazonaws.com

May 21, 2016

54.231.134.98

s3-3-w.amazonaws.com

April 20, 2016

54.231.134.82

s3-3-w.amazonaws.com

February 21, 2016

54.231.141.233

s3-3-w.amazonaws.com

December 5, 2015

54.231.132.66

s3-3-w.amazonaws.com

October 15, 2015

54.231.141.193

s3-3-w.amazonaws.com

October 12, 2015

54.231.130.33

s3-3-w.amazonaws.com

September 16, 2015

54.231.140.90

s3-3-w.amazonaws.com

August 19, 2015

54.231.132.90

s3-3-w.amazonaws.com

March 27, 2015

54.231.136.74

s3-3-w.amazonaws.com

March 13, 2015

54.231.128.56

s3-3-w.amazonaws.com

February 14, 2015

54.231.132.50

s3-3-w.amazonaws.com

February 7, 2015

54.231.136.106

s3-3-w.amazonaws.com

January 14, 2015

54.231.136.145

s3-3-w.amazonaws.com

December 2, 2014

54.231.140.194

s3-3-w.amazonaws.com

December 2, 2014

54.231.136.66

s3-3-w.amazonaws.com

September 18, 2014

54.231.136.122

s3-3-w.amazonaws.com

September 3, 2014

176.32.109.121

s3-3-w.amazonaws.com

August 19, 2014

54.231.132.2

s3-3-w.amazonaws.com

August 17, 2014

178.236.6.1

s3-3-w.amazonaws.com

July 3, 2014

178.236.6.107

s3-3-w.amazonaws.com

June 13, 2014

File downloads found at URLs served by cirepo.s3.amazonaws.com.

17 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../VideoDownloader/VideoDownloader_Setup_v2.0.15.21934_212_stub.exe (4d18280d3a542d3a49b0070b64efd056)

1 / 68 (PUP)

http://cirepo.s3.amazonaws.com/release/Installers/GreatelSoft/.../Moozy_Setup_v1.0.5.a0.1_31625_610_stub_OS201411137563.exe (664d44f160f98b5c1d78dccee1aae51f)

17 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../Vdownloader2/Vdownloader2_Setup_v2.1.20.24651_stub.exe (2982fb34512cd35bf09d316afae0ab1bb9529ede9fe5407e92893a3bdd4d0a7a)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/Ecommfactory/.../EmulePC_Setup_v1.0.5.a0.1_31028_450_stub.exe (478cebbf9346f35718b6ad9348dbb8bf)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../VidtoMP3/VidtoMP3_11969_demo.exe (ce6f949861ce21a863b9cec385e7829e)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Installers/.../GimpShop/GimpShop_14108_demo.exe (e998148b13bda4f70a6875b6c3fb0ba7)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../NextAd/NextAd_11139_demo.exe (fef24063f7dc699a10b10bd96013a46c)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../Techfield/Techfield_14635_demo.exe (d59b207ff4ab4e3cb91f4f182a086ec7)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/IDG/.../IDG_pcadvisor_14472_demo.exe (a48b5baf2239ccabc21a1c2100aa08e1)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/DarwenDLM/.../DarwenD_3348_demo.exe (2b17796a07b46eba0ffcfde21ed18995)

1 / 68 (PUP)

http://cirepo.s3.amazonaws.com/release/Downloaders/Adsearches/.../Adsearches_CHNL2_1.0.5.a0.1_42875_131_cpc5july_stub_d2.exe (ac67390aac66aaa757350614fbd637eb)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Installers/.../Stremio/Stremio_Setup_v1.0.5.a0.1_48593_536_stub.exe (68db4c60c6d188866d4e7516e7008144)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/gifmania/.../Screensavers_3034_demo.exe (a90561c985a317f5ac6c69b7ba85cef2)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Downloaders/gifmania/.../Gifmania_Downloader_v2.0.5.a0.1_27828_026_stub.exe (109129736156be919641797bd6915b7d)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../loveroms/loveroms_272_demo.exe (3f1f57102c85625f56b2fb3475c6aed6)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../loveroms/loveroms_268_demo.exe (d228a5ad883313e4f2b617ce5cfc4269)

4 / 68 (PUP)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../Subtitles.at/Subtitles.at_Downloader_v1.0.5.a0.1_37928_173.exe (89c079a1fa45b185e38989c8a70c06fb)

1 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Installers/.../trafficprivacy/trafficprivacy_9222_demo.exe (d0e92a732b82b102bd6c1dc3c900cf6b)

3 / 68 (PUP)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../SoftTechReview/SoftTechReview_7421_demo.exe (0cc0341930baf1f3bad66eb008d8a4b9)

9 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/Dnldstr_Aggregator/.../Main_1438_demo.exe (07ad41e3f4925f58bc1603063f5cf383)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Downloaders/.../OpenTheFile/OpenTheFile_1093_demo.exe (c1820d49cef9d1a4507a8ee30f8005dd)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../Megacubo/MegacuboSetup_v1.0.5.a0.1_34045_096_stub_Astro_Delivery__Fried_Cookie_Ltd._.exe (3511cb553e9445458aa62cd925280318)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/snapshot/Installers/Ecommfactory/.../EmulePC_Setup_v1.0.5.a0.1_30922_966_stub.exe (0606dd5e75734e5d14ccf6c73f8c9169)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../FileInfo/File_Viewer_Lite_Setup_v1.0.5.a0.1__166_stub.exe (839f5d9923d336e9169a0a44cac9e7a5)

3 / 68 (PUP)

http://cirepo.s3.amazonaws.com/release/Installers/.../pivotstick/Pivot_StickFigure_Animator_Setup_v3.0.5.a0.1_24068_359_stub.exe (412e056089b93f1f1f8d99859fb89639)

5 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../FileInfo/File_Viewer_Lite_Setup_v1.0.5.a0.1_27023_396_stub.exe (0a3ad6d2d6a8e501b7b251c42a941082)

10 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/Pculture/.../PcultureSetup_v1.0.5.a0.1__572_stub.exe (3584a38bae09d6cb0b0ec6ed6b923006)

7 / 68 (Adware)

https://cirepo.s3.amazonaws.com/release/Installers/.../FileInfo/File_Viewer_Lite_Setup_v1.0.5.a0.1_25803_194_stub.exe (ed3892bcf7d239549f3b754bc8cae3e2)

7 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../FileInfo/File_Viewer_Lite_Setup_v1.0.5.a0.1_25803_194_stub.exe (ed3892bcf7d239549f3b754bc8cae3e2)

13 / 68 (Adware)

http://cirepo.s3.amazonaws.com/release/Installers/.../FileInfo/File_Viewer_Lite_Setup_v1.0.5.a0.1_25055_118_stub.exe (e8c7083f6ad86948cd8db82bf73bfd95)

Latest 30 of 35 download URLs

URL:

http://cirepo.s3.amazonaws.com/

Network:

Amazon Web Services (AWS)

SSL certificate subject:

CN=*.s3.amazonaws.com, O=Amazon.com Inc., L=Seattle, S=Washington, C=US

SSL certificate issuer:

CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:

AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.