home

d.contentaccessfilesnow.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain d.contentaccessfilesnow.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Friday, February 20, 2015

Expires date:
Monday, February 20, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentaccessfilesnow.com

Whois:
2 contentaccessfilesnow.com records

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore (M), PUP.installCore.Program.Installer.Meta (M), PUP.InstallCore.S (M), PUP.InstallCore.RES (M), PUP.installCore.Installe.Installer.Meta (M)
91.30%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
17.39%

VIPRE Antivirus
Threat.4150696
13.04%

Zillya! Antivirus
Adware.MyWebSearch.Win32.8422
8.70%

K7 AntiVirus
Trojan
8.70%

NANO AntiVirus
Riskware.Win32.InstallCore.dpfxyl
8.70%

Agnitum Outpost
PUA.InstallCore
8.70%

Comodo Security
Application.Win32.InstallCore.DSB
8.70%

Avira AntiVirus
PUA/InstallCore.A.2387
8.70%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
8.70%

Baidu Antivirus
Adware.Win32.InstallCore
8.70%

G Data
Win32.Application.InstallCore.EG
8.70%

avast!
Win32:Trojan-gen
8.70%

AVG
Adware InstallCore.ARF
4.35%

The domain d.contentaccessfilesnow.com has been seen to resolve to the following 14 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 27, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 27, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 27, 2016

54.148.75.228
ec2-54-148-75-228.us-west-2.compute.amazonaws.com
October 13, 2015

52.24.62.64
ec2-52-24-62-64.us-west-2.compute.amazonaws.com
October 13, 2015

54.149.60.150
ec2-54-149-60-150.us-west-2.compute.amazonaws.com
October 13, 2015

File downloads found at URLs served by d.contentaccessfilesnow.com.

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=N/4DHfGKBSrOou29T41x/Noo8J0JXFx/eYDWRgrqlgQ=&c=pM8J5cqDbRCf4znsrD vYzZdXdtZPEUH7Q0Dd2BnJ1F1G/NiP Jm2T8Wpkc6nK7BSqmNtchJtkA9aGd5Dw7S6A==&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/36.0/win32/.../Firefox Setup 36.0.exe  (mozilla-firefox-36-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=xOaQPPMBFfeKyY1k8sKeKrrM3xuc8xcUUTlkuFCXQp8=&c=eKREPNhgTbGZNdw8MleLRwksFX6DB3kssaVACr4ZWRnYXTJsrG9xFW5MKBD/xMBA7qof8sJSJwRkQPMLXVfs A==&fallback_url=http://www.mediafire.com/download/.../dbzbx-2.4.5.zip  (dragon-ball-z-budokai-x-plus-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=tgyCfEyDaMyChPQcsCQNTaAPYilGcT/c59sgSsoJ1bg=&c=d7zvQv0fLtswY4ENmHfIXEqAqyjVHKx7RPvH/CnGj6zMj2eSNnTWob/PvHjpwIY2SgfvOPL91JaEKMgP25AvMA==&fallback_url=https://dl.dropboxusercontent.com/u/.../Megafilmes_x32_x64.exe  (mega-filmes-1-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=l 0aK7qXWBtKzE2Rbi5YMPOTmX3 irOdqGBUfR90yZI=&c=dGObvH x Qyfbs3c9MLOjVPOYzPZyj59061l2mDcfNDCA9MF22GrOn16btQ jS56mQVVf5YdwUB/svMDVrYe3g==&fallback_url=http://uidubai.com/Usnip/.../Usnip 1.1.exe  (usnip-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=yYK4dh2PxPv2gDL681mIPeRe4hz36ZW7tBg3y9a/rqA=&c=6W9tJCP08SWwaIca uqodszStlqqjP67RQdmI7uzEfzajMp9JFwEXPCFdAr1QHGWugZpMUEVcLuf0IpoQ7O/ g==&fallback_url=http://demodownload.image-line.com/.../flstudio_11.1.1.exe  (fruity-loops-studio-11-1-1-32-bits.exe)

0 / 68
http://d.contentaccessfilesnow.com/c?x=yYK4dh2PxPv2gDL681mIPeRe4hz36ZW7tBg3y9a/rqA=&c=6W9tJCP08SWwaIca uqodszStlqqjP67RQdmI7uzEfzajMp9JFwEXPCFdAr1QHGWugZpMUEVcLuf0IpoQ7O/ g==&fallback_url=http://demodownload.image-line.com/.../flstudio_11.1.1.exe  (a939bb1fe4ab8b9551948f0f4da76d98)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=ZFj0DvzFYbKInSIxqp9i/m3 cd248PqiZfkWyYil6P0=&c=cDSwac23WHeNsPyXaIJWcJaQBSj7P6iKe8lISaVrVQxPFuwopixCu9uI5Y7XMiyGTJYyw fGNrI5c09aDWGNxw==&fallback_url=http://.../FLVPlayerSetupStubMDV.exe  (flv-player-3-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=GLwGdFmFat6mToMfcUrSQJk z5rSyaceY3Us7SDjeE4=&c=oMf2l1sDQhNeaqm7BWN2 WYmdJ NnAoTcCJIyX 9cDDdESMwInydhtR73vlzi/nSbTE4mf7BVkD36V9NXKPVIg==&fallback_url=http://.../setup.exe  (fraps-3-5-99-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=Q/suMVIznvh0yRg1cLoZv81vfY8t5wkBOm89bb34rJY=&c=mpsfppUm/tRUCswMI0V4o mczm0FYH FT4dRJKLrgC3HrWMdA/mKhTExXMED h/bpysS18dI8CpC0L6gKUkClg==&fallback_url=http://.../baixar-musicas-gratis.exe  (baixar-musicas-gratis-3-8-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=TSbULaZKoPuDC I h/BvF lpIakxv3/cu6qAJAJnAvI=&c=bCGv0FydxBu/C1hEjC9f0lU6SIlQsW48CUW6z3nrnt98lZnrIpcrqSv4dPGG9cuw/Hv/6w4acSK4m4n7I 64mw==&fallback_url=http://www.mp3rocket.me/.../MP3Rocket_Setup.exe  (icreinstall_mp3-rocket-7-2-2-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=RwNbmyxO6qgPkH6vfcXk6puHckhYliPgHIjyhvtNEOQ=&c=doV6UhaGxLxpJxbq7XxA2eVpz6qqLBeTOH8OShohYLR2xZ7Ah zQKgUYBV3OlvFIL0AddYvPKBee1x1b y2VoQ==&fallback_url=http://office.microsoft.com/pt-br/.../  (microsoft-powerpoint-2010-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=u4ky3Q/T/M9Izcy1tnK0QsPt5M4hAcs0YhO5RR0VjYg=&c=Oc2xFTuoKdtNUfwVbGlqAPk4s5JFMm7yxldPKEvMAYGB7nKwfRiuvidxiGj8zpyz6QnEMmwhAETtPY0voDsMAg==&fallback_url=http://www.rockstargames.com/sanandreas/desktops/.../boys1024x768_setup.exe  (gta-san-andreas-boys-screensaver-1-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=icYap/xsWHTOYproZVdQsB78x2M4C11Ouc9xAXlmcb8=&c=naZK2aWQtvZI wA7r2wPFBx8TozUvy0JWYxYSH2 vGisFSMtXl0Nq4/y9vbBkBnvfaOLFxtlv9wXKM8FUNFFTg==&fallback_url=https://get.popcorntime.io/.../Popcorn-Time-0.3.5.2-Setup.exe  (popcorn-time-beta-3-5-32-bits.exe)

4 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=5IwcasK3jDQuTQkF365n8hIP3iArqZaV2okwO2eZbJE=&c=cNA0rvUUx3QLBxiabLIWgfKCTXFShaiHNNHlU5nQ7GeJf675pox l4inNvLNy1uxnnuzvW/F EdXQWTsG4sfmg==&fallback_url=http://cdn.agenciatechh.com/.../SuperTela-ptBR.exe  (super-tela-6-0-0-3-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=tjejrIwMbbWOuxp960 lp/VWcJ5dKBWOGLXLYryGNAo=&c=9qOUdSzP5gTR2fxRPvW4/IfsgR4N6J0gncJcbfY6np5SUhrjRn6qKsNLk3DZtpZk6zf961NvyEPTk5BETKzS2g==&fallback_url=http://www.systemax.jp/.../sai-1.2.0-ful-en.exe  (painttool-sai-1-2-0-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=7sOUhJzouhsG6d1cdpwcwMmKz1wnZQfI6scXQ/QIzL8=&c=f6iqqG5fyeIWbn1bmOuXW4Wqz6qqTGghjZJIY3f8Ksdw8jWkZGqtGQYaSmaQC5HvvEOr6WpU6YTsItHX6Jxg1Q==&fallback_url=https://get.popcorntime.io/.../Popcorn-Time-0.3.5.2-Setup.exe  (popcorn-time-beta-3-5-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=xcN bfDV3pJU9q6a35HRRfO2amPmof06g kdpKCCBUs=&c=vhp3kP3FYNL4mBtQrrz8NP8kXsUMF0YAA9 PgDgx 10MUsf7ukgMhA77anuhBf/8vMVQvrczFMkWOCF7auW3fQ==&fallback_url=http://dl-vip.browser.baidu.com/.../Spark_Setup_all.exe  (baidu-browser-40-14-1000-135-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=AfQJTmXKdYGEeL77nd9sP/JFS3WIgZSno8OTGm0c8yk=&c=MypNiFrGTsdofe8Z15RXx7JDBG3WUpcV6n7akgL 9uI4dNnR7dJuX0/x3Md E3Lv1QSDtF68HBHd43IiB9F8lA==&fallback_url=http://www.corel.com/corel/.../index.jsp?pid=prod5190074  (coreldraw-graphics-suite-x7-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=pJNShZxQD9fPQ3H/XOvkFnh48PZ1aAMh6chTohJTztw=&c=A9XofzG7/C6DAsITw/Elb13/9hbg9EmfYNNK7N5h04/BE/G9lAmvgbE9HkasnIIcPgNI3DOKSGo4N5ZGgV287Q==&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular230_081714/.../download  (ares-galaxy-2-3-0-3054-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=9b0gJ0hsbP6lugRd6R7zxv/5607qntLqB2xv9LZCSZ4=&c=3M5edvGP8BHZXCTYtlvRr hwRcXyG6wzyaBtwUsEGwpt6hGZxIzZW2 E4Ez7aHSmXXtO3wt43GhyT6 b3ScztQ==&fallback_url=http://download.microsoft.com/download/1/B/E/.../dotNetFx40_Full_setup.exe  (microsoft-net-framework-4-0-30319-1-final-32-bits.exe)

1 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=Jnn1AEkzrhZSmLQyUlAXuCBFB1tjHBVnjpIkpgoKoo8=&c=zuWpZufqZbXngFBs4zrgg1/VPVAwc3APJWNqkkPnf hahjqFWcIlAJU0wGJjFUVWSCrykZIujWAHfCs2SvCUpA==&fallback_url=http://update.raidcall.com/.../raidcall_7.3.6.exe  (raidcall-7-3-6-32-bits.exe)

4 / 68      (PUP)
http://d.contentaccessfilesnow.com/c?x=214uyT597 18egOMOrB2ELjP62GrxbpGmGnsLJMffOo=&c=lvmvAXlv OYkiKMyYZS9ScbMiJNJWw1A/Dm9pJpG7BH1CleSBZg17ePgAIV6hNTjo86SwAmAxVHUxKMTEkNLWQ==&fallback_url=http://digitalocean.appengine-distro.com/YTD/Installers/.../Fastest YouTube Downloader Setup.exe  (fastest-free-youtube-downloader-to-mp3-converter-5-0-32-bits.exe)

0 / 68
http://d.contentaccessfilesnow.com/c?x=dk0pOVLuzlX6yQFWa8fAerGJtrTSRLD6ihXVfWJRnfQ=&c=zVfYR2ICmSld97OQOH3uoRcff /R8ZzSfnQKOeq9dAj817DY4l232WSkvNiUHIrBVeAFJtZ9p7p76wki5uZLVA==&fallback_url=http://.../MediaMonkey_Setup.exe  (mediamonkey_4.1.9.1764.exe)

11 / 68    (PUP)
http://d.contentaccessfilesnow.com/c?x=AwfmAgK0rHuFgg5B8qGCaOq3DpA7PVVgLcMgSOC/E2k=&c=3Bv5fKz3Z9mjNkhZAyBrpx7gWRQbBPUxHwPPzox3b2WETZG5ZdqVC/fgPQEIS8oSG0y9a7TwMlgbDr YIdsiig==&fallback_url=http://xdlab.ru/.../tagscan5.1.665setup.exe  (tagscanner-5-1-build-665-32-bits.exe)

11 / 68    (PUP)
http://d.contentaccessfilesnow.com/c?x=dk0pOVLuzlX6yQFWa8fAerGJtrTSRLD6ihXVfWJRnfQ=&c=zVfYR2ICmSld97OQOH3uoRcff /R8ZzSfnQKOeq9dAj817DY4l232WSkvNiUHIrBVeAFJtZ9p7p76wki5uZLVA==&fallback_url=http://.../MediaMonkey_Setup.exe  (mediamonkey-4-1-6-1719-32-bits.exe)

The following 6 files have been seen to comunicate with d.contentaccessfilesnow.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.