home

d.toochargercontent.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain d.toochargercontent.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Wednesday, August 27, 2014

Expires date:
Saturday, August 27, 2016

Updated date:
Tuesday, July 28, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
toochargercontent.com

Whois:
2 toochargercontent.com records

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.installCore (M), PUP.InstallCore.RES (M), PUP.InstallCore.Applicat.Installer.Meta (M), PUP.installCore.Installe.Installer.Meta (M), PUP.InstallCore.FC (M), PUP.InstallCore (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.RE48 (M)
98.00%

NANO AntiVirus
Trojan.Win32.OpenCandy.dlsdxl
2.00%

Trend Micro House Call
Suspicious_GEN.F47V0201
2.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
2.00%

The domain d.toochargercontent.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 29, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 29, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 29, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 3, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 3, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 3, 2016

File downloads found at URLs served by d.toochargercontent.com.

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=fXFeeQgl3ZZxmiWFGVR4zXtos3aPiSHAXYeTsR01qAc=&c=rUX2qmt7/dYGbBtS2r50jl5IM8yVF0O4ns1lPjlDnS9zhYCFcYFFkbxXm5xl9cXdzJ0Dn6RR ujgnW3nGXEwWQ==&fallback_url=http://download.microsoft.com/download/A/6/2/.../office2007sp2-kb953195-fullfile-pt-br.exe  (microsoft-office-2007-service-pack-2-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=Nlf8pwqx/qch IdWb7YkSMoVlEadszpfWdI2U0N6f/o=&c=aiaIeL/WerX7Qi3rIOCuU56 rRlICGeUh89LCR4ztcaju4MjR8yO QimKF5sMnEfRycIy2J1oRe0Mz6P78yjfw==&fallback_url=http://.../download.php?file=FFSetup3.6.0.0.exe  (formatfactory-3-6-0-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=VNrPzdDJvGsVjLEKI8uW8c/sF w23P2HwGpZVZS8KP8=&c=WYYRkYAQq KIX GaMwUFFzBKmEbPuGRe4kvc89o0A8E6Bdl oRQ /gD/DZnXC6n1IEexuy6lR6GY2HydmSvhJw==&fallback_url=http://download.dvdvideosoft.com/.../FreeVideoToTabletPCConverter.exe  (free-video-to-tablet-pc-converter-5-0-51-1022-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=lpCU74DTUHS0 DXTu6ADTjhxr/fmqjCM044t5IUhD7g=&c=V3lt7m7WzqAFCZHGmrMaQz879r4 k0H6X379vvEc1ewWpy14PXxS lavgMMiphkQidh0LMSkhS34YL XwHmXCA==&fallback_url=http://download.wmatomp3-converter.com/.../daniu-digital-media-converter_full286.exe  (daniusoft-media-converter-2-6-0-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=Rw8UWORTa2c6BVYCO2Ktjaf8/KYzOFk77/OOPJ81Evg=&c=clJc93Nq7t3zjK9PlMR3I HrhJ7AtZkjHx9owqbPD3H8H1xZm6Y177x1S4n3sV l2pTcLpjskuAT7mD0JuxWdQ==&fallback_url=http://sourceforge.net/projects/portableapps/files/GIMP Portable/.../download  (gimp-portable-2-8-14-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=QwxRjzgNQfCZlvP9wSywFVpOGT2CIz5lEaMKRR6No9I=&c=1NIW 2FhjsVZpMmeppHjChm1FoLmLEoXXVZoh91RllzmlxuOj5EWJtq7Ov9yR304ZUJJkhIqdrRMKDTCFgyTGQ==&fallback_url=http://www.nchsoftware.com/.../vppsetup.exe  (videopad-video-editor-3-73-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=OjIMKv5jxqHXY7RzM8fEEjgJlh8GT44ZWAJhHS8ywA4=&c=VWS6D2yTz8IXkvMICVWX1BdCg19CHN/a8lBg4Tr7N0YRT0jUiAxPj60XrPKGqZ5UrTvWKxaeEVnRdTo9ii0HKg==&fallback_url=http://www.corel.com/corel/.../index.jsp?pid=prod5190074  (coreldraw-graphics-suite-x7-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=Lg/ifQroNoOIi9HVThBE8Jp2Gjcwr4JSUDKUNUewQfs=&c=O1wW7r3j3aFIxZ3ILbtvbkKFT2KwyRupzheg1nddS2FAQg5RFsmyC6wEV dQ1O/Jd9GlquywkQbyOl/Xd6AbZg==&fallback_url=http://.../download.php?file=FFSetup3.6.0.0.exe  (formatfactory-3-6-0-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=qem0Co g2/FInd/CYhVFlJNkT1kUCSfiEWOmOdffJKg=&c=PgRM4dXgfRzeIdcLofUV8Y292MwETBigOXc2LflJnp78zWkjsHMeyrS8xEMx3NAqbEiWs3VCi/gy9G5VQDQ6tA==&fallback_url=http://.../baixar-musicas-gratis.exe  (baixar-musicas-gratis-3-8-0-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=otlMIbazPxCK12hZ5hcZS9Uq/NgaomFgZbvy0qywTsc=&c=7hvWIC1O0VaEGTA2TT2WjcZ15A5UdOS0w7NlI4KgphCA4uqJPo9desWxl5GksZOopxqq8bObb1YZe6RVb/H3vQ==&fallback_url=http://www.likeoffice.com/image/users/28057/ftp/my_files/.../likeoffice-excel-utility.zip  (excel-utility-7-4-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=18iO/N3Kk09T7Ic0jZmWTywZd/nsp2jMiV2Ej7jrLUg=&c=pCk8FBIYX3ingevA8vUwtgBiZaa0MY8VbdkwJc8tGlgSEi855oz5fK0E6gGB4lIxPP vsdf rYfyDscmt7FJxQ==&fallback_url=http://sourceforge.net/projects/aresgalaxy/files/aresgalaxy/AresRegular230_081714/.../download  (ares-galaxy-2-3-0-3054-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=zkGgijfKPc764gNLii8LxF5rHfeH7CwnHGDUaBg2GwE=&c= NN6XyFAp1 QFt 0PZ8Ox47cFeTRdY/tODZZQsjJ6AI2puYEenhN71YIW/ibA6F2KUobHGqnLQRSYePDNHrgQg==&fallback_url=http://www.dqlsistemas.com.br/.../instalar.zip  (controle-de-estoque-dql-16-008-04-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=IEqW wsg1YRl3OT5n10MzbYXiQStSMkd2L9V4zWHReU=&c=wrBXduohjwp2pvc3argzUzncBKem/YM0nNFev/myVRCWKPIgVNYsb87Qcsqyn3jI8THp7URjP/Pc5PQp7EQIuw==&fallback_url=http://www.nchsoftware.com/.../vppsetup.exe  (videopad-video-editor-3-73-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=//d8pgGKrdA3NbwUlp/xzlqIR3kgW3cT yhiWRb5FyQ=&c=8/zvwoWJ0xjbUcAH5JDyn41qkXSaBmpf vdW/UMG1kpgAZpok1PJb GxUURCXXfnjTuQAKvuQBp5vdLEHfDq Q==&fallback_url=http://.../SlimDrivers-setup.exe  (slim-drivers-2-2-32705-52095-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=CF0M7U5cQ8QR07y3EFsesvLylxxQQ3wthLOhTTJy4Ik=&c=qppBONdtbVZA31Jcq9xbvmb4wJrbRsI20SDj55ye0kZIU85MX/DKVEB5Ctj373W88Lp60be6hyZgjEGFNHaHeg==&fallback_url=http://download.dvdvideosoft.com/.../FreeYouTubeDownload.exe  (free-youtube-download-3-2-53-128-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=oLaXEItMQxQmTtULB9uVf6n8n2jQB12/JT0F9QcVLX0=&c=rHMrZTYVvDk SYDRoHIHLxw3gYkgY1kAaw6vh AuzwzVt1YkIrivPG5bF5rcE3zOtWxH0zrwMCuUC3 LY5I0wg==&fallback_url=http://www.fosshub.com/.../audacity-win-2.0.6.exe  (audacity-2-0-6-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=qOSkAJ1n0OV43DyzqIC/7UMqgn4nhot6JBN1hrWCqjc=&c=QvCwergSfBtfEKST8s1HISOedXX4JVHXYRYvdg8KT2wjQt16qwHR9EcjTZ5aKmj589txWMckEOS63NWLiTDoGQ==&fallback_url=http://sourceforge.net/projects/mpc-hc/files/MPC HomeCinema - Win32/.../  (media-player-classic-home-cinema-1-7-8-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=jxa/0j5OWNABeNa7Fk7Mp 4oZYggdZY2n7oeXCkztsA=&c=T0wxsWgVyXC9exxtnE dFaKaib8/jC0hnkc4mR1sBPkyKBMBmbILIEz68qoH55PXszWu4uv4f0bQT6vsNaxj4w==&fallback_url=http://www.djmixpro.com/.../djmixprosetup300.exe  (dj-mix-pro-3-0-build-78-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=URRHrFNFOhyKOGKqzJnLMjRrzOup0TQGCXNCzJ3SUEI=&c=zQBT/UVcDiJ7XbSSEOZpbjPp/WM/St berOjCn5khiWJqPCIjlmejEhvHt8XXyb0THs65NIc/guAkftes/08qA==&fallback_url=http://www.corel.com/corel/.../index.jsp?pid=prod5190074  (coreldraw-graphics-suite-x7-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=Q6VR ghj6AZvqXZgJ9AHEMeDAXs7k/Irc4c6QhosYwI=&c=0m8gOc54Hry/Gtp3zjs2kk/gdxdStiRv7Fd5QDYvCQzQ5f8Fr70Cb4Jnt/XUALrhJMMpiwMtIqQeCmlHkoJxig==&fallback_url=http://www.poikosoft.com/.../easy_cdda_extractor_setup.exe  (easy-cd-da-extractor-16-1-0-1-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=KJeEGysnMMg 1h0djaev/eGJLJhiUsRP4TZ5AlRE4Yw=&c=zF6M1xYm/S4zJYKgci9AgSEBS82OegsCk7wu4uzYl3LDyIA07XAUKwJEdTb2IYHc3avXMf/1LpqktlgrJ u3yQ==&fallback_url=http://.../pdmaker.exe  (photo-dvd-maker-professional-8-53-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=ZTE2 iIynkcNl2X2vR Y2Q5/HBT/nc1KAGkqZKQVPyA=&c=ookbRJzfdSWwzsSuCcwo2f5aQPLPrbBkZrtm7mvMN/knbLppieIvXFzcxkkGAC8//qYxUHyhLIVtRrCpkC7BxA==&fallback_url=http://www.skype.com/.../getskype  (skype-7-1-32-105-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=nnGY6ZbFNaq7hVNiRXLeaGYkp5YwcQe12QO1ZmrBor4=&c=uiYQEvef2JBUeYNfpYZzleWJvncVwQTgE5WTZ1mUprbd 0BxT3duYNh0ON8oMa1ilwQAuL3kqA3629zLjEEExg==&fallback_url=http://download.microsoft.com/download/2/E/B/.../IE8-WindowsXP-x86-PTB.exe  (internet-explorer-8-final-xp--32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=qfE2fKah ujqUNzRBp0DDb1QU/pqQiRI8TgvXI6xcKk=&c=KmXOd5TDxWMOzNY9Lpdksdp7Px 1BM720EEAPPxfT263i q1nzc uu6iTVu9Xm27RlTmr41kwztEBqxSrCfSOw==&fallback_url=http://.../download?id=FreemakeVideoConverter.exe  (freemake-video-converter-4-1-5-4-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=K4OPuYcyt52EAOiiKZzqX9qnOScn5sL6/pesLclIGbY=&c=ccUrXJ83cc39o1GtZ9HU5nwFJRGhgSCEqHtUALbhB2G/EC4oY0jpq3oY eAimDdBhTuP kUft2DXfGAU7a7c/g==&fallback_url=https://.../hamachi.msi  (hamachi-2-2-0-319-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=W6EVpPj5AEp5c5TMe mA4ZkcLuxQl3t8uPvHQGDKEQo=&c=rxqwpk1pi07OXX3TWWbhI6qX9hBrMTQk0ko8cIvkyve/375IRKWJzr8tIY5eNZ IRGJ6PW/W oMjr2xSAXmwJQ==&fallback_url=http://.../download_105469.shtml  (euro-truck-simulator-2-1-16-2-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=N7o8MAMH7QW3OSBGLvAAHVvBxbwQckcaWUf7JP4iwzE=&c=PFoFOCa3YOlQrEq/8iF2EqinyYc0jN08VoaELpS34nCc0a5SBnjCGjX93aY4tx0aU8hGdEZJhfkX/OkauNXX6w==&fallback_url=https://.../#!CUNQ3K6L!w86MCRq5_ygiQPxQsL9DUydReYJJrIli-zg2GuD3R6E  (photoscape-3-7-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=A3e/25lw16HWFPAq5wZ8Tx/ h2lVhtycDruT26a5mjc=&c=lgRlDUQm7/2bfo8PZnh51jjHmT7oTbLQd0TjZNwgPkk23KnpYozyGJ79dFh3xHaHpsP6uQYTo9WuIWbaA2lQaA==&fallback_url=http://.../SetupVirtualCloneDrive.exe  (virtual-clonedrive-5-4-7-0-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=Pkkt8oNB77JWNf6akwl8i9AiBMF9GOO5h5RtqOXB9ds=&c=B2ExDhBLssDooC nkNExLlzFD4SVmaFIE 9KuuwCazpfvQdKPgFQ1 D/VP 1EEKkoilHZ9Fg1hZGS1cKqtJR5A==&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.5.install.zip  (paint-net-4-0-5-32-bits.exe)

1 / 68      (PUP)
http://d.toochargercontent.com/c?x=U6z53FLO0ffCEkl5pvfNug7nduw op4ku98VdVt53vs=&c=32ytbIjqUvTnCSSkYKeQIxOX6DW7X057weKjnBAvG7m9c5zYRnCPYosLRl8QJjZdgzWcT BaNAaJN2ErAiRZ6w==&fallback_url=http://www.skype.com/.../getskype  (skype-7-1-32-105-32-bits.exe)

 
Latest 30 of 392 download URLs

The following 6 files have been seen to comunicate with d.toochargercontent.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.