home

download.easyuninstallpro.com

Probit Software LTD

Domain Information

The domain download.easyuninstallpro.com registered by Probit Software LTD was initially registered in March of 2012 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Saturday, March 17, 2012

Expires date:
Friday, March 17, 2017

Updated date:
Tuesday, February 9, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
easyuninstallpro.com

Whois:
1 easyuninstallpro.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic
100.00%

The domain download.easyuninstallpro.com has been seen to resolve to the following 16 IP addresses.

52.84.125.50
server-52-84-125-50.iad16.r.cloudfront.net
August 6, 2016

52.84.125.37
server-52-84-125-37.iad16.r.cloudfront.net
August 6, 2016

52.84.125.28
server-52-84-125-28.iad16.r.cloudfront.net
August 6, 2016

52.84.125.226
server-52-84-125-226.iad16.r.cloudfront.net
August 6, 2016

52.84.125.180
server-52-84-125-180.iad16.r.cloudfront.net
August 6, 2016

52.84.125.151
server-52-84-125-151.iad16.r.cloudfront.net
August 6, 2016

52.84.125.130
server-52-84-125-130.iad16.r.cloudfront.net
August 6, 2016

52.84.125.54
server-52-84-125-54.iad16.r.cloudfront.net
August 6, 2016

52.85.142.52
server-52-85-142-52.iad12.r.cloudfront.net
June 6, 2016

52.85.142.25
server-52-85-142-25.iad12.r.cloudfront.net
June 6, 2016

52.85.142.252
server-52-85-142-252.iad12.r.cloudfront.net
June 6, 2016

52.85.142.172
server-52-85-142-172.iad12.r.cloudfront.net
June 6, 2016

52.85.142.169
server-52-85-142-169.iad12.r.cloudfront.net
June 6, 2016

52.85.142.139
server-52-85-142-139.iad12.r.cloudfront.net
June 6, 2016

52.85.142.78
server-52-85-142-78.iad12.r.cloudfront.net
June 6, 2016

52.85.142.68
server-52-85-142-68.iad12.r.cloudfront.net
June 6, 2016

File downloads found at URLs served by download.easyuninstallpro.com.

1 / 68      (PUP)
http://download.easyuninstallpro.com/EasyUninstallPro.exe  (df20439f2ff43fc612f799d140800e51)

1 / 68      (PUP)
http://download.easyuninstallpro.com/EasyUninstallPro.exe  (b72b684090ce9f6f92aaec667db91e69)

The following 42 files have been seen to comunicate with download.easyuninstallpro.com in live environments.

TCP » 52.85.142.172:80
jingling.exe

TCP » 52.85.142.68:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.85.142.78:443
jingling.exe

TCP » 52.84.125.226:80
se.exe

TCP » 52.85.142.172:80
UCBrowser.exe (by UCWeb)

TCP » 52.85.142.252:443
cpx.exe (Google Embedded Application)

TCP » 52.84.125.180:443
oozes.exe (Oozes)

TCP » 52.85.142.252:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.180:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.85.142.68:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.252:443
whatsapptime.exe

TCP » 52.85.142.139:80
mobogenieP2sp.exe (mobogenie by mobogenie.com)

TCP » 52.85.142.68:80
jingling.exe

TCP » 52.85.142.252:443
apptrailers.exe

TCP » 52.85.142.252:80
browser.exe (Speed Browser by Smart Applications)

TCP » 52.85.142.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.139:443
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 52.85.142.252:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.180:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.50:443
browser.exe (Browser)

 
Latest 20 of 65 files

URL:
http://download.easyuninstallpro.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.