» gogo-download.com
Overview
Analysis
IPs Addresses (3)
Downloads (28)
Network (3)

gogo-download.com

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain gogo-download.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Virginia, United States (US)

Create date:

Tuesday, August 19, 2014

Expires date:

Friday, August 19, 2016

Updated date:

Tuesday, July 28, 2015

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:

2 gogo-download.com records

Scanner detections:

Detections (82% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Internet.Installer.Meta (M), PUP.NewMedia.Installer.NewMediaHoldings.Installer (M), PUP.installCore (M), PUP.NewMedia.Installer.installCore.Installer (M), Threat.Win.Reputation.IMP, PUP.InstallCore.S (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RES (M), PUP.InstallCore.RE48 (M)

86.96%

ESET NOD32

Win32/InstallCore.ZP potentially unwanted application, Win32/InstallCore.YL potentially unwanted application

13.04%

G Data

Win32.Application.InstallCore.EG

13.04%

Vba32 AntiVirus

Malware-Cryptor.InstallCore.gen

13.04%

herdProtect (fuzzy)

a variant of ce01730349e00b9583799a30eb7d971cf03fd0e9, a variant of b1469a4472b65b32da1b00c9f56edf42928fbca6, a variant of acc08f07fb0486c906133b536fab0e5ae470902c

13.04%

VIPRE Antivirus

Threat.4150696

8.70%

avast!

Win32:Malware-gen

8.70%

AVG

InstallCore

4.35%

Malwarebytes

PUP.Optional.InstallCore.A

4.35%

Baidu Antivirus

Adware.Win32.InstallCore

4.35%

NANO AntiVirus

Riskware.Win32.InstallCore.dsmvpd

4.35%

Agnitum Outpost

Trojan.Badur

4.35%

Comodo Security

Application.Win32.InstallCore.DQY

4.35%

Avira AntiVirus

PUA/InstallCore.A.11

4.35%

Qihoo 360 Security

Win32/Virus.24a

4.35%

The domain gogo-download.com has been seen to resolve to the following 3 IP addresses.

52.7.132.182

ec2-52-7-132-182.compute-1.amazonaws.com

July 26, 2015

107.23.203.23

ec2-107-23-203-23.compute-1.amazonaws.com

July 26, 2015

54.84.143.69

ec2-54-84-143-69.compute-1.amazonaws.com

July 26, 2015

File downloads found at URLs served by gogo-download.com.

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=ATaFNTA4AZ7dNM==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXzaFAjAzOZMFASDPDdlChV8dAznyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzAFNja4AZMq (googlechromesetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=AzA3AjLyNjaFNg==&osos=VdluDrW3cw==&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWilam7dREhKVuvmAWASDChTMm7dlChV8FNjL4NzgwOTnm7K2pDZ1fAjnFNZi4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0Azn1AzidAZMq (bluestackssetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=AjLzNZi1Nzg3OM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1p2kDj7z1vVkDj rcWIXim7z0RvmiWAkDjIKiWXzgRNZidOTMFASDPDdlChV83ATAzATA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzizOZayAZMq (javaruntimeenvironmentsetup.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzM1AZMzOZMFASDPDdlChV80ATaFATa4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjgdNzC4AZMq (googlechromesetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=Ajg4NzcRNzA4Ni==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1dIXv02K5BUKxqvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzazNjcdOTMFASDPDdlChV8FAZnzOTg3AZaz&pd=2323UEsJck1P73xp2mLu7dWt&campaignId=9jn0AjgdOTMdAZMq (virtualdjsetup.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=AzMwAZazAznFNi==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1ZSkDj rcWDK4m7z0RvmiWAkDjIKiWXzc4AjAzOZMFASDPDdlChV8wATiyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzM3AzcyAZMq (googlechromesetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=Ajg4NzcRNjM3Aw==&osos=VdluDrW3cw==&dr=cHaWck1JcmlEIK4m2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vVkDj rcWDK4m7z0RvmiWAkDjIKiWXzCzNzA3OTMFASDPDdlChV8RAjc1AZiFAZaz&pd=2323Um5j7dVw2rVC2dWy riu7dWt&campaignId=9jn0AjgRNjgdAZMq (originsetup.exe)

0 / 68

http://gogo-download.com/?dl=1&pi=ATiFOT7yAZcFNM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1pcmDP EDpDXcm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLFAvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOTAyNTcFAZCRvm5EIKiWXzAdAZM0NZCwAjA=&pd=2323Um5QcdWB2Xxl HCtDEVuUmNJ i==&campaignId=9jn0AzL0AzndAZMq (irfanview_setup.exe-setup.website)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=OTA3NjCRNTn=&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1z2rVP SDphXAmD3vpDZ0m rcWDK4m7dAWL0Lm7dREhKVuvmAWASDChTMm7dlChV83AZ7dNjCwOTnm7K2pDZ1fOZM4ATidNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0AzM3NjiyAZMq (steamsetup.exe)

0 / 68

http://gogo-download.com/?dl=1&pi=ATgRNzcdNjAwNg==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0OSDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8RAjazNjMROTnm7K2pDZ1fOT71AjM4OTnyAw==&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzLzAzi0AZMq (windowsmoviemaker_setup.exe-setup.website)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=AzndAzA4OZLzNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=c3aW7mcm2r0Wc32lDXimcHaWck1dIXv02K5BUKxqvmCWcyDEcmlChSDBDz1l QDj7z1vxSDj rcWDK4m7z0RvmiWAkDjIKiWXzg0NjcdOTMFASDPDdlChV8wAz7dATC3AZaz&pd=2323UEsJck1P73xp2mLu7dWt&campaignId=9jn0AzLRNzCdAZMq (virtualdjsetup.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=NZLzAzadAji3&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWSL4m7dREhKVuvmAWASDChTMm7dlChV8zNjL4NzgwOTnm7K2pDZ1fNZLdAji4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0AzaFOZn4AZMq (bluestackssetup.exe)

1 / 68 (Malware)

http://gogo-download.com/?dl=1&pi=OTMFNTCwAZa=&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWiLLm7dREhKVuvmAWASDChTMm7dlChV8dNTL4NzgwOTnm7K2pDZ1fAz7zOZA4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0AzA0NzgdAZMq?EsetProtoscanCtx=d204430 (bluestackssetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=ATiwOTMFAzLdAi==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1BDK5E2KLt d7t rVEDKFCcyD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVN5vmNBDz1l QDjhTnmDZ0wvmNpDZ1fAj7FNZgFAZCRvm5EIKiWXzLFNjayNZnRAjA=&pd=2323Uml0UKxJ2d4u7dWt&campaignId=9jn0Azi3OTC4AZMq (leagueoflegendssetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=ATAyAjCyNTiFAg==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1E dWE rLtDK5y2rgm2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzLdAZazOTMFASDPDdlChV8wAzawNTC0AZaz&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0AziwNZLdAZMq (googleearthsetup.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=OZA1AjLzAzMR&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck10DK5t2mll2dVyvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzM1NziFOZMFASDPDdlChV8ROZcRNzazAjiy&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0AznFNTC0AZMq (teamviewersetup.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1rSSDj rcWDK4m7z0RvmiWAkDjIKiWXziFAjAzOZMFASDPDdlChV84NZCRNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajg3Nzg4AZMq (googlechromesetup.exe)

1 / 68 (PUP)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=ATAdNTgRNZcyNM==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChV81AZLdOTgwOTnm7K2pDZ1fNzC4AZ71Aza0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0Azi3Ajc4AZMq (firefoxsetup.exe)

0 / 68

http://gogo-download.com/?dl=1&pi=ATAdATiwAza3Ag==&osos=VdluDrW3cw==&dr=cHaWck1q7XDPvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDXAm7dAWxVAm7dREhKVzvmAWASDChTMm7dlChV8dNTi0NjCwOTnm7K2pDZ1fAjAzATCyNzMyAw==&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzawAjCdAZMq (jre-7u60-windows-i586.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=ATi4NzMyNjMRNw==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1z2rVP SD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8zAj7dNjCwOTnm7K2pDZ1fAjgRNTLdNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0Aza4Az7wAZMq (steamsetup.exe)

0 / 68

http://gogo-download.com/?dl=1&pi=ATgyOTgRAza4AM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiFvENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzcwOZazOZMFASDPDdlChV8yAzi0AZg4ATaz&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Azi0NjAyAZMq (208190.exe)

0 / 68

http://gogo-download.com/?dl=1&pi=Azi4OZiyOZLyAM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8wAzM4AZMROTnm7K2pDZ1fATM1NZnyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AzAwNzL0AZMq (apache_openoffice_4.1.0_win_x86_install_en-us.exe)

1 / 68 (Adware)

http://gogo-download.com/?dl=1&pi=ATLRAjn0AzC0Aw==&osos=VdluDrW3cw==&dr=cHaWck1z2rVP SD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV80Aj7dNjCwOTnm7K2pDZ1fAzn3NZLdNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0AznRATA0AZMq (steamsetup.exe)

1 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=ATnzOTCyNTcFOM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1wIrW0 3Nj7XslvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzgwOZCdOTMFASDPDdlChV8wAZayAZA4AZaz&pd=2323UEVwUKluc3xP rwu7dWt&campaignId=9jn0AzA3OZ70AZMq (photoscapesetup.exe)

12 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=Ajg4NzcyNZgdNw==&osos=VdluDrW3cw==&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&pd=2323UEVw rWPDk1E d2JUmNJ i==&campaignId=9jn0AjgROTMyAZMq (spotifysetup.exe)

7 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=AT7dAz73AZ74Nw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV81AjgdNjCwOTnm7K2pDZ1fNZC3NzM3NzMyAw==&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzAwOTLyAZMq (windowsmoviemakersetup.exe)

6 / 68 (PUP)

http://gogo-download.com/?dl=1&pi=ATn0NZiwAzMdAi==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1q7XDPvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8wOTA0NjCwOTnm7K2pDZ1fNTMRATidOTnyAw==&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzadNT7wAZMq (javaruntimeenvironmentsetup.exe)

The following 3 files have been seen to comunicate with gogo-download.com in live environments.

TCP » 54.84.143.69:80

WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 54.84.143.69:80

notifier64.exe (Notifications)

TCP » 54.84.143.69:80

ContentFinder.exe (ContentFinder by ContentFinder Company)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.