» start.freeworkz-games.com
Overview
Analysis
IPs Addresses (2)
Downloads (16)
Network (217)
Website Detail

start.freeworkz-games.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain start.freeworkz-games.com is registered by proxy through GO CANADA DOMAINS, LLC and was originally registered in March of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.

Registrant:

Domains By Proxy, LLC

Registrar:

GO CANADA DOMAINS, LLC

Server location:

Dublin City, Ireland (IE)

Create date:

Friday, March 4, 2016

Expires date:

Saturday, March 4, 2017

Updated date:

Sunday, March 13, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

freeworkz-games.com

Whois:

3 freeworkz-games.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.EpicPlay.inXileentertainment.Installer (M), PUP.EpicPlay.inXileen.Installer (M), PUP.EpicPlay (M)

100.00%

The domain start.freeworkz-games.com has been seen to resolve to the following 2 IP addresses.

April 16, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com

December 2, 2015

File downloads found at URLs served by start.freeworkz-games.com.

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTM5MDcwNzE0NjcjPKA90VCTse81PaOzo3v6ZAzXtMyo2GF4zbX1B5ImLhyPXWvCyuyKJdRFSIM5Ki4TXLWbfn4rPzYiPucNozgE8OesbXmChU7RYhAkCybU49PAybtVgyOxsX/.../SetupFreeWorkz.exe (24604ccfab302054021c116911a88ce4)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTM2NzI1ODMzODgjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFdIqF9XrR4u94vaTmvzUADUjrCuQh69SMTXLWbfn4rP9NMpjYqS0lOHu7fMY2blKcX/iIXmiES8qspqZTu3pcUDx0v/.../SetupFreeWorkz.exe (aca1ab5a78acb95d9cde98c0cbe225dd)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTExMzY0MDY2ODgjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFaOMJzMRS/8 MYfMBsrYAMBM sbHKAq/.../SetupFreeWorkz.exe (a5652cba6618a647b52409a894545076)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTEwODg2MzA3NzAjPKA90VCTsZjna4kXx8qHpAXgd5YR6/Kd0Aic JdXRfqTYRlphEdfb1BOxVLVOjIbOnf7jFFq/.../SetupFreeWorkz.exe (8623f4cd9d11a0333e6c238173be2aa3)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTQyNjY1MzY0NjaBCxTKsc0BojIe5WFMpfY32XdT28swoj6UgrRkYl74RWamabQjpnvl5yn akyAoYVIWFVpWMN27mmNHNN5idRF YngIPSqH1h9MwMUJ3gnQ2hyMs/.../SetupFreeWorkz.exe (06397c07c3891a93b6114fc6fed4b5a5)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTMwMjUzNTA5MzcjPKA90VCTsZjna4kXx8qHpAXgd5YR6/Ifw33495DAvVxt/onJRApI1Z2F0ZMVwOcTXLWbfn4rP27CvGMyl//.../SetupFreeWorkz.exe (1dd058cac258c10f154fc3b1c7a8a85f)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTI2MTA2Mzk2OTMjPKA90VCTse81PaOzo3v6ZAzXtMyo2GGurIusMdB1A7N1p13c FVxbuJbTEIG6uTijhKGWBmn18aqbzMQbLQ6H3Oivy//.../SetupFreeWorkz.exe (06330911d8bf7c1abaa4a2e0acc3aa78)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/OTUyMTY3OTE0MyM8oD3RUJOx7zU9o7Oje/pkDNe0zKjYYa6si6wx0HUDKrIL8BZIWMjmAxo2ytUo0OKOEoZYGafXxqpvMxBstDofc6K/L/89cmINUNsovDqmEN5c6UW16f/.../SetupFreeWorkz.exe (fec6a5433decb6bfda819614cf143e7f)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTIwMzczOTMxNja/.../SetupFreeWorkz.exe (dbc8f787fa29cff825d2d7cd6acf0e45)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTI2MzcyNDY5NTUjPKA90VCTse81PaOzo3v6ZAzXtMyo2GH6Z9IUk67GOR/vZsU861VGyw5gfzKGy UbOnf7jFFq//E8pafvEFT4df1M90/.../SetupFreeWorkz.exe (83ab5cc7ed0cb6fdf93e95f14ee795f4)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTQwNTMwODY1NDAjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFp7zTVScSexdpv/LrR2eIj/dkBbg7KBtEbOnf7jFFq//.../SetupFreeWorkz.exe (6d334f1ee4c9ab4651e9cf0ca920cb51)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTQwNTMwODY1NDAjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFp7zTVScSexdpv/LrR2eIj/dkBbg7KBtEbOnf7jFFq//.../SetupFreeWorkz.exe (61426734d85e0b0c65b77ca002aff5ab)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTQwNTMwODY1NDAjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFp7zTVScSexdpv/LrR2eIj/dkBbg7KBtEbOnf7jFFq//.../SetupFreeWorkz.exe (f2337dc5e070ee5449379b740f83dc86)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTMxNzc1MjQ0MTYjPKA90VCTse81PaOzo3v6ZAzXtMyo2GFeGdkGRdQOAcA/m5H4ZM7UTxZ7 SZcA/.../SetupFreeWorkz.exe (152d1f33b649b68ae9940b531ea16354)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTE5NzQ0ODEzODEjPKA90VCTse81PaOzo3v6ZAzXtMyo2GE7R1I7jYmSOvIHf474/bkdFVt5 M7e4PwTXLWbfn4rPyTKtOG/.../SetupFreeWorkz.exe (32837f5ce52ef75210048d6dd506cdef)

1 / 68 (Adware)

http://start.freeworkz-games.com/setup/YTE3MDU3ODQwMzEjPKA90VCTsZjna4kXx8qHpAXgd5YR6/LS2ZP8BDMJtE3SI5vj7E7usfk8IXIbNN4TXLWbfn4rPyBv0zRXi4fc/.../SetupFreeWorkz.exe (96a51425c54e2090820daaf913354922)

The following 217 files have been seen to comunicate with start.freeworkz-games.com in live environments.

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80

optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80

charles.exe (by Apple)

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80

install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

TCP » 54.72.9.51:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

Latest 20 of 221 files

URL:

http://start.freeworkz-games.com/

Title:

“freeworkz-games.com”

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.