home

vmco.adk2x.com

PLYmedia

Domain Information

The domain vmco.adk2x.com registered by PLYmedia was initially registered in February of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Thursday, February 13, 2014

Expires date:
Monday, February 13, 2017

Updated date:
Monday, January 25, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
adk2x.com

Whois:
1 adk2x.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.Outbrowse.SalyutemPlyus.Bundler (M), PUP.InstallCore.FC.Installer (M)
100.00%

Bkav FE
W32.HfsAdware
33.33%

Malwarebytes
PUP.Optional.InstallCore.C
33.33%

VIPRE Antivirus
Trojan.Win32.Generic
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

NANO AntiVirus
Riskware.Win32.InstallCore.dnajwn
33.33%

ESET NOD32
Win32/InstallCore.XS potentially unwanted application
33.33%

Clam AntiVirus
Win.Adware.Installcore-651
33.33%

Agnitum Outpost
PUA.InstallCore
33.33%

Comodo Security
Application.Win32.InstallCore.PK
33.33%

Dr.Web
Trojan.InstallCore.49
33.33%

Avira AntiVirus
PUA/InstallCore.II
33.33%

G Data
Win32.Application.InstallCore.DI
33.33%

Total Defense
Win32/Tnega.JMMQZQD
33.33%

McAfee
Artemis!AA44A3B04733
33.33%

The domain vmco.adk2x.com has been seen to resolve to the following 34 IP addresses.

146.148.53.24
24.53.148.146.bc.googleusercontent.com
August 6, 2016

130.211.183.210
210.183.211.130.bc.googleusercontent.com
August 6, 2016

130.211.180.124
124.180.211.130.bc.googleusercontent.com
August 6, 2016

130.211.132.51
51.132.211.130.bc.googleusercontent.com
August 6, 2016

104.197.179.68
68.179.197.104.bc.googleusercontent.com
August 6, 2016

104.197.121.192
192.121.197.104.bc.googleusercontent.com
August 6, 2016

104.154.71.163
163.71.154.104.bc.googleusercontent.com
August 6, 2016

104.154.57.16
16.57.154.104.bc.googleusercontent.com
August 6, 2016

104.154.51.120
120.51.154.104.bc.googleusercontent.com
August 6, 2016

23.251.158.49
49.158.251.23.bc.googleusercontent.com
August 6, 2016

146.148.89.65
65.89.148.146.bc.googleusercontent.com
August 6, 2016

146.148.84.188
188.84.148.146.bc.googleusercontent.com
August 6, 2016

52.4.167.70
ec2-52-4-167-70.compute-1.amazonaws.com
February 13, 2016

52.4.163.174
ec2-52-4-163-174.compute-1.amazonaws.com
February 13, 2016

52.4.116.212
ec2-52-4-116-212.compute-1.amazonaws.com
February 13, 2016

52.3.177.254
ec2-52-3-177-254.compute-1.amazonaws.com
February 13, 2016

8.35.193.28
28.193.35.8.bc.googleusercontent.com
February 13, 2016

104.197.41.66
66.41.197.104.bc.googleusercontent.com
February 13, 2016

104.197.27.64
64.27.197.104.bc.googleusercontent.com
February 13, 2016

104.197.27.23
23.27.197.104.bc.googleusercontent.com
February 13, 2016

104.154.50.188
188.50.154.104.bc.googleusercontent.com
February 13, 2016

104.154.32.204
204.32.154.104.bc.googleusercontent.com
February 13, 2016

52.4.214.99
ec2-52-4-214-99.compute-1.amazonaws.com
February 13, 2016

52.4.221.159
ec2-52-4-221-159.compute-1.amazonaws.com
February 12, 2016

52.4.220.195
ec2-52-4-220-195.compute-1.amazonaws.com
February 12, 2016

52.4.99.48
ec2-52-4-99-48.compute-1.amazonaws.com
February 12, 2016

130.211.131.135
135.131.211.130.bc.googleusercontent.com
February 12, 2016

104.197.8.96
96.8.197.104.bc.googleusercontent.com
February 12, 2016

54.86.124.220
ec2-54-86-124-220.compute-1.amazonaws.com
February 12, 2016

52.6.89.20
ec2-52-6-89-20.compute-1.amazonaws.com
February 12, 2016

 
Showing 30 of 34 IP Addresses

File downloads found at URLs served by vmco.adk2x.com.

1 / 68      (Adware)
http://vmco.adk2x.com/click/yEUJl5I5ASowG2hC5zBpO-LFfLkpCmS9d9_53beT9Oyghhd-GojcE_joooCMolLhX_gIjXPlxjClwW1Dj0mP1oIVBEWpxb6AsuoWpD7DtWe-CXls4gKtnRF7xi6BKgQEO-ypWKrlMK-m0Ve4tyiTmaIccHoONSG_SCLzovSF5AzUMtQ_BTnQAz46eIdd5amLZ47F_FM5PTY6nag7eY_5SoN1npcU9p92hDgwHr-y3uIsQZ8WUXIsdoBiD6RLAcKjUfwiaLPp//http://.../down.php?p=VELISMEDIA2-DD&trckid=yEUJl5I5ASowG2hC5zBpO-LFfLkpCmS9d9_53beT9Oyghhd-GojcE_joooCMolLhX_gIjXPlxjClwW1Dj0mP1oIVBEWpxb6AsuoWpD7DtWe-CXls4gKtnRF7xi6BKgQEO-ypWKrlMK-m0Ve4tyiTmaIccHoONSG_SCLzovSF5AzUMtQ_BTnQAz46eIdd5amLZ47F_FM5PTY6nag7eY_5SoN1npcU9p92hDgwHr-y3uIsQZ8WUXIsdoBiD6RLAcKjUfwiaLPp  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://vmco.adk2x.com/click/w0SqiNRJa7HnFKscglh9oaCblAM3le40dAnXNUuxGup6JsZPuSL40sE7lurEKeQqAEfBa8mCS6tSgpLlDCX9HNUl8XxZioRjN-7i-KG7XmO3cDQD7wKUrnReBg2wHDtqyOu8rRWLW5bZ-CjJDYY6dLeflJF5vtymjrHe-28Os3Y1SBMpM2cnO5vOzyWHfh1h7Mqcom4-kNFHvVHoUKE004yoa70e4yZjF6pjsSsjLSoUfDCGF6i4mb69cll5bw_1UngsVjwm//http://.../down.php?p=VELISMEDIA2-DD&trckid=w0SqiNRJa7HnFKscglh9oaCblAM3le40dAnXNUuxGup6JsZPuSL40sE7lurEKeQqAEfBa8mCS6tSgpLlDCX9HNUl8XxZioRjN-7i-KG7XmO3cDQD7wKUrnReBg2wHDtqyOu8rRWLW5bZ-CjJDYY6dLeflJF5vtymjrHe-28Os3Y1SBMpM2cnO5vOzyWHfh1h7Mqcom4-kNFHvVHoUKE004yoa70e4yZjF6pjsSsjLSoUfDCGF6i4mb69cll5bw_1UngsVjwm  (installer_adobe_flash_player_english.exe)

25 / 68    (Adware)
http://vmco.adk2x.com/click/V1Dt7dRJFrg9bpgD0qwggvkqBcXygGHe5_gnzC2JSyv26DU4qxzJ1GKWx15eusnHxzv8hlPsRYpMFne5bzHHOnD-sLe8D07zNRErTc3IfX2s0l92FZ7qmpDAzNYRP9glEOeq3CFzwhiXr2HjUATBwXFjLLmupuS-LCDAwojLxUiY_0OlbXkOfGc_Jm_Q_g1jFS_EvP4Anfpoebg-uVAH-4gGkVJmpaDDHmMFhZj2qGZfurnnafh3ffYZ_R_X_dXGuyL7M3ZA//http://.../down.php?p=VELISMEDIA2-DD&trckid=V1Dt7dRJFrg9bpgD0qwggvkqBcXygGHe5_gnzC2JSyv26DU4qxzJ1GKWx15eusnHxzv8hlPsRYpMFne5bzHHOnD-sLe8D07zNRErTc3IfX2s0l92FZ7qmpDAzNYRP9glEOeq3CFzwhiXr2HjUATBwXFjLLmupuS-LCDAwojLxUiY_0OlbXkOfGc_Jm_Q_g1jFS_EvP4Anfpoebg-uVAH-4gGkVJmpaDDHmMFhZj2qGZfurnnafh3ffYZ_R_X_dXGuyL7M3ZA  (installer_adobe_flash_player_english.exe)

The following 90 files have been seen to comunicate with vmco.adk2x.com in live environments.

TCP » 146.148.84.188:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.148.89.65:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 130.211.180.124:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.154.51.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.197.179.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.148.84.188:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.197.121.192:80
UCBrowser.exe (by UCWeb)

TCP » 130.211.183.210:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.148.53.24:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 130.211.132.51:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.197.121.192:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.148.53.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.148.89.65:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 130.211.183.210:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 146.148.53.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.251.158.49:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 104.154.51.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.154.71.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 130.211.180.124:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 23.251.158.49:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 128 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.