home

www.bestcenterdownloads.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bestcenterdownloads.com

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.installCore.Purch.Installer (M)
100.00%

Avira AntiVirus
W32/Mabezat
25.00%

The domain www.bestcenterdownloads.com has been seen to resolve to the following 14 IP addresses.

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 24, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 24, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 24, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 27, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 23, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 23, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 23, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 23, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 23, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 23, 2016

File downloads found at URLs served by www.bestcenterdownloads.com.

0 / 68
http://www.bestcenterdownloads.com/c?x=7MmwRgkPWXs5RfbsIHGixbiQevyRyoF4dSvaF6uhUCY=&c=D2xyHE/.../ uRx3HIfffYEG6tmxVktbu7CMGDCv rkcyVt0yWPH9Kr&downloadAs=TomsInstaller.exe  (dxwebsetup.exe)

1 / 68      (PUP)
http://www.bestcenterdownloads.com/.../qggEAO7XvUohQshriLrH6SxcyESRxrOjKjuzRE6P GFOEsPY0fGEprdgVQHHyiqjqStwaFgWbHSLoJhRsSZ&downloadAs=TomsInstaller.exe  (288118720d5a48ab2d5eebf45ead1788)

2 / 68      (Malware)
http://www.bestcenterdownloads.com/c?x=uDNkS2IgkG DzpohANzunuLtNwpsaNK7ss18Dinp69I=&c=9KAhFL/eStwVGaCztN2NlDb4WqpE8KXFCMG/45v7WlyJl/.../KbUNB3AhB5swEzfUJfxWizhLznPGg0aCckPE1oYa9z26Q5&downloadAs=TomsInstaller.exe  (Minecraft.exe)

1 / 68      (PUP)
http://www.bestcenterdownloads.com/c?x=UVsBOxFAw JepO2MQXW1oOjS0nw8ilTj0rZ1O0KpYiY=&c=p6qS3A6qhrR4 kEYsSfFCPzAcbK/.../1E waiYYR2j2MU1TW8XiGz2OwyIDrjaXEpo1Vq9DN9nyh&downloadAs=TomsInstaller.exe  (f5fec3aa5ed5312d9d126de15fcd8b94)

2 / 68      (Malware)
http://www.bestcenterdownloads.com/c?x=H5Y2Zc7Koz4y77lm7jKqZ2WsXTugGknEpfkOy0MTfL0=&c=9 Df73aPA3lvgVhD9FilcZG1ANcu28uQkz8 4He9nIV9egy6OtDkRyp JxYAvUYyVXE rTREUfJqD3JvNH9awrEgzY/.../v1B1qGmgdCMiiDXtG&downloadAs=TomsInstaller.exe  (Minecraft.exe)

1 / 68      (PUP)
http://www.bestcenterdownloads.com/.../ssn zoRZ11zD3xdaGjzIFQ3N1 GJi1QYDszB&downloadAs=TomsInstaller.exe&_ga=1.59955947.735565348.1465148086  (624ce4c42bb0a8ba9284cbf96bcb0705)

2 / 68      (Malware)
http://www.bestcenterdownloads.com/c?x=TA4p JdDJOslsOHIgvQMOHIMQnZPM29MOWO74rx eqE=&c=7PJTDMXS2MoZZugx4P1Hy4wfgIU 5N8YvTN6WeHhsK0JzrhfTP9XZfsa55etfaRk5mrxCKSSvUtI cHdTj53mOEcYROkYa7E1kYMZc2JP2bpxVvzqaBWO44uWXyBaObU&downloadAs=TomsInstaller.exe  (Minecraft.exe)

2 / 68      (Malware)
http://www.bestcenterdownloads.com/c?x=6JibwCt8jkiY1HWsQnkKnqlFmG/RoWMd0Wofh1NRIaA=&c=gBntPQpyslfOpDwkaIXQTzBTTr4bNMIOZrbJie1/.../cLjbhoN8XhcKhFIG6GbODKXZXA&downloadAs=TomsInstaller.exe  (Minecraft.exe)

0 / 68
http://www.bestcenterdownloads.com/c?x=Rs6IR0QRVSXN GU8JQbJDdnf Q1nnccLgJ8STO4UUAU=&c=W8cwopNSc3ZJABGX/jqHniq4F2qKxtXE6UBMh1as1/uX9UxLj1TY1sywNBGWBHxx6RnKzY7K4rtuzVurh5cxj6YvtWfLASrP/.../x&downloadAs=TomsInstaller.exe  (minecraft.exe)

The following 36 files have been seen to comunicate with www.bestcenterdownloads.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.