home

www.clearheartlaboratory.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
clearheartlaboratory.com

Scanner detections:
Detections  (71% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Nummorum.Installer (M)
80.00%

ESET NOD32
Win32/Virut.NBP virus
20.00%

F-Prot
W32/Virut.E.gen
20.00%

avast!
Win32:Vitro
20.00%

Microsoft Security Essentials
Threat.Undefined
20.00%

Emsisoft Anti-Malware
Win32.Virtob.Gen.12
20.00%

Norman
Win32.Virtob.Gen.12
20.00%

The domain www.clearheartlaboratory.com has been seen to resolve to the following 10 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 22, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 29, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 29, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 29, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
July 29, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
July 29, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 29, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
July 29, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 29, 2016

File downloads found at URLs served by www.clearheartlaboratory.com.

1 / 68      (PUP)
http://www.clearheartlaboratory.com/c?x=xTp85lokxHDGNW1cz38TSA9Olg09KzzHUieTYdi xl0=&c=SAGGn9C4kzgC RpvNa0nA4oX6m3LhlgDzoqaF7e0EDbNdG3VBoLl1X OzD9NPQTNIjEBZV0azW5r7eEhMTq9Po08f1GQNLARRH hzrvZcez50L pPOQC6AXyLwKdguHL kKnr1 6yCikIbOlRZ333EBmbKvKrsBrVhRB3yVzaDc=&e=0&downloadAs=adobe_flash_player&fallback_url=http://downloadflash.net/.../adobe_flash_player.exe  (d129bc60cb0b7a9fa47470c0d9438664)

0 / 68
http://www.clearheartlaboratory.com/c?x=isCrlNXyOBTW90rkkGKKUjGIIt/ SOj1VvlXUX4hE8I=&c=vQ9WMohQBTBdjEmzGxt90aq5bGGLIn/.../9VDvX9hLtrWo5Q9tVxAw13EgNU kVFijyecZVlD27kxcvdM5DHmnWywdRvou2X0ZsUkSF6JkG2 GA1vi8vuGgL DpLGeGlAA9fxdVeeUasDLjG4MHArwexlNvtWMM=&e=0&downloadAs=Java  (jre-8u60-windows-i586-iftw.exe)

1 / 68      (PUP)
http://www.clearheartlaboratory.com/c?x=bVsrEhyCyTC1Sg7oUcEXGElncDqjT/Gup4RGtc35/aU=&c=pQCxCaoYH5pEkrn2d213z/tguFeTXQqnKr2PZ7J pJEmADVTqf9oQcxZIEz3QNDH9mYdGBxoL3YLw7r2H5OLlJgtRIIJtOsuh4P7cKMS5oxHtj7XdmipnaP17OyLfKkE1jrHqiWAPuLqY0MFVaPbg1nIpybSn4D88psztqiLIps=&e=0&downloadAs=adobe_flash_player&fallback_url=http://downloadflash.net/.../adobe_flash_player.exe  (1046a51c26dce366f665c44f05ba627a)

1 / 68      (PUP)
http://www.clearheartlaboratory.com/c?x=kVvSgn2CuDQdeOzavIfwdE5jjc1RmHnlwDrItu1j3dk=&c=/fDVpTtQHXbJTmPfWvXQsOgANxM AzmPnlr6VFFq/e6iYOMQtnzCe4K sBy3Ls4OO56Tl1Dbh B9HUKsJ4O3Cbp/.../ yvcwCQ ShE2OojG3q vitvdvlk6SfOjoCGufw8WEWKuNkRMLKRLOHCUgM=&e=0&downloadAs=Flash Player  (flash player.exe)

0 / 68
http://www.clearheartlaboratory.com/c?x=isCrlNXyOBTW90rkkGKKUjGIIt/ SOj1VvlXUX4hE8I=&c=vQ9WMohQBTBdjEmzGxt90aq5bGGLIn/.../9VDvX9hLtrWo5Q9tVxAw13EgNU kVFijyecZVlD27kxcvdM5DHmnWywdRvou2X0ZsUkSF6JkG2 GA1vi8vuGgL DpLGeGlAA9fxdVeeUasDLjG4MHArwexlNvtWMM=&e=0&downloadAs=Java  (java.exe)

1 / 68      (PUP)
http://www.clearheartlaboratory.com/c?x=pNRctUB PetshjXHMJ 0pBuO0wIzVxepSIRA1uOCQzY=&c=0hTWWk6GrZW1B8hOmF/QQyLh/f 7b39JcyZYMydpTXQJZWvByv 0sxqRUg7bAAmQIokwJ4Y/nrJMOEJi/ xXH 3Fv241D7KjgSlwgPT2wfrHYNkV0WhLUOxqDuE9CAQCaac5vrDZbLK63J5w3KqLLntIIUpFRRrhMkHcwWOFvQs=&e=0&downloadAs=adobe_flash_player&fallback_url=http://downloadflash.net/.../adobe_flash_player.exe  (d129bc60cb0b7a9fa47470c0d9438664)

1 / 68      (PUP)
http://www.clearheartlaboratory.com/c?x=/2xdP/i/ANA0mkZ2Zfvnlt8/8xHk9FMWd19giBh8vBk=&c=jSkrE/ZWLRm/odxB4jaLyeE8C8uJE9HlM tTg21VKUvTfO63Bch6JkhtqYQHpEa4LKWiL6oSkRF08WHc 49Rn99rXSWSiIlhrLrl0h/0p7N7F35UjmaRA/8tVE10F3hI kE3fjL2f3Q9Yg jSB3XERHPN1BnrcKV/rGqK9wZU2I=&e=0&downloadAs=adobe_reader&fallback_url=http://downloadreader.net/.../adobe_reader.exe  (eea278c75545951055d9e46cae3c5561)

6 / 68      (Malware)
http://www.clearheartlaboratory.com/c?x=hP0CdT27TUQPanpAIqpHDgFu1N8tPKsCpmOZ6vPsMpk=&c=IB/ A07PnMjxp9fUCvD7C PwRU0PbUR8j3fKTqZ8fP7BgEjjrAEyL8E2Zx4vKUXkRoMKMSTGOYLVlUDyFnA9 jqxJdF04ZKUTvgQJpgf86zHNj6ebT4ZQ7zBdQVCih84&downloadAs=adobe_flash_player&fallback_url=http://downloadflash.net/.../adobe_flash_player.exe  (8357f23e8d6dd69b183f10ac788b29bf)

The following 36 files have been seen to comunicate with www.clearheartlaboratory.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.