home

www.flashcleanapplications.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
flashcleanapplications.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore (M)
100.00%

The domain www.flashcleanapplications.com has been seen to resolve to the following 9 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
September 18, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
September 18, 2016

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
September 18, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
September 18, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
September 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
September 18, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
September 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
September 18, 2016

File downloads found at URLs served by www.flashcleanapplications.com.

1 / 68      (PUP)
http://www.flashcleanapplications.com/ELhfqz VviIcipWuOvTM9vuLZqTutqr3V1KZ aGbCu3flR6da658a0H2X _2FDQF4Ill9uiWGykVlUcljDLNXOg54w97sycwVQDN8ESJjTnOjeD15Jgkarieg5uWePbotU1SpujyT8V11epk xlsyvMdBSRwwHWIoAPrl4NlcjjPgi8pNGz3m8AjTMoCJcZQ5 UirhxkHm6ePwc9m1cRCQzQDgvwvJ9pVkwPGoBk eIPaZ5LGLYuPrt9KEgjiMky6pAM9fJ1d630csoLL1xpTKi ZijANOcQKgTrcXW8KoVa8IqP67oSLCtUhhk0YHIwPUYUvZFPZMC2vvyiXHLOfMRXo1ihOjhQReBm86rFlMZ uTMWuaIvg_7X2LK2HGfH2fdRQDnt3uxTUlCt1r3CrWDajGUlv4QqIdYXFv1l8jkpcDhkChBamUaZBohyaLLilJQWhDYm DPiXrupKgqpeKsaq0El4nxR2eoQv9hpIbIbRA q3h0495g44DvK1Z51WplxEdvZ6J2wlhtewEwsCu3WZJY_E__P7pFdWhHKP19oPEuIwpYsp_XO7BoR5OMlD6lhZT52xI4vgYvkO5HdC8V5nZKA7lHWln0wUAY2FaZlecSTs46vQRCpMKz eViDH5foZX50ohNuxUTJPPYX7FDHl_8elo8bO1CWc2cnxD yH0CRn3S9gKD9seZDYv MHOeO0dax20MzaBF0zHvuOXS8hrQ3iyG4ISqrJULMF ZgcoM1TMdhWfi0n4ZIOiE43RxP JXqIJTluNBX4f7A40MQIU4 JbTQ89gyVimGDGRNwL0NZZ6y0G4fqmwXyqCOP0w1pQLhROU1Q2Cxy9T2klg2fv3f2POjqdYDySA jB7QXR6YUAo=-GzwAAORtm8 QRt34QeNKWgliEI3qQjZpSCIJdikaF PK_Y7pmOI3gMDtNyNbk3FCFVZqRr_oAXkC  (mediaplayerpro.exe)

1 / 68      (PUP)
http://www.flashcleanapplications.com/uGUUUqj63Zh0 PBJS0eevOwMMchwZIjmBCyolKftOrqycWr0NpwBE2isVI L_Su3Wp4A2DI2l10IePIba1AplGsUqkztHwuTCZDsEru7 FGIIANkwtIapUBmTpGkhcKS6v3xOd28NQ69nFr4hLuKyzmqblYHGxsQYM_i0YYUZ9OcT ESZP2Ej67HSwswZ9Xwzc2 0dfnwFR 9Z9xijuRsed BxRyZZ_Ei9ve7NgHvih2QLidpxnx1Khjem_t3HYS5soGZ1FMSK6fvurY6dq0afycrQ36mOdprr4cPMT7sPvZ_F7DnH AhASvRXoC82BvYRfqIF83GWPNzL ctuFRTgx4DJSbWXIfGVx9o4AyEHEIGQpU_jJW3P3_Bf8YefZxLJMs0AkUhngVjO8Nmjtn_Wtp_2ITBpbZ2gXh_8ZfvzvAYbIk1oZgnzZpttikDKLllzIzV6m_ZnedM6iKqAXNdN5v44eLFQ55wWg46AGN_uBnDLGi6QjCrJISDMpgxR1URO05qTZ_gpivERLi7Tol_ESX3FXZPh8mHLu5b2gB8S6lxX0G3ulKL vTNCnbquUQbJ6hk3ln3kHywHpBwfyPNYoE3k3JrJ4 L54lj5zwG9ydGmnXlpXq0xtF9_vu34EtgcppgE_cyEWSnCz60C0 cR3bVOFtS97vdXF9 NbBim7CAMIijywdaF5_likVYxHj3NIcYpsfOF1gs97 d1pchpgdemOzJWHgJpX4r3UnURaIua68EJ6SV_D_IwNR8XJ5cnWOaI7fVhBYYsTTNzSY Wde5RA5lkY2K8PQfarG91lPT4Ja0Eqkm7tMXlrXV5EOLC77J2l0bYcxp9AZXRADBf8Ydsmpm7RDDyYnct6c7QXlT75C4Q=-GzwAAORtm8 QRt34QeNKWgliEI3qQjZpSCIJdikaF PK_Y7pmOI3gMDtNyNbk3FCFVZqRr_oAXkC  (mediaplayerpro.exe)

1 / 68      (PUP)
http://www.flashcleanapplications.com/9iSHgQK_vEjB0NuFCE25HgSn86N2h50n1P2irvqzrqp8bO3he04c6vZFlFCN96THfV0iBVtf4PkzJrERUQkDsFEYXBiHgQrKWVpX5X_UVo6zfrsxqDv7uYHxUXksfyA4e2n1mY0_kbZ3cSHvbgqCX0GuN0UMXZ7O3zYe4Oix ZX6bF45HIXJrw6JsFdy5Ge1jK kGSyne BnaBMF1pDi4ldBX4Y1wA8rsIjPR28Fhc7s_E8 c9jYjHNHZlgSjLHPRx7sC 51jhjGS0ZxR9uLsAaW ItV0nQCkpWNufvf 1kOfHmkGU3e2lrPVAhBWYN_G6eE Ec7ZrRn2nuzCMFEtXH6tY66FVHDqlXZSWjSqD1db_uWrDE2D12A9wL l9Dw_lbEz02VA3WORRwIOVv A9i1DW85j1bnZichovMK3QGyzjvIF8Cqc7sRM9iiLf50EgSJXHF_mWdmLgTdQ9ffryfVtzjG UkqfWrFgmn_NY7pIxZ4b6tKHBVruPijzUWxXYRuGt6sLhPmph2mpoPb1LkjIV0Or63e9Pkr9vox_D7tAEs8eaJCJE0i5hI_wypTQLfmJiyNuv3Oe2pk9RSlm0QYgIlaWWKdDP9Tl4KtctZp0Mbw3K7mJeKromegKwiejAheWmYPVb62tXBVS7hZk8SLPGckz9GB_g2Ww9oAAbDLfKoVjk1WNRKRPNfO41ASk c2Ccc Q_njP56 IyxdnoRAI9JcyDJe1HJY15hwiMtK7Lr5IibIR0xGgT5TbB8fa PlMf3gTmCamLc_30MsVbpXsEYZDi4MatusuICMm K5YQgEzfiZjcVS ngCykR7 VQ9uxmD-GzwAAORtm8 QRt34QeNKWgliEI3qQjZpSCIJdikaF PK_Y7pmOI3gMDtNyNbk3FCFVZqRr_oAXkC  (flashplayerpro.exe)

The following 45 files have been seen to comunicate with www.flashcleanapplications.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

TCP » 52.33.46.229:80
Client.exe

TCP » 52.34.184.36:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

 
Latest 20 of 66 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.