» www.freegogo-download.com
Overview
Analysis
IPs Addresses (3)
Downloads (29)
Network (3)

www.freegogo-download.com

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain www.freegogo-download.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in October of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Virginia, United States (US)

Create date:

Wednesday, October 8, 2014

Expires date:

Saturday, October 8, 2016

Updated date:

Thursday, September 24, 2015

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

freegogo-download.com

Whois:

1 freegogo-download.com record

Scanner detections:

Detections (94% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ICSSetup.M, PUP.NewMedia.Installer.New Media Holdings.Installer (M), PUP.installCore.ICSSetup.Installer (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.installCore (M)

96.77%

Dr.Web

Trojan.InstallCore.25, Trojan.InstallCore.33

6.45%

ESET NOD32

Win32/InstallCore.NF potentially unwanted application, Win32/InstallCore.TU potentially unwanted application

6.45%

VIPRE Antivirus

Threat.4788237, InstallCore

6.45%

K7 AntiVirus

Unwanted-Program

6.45%

NANO AntiVirus

Riskware.Win32.InstallCore.djocrp, Riskware.Win32.InstallCore.dkmnkn

6.45%

Comodo Security

Application.Win32.InstallCore.DA, Application.Win32.InstallCore.GH

6.45%

Sophos

Install Core Click run software, PUA 'Install Core Click run software'

6.45%

Avira AntiVirus

Adware/InstallCore.Y, Adware/InstallCo.zkt.1

6.45%

G Data

Win32.Adware.InstallCore.BV, Win32.Application.InstallCore.CZ

6.45%

AVG

Generic

6.45%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

3.23%

F-Secure

Application:W32/Generic.70053c248f!Online

3.23%

Baidu Antivirus

Adware.Win32.InstallCore

3.23%

avast!

Malware-gen

3.23%

The domain www.freegogo-download.com has been seen to resolve to the following 3 IP addresses.

52.7.132.182

ec2-52-7-132-182.compute-1.amazonaws.com

January 3, 2016

107.23.203.23

ec2-107-23-203-23.compute-1.amazonaws.com

January 3, 2016

54.84.143.69

ec2-54-84-143-69.compute-1.amazonaws.com

January 3, 2016

File downloads found at URLs served by www.freegogo-download.com.

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vxkDj rcWDK4m7z0RvmiWAkDjIKiWXzawAZLyATn0ASDPDdlChV80OZayAzMzAT7y&campaignId=9jn0AT7FAjiwAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1CDSDj7z1nxSDj rcWDrLm7z0RvmiWAkDjIKiWXzCwOZA0Ajn0ASDPDdlChV8wNZc3OTiRNZgy&campaignId=9jn0AT73Az74AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzLFOTiyATn0ASDPDdlChV8yNjayAzMzAT7y&campaignId=9jn0AT7RNTL0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV8yNjC0NZ7zAj7y&campaignId=9jn0AT70Njn0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=h3NyhKvEvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNzC1NTnRATiRvmt3hXtGDXl3 3vCfSDt2Z1Y K507dP0eXslfSDt j1YcrRP7dVtDKF0fSDj2Z1Y2r5yDdV0fSDu2Z1YIKDZ dF0DKF0OCxWedlmLdVPcmNoOlxWvmV4cHaWed5jDKlCfSDPcZ1Y7Kxw 3Np2rlJ E0mDH7Wedxl2mljDX0mc3aWc3vjvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDdlChV81OTgRAzL0AZ7y&campaignId=9jn0ATc4OTa0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vxkDj rcWDK4m7z0RvmiWAkDjIKiWXzL4NjM0ATn0ASDPDdlChV80AzMFATM0Aj7y&campaignId=9jn0ATc3AzL4AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1p2kDj7z1vVkDj rcWIXim7z0RvmiWAkDjIKiWXznwATLyATn0ASDPDdlChV8dNZ7FNzMzAT7y&campaignId=9jn0ATLdNZa0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1p2kDj7z1vVkDj rcWIXim7z0RvmiWAkDjIKiWXzC4NzazATn0ASDPDdlChV8FNj7zNT7zAj7y&campaignId=9jn0ATcyNZ7yAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=h3NyhKvEvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fATMdNTnRATiRvmt3hXtGDXl3 3vCfSDt2Z1Y K507dP0eXslfSDt j1YcrRP7dVtDKF0fSDj2Z1Y2r5yDdV0fSDu2Z1YIKDZ dF0DKF0OCxWedlmLdVPcmNoOlxWvmV4cHaWed5jDKlCfSDPcZ1Y7Kxw 3Np2rlJ E0mDH7Wedxl2mljDX0mc3aWc3vjvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDdlChV83AzAyAzL0AZ7y&campaignId=9jn0AT7ROZc4AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV8ROZM1NZ7zAj7y&campaignId=9jn0AT7wNzadAZMq (firefoxsetup.exe)

2 / 68 (false positives)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNjM0ATn0ASDPDdlChV84NTMFATM0Aj7y&campaignId=9jn0ATLdNZ7wAZMq (wrar420.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzn4NzazATn0ASDPDdlChV83NTC0NZ7zAj7y&campaignId=9jn0ATcwAZgdAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV8zNjc3NZ7zAj7y&campaignId=9jn0ATc3OTndAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzCdNjM0ATn0ASDPDdlChV8FOZC4ATM0Aj7y&campaignId=9jn0ATcRAznwAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV83NzC0NZ7zAj7y&campaignId=9jn0ATLdOT70AZMq (firefoxsetup.exe)

0 / 68

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzMwATLyATn0ASDPDdlChV8zNZ7FNzMzAT7y&campaignId=9jn0AT74OTg4AZMq (firefox setup 27.0.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV8dNzn1NZ7zAj7y&campaignId=9jn0ATLzNTi0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sVkDj rcWDK4m7z0RvmiWAkDjIKiWXzaFOTiyATn0ASDPDdlChV80NTayAzMzAT7y&campaignId=9jn0ATgyAZCyAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXznRNTazATn0ASDPDdlChV8FOZL1Az7zAj7y&campaignId=9jn0ATLRAz7dAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzgwNZnzAjn0ASDPDdlChV8ROZLdOZ7wNZgy&campaignId=9jn0ATLzATg0AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1ZSkDj rcWDK4m7z0RvmiWAkDjIKiWXzc3NjM0ATn0ASDPDdlChV8FAZMFATM0Aj7y&campaignId=9jn0AT7dNjnyAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1rSSDj rcWDK4m7z0RvmiWAkDjIKiWXzMFOTiyATn0ASDPDdlChV8FNZayAzMzAT7y&campaignId=9jn0ATLFOZM4AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV83NzC0NZ7zAj7y&campaignId=9jn0ATgRATawAZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXza4NzazATn0ASDPDdlChV80NjM1NZ7zAj7y&campaignId=9jn0ATL3Azc4AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=h3NyhKvEvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOZC1NTnRATiRvmt3hXtGDXl3 3vCfSDt2Z1Y K507dP0eXslfSDt j1YcrRP7dVtDKF0fSDj2Z1Y2r5yDdV0fSDu2Z1YIKDZ dF0DKF0OCxWedlmLdVPcmNoOlxWvmV4cHaWed5jDKlCfSDPcZ1Y7Kxw 3Np2rlJ E0mDH7Wedxl2mljDX0mc3aWc3vjvExthXN3DKV0vEsyhXMtDmlyDKDJekDPDdlChV83OTMyAzL0AZ7y&campaignId=9jn0AT74NZi4AZMq (firefoxsetup.exe)

1 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sVkDj rcWDK4m7z0RvmiWAkDjIKiWXzaFOTiyATn0ASDPDdlChV8zNTayAzMzAT7y&campaignId=9jn0ATcwOTLwAZMq (firefoxsetup.exe)

14 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzCdNjM0ATn0ASDPDdlChV83OZC4ATM0Aj7y&campaignId=9jn0ATgwNTC4AZMq (firefoxsetup.exe)

12 / 68 (Adware)

http://www.freegogo-download.com/?dl=1&dr=cHaWck1mIXvlDmW4vExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzCdNjM0ATn0ASDPDdlChV84OZC4ATM0Aj7y&campaignId=9jn0ATcROTL4AZMq (firefoxsetup.exe)

The following 3 files have been seen to comunicate with www.freegogo-download.com in live environments.

TCP » 54.84.143.69:80

WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 54.84.143.69:80

notifier64.exe (Notifications)

TCP » 54.84.143.69:80

ContentFinder.exe (ContentFinder by ContentFinder Company)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.