» www.myplayerhd-dd.net
Overview
Analysis
IPs Addresses (2)
Downloads (16)
Network (2)
Website Detail
Related Domains (7)

www.myplayerhd-dd.net

ziv dascalu

Domain Information

The domain www.myplayerhd-dd.net registered by ziv dascalu was initially registered in October of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

ziv dascalu

Registrar:

GANDI SAS

Server location:

Oregon, United States (US)

Create date:

Monday, October 20, 2014

Expires date:

Tuesday, October 20, 2015

Updated date:

Monday, October 20, 2014

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

myplayerhd-dd.net

Whois:

1 myplayerhd-dd.net record

Google Safe Browsing:

malware

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ITLGROUP.X, PUP.Installer.ITLGROUP.W, PUP.Installer.ShetefSolutionsConsulting1998.i, PUP.Installer.AMGRUP.X, PUP.Amonetize.ITLGROUP.Bundler (M), PUP.Amonetize.AMGRUP.Bundler (M), PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), PUP.Amonetize.DOZDEKORUM.Bundler (M), PUP.Amonetize.ShetefSo.Bundler (M), Threat.Win.Reputation.IMP, PUP.Brightcircle.SVANTRAN.Installer (M)

100.00%

AVG

Generic, Downloader.Generic14

37.50%

MicroWorld eScan

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Win32.Virtob.Gen.12, Gen:Variant.Graftor.161218, Gen:Variant.Adware.Netfilter.2

37.50%

Bitdefender

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Win32.Virtob.Gen.12, Gen:Variant.Adware.Graftor.161610, Gen:Variant.Adware.Netfilter.2

37.50%

G Data

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Win32.Virtob.Gen.12, Gen:Variant.Adware.Graftor.161610, Gen:Variant.Adware.Netfilter

37.50%

AhnLab V3 Security

PUP/Win32.Amonetiz, PUP/Win32.Amonetize

37.50%

Emsisoft Anti-Malware

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Win32.Virtob.Gen.12, Gen:Variant.Adware.Graftor.161610, Gen:Variant.Adware.Netfilter

31.25%

F-Secure

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Win32.Virtob.Gen.12, Gen:Variant.Adware.Graftor.161610, Gen:Variant.Application.Bundler

31.25%

Avira AntiVirus

TR/Rogue.805376.8, ADWARE/Adware.Gen2, ADWARE/Adware.Gen4, Adware/Amonetize.314368.1

31.25%

Malwarebytes

PUP.Optional.Amonetize

25.00%

Trend Micro House Call

Suspicious_GEN.F47V1126, PE_VIRUX.R, TROJ_GEN.R08NH09LM14, Suspicious_GEN.F47V1231

25.00%

Lavasoft Ad-Aware

Trojan.GenericKD.1995819, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Adware.Graftor.161610, Gen:Variant.Application.Bundler.22

25.00%

McAfee

Artemis!3F9444058CBF, W32/Virut.n.gen, Trojan.Artemis!DE732793E0EA, Artemis!2AC1F96945A4

25.00%

ESET NOD32

Win32/Amonetize.CC potentially unwanted application, Win32/Amonetize.BP potentially unwanted application, Win32/Amonetize.CK potentially unwanted application

18.75%

Kaspersky

not-a-virus:AdWare.Win32.Amonetize

18.75%

The domain www.myplayerhd-dd.net has been seen to resolve to the following 2 IP addresses.

54.245.242.253

ec2-54-245-242-253.us-west-2.compute.amazonaws.com

June 18, 2015

54.214.33.160

ec2-54-214-33-160.us-west-2.compute.amazonaws.com

January 5, 2015

File downloads found at URLs served by www.myplayerhd-dd.net.

16 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (flashplayer__10422_il2.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.89&ci=10865&capp=FlashPlayer&ti1=MTg2Nnw0NDY2M3xJVHwzfDF8fA|d3e4be1ef6fbbfd7eaf3382b80f949ce-8-886 (flashplayersetup__10865_i1404551650_il9.exe)

1 / 68 (Malware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10154&capp=FlashPlayer&ti1=dFPM9254JRC30PRGGHD04N4I (flashplayersetup__10154_i1428195215_il2.exe)

19 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10154&capp=FlashPlayer&ti1=w4CL9VM95PA925TGG7RR59FS (mediaplayer__8491_il697.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (flashplayer__10154_i1407526772_il11.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=wsws (flashplayersetup__10775_i1393896479_il34.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (anykeyword__10422_il1.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=vojud (flashplayersetup__10775_i1384335181_il2510.exe)

25 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (mediaplayer__6468_il407.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=vojud (flashplayersetup__10775_i1387665422_il34.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (flashplayersetup__10775_i1405217879_il4.exe)

1 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (flashplayersetup__10775_i1422962434_il3.exe)

8 / 68 (PUP)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.89&ci=11412&m=__sitename__&ti1=-_-ZjAxY181MV81MTYwXzUyMDJfQlJfMTg3LjU3LjEzLjI1XzUxNV82MjgxX0FEUw-_-ADSYS-c209af11-945c-11e4-ade7-eb25b38d196e (mediaplayer__9220_i1437196951_il513.exe)

29 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=jommjd (mediaplayer__3137_il97.exe)

10 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=vojud (flashplayersetup__10775_i1382848073_il2510.exe)

17 / 68 (Adware)

http://www.myplayerhd-dd.net/direct-download.html?version=1.1.5.55&ci=10775&capp=FlashPlayer&ti1=wsws (flashplayersetup__10775_i1389741287_il34.exe)

The following 2 files have been seen to comunicate with www.myplayerhd-dd.net in live environments.

TCP » 54.214.33.160:80

new_chrome.exe (Google Chrome by Google)

TCP » 54.214.33.160:80

Project1.exe (Pino by Microsoft)

URL:

http://www.myplayerhd-dd.net/

Google Analytics:

UA-40440173

Title:

“Flash Player Download”

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

Apache/2.2.29 (Amazon) (PHP/5.3.29)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.