home

www.presentcontentcurrent.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
presentcontentcurrent.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M), PUP.installCore (M)
100.00%

The domain www.presentcontentcurrent.com has been seen to resolve to the following 10 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 15, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 15, 2016

File downloads found at URLs served by www.presentcontentcurrent.com.

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=no4I EIOlCTX ngWmMAMaOyVM0/Oa2i0M9P/dIZSfpI=&c=eTmgA7B9IEnIbYxpuNNcxN71TNH/hosuaSDHGeSUQ4zi/m91vQoKLhRc1n9cTpVhXeRiGd7a3m6RUV/3/6t1XHPqHwxP8lSNaA3o5h2ppIOQTNKIusFTjnNtD1zIwN7q&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=qmkCUnVw72BufL44mxUITFMbtujntdFzriWfKG kvPg=&c=qx/4hz5dOKOLN/Nm0hvQYNHiyi9j czoy I0NeMuOSlu0Ey55eG87ix4noB4wyHbd5yfioZC10g/4HStVMZJZFAY2T8Z2Ci4duyD4tCi00qWa0Qtyo1HlGTS2qLJXn42&fallback_url=http://res.hufftos.com/.../Opera_22.0.1471.50_Setup.exe  (3792da8c160dd4d6f26f968b9893edc5)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=WlQQHPog27xvbASqu/hfzpV/rZbIoIEtnnu/EB9ZpUc=&c=xMc7XBUgXUAdVh0dYhKbAkZFIWhrfzsb4dLaxs307o8WBlskPIgxb/JeD2XqTpr/gZnG/mVvlk6qYbK nMfVF1rTe/RsWh TcX5ZH10yvuTS0msg1LDwk/kVzEj4n/wT&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (c.exe)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=GC juIM522XIoItNqBD8JRE3W86JNWk59QV0fNN9NHo=&c=ClUy0MyXn1W5DP1P2K37E0cEwznN15nAe0T7yBkMiOIgRHA5mtjpiF/tPMUMfOePCirSWC1utcD4HXyLobuSbWXdnHi8NWKSMIQ7J7mnE5HLW9gK1SxBsv2qDs5kPgRR&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (d7916977125bb1d27cf8965fc3591990)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=WTD2KWwvXmpnqhRuVact5BILESZ0Y09m5u LJ7GE5A4=&c=8S3dV2o8OYCHSqgpqyW6stlevy7LhW9RTHV3bCyhfphewAnuQmo8x4dIH n3jGP25KQuSqXXLmeLR5Oj3eiWke5K8zTep1SGgyld/RhmW UicQ7Hby96qhUQirkAcKmA&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (f0c96759bdbb5901dfbce6bccadf9da1)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=fwbOIX4BHw9U3mOcBx1/R2oShdm/NEg3PA7BC/14wjA=&c=N D84gqp2oAK7CEs HL98 O6vJ6G13ZiPuw3Z9oL XEpxAKMKqUJOyoBabzqS75YdZ3tHw4fqZT0goatLi4EiSDZqcsns5Pn6s6oCuMwEmwRxYpO1f7lSoI/J0fFjXxM&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (4077d56236ea1fa1581560184e6d79de)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=kbi4T2gCczbNkv9Ft3EAvcVdiINIPvWAsb5dbyzQtvw=&c=17HDydjGAuF2vbxO0dLqM0THLD2RcZ2sU19eQ60VYtpBHN0NIdWCvr28ckcnJsed7Lolizrd1zv4QlNHdu8x8BngOmc7ZCzrH5Kfy88bwa7BqYJqi2SBFsA1OeK7Aiai&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=lFdc WQn6iMURdGbjXMx7BbClJOYDu0cdVjevRbQEUs=&c=wIm1r3W6KYIuwFo qDBSJ6 pIHBWbCehzPciWjSwhsTVu2uYBTu1buaNXp2DMyOcZCNuZV0UIFR plpEZYYjsYlbNdIrCF7rDF5VfVxUsNqYGYi Qgh q5 BQf ctLY6&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (ce29b87ecb66c062c19b2463dca0725e)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=S7YJO2tZNAG6Kvg uUnpWXohYdTgCwo sqfjwcbF tg=&c=h910dl75lZILGBQwEGB1KlCyE8Rihy4czBf7o/kW42xfEKHO3iZR4jIeg DI4ukHIVv7YYaQBJ7QFTL2AUoQcySI mXIJaLagvCFTbnrj0Pe4gJHrJAXFLwpKajMW/j4&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (91ce1df84e32c0495daacfa724d8be4a)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=3Q4aKEMQ1x1dpoV0KfZj/0nOBdcvpQmB5yqmHBRaauo=&c=kXhQdefsaTztTvhv0vQvwy15Oe pxWJEN9IzCjC4L9vmKbvjUCiI5yMAM/fblZ XHrW4SsiADQOVCzI/9BIf8y7SDTwPl1DQEOjRW8F16rE7t6/0y0 dKJd6a4hblEho&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (f7b1ff8ee3ed34bc4e562d2d835d8889)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=GpGgvdru5o63vQhFIjMx9gYAHrLC2zrmI/SIW4qKLVE=&c=bS4UYd2us9PTeZiNz8OLcmPN2ktLjdm77Doe VPXtvLc8/2OfjEXL IaGOcb OhVPs7SkBniZBJY/8XjUnMOgLqvZv6ykG6lMXKdNMVA1HQFOvzEOyEvtYTAv QNtp p&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.presentcontentcurrent.com/c?x=QrypxtRmHp nYgY0iElI/ffpWeUTVKJyZPRAmzkR9Ug=&c=FIhCJWYhHmYvpDxjeDWkgSktwVkbgwe0MAobK0 dCAAG7cZS1AwUwzhYgQHP8eX8cPeulHaLGoipOu5F9rkoTP5bKYl3Eil/TdnB4/nLt8qaAh9f8WasK7Ag/MYL2bC/&fallback_url=http://res.dooxer.net/.../Illustrator.exe  (6bdf24eaba7bf48ba3e671a7b2b1e755)

The following 6 files have been seen to comunicate with www.presentcontentcurrent.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.