home

www.presentdownloadsranch.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
presentdownloadsranch.com

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.11 (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.presentdownloadsranch.com has been seen to resolve to the following 16 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
August 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 15, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 15, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 15, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 15, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 10, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 10, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 10, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 10, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 10, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 10, 2016

File downloads found at URLs served by www.presentdownloadsranch.com.

0 / 68
http://www.presentdownloadsranch.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  (kodu-game-lab-31672-dp.application)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=r/gbX6Jg5oCqT0PpCEkaUJCX7q8Wf2XJJTNniJpCUSY=&c=b5dbykMkpyYbDOkH0bEPcEHmOSsLArbm5cRz/M19 5CZIqtJmD0uY71K3xsHLNzADv8AXJxLcHEUEVRF4qwu pb0X89mnezccmw0AewkdmwT4h1h bnLgnYfdu 7T35n&fallback_url=http://netcologne.dl.sourceforge.net/project/filezilla/FileZilla_Client/.../FileZilla_3.15.0.2_win64-setup.exe&downloadAs=FileZilla-13334-dp.exe  (7a67c69d058306e00f90ef0e81fc165c)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=PljKKf4YhW2NLjyESKUGZaYR4d42 mjVRA67BEEhhv0=&c=eQnl4Ce0QGVshw1BZBK/gVyl70Ji36tJDV9uQJU2K18YXzvavzMqg/gQNr/BMX3Hs0jed/5Hw4wGRPTlO/CePOppLsK1dBjCCSpIK4UR72T0xz3nMsEJzGFLqJ5M1rtw&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (9378e58dcbd22128c886e50a3b7e84d1)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=okjPuaElnd ilaDu6gCKmq1slrf2 EgADGW5XVTl JU=&c=lfMi2eEAyQ2ChRQKjmPumwWHiayVhW9NAzv4/67SusWfwpa8irW03OKkQGAGZkEXOkdY rbAHmummFNSgcTm/u/4ohxQq6hn9T6nCeuXH3GxWFpyTP7CSLEDEmYyvyIY&fallback_url=https://www.arclab.com/.../amlc.exe&downloadAs=Arclab-MailList-Controller-53777-dp.exe  (9f42af4a4d60dfac8c6612506969a078)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=LJ6w5pUvZOWrBiTOiI5n2aOsEbHpnatOKI6/TQCYEQE=&c=pwEyL0mwzScYSihWEiRz9cUo2i3E1 Ij DGSfvUdCUfNAg/QI0DhMulHECxps/Y9CkFje6PbTmyDZq7wob12fLvr/s4tmhSBHZTQp/Xp4oCI8gFAJcVxOiLUgtVoRJdC&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (9378e58dcbd22128c886e50a3b7e84d1)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=SpnKvlN4rLhoYBM/fXvM9Msh3T0uTKDT61hgd4sUoVE=&c=v9Ks9FhqsHhjvsqynAuZHFFCX0DNAkepfX3qyb3PBpMK EJgSre/Z5BLrc53Rr 2WhCSoowjpB5D7/gu4gkkUOrXo5zQA1sR4lCztVC8uWlIpReVRYMrVQYsBIwgGcaD&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win32.exe&downloadAs=VLC-media-player-13060-dp.exe  (aa686c382536a6ff84280351c20a48ba)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=4IwCwKLe2puRoO9dyWrR4DfZqUm9PrHvHUAoDpGuoZs=&c=53ly0tyLHGhCIYTTSP568BO31Zg3ziOhFstd1qCS4Srsmol98OEwoft C1YZydOshiHInVktPpSY9QAknrECeYOUtH26r3Z5JHjRAuZgxBxjjWaw8WCBHlAz9ZcRYIHQ&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (9378e58dcbd22128c886e50a3b7e84d1)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=zDEuf n3ZSl5 VOyoHwXJjlxinoqjkPTMYDJwo2937U=&c=f9cEBaAvKFb80dSN9kXXxxkCT/uDIA6f9mpF3AY3E59cgcV06tV8BRLEOlOkp73F2M9Jq/NbMtVoQ/dJJBjI6KScUz6nqyAV69lZ2XcctiieWMtwS/drqXRNOubhTrLy&fallback_url=http://.../RecoverMyFiles-Setup.exe&downloadAs=Recover-My-Files-13012-dp.exe  (a0468fd0fc1e706c55f9754b2df56eda)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=mmKWAPtPqLxvQkHFzD3u6clJDjBNPl7d cJTRVOYzPw=&c=5oONKgPZTF Bm9nI5pfmyHq6qPZvbeVROPKU K8PdGzteK0pZrbi3mnTe0b37lZ10vmRJV AhlZou2JnteYOv9fYYFsD6yFGjui9kF2qwA6G8vD2Ixkl/ooE5qBpGVtq&fallback_url=http://download.microsoft.com/download/c/e/1/.../wordview_pl-pl.exe&downloadAs=Word-Viewer-12113-dp.exe  (e42100826ef97f4d7c2ac5128d8a383d)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=OwnIrNvQ MsuBCCW3WSGUu0/F4ZgkDvjZWrKGNQvfP4=&c=PYMosLnQyBsC/HATU2965AuUn1eQoYBG4NjOum/WVy6SJ3RVOqN9XXB5rJk2KiMIlUjI8p8u9klTPjvRqXI81J9BPRMHDGBcHVIz/eBmWYsuQBx/l3uNpLWLU26YmiZq&fallback_url=http://.../ableword.exe&downloadAs=AbleWord-56940-dp.exe  (022d5ba7c28e9fc3aa2e0d2c11b1a2ba)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=adesqzF4ye10rb3Kb97RKh3qrzawGKs0fz51j4STzAc=&c=mndXqjc64QcbrQw9D40W08lQthzoTXevcY3WTD79DFJv2KX4GbmbtFP5bDFS32e whqGZ310wsXXHf7jE3RtAvfljKEH8xFA5iF0QLfMxbQLN/QwFX1ZET/TBjYYKnTn&fallback_url=http://.../install_virtualdj_pc_v8.1.2857.msi&downloadAs=Virtual-DJ-Home-Free-12894-dp.exe  (e17ad1eb4ba88618fad56d7dffe9c4db)

1 / 68      (Adware)
http://www.presentdownloadsranch.com/c?x=RKAnkbLYwWi4MfOLd5kK2jlFmD9n1xyiNkaXFJbtddI=&c=53ij/XiyLElpFY WDDmwZK8bZJjMVnrCvIyPKqpK BRUMD OuXyhGfiQm3WhhKCkaQgj2VZpbWaiwlB0hBxl53fxG1wHoewTvRcqCGTKIA2gnx4AsL7TFiOZHfAg8rat&fallback_url=https://storage.googleapis.com/chromium-browser-continuous/Win_x64/.../chrome-win32.zip&downloadAs=Chromium-51256-dp.exe  (3b485e90b53221f3b1e7d5ad2f5c2498)

1 / 68      (PUP)
http://www.presentdownloadsranch.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  (irfanview-spolszczenie-12933-dp.exe)

The following 36 files have been seen to comunicate with www.presentdownloadsranch.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.