Download
Community
knowledgeBase
» www.todaygrabpackage.com
Overview
Analysis
IPs Addresses (6)
Downloads (4)
Network (18)
www.todaygrabpackage.com
Domain Information
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Root domain:
todaygrabpackage.com
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
100.00%
IPs Addresses
The domain www.todaygrabpackage.com has been seen to resolve to the following 6 IP addresses.
52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 5, 2016
54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 5, 2016
54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 5, 2016
52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016
52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016
52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016
Downloads
File downloads found at URLs served by www.todaygrabpackage.com.
1 / 68 (PUP)
http://www.todaygrabpackage.com/c?x=Cr9LltM92e2SFXnVt0E8TYcWs2GvhTMSd/fRI3HfhfA=&c=DuzcZCbxMqlc1m0Hsp1cGicYIAgChvKwMPMGriD2S7Ii8mQ/ J9fpljJvRmq1PSTINOGmhI/qNhHBgesvdJTKRXwm6rKE68 cBxKsKCVJgJBgcNACJqwz86e8iD OxZ8&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe
(6539849cd4073d4412c02dad4d261855)
1 / 68 (PUP)
http://www.todaygrabpackage.com/c?x=NPdWbvRBoSfbszqwhmMk6BsWp5yusgL 4NQLnL4r 9I=&c=5DDOXbU2iDM6DugmaaKYGMl0jLLd/KjxPLhMu2Up/Zj1aAQnhVaDNQzKIQPEM7GbmA7l2gKpjnv97aG49D3YE3rsfw1ILs0U/5rGudqy43X2rFJhTea7DcDRuFPw1c4g&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe
(6768c83cfed1b2c06812c0c65ff47927)
1 / 68 (PUP)
http://www.todaygrabpackage.com/c?x=eawAI4A3Us191mFTIYcX7uZYDUcEhShhC6nCIzGN4zI=&c=awq6T6xm2ptsBu21m60fc/yoMCINo5rZ05bHMod2vkt1X4rYes2bbt9s6Iqn9HNoYm/7jorcZmYJVjc0ju/3zwx2BMb1ZRzZU0OCgKsBkPRfXMp04ab4dGvU28uqLywH&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe
(212a7cf911ee4daed8326494981a44db)
1 / 68 (PUP)
http://www.todaygrabpackage.com/c?x=y8vfVwBWW4zZhy0Qdko3hTdiI1lQZV4h7pHDnecY1So=&c=GeadNWqGxzLcRUdmQqcq6wduxnZH5U9CZYMR6OFB37wUjp9g7f8lqVAzULp3emRbhFkCfZ6eiEMczkM1OVk2PoqVQfSnS00GG 0l65lHHhi561PRIkyIuqYa2Q9urY2q&fallback_url=https://chrome.google.com/webstore/detail/.../gighmmpiobklfepjocnamgkkbiglidom?hl=pl&downloadAs=installer_AdBlock_dla_Chrome_sciagnij.exe
(9305016b9d6be3b17e3a8c2721e1dbf3)
Network Communications
The following 18 files have been seen to comunicate with www.todaygrabpackage.com in live environments.
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.38.209.219
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.38.209.219
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.38.209.219
:80
browser.exe (Browser)
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
036629fbd4864725737a8ba8fe7e8cd6.exe
TCP »
52.38.209.219
:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)
TCP »
52.38.209.219
:80
e5be.tmp
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))
TCP »
52.38.209.219
:80
client.exe
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.38.209.219
:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)
TCP »
52.38.209.219
:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)
TCP »
52.38.209.219
:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.38.209.219
:80
online-guardian-v2.0.9.exe
X