home

a.versioncreator.link

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
versioncreator.link

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain a.versioncreator.link has been seen to resolve to the following 4 IP addresses.

199.59.243.120
May 19, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
May 18, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
May 18, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
May 18, 2016

File downloads found at URLs served by a.versioncreator.link.

1 / 68      (Malware)
http://a.versioncreator.link/hp/?q=VC1/Z1FvkWU6domjlh5qwN9 IR17Kw9E/sMf nNiR2p72X9dRoKfZwvI4i437aQ//R38a XGV7Vx5dmrJ4N6pMn2lQZbOxZnVC09WlIVi3Mq/bdMHwA32KWFpFUsMe1Q omg3MTyWUJa2EcQeOZxy8NXBrX tJE9Ory4lJ86ksk751HQMBHXGTM59rEotqFGc1Noqf wIl1pYTtz2rEPi0h3/jmWdY6QQboj4i62cSML4Jyb6uaBFTFcbpfVqV7bXrh6CvahDoi80JxiJjlPPFQipggLyS9R8HVk2R2Fm7IXjFBgfT9nLEcFZ1Xn1rCX713ALmh6Cva3nOohDcsxjxUpCv16KMDUG6d5Df2da 3v5zePStLfc mFMYKlEeVbM/.../Y4sawGchFZWS5IjFd7pH3 Wa2bGU3wWmIzrn  (avast free antivirus 2015 10 0 2206 exe.exe)

1 / 68      (Malware)
http://a.versioncreator.link/hp/?q=u2oexYl2AhwB2LFHwymDX2ZtFUru8orBXqy2J/FNaIWxMFolyPoySmjrCvbeiBZtbHV8VBgjouZg1JTUeeN35tpGRCEB8LNU85wicI9wG8OEd/ZVpYLOSbqEGUyWbXRPJJy7BfJz51DABA2yV Fz9mvqco1CT6iSEaaO1fFLxgjRGicdxOD/XUm9MBBmw6XmNDBs1sj 7vc lWEhyZOZRzVEYgP204YGtHWFrXFPvqGvkjVO2O6WjxM1N4NbWkSY8bLxd1nlnHPo fcxyW08ShWkL6zT92F4VZKBDhSjHs5/.../OUbBjh5gjpms0G7bwVRcPyI7y7CC7FBivKVULfv9eG5RU3sN8o IT5  (avast free antivirus 8 0 1489 patch key.exe)

1 / 68      (Malware)
http://a.versioncreator.link/hp/?q=X78R3jAD1Ng87tvqom2Sj9I D9ssBHYXIPH3Uj/.../bxC7S1lUXQJEbTdSthF0CGDwqR5gvXgED21Je158X  (13805.exe)

1 / 68      (Malware)
http://a.versioncreator.link/hp/?q=H13ZV/tl0O9aQDWYSULNEDx5zppc67UbW1dUeje/lshyg4O/rzZskInBCkdr2UdiHUKosGQ1JyDWF7bb5kCFphWATTI9zpqhDNR8kba5FKs8McY5BGBctKpwX5LfHcePkFXHIcvizRJ2WDelgePGYgOk0Tb6gWwBDwmZpBZIvmiB9/TaT6aHVB73R9gGeOUIzQdKANRm8wyXsNl bB6Znb64oR042k Qu1YlcB7o tCXlQbM M Eihw37dznPvgmOantUZ /Dq4E0dhnVWVoIXhb1f VUNQFSsUdA8JdYMA2733yvSb2/p4P/ gxUo3E/.../ndklTFPesJSNWeSub40JC7AkQMwAqOdDhmb42VE9FF6O6 o5Tb5ZYfnJd7nB  (7 cases 2015 720p web dl 750mb mkvcage mkv.exe)

The following 3 files have been seen to comunicate with a.versioncreator.link in live environments.

TCP » 199.59.243.120:80
qvtp.crx

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.