home

awsdownload.regcure.com

ParetoLogic Inc.

Domain Information

The domain awsdownload.regcure.com registered by ParetoLogic Inc. was initially registered in December of 2005 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the RIPE Network Coordination Centre network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US East (Northern Virginia) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Saturday, December 3, 2005

Expires date:
Saturday, December 3, 2016

Updated date:
Thursday, December 3, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
regcure.com

Whois:
3 regcure.com records

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ParetoLogic.Optional.Installer.Meta (L)
100.00%

Trend Micro House Call
Suspicious_GEN.F47V1119, Suspicious_GEN.F47V1206, Suspicious_GEN.F47V0220
17.65%

ESET NOD32
Detection.Undefined
5.88%

The domain awsdownload.regcure.com has been seen to resolve to the following 14 IP addresses.

54.231.8.244
s3-website-us-east-1.amazonaws.com
December 23, 2015

54.231.16.156
s3-website-us-east-1.amazonaws.com
May 4, 2015

54.231.13.20
s3-website-us-east-1.amazonaws.com
May 2, 2015

54.231.1.164
s3-website-us-east-1.amazonaws.com
April 16, 2015

54.231.97.12
s3-website-us-east-1.amazonaws.com
March 9, 2015

54.231.10.188
s3-website-us-east-1.amazonaws.com
January 8, 2015

54.231.1.12
s3-website-us-east-1.amazonaws.com
January 7, 2015

54.231.18.108
s3-website-us-east-1.amazonaws.com
October 9, 2014

176.32.98.233
s3-website-us-east-1.amazonaws.com
September 27, 2014

176.32.101.76
September 5, 2014

54.231.0.172
s3-website-us-east-1.amazonaws.com
September 5, 2014

54.231.12.244
s3-website-us-east-1.amazonaws.com
July 31, 2014

54.231.1.252
s3-website-us-east-1.amazonaws.com
May 31, 2014

54.235.164.98
ec2-54-235-164-98.compute-1.amazonaws.com
March 14, 2014

File downloads found at URLs served by awsdownload.regcure.com.

2 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (6d1e9826ddfbe62e366f8341765d2e95)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (b1b2cc75904bdbc7e460afff6cbb2c06)

2 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (5a8bab295c04940fb68b1051263583d3)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (dc56fbbc83519a8b6224e03c1b503058)

2 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (d73c2218a330f102c69d503374e4da7e)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (46f30bf72b1b8d18eca36ca9dc7cfe0f)

2 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (ab6786f09a4da1159e40452d71265fa8)

0 / 68
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (cbbd654b691e29e6e1764f72ade79f33)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (9dfb22712c5f731fe53ec473c03380f4)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (8bcc4cc4a018ecedaf937f0480aebf36)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (40dc73aefe4c042545ac29d6ba589147)

0 / 68
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (cbbd654b691e29e6e1764f72ade79f33)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (21dfeb6304b377133cce1f632af4f15c)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (18705fe6de37621b2b39e64a8a02115a)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (0e643443be88a3f96bc8673062c01e9e)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (a4b0158616352706e33cdd86e8709a6a)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (97c0bfaa3f7612057779f3cea32660fe)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (f83b4d0b183d550896b3fc2925e4e7b6)

1 / 68      (PUP)
http://awsdownload.regcure.com/regcurepro/.../RegCureProSetup.exe  (ad4193b469babdf13988c570691050e5)

The following 14 files have been seen to comunicate with awsdownload.regcure.com in live environments.

TCP » 54.231.1.252:80
2870.exe

TCP » 176.32.98.233:80
feeddemon.exe (by NewsGator Technologies)

TCP » 176.32.98.233:80
sense-nova.exe (Sense by Object Browser)

TCP » 54.231.0.172:80
37c924de-0d56-4e3c-8475-611fee593549-6.exe (TheHDvid-Codec V10 by home)

TCP » 54.231.0.172:80
bjckqzfdbmb.exe (GoHDV25.03 by InstallMoonV25.03)

TCP » 54.231.1.164:80
thehdvid-codec v10-nova.exe (TheHDvid-Codec V10 by home)

TCP » 54.231.1.164:80
7b4fb697-22b2-4e21-8b84-8a8215f10572-6.exe (Internet Speed Checker by Speedchecker)

TCP » 54.231.1.164:80
2191.exe

TCP » 54.231.1.252:80
1066.exe

TCP » 54.231.10.188:80
2870.exe

TCP » 54.231.10.188:80
utility.exe

TCP » 54.231.13.20:80
adobe_flash_setup.exe (Web by Software)

TCP » 54.231.13.20:80
java_runtime_enviroment_setup.exe (Web by Internet Prog)

TCP » 54.231.13.20:80
2870.exe

TCP » 54.231.16.156:80
2870.exe

TCP » 54.231.16.156:80
utility.exe

TCP » 54.231.18.108:80
1066.exe

TCP » 54.231.18.108:80
auijladi.exe (Lights Cinema 1.3betaV19.04 by Cinema PlusV19.04)

TCP » 54.231.18.108:80
2870.exe

TCP » 54.231.8.244:80
2870.exe

 
Latest 20 of 21 files

URL:
http://awsdownload.regcure.com/

Network:
Amazon Web Services (AWS)

Web server:
AmazonS3

Facebook:
Shares:  2

Statistics are for the previous month.

paretologic.com

filecure.com

xoftspy.net

speedypc.com

speedybackup.com

sparktrust.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.