» cdn.dobreprogramydownloadfiles.com
Overview
Analysis
IPs Addresses (17)
Downloads (724)
Network (7)

cdn.dobreprogramydownloadfiles.com

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain cdn.dobreprogramydownloadfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Oregon, United States (US)

Create date:

Friday, February 27, 2015

Expires date:

Monday, February 27, 2017

Updated date:

Monday, January 25, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

dobreprogramydownloadfiles.com

Whois:

2 dobreprogramydownloadfiles.com records

Scanner detections:

Detections (94% detected)

Scan engine

Details

Detections

Reason Heuristics

Threat.Bundler.dobreprogramyspzoo, PUP.dobreprogramyspzoo.Bundler (M), PUP.installCore.dobreprogramyspzoo.Installer (M), PUP.installCore.dobrepro.Installer (M), PUP.installCore (M), PUP.InstallCore.RES (M)

100.00%

VIPRE Antivirus

Threat.4150696

2.13%

Dr.Web

Trojan.InstallCore.60

2.13%

ESET NOD32

Win32/InstallCore.XK potentially unwanted application

2.13%

Bkav FE

W32.HfsAdware

2.13%

K7 AntiVirus

Trojan

2.13%

Total Defense

Win32/Tnega.SLUDFUD

2.13%

AhnLab V3 Security

PUP/Win32.Bundler

2.13%

Baidu Antivirus

Adware.Win32.InstallCore

2.13%

AVG

InstallCore

2.13%

Qihoo 360 Security

Win32/Virus.Adware.e7c

2.13%

herdProtect (fuzzy)

a variant of 923cb5f17c8a68cf82c23d746d44a0dc5c733280

2.13%

Malwarebytes

PUP.Optional.Bundle

2.13%

Avira AntiVirus

PUA/InstallCore.Gen

2.13%

The domain cdn.dobreprogramydownloadfiles.com has been seen to resolve to the following 17 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 5, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 5, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 15, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 15, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 15, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

January 28, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

January 28, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

January 28, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

January 28, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

January 28, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

January 28, 2016

54.218.9.198

ec2-54-218-9-198.us-west-2.compute.amazonaws.com

September 10, 2015

52.26.172.249

ec2-52-26-172-249.us-west-2.compute.amazonaws.com

September 10, 2015

54.201.218.17

ec2-54-201-218-17.us-west-2.compute.amazonaws.com

July 1, 2015

54.186.33.198

ec2-54-186-33-198.us-west-2.compute.amazonaws.com

June 26, 2015

52.25.88.134

ec2-52-25-88-134.us-west-2.compute.amazonaws.com

May 28, 2015

54.171.47.185

ec2-54-171-47-185.eu-west-1.compute.amazonaws.com

May 2, 2015

File downloads found at URLs served by cdn.dobreprogramydownloadfiles.com.

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=fMz9VJbB0dMsa1MqhGYfaLD8zL49c6M7sZ3KsrbLTd4=&c=sz885u sO/ijeLi ITq24WPaHF6XnJsK3ewhjpkzNBubu9my8TNarNXAP1V3ReGJrC7w 3qK//d8TO3W/auq6w==&fallback_url=http://www.freerip.com/.../freeripmp3-setup.exe&downloadAs=FreeRIP(35340)-dp.exe (freerip-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=YH5xSOoxdOQDaC/eutDWwFZsWrwSWPLYiISUk1rYB8g=&c=m5UqFg32n0qoZ/krhNQeHxPjTrblWMBBjzZyUVd p7UUQF8CUCUnEr0L//z6 VLBqMzoEhF6GZlp/0 eifafNQ==&fallback_url=http://.../any-video-recorder.exe&downloadAs=Any-Video-Recorder(36948)-dp.exe (any-video-recorder-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=08jl3WOuzIPctVI 9sQvzA/W9htTXaDCSdhx4R5qrec=&c=s9t1jSrnMMgrhDAu65aue6GNuObStHhnOghwedvUmD263P5ed1lLFbvs/xuDfSCVRiUfG5WzChL2Bnw4F7eehw==&fallback_url=http://storage.dobreprogramy.pl/.../aresregular230_installer.exe&downloadAs=Ares(12480)-dp.exe (ares-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=HNLyiYOagJ9s2ob9N6GMR0x7dZlXDzK6vjO 7pY4 rI=&c=8D54zkZglulnSYcNCi9e8pAadQ61m7yPut6yQUDJVuv2mDx3kPr7zxghiZpceLJLHf7LswyaidVZj51ex5SUvg==&fallback_url=http://hddguru.com/software/.../HDDLLFsetup.4.40.exe&downloadAs=HDD-Low-Level-Format-Tool(26933)-dp.exe (hdd-low-level-format-tool-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=pJkzy1Ww6H0f0TrnPGalAU1hWyWmpfoE6amTcpVt4M0=&c=K3/8KzWG5dckJQoFz9Ly2pUSLhMIc/ZOu2FAWrC6iqoHhZjoj4u4v U3HbOK8t ZCCJbDkb9kMfdMAVUHL/mtw==&fallback_url=http://storage.dobreprogramy.pl/.../mp3gain-win-full-1_2_5.exe&downloadAs=MP3Gain(11654)-dp.exe (mp3gain-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=0dZSw/d0VQKxPQJOAvShln4Cfgenqt7l5R0gPXrI sY=&c=G4ttMU6BtlveR8ChhSZYrm 725e4/k8GEPif07WM4B4yyy/L6a Di9WN8yEBQzzj7DTbMgjRBUYW7aP62U0XXQ==&fallback_url=http://storage.dobreprogramy.pl/.../FreeSoundRecorder.exe&downloadAs=Free-Sound-Recorder(13331)-dp.exe (free-sound-recorder-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=CpkX4vQiz6BIB2mmyIdVdj/gC7KhQhOKOzmQ9DMSrRU=&c=f K1Sd/LWMo6V3i4JBgzhlYSsAl 5m8SmlGTBZEpvL8tRri4ADk1WGjIV4MeH5yvA0ZD23iTjiFPnAFNoA7diA==&fallback_url=http://download.msi.com/uti_exe/.../MSIAfterburnerSetup410.zip&downloadAs=MSI-Afterburner(22659)-dp.exe (msi-afterburner-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=GWjhiOgjokpJxpEtdkVN/dxKGot/36 yXQ VdtyBtGo=&c=jmgpk1XTi4UE/uGaamFdzAcxg38 a5A4KJPDx1vwMqtwfs/NRi2undG6bROfYuusJFWRJQ8 a1w3st9EYoHQsQ==&fallback_url=http://pityng.pl/.../pity2014ngsetup.exe&downloadAs=PITy(12732)-dp.exe (pity-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=pLphWAdVtKCE//k2y 4eRxGG0fTuECQUV1cUMjWHlNU=&c=EbmU3JLRETTEry2XSt/lnzxFkk0BDCR39x uvKvGyg SvlMFJE/xPpIpcdMux5W4D1/ my 1vuy69oE2jIODbw==&fallback_url=http://nds1.nokia.com/files/support/global/phones/.../Nokia_Suite_webinstaller_ALL.exe&downloadAs=Nokia-Suite(15744)-dp.exe (nokia-suite-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=b6OW9WDwcspN4ajQ5t/fOZqgI3w581CM5FK22XY/wYQ=&c=TBDra JVZQwrTfhOEfsBxi7jyMhUYellQ3z3wIAcLPvsaiLrvDtisCQwrfDK8ATMYwqcdTLkCxIHk1cEVN53GQ==&fallback_url=http://www.selteco.com/.../sfld.exe&downloadAs=Alligator-Flash-Designer(13008)-dp.exe (alligator-flash-designer-dp.exe)

1 / 68 (PUP)

http://cdn.dobreprogramydownloadfiles.com/c?x=39gOQVkKSVXUYN OGDbpSpAqsSY0vbZWmHUlhtnbWUg=&c=xlJdChh/brxvm8m8mPHkornMqYSe3IS9RI7F2WzXGStSNic/OBVsk2WcbG9x0V fyRp3U0QAdUzd7AHAhx5txQ==&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader(12627)-dp.exe (adobe-reader-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=CKZLCM5cblMkwuwYIHx9jeiQoCYc8whb5uG TuiyRNc=&c=5DXoKdE2v5sQBdkdoVBwnNEAiXkwqYKRKUEwSxsMXMZmrNQf8Ahzq MnbyEIWdZznJeXW/s/7mT7RRhMTHRoVA==&fallback_url=http://ashampoo.downloadcluster.com/ashampoo/.../ashampoo_burning_studio_free_1.14.5_sm.exe&downloadAs=Ashampoo-Burning-Studio-Free(45467)-dp.exe (ashampoo-burning-studio-free-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=QgfnXLhGIw/SQNNWgPfX3 Bm/HvNa34LpzgrtrnIlnc=&c=RXgJh2411x7/YXJUrcbAOrRsoNCy7RwesKXePxZ 2jNBLfqBKM4wFcdYYq6Xx9DKLeqIkkQcTPyaN72tC3U2dQ==&fallback_url=http://download.microsoft.com/download/E/9/E/.../Windows7UpgradeAdvisorSetup.exe&downloadAs=Windows-7-Upgrade-Advisor(15011)-dp.exe (windows-7-upgrade-advisor-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=WCV0dX9oJ9L0ftDi0lkClYLQIE6HZ4Z8pnaMcsxmzCQ=&c=GQrWy38nNwDZNP556v5aFh4TZTYdf/GuHCBXUesZO6bn5sWXKzeNprL8FbJhuGuw3LA9wApjKgzp 0x9y2SfzQ==&fallback_url=http://storage.dobreprogramy.pl/.../altcmd1.3-20071014(dobreprogramy.pl).exe&downloadAs=Alt-Commander(12077)-dp.exe (alt-commander-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=eNSwTlz1Rzrvrr4PNz81UKIT87 LsDubFOS1jwfNbmw=&c=wIOpz7IOTONeiByGpKxMM4Ux4CJCZnv7uVnJ5fdbv qX0tkDBQjkLMC3lmUGkdQLe1zUOhy4Y8Wp6St99YalIw==&fallback_url=http://www.eltima.com/.../vspd.exe&downloadAs=Virtual-Serial-Port-Driver(12528)-dp.exe (virtual-serial-port-driver-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=13YC5yPXDwLSp5fEqlafxIkobaaCbOqJ8iw nuo/qIw=&c=SBKqb3DaaslM5/7NkEu/GH3rzRuogaVeKpR78wPutbSNW2DRNk7xL2TO4ZV0kxlbaQ5VBleMrOeuJis7n60GSw==&fallback_url=http://download.viber.com/desktop/.../ViberSetup.exe&downloadAs=Viber(41180)-dp.exe (viber-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=5bYOsNftyWoyTF8hhta/9RVVOW/WX4bVf/FY31cdMZQ=&c=sTCKvyhTDR JxclErXC0erguKCYku4BOCUP5dhARPr8UWL1xNTzgPFtJh8C4ra/VWonFvGi/ed8sFiaZRxIhQg==&fallback_url=http://www.experimentalscene.com/.../DarkWave-Studio-Setup.exe&downloadAs=DarkWave-Studio(20561)-dp.exe (darkwave-studio-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=b3OJ2HbpSP9plGgQ4YKW6U/SFPq y3iv6U1JNyXZPj8=&c=coWPFEdfbfzMx0N0tc2HslhU9L09cImZELr2Fg1TB8PkrOdtYaYnwOt9kGeL8v3UqwaQLi8 qz ZSQOCmTCfXg==&fallback_url=http://.../spsetup128.exe&downloadAs=Speccy(15677)-dp.exe (speccy-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=m77UZrBJgQy0I 0ZmNxlLcv14MzZl2ehIrSA1PxV/dM=&c=k5qVS1eP7xkEabbX1pnQvZHdjvipp9u66taS0QlLR5MVU8X5JJi2Tq6A7A5LiNTvzRMegL3DGg6qmNVw11yCug==&fallback_url=https://github.com/aptana/studio3/releases/download/.../Aptana_Studio_3_Setup_3.6.1.exe&downloadAs=Aptana-Studio(13011)-dp.exe (aptana-studio-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=04Y6Ai4sTilFWP1w/Wd0G0ShRioimt7XOzCknsZ2YjI=&c=wu61 RIjbKF0h4O6OKD6PlvOJ Nnu9gwQvmm8/JucgrIixuDou4Hm0 zRQQ7yZELBuphp/FvLlglQnMt97KDuQ==&fallback_url=http://www.memtest86.com/.../memtest86-iso.zip&downloadAs=Memtest86(12556)-dp.exe (memtest86-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=lKWOBayONQNWnfa42eN5Bnj6f0X6ZzG/75m1rResa7c=&c=cNQkKacEEpad4Y2VU5N0thhuYmEHKjF4NCOiCwMiJcNyPEGpvIUclu/zK9RXMN8rAtIbnMIBxGt/5UnyctKF4A==&fallback_url=http://www.emdb.eu/.../emdb.zip&downloadAs=EMDB(51125)-dp.exe (emdb-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=MB/Ur948D02lQn LGTtrVDh3HrXL77Fm6HXTl7SEmFY=&c=B9yPafM48L300P6 grzu71aC04AAfo3sizdKSDBu3nG7zEMKC7kUIal1 Y9TJhEhUvvkxL/IBFChIaCdyav3oQ==&fallback_url=http://files.mcneel.com/dujour/exe/.../rh50_pl-pl_5.10.41201.11145.exe&downloadAs=Rhinoceros(35255)-dp.exe (rhinoceros-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=byoaPOUkBoVsgtO6nN/bNfDyB28TGjx5nmw7skZkyCA=&c=q8eWZ3Qdp1fOA35tOfDJ3vzLr/kt2Z55Od/NxNoIA9DaVXGBCo9yr99m8X 3AQVwyR9FURzYezMgT3wBbhAvlg==&fallback_url=http://storage.dobreprogramy.pl/.../AoboFilterSetup(dobreprogramy.pl).zip&downloadAs=Aobo-Filter(45690)-dp.exe (aobo-filter-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=32Vg7yt6RhzMqRHVKt7ISuZcCryx0ZDbKjAW1AwgVLs=&c=occJkHNS8QTu6o67BhEopVp7ZnUbxOhVzBTnVXf Ghke1/bM/V7xETyxCMaBrWCOshjzHKjl081MmB09oZ0GJg==&fallback_url=http://storage.dobreprogramy.pl/.../sm98(dobreprogramy.pl).zip&downloadAs=SuperMemo(12075)-dp.exe (supermemo-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=DaaHAlI6qjgfpG7Mb8M2zlvY fuBhIDXqnl1vxPXDUE=&c=/R g0yWqbknaUBgyexte7Ku jQCbU1vopILPR5hIyFrZqMzKN xEFgVbwrKqP4gEwxORnsQ3Rmz2Ow/IVedhtw==&fallback_url=http://www.supermemo.pl/download/.../smux.zip&downloadAs=SuperMemo(12393)-dp.exe (supermemo-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=Ea2Kl3wVSRpFYAGpfGZbnU4l8/8qEbHfpFVFDaGQUbI=&c=06inrX CT2ClXNNYDyw0GpTC4b2vVwpoDaTrDh68yM1twpVvGSrFdxJVxyyVbo syalkCsGmPs 581E8dhdAUw==&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.5.install.zip&downloadAs=Paint.NET(12332)-dp.exe (paint.net-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=RF0balULX1cdx77YurcTapyTvP4jpgwXzU7E0c eOB4=&c=Tulhw2rNQ1hqkaF2SuxyjQKe8wrrAv2lydYR6BZZkLZ9aXxjiYu/ojEQWr41HPy4opk7MrNmC8vtBDszUKt/iA==&fallback_url=http://dspcdn.sonycreativesoftware.com/.../musicstudio10.0.108.exe&downloadAs=ACID-Music-Studio(12014)-dp.exe (acid-music-studio-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=bLUGfBglQKQBnno10DunWujsRFP6dwsppYxfgiAZ aI=&c=y4OzotiqVsal2Zq2WSEnazMZ58CBHK63cMdZBTpQqETPceVkSK2jOkWWSVuw6f5r4USBJ2uJlKCZzoHeNMqsog==&fallback_url=http://app.gomlab.com/eng/.../GOMPLAYERENSETUP.EXE&downloadAs=GOM-Player(12844)-dp.exe (gom-player-dp.exe)

1 / 68 (Adware)

http://cdn.dobreprogramydownloadfiles.com/c?x=ELERa65k9m2yWmFzi99UuS/gX0XXMI8Y/jVMLQLUH7s=&c=/1FLIBBRP2RoXjxXQhr5Q2Gx29zjCYy/9vHhDkST8to4yOSclDoC8kyOKef8qhJLreEyMgnTs4x4TO71A761Ew==&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer(13217)-dp.exe (allplayer-dp.exe)

0 / 68

http://cdn.dobreprogramydownloadfiles.com//c?x=CooUThkC5ZF U sGMGhSu8YAzhO7eCvOM1u/AZj7wr0=&c=jg/Ve8LMjjpPDKli10EPV98UkZOow8vOTbK3zxUzZ1VbthcPfvDzgoyu6RjidwzXMlHcD86owWkCPn6zks3Zxn1zVxG1GYNuAHHVyzfxxia8P6dcUK9P5rqTmB8d37vbNhil1Jqb23xdscINJ3x0sw==&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer(13217)-dp.exe (6925a5c974373b2e26e9169fee096b3b)

Latest 30 of 724 download URLs

The following 7 files have been seen to comunicate with cdn.dobreprogramydownloadfiles.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 54.201.218.17:80

openoffice-4-0-1.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.