home

cdn.dobreprogramyrepository.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
dobreprogramyrepository.com

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M), PUP.installCore.dobrepro.Installer (M)
100.00%

Bkav FE
W32.HfsAdware
25.00%

Malwarebytes
PUP.Optional.InstallCore.A
25.00%

VIPRE Antivirus
Trojan.Win32.Generic
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

ESET NOD32
Win32/InstallCore.AAJ potentially unwanted (variant)
25.00%

Dr.Web
Trojan.InstallCore.60
25.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
25.00%

Baidu Antivirus
Adware.Win32.InstallCore
25.00%

Panda Antivirus
PUP/Multitoolbar
25.00%

The domain cdn.dobreprogramyrepository.com has been seen to resolve to the following 9 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 12, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 12, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 12, 2016

File downloads found at URLs served by cdn.dobreprogramyrepository.com.

10 / 68    (Adware)
http://cdn.dobreprogramyrepository.com/c?x=x6h8ept60QzRjN3d02QQY4EpoN759CuFD6rOIejvQFY=&c=cdNbphGHpfOrti25A5MXifGcCMDCB/4iIAUzvFO3d9fJO/Y9V4xtnLC52tQlniG22Tp9oM6SBYVrFkWHuJM5 pGIy5G9iEUp gerCZms1SucJS1b5HE136QRSiVUyPE/3YyFIl/6BUgPekQ0SKDHYQ==&fallback_url=http://storage.dobreprogramy.pl/.../winrar-x64-521pl.exe&downloadAs=WinRAR(12398)-dp.exe  (winrar-dp.exe)

1 / 68      (Adware)
http://cdn.dobreprogramyrepository.com/c?x=smuFVfM82/fKz436WiGYd5n5BcFzU9SI5Dcu4A9/4FI=&c=nOd26M0IE0uMyVT26oGmD9OSfRCU55q8ONk87sqRqhEc8LQNqW8zXSCh7zy5l2UlkgkOaOA 1aMMMEGolN7rCGUzARuMYsg70dtOIjB8B5exZCr7ufp8gEcO1cm9VFTfDBlZWungruJL WT6UEhP4w==&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.1_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice(12754)-dp.exe  (apache-openoffice-dp.exe)

1 / 68      (Adware)
http://cdn.dobreprogramyrepository.com/c?x=iUJhzp5Tn DaNq/r1Euwn/ob4bf1Gb2WsQtwLjX1ZH8=&c=xs2BoXQIH10WmOH CGFaE72lMzrUEfjy/drOuQ2cO4tg4Lp1KqGmWnsY0uQzJCt03/R4wg8OYcH1lcT8zAWwlS7/Bw7Xmt77RRjsCmwUPl3KUYNO0op6Q9ed7qbgsaob2eOqFf6ZNCAemWorOMmkHg==&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI(21590)-dp.exe  (adobe-reader-xi-dp.exe)

0 / 68
http://cdn.dobreprogramyrepository.com/c?x=mbvf1qSW985YEbILziybM36EiZcSWyghfrLuVoS aU0=&c=xA XzbPFbT23MGWCnED0 UFsWcpYUVDA3HkPHtoIFZ0KKFZH7IIZz82LzRN8wE/8PR1Gm ovvltTkHVyMfxj VFAeFizxaFdmhKSPrX9Sb9Qy/z7JM84T4xrKgKzQtrSYvm8akDsP5tmZopYU4Srhw==&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype(13018)-dp.exe  (skype.exe)

0 / 68
http://cdn.dobreprogramyrepository.com/c?x=GvFSFMEnNE5GsSXKU Z1QVUyrjOBbyEzxg0OVWTEhs0=&c=HQ152SxH7Qgr6AdWY2QYce3c8nb1cpvXuQ2Qu8f2GdqcPOO6/eGgvPn8AMecnkLCrmyywjNaZd8 zo bGkXuUn2G9JlbZalEfuj/dYviBajF1uvca6 Ok0VFppM UUz5wIhF7PcWORi6nw8qUbEVeA==&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp(12928)-dp.exe  (aea12e99505e31a24bba1042afdcd3f3)

1 / 68      (Adware)
http://cdn.dobreprogramyrepository.com/c?x=qGjPAu 8/9/fkFsLSiTJAcq2Amldxcjl0FqMe5FQK4M=&c=/Py9Rr1fXqTnGf1gBEsBJcTmJoOfYYskFFGSqVjjMkatRXT8pi6dNePUOZi2KTs/tp6ICzf7sgyHjqFa00I GpyrbENiJJoW2lsfKlv74hBcwwkuvk9NxTU7ygUacV60MbW7SgByZeQpUgIPzOybcA==&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp(12928)-dp.exe  (winamp-dp.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.