home

files.vlc.cm

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
vlc.cm

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TomorrowSoftware.BubbleGames.Installer (M), PUP.ClickSta.Installer (M)
66.67%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
33.33%

F-Secure
Application:W32/Generic.70053c248f!Online
33.33%

The domain files.vlc.cm has been seen to resolve to the following 29 IP addresses.

52.85.131.60
server-52-85-131-60.iad53.r.cloudfront.net
June 7, 2016

52.85.131.50
server-52-85-131-50.iad53.r.cloudfront.net
June 7, 2016

52.85.131.133
server-52-85-131-133.iad53.r.cloudfront.net
June 7, 2016

52.85.131.119
server-52-85-131-119.iad53.r.cloudfront.net
June 7, 2016

52.85.131.63
server-52-85-131-63.iad53.r.cloudfront.net
June 7, 2016

52.85.142.202
server-52-85-142-202.iad12.r.cloudfront.net
June 5, 2016

52.85.142.155
server-52-85-142-155.iad12.r.cloudfront.net
June 5, 2016

52.85.142.103
server-52-85-142-103.iad12.r.cloudfront.net
June 5, 2016

52.85.142.101
server-52-85-142-101.iad12.r.cloudfront.net
June 5, 2016

52.85.142.96
server-52-85-142-96.iad12.r.cloudfront.net
June 5, 2016

52.85.142.47
server-52-85-142-47.iad12.r.cloudfront.net
June 5, 2016

52.85.142.29
server-52-85-142-29.iad12.r.cloudfront.net
June 5, 2016

52.85.142.13
server-52-85-142-13.iad12.r.cloudfront.net
June 5, 2016

52.84.125.223
server-52-84-125-223.iad16.r.cloudfront.net
May 26, 2016

52.84.125.166
server-52-84-125-166.iad16.r.cloudfront.net
May 26, 2016

52.84.125.162
server-52-84-125-162.iad16.r.cloudfront.net
May 26, 2016

52.84.125.137
server-52-84-125-137.iad16.r.cloudfront.net
May 26, 2016

52.84.125.36
server-52-84-125-36.iad16.r.cloudfront.net
May 26, 2016

52.84.125.24
server-52-84-125-24.iad16.r.cloudfront.net
May 26, 2016

52.84.125.22
server-52-84-125-22.iad16.r.cloudfront.net
May 26, 2016

52.84.125.8
server-52-84-125-8.iad16.r.cloudfront.net
May 26, 2016

52.85.131.140
server-52-85-131-140.iad53.r.cloudfront.net
April 16, 2016

52.85.131.94
server-52-85-131-94.iad53.r.cloudfront.net
April 16, 2016

52.85.131.92
server-52-85-131-92.iad53.r.cloudfront.net
April 16, 2016

52.85.131.76
server-52-85-131-76.iad53.r.cloudfront.net
April 16, 2016

52.85.131.68
server-52-85-131-68.iad53.r.cloudfront.net
April 16, 2016

52.85.131.220
server-52-85-131-220.iad53.r.cloudfront.net
April 16, 2016

52.85.131.215
server-52-85-131-215.iad53.r.cloudfront.net
April 16, 2016

52.85.131.171
server-52-85-131-171.iad53.r.cloudfront.net
April 16, 2016

File downloads found at URLs served by files.vlc.cm.

1 / 68      (PUP)
http://files.vlc.cm/vlcmediaplayer-setup.exe  (23c372ceddf44c80cb80fcc34a4e5c58)

1 / 68      (PUP)
http://files.vlc.cm/vlcplayer-setup.exe  (vlcmediaplayer-setup.exe)

1 / 68      (PUP)
http://files.vlc.cm/vlcmediaplayer-setup.exe  (4c1f522202717bb1a24b64f7f3ddbc37)

2 / 68      (false positives)
http://files.vlc.cm/vlcmediaplayer-setup.exe  (wrar420.exe)

The following 22 files have been seen to comunicate with files.vlc.cm in live environments.

TCP » 52.85.142.103:80
se.exe

TCP » 52.84.125.162:80
browser.exe (speed browser by Smart Applications)

TCP » 52.85.142.29:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.103:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.103:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.29:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.29:80
whatsapptime.exe

TCP » 52.84.125.223:443
onlineguardian-v2.exe

TCP » 52.85.142.29:443
browser.exe (Browser)

TCP » 52.85.142.47:80
Client.exe

TCP » 52.84.125.22:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.223:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.29:443
flixplayer.exe (Electron by GitHub)

TCP » 52.85.142.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.162:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.29:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.96:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.47:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.22:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.24:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

 
Latest 20 of 46 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.