home

icdn.rustv-playercontent.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
rustv-playercontent.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.KawagaSoft.V, PUP.Installer.InstallCore.Installer
100.00%

Sophos
PUA 'Install Core Click run software', Generic PUA ED
100.00%

Dr.Web
Trojan.InstallCore.24
50.00%

ESET NOD32
Win32/InstallCore.TU potentially unwanted application
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dlayjy
50.00%

AVG
Generic
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0121
50.00%

Comodo Security
Application.Win32.InstallCore.QL
50.00%

VIPRE Antivirus
InstallCore
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7
50.00%

G Data
Win32.Application.InstallCore.DI
50.00%

ESET NOD32
Win32/InstallCore.VW (variant)
50.00%

Baidu Antivirus
Adware.Win32.InstallCore
50.00%

Qihoo 360 Security
Win32/Virus.Adware.94c
50.00%

The domain icdn.rustv-playercontent.com has been seen to resolve to the following 11 IP addresses.

54.230.17.252
server-54-230-17-252.iad12.r.cloudfront.net
March 8, 2015

54.230.17.47
server-54-230-17-47.iad12.r.cloudfront.net
March 8, 2015

54.230.16.185
server-54-230-16-185.iad12.r.cloudfront.net
March 8, 2015

54.240.160.191
server-54-240-160-191.iad12.r.cloudfront.net
March 8, 2015

54.240.160.182
server-54-240-160-182.iad12.r.cloudfront.net
March 8, 2015

54.240.160.123
server-54-240-160-123.iad12.r.cloudfront.net
March 8, 2015

54.240.160.115
server-54-240-160-115.iad12.r.cloudfront.net
March 8, 2015

54.240.160.112
server-54-240-160-112.iad12.r.cloudfront.net
March 8, 2015

54.230.194.216
server-54-230-194-216.iad53.r.cloudfront.net
February 7, 2015

54.230.194.208
server-54-230-194-208.iad53.r.cloudfront.net
February 7, 2015

54.230.194.204
server-54-230-194-204.iad53.r.cloudfront.net
February 7, 2015

File downloads found at URLs served by icdn.rustv-playercontent.com.

10 / 68    (Adware)
http://icdn.rustv-playercontent.com/RusTV_Player_Setup_2.7.exe  (9793be547987ca72778620bab18c14b2)

7 / 68      (Adware)
http://icdn.rustv-playercontent.com/RusTV_Player_Setup_2.7.exe  (6279357f7cb825d3b6ff4fffda80666a)

The following file have been seen to comunicate with icdn.rustv-playercontent.com in live environments.

TCP » 54.230.194.208:80
ctfmon.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.