home

urgent.softwareupdate.xyz

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
softwareupdate.xyz

The domain urgent.softwareupdate.xyz has been seen to resolve to the following 8 IP addresses.

52.85.142.139
server-52-85-142-139.iad12.r.cloudfront.net
May 27, 2016

52.85.142.105
server-52-85-142-105.iad12.r.cloudfront.net
May 27, 2016

52.85.142.65
server-52-85-142-65.iad12.r.cloudfront.net
May 27, 2016

52.85.142.247
server-52-85-142-247.iad12.r.cloudfront.net
May 27, 2016

52.85.142.241
server-52-85-142-241.iad12.r.cloudfront.net
May 27, 2016

52.85.142.224
server-52-85-142-224.iad12.r.cloudfront.net
May 27, 2016

52.85.142.186
server-52-85-142-186.iad12.r.cloudfront.net
May 27, 2016

52.85.142.165
server-52-85-142-165.iad12.r.cloudfront.net
May 27, 2016

File downloads found at URLs served by urgent.softwareupdate.xyz.

2 / 68      (false positives)
http://urgent.softwareupdate.xyz/av/gr/.../  (wrar420.exe)

The following 28 files have been seen to comunicate with urgent.softwareupdate.xyz in live environments.

TCP » 52.85.142.224:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.186:443
browser.exe (Speed Browser by Long Mile Solutions)

TCP » 52.85.142.105:80
apptrailers.exe

TCP » 52.85.142.247:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.85.142.241:443
stormwatchbrowser.exe

TCP » 52.85.142.139:80
mobogenieP2sp.exe (mobogenie by mobogenie.com)

TCP » 52.85.142.241:443
whatsapptime.exe

TCP » 52.85.142.247:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.247:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.139:443
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 52.85.142.186:80
client.exe (ClientWrapper)

TCP » 52.85.142.186:443
stormwatchbrowser.exe

TCP » 52.85.142.186:80
browser.exe (Browser)

TCP » 52.85.142.224:80
munk.exe (Munk)

TCP » 52.85.142.65:80
browser.exe (Browser)

TCP » 52.85.142.224:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.241:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.65:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 52.85.142.105:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.105:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

 
Latest 20 of 51 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.