home

webplayerddl.com

Domain Information

Server location:
California, United States (US)

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Scanner detections:
Detections  (57% detected)

Scan engine
Details
Detections

avast!
Win32:PUP-gen [PUP]
60.00%

Avira AntiVirus
TR/FakePlayer.B.14, TR/FakePlayer.B.11
60.00%

Malwarebytes
PUP.Optional.KreaP, Trojan.Dropper, Adware.Dropper
60.00%

Trend Micro House Call
TROJ_GEN.F47V0816, TROJ_GEN.R42H1DK
40.00%

AVG
Generic_c
40.00%

Rising Antivirus
PE:Trojan.Win32.Generic.135CC5C1!324847041
20.00%

Qihoo 360 Security
Win32/Trojan.163
20.00%

Reason Heuristics
PUP.Installer.Kreapixel.J
20.00%

MicroWorld eScan
TR/FakePlayer.B.11
20.00%

McAfee
Artemis!5C48416137B4
20.00%

Norman
Malware.XMFQ
20.00%

VIPRE Antivirus
Trojan.Win32.Generic
20.00%

ESET NOD32
Detection.Undefined
20.00%

The domain webplayerddl.com has been seen to resolve to the following IP address.

199.101.28.20
search.dnsassist.verizon.net
July 7, 2014

File downloads found at URLs served by webplayerddl.com.

0 / 68
http://webplayerddl.com/WebPlayer.exe  (e47fb81d568827c79f3d30514243e8c4)

0 / 68
http://webplayerddl.com/WebPlayer.exe  (0b7c8d11afeb4c5fe00b8e8e4abc49cb)

1 / 68      (inconclusive)
http://webplayerddl.com/WebPlayer.exe  (7760199c5ac098c32f045c4b3fc251a9)

2 / 68      (PUP)
http://webplayerddl.com/WebPlayer.exe  (51ee5401ecaee9923b1f6fadb7472030)

11 / 68    (PUP)
http://webplayerddl.com/WebPlayer_V16.exe  (5c48416137b42e268fa414ca3e5223f0)

3 / 68      (PUP)
http://webplayerddl.com/WebPlayer.exe  (24d4cc40022e73d391104e3eb8e8ed1f)

4 / 68      (PUP)
http://webplayerddl.com/WebPlayer.exe  (9eab3edfbf5c7c1cd7f01d67a4d8cff5)

The following 46 files have been seen to comunicate with webplayerddl.com in live environments.

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 46 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.