home

www.carandai.mg.gov.br

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
gov.br

The domain www.carandai.mg.gov.br has been seen to resolve to the following 8 IP addresses.

52.84.125.28
server-52-84-125-28.iad16.r.cloudfront.net
August 18, 2016

52.84.125.8
server-52-84-125-8.iad16.r.cloudfront.net
August 18, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
August 18, 2016

52.84.125.198
server-52-84-125-198.iad16.r.cloudfront.net
August 18, 2016

52.84.125.140
server-52-84-125-140.iad16.r.cloudfront.net
August 18, 2016

52.84.125.126
server-52-84-125-126.iad16.r.cloudfront.net
August 18, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
August 18, 2016

52.84.125.69
server-52-84-125-69.iad16.r.cloudfront.net
August 18, 2016

File downloads found at URLs served by www.carandai.mg.gov.br.

0 / 68
http://www.carandai.mg.gov.br/salvar_arquivo.aspx?cdLocal=2&arquivo={1A2A78BC-3222-D8A3-8BD5-ECDADEBCA0AC}.exe  (e84b901fbe15287cc6b89a226e039e21)

The following 9 files have been seen to comunicate with www.carandai.mg.gov.br in live environments.

TCP » 52.84.125.126:80
crossbrowse.exe (Crossbrowse)

TCP » 52.84.125.126:80
se.exe

TCP » 52.84.125.126:80
browser.exe (Browser)

TCP » 52.84.125.105:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.105:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.241:443
browser.exe (Browser)

TCP » 52.84.125.28:443
secureassist.exe (SecureAssist.exe by SecureAssist)

TCP » 52.84.125.105:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.105:443
stormwatchapp.exe

TCP » 52.84.125.28:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.