home

www.flashconceptsstock.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
flashconceptsstock.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.Swizzor.19587
50.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817
50.00%

Norman
Gen:Variant.Adware.Symmi.59817
50.00%

Reason Heuristics
PUP.installCore (M)
50.00%

The domain www.flashconceptsstock.com has been seen to resolve to the following 16 IP addresses.

52.85.131.139
server-52-85-131-139.iad53.r.cloudfront.net
April 6, 2016

52.85.131.135
server-52-85-131-135.iad53.r.cloudfront.net
April 6, 2016

52.85.131.87
server-52-85-131-87.iad53.r.cloudfront.net
April 6, 2016

52.85.131.67
server-52-85-131-67.iad53.r.cloudfront.net
April 6, 2016

52.85.131.58
server-52-85-131-58.iad53.r.cloudfront.net
April 6, 2016

52.85.131.227
server-52-85-131-227.iad53.r.cloudfront.net
April 6, 2016

52.85.131.185
server-52-85-131-185.iad53.r.cloudfront.net
April 6, 2016

52.85.131.155
server-52-85-131-155.iad53.r.cloudfront.net
April 6, 2016

54.192.195.177
server-54-192-195-177.iad53.r.cloudfront.net
February 28, 2016

54.192.195.156
server-54-192-195-156.iad53.r.cloudfront.net
February 28, 2016

54.192.195.145
server-54-192-195-145.iad53.r.cloudfront.net
February 28, 2016

54.192.195.142
server-54-192-195-142.iad53.r.cloudfront.net
February 28, 2016

54.192.195.128
server-54-192-195-128.iad53.r.cloudfront.net
February 28, 2016

54.192.195.55
server-54-192-195-55.iad53.r.cloudfront.net
February 28, 2016

54.192.195.35
server-54-192-195-35.iad53.r.cloudfront.net
February 28, 2016

54.192.195.200
server-54-192-195-200.iad53.r.cloudfront.net
February 28, 2016

File downloads found at URLs served by www.flashconceptsstock.com.

1 / 68      (PUP)
http://www.flashconceptsstock.com/.../installer.exe  (4b4b814543bf01d9884342ce359ab968)

3 / 68      (PUP)
http://www.flashconceptsstock.com/.../installer.exe  (cafd1a97670ab7401d2d4777672cfa88)

The following 3 files have been seen to comunicate with www.flashconceptsstock.com in live environments.

TCP » 54.192.195.177:443
online-guardian.exe

TCP » 54.192.195.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.177:443
onlineguardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.