home

gerenciador.superdownloads.com.br

No Zebra Network LTDA (348708)

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.

Root domain:
superdownloads.com.br

Whois:
2 superdownloads.com.br records

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Atube.Optional.Installer.Meta (M), PUP.NoZebraNetworka.k, PUP.NoZebraNetworka.W, PUP.installCore.NoZebraNetworka (M), PUP.installCore.SDInternetworksa (M), PUP.installCore.SDIntern (M), PUP.installCore.NoZebraN (M), PUP.installCore.SDIntern.Installer (M), PUP.installCore (M)
95.65%

Dr.Web
Adware.Toolbar.282, Trojan.InstallCore.11
4.35%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant), Win32/InstallCore.QH (variant)
4.35%

Malwarebytes
PUP.Optional.InstallCore
4.35%

K7 AntiVirus
Unwanted-Program
4.35%

VIPRE Antivirus
InstallCore, Threat.4786018
4.35%

Baidu Antivirus
Adware.Win32.InstallCore
4.35%

AVG
Generic
4.35%

Trend Micro House Call
TROJ_GEN.F47V0202
2.17%

F-Prot
W32/InstallCore.AC.gen
2.17%

ESET NOD32
Win32/InstallCore.RA potentially unwanted application
2.17%

McAfee
Artemis!F517BCF6FB30
2.17%

Sophos
Install Core Click run software
2.17%

Avira AntiVirus
ADWARE/InstallCore.Gen9
2.17%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
2.17%

The domain gerenciador.superdownloads.com.br has been seen to resolve to the following 19 IP addresses.

169.45.117.88
58.75.2da9.ip4.static.sl-reverse.com
June 2, 2016

107.23.21.160
ec2-107-23-21-160.compute-1.amazonaws.com
January 29, 2016

184.28.17.160
a184-28-17-160.deploy.static.akamaitechnologies.com
November 25, 2015

184.28.17.210
a184-28-17-210.deploy.static.akamaitechnologies.com
November 25, 2015

72.247.9.114
a72-247-9-114.deploy.akamaitechnologies.com
June 19, 2015

72.247.9.160
a72-247-9-160.deploy.akamaitechnologies.com
June 19, 2015

23.15.7.163
a23-15-7-163.deploy.static.akamaitechnologies.com
January 4, 2015

23.15.7.152
a23-15-7-152.deploy.static.akamaitechnologies.com
November 29, 2014

23.0.160.25
a23-0-160-25.deploy.static.akamaitechnologies.com
November 17, 2014

23.0.160.42
a23-0-160-42.deploy.static.akamaitechnologies.com
November 17, 2014

23.15.7.120
a23-15-7-120.deploy.static.akamaitechnologies.com
November 17, 2014

23.15.7.138
a23-15-7-138.deploy.static.akamaitechnologies.com
November 2, 2014

23.15.7.147
a23-15-7-147.deploy.static.akamaitechnologies.com
November 2, 2014

23.15.9.161
a23-15-9-161.deploy.static.akamaitechnologies.com
November 1, 2014

23.15.9.153
a23-15-9-153.deploy.static.akamaitechnologies.com
November 1, 2014

168.143.242.234
November 1, 2014

168.143.242.224
November 1, 2014

23.61.250.18
a23-61-250-18.deploy.static.akamaitechnologies.com
November 1, 2014

23.61.250.17
a23-61-250-17.deploy.static.akamaitechnologies.com
November 1, 2014

File downloads found at URLs served by gerenciador.superdownloads.com.br.

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../pptxtreme-effects-library-for-powerpoint.exe  (pptxtreme-effects-library-for-powerpoint-1-60-01-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../microsoft-outlook-2010.exe  (microsoft-outlook-2010-14-0-4760-1000-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../free-pdf-text-reader-71-11-4102011.exe  (free-pdf-text-reader-1-1-41-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../debut-video-capture-93-91-4102011.exe  (debut-video-capture-2-02-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../tagcomercio-31-12-4102011.exe  (tagcomercio-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../driveridentifier-03-22-4102011.exe  (driveridentifier-4-2-8-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../everest-5-ultimate-edition-portable.exe  (everest-5-ultimate-edition-portable-5-50-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../vlc-media-player.exe  (vlc-media-player-2-1-5-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../vsdc-free-screen-recorder.exe  (vsdc-free-screen-recorder-1-2-2-102-32-bits.exe)

1 / 68
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../sistema-integrado-para-loja-de-confeccao.exe  (lojawin.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../freemake-audio-converter.exe  (freemake-audio-converter-1-1-0-70-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../daemon-tools-lite.exe  (daemon-tools-lite-4-49-1-0356-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../putty.exe  (putty-0-63-32-bits.exe)

0 / 68
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../windows-movie-maker-35-91-4102011.exe  (wlsetup-web.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../windows-movie-maker-61-02-4102011.exe  (icreinstall_windows-movie-maker-2012-16-4-3522-0110-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../cdburnerxp-32-02-4102011.exe  (cdburnerxp-4-5-4-5067-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../tiny-pdf.exe  (tiny-pdf-2-0-2600-32-bits.exe)

1 / 68
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../realplayer.exe  (realplayer_br.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../limewire.exe  (limewire-5-5-16-32-bits.exe)

3 / 68      (PUP)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../atube-catcher.exe  (atcmedia1111414055866.exe)

0 / 68
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../internet-download-manager-75-21-4102011.exe  (idman621build3.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../internet-download-manager-02-31-4102011.exe  (icreinstall_internet-download-manager-6-21-build-10-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../ppp.exe  (ppp-2-1-0-85-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../4musics-wav-to-mp3-converter.exe  (4musics-wav-to-mp3-converter-4-3-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../teamspeak-client-54-51-4102011.exe  (teamspeak-client-3-0-16-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../utorrent-utorrent-mtorrent.exe  (utorrent-utorrent-mtorrent-3-4-2-build-36615-32-bits.exe)

0 / 68
http://gerenciador.superdownloads.com.br/nocache/sd/programas/urls/iron/.../programa-salao-de-beleza-e-estetica---agendamento-e-financeiro.exe  (programa-salao-de-beleza-e-estetica-agendamento-e-financeiro-3-0-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../daemon-tools-lite-14-91-4102011.exe  (daemon-tools-lite-4-49-1-0356-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../swat-4-04-81-4102011.exe  (swat-4-demo-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.superdownloads.com.br/nocache/programas/urls/iron/.../wondershare-video-editor-6-02-4102011.exe  (wondershare-video-editor-4-6-0-32-bits.exe)

 
Latest 30 of 90 download URLs

The following 59 files have been seen to comunicate with gerenciador.superdownloads.com.br in live environments.

TCP » 23.15.7.152:80
browser.exe (speed browser by Smart Applications)

TCP » 23.15.7.147:80
browser.exe (speed browser by Smart Applications)

TCP » 23.15.7.152:80
updateadmin.exe

TCP » 169.45.117.88:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.120:80
browser.exe (Browser)

TCP » 23.15.7.152:443
browser.exe (Browser)

TCP » 184.28.17.210:80
verypdf-pdf2word-3-1-32-bits.exe (Installer by Internet Generic)

TCP » 184.28.17.210:80
onheklgeghhphlhgpbfpgmlpjinjoida.crx

TCP » 23.0.160.25:80
nedmkhahhppfofnniinaggmabnngddjk.crx

TCP » 23.0.160.25:80
wsmallstub.exe

TCP » 23.0.160.25:80
cpgilknjonchkdgeeajbpoggccpmmhfa.crx

TCP » 23.0.160.25:80
kdeekjeminbcjbfcohnnjppafgngbehe.crx

TCP » 23.0.160.25:80
gdjeihkmglmapgifllngcdlaoeemaacf.crx

TCP » 23.0.160.25:80
cpcnnilbjbdkiaoemkdfkeepobgjglcg.crx

TCP » 23.0.160.25:80
cfcacpgcecgcgfileglmaoakegmojlnj.crx

TCP » 23.0.160.25:80
ohmnhngmbailhjkpelkhddjbfbdjjmll.crx

TCP » 23.0.160.25:80
inglknhicnomibbnhdnhbkmncldebfcb.crx

TCP » 23.0.160.25:80
gdjeihkmglmapgifllngcdlaoeemaacf.crx

TCP » 23.0.160.42:80
tubesingkgs158.exe

TCP » 23.0.160.42:80
nnomhdcllmceelhbpclhblipjkjilnli.crx

 
Latest 20 of 67 files

URL:
http://gerenciador.superdownloads.com.br/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/7.5 (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.