home

get.meanrepo.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
meanrepo.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
MSIL/Solimba.AH potentially unwanted application
100.00%

Dr.Web
Adware.Downware.8763
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Morstar
100.00%

avast!
Win32:Adware-gen [Adw]
100.00%

MicroWorld eScan
Application.Bundler.Solimba.C
100.00%

Malwarebytes
PUP.Optional.Solimba
100.00%

AegisLab AV Signature
Application.Downloader
100.00%

K7 AntiVirus
Trojan
100.00%

Bitdefender
Application.Bundler.Solimba.C
100.00%

NANO AntiVirus
Trojan.Win32.Morstar.dgkzig
100.00%

Lavasoft Ad-Aware
Application.Bundler.Solimba.C
100.00%

Comodo Security
Application.Win32.Solimba.LSW
100.00%

F-Secure
Application.Bundler.Solimba
100.00%

Avira AntiVirus
APPL/Firseria.Gen8
100.00%

G Data
Application.Bundler.Solimba
100.00%

The domain get.meanrepo.com has been seen to resolve to the following 2 IP addresses.

23.62.7.139
a23-62-7-139.deploy.static.akamaitechnologies.com
December 5, 2014

23.62.7.154
a23-62-7-154.deploy.static.akamaitechnologies.com
December 5, 2014

File downloads found at URLs served by get.meanrepo.com.

18 / 68    (PUP)
http://get.meanrepo.com/n/3.1.40/.../DVD Shrink.exe  (68e33452c496b3123f74caf15d039d1d)

The following 7 files have been seen to comunicate with get.meanrepo.com in live environments.

TCP » 23.62.7.139:80
AppEnable.BOAS.exe

TCP » 23.62.7.139:80
new_chrome.exe (Google Chrome by Google)

TCP » 23.62.7.139:80
phlgmglenofknhllndpffnjmfdglfnng.crx

TCP » 23.62.7.139:80
gbchnnhnlfgdmbekkoadcghcmjmcihef.crx

TCP » 23.62.7.139:80
pkbbmldjcnhopjhpifcocnmkooiadpbb.crx

TCP » 23.62.7.154:80
haidedcgjiefbphbgpdnfiknobbghelo.crx

TCP » 23.62.7.154:80
ndjjnkafmadgknphidhpfdjokfnfnjck.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.