home

neal.cachefly.net

Domain Information

Server location:
Illinois, United States (US)

ASN:
AS30081 CACHENETWORKS - CacheNetworks, Inc.

Root domain:
cachefly.net

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), Adware.Bundler (M)
100.00%

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
50.00%

AegisLab AV Signature
Suspicious.Cloud.Gen!c
50.00%

Agnitum Outpost
PUA.InstallCore
50.00%

Trend Micro House Call
PUA_INSTACOR
50.00%

avast!
Win32:Malware-gen
50.00%

Dr.Web
Trojan.InstallCore.978
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

Trend Micro
PUA_INSTACOR
50.00%

Sophos
Install Core (PUA)
50.00%

Avira AntiVirus
PUA/InstallCore.506793
50.00%

AhnLab V3 Security
PUP/Win32.Downloader
50.00%

G Data
Win32.Application.Agent.FGGEND
50.00%

McAfee
Artemis!0756591F5975
50.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
50.00%

The domain neal.cachefly.net has been seen to resolve to the following IP address.

205.234.175.175
vip1.g.cachefly.net
December 23, 2015

File downloads found at URLs served by neal.cachefly.net.

17 / 68    (PUP)
http://neal.cachefly.net/.../installer.exe  (0756591f597552415e42b0781d2e4811)

1 / 68      (PUP)
http://neal.cachefly.net/.../installer.exe  (4bf719a901b695d47e6bfd52265c57c5)

The following 197 files have been seen to comunicate with neal.cachefly.net in live environments.

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:443
binkiland.exe

TCP » 205.234.175.175:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
da1cbd75-84f6-4908-bec8-64d6e44d60bb-10.exe (Ge-Force by Webar)

TCP » 205.234.175.175:443
browser.exe (speed browser by Smart Applications)

TCP » 205.234.175.175:80
webfreer.exe (Web Freer by Appaxy)

TCP » 205.234.175.175:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:443
browser.exe (speed browser by Smart Applications)

TCP » 205.234.175.175:443
browser.exe (Browser)

TCP » 205.234.175.175:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 205.234.175.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
6054.exe (SavePass 1.1 by OB)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 205.234.175.175:80
irsetup.exe (Setup Factory Runtime by Indigo Rose)

TCP » 205.234.175.175:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 267 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.