» secure.seawavecdn.com
Overview
Analysis
IPs Addresses (1)
Downloads (7)
Network (230)

secure.seawavecdn.com

Domain Information

Server location:

Northern Ireland, United Kingdom (GB)

Root domain:

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Dr.Web

Adware.Downware.1243, Trojan.BPlug.13, Trojan.MulDrop4.22250, Adware.Downware.918

85.71%

NANO AntiVirus

Trojan.Win32.MulDrop4.cfecrq, Riskware.Nsis.Toolbar.cvzrwd

71.43%

VIPRE Antivirus

InstallMonetizer

71.43%

Rising Antivirus

PE:Trojan.Win32.Generic.13FF7F71!335511409, NS:PUF.SilenceInstaller!1.9DDF

71.43%

Sophos

Generic Bundleware, AppMonetizer Installer

57.14%

ESET NOD32

Win32/InstallMonetizer.AG, Win32/InstallMonetizer.AT

57.14%

Trend Micro House Call

TROJ_GEN.F47V0321, TROJ_GE.7301A69A, TROJ_GEN.F47V0307

57.14%

Reason Heuristics

PUP.Installer.BrowserDistributionServices.V, PUP.Installer.BringStar.O, PUP.StartInstall.n

42.86%

McAfee

Artemis!C6CB73697362, Artemis!C91EFB6E89E6, Artemis!5A8AD07D85FA

42.86%

Malwarebytes

PUP.Optional.InstallMonetizer.A

42.86%

K7 AntiVirus

Adware , Trojan

28.57%

avast!

NSIS:Downloader-ZK [PUP], InstMonetizer-AW [PUP]

28.57%

Baidu Antivirus

Adware.Win32.InstallMonetizer

28.57%

Bkav FE

W32.Clode57.Trojan

14.29%

MicroWorld eScan

Application.Downloader.QZ

14.29%

The domain secure.seawavecdn.com has been seen to resolve to the following IP address.

unallocated.barefruit.co.uk

May 4, 2015

File downloads found at URLs served by secure.seawavecdn.com.

21 / 68 (PUP)

http://secure.seawavecdn.com/nsi/.../PDFCreator_Stub_5874.exe (c6cb736973621eb747e5b18b6a5e1572)

9 / 68 (PUP)

http://secure.seawavecdn.com/nsi/.../Tiny_download_manager_7956.exe (install.exe)

2 / 68 (Adware)

http://secure.seawavecdn.com/.../BringStarSetup.exe (cdf20531762260bf341e2f22df85cbcf)

11 / 68 (PUP)

http://secure.seawavecdn.com/nsi/.../Tiny_download_manager_7956.exe (install.exe)

2 / 68 (Adware)

http://secure.seawavecdn.com/.../distro-meta-installer.exe (9fa2740f52e87d0c8ccfca7d5997254d)

8 / 68 (PUP)

http://secure.seawavecdn.com/nsi/.../Flvto_Converter_7428.exe (6851f1400f9b5ca1d301f3c600725576)

8 / 68 (Adware)

http://secure.seawavecdn.com/nsi/.../Chrome_Click_Here_To_Start_CP1_9163_150046_GC.exe (134518cedbdc6c34c964c64999eccd9e)

The following 230 files have been seen to comunicate with secure.seawavecdn.com in live environments.

TCP » 92.242.140.21:80

smelled.exe (Smelled)

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80

marini.exe (Marini)

TCP » 92.242.140.21:443

client.exe (ClientWrapper)

TCP » 92.242.140.21:80

thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443

WindowService.exe (WindowService)

TCP » 92.242.140.21:443

ciuninstall.exe

TCP » 92.242.140.21:1866

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80

masterupdater.exe

TCP » 92.242.140.21:80

pricemeterexpress.crx

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

Latest 20 of 230 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.