Download
Community
knowledgeBase
» www.headapphead.com
Overview
Analysis
IPs Addresses (10)
Downloads (6)
Network (36)
www.headapphead.com
Domain Information
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Root domain:
headapphead.com
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.installCore.MICROMAX.Installer (M)
100.00%
IPs Addresses
The domain www.headapphead.com has been seen to resolve to the following 10 IP addresses.
52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 23, 2016
54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 23, 2016
54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 23, 2016
52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 23, 2016
54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 5, 2016
52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016
52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016
52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016
52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 5, 2016
54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 5, 2016
Downloads
File downloads found at URLs served by www.headapphead.com.
1 / 68 (PUP)
http://www.headapphead.com/c?x=yZPbmhYW07oFiFv1 02P5WjeaF8HYQebyNnmZtFjyZ0=&c=ypPOKp2o2trIB59WLSYM7InOM0nNUrGoh ex4hvQR8DBPrKNgazng2id54JfP6gBjBEgwalMWcn4A3YnBRMyqptrROYPkq2xmLrUVKQ/xW5DdcaARO qPN4hUTTSorDS8lgfYt567dZ4TQwTGMDUn9RYD1XJlew7wiMrRtQvA1c=&e=1&fallback_url=http://res.mshist.com/.../CandyCrushSaga.exe
(4e6ece29ecb0780562155073ba86a638)
1 / 68 (PUP)
http://www.headapphead.com/c?x=P28ZuEBt2Cm3ZsjowCIDAUa3KXCF2BvTE7kxMBhQkWA=&c=nlX0pN7P/Me4IP9kkNpjdBUrHEQk8oWeDPah2X0Pn6Q6x9qWvcBwmg9QrIAFKlUTwCVc5vVb5UCYJG4lYPCQNTm/ Lq9YXMTMLwNJiQHIsYxWYIxH1HskLPKwuVH3kdr&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe
(8a70d41180de71ac54f42d6b9d074de5)
1 / 68 (PUP)
http://www.headapphead.com/c?x=JlNaFzkH 9Z2oqtNq3st6H Jf09cpzCE8yI3d7I/Wu0=&c=eWGaVCrsLUfvcrtALrQ8YIjcjOYG0tu11KiYPV5MF2TCnWfLwDe0SQUjrcLXWTV qvERgPOCV5PBKIxee9mGJIs87eP6YvsbrFd5nqUQHB06HEUwh2BhERkKrC45pn7ksOA wzeK8LqQNkPVpWtIsituVV1K22xJu8IIq6UwOvg=&e=1&fallback_url=http://res.setauls.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe
(ecf8c38ae9af07984ff6435ac2028d07)
1 / 68 (PUP)
http://www.headapphead.com/c?x=jq6fljW0nPNAR/BvyvSB8/0iGm8HXkzzMvvvbPSgqgM=&c=pjvjjfg1W4qR85VT6y6eP3mdmtLZUazwV3IAJrH2wq6dnyAVkZ3qtmz91WnV3phX1doIy0AaSvtkPP7ROBnSS2Y3Ds2KtgToQWU0hZWamqERDN8GrLxFx36a1JBMycSJ5EMe6rbk6KEWs/EA d0pLTG3LlljTz1Z 7GCxtNXgV0=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe
(f2c0907fda37bf63d3d94edf3152b57e)
1 / 68 (PUP)
http://www.headapphead.com/c?x=gOMNnaXRcMsqIANoZ0hOF1kPSM/RB8G395fNqCcOdUQ=&c=bDauTHA XEH8Uj7G9jsxSLrUM4i1jP0O7xKZfaOr Irf/U8iO2mARZz E5swsqcP8jTwS/4ZfQgsjRW/da0G6rqmgGoKhuJGGgpDu/KCexOeLjkXV1IZbuz39YY VCG0&fallback_url=http://res.mshist.com/.../AngryBirds2.exe
(08826eb51b2b899a0092bf990487b71a)
1 / 68 (PUP)
http://www.headapphead.com/c?x=kL7LwO9qRgM8kP qKeJDEDnyPfJF1rWuVP0DbeDGG9I=&c=TqsTnVUfayDqs6iyGP7EHRls1bnLzlTnr4fnamKZhnKLQ73dIc/xEBBPuHp5Vg8i une7vM2yM0F2YPz0AIza/XUV eqmR0nMcTGhc3qOkHUB9B3oyP171BnO5dA5tgw&fallback_url=http://res.mshist.com/.../ClashOfClans.exe
(1bb1f673f78e9fb7f8634c19d3f5326d)
Network Communications
The following 36 files have been seen to comunicate with www.headapphead.com in live environments.
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.33.46.229
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.33.46.229
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
52.38.209.219
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.38.209.219
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
54.200.224.121
:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)
TCP »
52.38.209.219
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
citrio.exe (Citrio by CatalinaGroup)
TCP »
54.200.224.121
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
54.200.224.121
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
Client.exe
TCP »
54.200.224.121
:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
036629fbd4864725737a8ba8fe7e8cd6.exe
TCP »
52.33.46.229
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
52.33.46.229
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
Latest 20 of 77 files
X