home

www.towerheadrepository.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
towerheadrepository.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore.BeijingQingchuanglianxiangTechnologyCo.Installer (M)
100.00%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application
50.00%

The domain www.towerheadrepository.com has been seen to resolve to the following 6 IP addresses.

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 21, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 21, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 21, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 21, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 21, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 21, 2016

File downloads found at URLs served by www.towerheadrepository.com.

1 / 68      (PUP)
http://www.towerheadrepository.com/c?x=69V3tEThBcDTIfCCk4nwZ/RPIpZWFejkEpXJfwLWxdE=&c=GVJVUeCoWFHQaVMLcpg18Iqa0n7/vzyXqU0fgp2N jcyVnc8GSx7bii87UOSAvmjdUaEFFvlzVqt2TSz0Pv95WEzs0Kx/ERuZXHP7g5qzxjegZNjkNA3QntCCW2OdnTwecmkgeV54t5jO8Lb5KLlOw==&downloadAs=FreeAVIMPEGWMVMP4FLVVideoJoiner.exe&fallback_url=http://.../FreeAVIMPEGWMVMP4FLVVideoJoiner_IS.exe  (fe433f763df2ff2fc797a20a34be57c9)

2 / 68      (PUP)
http://www.towerheadrepository.com/c?x= Dyu9Uo9RQwXlSG5iJ/GCz4vfRW7rzlfEvpoBQT1xRs=&c= y9oHwn4MEq81PPuPmE/YKMr8ZdVkordSdlU8mx9dCc0Bma9 N2lLrFJzz7LBH9eQg0yPJJmb/N/rRct7nKm5j3vcc5mx70ymqAIxtQtenXod3VR0KrQYyToPUfG60bZ&downloadAs=FreeOCRtoWord.exe&fallback_url=http://www.downloadonic.com/ocrtoword.com/.../FreeOCRtoWord_IS.exe  (f603248e9f6e7eccdc3feec4d7568d26)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.