home

gerenciador.nozebra.com.br

Financeiro GrupoNZN

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States which resides on the Akamai Technologies, Inc. network.
Server location:
Washington, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
nozebra.com.br

Whois:
2 nozebra.com.br records

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.DsNET.Atube.Installer.Meta, PUP.NoZebraNetworka.i, PUP.NoZebraNetworka.p, PUP.NoZebraNetworka.EE, PUP.NoZebraNetworka.AA, PUP.installCore.NoZebraNetworka (M), PUP.installCore.Binstall (M), PUP.installCore.SDInternetworksa (M), PUP.installCore.NoZebraN (M), PUP.installCore (M)
100.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant), Win32/InstallCore.PL (variant)
27.50%

Malwarebytes
PUP.Optional.Installcore
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

VIPRE Antivirus
Trojan.Win32.Generic
25.00%

AVG
Generic
25.00%

F-Prot
W32/InstallCore.AC.gen
22.50%

Baidu Antivirus
Adware.Win32.InstallCore
22.50%

McAfee
Artemis!36C792CD955B, Artemis!ACA28E362058, Artemis!2A14364D4CF7, Artemis!0BFBA468420E
15.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCore.ZR, ADWARE/InstallCore.Gen7
12.50%

herdProtect (fuzzy)
a variant of 733e67e75bfc1ec57a56e79c4439c16bebb2828d, a variant of 391088a0216a4d370530517f2669087318a1b0d1
10.00%

Sophos
Generic PUA LA, Install Core Click run software, Generic PUA HA, Generic PUA JL
10.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
10.00%

Rising Antivirus
PE:Trojan.Win32.Generic.174A015C!390725980, PE:Trojan.Win32.Generic.17768D74!393645428, PE:Trojan.Win32.Generic.17765B44!393632580
7.50%

Trend Micro House Call
Suspicious_GEN.F47V1006, Suspicious_GEN.F47V0927
7.50%

The domain gerenciador.nozebra.com.br has been seen to resolve to the following 30 IP addresses.

104.96.220.241
a104-96-220-241.deploy.static.akamaitechnologies.com
September 15, 2016

184.28.17.226
a184-28-17-226.deploy.static.akamaitechnologies.com
August 27, 2016

198.47.116.68
July 8, 2016

198.47.116.33
July 8, 2016

23.62.7.19
a23-62-7-19.deploy.static.akamaitechnologies.com
July 7, 2016

23.62.7.65
a23-62-7-65.deploy.static.akamaitechnologies.com
July 7, 2016

184.29.104.130
a184-29-104-130.deploy.static.akamaitechnologies.com
June 27, 2016

184.29.104.161
a184-29-104-161.deploy.static.akamaitechnologies.com
June 27, 2016

184.51.126.112
a184-51-126-112.deploy.static.akamaitechnologies.com
May 27, 2016

65.158.47.105
May 17, 2016

65.158.47.66
May 17, 2016

104.96.220.193
a104-96-220-193.deploy.static.akamaitechnologies.com
May 16, 2016

104.96.220.248
a104-96-220-248.deploy.static.akamaitechnologies.com
May 16, 2016

65.158.47.27
April 13, 2016

184.51.126.82
a184-51-126-82.deploy.static.akamaitechnologies.com
April 6, 2016

184.51.126.83
a184-51-126-83.deploy.static.akamaitechnologies.com
April 6, 2016

65.158.47.48
April 5, 2016

65.158.47.32
April 5, 2016

23.15.9.163
a23-15-9-163.deploy.static.akamaitechnologies.com
March 4, 2016

184.28.17.210
a184-28-17-210.deploy.static.akamaitechnologies.com
February 15, 2016

184.28.17.160
a184-28-17-160.deploy.static.akamaitechnologies.com
February 15, 2016

23.15.7.152
a23-15-7-152.deploy.static.akamaitechnologies.com
December 2, 2014

23.0.160.42
a23-0-160-42.deploy.static.akamaitechnologies.com
November 29, 2014

23.0.160.25
a23-0-160-25.deploy.static.akamaitechnologies.com
November 29, 2014

23.15.9.161
a23-15-9-161.deploy.static.akamaitechnologies.com
October 9, 2014

23.15.9.153
a23-15-9-153.deploy.static.akamaitechnologies.com
October 9, 2014

23.15.7.163
a23-15-7-163.deploy.static.akamaitechnologies.com
September 28, 2014

23.15.7.147
a23-15-7-147.deploy.static.akamaitechnologies.com
September 28, 2014

184.51.126.59
a184-51-126-59.deploy.static.akamaitechnologies.com
September 27, 2014

184.51.126.51
a184-51-126-51.deploy.static.akamaitechnologies.com
September 27, 2014

 
Showing 30 of 30 IP Addresses

File downloads found at URLs served by gerenciador.nozebra.com.br.

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../windows-media-player-10-portugues--73-12-4102952.exe  (windows-media-player-10-portugues--32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../cdex-23-02-4102952.exe  (cdex-1-70-beta-4-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/sd/programas/urls/iron/.../bittorrent.exe  (bittorrent-7-9-2-build-34312-32-bits.exe)

0 / 68
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../free-youtube-download-03-41-4102972.exe  (free-youtube-download-3-2-44-820-32-bits.exe)

10 / 68    (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../free-youtube-download-13-41-4102972.exe  (free-youtube-download-3-2-44-820-32-bits.exe)

8 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../coreldraw-graphics-suite-85-41-4102952.exe  (coreldraw-graphics-suite-x7-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../flying-model-simulator-9-9-4102962.exe  (flying-model-simulator-2-0-alpha-8-5-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../maxtruco-14-11-4102972.exe  (maxtruco-2-0-1-32-bits.exe)

14 / 68    (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../skype-7-31-4102972.exe  (skype-6-20-0-104-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../hp-universal-print-driver-postscript-5-8-4102962.exe  (hp-universal-print-driver-postscript-5-6-0-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../hp-universal-print-driver-pcl-5-82-8-4102962.exe  (hp-universal-print-driver-pcl-5-5-0-3-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../hp-universal-print-driver-postscript-6-8-4102962.exe  (hp-universal-print-driver-postscript-5-6-0-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../winrar-5-00-02-51-4102972.exe  (winrar-5-00-beta-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../java-runtime-15-8-4102962.exe  (java-runtime-8-0-update-20-32-bits.exe)

2 / 68      (PUP)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../atube-catcher-73-51-4102962.exe  (atubecatcher.exe)

11 / 68    (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../atube-catcher-53-51-4102962.exe  (atube-catcher-3-8-7980-32-bits.exe)

11 / 68    (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../atube-catcher-54-11-4102972.exe  (atube-catcher-3-8-7980-32-bits.exe)

0 / 68
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../vegas-movie-studio-61-22-4102972.exe  (6ddf6dbb_stp.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../d-book-basico-84-02-4102952.exe  (d-book-basico-5-5-1-179-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../free-pdf-reader-41-61-4102972.exe  (free-pdf-reader-1-4-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../d-book-basico-93-02-4102952.exe  (d-book-basico-5-5-1-179-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../d-book-75-02-4102952.exe  (d-book-4-0-avancado-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../microsoft-office-starter-2010-15-02-4102952.exe  (microsoft-office-starter-2010-32-bits.exe)

12 / 68    (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../mozilla-firefox-92-22-4102952.exe  (mozilla-firefox-32-0-3-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../cyberlink-powerdvd-13-91-4102952.exe  (cyberlink-powerdvd-14-0-4028-58-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../avs-dvd-player-04-91-4102952.exe  (avs-dvd-player-4-1-7-92-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../genymotion-21-91-4102952.exe  (genymotion-2-2-1-32-bits.exe)

8 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../utorrent-31-0-4102972.exe  (utorrent-3-4-2-build-34309-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../wondershare-dr-fone-5-61-4102972.exe  (wondershare-dr-fone-4-6-32-bits.exe)

1 / 68      (Adware)
http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../mp3jam-1-31-4102972.exe  (mp3jam-1-1-1-10-32-bits.exe)

 
Latest 30 of 61 download URLs

The following 271 files have been seen to comunicate with gerenciador.nozebra.com.br in live environments.

TCP » 23.15.7.152:80
browser.exe (speed browser by Smart Applications)

TCP » 184.51.126.112:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.147:80
browser.exe (speed browser by Smart Applications)

TCP » 23.15.7.152:80
updateadmin.exe

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.29.104.161:80
browser.exe (Browser)

TCP » 184.51.126.59:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
messengertime.exe

TCP » 184.51.126.112:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
whatsapptime.exe

TCP » 184.29.104.161:80
apptrailers.exe

TCP » 184.51.126.83:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.29.104.161:80
browser.exe (Speed Browser by Smart Applications)

TCP » 184.51.126.82:80
plugincontainer.exe

TCP » 184.51.126.82:443
citrio.exe (Citrio by CatalinaGroup)

 
Latest 20 of 298 files

URL:
http://gerenciador.nozebra.com.br/

Web server:
Microsoft-HTTPAPI/2.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.