home

sagefile.com

Domain Information

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bechirosl.P, Threat.PrelasanDevelopments, PUP.Solimba.PrelasanDevelopments.Bundler (M), PUP.Solimba.PrelasanDevelopments (M), PUP.Solimba.Bechirosl (M), PUP.Solimba.ContumarEmpresarial (M), PUP.Solimba.Bechiros (M), PUP.Solimba.Prelasan (M), PUP.Solimba.Bechiros.Bundler (M), Adware.Solimba.Bundler (M), PUP.Solimba (M)
96.15%

F-Secure
Application:W32/Generic.70053c248f!Online, Riskware.Application.Generic.964431
7.69%

VIPRE Antivirus
Threat.4758821
7.69%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
7.69%

AVG
Adware BundleApp_r.AJ
7.69%

Malwarebytes
PUP.Optional.Solimba
7.69%

Norman
Solimba.ZMKE, Application.Generic.964431
7.69%

NANO AntiVirus
Riskware.Win32.Downware.djsrhf, Trojan.Win32.Morstar.dkaoql
7.69%

Avira AntiVirus
APPL/Firseria.Gen8, APPL/Solimba.Gen4
7.69%

G Data
Win32.Application.Morstar
7.69%

Vba32 AntiVirus
Downware.Morstar
7.69%

Panda Antivirus
Trj/Genetic.gen
7.69%

IKARUS anti.virus
not-a-virus:Downloader.Morstar
7.69%

K7 AntiVirus
Unwanted-Program
7.69%

Baidu Antivirus
Adware.MSIL.Solimba, Adware.Win32.Solimba
7.69%

The domain sagefile.com has been seen to resolve to the following 5 IP addresses.

184.168.221.36
ip-184-168-221-36.ip.secureserver.net
June 18, 2016

166.62.109.105
ip-166-62-109-105.ip.secureserver.net
May 16, 2016

184.168.47.225
redirect-v225.secureserver.net
April 14, 2016

54.243.233.95
ec2-54-243-233-95.compute-1.amazonaws.com
January 9, 2015

50.17.180.253
ec2-50-17-180-253.compute-1.amazonaws.com
January 9, 2015

File downloads found at URLs served by sagefile.com.

1 / 68      (Adware)
http://sagefile.com/n/3.2.15/.../Matlab.exe  (462ca91611dd92846ef32375506c4960)

1 / 68      (Adware)
http://sagefile.com/n/3.2.14/.../Rounds Free Video Call & Text for PC Windows.exe  (ffb98f6938879a0ae1d3cbbccf38ab58)

0 / 68
http://sagefile.com/n/3.2.15/.../Police Scanner.exe  (8f83d8c1df3a1bda32efba6a5f98f4bc)

1 / 68      (PUP)
http://sagefile.com/n/3.2.13/.../Sly Cooper: Thieves in Time.exe  (sly cooper- thieves in time.exe)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Clash of Clans.exe  (aa4fe2860e058f08601947ddd338e449)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Farm Heroes Saga for PC.exe  (9abd51162d373914a6ceded52f38c3a0)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../HP MediaSmart Webcam Software.exe  (ea84f3a1f34790d1a764dbc6d4049f6e)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Worldcraft 2 for PC.exe  (094d569092a878d8d3bd3bc06a2c221d)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../Whats App PC.exe  (65fe035a1ef74725a618b3798fd9a157)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Assassin’s Creed 2.exe  (145db5f3b3384ef5511d68e5753ba235)

2 / 68      (false positives)
http://sagefile.com/n/3.2.13/.../Tinder for PC.exe  (wrar420.exe)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Show Box Installer.exe  (0f6cc29004ac446e80c75f7493f50c2d)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../ArcSoft WebCam Companion.exe  (2729710bd278b1ed72e7744d6725ed03)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../Whats App PC.exe  (fa2f71b50cf0aa03bfb7fd88e78f596e)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../Tequila Zombies 2.exe  (ed569952ef94da11c2902282d55ab809)

1 / 68      (Adware)
http://sagefile.com/n/3.2.14/.../Castle Clash.exe  (831579e358ce6957787895388d3ac65d)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../PowerPoint.exe  (6fda40ca00bf661650e9c3667ea94f48)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Microsoft Office.exe  (0fab4747075c8dae8ce340c17132cffc)

1 / 68      (Adware)
http://sagefile.com/n/3.2.11/.../PowerPoint.exe  (b89a795de041b4f8babc0ce2a25d88a6)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../SHAREit for PC.exe  (4ab8dccb67e5ca0abdbc06b0f7da1b5f)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Adobe Reader X.exe  (ede2b2bf41c8cdc2fe41cc22f838f2c9)

1 / 68      (Adware)
http://sagefile.com/n/3.2.15/.../World Cricket Championship LT for PC.exe  (01d7a66b2395ac9bcb80ce80c738a405)

1 / 68      (Adware)
http://sagefile.com/n/3.2.13/.../Snapseed.exe  (9fbfd87efcd6ecc581ed80617d3425b7)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../Angry Bird Transformer.exe  (5dbaaf291a9bb50090fc316a7bbbfd2f)

1 / 68      (Adware)
http://sagefile.com/n/3.2.16/.../UC Browser Installer.exe  (1c888b7a62b33fb2bb802a66ecf36ee7)

30 / 68    (Adware)
http://sagefile.com/n/3.2.16/.../Whats App PC.exe  (90d14a5c8fd53cd9735656df2da282d7)

18 / 68    (Adware)
http://sagefile.com/n/3.2.13/.../Find Junk Files.exe  (a7195e26824f9438e14f09bae9f77b1b)

The following 140 files have been seen to comunicate with sagefile.com in live environments.

TCP » 184.168.47.225:80
kb799693963.exe

TCP » 184.168.221.36:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.36:80
plus-hd-v1.4-codedownloader.exe (Plus-HD-V1.4 by Plus HD)

TCP » 184.168.47.225:80
cykimhegigka.exe

TCP » 184.168.221.36:80
c01208e4-b2ad-40c1-9810-40447884a00b-9.exe

TCP » 184.168.221.36:80
plus-hd-9.6-codedownloader.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.47.225:80
browser.exe (Speed Browser by Smart Applications)

TCP » 184.168.47.225:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.47.225:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.47.225:80
1799877.exe

TCP » 184.168.221.36:80
DeskBarBundler.exe (DeskBarBundler)

TCP » 184.168.221.36:80
bd69fe80-f1b1-4f8f-b1a7-9e87900f7877-3.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.221.36:80
32b680f6-a8a2-442b-a3e2-f38e5f18b673-5.exe (HQPro-2 by HQ-1.9)

TCP » 184.168.47.225:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 184.168.47.225:80
produpd.exe (Vest's software office by Vest')

TCP » 184.168.221.36:80
online-guardian-v2.0.9.exe

TCP » 184.168.47.225:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 166.62.109.105:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.47.225:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.36:80
1e6b0b48-9caa-476a-a6cd-2ce364810c11-5.exe (Plus-HD-9.6 by Plus HD)

 
Latest 20 of 159 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.