home

www.heartupdatecenter.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
heartupdatecenter.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Adware-gen [Adw], Win32:Evo-gen [Susp], Win32:Kukacka, Win32:SaliCode, Win32:Sality, Win32:RmnDrp, Win32:VB-OJQ [Wrm], Win32:Vitro
66.67%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817, Win32.Sality, Win32.Ramnit.N, Trojan.Generic.6753864, Win32.Virtob.Gen.12
60.00%

McAfee
Trojan.Artemis!0C61D2422171, Trojan.Artemis!4109A425E5ED, Trojan.RDN/Generic.dx, Virus.W32/Swisyn.ag
53.33%

Norman
Gen:Variant.Symmi.60510, Gen:Variant.Adware.Symmi.59817, Win32.Sality.3, Win32.Ramnit.N, Trojan.Generic.6753864
53.33%

Dr.Web
Trojan.Swizzor.19586, Trojan.Swizzor.19587, Win32.Sector.30
46.67%

Microsoft Security Essentials
Threat.Undefined
46.67%

ESET NOD32
Win32/Sality.NBA virus, Win32/Ramnit.H virus, Win32/VB.OSK trojan, Win32/Virut.NBP virus
46.67%

Kaspersky
Virus.Win32.Sality, Virus.Win32.Nimnul, Trojan.Win32.Swisyn
40.00%

F-Prot
W32/Sality.gen2, W32/Sality.E.gen, W32/Ramnit.E, W32/Virut.E.gen
33.33%

Sophos
Virus 'Mal/Sality-D', Virus 'W32/Ramnit-A'
33.33%

Reason Heuristics
PUP.installCore (M)
33.33%

VIPRE Antivirus
Threat.4721115, Threat.4732184
26.67%

F-Secure
Win32.Sality.3, Trojan.Generic.6753864
20.00%

AVG
Win32/Sality
20.00%

Bkav FE
HW32.Packed
13.33%

The domain www.heartupdatecenter.com has been seen to resolve to the following 52 IP addresses.

52.84.125.109
server-52-84-125-109.iad16.r.cloudfront.net
August 13, 2016

52.84.125.93
server-52-84-125-93.iad16.r.cloudfront.net
August 13, 2016

52.84.125.51
server-52-84-125-51.iad16.r.cloudfront.net
August 13, 2016

52.84.125.42
server-52-84-125-42.iad16.r.cloudfront.net
August 13, 2016

52.84.125.254
server-52-84-125-254.iad16.r.cloudfront.net
August 13, 2016

52.84.125.173
server-52-84-125-173.iad16.r.cloudfront.net
August 13, 2016

52.84.125.162
server-52-84-125-162.iad16.r.cloudfront.net
August 13, 2016

52.84.125.134
server-52-84-125-134.iad16.r.cloudfront.net
August 13, 2016

52.85.131.234
server-52-85-131-234.iad53.r.cloudfront.net
April 13, 2016

52.85.131.158
server-52-85-131-158.iad53.r.cloudfront.net
April 13, 2016

52.85.131.220
server-52-85-131-220.iad53.r.cloudfront.net
April 10, 2016

52.85.131.192
server-52-85-131-192.iad53.r.cloudfront.net
April 10, 2016

52.85.131.183
server-52-85-131-183.iad53.r.cloudfront.net
April 10, 2016

52.85.131.167
server-52-85-131-167.iad53.r.cloudfront.net
April 10, 2016

52.85.131.56
server-52-85-131-56.iad53.r.cloudfront.net
April 10, 2016

52.85.131.229
server-52-85-131-229.iad53.r.cloudfront.net
April 10, 2016

52.85.131.139
server-52-85-131-139.iad53.r.cloudfront.net
April 5, 2016

52.85.131.135
server-52-85-131-135.iad53.r.cloudfront.net
April 5, 2016

52.85.131.87
server-52-85-131-87.iad53.r.cloudfront.net
April 5, 2016

52.85.131.67
server-52-85-131-67.iad53.r.cloudfront.net
April 5, 2016

52.85.131.58
server-52-85-131-58.iad53.r.cloudfront.net
April 5, 2016

52.85.131.227
server-52-85-131-227.iad53.r.cloudfront.net
April 5, 2016

52.85.131.185
server-52-85-131-185.iad53.r.cloudfront.net
April 5, 2016

52.85.131.155
server-52-85-131-155.iad53.r.cloudfront.net
April 5, 2016

54.230.102.12
server-54-230-102-12.iad2.r.cloudfront.net
March 3, 2016

54.230.102.225
server-54-230-102-225.iad2.r.cloudfront.net
March 3, 2016

54.230.102.213
server-54-230-102-213.iad2.r.cloudfront.net
March 3, 2016

54.230.102.150
server-54-230-102-150.iad2.r.cloudfront.net
March 3, 2016

54.230.102.132
server-54-230-102-132.iad2.r.cloudfront.net
March 3, 2016

54.230.102.119
server-54-230-102-119.iad2.r.cloudfront.net
March 3, 2016

 
Showing 30 of 52 IP Addresses

File downloads found at URLs served by www.heartupdatecenter.com.

5 / 68      (Malware)
http://www.heartupdatecenter.com/.../installer.exe  (024a1e02fac8f383b772ea54051e204d)

1 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (fc2031f1d8496d2fd2d902c3d51fe663)

8 / 68      (Malware)
http://www.heartupdatecenter.com/.../installer.exe  (84c967200cceaf2d54c4d576d4db4ce8)

1 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (b9994022b1da8903be33606ff35d4a02)

17 / 68    (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (4109a425e5edd80ff70c2a3e8ed66041)

1 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (6dbe8d70698b927a93afae4ec5304217)

1 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (138ac23f75d1078f321ad9114b3df07b)

1 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (7d761cf7a5b67af55f3407cc06c6055d)

11 / 68    (Malware)
http://www.heartupdatecenter.com/.../installer.exe  (30dd08f08fb9dbd47f8b40a602cdd921)

10 / 68    (Infected)
http://www.heartupdatecenter.com/.../installer.exe  (8ca5c03ca4dd14c8572b41ae92091467)

10 / 68    (Malware)
http://www.heartupdatecenter.com/.../installer.exe  (8063febfed21be61fc3078cf719c3e98)

3 / 68      (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (20902924d349a4a49fad854cd94b8521)

16 / 68    (PUP)
http://www.heartupdatecenter.com/.../installer.exe  (0c61d2422171a96eec533430dd25e70f)

13 / 68    (Infected)
http://www.heartupdatecenter.com/.../installer.exe  (7982844c621fe16f76ac0d832c9552b2)

13 / 68    (Infected)
http://www.heartupdatecenter.com/.../installer.exe  (75e4c061ac722e746ee28f7aecbbcc35)

The following 18 files have been seen to comunicate with www.heartupdatecenter.com in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 52.84.125.162:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.42:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.173:443
clearscreenplayerbrowser.exe

TCP » 54.192.195.177:443
online-guardian.exe

TCP » 54.192.195.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.162:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.173:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.173:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.254:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.173:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.173:443
cpx.exe (Google Embedded Application)

TCP » 52.84.125.42:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.134:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.162:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.162:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.254:80
minionstribute_theme.crx

TCP » 52.84.125.42:80
browser.exe (Browser)

TCP » 54.192.195.177:443
onlineguardian-v2.exe

 
Latest 20 of 29 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.