» www.pcappfree.com
Overview
Analysis
IPs Addresses (6)
Downloads (44)
Network (29)

www.pcappfree.com

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain www.pcappfree.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Virginia, United States (US)

Create date:

Thursday, August 21, 2014

Expires date:

Sunday, August 21, 2016

Updated date:

Tuesday, July 28, 2015

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Whois:

2 pcappfree.com records

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ICSSetup.W, PUP.installCore.ICSSetup.Installer (M), PUP.NewMedia.Installer.New Media Holdings.Installer (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.installCore (M), PUP.NewMedia.NMH (M)

100.00%

Dr.Web

Trojan.Packed.28501, Trojan.InstallCore.33

12.82%

VIPRE Antivirus

Threat.4788237, Threat.4150696, Threat.4786018

12.82%

ESET NOD32

Win32/InstallCore.NF potentially unwanted application, Win32/InstallCore.RA potentially unwanted application, Win32/InstallCore.UE potentially unwanted application

12.82%

K7 AntiVirus

Unwanted-Program

12.82%

Sophos

Install Core Click run software, PUA 'Install Core Click run software'

12.82%

AVG

Generic

12.82%

Avira AntiVirus

ADWARE/InstallCore.Gen9, Adware/InstallCore.Y, Adware/InstallCo.zkt

12.82%

G Data

Win32.Adware.InstallCore.BV, Win32.Application.InstallCore.CZ

12.82%

NANO AntiVirus

Riskware.Win32.InstallCore.dimzee, Trojan.Text.Drop.dhqaos, Trojan.Win32.InstallCore.dlnpbb

10.26%

Vba32 AntiVirus

Malware-Cryptor.InstallCore.gen

5.13%

avast!

PUP-gen [PUP], Malware-gen

5.13%

IKARUS anti.virus

AdWare.InstallCore

5.13%

Comodo Security

Application.Win32.NewMedia.VDO

5.13%

Bkav FE

W32.HfsAdware

5.13%

The domain www.pcappfree.com has been seen to resolve to the following 6 IP addresses.

209-99-40-223.fwd.datafoundry.com

September 2, 2016

ec2-52-7-132-182.compute-1.amazonaws.com

January 31, 2016

ec2-107-23-203-23.compute-1.amazonaws.com

December 5, 2015

ec2-54-84-143-69.compute-1.amazonaws.com

June 30, 2015

ec2-54-172-110-87.compute-1.amazonaws.com

November 29, 2014

ec2-54-165-185-67.compute-1.amazonaws.com

September 28, 2014

File downloads found at URLs served by www.pcappfree.com.

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzMRNZAzATn0ASDPDdlChV8dNTiRAjczAj7y&campaignId=9jn0ATCRNzL4AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV81AT71NTnzAT7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzndOZazATn0ASDPDdlChV8FOTMwAZczAj7y&campaignId=9jn0AjMFOZg0AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzL1NjiwAzn0ASDPDdlChV8yAZc0NjnRATMz&campaignId=9jn0AjaRAjiyAZMq (windowsmoviemaker_setup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sxSDj rcWDK4m7z0RvmiWAkDjIKiWXzA1OZazATn0ASDPDdlChV80OTgyOT7zAj7y&campaignId=9jn0ATcROTM0AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1rLQDj rcWDK4m7z0RvmiWAkDjIKiWXzc3OZazATn0ASDPDdlChV83NzgwATczAj7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzC1OZazATn0ASDPDdlChV8yNzL4OT7zAj7y&campaignId=9jn0ATCFNzAyAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzLyOTLyATn0ASDPDdlChV8wATawNznzAT7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV8dAT71NTnzAT7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV81AT71NTnzAT7y&campaignId=9jn0ATCzOTL0AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXziwAzg4Ajn0ASDPDdlChV84ATiyAjL4AZMz&campaignId=9jn0AjM4ATawAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV81AT71NTnzAT7y&campaignId=9jn0AjM1NzC4AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzn3OTc4Ajn0ASDPDdlChV80OZC3OZi4AZMz&campaignId=9jn0ATgROZcdAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1ZSkDj rcWDK4m7z0RvmiWAkDjIKiWXz71OZazATn0ASDPDdlChV80Nji1OT7zAj7y&campaignId=9jn0AjMFOTawAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vVkDj rcWDK4m7z0RvmiWAkDjIKiWXzC3OZazATn0ASDPDdlChV84AjMzATczAj7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV81AT71NTnzAT7y&campaignId=9jn0AjM4NZ7yAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzgdOZazATn0ASDPDdlChV80OTa3AZczAj7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzC1OZazATn0ASDPDdlChV8FNTC3OT7zAj7y&campaignId=9jn0ATc4NjcyAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1CDSDj7z1nxSDj rcWDrLm7z0RvmiWAkDjIKiWXziRNZAzATn0ASDPDdlChV8dOZa0AjczAj7y&campaignId=9jn0ATcFNTCwAZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzgFAZ7yATn0ASDPDdlChV8wATM4OZnzAT7y&campaignId=9jn0AjnFNTAyAZMq (windowsmoviemaker_setup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzMRNZAzATn0ASDPDdlChV84AzcwAjczAj7y&campaignId=9jn0Ajn3Nja0AZMq (windowsmoviemaker_setup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzg0OZLyATn0ASDPDdlChV84AT71NTnzAT7y (windowsmoviemakersetup.exe)

0 / 68

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzgdOZazATn0ASDPDdlChV8RNz7dAZczAj7y&campaignId=9jn0ATcRNziyAZMq (MM26_ENU.msi)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzLyOTLyATn0ASDPDdlChV8RATawNznzAT7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1rLQDj rcWDK4m7z0RvmiWAkDjIKiWXzc3OZazATn0ASDPDdlChV8yAZnRATczAj7y (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzn3OZazATn0ASDPDdlChV8FAjA4AZczAj7y&campaignId=9jn0AjazOTCdAZMq (windowsmoviemaker_setup.exe)

0 / 68

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXziwAzg4Ajn0ASDPDdlChV84ATiyAjL4AZMz&campaignId=9jn0AjM4OZcdAZMq (MM26_ENU.msi)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXziwAzg4Ajn0ASDPDdlChV84ATiyAjL4AZMz&campaignId=9jn0AjM4OZC0AZMq (windowsmoviemakersetup.exe)

1 / 68 (Adware)

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sLQDj rcWDK4m7z0RvmiWAkDjIKiWXzA1OZLyATn0ASDPDdlChV8RNZ71NTnzAT7y (windowsmoviemakersetup.exe)

0 / 68

http://www.pcappfree.com/?dl=1&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzgFAZ7yATn0ASDPDdlChV8wATM4OZnzAT7y&campaignId=9jn0AT7zOZiwAZMq (MM26_ENU.msi)

Latest 30 of 44 download URLs

The following 29 files have been seen to comunicate with www.pcappfree.com in live environments.

TCP » 209.99.40.223:80

UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80

hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.223:80

online-guardian-v2.0.9.exe

TCP » 209.99.40.223:80

svcspwin.exe (WinsPop Enterprise Super V 2.0 by agir)

TCP » 209.99.40.223:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.223:80

ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.223:80

ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 209.99.40.223:80

ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 209.99.40.223:80

apptrailers.exe

TCP » 209.99.40.223:80

kmspico10.2.1__8174_il3.exe

TCP » 209.99.40.223:80

kmspico10.2.1__8174_il17.exe

TCP » 209.99.40.223:443

online-guardian.exe

TCP » 209.99.40.223:56666

emuletorrent.exe

TCP » 209.99.40.223:25

TCP » 209.99.40.223:80

DTSRVC.exe (DTSRVC by Portrait Displays)

Latest 20 of 33 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.