» www.windows-movie-maker.org
Overview
Analysis
IPs Addresses (1)
Downloads (9)
Network (9)
Website Detail
Statistics
Related Domains (5)

www.windows-movie-maker.org

Windows-Movie-Maker.org

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in West Union, Ohio within the United States which resides on the WebNX, Inc. network.

Registrant:

Windows-Movie-Maker.org

Registrar:

GoDaddy.com, LLC

Server location:

Ohio, United States (US)

ASN:

AS18450 WEBNX - WebNX, Inc.

Root domain:

windows-movie-maker.org

Whois:

3 windows-movie-maker.org records

Scanner detections:

Detections (52% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.SomotoIsrael.X, PUP.Installer.JiangsuCN, PUP.JiangsuCN.NanjingAodimuTech.Installer (M), PUP.Somoto.SomotoIsrael.Bundler (M), PUP.Somoto.SomotoIs.Bundler (M), PUP.InstallCore.RE11 (M), PUP.Somoto (M)

77.42%

ESET NOD32

Win32/Somoto, Win32/InstallMonetizer.AU, Win32/DownWare

16.13%

Dr.Web

Trojan.MulDrop5.5748, Win32.Runonce.6652

12.90%

ESET NOD32

Win32/DownWare.W potentially unwanted application, Win32/Chir.B virus, Win32/Somoto.N potentially unwanted application

12.90%

Kaspersky

Email-Worm.Win32.Runouce, not-a-virus:HEUR:Downloader.NSIS.Mazel

9.68%

Norman

Win32.Runouce.B@mm, Application.Bundler.Somoto.I

9.68%

Microsoft Security Essentials

Threat.Undefined

6.45%

avast!

Win32:Oncer

6.45%

F-Secure

Win32.Runouce.B@mm

6.45%

F-Prot

W32/Thecid.B@mm

6.45%

Vba32 AntiVirus

BScope.Downware.InstallMonstr

3.23%

Avira AntiVirus

TR/Trash.Gen

3.23%

Malwarebytes

PUP.Optional.Somoto.A

3.23%

K7 AntiVirus

Unwanted-Program

3.23%

NANO AntiVirus

Trojan.Nsis.Mazel.cwhyud

3.23%

The domain www.windows-movie-maker.org has been seen to resolve to the following IP address.

216.158.76.90

216-158-76-90.static.webnx.com

January 3, 2014

File downloads found at URLs served by www.windows-movie-maker.org.

0 / 68

http://www.windows-movie-maker.org/.../windows-movie-maker-free.exe (6fb4dec88a941fc9bb0aeb6800c892e0)

1 / 68 (Adware)

http://www.windows-movie-maker.org/.../windows-movie-maker-setup_downloader-0yFYYY9N.exe (c9b7a5c695c5698751508e5881fa2648)

1 / 68 (Adware)

http://www.windows-movie-maker.org/.../windows-movie-maker-setup_downloader-bwoZtBYH.exe (e2bec6eb7cf9583c4243087d9f8ebfa8)

1 / 68 (Adware)

http://www.windows-movie-maker.org/.../windows-movie-maker-setup_downloader-89aqiknj.exe (5a4c50e640dd531db8b068fcee8699ab)

0 / 68

http://www.windows-movie-maker.org/.../windows-movie-maker-clean.exe (9111c285e0a92f45964995241433e49f)

1 / 68 (Adware)

http://www.windows-movie-maker.org/.../windows-movie-maker-setup_downloader-2maXxsT6.exe (bae4d3e78fdb5f240c3e69606cdc1c96)

1 / 68 (Adware)

http://www.windows-movie-maker.org/.../windows-movie-maker-setup_downloader-5Ypo3lXa.exe (c67175610ce682c33e6a7fc8db7f01cc)

0 / 68

http://www.windows-movie-maker.org/.../windows-movie-maker.exe (windows-movie-maker-free.exe)

1 / 68 (false positive)

http://www.windows-movie-maker.org/.../wlsetup-web.exe (fd16c47494166590f41c2db1365ad13f)

The following 9 files have been seen to comunicate with www.windows-movie-maker.org in live environments.

TCP » 216.158.76.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.158.76.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.158.76.90:80

uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 216.158.76.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.158.76.90:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 216.158.76.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.158.76.90:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 216.158.76.90:80

vosteran.exe

TCP » 216.158.76.90:80

browser.exe (Speed Browser by Long Mile Solutions)

URL:

http://www.windows-movie-maker.org/

Google Analytics:

UA-4398245

Title:

“Windows Movie Maker Free Download”

Web server:

Microsoft-IIS/7.5 (ASP.NET)

Facebook:

Likes: 262

Shares: 2,495

Comments: 214

Statistics are for the previous month.

Related Domains

windows-dvd-maker.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.