» b.softologic.com
Overview
Analysis
IPs Addresses (7)
Downloads (39)
Network (21)
Website Detail
Related Domains (8)

b.softologic.com

Softango Technology LLC (via a Proxy Registrant)

Domain Information

The domain b.softologic.com is registered by proxy through Moniker Online Services and was originally registered in June of 2011. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is part of a DNS service that utilizes a number of reverse proxy IP Addresses (see below). The domain is associated with the publisher Softango Technology LLC who is located in Beaverton, Oregon in the United States.

Registrant:

Moniker Privacy Services on behalf of Softango Technology LLC

Registrar:

Moniker Online Services

Server location:

New York, United States (US)

Create date:

Thursday, June 30, 2011

Expires date:

Thursday, June 30, 2016

Updated date:

Tuesday, December 22, 2015

ASN:

AS62567 DIGITALOCEAN-ASN-NY2 - Digital Ocean, Inc., US

Root domain:

softologic.com

Whois:

3 softologic.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Win.Reputation, PUP.Installer.Performersoft.T, PUP.Performersoft.Bundler (M), PUP.Performersoft.YellowSo.Bundler (M), PUP.Performersoft (M)

100.00%

F-Prot

W32/IBrain.D.gen, W32/IBrain.C.gen

17.95%

avast!

Win32:Malware-gen, Win32:InstallBrain-BC [PUP], Win32:PUP-gen [PUP], Win32:Adware-gen [Adw]

17.95%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.BrainInst, not-a-virus:AdWare.Win32.BrainInst

17.95%

Fortinet FortiGate

Adware/InstallBrain.OP, Adware/BrainInst

17.95%

Trend Micro House Call

TROJ_GEN.F47V1122, ADW_PCOPTIMZER, TROJ_GEN.F47V0402

17.95%

Total Defense

Win32/Tnega.BRRKCQ, Win32/Tnega.XWeCRHB, Win32/Tnega.ATFN

17.95%

AhnLab V3 Security

Trojan/Win32.Brantall, Adware/Win32.BrainInst, Downloader/Win32.Agent

17.95%

MicroWorld eScan

Application.Bundler.InstallBrain.A

17.95%

Bitdefender

Application.Bundler.InstallBrain.A

17.95%

Zillya! Antivirus

Adware.BrainInst.Win32.63, Downloader.BrainInst.Win32.14, Downloader.BrainInst.Win32.2

17.95%

Qihoo 360 Security

Malware.QVM10.Gen

17.95%

Quick Heal

TrojanDownloader.Brantall.A5, TrojanDownloader.Brantall.b

15.38%

McAfee

RDN/Generic PUP.x!bpg, PUP-FDT!62DFC7C3DE7D, PUP-FDT!C9D4600CD9C9

15.38%

Malwarebytes

Adware.InstallBrain

15.38%

The domain b.softologic.com has been seen to resolve to the following 7 IP addresses.

107.170.2.22

nxdomain.dnsmadeeasy.com

September 14, 2016

52.70.175.181

ec2-52-70-175-181.compute-1.amazonaws.com

February 13, 2016

54.235.159.97

ec2-54-235-159-97.compute-1.amazonaws.com

January 6, 2016

50.97.37.140

50.97.37.140-static.reverse.softlayer.com

December 26, 2013

50.22.188.88

50.22.188.88-static.reverse.softlayer.com

December 26, 2013

50.23.163.176

December 26, 2013

184.173.191.240

December 26, 2013

File downloads found at URLs served by b.softologic.com.

1 / 68 (PUP)

http://b.softologic.com/.../$oecZdJlsIQYpjR4i?exename=CodecPerformerSetup&cid=3975&clickid=0030182234613302330&a=1 (codecperformersetup.exe)

1 / 68 (Adware)

http://b.softologic.com/.../$n8Ime5lscQI1ljA ?exename=VideoPerformerSetup&cid=266&clickid=0007284744693665743&orig_client=BIDVERDISPCLN-349820 (VideoPerformerSetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$vNksQplsIQJgkAsp?exename=BestCodecsPackSetup&cid=3932&clickid=0044559874684116836 (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$uP0BQJlsIQJgiwws?exename=BestCodecsPackSetup&cid=3932&clickid=0036410504648990718 (bestcodecspacksetup.exe)

1 / 68 (Adware)

http://b.softologic.com/.../$mfkoX5A3I0Jnjg0W?exename=CodecPerformerSetup&cid=4274&clickid=0040797974715767938&a=4 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$ldsmW5A3ZUAkgSEw?exename=CodecPerformerSetup&cid=4105&tid=HHCrCTI3RgBT0VgBAAAAABobVwAAAAAAAgBwAAYAAAAAAP8AAAACEvt7WgAAAAAAvZpNAAAAAADzzG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA-GBcAAAAAAAIAAwAAgD8AuxVx4EABAAAAAAAAADU0ZTIxNjZjLTE0MTEtMTFlMy1iNzUxLTJiMDU2Y2U3NjI4NgAAAAAAAAA=,eJzzC4oILXNNT8.2cPMMyMwxMMk1r8j3s.R0MQksdzH3c8.Js0wDAN1AC8Y= (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$lfsKaplsIQJgjSYX?exename=BestCodecsPackSetup&cid=3932&clickid=0039090124658583814 (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$qvkvfplsIVplnxU0?exename=BestCodecsPackSetup&cid=3921&clickid=0044700514700485392&orig_client=BIDVERREDIRECT-1100042_4889467 (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$jc8Ie5lscQI1vx8M?exename=VideoPerformerSetup&cid=266&clickid=0006925964643707808&orig_client=1069664 (videoperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$nMQKQ5A3I04gsTQZ?exename=AudioPerformerSetup&cid=4255&g=1&clickid=00002492p4646619355 (audioperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/.../aplscQI1vg8T?exename=VideoPerformerSetup&cid=266&clickid=0017940284692030372&orig_client=1210506 (videoperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/$h/.../kBcJ?exename=AudioPerformerSetup&cid=4254&g=2&clickid=00003199p4683848036 (audioperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$gOEqeJlscQIhlwo8?exename=PCPerformerSetup&cid=262&tid=nym1CN7i687wvP7LPBACGO_zur7zorizKSIOMTc5LjIzNi4xNTYuODYoAQ.. (pcperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$pcAKRplsIQYpqw0Y?exename=CodecPerformerSetup&cid=3975&clickid=0043006934690900573&orig_client=SENDSP468X60 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/.../lQQd?exename=VideoPerformerSetup&cid=4164&clickid=00002706p4719852708&orig_client=PLYMEDIAAPNX1-6713 (videoperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$jvsKbJlscAdhqAMI?exename=VideoPerformerSetup&cid=3862&tid=AAAAAFGjSQCuBlABAAAAAIGkXgAAAAAAAgAgAAAAAAAAAP8AAAACDM4zdQAAAAAAYSB1AAAAAACv.XYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOhkAAAAAAAICAwAAgD8ABmlN30ABAAAAAAAAAGQzNTdkNTBlLTEzZTQtMTFlMy1hMTgwLTEwNjA0YjlkOTFjOAAAAAAAAAA=,eJwLrMpycTIJTc.2cMmI0CsJzPdPdfL2DUlxCzEz8Iw0M6wotNAFANrqC2I= (videoperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$udwIdJlsIQYptwoo?exename=CodecPerformerSetup&cid=3975&clickid=0042951924684860033&orig_client=PUT300X250 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/.../48b5lsKwJlnBQX?exename=PCPerformerSetup&cid=3750&tid=T.9hAHuvRQC2RFgBAAAAAJvyXQAAAAAAAgAEAAYAAAAAAP8AAAAHFSHIZwAAAAAAVBEyAAAAAACbPXYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0dRgAAAAAAAIAAwAAgD8A7avE1kABAAAAAAAAADc1ZmQxNTdhLTEyOTctMTFlMy1iZGQxLTViMjg0NTFhMzZiYwAAAAAAAAA=,eJwL8qm0NEpMT88zdvLPjA8yd3f1KXArjfQ0itczSjcqNwy3SNYFANWDCys= (pcperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/.../jRM4?exename=CodecPerformerSetup&cid=4128&clickid=00002706p4683531909&orig_client=PLYMEDIAAPNX1-6678 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$vNQBR5lscQI1igoI?exename=VideoPerformerSetup&cid=266&clickid=0030635214653063045&orig_client=BIDVERDISPCLN-1337532 (videoperformersetup.exe)

1 / 68 (Adware)

http://b.softologic.com/.../$iNoEZZA3I0JnvSQx?exename=CodecPerformerSetup&cid=4274&clickid=0040797974700673715&a=4 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$vtk3bpA3ZUMjrAMZ?exename=PCPerformerSetup&cid=4159&clickid=0034530574724847510&dfpid=101102745 (pcperformersetup.exe)

1 / 68 (Adware)

http://b.softologic.com/.../$r88gWZA3I0JnsA0f?exename=CodecPerformerSetup&cid=4274&v=11&clickid=0010123344614547772 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$uN0AdZlsIQYpsAUv?exename=CodecPerformerSetup&cid=3975&clickid=0020089664704658910&orig_client=BIDVERDISPCLN-1275588 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/download/.../rwki?exename=CodecPerformerSetup&cid=4128&clickid=00002492p4725315856&orig_client=PLYMEDIA1-6679 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$mOcmYJA3ZUMklB4i?exename=CodecPerformerSetup&cid=4150&clickid=0042951924669100230&orig_client=PUT300X250&abc=3 (codecperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$gMI7TpA3Ik5oogEQ?exename=VideoPerformerSetup&cid=4079&tid=HHCrCRnzSADfYVgBAAAAAM.XXgAAAAAAAwAYAKcBAAAAAP8AAAABDvz5bAAAAAAAu6IcAAAAAACYMncAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB-pRgAAAAAAAIAAwAAgD8AJzGK2EABAAAAAAAAAGE5YTE1MmYyLTEyZGMtMTFlMy1hZjU2LTNjZDkyYmYyYjBjNAAAAAAAAAA=,eJwrTMvUC.Y2yMqNMM8oSQzNzfDMN8gPdqyMTzF0dA-PKnNP8tUFAObBDDQ= (videoperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$vNoYbplscQIhoi8R?exename=PCPerformerSetup&cid=262&tid=ams1CL7JiM-bi53AMRACGJ_x-8PK78nSLCILOTAuMjQuNi4xNDAoAQ.. (pcperformersetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$j AKZ5lsIQJgvTES?exename=BestCodecsPackSetup&cid=3932&clickid=0005995614713186621 (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://b.softologic.com/.../$vNsKQplscQI1sg4R?exename=VideoPerformerSetup&cid=266&clickid=0019290124630417251&orig_client=BIDVERDISPCLN-1255322 (videoperformersetup.exe)

Latest 30 of 39 download URLs

The following 21 files have been seen to comunicate with b.softologic.com in live environments.

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:80

savefromnethelper-web-8cf4d1779b-.exe

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

online-guardian-v2.0.9.exe

TCP » 107.170.2.22:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:443

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:80

savefromnethelper-web-7c8097d276-.exe

TCP » 107.170.2.22:25

init.exe

TCP » 107.170.2.22:80

uncheckitupdate.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.235.159.97:80

videoperformersetup.exe (Installer)

TCP » 54.235.159.97:80

videoperformersetup.exe (Installer)

TCP » 54.235.159.97:80

CodecPerformerSetup.exe (CodecPerformer)

Latest 20 of 26 files

URL:

http://b.softologic.com/

Title:

“Non-Existent Domain”

Web server:

nginx/1.8.0 (PHP/5.3.29)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.