home

codecpack.descargar.es

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.,ES

Root domain:
descargar.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FormulaEFTEuropaSL.a, PUP.100BlogsSL.a, PUP.installCore.ExtendedSetup (M), PUP.installCore.ISfreemium (M), PUP.Vittalia.100Blogs.Bundler (M), PUP.installCore.WorldSet (M), PUP.installCore.MaxSetup (M), PUP.Vittalia.Bundler (M), PUP.installCore (M)
100.00%

Malwarebytes
PUP.Optional.Europa, PUP.Optional.InstallCore
22.22%

VIPRE Antivirus
Vittalia Installer, InstallCore.b
22.22%

Qihoo 360 Security
Malware.QVM10.Gen, Win32/Virus.Adware.f76
22.22%

Dr.Web
Trojan.FakeAV.17377
11.11%

ESET NOD32
Win32/InstallCore.MW
11.11%

McAfee
Artemis!D2CFE8BA58A5
11.11%

Trend Micro House Call
TROJ_GEN.F47V0428
11.11%

Agnitum Outpost
PUA.InstallCore
11.11%

Comodo Security
Application.Win32.InstallCore.HYE
11.11%

Avira AntiVirus
Adware/InstallCore.144181
11.11%

Sophos
Install Core Click run software
11.11%

Vba32 AntiVirus
Downware.InstallCore
11.11%

Fortinet FortiGate
Riskware/InstallCore
11.11%

AVG
Generic_c
11.11%

The domain codecpack.descargar.es has been seen to resolve to the following 5 IP addresses.

109.70.130.155
155.130.70.109.factoriadigital.com
June 6, 2016

185.47.13.82
January 31, 2016

185.57.173.188
January 31, 2016

93.189.35.250
April 11, 2014

93.189.35.249
April 11, 2014

File downloads found at URLs served by codecpack.descargar.es.

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=ADCASH&trckid=u6dba7bc051f3a97b4ba4448fc2  (installer_codepack_english.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/down.php?p=ADCASH&trckid=ubea17b705250c7b36f50c05a6b  (installer_codepack_spanish.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA&trckid=MTU3fDY4MHxCUnwzfDF8fGEyVjVkMjl5WkEqVzA1RVUxMVFiMnRsYlc5dUlHUnBZVzF2Ym1RZ0tFVlZLUzV5WVhJdWNtRnk|6eced7b5e540a6d8520d4834ab52ba27  (installer_codepack_english.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA&trckid=MTU3fDY4MHxCUnwzfDF8fGEyVjVkMjl5WkEqVUc5clpXMXZiaTVGYldWeVlXeGtMbEJ2Y25SMVozWERxbk11ZW1sdw|6eced7b5e540a6d8520d4834ab52ba27  (installer_codepack_english.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA&trckid=MTU3fDY4MHxCUnwzfDF8fGEyVjVkMjl5WkEqVUc5clpXMXZiaTVGYldWeVlXeGtMbEJ2Y25SMVozWERxbk11ZW1sdw|6eced7b5e540a6d8520d4834ab52ba27  (installer_codepack_english.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA-MTU3fDY4MHxCUnwzfDF8fA|6eced7b5e540a6d8520d4834ab52ba27  (installer_codepack_english.exe)

1 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=ADCASH&trckid=15834030501391084233  (installer_codepack_english.exe)

16 / 68    (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA-MTU3fDY4MHxCUnwzfDF8fGEyVjVkMjl5WkEqYm5SbWMzVnVaR1ZzWlhSbExtVjRaUQ|6eced7b5e540a6d8520d4834ab52ba27  (00af0c1f96b8bcb71599cb8504e83f43.exe)

5 / 68      (Adware)
http://codecpack.descargar.es/.../down.php?p=BR-ADSTERRA-MTU3fDY4MHxCUnwzfDF8fGEyVjVkMjl5WkEqYm5SbWMzVnVaR1ZzWlhSbExtVjRaUQ|6eced7b5e540a6d8520d4834ab52ba27  (86b61452dc4c8d921923cfd2d5a542f3.exe)

The following 6 files have been seen to comunicate with codecpack.descargar.es in live environments.

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
cyberclient.exe (CyberPlanet by Proyecto Redes)

TCP » 109.70.130.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.