eset-nod32-antivirus.en.softonic.com (Softonic International) domain information

Server location:

Catalonia, Spain (ES)

ASN:

AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:

softonic.com

Registered by:

Softonic International

Scanner detections:

Adware/unwanted app distribution

Scan engine

Details

Detections

Malwarebytes

PUP.Optional.Softonic.A

100.00%

Trend Micro House Call

TROJ_GEN.F47V1011

100.00%

Dr.Web

Adware.Downware.1515

100.00%

VIPRE Antivirus

Softonic Downloader

100.00%

ESET NOD32

Win32/SoftonicDownloader (variant)

100.00%

Reason Heuristics

Bundler.PPI.Softonic.l

100.00%

The domain eset-nod32-antivirus.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13

April 13, 2016

File downloads found at URLs served by eset-nod32-antivirus.en.softonic.com.

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (zazq++sm.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (ese5285.tmp.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

6 / 68 (PUP)

http://eset-nod32-antivirus.en.softonic.com/universaldownloader-launch (softonicdownloader_for_eset-nod32-antivirus.exe)

0 / 68

http://eset-nod32-antivirus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANvBD2FYrkBUc1ARGAqgf1AeUYzNtjRLX8B/emHfZOrpZ3LEmX8e0DUabLlkdNUGpyz/CkyhR1X3/0tGWkvAeYPi0/.../L0wXcZGaeeSM2Xfu6aIWSpXMiF3gx9DdPhiXjOTuBlvBjJL4vQ9XwaUHldQyIMfqzzJvr0O0HKQmVPw== (eset_nod32_antivirus_live_installer_.exe)

The following 4 files have been seen to comunicate with eset-nod32-antivirus.en.softonic.com in live environments.

TCP » 46.28.209.13:80

OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80

kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80

Client.exe

TCP » 46.28.209.13:80

WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

eset-nod32-antivirus.en.softonic.com

Domain Information