home

files5.safedownload20.com

Domain Information

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
safedownload20.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.Tightrope
100.00%

VIPRE Antivirus
Threat.4783369
100.00%

Zillya! Antivirus
Downloader.Agent.Win32.239245
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Total Defense
Win32/Tnega.TNECKHC
100.00%

avast!
Win32:DownloadAdmin-H [PUP]
100.00%

Clam AntiVirus
Win.Trojan.Downloadadmin
100.00%

F-Secure
Adware:W32/WebInstallBundle
100.00%

Dr.Web
Trojan.Vittalia.27
100.00%

Avira AntiVirus
APPL/DownAdmin.prfb
100.00%

Vba32 AntiVirus
Downloader.Agent
100.00%

ESET NOD32
Win32/DownloadAdmin.I potentially unwanted application
100.00%

IKARUS anti.virus
PUA.DownloadAdmin
100.00%

AVG
Generic
100.00%

McAfee
Trojan.Artemis!21BE239D5B71
100.00%

The domain files5.safedownload20.com has been seen to resolve to the following 2 IP addresses.

50.22.63.140
50.22.63.140-static.reverse.softlayer.com
April 7, 2015

50.22.63.138
50.22.63.138-static.reverse.softlayer.com
April 7, 2015

File downloads found at URLs served by files5.safedownload20.com.

17 / 68    (Adware)
http://files5.safedownload20.com/download/.../dl?bc=1085934&pid=ytz&brand=ytz.com&p_tid=8710BDjzyJ&cb=-400035753&osName=Windows&osVersion=Vista&browserName=IE&browserVersion=9&zTmp=1[esihost:no]  (vlcmediaplayer-setup.exe)

The following 164 files have been seen to comunicate with files5.safedownload20.com in live environments.

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.138:80
updateadmin.exe

TCP » 50.22.63.138:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.140:80
updateadmin.exe

TCP » 50.22.63.140:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
netdownloader.exe

TCP » 50.22.63.140:80
netdownloader.exe

TCP » 50.22.63.140:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
updateadmin.exe

 
Latest 20 of 200 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.