home

files5.safelink01.com

Domain Information

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
safelink01.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Tightrope
100.00%

VIPRE Antivirus
Threat.4783369
100.00%

Dr.Web
Adware.Downware.2220
100.00%

F-Secure
Adware:W32/WebInstallBundle
100.00%

Clam AntiVirus
Win.Adware.Downloadadmin
100.00%

Sophos
PUA 'DownloadAdmin' (of type Adware)
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.Downware.djahkt
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Comodo Security
Application.Win32.DownloadAdmin.ANGL
100.00%

Avira AntiVirus
ADWARE/Adware.Gen
100.00%

AhnLab V3 Security
PUP/Win32.Downware
100.00%

Vba32 AntiVirus
Downloader.Agent
100.00%

ESET NOD32
Win32/DownloadAdmin.H potentially unwanted application
100.00%

The domain files5.safelink01.com has been seen to resolve to the following 2 IP addresses.

50.22.63.138
50.22.63.138-static.reverse.softlayer.com
February 9, 2015

50.22.63.140
50.22.63.140-static.reverse.softlayer.com
February 9, 2015

File downloads found at URLs served by files5.safelink01.com.

16 / 68    (Adware)
http://files5.safelink01.com/dl?bc=1124746&c=landingpage&brand=getgimp.com&geo  (gimp-setup.exe)

The following 164 files have been seen to comunicate with files5.safelink01.com in live environments.

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.138:80
updateadmin.exe

TCP » 50.22.63.138:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.140:80
updateadmin.exe

TCP » 50.22.63.140:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
netdownloader.exe

TCP » 50.22.63.140:80
netdownloader.exe

TCP » 50.22.63.140:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
update_14.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
updateadmin.exe

 
Latest 20 of 200 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.