home

image-to-pdf.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Downloader.zxt2007.Installer.Meta (M), Adware.Bundler.YeYizhou.Installer.Meta (M), PUP.Softonic.Bundler (M), PUP.Softonic (M)
100.00%

Qihoo 360 Security
HEUR/QVM06.1.0000.Malware.Gen
11.11%

The domain image-to-pdf.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
April 12, 2016

File downloads found at URLs served by image-to-pdf.en.softonic.com.

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_image-to-pdf.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANyD/nHXpj BX0jrodTBLp8nWC0gku9MYmCX2jqWhYS5gvBpMOzGGRlx4R/zRG9h49Y9qyoA0I2cxaJuIWI5B5UEzfM7JZU1nmbCOYg4jvsh /Et4twIUIiwO8kzgPYBx2AZ8dHhGuVS1xvYByLIKAUwcLt PkyVDSIPAeBsdP/A15/89P2hYjrtt7r6Ip9TYNCSy5ertEWTWvFz hsC/OLw4vG/kl5AOREExyv10M66iLxc0lk7GBD9 f5eywr6BtxUlQw7x DOgiXXsHMRCbHvUYCskwjnar3F DWcpCBs4vfJanrY8WobkyB0LVKTnujTwAkhGYd6I7LXCSkJrPXTp5d Ls11X20kvqjZ WCOLxKbHSxKZClL3oeMyPolCKWTsNI1vRLsG/1BU YVA7vqwZjKVDAtFfQgoXRQxwOhl3n xOBOXliF6xKtvTWVcpXBR/084UNMRBzwi7CmE 9mxftYcUkLVAkcoJjWnsJDzDibjUYaFRU4sOH3B9yOLRSHtA4nI3RCfcJs5MZhlNP TmoZ7l10/2H/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

2 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_image-to-pdf.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

1 / 68      (PUP)
http://image-to-pdf.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPm/eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imbect25BwYv5 8B6DmB31WczN1si2Sv/Xa/.../QGf5VM6mYNPAYP8=  (imagetopdf_setup.exe)

The following 4 files have been seen to comunicate with image-to-pdf.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.