» iringer.en.softonic.com
Overview
Analysis
IPs Addresses (1)
Downloads (11)
Network (4)
Related Domains (4)

iringer.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.

Server location:

Catalonia, Spain (ES)

ASN:

AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:

softonic.com

Registered by:

Softonic International

Scanner detections:

Detections (82% detected)

Scan engine

Details

Detections

Reason Heuristics

Bundler.PPI.Softonic.m, Bundler.PPI.Softonic.EE, PUP.Softonic.Bundler (M), Bundler.SoftonicDownloader (M), PUP.Softonic (M)

90.00%

Trend Micro House Call

TROJ_GEN.F47V0327, TROJ_GEN.F47V0806, TROJ_GEN.F47V0508, TROJ_GEN.F47V1126

40.00%

VIPRE Antivirus

Softonic Downloader

40.00%

ESET NOD32

Win32/SoftonicDownloader (variant)

40.00%

Dr.Web

Adware.Downware.2454, Adware.Downware.1328, Adware.Downware.1132, Adware.Downware.2760

40.00%

McAfee

Artemis!0B1693B8ACFB, Artemis!CC9C68171682, Artemis!A665B28A85D2

30.00%

Malwarebytes

PUP.Optional.Softonic.A

30.00%

Baidu Antivirus

Adware.Win32.SoftonicDownloader

20.00%

Rising Antivirus

PE:Malware.Obscure/Heur!1.9E03

20.00%

Fortinet FortiGate

Riskware/Softonicdownloader, Adware/SoftonicDownloader

20.00%

Bkav FE

W32.Clod543.Trojan, HW32.Laneul

20.00%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

10.00%

F-Secure

Application:W32/Generic.70053c248f!Online

10.00%

Comodo Security

Application.Win32.Agent.SOFE

10.00%

Agnitum Outpost

PUA.Softonic

10.00%

The domain iringer.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13

April 14, 2014

File downloads found at URLs served by iringer.en.softonic.com.

1 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

1 / 68 (Adware)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

2 / 68 (false positives)

http://iringer.en.softonic.com/universaldownloader-launch (wrar420.exe)

1 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

8 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

6 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

1 / 68 (Adware)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

1 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

0 / 68

http://iringer.en.softonic.com/download-tracker?th=1/.../AdQPi7FT9bDAETODVC7YMx8GvFRgSrqU6u2CM7CQ0hDjJ8dE2fvA l6X5WbIRkkgWpXg8= (iRinger.exe)

11 / 68 (Adware)

http://iringer.en.softonic.com/universaldownloader-launch (softonicdownloader_for_iringer.exe)

13 / 68 (PUP)

http://iringer.en.softonic.com/universaldownloader-launch (SoftonicDownloader.exe )

The following 4 files have been seen to comunicate with iringer.en.softonic.com in live environments.

TCP » 46.28.209.13:80

OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80

kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80

Client.exe

TCP » 46.28.209.13:80

WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.