home

kuaiwan.softonic.cn

Domain Information

Server location:
Shanghai, China (CN)

ASN:
AS4812 CHINANET-SH-AP China Telecom (Group)

Root domain:
softonic.cn

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ExtendedSetup.X, PUP.installCore.ISfreemi (M), PUP.InstallCore.ENG (M)
100.00%

Dr.Web
Trojan.Packed.24524, Adware.InstallCore.124
66.67%

VIPRE Antivirus
Threat.4837543, InstallCore
66.67%

F-Prot
W32/InstallCore.Z.gen, W32/InstallCore.R3.gen
66.67%

Sophos
Install Core Click run software
66.67%

Comodo Security
Application.Win32.InstallCore.IC, Application.Win32.InstallCore.AS
66.67%

Avira AntiVirus
ADWARE/InstallCore.Gen7
66.67%

Vba32 AntiVirus
Downware.InstallCore
66.67%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
66.67%

ESET NOD32
Win32/InstallCore.BY potentially unwanted application
33.33%

SUPERAntiSpyware
PUP.InstallCore/Variant
33.33%

Baidu Antivirus
Adware.Win32.InstallCore
33.33%

AVG
InstallC
33.33%

Qihoo 360 Security
Win32/Virus.Adware.94c
33.33%

Bkav FE
W32.Clod00e.Trojan
33.33%

The domain kuaiwan.softonic.cn has been seen to resolve to the following 2 IP addresses.

46.28.209.20
commoncobs.softonic.com
June 20, 2016

211.152.62.37
www.softonic.cn
June 5, 2014

File downloads found at URLs served by kuaiwan.softonic.cn.

14 / 68    (PUP)
http://kuaiwan.softonic.cn/universaldownloader-launch  (download_manager_299803.exe)

1 / 68      (Adware)
http://kuaiwan.softonic.cn/universaldownloader-launch  (download_manager_299803.exe)

14 / 68    (Adware)
http://kuaiwan.softonic.cn/universaldownloader-launch  (download_manager_299803.exe)

The following 10 files have been seen to comunicate with kuaiwan.softonic.cn in live environments.

TCP » 46.28.209.20:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 46.28.209.20:80
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 46.28.209.20:80
{blocked}.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_itools-for-windows.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_pour_speedy-video-capture.exe.infected (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_fuer_minecraft-skinedit.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_vlc-media-player.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_songr.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
online-guardian-v2.0.9.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_winrar.exe (Application Setup)

softonic.com

softonic.com.br

softonic.de

softonic.fr

softonic.it

softonic.jp

softonic.nl

softonic.pl

softonicdownloads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.