home

office-2010.descargar.es

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.,ES

Root domain:
descargar.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FreeSoftware.DD, PUP.Installer.DownloadAssistant.DD, PUP.FreeSoftware.a, PUP.Bundler.Tightrope, PUP.Vittalia.VittaliaInternet.Bundler (M), PUP.InstallCore.Installer.Installer (M), PUP.Tightrope.Statscom.Bundler (M), PUP.OnekitInternet.Bundler (M), PUP.installCore.WorldSetup (M), PUP.Vittalia.VittaliaInternetSL.Bundler (M), PUP.installCore.FreeSoftware (M), PUP.Vittalia.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Vittalia.FormulaE.Bundler (M), PUP.Vittalia.100Blogs.Bundler (M), PUP.InstallCore.FC (M), PUP.Air Software.Download.Bundler (M), PUP.Tightrope.Zoobam.Bundler (M), PUP.Tightrope.Sanflex.Bundler (M), PUP.installCore.FreeSoft (M), Adware.Bundler.Meta (M), PUP.Vittalia (M), PUP.OnekitInternet (M), PUP.Tightrope (M)
100.00%

VIPRE Antivirus
Threat.4150696, Threat.4782985, Threat.4782551, Threat.4783369
9.30%

Malwarebytes
PUP.Optional.Vittalia, PUP.Optional.DownloadAssistant, PUP.Optional.BundleInstaller, PUP.Optional.DownloadAdmin
9.30%

ESET NOD32
Win32/InstallCore.PU potentially unwanted application, Win32/InstallCore.SC potentially unwanted application, Win32/DownloadAdmin.H potentially unwanted application
6.98%

AVG
Generic
6.98%

Dr.Web
Trojan.Packed.28459, Trojan.Vittalia.14
4.65%

K7 AntiVirus
Unwanted-Program
4.65%

NANO AntiVirus
Riskware.Win32.InstallCore.dfgmcz, Riskware.Win32.Downware.djahkt
4.65%

F-Prot
W32/InstallCore.AC.gen, W32/S-75b1aa1a
4.65%

Agnitum Outpost
PUA.InstallCore, Riskware.Agent
4.65%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen, Downloader.Agent
4.65%

G Data
Win32.Application.DownloadAssistant, Win32.Application.DownloadAdmin
4.65%

McAfee
Adware-DomaIQ
2.33%

Trend Micro House Call
Suspici.5025EB53
2.33%

Qihoo 360 Security
Win32/Trojan.Adware.37e
2.33%

The domain office-2010.descargar.es has been seen to resolve to the following 6 IP addresses.

109.70.130.155
155.130.70.109.factoriadigital.com
June 8, 2016

185.47.13.82
December 19, 2015

185.57.173.188
December 19, 2015

93.189.36.169
rack24u4.hispaweb.net
May 4, 2015

93.189.35.250
October 24, 2014

93.189.35.249
October 24, 2014

File downloads found at URLs served by office-2010.descargar.es.

1 / 68      (Adware)
http://office-2010.descargar.es/down.php  (installer_office-2010_spanish.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/download  (installer_microsoft_office_2010_spanish.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=63574-99f294bb-c752-493f-8228-0e29977f2d6d&kw=baixar avaliação grátis – experimente o office 365 e microsoft office 2013 microsoft  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=63574-99f294bb-c752-493f-8228-0e29977f2d6d&kw=bem-vindo ao 2007 microsoft office system microsoft  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=63574-99f294bb-c752-493f-8228-0e29977f2d6d&kw=download microsoft office  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=61404-37b74ddf-b6e8-470a-80a8-c90c0885dfe3&kw=microsoft office microsoft  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=63574-37b74ddf-b6e8-470a-80a8-c90c0885dfe3&kw=microsoft office microsoft  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=63574-37b74ddf-b6e8-470a-80a8-c90c0885dfe3&kw=microsoft office 2010 com.br download microsoft office 2010 grátis crie documentos incríveis com o  (installer_office-2010_portuguese.exe)

1 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=US-7SEARCH  (installer_office-2010_english.exe)

5 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=BR-ADVERTISE&affid=64893-ultbrex_br&kw=com.br microsoft office professional plus 2010 download  (installer_office-2010_portuguese.exe)

5 / 68      (Adware)
http://office-2010.descargar.es/.../down.php?p=US-7SEARCH&kw=microsoft office  (installer_office-2010_english.exe)

The following 6 files have been seen to comunicate with office-2010.descargar.es in live environments.

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
cyberclient.exe (CyberPlanet by Proyecto Redes)

TCP » 109.70.130.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.