home

universal-downloader-us.softonic.cn

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
softonic.cn

The domain universal-downloader-us.softonic.cn has been seen to resolve to the following 3 IP addresses.

176.32.102.41
s3-1-w.amazonaws.com
August 1, 2014

205.251.242.180
s3-1-w.amazonaws.com
February 7, 2014

176.32.101.73
February 7, 2014

File downloads found at URLs served by universal-downloader-us.softonic.cn.

0 / 68
http://universal-downloader-us.softonic.cn/299000/299803/.../KuaiwanSetup.exe  (8e894ed8efc61970b102c4c18af86f18)

1 / 68      (inconclusive)
http://universal-downloader-us.softonic.cn/47000/47650/.../KMPlayer_3-6-0-87.exe  (kmplayer_3-6-0-8732_k.exe)

3 / 68      (PUP)
http://universal-downloader-us.softonic.cn/63000/63689/.../PhotoScape_V3-6-3.exe  (178172767_setup.exe)

The following 8 files have been seen to comunicate with universal-downloader-us.softonic.cn in live environments.

TCP » 205.251.242.180:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 176.32.102.41:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 176.32.102.41:80
IMF.exe (IObit Malware Fighter by IObit)

TCP » 205.251.242.180:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 176.32.102.41:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 205.251.242.180:80
IMF.exe (IObit Malware Fighter by IObit)

TCP » 176.32.102.41:80
tumblripper.exe (TumblRipper)

TCP » 176.32.102.41:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 176.32.102.41:443
RBClientService.exe (Right Backup by Systweak)

TCP » 176.32.102.41:80
lolclient.exe

TCP » 205.251.242.180:80
browser.exe (Co Rom+ Browser by Itim Technologies Co.)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.