» www.mannesoth.com
Overview
Analysis
IPs Addresses (5)
Downloads (50)
Network (228)
Website Detail
Statistics

www.mannesoth.com

Whois Privacy Corp.

Domain Information

The domain www.mannesoth.com registered by Whois Privacy Corp. was initially registered in March of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Beaumaris, Victoria within Australia which resides on the Asia Pacific Network Information Centre network.

Registrant:

Whois Privacy Corp.

Registrar:

INTERNET DOMAIN SERVICE BS CORP

Server location:

Victoria, Australia (AU)

Create date:

Tuesday, March 18, 2014

Expires date:

Saturday, March 18, 2017

Updated date:

Saturday, March 19, 2016

ASN:

AS133618 TRELLIAN-AS-AP Trellian Pty. Limited, AU

Root domain:

mannesoth.com

Whois:

3 mannesoth.com records

Google Safe Browsing:

malware

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.SOFTWAREAGILITYLIMITED.CC, PUP.SOFTWAREAGILITYLIMITED.BB, PUP.SOFTWAREAGILITYLIMITED.Y, PUP.SOFTWAREAGILITYLIMITED.?, PUP.SOFTWAREAGILITYLIMITED.s, PUP.SOFTWAREAGILITYLIMITED.Q, PUP.SOFTWAREAGILITYLIMITED.c, PUP.SOFTWAREAGILITYLIMITED.f, PUP.SOFTWAREAGILITYLIMITED.EE, PUP.SOFTWAREAGILITYLIMITED.DD, PUP.SOFTWAREAGILITYLIMITED.q, PUP.SOFTWAREAGILITYLIMITED.X, PUP.Installer.SOFTWAREAGILITYLIMITED.F, PUP.SOFTWAREAGILITY.Bundler.Meta (M), PUP.SOFTWAREAGILITYLIMITED.a, PUP.SOFTWAREAGILITYLIMITED.t, PUP.SOFTWAREAGILITYLIMITED.h, PUP.SOFTWAREAGILITYLIMITED.S, PUP.SOFTWAREAGILITYLIMITED.AA, PUP.SOFTWAREAGILITY (M), PUP.SOFTWARE (M), Threat.Win.Reputation.IMP, PUP (M)

100.00%

avast!

Win32:Malware-gen, Win32:Rootkit-gen [Rtk], Win32:Adware-gen [Adw]

58.00%

AVG

Bundle, Adware Generic5.AYIZ, Adware Generic5.AYIW, Adware Generic5.BCOT

58.00%

ESET NOD32

Win32/BundleInstaller.F potentially unwanted application, Win32/BundleInstaller.G potentially unwanted application, Win32/Amonetize.AV potentially unwanted application

54.00%

Malwarebytes

PUP.Optional.FilePile, PUP.Optional.FineDream

48.00%

MicroWorld eScan

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

46.00%

Bitdefender

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

46.00%

Emsisoft Anti-Malware

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

46.00%

G Data

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

46.00%

Kaspersky

not-a-virus:Downloader.Win32.Agent

46.00%

VIPRE Antivirus

Threat.4150696, Trojan.Win32.Generic

44.00%

Lavasoft Ad-Aware

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

44.00%

F-Secure

Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702, Gen:Variant.Kazy.413212, Gen:Variant.Adware.Kazy.413212, Gen:Variant.Adware.Graftor.148401

44.00%

Panda Antivirus

Suspicious file, Trj/Genetic.gen

44.00%

IKARUS anti.virus

PUA.Bundler, PUA.BundleInstaller, PUA.OxyPumper, AdWare.OxyPumper

42.00%

The domain www.mannesoth.com has been seen to resolve to the following 5 IP addresses.

103.224.182.207

lb-182-207.above.com

July 2, 2016

104.37.244.200

June 2, 2016

54.72.9.51

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com

January 4, 2016

176.121.11.90

June 13, 2014

176.121.11.88

May 28, 2014

File downloads found at URLs served by www.mannesoth.com.

1 / 68 (Adware)

http://www.mannesoth.com/.../account25.01.2014.txt_Downloader_654700004.exe (account25.01.2014.txt_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../CS:_GO_Case_Key_Free_Generator_Installer_Downloader_420800201.exe (cs-_go_case_key_free_generator_installer_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../zhurnal-kosmetik-international_zip_Downloader_90099814.exe (zhurnal-kosmetik-international_zip_downloader.exe)

1 / 68 (Malware)

http://www.mannesoth.com/.../GeneradorSaldoDiciembre2013.zip_Downloader_913000001.exe (generadorsaldodiciembre2013.zip_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../kinetico_aquakinetic_replacement_filters.pdf_Downloader_14000004.exe (kinetico_aquakinetic_replacement_filters.pdf_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../australian_mathematics_competition_questions_download.rar_Downloader_14000004.exe (australian_mathematics_competition_questions_download.rar_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../Steam_Wallet_Generator_v1.2_Downloader_422680001.exe (steam_wallet_generator_v1.2_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../Counter-Strike_Cheats_Pack_Downloader_679200001.exe (counter-strike_cheats_pack_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../megan_fox_is_wonder_woman_movie_Downloader_470500006.exe (megan_fox_is_wonder_woman_movie_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../Kollegah_King_Downloader_510800005.exe (kollegah_king_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../Credit_Cards_Downloader_49100001.exe (credit_cards_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname=much_does_rachel_zoe_weight&filesize=13MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=470500006&type=oxy&version=2.0.0.106 (much_does_rachel_zoe_weight.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../james_mcavoy_son_brendan_Downloader_470500001.exe (james_mcavoy_son_brendan_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../AnimalJam-Membership-Codes-Generator_Downloader_935300001.exe (animaljam-membership-codes-generator_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../pengolahan_emas_metode_sianidasi.pdf_Downloader_89100101.exe (pengolahan_emas_metode_sianidasi.pdf_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../Free_Hip_Hop_Instrumentals_Downloader_1271000014.exe (free_hip_hop_instrumentals_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../CoC.Hack_Downloader_1117400001.exe (coc.hack_downloader.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../2nd_grade_goal_setting_forms_Downloader_378900001.exe (2nd_grade_goal_setting_forms_downloader.exe)

29 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname=Wifi_Hacker_V3.2&filesize=13MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=97200010&type=oxy&version=2.0.0.106 (wifi_hacker_v3.2.exe)

21 / 68 (Adware)

http://www.mannesoth.com/.../Artisteer_3_Keygen_Downloader_555800019.exe (artisteer_3_keygen_downloader.exe)

12 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname={REQUEST_STRING}&filesize=10MB&fileurl=http://.../OxyBrowser.exe&affid=1171899107&type=oxy ({request_string}.exe)

1 / 68 (Adware)

http://www.mannesoth.com/.../29.5MB_Downloader_735700001.exe (29.5mb_downloader.exe)

21 / 68 (Adware)

http://www.mannesoth.com/.../Helen_Mirren.rar_Downloader_83300001.exe (helen_mirren.rar_downloader.exe)

22 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname=YourActivationCode&filesize=16MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=420800010&type=oxy&version=2.0.0.106 (youractivationcode.exe)

5 / 68 (PUP)

http://www.mannesoth.com/getdm/down.php?keywordname=Adf.ly_Bot_Hack&filesize=17MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=283400002&type=oxy&version=2.0.0.106 (adf.ly_bot_hack.exe)

16 / 68 (Adware)

http://www.mannesoth.com/.../Best_Pokemon_Hacks_ROMs_2014_Downloader_727500014.exe (best_pokemon_hacks_roms_2014_downloader.exe)

22 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname=Download_av_voice_changer_software_diamond_8.0_crack&filesize=17MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=32310701&type=oxy&version=2.0.0.106 (download_av_voice_changer_software_diamond_8.0_crack.exe)

17 / 68 (Adware)

http://www.mannesoth.com/.../Nintendo_3DS_Emulator_Downloader_69680003.exe (nintendo_3ds_emulator_downloader.exe)

24 / 68 (Adware)

http://www.mannesoth.com/getdm/down.php?keywordname=Skyrim_1.9.32.0.8_patch_download&filesize=7MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=1013200003&type=oxy&version=2.0.0.106 (skyrim_1.9.32.0.8_patch_download.exe)

1 / 68 (PUP)

http://www.mannesoth.com/getdm/down.php?keywordname=How_to_find_cs6_serial_number&filesize=18MB&fileurl=http://www.installdream.com/.../OxyBrowser.exe&affid=1013200010&type=oxy&version=2.0.0.106 (how_to_find_cs6_serial_number.exe)

Latest 30 of 50 download URLs

The following 228 files have been seen to comunicate with www.mannesoth.com in live environments.

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

onedrvup.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 103.224.182.207:80

googleupd.exe (Google Update by Google)

TCP » 54.72.9.51:80

247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80

1799877.exe

TCP » 103.224.182.207:80

pooface.exe (Ja)

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80

optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80

charles.exe (by Apple)

TCP » 54.72.9.51:80

onedrv.exe

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 103.224.182.207:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.9.51:80

install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

g.jpg

Latest 20 of 247 files

URL:

http://www.mannesoth.com/

Title:

“mannesoth.com”

Web server:

nginx

Facebook:

Likes: 2

Shares: 3

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.