home

download.software-upgrade.org

DHACop Lab

Domain Information

The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
Name.com, LLC

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
software-upgrade.org

Whois:
1 software-upgrade.org record

The domain download.software-upgrade.org has been seen to resolve to the following IP address.

50.22.123.186
50.22.123.186-static.reverse.softlayer.com
February 22, 2016

File downloads found at URLs served by download.software-upgrade.org.

0 / 68
http://download.software-upgrade.org/.../winvxm-update.exe  (newver_3808849_1.7.8.0.exe)

1 / 68      (PUP)
http://download.software-upgrade.org/.../winvxm-update_r2.exe  (newver_7866207_1.8.2.0.exe)

The following 8 files have been seen to comunicate with download.software-upgrade.org in live environments.

TCP » 50.22.123.186:80
winvxm.exe (Windows Virtual Network Server by MicroStudio)

TCP » 50.22.123.186:80
applications.exe (Windows Application Monitor by DVS Studio)

TCP » 50.22.123.186:80
3d47c94a4e2f6186895abd2607e46031.exe

TCP » 50.22.123.186:80
winnetwork.exe (Windows Network Services by @Microsoft)

TCP » 50.22.123.186:80
DonutLeadsService.exe (DonutLeadsService)

TCP » 50.22.123.186:80
applications.exe (by Microsoft)

TCP » 50.22.123.186:80
winvxm.exe (Windows Virtual Network Server by MicroStudio)

TCP » 50.22.123.186:80
wmnserv.exe (Windows Network Services by @Microsoft)

URL:
http://download.software-upgrade.org/

Web server:
Microsoft-IIS/8.0 (ASP.NET)

ahdsoft.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.