» a.softologic.com
Overview
Analysis
IPs Addresses (3)
Downloads (18)
Network (21)
Website Detail
Related Domains (8)

a.softologic.com

Softango Technology LLC (via a Proxy Registrant)

Domain Information

The domain a.softologic.com is registered by proxy through Moniker Online Services and was originally registered in June of 2011. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is part of a DNS service that utilizes a number of reverse proxy IP Addresses (see below). The domain is associated with the publisher Softango Technology LLC who is located in Beaverton, Oregon in the United States.

Registrant:

Moniker Privacy Services on behalf of Softango Technology LLC

Registrar:

Moniker Online Services

Server location:

New York, United States (US)

Create date:

Thursday, June 30, 2011

Expires date:

Thursday, June 30, 2016

Updated date:

Tuesday, December 22, 2015

ASN:

AS62567 DIGITALOCEAN-ASN-NY2 - Digital Ocean, Inc., US

Root domain:

softologic.com

Whois:

1 softologic.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Performersoft.Bundler (M), PUP.Performersoft.WeCodeGo.Bundler (M), PUP.Performersoft (M)

100.00%

Quick Heal

TrojanDownloader.Brantall.b, TrojanDownloader.Brantall.A5

11.11%

McAfee

RDN/Generic PUP.x!bpg, PUP-FDT!C9D4600CD9C9

11.11%

Malwarebytes

Adware.InstallBrain

11.11%

K7 AntiVirus

Unwanted-Program , Adware

11.11%

Agnitum Outpost

Adware.BrainInst

11.11%

NANO AntiVirus

Trojan.Win32.Downware.cqmhdj, Trojan.Win32.Agent.cqiaam

11.11%

Sophos

InstallBrain

11.11%

Comodo Security

Application.Win32.InstallBrain.AF, Application.Win32.InstallBrain.AN

11.11%

F-Secure

Trojan:W32/InstallBrain.A

11.11%

Dr.Web

Adware.Downware.1295

11.11%

VIPRE Antivirus

Trojan.Win32.Generic!SB.0

11.11%

Avira AntiVirus

Adware/InstallBrain.CE, TR/Dropper.Gen

11.11%

Trend Micro

TROJ_SPNV.03KI13, ADW_PCOPTIMZER

11.11%

Emsisoft Anti-Malware

Win32.Virtob.Gen.12, Application.Bundler.InstallBrain

11.11%

The domain a.softologic.com has been seen to resolve to the following 3 IP addresses.

107.170.2.22

nxdomain.dnsmadeeasy.com

September 14, 2016

52.70.175.181

ec2-52-70-175-181.compute-1.amazonaws.com

February 28, 2016

54.235.159.97

ec2-54-235-159-97.compute-1.amazonaws.com

January 28, 2016

File downloads found at URLs served by a.softologic.com.

1 / 68 (PUP)

http://a.softologic.com/download/.../XZlsZA4htx8c?exename=BestCodecsPackSetup&cid=3616&SourceId=355&CreativeId=21945242&LineItemId=7335699&PublisherId=811571&SectionId=161806974&tid=000116b3f975a29554da0875d317102d137cb (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$gOMaeplsZA4htDQY?exename=BestCodecsPackSetup&cid=3616&SourceId=355&CreativeId=21081809&LineItemId=7272891&PublisherId=0&SectionId=3168060&tid=00003b9f4c5de84df429fbe4cdd11beeb92da (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$g M0YZA3ZUBkvw0u?exename=TVNoopSetup&cid=4107&clickid=0041651134647076665&orig_client=BIDVERAPI2-4138_63213_JS86 (tvnoopsetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$rcUba5lsZA5ltDcg?exename=VideoPerformerSetup&cid=3615&SourceId=355&CreativeId=16992131&LineItemId=5199306&PublisherId=0&SectionId=3168060&tid=000111861aee78bb6475497b148bf46316658 (videoperformersetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$tMYAXplsZEBhjR4w?exename=VideoPerformerSetup&cid=3691&gclid=CPS-q7mgprkCFUXhQgodDkkA3Q (videoperformersetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$pNYiX5A3I04joikL?exename=FreeCodecPackSetup&cid=4258&lang=en (freecodecpacksetup.exe)

1 / 68 (Adware)

http://a.softologic.com/.../$mMANWpA3ZUIgvQMj?exename=ZoolaGamesSetup&cid=4183&lang=pt (zoolagamessetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$gvcDRZlsZA4hnDQb?exename=BestCodecsPackSetup&cid=3616&SourceId=355&CreativeId=21081809&LineItemId=7272891&PublisherId=0&SectionId=3168060&tid=0000478e4e3a151d240b4bf16c7ff4001ef40 (bestcodecspacksetup.exe)

1 / 68 (Adware)

http://a.softologic.com/.../$huYgRZA3ZUIgjx4 ?exename=ZoolaGamesSetup&cid=4183 (zoolagamessetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$quYJeplsZA4hlzIQ?exename=BestCodecsPackSetup&cid=3616&SourceId=355&CreativeId=21664493&LineItemId=7270114&PublisherId=0&SectionId=188645969&tid=000082a55ab7a34834937b5a7be4e9838e20b (bestcodecspacksetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$pc8DZplsZA4hvigK?exename=BestCodecsPackSetup&cid=3616&SourceId=355&CreativeId=21945133&LineItemId=7335617&PublisherId=0&SectionId=3168060&tid=00011378ab7152c714fd8a29a5d86e4295f2b (bestcodecspacksetup.exe)

1 / 68 (Adware)

http://a.softologic.com/.../$tPoYbpA3IkA5kDYg?exename=RocketPDFSetup&cid=4019&lang=en&gclid=CIXSqr77q7kCFYgB4god3UsA6w (rocketpdfsetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$u 0HSJA3ZUM5mBQ ?exename=PCPerformerSetup&cid=4154&clickid=0028437134608523202&dfpid=104100124 (pcperformersetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$ldYAZZA3I1JitC0A?exename=PCPerformerSetup&cid=4212&tid=EI_l7477288e24576p836222v126212441s4277716c22149127_70a10a-826c79f4-139055c-2405db4d-3db1af60_WdmFB9RFQQAH-FEBAAAAAIUgWgAAAAAAAACAAAYAAAAAAAkACwADEuI.aAAAAAAADihuAAAAAAAoGHIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEbBcAAAAAAAIAAwAAgD8AdnRBv0ABAAAAAAAAADAwNTY4Y2I0LTBmMDEtMTFlMy1hZTYwLWVmY2UwOTNlYzZiYgAAAAAAAAA=,eJxzzvALC3G3SM-N8NczTA-OMDEtcAmrSPcP8gnw1TMO1AUApk4Jyg== (pcperformersetup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$ns8fZ5A3I05orjEj?exename=PDF6Setup&cid=4259&lang=en (pdf6setup.exe)

1 / 68 (PUP)

http://a.softologic.com/.../$vOAmQJlsKwIiny8Z?exename=PCPerformerSetup&cid=3756&lang=ru&tid=EI_l7312881e24576p727997v350852212s3336688c21906306_394f1d-1afca066-8f07c8f-6e08571e-dbf34c5d_dJTpFPDpMgCCQ04BAAAAABfPVwAAAAAAAgAAAAYAAAAAAP8AAAAFFvgnbQAAAAAA.WdtAAAAAADxlW8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHoRUAAAAAAAIAAwAAgD8A7SRUy0ABAAAAAAAAADlhNjNjNGQ4LTEwZDgtMTFlMy05Y2IxLTFjYzFkZTA0NTQyYwAAAAAAAAA=,eJwrjcp0yU33zM12z.UMzA90iTQo9MryycsJ8qmscE3y8zA0dNUFAO49DDg= (pcperformersetup.exe)

42 / 68 (PUP)

http://a.softologic.com/.../$juYbTJlsZA5hqQI8?exename=PCPerformerSetup&cid=3619&SourceId=355&CreativeId=18637140&LineItemId=7286755&PublisherId=0&SectionId=7237763&tid=00006ec3f8d0e5e4d481abe7347ca9fd9d650 (pcperformersetup.exe)

42 / 68 (PUP)

http://a.softologic.com/download/.../S5A3I0Ixvh00?exename=VideoPerformerSetup&cid=4275&g=2&SourceId=366&CreativeId=5043747&SectionId=296218&tid=00011fb2212dc5e5e45dbae8be3bdaafebe5d (videoperformersetup.exe)

The following 21 files have been seen to comunicate with a.softologic.com in live environments.

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:80

savefromnethelper-web-8cf4d1779b-.exe

TCP » 107.170.2.22:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.170.2.22:80

online-guardian-v2.0.9.exe

TCP » 107.170.2.22:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:443

citrio.exe (Citrio by CatalinaGroup)

TCP » 107.170.2.22:80

savefromnethelper-web-7c8097d276-.exe

TCP » 107.170.2.22:25

init.exe

TCP » 107.170.2.22:80

uncheckitupdate.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.235.159.97:80

videoperformersetup.exe (Installer)

TCP » 54.235.159.97:80

videoperformersetup.exe (Installer)

TCP » 54.235.159.97:80

CodecPerformerSetup.exe (CodecPerformer)

Latest 20 of 26 files

URL:

http://a.softologic.com/

Title:

“Non-Existent Domain”

Web server:

nginx/1.8.0 (PHP/5.3.29)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.