home

adm.wallpaper.soft365.com

Domain Information

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:
soft365.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ELEX.337Techn (M)
100.00%

The domain adm.wallpaper.soft365.com has been seen to resolve to the following IP address.

50.97.129.8
50.97.129.8-static.reverse.softlayer.com
July 3, 2016

File downloads found at URLs served by adm.wallpaper.soft365.com.

1 / 68      (Adware)
http://adm.wallpaper.soft365.com/wallpaper.exe  (papel tapiz.exe)

The following 396 files have been seen to comunicate with adm.wallpaper.soft365.com in live environments.

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
qkseesvc.exe

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (Winzipper by Winzipper Pvt)

TCP » 50.97.129.8:80
qkseesvc.exe

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (Winziper by Winziper Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (dsk service by Taiwan Shui Mu Chih Ching Technology Limited)

TCP » 50.97.129.8:80
winzipersvc.exe (ExHelp by ExWzp Pvt)

TCP » 50.97.129.8:80
desksvc.exe (dsk service by 337 Technology Limited)

TCP » 50.97.129.8:80
winzipersvc.exe (Winzipper by Winzipper Pvt)

TCP » 50.97.129.8:80
winzipersvc.exe (Winziper by Winziper Pvt)

TCP » 50.97.129.8:80
picexasvc.exe (Picexa Viewer by Taiwan Shui Mu Chih Ching Technology Limited)

TCP » 50.97.129.8:80
winzipersvc.exe (update service by Taiwan Shui Mu Chih Ching Technology Limited)

TCP » 50.97.129.8:80
picexasvc.exe (Picexa Viewer by Taiwan Shui Mu Chih Ching Technology Limited)

 
Latest 20 of 396 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.