home

bearflix.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Vba32 AntiVirus
Signed-AdWare.Win32.Mostofate.j
100.00%

Reason Heuristics
PUP.Optional.Installer.L
100.00%

The domain bearflix.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
January 5, 2016

File downloads found at URLs served by bearflix.en.softonic.com.

2 / 68      (PUP)
http://bearflix.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOSshH/AKyha564786MBd5K cBEVp8j1uAFiQPpFfEqN9xwjKBzws8bKao57VBlWhZ42O6zrh2utN8UlMdHjslqG8Jh/QFdkDTl4EOCSjibIeMqq4bHlGmLfbfHWFD6TXpXyX5LYeEC71EBpT390VBG36aSLNt2rilHGP g6fGZujm2nYUw2JZoHmR3nDNYE2dVg5wOseAsyU99Ui7260BbcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlW08TEPnmvS1RjILX6xFDlbZYAFTWKKD6e/ip6NNSJdola3QE2s6FX2vaBwVK9Cu/v0VSCYYD0HgMstr0TkR/YLkNtRHcgfECC8BnfIGtEFbQ1HGUgS4tOgS5xN8cr7idU gRa2PTmV2t6pV8NyRhr1KgyRI0zK/pvWXqNOayggNmyg/d1QK OKcEBdcFPsLR0BLLzBMGdj6h01/.../WhKyGyzFprg7  (bfinstallde.exe)

2 / 68      (PUP)
http://bearflix.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOSshH/AKyha564786MBd5K cBEVp8j1uAFiQPpFfEqN9xwjKBzws8bKao57VBlWhZ42O6zrh2utN8UlMdHjslqG8Jh/QFdkDTl4EOCSjibIeMqq4bHlGmLfbfHWFD6TXpXyX5LYeEC71EBpT390VBG36aSLNt2rilHGP g6fGZujm2nYUw2JZoHmR3nDNYE2dVg5wOseAsyU99Ui7260BbcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlV2CUBCfM5I7Z OZzTJmZhbUnRhglT3CG6PGb9iuc1TkpaqPlttD1r3Xtjl/BztS2bC TLxywnDFEaDwahZfhEPtE3pLxV3iDJK6InSq9gN1yoNeAve8rzWeYApL/DCYCTbyrfHQCu9dfADOp ovWzVo/hTmIoxs6e2HKChDSGa9zn6rDxhI23oOiCeVWydNhVNd1lefSUxq24P0bIxrtfOcB6B wMgRGleE/.../WhKyGyzFprg7  (bfinstallde.exe)

2 / 68      (PUP)
http://bearflix.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOSshH/AKyha564786MBd5K cBEVp8j1uAFiQPpFfEqN9xwjKBzws8bKao57VBlWhZ42O6zrh2utN8UlMdHjslqG8Jh/QFdkDTl4EOCSjibIeMqq4bHlGmLfbfHWFD6TXpXyX5LYeEC71EBpT390VBG36aSLNt2rilHGP g6fGZujm2nYUw2JZoHmR3nDNYE2dVg5wOseAsyU99Ui7260BbcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWQtCJk/ecf4pYW9KdTl2xiuSlRhY0nM3jnHxV1/Gudk/x/.../WhKyGyzFprg7  (bfinstallde.exe)

The following 4 files have been seen to comunicate with bearflix.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.