home

dl2.soft98.ir

Domain Information

Server location:
Tehran, Iran (IR)

ASN:
AS43754 ASIATECH-AS AsiaTech Inc.

Root domain:
soft98.ir

Scanner detections:
Detections  (62% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Cracked.Soft98IR.Installer.Meta (L), PUP.Cracked.Soft98IR (L)
100.00%

Qihoo 360 Security
HEUR/QVM06.2.Malware.Gen
3.23%

The domain dl2.soft98.ir has been seen to resolve to the following IP address.

79.127.127.8
hosted-by.hostdl.com.asiatech.ir
January 8, 2014

File downloads found at URLs served by dl2.soft98.ir.

0 / 68
http://dl2.soft98.ir/soft/.../Easy.GIF.Animator.Pro.6.2.0.53.rar  (af246ebdc064f9a50dbba2cb5c694009)

0 / 68
http://dl2.soft98.ir/soft/.../Aoao.Video.to.GIF.Converter.4.2.rar  (0c5ee8b9fc7c7b25c9eec73866f05c8d)

0 / 68
http://dl2.soft98.ir/soft/.../EximiousSoft.GIF.Creator.7.31.rar  (dbe4e41ec27a283b6c9c5b9b28e70bf4)

0 / 68
http://dl2.soft98.ir/soft/.../Any.Video.to.GIF.Converter.1.5.rar  (32e5ffd8cafa04d70fb5767af475c972)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Mozilla.Firefox.47.0.1.EN.x86.exe  (275887e01a1e777b6394f8f30f067380)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Maxthon.4.9.1.1000.exe  (419228665d1574595c1f293937a6e1c3)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../NET.Framework.4.6.2.exe  (fb1d326b44c726b063548198e5f645be)

0 / 68
http://dl2.soft98.ir/soft/.../WinDjView.2.1.Portable.exe  (8f151cbc36b1af5891c86b389325c88d)

0 / 68
http://dl2.soft98.ir/soft/.../Auslogics.Driver.Updater.1.5.0.0.Portable.exe  (75aa3113d6126a1e0c2ab1002d38cd79)

0 / 68
http://dl2.soft98.ir/soft/.../Recover.My.Files.5.2.1.1964.portable.exe  (3a97a4d835c990c7f4fe3603c336e0be)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Orbit.Downloader.4.1.1.19.Final.exe  (2029d3a0ddd8c0ae852fe4274e0b5a6a)

0 / 68
http://dl2.soft98.ir/soft/.../Orbit.Downloader.4.1.1.17.Portable.exe  (3805a7fe1b381239a11d49349d2a4cfa)

0 / 68
http://dl2.soft98.ir/soft/.../CoolUtils.PDF.Combine.5.1.86.Portable.exe  (5a102a51df9b925295cec03e7b7511ce)

0 / 68
http://dl2.soft98.ir/soft/.../Adobe.Flash.Player.21.0.0.242.firefox.rar  (81affcc6dc879ae506b5b9a8da8377de)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Internet.Download.Manager.6.23.Build.21.Retail.exe  (2747bf997492d6b9459e4d15451dec2c)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../KMPlayer.4.0.2.6.exe  (2c47ff42bf1f48ae837a4f4690fcbebf)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Quick.Memory.Editor.5.7.exe  (9094894f2b176bf5d6a682c164d638ec)

2 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Internet.Download.Manager.6.23.Build.18.Retail.exe  (20221b38d6856571fd7cb938cf6e8c8c)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Internet.Download.Manager.6.25.Build.23.Retail.exe  (d8e041b299b2d9d42d5fcd78f1505f2e)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Adobe.Flash.Player.21.0.0.197.Windows.exe  (0a4017ea21c46d7be4295fa9956962e4)

1 / 68      (PUP)
http://dl2.soft98.ir/.../nVIDIA.GeForce.Driver.368.22.xp.x86.exe  (85f671a37edbf877b0624c178581eaea)

0 / 68
http://dl2.soft98.ir/soft/.../AVS.Video.Editor.7.1.3.263.Portable.exe  (41e9e655ba7cee50fa8bebd0751c4fff)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../WinZip.20.5.Build.12118.x64.exe  (1bca7fe1ce4253f99dd6f07a0e71903b)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../SpeedFan.4.51.exe  (677ef3b39287e11b30b75f14a9c57725)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../WinZip.20.0.Build.11659.x86.exe  (a2a88b6a1853d4c55a16244851d0db4f)

0 / 68
http://dl2.soft98.ir/soft/.../Telegram.Desktop.0.9.56.rar  (9f5d511daa2cdc932e524e1ac521801c)

1 / 68      (PUP)
http://dl2.soft98.ir/.../Adobe.Reader.11.0.14.Update.Only.exe  (1b0b7c0ae6e477e927ab527d16fe8a76)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Free.Download.Manager.3.9.7.Build.1627.exe  (1d691aec20a2cff2ecd9106925d2bb79)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../PDFCreator.2.1.2.exe  (7e3b25ca03848e02723a7f17f60935cf)

1 / 68      (PUP)
http://dl2.soft98.ir/soft/.../Skype.7.22.0.107.exe  (ef0a288911518abcb73e04cbc8f2d63e)

 
Latest 30 of 444 download URLs

The following 2 files have been seen to comunicate with dl2.soft98.ir in live environments.

TCP » 79.127.127.8:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 79.127.127.8:80
client.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.