home

inst.get-soft-free.net

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.

Root domain:
get-soft-free.net

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Nextup.N, PUP.Nextup.O, PUP.Adknowledge.Nextup.Bundler (M)
100.00%

McAfee
Artemis!5604D42BE6B0, Artemis!C77BDFC47D9D
60.00%

Trend Micro House Call
Suspicious_GEN.F47V0717, Suspicious_GEN.F47V0906
60.00%

avast!
Win32:Dropper-gen [Drp], Win32:Malware-gen
60.00%

VIPRE Antivirus
Rocketfuel Installer
60.00%

Sophos
NextUp
60.00%

G Data
Win32.Application.Nextup
60.00%

Baidu Antivirus
Trojan.Win32.Verti, PUA.Win32.Verti
60.00%

ESET NOD32
Win32/Verti (variant)
60.00%

AVG
Generic
60.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Verti
40.00%

K7 AntiVirus
Trojan
40.00%

Dr.Web
Adware.Downware.6396
40.00%

IKARUS anti.virus
PUA.Verti
40.00%

Fortinet FortiGate
Riskware/Verti
40.00%

The domain inst.get-soft-free.net has been seen to resolve to the following 4 IP addresses.

52.0.164.105
ec2-52-0-164-105.compute-1.amazonaws.com
May 21, 2016

52.1.175.151
ec2-52-1-175-151.compute-1.amazonaws.com
May 18, 2016

54.236.109.36
ec2-54-236-109-36.compute-1.amazonaws.com
September 27, 2014

54.236.175.104
ec2-54-236-175-104.compute-1.amazonaws.com
August 17, 2014

File downloads found at URLs served by inst.get-soft-free.net.

1 / 68      (Adware)
http://inst.get-soft-free.net/dl/38/17694/38/.../  (gimpinstaller.exe)

1 / 68      (Adware)
http://inst.get-soft-free.net/dl/38/17694/38/.../  (gimpinstaller.exe)

10 / 68    (Adware)
http://inst.get-soft-free.net/dl/38/895/38/.../  (gimpinstaller.exe)

10 / 68    (Adware)
http://inst.get-soft-free.net/dl/38/17488/38/.../  (gimpinstaller.exe)

10 / 68    (Adware)
http://inst.get-soft-free.net/dl/38/18171/38/.../  (gimpinstaller.exe)

21 / 68    (Adware)
http://inst.get-soft-free.net/dl/548/28814/6110/.../  (GoodgameEmpire.exe)

18 / 68    (Adware)
http://inst.get-soft-free.net/dl/38/17488/38/.../  (gimpinstaller.exe)

The following 11 files have been seen to comunicate with inst.get-soft-free.net in live environments.

TCP » 52.0.164.105:80
480.exe (RapidMediaConverterSetup.exe)

TCP » 52.0.164.105:80
rocketfuelinstaller_tinymediaplayer.exe

TCP » 52.1.175.151:80
realplayer_rocketfuelinstaller.exe

TCP » 52.1.175.151:80
mediaplayerclassicinstaller.exe

TCP » 52.0.164.105:80
setup.exe (StormAlertsSetup.exe)

TCP » 52.0.164.105:80
setup.exe (RapidMediaConverterSetup.exe)

TCP » 52.1.175.151:80
setup.exe (SafeGuardSetup.exe)

TCP » 52.1.175.151:80
setup.exe (StormWatchSetup.exe)

TCP » 52.1.175.151:80
setup.exe (StormAlertsSetup.exe)

TCP » 52.1.175.151:80
480.exe (RapidMediaConverterSetup.exe)

TCP » 52.1.175.151:80
7zip_rocketfuelinstaller.exe

TCP » 52.1.175.151:80
mediaplayerclassicinstaller.exe

TCP » 54.236.175.104:80
mediaplayerclassic.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.