home

k-lite-codec-pack.softonic.it

Softonic International SA

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Barcelona, Catalonia within Spain which resides on the RIPE Network Coordination Centre network.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.it

Whois:
1 softonic.it record

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.i, PUP.Softonic.Bundler (M), PUP.Softonic (M)
100.00%

Malwarebytes
PUP.Optional.Softonic.A
33.33%

Dr.Web
Adware.Downware.1657
33.33%

VIPRE Antivirus
Softonic Downloader
33.33%

ESET NOD32
Win32/SoftonicDownloader (variant)
33.33%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
33.33%

herdProtect (fuzzy)
a variant of 25d7f9e3b4c7df9fdda11721f0cb8502f1aed380
33.33%

McAfee
Artemis!2105458A6299
33.33%

Trend Micro House Call
TROJ_GEN.F47V1214
33.33%

Bkav FE
W32.Clod543.Trojan
33.33%

The domain k-lite-codec-pack.softonic.it has been seen to resolve to the following 2 IP addresses.

46.28.209.20
commoncobs.softonic.com
April 15, 2016

46.28.209.4
www.softonic.it
August 13, 2014

File downloads found at URLs served by k-lite-codec-pack.softonic.it.

1 / 68      (PUP)
http://k-lite-codec-pack.softonic.it/universaldownloader-launch  (softonicdownloader_per_k-lite-codec-pack.exe)

0 / 68
http://k-lite-codec-pack.softonic.it/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMT6ivKKC1zIlpmJ8ihejjAD N05eJE7gJRZur5k4ykAUAhq/OYzp9IRdet5KEk6t0SFjL8o5dr3e/ccktsv9KQUwvRi9HnKyA/3LWfPVgY gzzoY5IROs 94k8neNKhQCCOrFQCYREiA0aZLTASZJY4hOn9acCYYWhPLO4L1TI k8WE cJZ0kGqbAbfQilY3kVW36FX04 aGzfCFHif15psIVNsFzTozeLNFH39Sf6W9LiBXXzyEOMIivqBBZZZNuvQpQd5n4drUJ6zt0hm8xG6PdXi7VPAS9XMyIPZ4esoNd7n/DPjCmyEG8656/xPWu6QQBC7kyXnUJActCVOK6MzpcvXqXoq8lQhfAX9Gn1eYLNRrSIkvrdgRoF9PIBqw3yNh0boKsvUVmScKwHxUtG6ddm3LU9hDD9/YcbgrVno9Zkvo1d8lJDcWjUAFrfZdMu3Rgpr/Jb6Ek0vJzCIH/xAhLR1wT8bq3edvwwLIBo1a636Jaqxw2cq3jHZ96fMFx2Vu Tl HKXPZLV8V1/w WPP8G/.../0tAo6XT2fwD1yKM8jD0Syjo1xC8aTErUZ9ofkt8vxtifZXXBjGF7M0gCEJ2s=  (k-lite_codec_pack_1040_full.exe)

1 / 68      (PUP)
http://k-lite-codec-pack.softonic.it/universaldownloader-launch  (softonicdownloader_per_k-lite-codec-pack.exe)

10 / 68    (PUP)
http://k-lite-codec-pack.softonic.it/universaldownloader-launch  (softonicdownloader_per_k-lite-codec-pack.exe)

The following 10 files have been seen to comunicate with k-lite-codec-pack.softonic.it in live environments.

TCP » 46.28.209.20:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 46.28.209.20:80
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 46.28.209.20:80
{blocked}.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_itools-for-windows.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_pour_speedy-video-capture.exe.infected (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_fuer_minecraft-skinedit.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_vlc-media-player.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_songr.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
online-guardian-v2.0.9.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_winrar.exe (Application Setup)

URL:
http://k-lite-codec-pack.softonic.it/

Google Analytics:
UA-43493347

Title:
“K-Lite Codec Pack - Download”

Description:
“K-Lite Codec Pack, download gratis. K-Lite Codec Pack Full 11.8.5: Tutti i codec in un colpo solo. K-Lite Codec Pack è la migliore raccolta di codec audio e video, totalmente gratuita. Si installa su”

Web server:
Apache

softonic.com

softonic.com.br

softonic.jp

softonic.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.