» pdanet.en.softonic.com
Overview
Analysis
IPs Addresses (1)
Downloads (4)
Network (4)
Related Domains (4)

pdanet.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.

Server location:

Catalonia, Spain (ES)

ASN:

AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:

softonic.com

Registered by:

Softonic International

Scanner detections:

Detections (75% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Softonic.Bundler (M), PUP.Softonic (M)

75.00%

Quick Heal

Downloader.Agent.r3 (Not a Virus)

25.00%

McAfee

Artemis!B4570C34499F

25.00%

Malwarebytes

PUP.Optional.Softonic.A

25.00%

Zillya! Antivirus

Downloader.Agent.Win32.202187

25.00%

K7 AntiVirus

Unwanted-Program

25.00%

NANO AntiVirus

Trojan.Win32.Agent.dchxde

25.00%

F-Prot

W32/Softonic.C2.gen

25.00%

Trend Micro House Call

TROJ_SPNR.08KI14

25.00%

Kaspersky

not-a-virus:Downloader.Win32.Agent

25.00%

Agnitum Outpost

PUA.Downloader

25.00%

Dr.Web

Adware.Downware.5743

25.00%

VIPRE Antivirus

Softonic Downloader

25.00%

Trend Micro

TROJ_SPNR.08KI14

25.00%

G Data

Win32.Adware.Softonic

25.00%

The domain pdanet.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13

February 28, 2016

File downloads found at URLs served by pdanet.en.softonic.com.

1 / 68 (PUP)

http://pdanet.en.softonic.com/universaldownloader-launch (softonicdownloader_for_pdanet.exe)

1 / 68 (PUP)

http://pdanet.en.softonic.com/universaldownloader-launch (softonicdownloader_for_pdanet.exe)

24 / 68 (PUP)

http://pdanet.en.softonic.com/universaldownloader-launch (softonicdownloader_for_pdanet.exe)

0 / 68

http://pdanet.en.softonic.com/download-tracker?th=1/.../53wd8dfrbIDftId1eeGpLZCpGTRXcdMmedChj5omDhgqRwF2PA5VCH7WywwrGcoik8Ve0FwxDj7zdXn7ciCWGh0ksV1nk= (pdaneta300.exe)

The following 4 files have been seen to comunicate with pdanet.en.softonic.com in live environments.

TCP » 46.28.209.13:80

OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80

kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80

Client.exe

TCP » 46.28.209.13:80

WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.