home

shareware.pandasoftware.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
pandasoftware.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Total Defense
JS/Nimda.A
100.00%

Comodo Security
UnclassifiedMalware
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

Avira AntiVirus
W95/Bumble
100.00%

Sophos
W95/CIH-10xx
100.00%

AegisLab AV Signature
W95-Bumble.Gen
100.00%

G Data
Win32.Trojan.Agent.RL7KZ4
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.15341962!355735906
100.00%

AVG
BackDoor.Generic_r
100.00%

Qihoo 360 Security
Win32/Virus.054
100.00%

The domain shareware.pandasoftware.com has been seen to resolve to the following 2 IP addresses.

23.15.7.146
a23-15-7-146.deploy.static.akamaitechnologies.com
February 8, 2016

23.15.7.152
a23-15-7-152.deploy.static.akamaitechnologies.com
February 8, 2016

File downloads found at URLs served by shareware.pandasoftware.com.

10 / 68    (Malware)
http://shareware.pandasoftware.com/pq/gen/.../pqremove.com  (bcf13d565a08484a1278b7af0d6ccad8)

The following 14 files have been seen to comunicate with shareware.pandasoftware.com in live environments.

TCP » 23.15.7.152:80
browser.exe (speed browser by Smart Applications)

TCP » 23.15.7.152:80
updateadmin.exe

TCP » 23.15.7.146:80
whatsapptime.exe

TCP » 23.15.7.152:443
browser.exe (Browser)

TCP » 23.15.7.146:80
wordsurfer-setup-1.10.0.19.exe (Word Surfer)

TCP » 23.15.7.146:80
goladggbfodealhfiglmomejmnjndkdh.crx

TCP » 23.15.7.146:80
hiiabkfnbgeenooemhkfpclkfgjeafoi.crx

TCP » 23.15.7.152:80
clementine.exe (Clementine)

TCP » 23.15.7.152:80
midori.exe

TCP » 23.15.7.152:80
StormAlertsApp.exe (StormAlertsApp)

TCP » 23.15.7.152:80
setup.exe

TCP » 23.15.7.152:80
slimcleanerplus.exe (SlimCleaner Plus by SlimWare Utilities)

TCP » 23.15.7.152:80
client.exe (ClientWrapper)

TCP » 23.15.7.152:80
ehgnppjmhjffabggnbplfokbnhbfmona.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.