» smcdn.softfiles.ru
Overview
Analysis
IPs Addresses (3)
Downloads (21)
Network (7)
Website Detail
Related Domains (17)

smcdn.softfiles.ru

Private Person (Proxy Registrant)

Domain Information

The domain smcdn.softfiles.ru is registered by proxy through R01-RU and was originally registered in August of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Gunzenhausen, Bayern within Germany which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

R01-RU

Server location:

Bayern, Germany (DE)

Create date:

Wednesday, August 26, 2015

Expires date:

Friday, August 26, 2016

ASN:

AS24940 HETZNER-AS Hetzner Online AG,DE

Root domain:

softfiles.ru

Whois:

1 softfiles.ru record

Scanner detections:

Detections (67% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.INSITEGROUP.Installer (M), PUP.INSITEGR.Installer (M), PUP (M)

93.33%

Bkav FE

W32.HfsAdware

6.67%

The domain smcdn.softfiles.ru has been seen to resolve to the following 3 IP addresses.

85.10.196.94

static.85-10-196-94.clients.your-server.de

February 26, 2016

178.63.40.158

static.158.40.63.178.clients.your-server.de

February 26, 2016

85.10.200.21

85-10-200-21.clients.your-server.de

February 26, 2016

File downloads found at URLs served by smcdn.softfiles.ru.

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1456116246&parameter=uTorrent_Rus_Setup.exe&secl=AQMqsx-8hxjVFU-x752upg&se=softmen.ru&cid=28846951.1456080250&uid=51984044.25461072&ref=mail.ru (aa780ac16ce478b7267170e93cb09d2c)

1 / 68

http://smcdn.softfiles.ru/6.html?sect=1454363937&parameter=CDBurnerXP_x32_Rus_Setup.exe&secl=JeXiPsssQSdCp6isjvkSEA&clr=1 (cdbxp_setup_4.5.6.5931_minimal.exe)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1457065582&parameter=Revo_Uninstaller_Rus_Setup.exe&secl=5C7gRQGs8a3fLDBBQDXBdA&clr=1 (revosetup.exe)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1454972126&parameter=VLC_MediaPlayer_x32_Rus_Setup.exe&secl=pdbbmOcm-tcmFVbzRLGaew&se=softmen.ru&cid=593661589.1454936130&uid=19819209.83300862&ref=google (ab7a36f567ea5d9bfef29e9f0decd509)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1457033685&parameter=KMPlayer_Rus_Setup.exe&secl=JsTWPHkqOCzLRflnyBBBsw&se=softmen.ru&cid=640531572.1456997619&uid=10626980.45741057&ref=mail.ru (9e8c52e216eeea804f07e2e041e06ecb)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1457658783&parameter=Adobe_Flash_Player_Opera_Chromium.exe&secl=wruQEhMfUEiknoaDtCDlPA&clr=1 (flashplayerinstaller.exe)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1457658783&parameter=Adobe_Flash_Player_Firefox.exe&secl=GQYf2TSTJhDAmjf5FqhCAg&clr=1 (176a6ef3-6ca7-4cd1-b4e4-5f9a8ae6e430)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1457658783&parameter=Adobe_Flash_Player_Internet_Explorer.exe&secl=Iy1RwIS6by2IjL9in41UNQ&clr=1 (9390d595-10eb-43bf-9459-dff45b3caa74)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1454738124&parameter=uTorrent_Rus_Setup.exe&secl=uATxt6KDtdCrwOY_Ib24OA&se=softmen.ru&cid=1061801116.1454702127&uid=71655361.23986413&ref=mail.ru (57c439bb0e168d55f35e9501198b4ebf)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1457658783&parameter=Adobe_Flash_Player_Opera_Chromium.exe&secl=wruQEhMfUEiknoaDtCDlPA&se=softmen.ru&cid=1159954440.1457622786&uid=84752414.46566489&ref=google (f84c41011b40ec11299819f94eae35c2)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1456007624&parameter=ICQ_Rus_Setup.exe&secl=3dP48fq2bW22Y3MnixF6vQ&se=softmen.ru&cid=1753807836.1455971624&uid=70830286.85029101&ref=google (06a51cc5740186a6c7db578e1d6a0e00)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1452118567&parameter=Adobe_Flash_Player_Internet_Explorer.exe&secl=x7W9QVLbvNfaU4rzFl4Y_g&se=softmen.ru&cid=1796600201.1452026990&uid=61249943.87145180&ref=google (5ac85fab702af45f366a8d8d0b9c0482)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1457405650&parameter=Skype_Rus_Full_Setup.exe&secl=TX689OscXvRN6ANJaz5wwA&se=softmen.ru&cid=515757066.1457369658&uid=97364739.22355989&ref=HIDE_REF (skype.exe)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1457396066&parameter=K-Lite_Codec_Pack_Basic.exe&secl=vxepxNt5I_EUgqGtBHEqEA&se=softmen.ru&cid=402637305.1457360078&uid=27274854.87006643&ref=mail.ru (ba52c892cead610de665ef3d3a647c08)

0 / 68

http://smcdn.softfiles.ru/6.html?sect=1456115129&parameter=uTorrent_Rus_Setup.exe&secl=XQ0AvWysKNKqVDTiCnllbg&clr=1 (uTorrent.exe)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1456006311&parameter=Mail.RuAgent_Rus_Setup.exe&secl=qCnSO4A5WcoAqkOy_j498g&se=softmen.ru&cid=851934873.1455970280&uid=55797140.84889461&ref=google (dc8f4c46cc8d15a655b44853c2d4a9db)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1454008862&parameter=Skype_Rus_Full_Setup.exe&secl=STkzexJNsRKgvS6WcU7t9w&se=softmen.ru&cid=496384030.1453972864&uid=84456014.63553293&ref=google (16a004c6baac21c9e13bb4e51c840936)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1455761722&parameter=Adobe_Flash_Player_Internet_Explorer.exe&secl=zlXdhj7rLtr2RRTSWhATrg&se=softmen.ru&cid=1398285764.1455725849&uid=95653677.68640413&ref=mail.ru (5c4f905a18bdd28386df1d74f742d0c2)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1455652604&parameter=K-Lite_Codec_Pack_Basic.exe&secl=TuiEDblqvk-qCCuxWjLNLg&se=softmen.ru&cid=167137820.1455616557&uid=21632676.34239806&ref=google (8500244932eb659de477f0edf26f0334)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1454804704&parameter=uTorrent_Rus_Setup.exe&secl=aPVXFxqqlEpz5hJfdQqGHw&se=softmen.ru&cid=1804646972.1454768709&uid=95092795.31990148&ref=mail.ru (5f6a55d1decfb51744a59762784f893f)

1 / 68 (Adware)

http://smcdn.softfiles.ru/6.html?sect=1454540593&parameter=Adobe_Flash_Player_Firefox.exe&secl=q3O2UAsAD_HT2HTBYECsSg&se=softmen.ru&cid=82396895.1454504594&uid=22481037.58465518&ref=mail.ru (13c236d1ef0f3b7f4b6f4cb216b4e2cc)

The following 7 files have been seen to comunicate with smcdn.softfiles.ru in live environments.

TCP » 85.10.196.94:80

SoftobaseUpdater_2.0.exe (Softobase Updater)

TCP » 178.63.40.158:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 85.10.196.94:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.200.21:80

directx_9.10.11.exe

TCP » 85.10.200.21:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.63.40.158:80

installpack.exe

TCP » 178.63.40.158:80

installpack.exe

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.200.21:80

SoftobaseClient.exe (SoftobaseClient by Microsoft)

URL:

http://smcdn.softfiles.ru/

Web server:

nginx/1.8.0

Related Domains

besplatnyeprogrammy.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.