home

software.softwareserver05.com

Domain Information

Server location:
Illinois, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
softwareserver05.com

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MediaDownloader.Installer.Meta (M), PUP.InstallCore.MediaDow.Installer.Meta (M), PUP.InstallCore (M)
75.00%

Malwarebytes
PUP.Optional.Media
25.00%

K7 AntiVirus
Trojan
25.00%

Trend Micro House Call
Suspicious_GEN.F47V0507
25.00%

McAfee
Artemis!ED8513690F80
25.00%

The domain software.softwareserver05.com has been seen to resolve to the following IP address.

69.4.233.68
no-rdns.ord02.hostingservicesinc.net
July 6, 2016

File downloads found at URLs served by software.softwareserver05.com.

1 / 68      (PUP)
http://software.softwareserver05.com/MediaDownloaderIron.exe  (mediadownloadersetup.exe)

1 / 68      (PUP)
http://software.softwareserver05.com/MediaDownloaderIron.exe  (c02933ce23192b815c8fe7bf9e2faf3d)

1 / 68      (PUP)
http://software.softwareserver05.com/MediaDownloaderIron.exe  (393fcd13_stp.exe)

4 / 68      (inconclusive)
http://software.softwareserver05.com/.../setup.exe  (ed8513690f8092d9aa0ac4eea6e53449)

The following file have been seen to comunicate with software.softwareserver05.com in live environments.

TCP » 69.4.233.68:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

anymediaconverter.com

cdn016.com

softwaredownloadserver09.com

softwareserver04.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.