home

yandere-simulator.fr.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Adware/unwanted app distribution

Scan engine
Details
Detections

Reason Heuristics
Adware.Bundler (M), PUP.InstallCore.RE48 (M)
100.00%

ESET NOD32
Win32/InstallMonetizer.AN potentially unwanted application
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

Microsoft Security Essentials
SoftwareBundler:Win32/Stallmonitz
50.00%

Kaspersky
not-a-virus:AdWare.Win32.InstallMonster
50.00%

The domain yandere-simulator.fr.softonic.com has been seen to resolve to the following IP address.

46.28.209.14
www.softonic.fr
April 5, 2016

File downloads found at URLs served by yandere-simulator.fr.softonic.com.

1 / 68      (PUP)
http://yandere-simulator.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOKkYzUiVWQorfMH2Ywb6QfUNX3mPdrjcTC9T1sSZMTv/3QV5K/.../RE3GXwbmF4YdbVrVE 4xlTm60PQFczypQ2 bMJ84Elz75BQ1aawNkQ5jQ=  (yandere-simulator-downloader.exe)

0 / 68
http://yandere-simulator.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPNbFIbvPqwG59DNzhKGKPopOS/16MIOzRwqccoV7ljLrq02KluxZqBNY7nnrk5RYidcqFH5JE0c4Pp6z59DpAs6jwCUwkFPm/a0gm/72 TYZV8WcYD/.../ZdY=  (yandere-simulator-downloader.exe)

0 / 68
http://yandere-simulator.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOKkYzUiVWQorfMH2Ywb6QfUNX3mPdrjcTC9T1sSZMTv/3QV5K/.../RE3GXwbmF4YdbVrVE 4xlTm60PQFczypQ2 bMJ84Elz75BQ1aawNkQ5jQ=  (yandere-simulator-downloader.exe)

5 / 68      (PUP)
http://yandere-simulator.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP7F/eGrpctXdF6XTnr1dg/.../LOXSUZBCBSX3DcbChFhwbbAeycAdNd2Fq8=  (gamemanageryandere.exe)

The following file have been seen to comunicate with yandere-simulator.fr.softonic.com in live environments.

TCP » 46.28.209.14:80
new_chrome.exe (Google Chrome by Google)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.