Should I block it?
90% of PCs block this file from running.
Possible reason:
Multiple malware detections
Relationships
Child process
Related files
ciberpuestoxp40[1].exe
Softonic Downloader by Softonic International (Signed)
| Version: | 1, 32, 4, 0 |
| MD5: | 2dc5206d725130a173619535083ecd0a |
| SHA1: | 5c7681fdf444ffd1199a370e0affca2a49506062 |
| SHA256: | 59fc59ed1ae2bfa9d5f75c87ea77371265404d26d0a4f84d9050ed85c388af95 |
Warning 7 antivirus scanners has detected malware.
What is ciberpuestoxp40[1].exe?
For software hosted at Softonic, downloads can be accompanied by a customized "Softonic Downloader" which shows "commercial offers, such as the Softonic Toolbar." Downloads not hosted by Softonic are not accompanied by the Softonic Downloader.
About ciberpuestoxp40[1].exe (from Softonic International)
“At Softonic we strive to retain the trust that millions of users place in us every day. Thanks to them, we are the leading software download site in Europe and Latin America and one of the world's top”
Overview
ciberpuestoxp40[1].exe is malware that executes as a process with the local user's privileges. The file is digitally signed by Softonic International. This particular version is usually found on Windows 7 Ultimate N (6.1.7601.65536).
Details
| File name: | ciberpuestoxp40[1].exe |
| Publisher: | Softonic |
| Product name: | Softonic Downloader |
| Typical file path: | C:\users\user\appdata\local\microsoft\windows\temporary internet files\content.ie5\zfe2tvvv\ciberpuestoxp40[1].exe |
| Original name: | SoftonicDownloader.exe |
| File version: | 1, 32, 4, 0 |
| Size: | 294.57 KB (301,640 bytes) |
| Certificate |
| Issued to: | Softonic International |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | Yes |
| .NET CLR: | No |
More details
Network connections
[UDP] listens on port 54566
Malware detections
Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| AhnLab V3 Internet Security |
2013.01.16 |
ASD.Prevention |
| Dr.Web |
7.0.4.09250 |
Adware.Downware.235 |
| ESET NOD32 |
7.7896 |
Win32/SoftonicDownloader.D |
| Fortinet |
5.0.26.0 |
Adware/SoftonicDownloader |
| eScan by MicroWorld |
12.0.250.0 |
Win32/SoftonicDownloader.D (ES) |
| NANO AntiVirus |
0.22.6.49175 |
Riskware.Win32.Downware.vqlgl |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1IK |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 1.73169078% | |
| Kernel CPU: | 0.90004922% | |
| User CPU: | 0.83164157% | |
| Kernel CPU time: | 941 ms/min | |
| Context switches: | 102/sec | |
| Memory |
| Private memory: | 33.25 MB | |
| Private (maximum): | 43.39 MB | |
| Private (minimum): | 43.36 MB | |
| Non-paged memory: | 33.25 MB | |
| Virtual memory: | 196.36 MB | |
| Virtual memory (peak): | 202.08 MB | |
| Working set: | 43.52 MB | |
| Working set (peak): | 43.52 MB | |
| Resource allocations |
| Threads: | 20 | |
| Handles: | 638 | |
| GUI GDI count: | 194 | |
| GUI GDI peak: | 198 | |
| GUI USER count: | 59 | |
| GUI USER peak: | 77 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\users\user\appdata\local\microsoft\windows\temporary internet files\content.ie5\zfe2tvvv\ciberpuestoxp40[1].exe" |
| Owner: | User |
Threads
Averages
| ciberpuestoxp40[1].exe (main module) |
| Total CPU: | 1.21848475% | |
| Kernel CPU: | 0.59646107% | |
| User CPU: | 0.62202368% | |
| CPU cycles: | 39,780,321/sec | |
| Context switches: | 74/sec | |
| Memory: | 856 KB | |
| ntdll.dll |
| Total CPU: | 0.04550367% | |
| Kernel CPU: | 0.03687380% | |
| User CPU: | 0.00862988% | |
| CPU cycles: | 1,084,782/sec | |
| Context switches: | 2/sec | |
| Memory: | 1.23 MB | |
| mshtml.dll (Windows Internet Explorer by Microsoft) |
| Total CPU: | 0.02867896% | |
| Kernel CPU: | 0.00955965% | |
| User CPU: | 0.01911930% | |
| CPU cycles: | 406,413/sec | |
| Memory: | 5.71 MB | |
| flash32_11_4_402_265.ocx (Shockwave Flash by Adobe Systems) |
| Total CPU: | 0.01034390% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.01034390% | |
| CPU cycles: | 368,369/sec | |
| Context switches: | 4/sec | |
| Memory: | 10.14 MB | |
| WININET.dll |
| Total CPU: | 0.00856788% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00856788% | |
| CPU cycles: | 78,773/sec | |
| Memory: | 980 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
100.00% |
|
