The domain cdn.soft32deliveryfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in January of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Dublin City, Ireland (IE)
Create date:
Thursday, January 29, 2015
Expires date:
Sunday, January 29, 2017
Updated date:
Tuesday, December 29, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (88% detected)
Scan engine
Details
Detections
Reason Heuristics
(M), PUP.Ammyy, PUP.Downloader.Bundler.Soft32.Installer, PUP.Downloader.Bundler.Soft32.Installer (M), PUP.InstallCore.S (M), PUP.InstallCore.RES (M), PUP.Downloader.Bundler.Soft32 (M)
97.78%
Dr.Web
Program.RemoteAdmin.701, Trojan.InstallCore.49, Trojan.InstallCore.225
15.56%
Avira AntiVirus
W32/Mabezat, ADWARE/InstallCore.Gen9, Adware/InstallCore.707448, Adware/InstallCore.679336, PUA/InstallCore.Gen9, PUA/InstallCore.Gen7
13.33%
VIPRE Antivirus
Soft32Downloader, Threat.4783370
13.33%
Trend Micro House Call
TROJ_GEN.F47V1031, Suspicious_GEN.F47V0123, Suspicious_GEN.F47V0202, TROJ_GEN.R047C0OBD15
11.11%
Baidu Antivirus
Hacktool.Win32.AmmyyAdmin, Adware.Win32.InstallCore
11.11%
ESET NOD32
Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.WC potentially unwanted application, Win32/InstallCore.UE potentially unwanted application
8.89%
ESET NOD32
Win32/RemoteAdmin.Ammyy (variant), Win32/InstallCore.UE potentially unwanted (variant), Win32/InstallCore.WC potentially unwanted (variant)
6.67%
Fortinet FortiGate
Riskware/InstallCore
6.67%
Bkav FE
W32.HfsAdware
6.67%
Comodo Security
Application.Win32.InstallCore.LK, Application.Win32.InstallCore.AEK, UnclassifiedMalware
6.67%
NANO AntiVirus
Riskware.Win32.InstallCore.dnakal
4.44%
Qihoo 360 Security
Win32/Virus.Adware.f22, Win32/Virus.Adware.f4d
4.44%
The domain cdn.soft32deliveryfiles.com has been seen to resolve to the following 18 IP addresses.
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 23, 2015
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 23, 2015
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 23, 2015
ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 23, 2015
ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 23, 2015
ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 23, 2015
ec2-54-186-33-198.us-west-2.compute.amazonaws.com
June 30, 2015
ec2-54-148-73-114.us-west-2.compute.amazonaws.com
May 6, 2015
ec2-54-76-211-110.eu-west-1.compute.amazonaws.com
May 5, 2015
ec2-52-10-0-96.us-west-2.compute.amazonaws.com
May 4, 2015
File downloads found at URLs served by cdn.soft32deliveryfiles.com.
The following 6 files have been seen to comunicate with cdn.soft32deliveryfiles.com in live environments.