home

cpu-z.soft32.com

I.T.N.T. SRL

Domain Information

The domain cpu-z.soft32.com registered by I.T.N.T. SRL was initially registered in September of 2003 through ENOM, INC.. The domain hosts various software downloads. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Monday, September 29, 2003

Expires date:
Sunday, September 29, 2024

Updated date:
Monday, October 6, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
soft32.com

Whois:
2 soft32.com records

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ZuluSoftSRL.L, PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
100.00%

VIPRE Antivirus
Threat.4783370
60.00%

ESET NOD32
MSIL/Soft32Downloader.C potentially unwanted application
60.00%

Malwarebytes
PUP.Optional.Soft32.A, PUP.Optional.Zulu
60.00%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw
60.00%

Dr.Web
Adware.Downware.2152
40.00%

McAfee
SoftDropper
40.00%

Trend Micro House Call
ADW_DOWNWARE.GC, Suspici.F72B5B4F
40.00%

Agnitum Outpost
PUA.DL.Agent, PUA.Soft32Downloader
40.00%

Avira AntiVirus
APPL/Downloader.Gen
40.00%

Clam AntiVirus
Win.Adware.Outbrowse-2
20.00%

Trend Micro
ADW_DOWNWARE.GC
20.00%

K7 AntiVirus
Unwanted-Program
20.00%

Comodo Security
UnclassifiedMalware
20.00%

The domain cpu-z.soft32.com has been seen to resolve to the following 16 IP addresses.

54.192.192.114
server-54-192-192-114.iad53.r.cloudfront.net
September 14, 2016

54.192.192.108
server-54-192-192-108.iad53.r.cloudfront.net
September 14, 2016

54.192.192.90
server-54-192-192-90.iad53.r.cloudfront.net
September 14, 2016

54.192.192.54
server-54-192-192-54.iad53.r.cloudfront.net
September 14, 2016

54.192.192.38
server-54-192-192-38.iad53.r.cloudfront.net
September 14, 2016

54.192.192.29
server-54-192-192-29.iad53.r.cloudfront.net
September 14, 2016

54.192.192.199
server-54-192-192-199.iad53.r.cloudfront.net
September 14, 2016

54.192.192.123
server-54-192-192-123.iad53.r.cloudfront.net
September 14, 2016

23.235.39.249
April 8, 2016

199.27.76.249
February 27, 2016

23.235.46.249
February 27, 2016

199.27.76.184
November 10, 2014

23.235.46.185
November 10, 2014

199.27.76.185
October 24, 2014

199.27.78.185
August 1, 2014

23.235.46.184
August 1, 2014

File downloads found at URLs served by cpu-z.soft32.com.

1 / 68      (Adware)
http://cpu-z.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Cpu z&mt=&ad=45202987278&pl=www.cpuid.com&ds=c&uid=1407649341a93fd3efc5bf21769ed9688de4b7877d&_ga=674096361.1407649342&gclid=CMyZsbL-h8ACFQSBaQodnJAA7Q  (cpu z setup.exe)

1 / 68      (Adware)
http://cpu-z.soft32.com/get/file/.../811328?tg=fr&gclid=CMPhpsKb2LMCFaTMtAodvncABw&s=_eCQhkGZTv68qvSdYGYPag&t=1353404123&ext=.exe  (cpu z setup.exe)

0 / 68
http://cpu-z.soft32.com/get/file/id/.../?no_download_manager=true  (cpu-z_1.71-setup-en.exe)

12 / 68    (Adware)
http://cpu-z.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Cpu z&mt=&ad=45202987158&pl=www.cpuid.com&ds=c&uid=1406261432c3c632ddc75399a1149402ea0667fed7&_ga=398027052.1406261433&gclid=CNvIm4HM378CFWoR7AodHSsASA  (cpu z setup.exe)

7 / 68      (Adware)
http://cpu-z.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Cpu z&mt=&ad=45202987278&pl=www.cpuid.com&ds=c&uid=1413731031287fd19f91895e5b260faefecada8364&_ga=1747817244.1413731032&gclid=COW3rcD-uMECFRJp7Aod6xgAwg  (cpu z setup.exe)

11 / 68    (Adware)
http://cpu-z.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Cpu z&mt=&ad=45202987038&pl=www.cpuid.com&ds=c&gclid=CMaNr6O7l78CFRJk7AodVCsAqw  (cpu z setup.exe)

The following 26 files have been seen to comunicate with cpu-z.soft32.com in live environments.

TCP » 54.192.192.108:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.90:80
se.exe

TCP » 54.192.192.29:80
browser.exe (Browser)

TCP » 54.192.192.199:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.192.54:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.192.192.54:443
whatsapptime.exe

TCP » 54.192.192.90:80
browser.exe (Browser)

TCP » 54.192.192.29:80
browser.exe (Browser)

TCP » 54.192.192.123:443
onlineguardian-v2.exe

TCP » 54.192.192.199:443
browser.exe (speed browser by Smart Applications)

TCP » 54.192.192.199:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 54.192.192.38:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.123:443
GPlayer.exe (by Exent Technologies)

TCP » 54.192.192.199:80
browser.exe (Browser)

TCP » 54.192.192.199:443
onlineguardian-v2.exe

TCP » 54.192.192.29:443
playthruplayer.exe (Playthru Player)

TCP » 54.192.192.90:443
rthdcpd.exe

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

 
Latest 20 of 49 files

URL:
http://cpu-z.soft32.com/

Google Analytics:
UA-110868

Title:
“Download CPU-Z 1.75”

Description:
“CPU-Z free download. Get the latest version now. Gathers information on some of the main devices of your system.”

Network:
Amazon Cloudfront

Web server:
nginx

soft32.com.br

soft32.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.