home

need-for-speed-most-wanted.soft32.es

Domain Information

Server location:
California, United States (US)

ASN:
AS54113 FASTLY - Fastly,US

Root domain:
soft32.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M)
100.00%

The domain need-for-speed-most-wanted.soft32.es has been seen to resolve to the following 2 IP addresses.

23.235.39.249
June 22, 2016

23.235.46.249
June 22, 2016

File downloads found at URLs served by need-for-speed-most-wanted.soft32.es.

1 / 68      (Adware)
http://need-for-speed-most-wanted.soft32.es/get/file/.../810739?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505042&pl=&ds=s&uid=1417271815e8f7c937bfcb31052b5fd5aa2781fa74&_ga=1559872694.1417271815&gclid=Cj0KEQiA-uWjBRChu9ie05m5ipgBEiQAuHIuKxtzIgzOFnLveQARCHy3dwWcdAr_JLXkyFgIngMvE4waAjob8P8HAQ  (need for speed most wanted setup.exe)

The following 5 files have been seen to comunicate with need-for-speed-most-wanted.soft32.es in live environments.

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.