home

powerpoint.soft32.es

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
soft32.es

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
100.00%

The domain powerpoint.soft32.es has been seen to resolve to the following 28 IP addresses.

54.192.192.108
server-54-192-192-108.iad53.r.cloudfront.net
September 15, 2016

54.192.192.90
server-54-192-192-90.iad53.r.cloudfront.net
September 15, 2016

54.192.192.54
server-54-192-192-54.iad53.r.cloudfront.net
September 15, 2016

54.192.192.38
server-54-192-192-38.iad53.r.cloudfront.net
September 15, 2016

54.192.192.29
server-54-192-192-29.iad53.r.cloudfront.net
September 15, 2016

54.192.192.161
server-54-192-192-161.iad53.r.cloudfront.net
September 15, 2016

54.192.192.205
server-54-192-192-205.iad53.r.cloudfront.net
September 5, 2016

54.192.192.199
server-54-192-192-199.iad53.r.cloudfront.net
September 5, 2016

54.192.192.179
server-54-192-192-179.iad53.r.cloudfront.net
September 5, 2016

54.192.192.123
server-54-192-192-123.iad53.r.cloudfront.net
September 5, 2016

54.192.192.97
server-54-192-192-97.iad53.r.cloudfront.net
September 5, 2016

54.192.192.87
server-54-192-192-87.iad53.r.cloudfront.net
September 5, 2016

54.192.192.53
server-54-192-192-53.iad53.r.cloudfront.net
September 5, 2016

54.192.192.24
server-54-192-192-24.iad53.r.cloudfront.net
September 5, 2016

52.85.142.173
server-52-85-142-173.iad12.r.cloudfront.net
August 10, 2016

52.85.142.152
server-52-85-142-152.iad12.r.cloudfront.net
August 10, 2016

52.85.142.93
server-52-85-142-93.iad12.r.cloudfront.net
August 10, 2016

52.85.142.12
server-52-85-142-12.iad12.r.cloudfront.net
August 10, 2016

52.85.142.5
server-52-85-142-5.iad12.r.cloudfront.net
August 10, 2016

52.85.142.251
server-52-85-142-251.iad12.r.cloudfront.net
August 10, 2016

52.85.142.240
server-52-85-142-240.iad12.r.cloudfront.net
August 10, 2016

52.85.142.228
server-52-85-142-228.iad12.r.cloudfront.net
August 10, 2016

151.101.20.249
July 3, 2016

23.235.39.249
February 3, 2016

23.235.46.249
January 5, 2016

199.27.76.249
January 5, 2016

199.27.76.185
December 11, 2014

23.235.46.185
December 11, 2014

File downloads found at URLs served by powerpoint.soft32.es.

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=54594556736&pl=&ds=s&gclid=Cj0KEQiA9eamBRDqvIz_qPbVteABEiQAnIBTEGGwI--i5OID-Z07Fvj3NpSnEB_V9L0IgAzSz7kGRJMaAl9H8P8HAQ&uid=1423616933da9cbc02910081b97b62f3ccab99d4d0  (microsoft-powerpoint-2010.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=54594556736&pl=&ds=s&uid=1423521577b79f8c35ef4a345e763970e6875ae3bb&_ga=257247672.1423521577&gclid=CjwKEAiA0uGmBRDwj7mE1v-LlCYSJADxH16OZD--Z5LDJTkykSC8ss9efDgxPd811Kaaaw9xJNZKTBoCIWDw_wcB  (microsoft-powerpoint-2010.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=141410096572dde6c3a4e95ba0459b7647954f9ce9&_ga=1665025188.1414100964&gclid=CMLvxc3gw8ECFbFDMgod0hcA-Q  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505162&pl=&ds=s&uid=1414520705de139881cdccb8d13792bfda3718bd96&_ga=897431195.1414520706&gclid=Cj0KEQjw_byiBRCu9qm5lc28ufgBEiQAWq-tayYdRHShkHoOnbKMsH3qnxdouzida5Q4Oxf_4s_Z65EaApy78P8HAQ  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=54594556736&pl=&ds=s&uid=1423198390bd00caa9ddbb195c5daf0f61d4e0cd29&_ga=656910174.1423198391&gclid=CIzKmJLDzMMCFQQLaQodBSkAtQ  (microsoft-powerpoint-2010.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/id/.../?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=1407861804dd6256d0d28a247e0072d35f701e084d&_ga=1292075214.1407861805&gclid=CjwKEAjw9qafBRCRiYrL4-fpuFkSJACvocQ1dZqwYY2Kgr8SSYhkO0bKKCgPLQnThB-PFS81OrZOchoCFfHw_wcB  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505042&pl=&ds=s&uid=1415870335438301c7f03a1c785473ec830a2edf60&_ga=1469910192.1415870335&gclid=CIOtp4Gg98ECFSnkwgod82wAkw  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/id/.../?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=1408572443db8814d67c4c329b4c63749f5e8b802f&_ga=333819369.1408572443&gclid=CLCg25vtosACFZJr7AodewsA-Q  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/id/.../?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=1407861804dd6256d0d28a247e0072d35f701e084d&_ga=1292075214.1407861805&gclid=CjwKEAjw9qafBRCRiYrL4-fpuFkSJACvocQ1dZqwYY2Kgr8SSYhkO0bKKCgPLQnThB-PFS81OrZOchoCFfHw_wcB  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=54594556736&pl=&ds=s&uid=14227433716616e3a4c48d4136ff472c728b37e7dc&_ga=99656579.1422743371&gclid=CKTH6Yikv8MCFQGUfgodASIAGw  (microsoft-powerpoint-2010.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=141446036178b92922258bd2235ebab5116cdae716&_ga=1158184339.1414460360&gclid=CLyDr7mbzsECFe1cMgods3sA7w  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505042&pl=&ds=s&uid=14172742116b89e060c25b200a1ffbc40a16b4bcdd&_ga=284099538.1417274211&gclid=CJ2-vO-NoMICFSfItAodM1IABw  (microsoft powerpoint 2010 setup.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../  (x16-32694.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=54594556736&pl=&ds=s&uid=142242447481391f27304f648456029c8329f3a379&_ga=223695624.1422424473&gclid=COb-4ZaAtsMCFYQ9aQodUmAARw  (microsoft-powerpoint-2010.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/id/.../?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505162&pl=&ds=s&uid=14108508996ab48dba673a5a7e5886ce016e0f161f&_ga=1182725722.1410850638&gclid=CLfRnZSV5cACFSuWtAoddj0AVg  (microsoft powerpoint 2010 setup.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/.../807402?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=14173024029b5dd45a976b47c099f832f98a47241d&_ga=1956238615.1417302403&gclid=CIPS3-_2oMICFaVDMgodG2sANQ  (microsoft powerpoint 2010 setup.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../?iframe=true&width=420&height=200&javascript=1&no_download_manager=1  (x16-32694.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../?rel=breadcrumbno_download_manager=true  (x16-32694.exe)

1 / 68      (Adware)
http://powerpoint.soft32.es/get/file/id/.../?lp=dsa&tg=mx&kw=_cat:soft32.es&mt=b&ad=35002035296&pl=&ds=s&uid=14083928260c90d6c8dd480c2a7f9de8e1c7d50ba3&_ga=1481752636.1408392827&gclid=Cj0KEQjwyMafBRCU7OCRyc2vitsBEiQAKV4H9G5UPctGbcw1Ol6dAhxrrF_b1rvWDw8aJhwY2ry1cSoaAvz28P8HAQ  (microsoft powerpoint 2010 setup.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../?iframe=true&width=420&height=200&no_download_manager=1  (x16-32694.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../?no_download_manager=true  (x16-32694.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../  (x16-32694.exe)

0 / 68
http://powerpoint.soft32.es/get/file/id/.../?rel=center  (x16-32694.exe)

The following 58 files have been seen to comunicate with powerpoint.soft32.es in live environments.

TCP » 54.192.192.108:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.90:80
se.exe

TCP » 52.85.142.228:443
jingling.exe

TCP » 52.85.142.228:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.53:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.29:80
browser.exe (Browser)

TCP » 54.192.192.87:443
UCBrowser.exe (by UCWeb)

TCP » 54.192.192.97:443
UCBrowser.exe (by UCWeb)

TCP » 54.192.192.199:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.192.54:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.192.192.54:443
whatsapptime.exe

TCP » 52.85.142.5:80
mobogenieP2sp.exe (mobogenie by mobogenie.com)

TCP » 52.85.142.228:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.93:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.179:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.53:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 54.192.192.90:80
browser.exe (Browser)

TCP » 52.85.142.12:443
browser.exe (Browser)

TCP » 52.85.142.12:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.12:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

 
Latest 20 of 127 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.