home

virtual-dj.soft32.es

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
soft32.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
100.00%

The domain virtual-dj.soft32.es has been seen to resolve to the following 11 IP addresses.

54.230.194.184
server-54-230-194-184.iad53.r.cloudfront.net
August 11, 2016

54.230.194.135
server-54-230-194-135.iad53.r.cloudfront.net
August 11, 2016

54.230.194.97
server-54-230-194-97.iad53.r.cloudfront.net
August 11, 2016

54.230.194.6
server-54-230-194-6.iad53.r.cloudfront.net
August 11, 2016

54.230.194.253
server-54-230-194-253.iad53.r.cloudfront.net
August 11, 2016

54.230.194.240
server-54-230-194-240.iad53.r.cloudfront.net
August 11, 2016

54.230.194.225
server-54-230-194-225.iad53.r.cloudfront.net
August 11, 2016

54.230.194.209
server-54-230-194-209.iad53.r.cloudfront.net
August 11, 2016

199.27.76.249
May 27, 2016

23.235.46.249
May 18, 2016

23.235.39.249
May 18, 2016

File downloads found at URLs served by virtual-dj.soft32.es.

1 / 68      (Adware)
http://virtual-dj.soft32.es/get/file/.../1230389?lp=dsa&tg=ar&kw=_cat:soft32.es&mt=b&ad=31507504322&pl=&ds=s&uid=1422576148ad114841018bbf9bb7067d4a4426cecc&_ga=1604178871.1422576149&gclid=CP3Ps461usMCFRJp7AodMDIAZg  (virtual-dj.exe)

1 / 68      (Adware)
http://virtual-dj.soft32.es/get/file/.../746234?lp=dsa&tg=ar&kw=_cat:soft32.es&mt=b&ad=31507504322&pl=&ds=s&uid=141780566329e160367a231716fb6403538d8b2f98&_ga=571124869.1417805665&gclid=CKzW47fJr8ICFWRp7Aod6hIADQ  (virtual dj setup.exe)

1 / 68      (Adware)
http://virtual-dj.soft32.es/get/file/id/.../?lp=dsa&tg=ar&kw=_cat:soft32.es&mt=b&ad=31507504322&pl=&ds=s&uid=141186767635bde717ffb280e03c2bdd3af9c01f6e&_ga=260703912.1411867677&gclid=CMnQufnggsECFVJo7Aod0joA-g  (virtual dj setup.exe)

1 / 68      (Adware)
http://virtual-dj.soft32.es/get/file/id/.../?lp=dsa&tg=ar&kw=_cat:soft32.es&mt=b&ad=31507504322&pl=&ds=s&uid=14122765975007656b30db5c4250a14dba1ff52481&_ga=742522260.1412276597&gclid=CIezj6XUjsECFWsV7AodHEQA7A  (virtual dj setup.exe)

The following 8 files have been seen to comunicate with virtual-dj.soft32.es in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

TCP » 54.230.194.135:443
catwsprx.exe (CatWSPrx.exe by Catalytix Web Services)

TCP » 54.230.194.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.