home

winmx-music.soft32.com

Domain Information

Server location:
California, United States (US)

ASN:
AS54113 FASTLY - Fastly

Root domain:
soft32.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ZuluSoftSRL.R, PUP.ProsperaSoftware.Installer (M)
100.00%

VIPRE Antivirus
Threat.4783370, ProsperaSoftware
100.00%

Dr.Web
Adware.Downware.9012, Program.Unwanted.538
100.00%

AVG
Generic
100.00%

Malwarebytes
PUP.Optional.Zulu
50.00%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw
50.00%

Avira AntiVirus
APPL/Downloader.Gen
50.00%

ESET NOD32
MSIL/Soft32Downloader.C potentially unwanted application
50.00%

avast!
Dropper-gen [Drp]
50.00%

Vba32 AntiVirus
TScope.Trojan.MSIL
50.00%

Agnitum Outpost
PUA.Downware
50.00%

McAfee
Artemis!E6A73348F0B6
50.00%

Baidu Antivirus
PUA.Win32.Downloader.soft32
50.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
50.00%

F-Secure
Riskware.Gen:Variant.Application.Bundler
50.00%

The domain winmx-music.soft32.com has been seen to resolve to the following 4 IP addresses.

23.235.39.249
May 25, 2016

23.235.46.249
May 25, 2016

199.27.76.185
January 16, 2015

23.235.39.184
January 16, 2015

File downloads found at URLs served by winmx-music.soft32.com.

6 / 68      (PUP)
http://winmx-music.soft32.com/get/file/id/.../?no_download_manager=true  (winmx_music_free.exe)

15 / 68    (Adware)
http://winmx-music.soft32.com/get/file/.../1223507?lp=dsa&tg=us&kw=_inpage:Home Windows Internet&mt=b&ad=54409737558&pl=&ds=s&uid=14190039156c2b147ab6639638a61214b4f282f707&_ga=2018587559.1419003915&gclid=CKqOxsG50sICFQphfgodsKQASw  (winmx music setup.exe)

The following 5 files have been seen to comunicate with winmx-music.soft32.com in live environments.

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.