home

audacity.soft32.es

Domain Information

Server location:
California, United States (US)

ASN:
AS54113 FASTLY - Fastly,US

Root domain:
soft32.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer (M)
100.00%

The domain audacity.soft32.es has been seen to resolve to the following 3 IP addresses.

23.235.39.249
June 7, 2016

23.235.46.249
June 3, 2016

199.27.76.249
June 3, 2016

File downloads found at URLs served by audacity.soft32.es.

1 / 68      (Adware)
http://audacity.soft32.es/get/file/id/.../?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505162&pl=&ds=s&uid=141070016773795981d1139627f0121eaf6c3f856d&_ga=1823186785.1410700167&gclid=CNyKo9jj4MACFYUIwwodkEIAhA  (audacity setup.exe)

1 / 68      (Adware)
http://audacity.soft32.es/get/file/id/.../?lp=dsa&tg=es&kw=_cat:soft32.es&mt=b&ad=31507505162&pl=&ds=s&uid=141070016773795981d1139627f0121eaf6c3f856d&_ga=1823186785.1410700167&gclid=CNyKo9jj4MACFYUIwwodkEIAhA  (audacity setup.exe)

The following 6 files have been seen to comunicate with audacity.soft32.es in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.