home

files.ua.prom.st

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
prom.st

The domain files.ua.prom.st has been seen to resolve to the following 16 IP addresses.

54.192.195.171
server-54-192-195-171.iad53.r.cloudfront.net
June 25, 2016

54.192.195.132
server-54-192-195-132.iad53.r.cloudfront.net
June 25, 2016

54.192.195.55
server-54-192-195-55.iad53.r.cloudfront.net
June 25, 2016

54.192.195.44
server-54-192-195-44.iad53.r.cloudfront.net
June 25, 2016

54.192.195.204
server-54-192-195-204.iad53.r.cloudfront.net
June 25, 2016

54.192.195.187
server-54-192-195-187.iad53.r.cloudfront.net
June 25, 2016

54.192.195.186
server-54-192-195-186.iad53.r.cloudfront.net
June 25, 2016

54.192.195.180
server-54-192-195-180.iad53.r.cloudfront.net
June 25, 2016

54.192.195.114
server-54-192-195-114.iad53.r.cloudfront.net
October 1, 2015

54.192.194.198
server-54-192-194-198.iad53.r.cloudfront.net
October 1, 2015

54.192.194.170
server-54-192-194-170.iad53.r.cloudfront.net
October 1, 2015

54.192.193.201
server-54-192-193-201.iad53.r.cloudfront.net
October 1, 2015

54.192.192.162
server-54-192-192-162.iad53.r.cloudfront.net
October 1, 2015

54.230.195.13
server-54-230-195-13.iad53.r.cloudfront.net
October 1, 2015

54.230.194.175
server-54-230-194-175.iad53.r.cloudfront.net
October 1, 2015

54.230.193.198
server-54-230-193-198.iad53.r.cloudfront.net
October 1, 2015

File downloads found at URLs served by files.ua.prom.st.

0 / 68
http://files.ua.prom.st/626033_vimogi_do_kval__erdzhennya.rtf  (271368a920f105234623bb5490aa0a8c)

0 / 68
http://files.ua.prom.st/625823_dogovir.rtf  (1ba97b6d855ecacfa6c69828135ce974)

0 / 68
http://files.ua.prom.st/625822_dokumentatsiya__nih_torgiv.rtf  (10ccb85adecf6633a71080950779f957)

0 / 68
http://files.ua.prom.st/350929_export_product__4_16_01_49.xls  (d62a4ff78fe6c59e1d9f0ad88310397c)

The following 6 files have been seen to comunicate with files.ua.prom.st in live environments.

TCP » 54.192.195.204:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.204:443
online-guardian-v2.0.9.exe

TCP » 54.192.192.162:80
se.exe

TCP » 54.192.192.162:80
browser.exe (Browser)

TCP » 54.192.195.171:443
browser.exe (Browser)

TCP » 54.192.195.204:443
apptrailers.exe

TCP » 54.192.192.162:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.