home

www.worldfilesapplication.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
worldfilesapplication.com

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817
66.67%

Norman
Gen:Variant.Adware.Symmi.59817
66.67%

Avira AntiVirus
W32/Singanutre
33.33%

Reason Heuristics
PUP.installCore (M)
33.33%

The domain www.worldfilesapplication.com has been seen to resolve to the following 19 IP addresses.

54.192.195.35
server-54-192-195-35.iad53.r.cloudfront.net
March 4, 2016

54.192.195.200
server-54-192-195-200.iad53.r.cloudfront.net
March 4, 2016

54.192.195.177
server-54-192-195-177.iad53.r.cloudfront.net
March 4, 2016

52.84.20.177
server-52-84-20-177.sea32.r.cloudfront.net
March 4, 2016

52.84.20.171
server-52-84-20-171.sea32.r.cloudfront.net
March 4, 2016

52.84.20.101
server-52-84-20-101.sea32.r.cloudfront.net
March 4, 2016

52.84.20.18
server-52-84-20-18.sea32.r.cloudfront.net
March 4, 2016

52.84.20.16
server-52-84-20-16.sea32.r.cloudfront.net
March 4, 2016

52.84.20.232
server-52-84-20-232.sea32.r.cloudfront.net
March 4, 2016

52.84.20.215
server-52-84-20-215.sea32.r.cloudfront.net
March 4, 2016

52.84.20.204
March 4, 2016

54.192.195.170
server-54-192-195-170.iad53.r.cloudfront.net
February 27, 2016

54.192.195.156
server-54-192-195-156.iad53.r.cloudfront.net
February 27, 2016

54.192.195.149
server-54-192-195-149.iad53.r.cloudfront.net
February 27, 2016

54.192.195.145
server-54-192-195-145.iad53.r.cloudfront.net
February 27, 2016

54.192.195.142
server-54-192-195-142.iad53.r.cloudfront.net
February 27, 2016

54.192.195.128
server-54-192-195-128.iad53.r.cloudfront.net
February 27, 2016

54.192.195.55
server-54-192-195-55.iad53.r.cloudfront.net
February 27, 2016

54.192.195.224
server-54-192-195-224.iad53.r.cloudfront.net
February 27, 2016

File downloads found at URLs served by www.worldfilesapplication.com.

1 / 68      (PUP)
http://www.worldfilesapplication.com/.../installer.exe  (138ac23f75d1078f321ad9114b3df07b)

3 / 68      (PUP)
http://www.worldfilesapplication.com/.../installer.exe  (1d4bc93e3b089e63858085dc13891508)

2 / 68      (inconclusive)
http://www.worldfilesapplication.com/.../installer.exe  (230543985d2429f22b751867f2d6bb53)

The following 3 files have been seen to comunicate with www.worldfilesapplication.com in live environments.

TCP » 54.192.195.177:443
online-guardian.exe

TCP » 54.192.195.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.177:443
onlineguardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.