home

download2.winzip.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
winzip.com

The domain download2.winzip.com has been seen to resolve to the following 23 IP addresses.

52.85.131.151
server-52-85-131-151.iad53.r.cloudfront.net
April 21, 2016

52.85.131.110
server-52-85-131-110.iad53.r.cloudfront.net
April 21, 2016

52.85.131.42
server-52-85-131-42.iad53.r.cloudfront.net
April 21, 2016

52.85.131.32
server-52-85-131-32.iad53.r.cloudfront.net
April 21, 2016

52.85.131.27
server-52-85-131-27.iad53.r.cloudfront.net
April 21, 2016

52.85.131.17
server-52-85-131-17.iad53.r.cloudfront.net
April 21, 2016

52.85.131.208
server-52-85-131-208.iad53.r.cloudfront.net
April 21, 2016

52.85.131.171
server-52-85-131-171.iad53.r.cloudfront.net
April 21, 2016

54.192.193.19
server-54-192-193-19.iad53.r.cloudfront.net
November 7, 2015

54.230.193.45
server-54-230-193-45.iad53.r.cloudfront.net
November 7, 2015

54.230.193.22
server-54-230-193-22.iad53.r.cloudfront.net
November 7, 2015

54.230.192.157
server-54-230-192-157.iad53.r.cloudfront.net
November 7, 2015

54.192.194.172
server-54-192-194-172.iad53.r.cloudfront.net
November 7, 2015

54.192.194.165
server-54-192-194-165.iad53.r.cloudfront.net
November 7, 2015

54.192.193.70
server-54-192-193-70.iad53.r.cloudfront.net
November 7, 2015

54.192.192.226
server-54-192-192-226.iad53.r.cloudfront.net
August 28, 2015

54.192.192.7
server-54-192-192-7.iad53.r.cloudfront.net
August 28, 2015

54.230.195.42
server-54-230-195-42.iad53.r.cloudfront.net
August 28, 2015

54.230.194.128
server-54-230-194-128.iad53.r.cloudfront.net
August 28, 2015

54.230.193.173
server-54-230-193-173.iad53.r.cloudfront.net
August 28, 2015

54.230.193.74
server-54-230-193-74.iad53.r.cloudfront.net
August 28, 2015

54.192.194.153
server-54-192-194-153.iad53.r.cloudfront.net
August 28, 2015

54.192.194.128
server-54-192-194-128.iad53.r.cloudfront.net
August 28, 2015

File downloads found at URLs served by download2.winzip.com.

0 / 68
http://download2.winzip.com/.../wzregopt.exe  (dd0f71412b7b451d9c40164ebc4086a7)

0 / 68
http://download2.winzip.com/winzip140.exe  (1dc696df9b583a8ce903bb2ed3e1419e)

0 / 68
http://download2.winzip.com/.../wzsysutil.exe  (423d59e73fce7a3fd61c81dc5a597d75)

The following 8 files have been seen to comunicate with download2.winzip.com in live environments.

TCP » 54.192.192.7:80
browser.exe (Browser)

TCP » 54.192.194.165:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.226:80
browser.exe (speed browser by Smart Applications)

TCP » 54.192.192.7:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.131.32:443
online-guardian-v2.0.9.exe

TCP » 54.192.192.226:80
knsreb00.tmpfs

TCP » 54.192.192.226:80
WeatherBug.exe (WeatherBug)

TCP » 54.192.192.7:80
driverassist-setup.exe (DriverAssist-Setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.