home

www.appsfilessafe.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
appsfilessafe.com

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.InstallCore.MoravaGr.Installer (M), PUP.InstallCore (M)
100.00%

The domain www.appsfilessafe.com has been seen to resolve to the following 21 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 3, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 22, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 24, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 17, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 12, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 25, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 19, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 19, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 19, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 19, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 19, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 19, 2016

File downloads found at URLs served by www.appsfilessafe.com.

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=L8erg23/ZweEILSJ97/NXcRG70sAkOT/.../AVgps9jZNIhtbW4V1d Qk0VvcYruL409YQMM9NikYfB6xsZTLl7CBc OoJQV8G0PSmltDnAEIk0 XtapN7FS qj55 vS9d2nPywWYdxlavF5KAO7291u&downloadAs=SinkingSimulator2.exe&fallback_url=Fallback URL  (fc5008c3be5a7d0a61db02ad73b03522)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=Zwuz6GhDVkCJG446o4u83TwLTVgfW9WIuTQeiydyMkQ=&c=OncyqORbj2C86siSFSGCeN0ZstC5EdwoNP3a0mPj /C7s89D2uvBDr QWe9r7xaRLQsMTU4X/.../Gdp6YL9iMP7UxedjNRtjPconJ2FTToDUOiiRsaTXT&downloadAs=Parkitect.exe&fallback_url=Fallback URL  (3520b910cc561431dcc0a1b682e22c9f)

0 / 68
http://www.appsfilessafe.com/c?x=DQnmLGDLDm64RAPCv55zi0aM2Cqb34IytTiTjanb9jI=&c=BUYidq1XLvsCWeJcEXBuZMK4wiK x/SfbA7 WbZQYNiMJIOqEmFN1dD16Jc0IIbBE/pa6elG00zRw3lgJRdLwvxK5hEVh0GyMmPX6wPqm1LDc8VutOv2/.../Lm4O80McK7vIhKRofd2L2A=&e=0&downloadAs=RocketLeague.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=oCS6R EJvbWeHsGr45oOfPZAjvwGvr2MC4AbIkkz5XI=&c=NwV6Ao/ojfJao ZzCT0/.../mCXrgwt1NConUkl8Fozdwzx4iXY=&e=0&downloadAs=RocketLeague_Setup.exe&fallback_url=Fallback URL  (6e4ac649ca4e03bc9ac8e41b8e39dfcd)

1 / 68      (PUP)
http://www.appsfilessafe.com/WVl6OTRQWGRYZVhneFlUZENRbmdsTWtKdGFGTmtWSFJSUVZsUlRWaHpXa2hzTUd4Qk5tVkplQ1V5UW1oRWQzTjRWVWhWSlRORUptTTlRVE5JVEZSQk5tMXVXVEozVWxKM2VYaDNhRFpvUlV4MlFWWkZiVTlzZDNkSVkwTXhVRGxFUkdSbFF5VXlRbEJrYkVoTU1VaDROMncwV1ZwQ1F6ZG5hMGdsTWtZNFJVSktiVzVNU1dVNFpVbGpWVEYxUm14V1JsZ3lSMEY1YVRFd1RUaHRKVEpDY2xCaVRVTm1iV1JFUm00MGRtdEllRlJGU0daTVdqTmpVbU5OZGtWa1MydEpZblUwTVVsVEpUSkNKVEpHY1V4TlQzaHdiVWhvVXpSTWR5VXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFIVkVGZlZpNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BVWmhiR3hpWVdOcksxVlNUQT09  (gta_v.exe)

0 / 68
http://www.appsfilessafe.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  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=CGRTGAHdRuWGecVfk8yhbgSQ92UTLI07/.../E2w9iSael20Oqtvsw4XuZTVWYqQMP eH1wnwlaETxX kfMaVvs6Izmw8EG4WV dMBMw&e=0&downloadAs=yandere_simulator.exe&fallback_url=Fallback URL  (b583df600c66f99aa8380b9f6eed6eb7)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=lwhBFe4ZBOvwR/5wPr9fh8wx7whzbt9eUwb5mO4/LOI=&c=/.../oDURNvJmS7ltUVJT32rLW94d5TnEvbHlqCFLFDSxSyIV331E0g6EkDsDPrBvi39qvLLy9myWJjTGPnIB8pvNtnjzDsVM=&e=0&downloadAs=gang_beasts.exe&fallback_url=Fallback URL  (abf01a6850b0554b034191ed8475347c)

1 / 68      (Malware)
http://www.appsfilessafe.com/c?x=ov8nJ/iHXqLFojlduewXF7XFCqvwfYJyBYQPBoLH238=&c=nTygV6dqYP5jq5N4/X0CUReYqlHp GmoHq9FXkbmtybhyQcFv2fC4kGqSPn3OlctJed9bJDwg RT8eNBoHC0oSvdCQxtIP8 LTxfUXT/.../3WmvvxnGWKZ URZSk 12nh85rpKEaIoP6kfHDS&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL  (9c9d37d66affd479833495c523bcc5c3)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=hcH4ZMS6rlhU9euLyIEpLxjlBi 1B1d5GupxfyNKgJg=&c=olDrO71Ltx2EqI4GtvdKTDuRWvxGXlp18fiaQo3ZFe bZi 5TMGyVlRRuo2NCY1xYFKuP5NY9oWcTc 9ARjbUfkwqZNWw73XQd5pK3 tjx6OhYmRRaysnNV4gBEeWy4WDejNiHonlAqktclDQZe/74a5 0/.../b8&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL  (88723517baa6164b53d3a648f08ce8ff)

1 / 68      (PUP)
http://www.appsfilessafe.com/.../KQhTxCXDw6NPFWaLULwP1COaQJ7fYDF39vyhyzG2TdEuQZ&downloadAs=ark_survival_evolved.exe&fallback_url=Fallback URL  (b4d481474c3c9cbf6ac084c25cab3466)

1 / 68      (PUP)
http://www.appsfilessafe.com/.../jrk4D7FrOtHqtjBnSFifyj ygU1t6PjPkVdyEqb6HvRJSKC8OaePJHGUimDSz6DMIRO 274kwwujgtvZZsox6drE4xr3UZFXo NaH5&e=0&downloadAs=yandere_simulator.exe&fallback_url=Fallback URL  (icreinstall_yandere_simulator.exe)

0 / 68
http://www.appsfilessafe.com/c?x=5p4/oRK8FrWAMvUfhgAvmThX2IN0Bb/.../1avKoKTW1 iA5nJkvrs0NeQ=&e=0&downloadAs=terraria.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=3iRZdNdGgGH1 tg3KFoflIRiue/VJKd FasN4QLwmps=&c=XxGmJgEDHP6 Gc/5uaqiZcL7waJTiQSzr3PHoPEKHcfdqcuV92v7gb15HfFUW9AOMD/.../okRRxg9KmE164b6ZzSkkZZjEcDIDuP50inbQDDyQBY80Ese 7QVZFkgTF1U6Xnc6VRhyTz6ijo82mrlVv70=&e=0&downloadAs=terraria.exe&fallback_url=Fallback URL  (05b18837e0571a5094ae618fed74e85e)

0 / 68
http://www.appsfilessafe.com/c?x=9t1LmvCAxXZ87AKX1OOUFwVezSFdcVwx 6lOEFcm34=&c=WPMygUJHMsv0/LqW1J8DIAcphQ /v00gykOrvsmQlHWqjt4atQczcRnHE1 IhkbEmUWpPhHxaUl5ttBw/awVRNeWrlGQRGLFsxXcIcJ6Y7OPun7qVIVBiix hyyQwLXpkNNLqhIF1Cr2qn/.../VkQY54NBsnjS9F0AFLYo04=&e=0&downloadAs=gang_beasts.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=Y/Bo4mIPNQ/lRhNuAsLoLXKzf62O3aDODzc9QR5OpqA=&c=wRWjMBAmxLjkBuGLsibEBydf5Vk1AhbbGF081 SdsyivYGZskWH1Q27dLs7Izv1nsRrwsFX2z8u97U6MwiL26oGDQOCNobQRYbgduSycjDOyIeQoTMHzEJTOaorHn/.../0kG1KJElyy8r&e=0&downloadAs=roblox_setup.exe&fallback_url=Fallback URL  (ed7e2831e7ce93650226a6af92d06b5a)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=vh5dLMPKwQWHWwopN9xM/SLRos/J7172LNunhxz5uiw=&c=rA/IzzA/jpwEEhCBeHSQZ43LJoe6iRruoOzRakaHE10WwZgvRkfKA KD/.../xDuz1WpkIQta1q wRvpzkrmf uRT Gl0Qy6&downloadAs=PaintTheTownRed.exe&fallback_url=Fallback URL  (39a4c8ab7e117ae40adb592f42bf334a)

0 / 68
http://www.appsfilessafe.com/c?x=7xqrT87HLSUQnc4EHa86HLe3yFr7Oiaaw2frWHm/8dM=&c=twemR01ANNxOJuUsGeJ1IE9DwnHEvHw7vUZX2GSCCJqhRdK7/jdPgoDKqY8YIGr q ktiPNdHcO97LKeR5Wq2k9ovjeoDxUjSwMsyKKHHXI759L90m 93yyh0jmHz 71o5mSHeOGfKYK5mF/.../f13XGI1GtJNuxZpjiT90ktFX9MY&e=0&downloadAs=slime_rancher.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=lGJc1R2bPt/Pgy00JSd3BvDpdrnvkBCF1LAGeYUSNSU=&c=aERxSgZ659WbfG/.../EFbwE1kC1bAvqi2qsKcHqgvlAYMUXM4DUZgs137TT5tOuVS7PDXISd7kPfP8QLCfMxN7WNBjo5jlgoY yB&e=0&downloadAs=slime_rancher.exe&fallback_url=Fallback URL  (icreinstall_slime_rancher.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=XmVdtSuhyNaBxb2F0NKxLvjpZF91dpZic/y15l7phCU=&c=jau3 JKNED2f5Cqvg93GcRKffu9xhHQCmNPi1OakYyvfvF9MHv0c OMj/45Pyy4nmC2 FLTJ6LHzsHSEh TtczFRPyMaRWmizjKOgjmyv8/.../MH3tlU7yfXCOa5boOI&downloadAs=FNaF_World.exe&fallback_url=Fallback URL  (99eff837b91d6bffe9b752b5065ec512)

0 / 68
http://www.appsfilessafe.com/c?x=QRI4 MAlY7YyK0ZFXI9 OGoMeSj9J0FAPL6SA2VXssA=&c=IwgkaBPySdterowYvXurvXAR3OHSM9zJmIwnZ8EXn5nrhCozXLZuACQr1soG5p/.../pwgEMaCBjn1B7mI=&e=0&downloadAs=undertale.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=kIV/l9XfC rfgqHffnnpuPYKro/uwxo75T2f//1B968=&c=sljtSOBOxgVdjwBWNYhJ1K6Sg7blq68HcZhvIPfLdwpMFvHT3LdeTagf1zCKO8rzxA3l/.../zDQq8CD8=&e=0&downloadAs=the_culling.exe&fallback_url=Fallback URL  (a181c73d505c0c3212f939bddf12f315)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=dcVbq0oggFG4BVOYSr4r5zlEs0qV2gwU4M2Dx6AxID0=&c=1M1vROTmyG FXYhF08egtIYfWYRhB4DG0bnlH f0WaIps0sTplDzvcIXaC0FkDTtv4ms62hEMspgYUDYGqYlIMhrk2adMaZZcsBa/.../NVKWcgTS7LskqEQbmguxmY=&e=0&downloadAs=WhosYourDaddy.exe&fallback_url=Fallback URL  (ba94af715a524c812768307f14faa3ea)

0 / 68
http://www.appsfilessafe.com/c?x=umJ/K3nCkd9roz2G/pzH6zF/juQ3rYPez3Zp/3pL2EA=&c=7wS/yJ8y 4ts4WnxEYJVVaP3Ke6xjz7S2N4hYuFzoVxmNwBAYf26ZlOwMM8qNY1riB498j42uWjGaZv c2/.../4aOMw=&e=0&downloadAs=gang_beasts.exe&fallback_url=Fallback URL  (steamsetup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=CvFbkP9cVzfDr DFYKOP0IzME 0JT1Gg3g c57pg6Fo=&c=1pGWSOfiEKQ6qe7ST eA9XFmgRdO5B1Yb2a5cDQPOJJ2xtAWwQ4Z9T6/FTM994VDlzwaxkcoT5wG8OMSSQoKD oV0wQGVcyjJpuiUdo45rzZcEryQ Uolejihc7UQ580Sr9ARuwF/.../rAV43kYmbsVQ=&e=0&downloadAs=gang_beasts.exe&fallback_url=Fallback URL  (icreinstall_gang_beasts.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/OsANAO0PLoltPJxISrEJCsT5t8M0mA7F7Am L1gET2qT6BQqW2Co3Xyn1m6XP 4ew22TMBv4zBUxOtky6RPZYMu9XhXxVrG9Bc9Lvk9sgMViGykdvUF5N0QoUtARSVhucZMDnzMPjDWPo UGtF8a3jCVIlTg9TX7DNFqUgFovBA1RQwNDCokoUcbtslwcuPTeniRWyvOTbBL05QvfPIw5gTAjvCnQbtXg8v3xDQ4w12YRvIUuLYTbpZvsZ0wXmL b_tK5wCzM7I06HOQPeU7Z2NPIuq 5J6UaYxne4Z3kU8k33eKToC0K8FdsQ9knS5VH0BGiabk3pIz7wh0FSZpMThD6uhBjLelr0WAPJ80JnSuHAIecyzxOQmfQJhXY7ZhhRSTm1nYfbR8Pm3tcAhMPhevP3n2DlOBVrBy5oybQsl4lABBHuojsMHGuEipSBY7kszgGb081g0RlehJ8ewThjyMshExOdK31HL5cBxeT9IREK24PhvGRY Z7IrD7Ltc2qn3fSoI-iwWARmFsbGJhY2sgVVJMAw==  (beamng_drive.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=FnhgA23F t40CYPscRGMLccGNMI35U9tAOAHXfR1dhQ=&c=gisd0RtSXsc5StvBWb0v21pHnosbxNBc2ATqg7tP 9Bq/KvNMG6/I QLEypV NGJo5Td4YCVb9krbj 68f6LTOcbA4V1r/.../FqTaILUcxau2uoMZSU0m09mvos=&e=0&downloadAs=gang_beasts.exe&fallback_url=Fallback URL  (e3799e57eff7ce319e2cdf31e551587e)

0 / 68
http://www.appsfilessafe.com/c?x=biweL/Y4xd18ZR eHpRJXuX7ahHTCnIkrvuKPLs5zBc=&c=Rj3WFzQ704u9Ua kjUDN NDLr2FPXK1SSIU5NbhGXuO0 Dyc9NcX8KIEXTpWRLA/qZjH7enwHLKiFtwolSOYCTnLkXoZCB4/Xzovtu3QM9 hpjoemzJd9MPajOqmoVHOmN7rMKzyekkdepOoIYohAT GG/.../Em7GfSxLUWJH28s=&e=0&downloadAs=BeamNG_drive.exe&fallback_url=Fallback URL  (beamng-techdemo-0.3-setup.exe)

1 / 68      (PUP)
http://www.appsfilessafe.com/c?x=/.../uS5V34=&e=0&downloadAs=BeamNG_drive.exe&fallback_url=Fallback URL  (7a21dd1613dc161a8beddafd8c41dfd8)

0 / 68
http://www.appsfilessafe.com/.../i2Oqbw=&e=0&downloadAs=FNaF_World.exe&fallback_url=Fallback URL  (steamsetup.exe)

 
Latest 30 of 2,681 download URLs

The following 50 files have been seen to comunicate with www.appsfilessafe.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.