home

www.worldvaultsign.com

Communigal Communication Ltd

Domain Information

The domain www.worldvaultsign.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Sunday, January 24, 2016

Expires date:
Tuesday, January 24, 2017

Updated date:
Sunday, January 24, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
worldvaultsign.com

Whois:
1 worldvaultsign.com record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.installCore (M), PUP.installCore.Installerlite.Installer.Meta (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.RES (M)
100.00%

ESET NOD32
Win32/InstallCore.AFF.gen potentially unwanted application
4.65%

VIPRE Antivirus
Threat.4150696
4.65%

The domain www.worldvaultsign.com has been seen to resolve to the following 21 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 31, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 31, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 11, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 30, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 30, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 31, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 30, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 30, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 13, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 13, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 13, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 13, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 13, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 13, 2016

File downloads found at URLs served by www.worldvaultsign.com.

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=HDKViyGWB2hK53gYz6tjm03jcL32mj6G476dx8REWhk=&c=w3GqFIY3JUgwQvM7rigZGZO fCP0uHEXg8od0wVdoqiDQsvU9Ji 82emQpODU7JbD8EW6vO2j2KOMm kq7UjlUunDp56Wmm3w3FC3H0c7xWIadkK vLSVaTpm9iVVFIl6i5WWP/DI4H frp0noQP g==&fallback_url=http://.../tcmd852ax32.exe&downloadAs=Total-Commander-12316-dp.exe  (db1dd384c6b283b1242b666a96c615e2)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=JTCNmXICXJJnLG43nGSxKkDQVbZlQB6ThK3I/Ih tL4=&c=yxATANqZq/Wd1DRChQPRp0Aex96Ti2WsfuZaryzf30DtVLVjUiYp80s195phy7vcBy8TeCy4jHMw6CSixFQNSnjvQSvCfy0fJL45ApYSEqc/bPc7qpkKMk9IqHXlT034&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.4/win64/.../Firefox Setup 43.0.4.exe&downloadAs=Firefox-13108-dp.exe  (7bef03fa057f57b22e8fd6c7f5a48a86)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=buTjO7E5qtMdqMvH96rRdgsNtLssve6PG NSP0fW7jw=&c=OXLYfW5EOTGN/lB7CSLwfQDz4WXVJLNQG7C8O/Q914db580Cs2faWr7 NK8ZgF9j YaE558xI1oz/wyddfqYOnyzvprgT5cugmg7g4XtdcSmXUuVGv4fZ50S1TIcEyQncGMCUo9cs9TjlrrGND0dpg==&fallback_url=http://dspcdn.sonycreativesoftware.com/.../musicstudio10.0.108.exe&downloadAs=ACID-Music-Studio-12014-dp.exe  (d556b114616b491225b6a87ad711fc23)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=lR2yl9rTF/SDm EojzPAWOJDdaqnvlhZSeEmDHJkjBQ=&c=YnNogy778N313rlIhcETA2B9FL8Zi9FARGYYYgeSjbC3luyfpA0KY6tWcylbFwJS4DgnayKkJClbDvrrzTkSeFBraHvEt1K4KdriFiR4CCJ0nVaD6Kg67yGhTo4tgiK54gZygj1v3zFHnPO69ELvPg==&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (60cd3e77fc08fba06ce7dc56f72f6652)

0 / 68
http://www.worldvaultsign.com/WVl6OTRQVVpDVWxCdlZUZDVaalpSTkVVellqaHFVMDVtU214NE1UZG1Uek5uYkdJbE1rWTNXVTQyYURsSmNtSldTU1V6UkNaalBUQjNUM0J2V2xkUWVVbGpiRTlhVWxOdGRucG5RakZ6YjBZbE1rWkxiRzVtU1c5S2RGcElSamxPYjFCVGEyOTJiMjVPUW5wbU1tTmlRbmRoVGxsU05IaDVORXRaV2t4clZWSlJWbHBJYlhnNWRpVXlRamw1TVV4eE5WSXlkR05vZVZnMlIweEtVR1Z1Tm1SRVRqWm1TVkVsTWtKSldsZE9kMDlxUTFSU2RXVkxTVkZQV0hRNVluRmlNRFZTWWxGWmRFb2xNa1oyZEhsamIxQkNVMWxSSlRORUpUTkVKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5oSlRKbUpUSm1aRzkzYm14dllXUXVkbWxrWlc5c1lXNHViM0puSlRKbWNIVmlKVEptZG1sa1pXOXNZVzRsTW1aMmJHTWxNbVl5TGpJdU1TVXlabmRwYmpZMEpUSm1kbXhqTFRJdU1pNHhMWGRwYmpZMExtVjRaU1prYjNkdWJHOWhaRUZ6UFZaTVF5MXRaV1JwWVMxd2JHRjVaWEl0TVRNd05qQXRaSEF1WlhobA==  (vlcplayer.exe)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=ID6aTEu5 A2po1c/Cwd2VnDhEEBWysNhsSs7wnUE25g=&c=UA AxsegKmBwZFOfwHG8VUnhNajguaTe3UvNRCAVqv6JPMYzFIuvkVDp/BwSTfjUo0yyvdyY0gROW7RZb4 fs8sAQAPiIzX0G3mQAFeMPS4jtHXwLfz4 xesODaM0wfl&fallback_url=http://storage.dobreprogramy.pl/.../FacebookMessengerSetup_v1.2.205.0.exe&downloadAs=Facebook-Messenger-for-Windows-29573-dp.exe  (9e22939ebd1be85eb65832186cfe4a21)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=oifxwdX/mvY21WJgnCCC1u4NJZMV2UlgDuB2q Qg5j0=&c=AWpQpfGB9El0cRYCVGf9ZkCmTloRfLRKMjgpSA4 5UeS4 A9tWZYBVpFGn/av3jTb aKAJhCxMe5wpEb9AozAdCkoYeVioF2HO3zead/Aw/SU7h8Zks98dk7 YCtvpjY&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (2baa4f08a0b86412559f46921cc47a4f)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=BIEtEy3l6QSBhvRlg7RjgJtJFd7c0eLbrE4kzmVLzos=&c=LfOZ6uI85dkGlVdG2jG6bQy0ZQ oY/DbXQYEaWMYAgLf8FGpdQ18pRscDVOqttk0H HKbNauNxhtSWNC4cZwoTYrMzYuuBtqdGXedD9k/hD22yiehniJxpkicFP2EBB4&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.50/.../Opera_34.0.2036.50_Setup.exe&downloadAs=Opera-12614-dp.exe  (6d9ec0b539170dc6909a2fd01efd8091)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=5VsR5VwuM4J1476zV4LHAMFPtQ68/MrP2OxXTmT6mvk=&c=iLheQFan2PDsU vuBpJo0G5Yy0azPLzhBH/KpyHPBmtY5UrAdmHdOKhYWyYC0rDMJrXlJZ2Fvk7JqWETxgwUdufWzuyQ9UgVdIn63OfCczl8gHeWTZ71DeY3vfdcVj2C3Qt lfyxzzLJkVxsEeTkLQ==&fallback_url=http://ext.fmedda.de/.../Setup-Foto-Mosaik-Edda.exe&downloadAs=FotoMosaikEdda-55690-dp.exe  (b95b64d0ad729cbc026510f9e9c0d0c3)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=5p5I9 njGw/DxRFEioMVSIiDo5rvaTZMFM5OwlmpCaQ=&c=pj8d05MknYlu HPRtvTxgOjzZMhJRwQ2OCF HRDcO9gGMCqI1QaNBPXT8g35bFViZ7rjZgPuw5Px4kqAM/1XD3O/mTvoyqrdujoQ6HOBMZ1a/Y0HzFlobASE1tzEnM8RGYngfAXothvD00VXjQL1sQ==&fallback_url=http://www.pazera-software.com/.../Pazera_Free_MOV_to_AVI_Converter.exe&downloadAs=Pazera-Free-MOV-to-AVI-Converter-54641-dp.exe  (0171e39134ce25eb78897e7e5b74d887)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=C9t8Ls/Z8yrE5Kpb/WStsTD0gCuNVaonQRpxWFZgV6U=&c=ayHctEFAd5T0i7GreL1WjGQuwgk1M7/OKFEq8y5GpSOIbExLPn3MECbnnFlKBgPjnUTcDYnJRym2QEv6M8EF7ScOtUaGp22oR6FoIepNaKXJNuGqFV7SWNeCOVfaGMC3bV080iKTW oeWtZ3VlIVBQ==&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (154629eeb1078cebd7ea39cba711b289)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=zvlbCsztiLA wvaPYvqS YzFmif61XlWUvH4zKA7bkQ=&c=1xQOkg768urSUSpd De9wzyKPPJn8onyDdjDVBa0HeHtg5CMX5uP9ySNODSwWUN9ib8BrDy8Qj3sae9P5QpqzaL7F7gHlpDLavGFizEbNcZynvrHUEzdhYF7nXIJzdog&fallback_url=http://www.koyotesoft.com/.../Setup_FreeAVCHDConverter.exe&downloadAs=Free-HD-Converter-18966-dp.exe  (700d971489f99958e229c9a82e27fcad)

3 / 68      (PUP)
http://www.worldvaultsign.com/c?x=ZnNmh1V1CrLrRrPnu4WwVgVOuAgq1EseKnOrW9rrwAA=&c=657avBnANR08MYiuXDHr 3TYxUL48C/auBTpgDxMXK9OFNUi7B2net9uBqv/CIxOtrtGF/jKdUi6KszNvzwly5hnaV05K8zUeySDi1WGPGAAFCpsbLnt2u6CNz3Ldzy3&fallback_url=http://dpstorage.pl//.../K-Lite_Codec_Pack_1185_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe  (5c30b4b974b243b385cf7d69c89636ff)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=eNo35AC6WeVaGs2f2d7 0zyKbTZwUMdu9 Yc8/I1Cqo=&c=BkffInKgDHX3TqbShjbuSuS11k/4ZtTEvrjcn7aJ1PrbaEgSs3tJss9KIpwyYyaJ93Deu5IJTTedp/y83/OKVh7f7v64VFpJlWTZuaexAqbqC5FebYcs4ZhuwqN9vaaCeSnsq1lJ/Zmu9ZV 1xnPnw==&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe  (setup.exe)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=vyVSW2MmoYhDRe1BHHHcLW3kutFraSdQs9/NBSJW5wg=&c=7a9uxKzlJ/dnEepesXXTImi3TuzfeOfLSG/ftfEW3Q5oPCzxtLqB5U9qIViRmhJ1LTt4Ok62w3R2IoSEmaPa R0CXdzMpIVKZ5MhckOixN4e/QcsTE4ie1WpNN 3zgsc&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (bc1fd94a2ce8d7fa54581f60995c06dc)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=bUohBsP0eHuUXKZF4 YHheDyrt7Y kLWNpLqZiInyOY=&c=/f2 Y0nGtOh8fFtRh4XoacHKcFfUqaJoPDnCOoTynay jH4m0pkTqcRRgQbvLu61V4n8dLw2AEymL RDOnpMxlZxoQlLWh0CmHgdVDtnKEFbySOgqr/sC5uqNhg7rxjWtDJ93TuuTybBgzEme5gN/g==&fallback_url=http://.../SpotifyFullSetup.exe&downloadAs=Spotify-48247-dp.exe  (01dfb40bf18d4f3e2570f6b104bd732c)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=PQSM7KmDkWfaPlVS99mMOUd L0D4UtcMPl5wg Ud8S0=&c=NClxM7hJL1LUYWW3bk6Zqcl0404zzQPr90Aa8eub2vSF/NZMxd7AMbyCsiw9tXOTv3qTAyPsBmjvTUp6oT9u1OxuDy7/flt3y44H0iBbnC5vWGcGQw0Nq8z1UL XQbPigt9Krp21VupW9lZCkJ7cng==&fallback_url=http://storage.dobreprogramy.pl/.../fsSetup209.exe&downloadAs=Fotosizer-31810-dp.exe  (7480145c571cc0bbfe8c869e9107d34e)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=RVAlK384qz3ylA9Nj6Tkwg38JDpw ezmt5LlwPt6XIU=&c=NWR0F0mY0OIGbN9nxOv ikvO516x3HEb/JxN6SHzFgeWNJzDzXDBzkPSBk5uVLCqSb2OcccenybQQ/rwkB6ryiWQc5ygjOfhGQ82n165UhQnO7fV2q6r3cZjxDdiK73P&fallback_url=http://www.rarlab.com/.../winrar-x64-530.exe&downloadAs=WinRAR-12398-dp.exe  (7f8a82c96d4fd673d564ec77915a007f)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=tsUffWUSf4G5zVoQKkenZ9rfLY0hBQ0nBP zuMm1gFs=&c=dY65IYw7HVEnZadbKNrcTefoTWWuD33 jn3PxPyx3giTFi3Q2p1nLSSFfpvCDrrtZZJnkxzuuaEnkEZgK6iVcGpCUF0zBwckh1UFrQHLZORCykBCDN rUf9MZxBSw1e7&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.50/.../Opera_34.0.2036.50_Setup.exe&downloadAs=Opera-12614-dp.exe  (6d9ec0b539170dc6909a2fd01efd8091)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=uxuhoh/jI1lynBbzOVaK9zbDb/Wmoid8PK JytpCUA=&c= AZ9IpBIBlQP0gTzIeG1aCLtw/YBMbbtBg2pYymeDuF InlvCxtwM30CWjTrgWmquYSphmZN/9EN14rr0KBnBSRL36RrF9RoKl8T2c5wTIEPXmUIQteEfZOb2BFRBT9S&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.1/.../vlc-2.2.1-win32.exe&downloadAs=VLC-media-player-13060-dp.exe  (7315c902bb6dd7621cc7ead1c403aec2)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=tGWSoeFbtumd6x/SzqaJToKw0zC586vVyi5Kh3GFjVw=&c=x/JjVIOEdQQK87dTJkIKwAfAQdtF6MElbq HBkbAlaGfAnoe96snb7beJ0f8bnZBjzbERCXHYpAYQV4D5/9Dxc8Mtfz1eYw/R73KNFZcBUCWOkshLbcUSvA9qtljoI4F&fallback_url=http://vorboss.dl.sourceforge.net/project/aresgalaxy/aresgalaxy/.../aresregular238_installer.exe&downloadAs=Ares-12480-dp.exe  (c.exe)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=cJA1gHOKRBJlxL15qVK86ZttPiw/BryxgEI18d2cLQs=&c=ckNI6yDNtTZTNDTcmsV4K/g1W82c4DW8LKdiJ2YDlN8cKT9otxXODx03uPg//1XHVveu/3QI5sSV7dyGFiMFH0KysR7QoLePH0AbjuisTkfBBbaabiSRDiMgIzeTSMHX&fallback_url=http://www.srware.net/.../srware_iron64.exe&downloadAs=SRWare-Iron-25587-dp.exe  (f126723cd5b547ebd0415262ef5b92b6)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=wTtNIrZM Wkrqqix/850rBHSOPmvY6CbLcJ26FzJIVU=&c=VGKoBLmy9PHgv1TWtAA dMWkgbPiHwltOYIlb1u6Wkf0EzoiKHuOwHwDz5OHFvsu2ISXSJORwyTRX/NyGxOSQO44yhOXYlg0XDqYEfKdtTd5pDysjgmU2eGqy0tXoAuCUwBKOqedvMZi3D9YFHoLGg==&fallback_url=http://download.coolwaremax.com/.../WebcamMax-7.9.7.6.MultiLanguage.Setup.exe&downloadAs=WebcamMax-13274-dp.exe  (85cf04545ba21ec09de557865f74e554)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=5hUQZRvcPZuEWQwWgzyfhlf64 HP3PssqYHZWoALdqI=&c=eGGy8qD3TNmIYOgVNaQ5bX/jP pJFyWXMkK124vUFULLWlZ3YU2eu ZPMQ6q1xjka7elaARCiG0iAXsioS EcHS8f9jlCNpjGx8 shOHoqCvUTrr/Mx3Uu314NfXXtfE7yrxE6/M6t4Lg4d28QBa6A==&fallback_url=http://storage.dobreprogramy.pl/.../Samsung_PC_Studio_7.2.24.9.exe&downloadAs=Samsung-PC-Studio-18722-dp.exe  (8ae493658d4648d40aedf5d535c83c2f)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=vY K0D2NG8WqnEcJJXmlDtqjXy2qIRT5YU4/WXorZiE=&c=zr/abdj 8OD3smvcHSozx5/uTJV5wB/r9jUl3iHyLUdif/MDay7CJoKmXtuYtozjs0jkCGZDWLDXEnXLZovQpBY3U0PZD7qNEHdyO1hdegLOuXf7FdWehDJsXh8VtcGr&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (00952420f0a62f7346795310c88c2d01)

0 / 68
http://www.worldvaultsign.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  (camtasia.msi)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=j44M1T8EbZGwZ3Kp7cCAOZECah0PbZFB/Ptu6Czp/FM=&c=ggtGw3kh31XeLxtKjtRNhfqBGkjd4/nhlv8Ie2XcjTrjFpD DTCL7DocmRCwNaVrQocYCkpMw2Sfbm4IaMe7RlrOp8t1uH0Ed/HBxa9V7v/kRHEBWoK2T5yxM2sBEJgA8aK53DlqHu5BcwK2RWXiw==&fallback_url=https://secure-appldnld.apple.com/quicktime/.../quicktimeinstaller.exe&downloadAs=QuickTime-12821-dp.exe  (icreinstall_quicktime-12821-dp.exe)

1 / 68      (Adware)
http://www.worldvaultsign.com/c?x=XCo9DIJEQTrbpJDQwZblUrSR SrCAetTXrHU3jL57uU=&c=b0ohXq7n6RZunYl PBcJwU0i2tsvWgnkrM3WYo6EFwnLpUjaOHaYbdFOlLw5wRK aCA4tnQdfYJn6Yhzc6b7lYsFG1H6RKA7MpfhWr8TNXj60EJeY5XZJOXXYwbN76 Z&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (bc1fd94a2ce8d7fa54581f60995c06dc)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x= Y/RMlC2ep2RfBpCCj7c5ZLQ2ufu342BrqLqemnKTcs=&c=0Q3mo1EF7uTBmvw5BPBDQ3uAcFCJDc4IlbVk8iulCO3my9uc00q2wcZPrVoBqpCIEL7Gf2g6sFZhtwWrczXQHOmWwUubrQJeXR1MeRQM95auE 4aDz8Fr3Sy4yk6p/MLaKl6ucGq5mHeYgkBX1KQcw==&fallback_url=http://storage.dobreprogramy.pl/.../ImageGlass_3.0.9.19.exe&downloadAs=ImageGlass-54773-dp.exe  ({blocked}.exe)

1 / 68      (PUP)
http://www.worldvaultsign.com/c?x=TaCdwRUN/AM7qFJ5Q3qhLvvp8Ovl37ldYdqCxg0a/UU=&c=e6NCl8/m9271SJoJu42PGzhqUDL1aSPxOlxsdM1RYD9nruUDrbkI TKqWDfaHj8p/M6uhAXwBdTO4cYDaRKguHIlqr/7cRbS8f9KXn9 YHLNRVTsMu9sXQrrriJe7FCl&fallback_url=http://www.clonedvd.net/.../DVDXPlayerSetup.exe&downloadAs=DVD-X-Player-38420-dp.exe  (dd5eaacba17399ec1115de5b4c08c45d)

 
Latest 30 of 69 download URLs

The following 36 files have been seen to comunicate with www.worldvaultsign.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.