home

b.allstate-final.xyz

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
allstate-final.xyz

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

F-Secure
Adware.Mplug.JF, Gen:Variant.Adware.Mplug
27.27%

AVG
Adware Generic6.AKBT, Adware Generic6.AKCR
27.27%

Dr.Web
Trojan.DownLoader13.2509, Trojan.DownLoader13.2561
18.18%

Lavasoft Ad-Aware
Adware.Mplug.JF, Gen:Variant.Adware.Mplug.36
18.18%

Emsisoft Anti-Malware
Adware.Mplug.JF, Gen:Variant.Adware.Mplug.36
18.18%

ESET NOD32
Win32/Adware.MultiPlug.JI application, Win32/Adware.MultiPlug.JH application
18.18%

avast!
Win32:MultiPlug-ZC [PUP], Win32:MultiPlug-ZD [PUP]
18.18%

Sophos
PUA 'MultiPlug' (of type Adware)
18.18%

MicroWorld eScan
Adware.Mplug.JF, Gen:Variant.Adware.Mplug.36
18.18%

Malwarebytes
PUP.Optional.MultiPlug
18.18%

K7 AntiVirus
Unwanted-Program
18.18%

Bitdefender
Adware.Mplug.JF, Gen:Variant.Adware.Mplug.36
18.18%

NANO AntiVirus
Riskware.Win32.MultiPlug.dqzjrx, Trojan.Win32.XPACK.dqzmsc
18.18%

F-Prot
W32/S-6e476ff7, W32/S-2ece0b92
18.18%

The domain b.allstate-final.xyz has been seen to resolve to the following 4 IP addresses.

52.26.142.209
ec2-52-26-142-209.us-west-2.compute.amazonaws.com
June 30, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
June 30, 2015

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 21, 2015

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 21, 2015

File downloads found at URLs served by b.allstate-final.xyz.

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=J5k79xXND/Oqbhabcd9ccruCgZOKtgRWaULMTApsSf2Uu1iiY4OUs4Q8lNpyK0OQsIwhYedFLu55Ui7tUCPmKGX7mr83BiHYSt2SXqrcyseFh6pVqv6Op6KG70iuYNBId9U7/6gMenGQMSqkBnc NnJZNhBoMfktOBNoyT8BLlQyNS tmGmkJQH/1XXmKPLKbZuTNJ4pIUBN9iluaw/GkeguKJeaMZLfOKcX5E2dXIHqANQOFV3nSthJIa0vuBZwYg2TcgJjSiuj5c6EIY2Av0vVOslFtgQPxXTqul ptv691ppZIenz6ALxjSxcXJ4T14d1IH5jUaMqo6EBppQuzEXkp3LNmZZ8LUmRRE0Cx pKFFGrr/0HK9iqXx4GMuXLEzeaj4wXQLUxYhJku7K6btaZtB8BFFRi0f/XSNre6DfVClOtbKgypqTH1JM3CVoC hC/L9UUt3dOv7qBacs0UahveUWwACIAxUBcSGsT3cs9NVNiaMk jm23306Xa1loH/.../2ZDk9z9Y85ZUuyperVoBXzkQTK89w3ZRM1yZwb9HjhDdMBZm0Xk5NauUpi0253TxtQ5Byksj5o4vB7H27ta q6j0avAHCNRCpyerz 5cEXxVa9Mf82nDJ6DoP9kJXpTYKnipcJDwUBM1iuFjY0Eg aZIKnRJtTGuM5NMGsfdYbnHOdPj8elvrcRHNLMNZDKfgXditsMYVQ56&external_id=1429869577435702275&uuid=jhvRWgJoS15rH3L4biwffwzmCciFlfTlRzBvdgfUfYNhNRgYPAoeVkQjkJSuYljjozaOHFgrVERmnRzzL0ZcZ8zbp8bYdXxRphanTaoBVWxniQZNneCA5F7X686pLyoqymBDDeiAvZTdGGFCUBGSrwj559d5nVauekeVpZTg  (usbutil_ver_2.0__english_pack_.zip.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=DgPuplWOwaupkbcdefXlap yyiQh3ALNPElViVIw0Lc4s9wJDJAY Mn18GyYpA76/wBVsEfpeF8Sq31JOVst512E9Oa/mh9da3VquDnzyjnS3Zs3jnSFFmJezg AhV402 obTqNwaZQ/wCLeMBHKABMYtYifjAmNAZOPGunQbUvL86XxclXGN0oZgmuiuSALEnF3BgFMlzbWQ5bwdhRDAV33vqWKFWMfuhFumK4FcaADvdHFRjonBHCsddiAjU3VzOAcmPDnUOgdF utUAdh9uutSf3xBjmu NIk/GQhe8MDoc0ZUDZsA4jo14Mq4p7sS05GPOsSlrbMtwN2btnnlNBCnTjZbv7heFg3I4GSv4HFLDfaTRpHJ3av9Mul5bfRi/L4olDXVdW6GWVfqNHsT9O6Wo7uFCDF0Eb6GWmM0zm0oGMUPk9LvCCU1LG62YB/aEAHe798 e8GpIDKFy xyvDWCySzoaaitMjrS/3ge8PbrC JO9loy8HR8za8tDyNfa7SN9u6X7YNbTHwh/.../RQNr7IvLHfpFLOCSIX1OynB08tPCQBy8HvnVUw7qreEeolZ7hfflMjJvLm7 3kvsJ59mzfLEfghXAPEEpUEgGyIM4kL26NUQX76atsnwEGPWN s xDMrzDluvyouevC5vykbRLb M18o3rtZCwQQgH3AqZLt4yq0FQpFSv4UTQlMPoIpm q1wKOUABCQ3KAX koN nTY qb5Tw0GwlQKzJYvHQSfi8okDiI bPZTvOHrHp6Xm5VU  (download fast and furious 6 torrents - kickasstorrents.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=5 2XTAWLeM2LtdefABTWOVS MKNwnSzO9/7E9r3NZw3MzsVGMcbfM/eb38mJnldhAV8dJI0FL7rpjH D6gvVUpoiQ6DY/GN6sb7XCqFLi6OGkjwPOq30oTuHd2OXudsak956hJKNeRjFlbjEiLmr DZcYYNMGFkb2vDjEWqnZjsn9XWuT0NiQbngCoIbY4M5LUEzN0qg4Mh0ooPMEBdDmVfoRf7EcEbAUqGBZZPFHQhYKY8wW/yAG4GOfgIzqGA4TdbpQcKxkYWj5xhy8i2Zv 51UCkCayYB6dZSUWCzxO/QJP a7wwGh8iWDUmCv7vkBzQuAAroDFLNy1CCmlrkHcBNI/.../kqhpe6wJlvRknB7g7yBUDif8Sw0EPUtStIk65quWj iZ3wyD4bHKFPDjavH8BXMtb sPGUFLW2uCfB2Zmr nZe0vbNRJ9jo26ZVwrCZQsFlcUmjiqRXl xVMiRpq3oDhB7GyA5ebdi41ifoMq6U0t0iJyuF3SNgIDLml64z272VHGIv7gaVFh38kvZAXliiBukBgi9l11OrnepxvslFDn6feKLL52yVK3Hrti6 qlAKIqCTmuB3BaanpyIZJZQE19aveDQxUX&external_id=1429843645816392694&uuid=DyoPz8uTW8qvfw0isPFLwBkeN3sgpdg6qqCVF3WYzLaviX8LNDZAXj4dpm17UaRkcRxAFuoai54jMZ9YL0TKGylKBitQWWPa7RpVgGzrVbpEL3HhruruHw5aDue9F22LEfKA2JT3q9ePSfCPfJtF8vKug0XrBS47w4f3D1bGytbKIRigx7laiUbdBF1j  (facebook messenger.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=WboexZ0by4xIztvqom2SXliXANk1jMZn8n0cl/H3s8k0qxZslWr547ZthJnCC/OOoHzk0DI8Zda85b93WQAuFjrZsq/rBRbdMX5O4stp3LIdPWJHQMHRggNkcH2Au55b3gGufTHTCnBoxzlEWuyNv0LAwXFxAMMLmtqoTu8hyzdrWtBbKy1nmjjDEwKU4H1rFcrnJoJw/iVn8CUr UufXNerYRXwq9G1st5KaSzg TWlHLTrbvlXcsTvRo2k0OH8GwHlWYDu/wrOQIx55fAy7AFl 6VeprbPFDNmRGMoweP74Czmhef2oAygyfoOBeRLEgEDPR6CBu B8F9qtAE56HWjnW2 V7U4FBfc6/U12UfpmDccvv1fFbaKrCA/JyE1bji3R9e9f6Nyg7Kq5uSK7WveTcxqoLO9wSbdAYzW oRH ixDeLF0011dIUHUIOsT8glrgrQ7AGMKx/QWTIuSCevw1PHxB1dMmTHJJkWc3mJSZ6rCUiLG Vrm4X7oF2EUVY3mdknQXBw6uVrmH8pk 8c/mtraT/.../Hy6I8HirakxRHNWMNy2Y6gOf5HLHSwTA&external_id=1429803907588619630&uuid=CmIAEPMT2DR0soaz0rw0cIm0CaoycA07wBg4E87nPiBHrzUCKfcYKTPRzETWNskIknfSqtQYHShWUQ9BYjQk3dxmomFztUPi8z0eeoGZeJT3nGV0d0iw90wjNNSxjwp8BWbggxv75eIhzenOO3FY0DRvV1SQ8O9xrKeN3OVb0D3vfjJrfMmlOGZB9A6usdTLdkW3W7WB9QZ6qc9fFhXltKfAZinUjLwonXQ5btOSRi8FjTuaf4X8IVbD7Z2dJcyB7uXaLQLILwKgVj7RgBYmQze8pN8abXBgx0OXqqbeSJkvPVUuL5ygkij2yriEMyDYArO6WO7jTlHYsbJAygqldWCw0mXc  (whatsapp.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=tdwgRHeWqFj6ysurpnbY15Dhhk/mLLMvt1MPNfxfCr2S4aCbCGfBwtzzAosLszwJ3u9F86DUAIdNMKXGMBJQnUbp7VHr0QlfQD0 MxZEIgVUMSxRjAmA uQtHDp25fBgHl2ooTFfpkl B4IXDESvu5B/X3NNUvAVQDKxIc4kZkuiakyEunNmT6aL 3nvooQbkthNllOzevSO3SZxKxZbfsVSWFpHyg6PQPSzWg8nvjYhFf8 uePKHjcPWkIsP6V/5FcLNv3gdwE85xLx7dXj/sAcynMnf9Od113xXcDI7sc3W62w7ILlW3ri/MPYMacyHcGRHfWm8fXy92UK1sT9 q8MF 4MjxRtLV5d9XwGMfEJLqPMlcbsvetwgX4nK Ih3DDbq0OwFK1T2x62mrhf8nkp3lkqmuWMPQQtUAyiUb0xR7KJJCypjOlnqT6lgSOs6FI2DYFsyQRLlkrKjEfD4oDqwN/kPJDlm04kT8Y7w4iAP/K0uVnMGTnCf9V8Iv0RxQx jVi3R7x1GgrOiOjD57H3gwv y/lfedb4HDFfkDI4HqtyibhUAr6IEEOY1rwngqPEws1Kczg8tDoEXOyhUE/o/2HLmsaGYb3822 zO51OyJGyrwy8Qo881vCtOl27q29dB/.../Azn2JSZohtpQRrI7KCCcrTiwT3ihyyYiNncJrTOmwRj3O4bR ShmYyYF2Svhgz6GtmYMu2LoRCr5FsfWvY&external_id=1429842980032609476&uuid=gbh9wt5ENBolr5Qh3L2Wt04W9lmxUtNtfAJeCPCW8jd3EPiw9aQQj8Ir76BpvaFZvVEVASlUVPHROWP2PPuFEKwOecDIhACSvL8mN1jAkomdTJ6h8dnSWhai4xYbFj3Q2eL773eFtoScpTrgxyiFF37j1P8JDXkwCclw2CxIFhETCcMYKXCavvX4fk7d  (facebook messenger.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=xpoexS24RAovglhabc8a1bWbgoYjBt6T0PLZ2 GmPr6nCk3eOajvdquUDbuHsbbziQ05y1eKrLhfBt6SOXutMBKKeU8iej9qmqRmfQCmL2 rxKa5wIfTY5voWdaQL2D5bMXI9C0FQlnFo/ok/p8nlSRCT63NQc5h9dnECVIxGV6KYvN6CMh1Gc4xbl2PDBoki6SZh5CvMKgYSWxZvWs9U3ye55Jqaq7lFMHQT63NYkLoXsQTyhkLHtlN5icqXPOfflZ0byCzwN/jQZlubOdhsego7jsZlZQtQPwnEabQAE3M8W3uzYVNLJieF Gn6Oj8MO5QT63giRutMBGaxMi b0gC1l sqM98KBl57Ore 1D6/ZXb4sRJW2H3QucCZDeqZy0NypCsVos3eiVY6/fD4iSFePRJHWiwmYyXxnMV/HEXmqhf1b5f8fKyM2LHHlR76vn8PDKmsDfq4XCmZBYzI8W5gwLVzOyXlYn2aZwnKZVvMdcU8WvkgrkQLJoTydnw3OjCkMP72LPFTIiaMBGaGWGV31351l/W5A8yxOlfMyL Tkyo41XAibCacYxK1kIAhU53hjHB0lMHaDlPTwR4Nr gMN/HYow6ptlowNZsszmhxOSCBRb4rFVuo4dFX1cnsKwovW0Vj0gkYcp5l6xi Yb1RT2n54Obi/jCnx61J XHw QBHWkpcjIfzh aU6P8NKrxIG0trMypm9FM0aJlaIeI80I2DYbUrvlCekrKiqKx5ku2kZyXkLN6oq9OgZFJ/asFFb2AamW5ZoA3w/8KATCbg26F7lZ8Utzkal EZbGJPBkjXCwkKJ3IdiTESsTnzDjkQ4nJXfvZASuIV2rGAqyVW oziz/NfthASnbZ/.../FlMyujbxv5r2X6QxpZ&external_id=1429892305177891025&uuid=IxGVaNlZvJsNPLJFw5x3vK4yGR  (imo free video calls and chat for pc.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=xpoexS24RAovglhabc8a1bWbgoYjBt6T0PLZ2 GmPr6nCk3eOajvdquUDbuHsbbziQ05y1eKrLhfBt6SOXutMBKKeU8iej9qmqRmfQCmL2 rxKa5wIfTY5voWdaQL2D5bMXI9C0FQlnFo/ok/p8nlSRCT63NQc5h9dnECVIxGV6KYvN6CMh1Gc4xbl2PDBoki6SZh5CvMKgYSWxZvWs9U3ye55Jqaq7lFMHQT63NYkLoXsQTyhkLHtlN5icqXPOfflZ0byCzwN/jQZlubOdhsego7jsZlZQtQPwnEabQAE3M8W3uzYVNLJieF Gn6Oj8MO5QT63giRutMBGaxMi b0gC1l sqM98KBl57Ore 1D6/ZXb4sRJW2H3QucCZDeqZy0NypCsVos3eiVY6/fD4iSFePRJHWiwmYyXxnMV/HEXmqhf1b5f8fKyM2LHHlR76vn8PDKmsDfq4XCmZBYzI8W5gwLVzOyXlYn2aZwnKZVvMdcU8WvkgrkQLJoTydnw3OjCkMP72LPFTIiaMBGaGWGV31351l/W5A8yxOlfMyL Tkyo41XAibCacYxK1kIAhU53hjHB0lMHaDlPTwR4Nr gMN/HYow6ptlowNZsszmhxOSCBRb4rFVuo4dFX1cnsKwovW0Vj0gkYcp5l6xi Yb1RT2n54Obi/jCnx61J XHw QBHWkpcjIfzh aU6P8NKrxIG0trMypm9FM0aJlaIeI80I2DYbUrvlCekrKiqKx5ku2kZyXkLN6oq9OgZFJ/asFFb2AamW5ZoA3w/8KATCbg26F7lZ8Utzkal EZbGJPBkjXCwkKJ3IdiTESsTnzDjkQ4nJXfvZASuIV2rGAqyVW oziz/NfthASnbZ/.../FlMyujbxv5r2X6QxpZ&external_id=1429892305177891025&uuid=cCa8VCG01DMZGyuWCgKIK0DjmO  (imo free video calls and chat for pc.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=xpoexS24RAovglhabc8a1bWbgoYjBt6T0PLZ2 GmPr6nCk3eOajvdquUDbuHsbbziQ05y1eKrLhfBt6SOXutMBKKeU8iej9qmqRmfQCmL2 rxKa5wIfTY5voWdaQL2D5bMXI9C0FQlnFo/ok/p8nlSRCT63NQc5h9dnECVIxGV6KYvN6CMh1Gc4xbl2PDBoki6SZh5CvMKgYSWxZvWs9U3ye55Jqaq7lFMHQT63NYkLoXsQTyhkLHtlN5icqXPOfflZ0byCzwN/jQZlubOdhsego7jsZlZQtQPwnEabQAE3M8W3uzYVNLJieF Gn6Oj8MO5QT63giRutMBGaxMi b0gC1l sqM98KBl57Ore 1D6/ZXb4sRJW2H3QucCZDeqZy0NypCsVos3eiVY6/fD4iSFePRJHWiwmYyXxnMV/HEXmqhf1b5f8fKyM2LHHlR76vn8PDKmsDfq4XCmZBYzI8W5gwLVzOyXlYn2aZwnKZVvMdcU8WvkgrkQLJoTydnw3OjCkMP72LPFTIiaMBGaGWGV31351l/W5A8yxOlfMyL Tkyo41XAibCacYxK1kIAhU53hjHB0lMHaDlPTwR4Nr gMN/HYow6ptlowNZsszmhxOSCBRb4rFVuo4dFX1cnsKwovW0Vj0gkYcp5l6xi Yb1RT2n54Obi/jCnx61J XHw QBHWkpcjIfzh aU6P8NKrxIG0trMypm9FM0aJlaIeI80I2DYbUrvlCekrKiqKx5ku2kZyXkLN6oq9OgZFJ/asFFb2AamW5ZoA3w/8KATCbg26F7lZ8Utzkal EZbGJPBkjXCwkKJ3IdiTESsTnzDjkQ4nJXfvZASuIV2rGAqyVW oziz/NfthASnbZ/.../FlMyujbxv5r2X6QxpZ&external_id=1429892305177891025&uuid=zbZloJOdNCEVCLK5GfzFu6BNPG  (imo free video calls and chat for pc.exe)

25 / 68    (PUP)
http://b.allstate-final.xyz/hp/?q=yh1/Zbworss2nikg01AwESfyZdz/6meaOLKXA2DL8veDz80ig67/osN3Dqe3GYePpFWlny/KPbF0 Pg4tvQWVWgw75SVUahuS2GSACMTP6W/7TyrqyqPfnWlWkF4SVjE0/65dhI5hnMoViT0XjkFOI /Cv0cZw77vWAKnsN7Nmlr/2jEnz5BFI rBqMqlZOOUhENsmy6xIi9j3FHG/z4pv/nfxR9KdbkfdKcac15I5E1wyxqbIYz/pZKnLoQnkCOXmJgv1iDtoSDbsAeqcaXWYnldoP9u4nmbXPFzT DX7nuXu16JNz 5kZP178BLYriTa26m4S93FGDqmJHxUGgw2EldUmqjma5HG5EW/hEZJ9saU07y5SR bWh1Klx/6gii1sdEz6cH5KqrG0LeXEikskuV8oBnyQtfDNiKdgsLAIvodfXd1LxdpeOwN98RucRVt6EbEft/okwfVrnEagArFxVtNRookObTY6EOeZlh7EU7gHVIHRrJsHjS0Mt63ZHvINi 5EV/IPaNHSTIq2pzv5G0XfVwcrn41zS4RK0wg588ty1hKbj81stapKYZhftSUiDtpBh2ijCTeQo7/ vBMZg3nY8bSxjCY2Kl4t8AyVTE7QLjoqN2UtZM2mEL8jhvl6VRyMIUxX7Rjsy4RDHE4YbCD8nAlrL02E7IyQISJu1Mgn9BbkQJNCUTafDLvxOe8Tu4LUwZ8yY3DtyI9ZMsv6WZxXc1Kx57/.../jvm28bjqeDdnC7BYqYoLgiCzUrnLhpqhZj0ggQ692m14Mogcxc948zMNT1zScm HQ&external_id=1429873951436412298&uuid=RoXIbOIauMf6767r9TsBjAwUNTtCmd4ALzrn6qKPTGsItTVVHnrp8HgthULlz0NPiMDudt0fSLIu  (download huniepop torrents - kickasstorrents.exe)

1 / 68      (Malware)
http://b.allstate-final.xyz/hp/?q=vxLnkDygMHNJcTVNPRxwMzvNrD t01LNiQcTsGYfOjokgq23cEMJi xPVk31 AjSUprrm0hpeacQKWZXmccM55JuUZ/IKHHqVv HsYtM2NyxWd3VmsIb6g CM9eQ9X7urEonbLwuC8aI/vkVba4oSjwA5e0mMnp78XJ6DMPuKjDjRCPP5QVLsB0M/MnvW c44RE9GoE2UQK4tbO9vxJ9d28P5MQDvTLyC1/aCby89ihv81lwvlZS4T4NSx5x4S0oGXoIqswSTLg f/zRdOKpezhPNUvZ2yS/ZqMMSsadEWf7nONJczYxfip YQ01T4Te0ePqYHVS3YjBt0jDk7B27tspFT0golCaZ6eRYw94AgmZ5gxAFNA4Bg v0kb03rfNpILWeaBGUuzGYfvR/zbPJy8rnXwj2wNEdqNwXx4333oLHAWBjYDOECrmj7LNamCt49yxVssVN4XDwBw/peScgdUej5lm9dUadlo MzW3FPKsdkCKVtXeVVqjxQUKBxNFz2ccI17Nu/ Sk00t8wWm RtcFwKlze5gBT1hfcX5QLnk64aJImUISt3jcO/MTiLGBMDIrUBiDWpwVM1ybzBho7e59Lx2SZLGMqEuBZuP5LT6GQqnIwccMzICZNA2g9sty5QSfaz1Ydi6Ens2svra 9tMBLUQAnLoYQe22sWGWvZ0RRmle/wsY42k m0u/FGM3IH 7qI3yd m9Q2yQgAAWKj40Fvi8WJt8KCsWO/l7giFmlnnwIf7qaEu6MBOp7oxhmJHj3eNGIfUDAIa8i8dlaYFg2E/.../6w6OJu6L6A0bqxLSpMSFiWiglrKH8hYDeFI9RbGtrUzcAHtSZy8AVEVWPfDA50AjLltW9ipttuck5o9B835w a 8sND4UxLinKOC7ShlIaQ7m  (download gta 5 pc blitz play heist workaround torrent - kickasstorrents.exe)

22 / 68    (PUP)
http://b.allstate-final.xyz/hp/?q=9p7P2vzivP8mABCDWYRL34XzqapoClloFTwKRuWlXljla5bHS mh MuuRYAYGUyqUL6Lh08nEzEB4ifnI BQePi9W9DTY5zsN6ovtPhTevkuxyxYwNCkrolLOv4uaHZSGOUW49vDWsOIPVDpPdeIH4AaT6zuACb5Po0yk/LdE0HI4B7mcYa8pFTvei/kwv2eJC2R/NFMiwQ D4DJ/peHieUs4tcA6/WtkC09Eag0zLI hYraHRL7ub0VrJyei 1/SEcd MsiCamz112E4hxyMV76gl3xMQ hrUdz3zDD9Xq3aasmI cpiNhBTC2z/AJ047gH81J1qBKVZsMTGW4xllqLyePzyGs0C5F6ibtyoqs7AQBOHOMaRzTPVkMO4zk/fqx6hZ4Pv6VE9gn8noagUlhB0PFPK92Gb8FqwZWEzCJQ7 jRznOO5r1jtQbZqfahaSnSXZerRmtDMaaHzsbLT4UL O9iRj1uVupx80tCH6BZrzN6LXxZpFUsbXGBaPkupeo4J Gbs1HS6hX sRyAV6iaBZphfN4jOBb 5WTqmFFM6335W86cYA/lbR1fcgJ11jrLf9b1BWAouBV8gK1tc1N1jIXpU15bdnZ2TS00l0nmnKJZ2GKOu2vhBEWzLzWGPItLHOrdiQHLPV73OnQU96i4U24N1c2lcvBt4Lz 8Vai5u/.../HbtsUQN32I9pHW qMQ6QP41y2ZLhtswdj6kGGH&external_id=1429864925897116028&uuid=9pBt95Awud0PLUVxeOGIk8Oeow3QT6DBUKMCT1niM7HI3WzktmELEDBCbjDjdDgU50h19MR0iTDAn3njLuv28VCnTPKqw5fzsHwmvbX6n55RtoXzetVpLCbdPTC1wvkqoRowmbnFkLTmkUqpWGJfF5Cc  (audrey assad free mp3 download.exe)

The following 4 files have been seen to comunicate with b.allstate-final.xyz in live environments.

TCP » 52.11.167.137:80
download.exe

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.69.228.231:80
download.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.