home

www.aaafarmapps.com

Communigal Communication Ltd

Domain Information

The domain www.aaafarmapps.com registered by Communigal Communication Ltd was initially registered in October of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Thursday, October 8, 2015

Expires date:
Saturday, October 8, 2016

Updated date:
Thursday, October 8, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
aaafarmapps.com

Whois:
1 aaafarmapps.com record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M), PUP.installCore.dobrepro.Installer (M), PUP.installCore (M)
97.92%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.08%

F-Secure
Application:W32/Generic.70053c248f!Online
2.08%

The domain www.aaafarmapps.com has been seen to resolve to the following 23 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 19, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 26, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 26, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 11, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 26, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 18, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 1, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 1, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 1, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 1, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 1, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 1, 2016

File downloads found at URLs served by www.aaafarmapps.com.

0 / 68
http://www.aaafarmapps.com/WVl6OTRQVTRsTWtKVU9FVkxja3hzSlRKQ2JuWnhVRlZxU1VocFRIUndaWGd5VW5oR05rWjBSVFZUTmpSTlNUWkxTbmwzSlRORUptTTlhRWg2YnlVeVFqRWxNa0k1T1RCRU1ETkllVE4yY2tSRVJYRkRKVEpHT1dGQlN6WlRjMk5QVEVsblRWUlVlQ1V5Um5sMUpUSkdOa1ZsWWxoUFVsbHZVWGhyZUhsM09GbGtiMk42ZEhaamRXTlFRWEZaVmtGMWVFUlJObEJrUkZGSE4wa3paMUpyVkhCU2J6WnpUVVZ2WWlVeVJuVm9UekJQUVhSemRUaFVVVTlpZUZSNlpFZDRaM0pXVW1oUGVVWkViVFU1ZURGTVNIaHVVazlCYkcxbGFsZGtjRkkzT0V3elpFNTRUbUZ5UmxKc2NVRkpVRTFKSlRORUptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWMzUnZjbUZuWlM1a2IySnlaWEJ5YjJkeVlXMTVMbkJzSlRKbWJtRnllbVZrZW1saEpUSm1hVzV6ZEhOd1pXVmtabUZ1TkRVeExtVjRaU1prYjNkdWJHOWhaRUZ6UFZOd1pXVmtSbUZ1TFRFek1UWTJMV1J3TG1WNFpRPT0=  (instspeedfan451.exe)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=OSc2X9m5cOzFikVnE3HThKNBw4upMEQw8TmYJBLk 1I=&c=WXr3cmz30X7b8DwcoEmguU1OprmQ S0XV2ODKkKjKANjqkvjjJwAih5PM8zqXo2uCOMz2S6KQRxWkJnN5Px41i8bp72JiPkYOS 4NfC5NxzajoMFOvOM1K8Xk sHJdK95Wg VssHx3P YawEpOgJo1ewrX25Xo/2LaE8mfefDLI=&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/41.0.1/win32/.../Firefox Setup 41.0.1.exe&downloadAs=Firefox-13108-dp.exe  (434bd8ce567a7db5b4fe9413b6a5e6b0)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=z8EIeOAZcZhwKqk1dSv1xM/bh/EqSXK7FvHIg34oZmY=&c=a3U/kjjC5vWEiSnS86lxt1hT3kDz/6P GU4u6baFxiIW7hJR1Qmc7ywxgjZ3/KMR0db//cx 0Zz0Uah8Vz85fq8F308/Le8PnL8ZzXPqK8tgWxJp68icj0gjKWneVkUO1IM3vRMiLa15wEAbmVoYfw==&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (51d5f9fb58dddf1a5ef82129986f99fa)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=wBTTSVoEmhpazKBK9pwZggKfwAwf0Q0DkbzAhA7FGmw=&c=gldqAUavUp32Tm5LD9NF4K5gV5Qjr/WYib2g48c9YyfQwq4yrwvaCswwk8lDUc4SBh8mkt6HViX9XGbN7bh2gGHgYi1wZllHumOb9pFEcCQ4viBnO6FINedxxOcM7MmEbfCfh2qKNrgTKXBD4eBBTA==&fallback_url=http://download.microsoft.com/download/9/E/4/.../PowerPointViewer.exe&downloadAs=PowerPoint-Viewer-12204-dp.exe  (a75f29e9fda99ffded3d5ca107e411d2)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=817kGEHVVA3x797tIgOu4LntC7MPHosbAGuhGKr9 oc=&c=wYqrW6iDGNt6w9C7lmHBAIe1NQUvlYiMNieK8EhEy5oXVoG7YxKuqR1S/HTk8t3C7VFRXbV4pFtpg M83r9vLl7yYeSI/XjnZemBc20hSnLJaifQsveux8FLtxFrSgD94RAJCCNu28DVfSYxJtOUHw==&fallback_url=http://download.microsoft.com/download/c/e/1/.../wordview_pl-pl.exe&downloadAs=Word-Viewer-12113-dp.exe  (c33b0de7e81ed099fdec4a0c911af1be)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=eZmy1FxoorfMcVR6yDHrSeTxN7 OQwNXgSS1wN LJKk=&c=Wo1rMDxSBuq2DzbGZYEmtPKI4HnKmIX8vsF x0iRURcPwAK7if7Nb 99o8Kpz2ZHcuZPs18fzK/Ko3Kkqisu7TdH/j0NK5C A7GT omigtO ouejDu8muAbigZfkbpK8H6VAeTQUo aTxUZ9pB9Hw==&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.6.install.zip&downloadAs=Paint.NET-12332-dp.exe  (paint.exe)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x= Br7uIbyU01ftjhH3uBL zEA2zqkSpKxwjtr2hf/TI4=&c=UfH3uMS ZZOdSvl4wrb9M6csFL33lXvkAA8VaDATFUv5r7i0FlfvWUq0LR/AACt8jsTT8HrZ3qQUWXT5wsOCqQD0jq6 egxxDbR W3CZwPogqt1Tsy0O3ys0HJDuzhlYNhSwzCEqRc0cNsxSzim0mQ==&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp-12928-dp.exe  (0d1faf52cb4b26263a8aa24d5b2e0c2c)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=yVbCrJc9ABigGmwekgHYudo7b9ArJ2u5pKPOGrKK2Ns=&c=k9pFwcxb0jcX/3/uhW6Gm2iopU LRNjj ggHl1bYDqxM7ZwVGp6WDxKxnf58jHlyfqHHhB0bpjDu5lJtkKCYREOtGjCk1F219lZNNnmsweYqb74jsUd3Qf8gkTGACR/9IdG3KEo/u/R0B36DivgrCA==&fallback_url=http://get.geo.opera.com/pub/opera/desktop/33.0.1990.43/.../Opera_33.0.1990.43_Setup.exe&downloadAs=Opera-12614-dp.exe  (33e93fbaedac3bc07426fec5cf7f9f77)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=JJ4iEjLwqzhgHcR9Mt1ezXEN5 SIhpvA84SWOgooPfY=&c=xtWVFH2pZy519pVkYwswBFwE6FG9HwvgmW/Ep8y1v rccvlUV04Y2OtYn5wkEKHF4YmW66uO4gQPcRVAfLe9L7wvKFhgTWOkugyQxz2DTrIFhSEXdi0nPi7BlpwjdRfOZAdkxaAZPlZFXvJ1AyPMpQ==&fallback_url=http://www.active-undelete.com/.../UndeleteLite-freeware.exe&downloadAs=Active-UNDELETE-47629-dp.exe  (3012c7fe940640e0d3120a7a669d3967)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=NKO2Va6GYMEmcL//KklkyX9asOz9rSaxPwnkVZiA4No=&c=6uVC12/c4T8yzuuSE5j5j8yjv YxKGzox47vcyja2W2H67RqI3ngTbcQy5bJXrrWNplQ0Jiu3ucvp66qlH73wt/hdnIvvD/GujClklKT9PkAt/iHdiIYrNPo3BC6ogUHWoSCv/aWVnmsAMj/QNpAUA==&fallback_url=http://eskk.pl/files/.../SlownikCastellanoDemoSetup.exe&downloadAs=Slownik-hiszpanskopolski-polskohiszpanski-12588-dp.exe  (ec23c39fbfcdd82cdb45293f622af862)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=ILVfamJ8WR6WwkTbnMmJOTtC6K6YI VXFLuFHnXnhUQ=&c=OIM7oLdx2JXbP2MVUZob/8VSiss9LltW3aC4fb6AAe9jUoym9v8DbZYNbLgJ N1Ewt5/q6h/dQBXmHxowoGe0WLIPETB1ic12sXNiDUsdw9PucVcnrVpyV Y94j7SxHLzSqFyMgCDRmN8Wu/pHiagQ==&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (feb412f9ac2ba0a82b6872a0ff7e701a)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=lPrYZq33Fjy5UIhFRH7Jb5u/pCeLmP7jN3LAAT45Hto=&c=XZJK834jnjrS13OOWcwG2VTvSCga M0Z0766wpWHNDj6QefmAWYeVbjexfb 0nNjV6ybK4diJE0HVM2NuMR 8PRLWvZy7aVzRxgjfi76mz7gIndJbXli5ZQeH93xTxaq4SjpFNX2A5x9Dt domMqVg==&fallback_url=http://static.infomaniak.ch/photofiltre/.../StudioPL.zip&downloadAs=PhotoFiltre-11571-dp.exe  (7925dd1fcf307e8bc27925fe7eb5e76e)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=Z8OqUUPgW6tWmbGMZzpy9d/hQ2AtOKc2UCB7Lckli8s=&c=uKNOrjS6lGCaqq9zTCLT49X/NucDiwmItOo8c6A3GzYz5ANFNt6DzIaThL9n08qMrQntT9FDQe2VysP9kNuzncg12o 3xbw8XE1sb8WHL27zQQc9NgIMVJ1VAlgwPYtbKFzQaD4asZvX5oduqv LTA==&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (123d6620b8401d6e36d03768c4c38aff)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=V5ISUgwUjprndTLGsD1nv0RswUkxFPuwTVmuuzmwFMg=&c=pkzvR8MYFgKtPku54agYypQG4GoOFafft2ZsDnqtdV64Wq8Kcy7IuHYoD Wrd/tVqDP4JXBkzvqAZf7pNgeXcoExdOHZovRRK wyXV3aGM1c5X7/0wIzDTDgiwEwfheHZAVZ/vN9nVRQbTQHL7wkqA==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/41.0.2/win32/.../Firefox Setup 41.0.2.exe&downloadAs=Firefox-13108-dp.exe  (93c1f7e79a421b5272bf4879cc2d1459)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=kOuaMklk8kpFws8By5p0CT8G5aGHAkRFHkV 3/6TPRo=&c=6F4pkyOFTXyGAmdFi5XIl2BcULSACSSof5836 F4wd5zdFjLTHE kjZLBGcmENUZ7LNX7JenBMjcRR1v7BNGdvWiERlhczxPPcZ97PNQSVAoJB9NbnpwE o516yndoCY/BLbr NTK/uSl1cwc4DFA==&fallback_url=http://storage.dobreprogramy.pl/.../audacity-win-2.1.1.exe&downloadAs=Audacity-11826-dp.exe  (c.exe)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=QVX9kajb2v26E3fGS7C8tCjj6VRbWd4PMIGX8kHFbTY=&c=sItXru2uxbi3EHKWiIg zBYiKvq35ZTNAFe0xrTDCATlyTk0N0aCcopgxP3HdS7bpZ4Svfz2pBytKC2oFnZKissbUy98zcw/ rCYPSCF KuvTSJdnjetdtvDEi2088H4oLdqDQmKeBGT8p9M77mMmw==&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (31a0d0b10e1692a090edfec0dcdbe6e8)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=ARkwSYmoOf 1q6HsvZ4sPKY52QQ3iEwsVjwyl5VgDIY=&c=IYF45n/HXqKYRzaXVqnNpZ0a578FW9xoDoFGkYinXj2d8nvqbN /L1rVEoCXgKMouBqzuBTxl6PbveZ8aQoHvISQLGQDkqYW25pDkCUVCgi1ZNl624gVMRQmtsvVAjFrVCNoLESOA1T3Enaw4FkVUg==&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (e338a6e60d87a6405e9af8df70943818)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=GDK7tvy2DoTFpsHKGAYUyVIOsErHRE3lcOdJZTU60wU=&c=C3gqpn4GbXLNaASDOsQgpf86xdtg/AgAcudGZz5MRJUXHnHyBQ5ZeQ5k2bS9XF5Dktl42/nK32xAAC1hGtDG1ba7pXYA9sr9muidQ2e3MKSteiLpKsXYvaqU9X69SfyrMTSCXNYXWFgTQzcSGC7UpQ==&fallback_url=http://storage.dobreprogramy.pl/.../PDFill_PDF_Tools_FREE.exe&downloadAs=PDFill-PDF-Tools-Free-25188-dp.exe  (5ef696b1e62d06e5f97d885a6792adac)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=tKcCNTj7sCk08wu9/H6cXTD16Twvo2g9Vn4r3/OaYvo=&c=JkDlKRYmkyFnw6r5r31IuF1zHo9qf81rhxFMiF7bkFqCexvWol3qM1F1LULZcC5FzWnAZYqDEacN5 AFDs4UP i15mp8ktNuAn4ImO7XaPpvrikvUWShonTTbYiZgIGAuUL4xCznkftZIXseMM WQ==&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_lite_pl-pl.exe&downloadAs=Winamp-12930-dp.exe  (16ccfa3859932416514104a1c526a37c)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=0MaGKHNjfKuRBvnfjBFfyyjLyQPK1l3YbH91TVPYUFc=&c=CWcq t 74DPgOsyRCKiXsXfo5TBaSofa7ULOli81btBOd HOMPzEPJa OFDlfT YoXLJ7J2c0LsqIub9oXQrGSpFRLOpBX x4HHjGnTlZhlxiuZwfBUUbbMGOx6k8zna59JTZLgUMH10S0b5BYCVDw==&fallback_url=http://dl.google.com/.../picasa39-setup.exe&downloadAs=Picasa-12733-dp.exe  (048c39f8c0927c6d87fdfda53668ab41)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=33aPibnigejSH5i7XPCJicdig6gsu5F/oJcgjasven4=&c=m8OT4ZLUKOAYVzb/Z1hbJiQYX jf0Vp3nFGhuHeHofPfXqLwfyl/NEXKsH7Ymk/x2XF/8EN1 T9GoGP/0HjDJxNa1th6A1bih4CNmLwi4Ziy0piGMX459vRIHGy0e/HA5K4gHzBggT6fPxkf8n8edg==&fallback_url=http://download.calibre-ebook.com/.../calibre-2.41.0.msi&downloadAs=Calibre-24518-dp.exe  (f700b86b6a5f1450e2de7f0843c170f2)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=9d d8BfTa0OFUTcAzjug7k7uQ0VW8GuY2c7vip8NU88=&c=birjLv5B87c72B63AY7JWzwikne6PsfsCp7iqsrfPpvRaH1dpGsW0GnILeTMyIZVzUUSmjJhkqCH5uzCKieD5lsqG/XWVAe4ptTGAnBhVmK9Kx9h2V9Y3cuTb7OlCugJ0RcRSvcOVUy Pi8Sjae6kw==&fallback_url=http://storage.dobreprogramy.pl/.../freedvd(dobreprogramy.pl).zip&downloadAs=Free-DVD-MPEG2-AC3-codecs-11450-dp.exe  (447d6e6ca75af5c0f365a737209c4e20)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=FKXAuE6XbJ7RAXazrJksZSJ0DZHa1cKc3Yw8Vcq6CqI=&c=xl6rnA/pZn5Gal83GkeOOMiruu9dOze6WQCI6dQnWaVAMCz90oixSuI q2So0ody/Exk eTcc068PG3JEKMVc8aKE28HHBslSsYApO2Iqf0F3nZr88b ciesgVYe9oBg4K6TyOxHwHmJ6entg729Ug==&fallback_url=http://app.gomlab.com/eng/.../GOMPLAYERENSETUP.EXE&downloadAs=GOM-Player-12844-dp.exe  (1cda0258d3c0a5fc99b86d8f2c3deee5)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=ltStSpb1ubc1JoS6kkIvRmFqX7WgWqvyzAprrEtXb4k=&c=NOukBz K 1aic0RWj21Ui/H/5RcXjiNvRyhM xLSb3KPaJToYTw3 tx27QVqcTsuKTjqzSXAUxhPZAA1EwQuhvxyoOVMdXWTDlE MDOVAAwg o/iuKvTuNHRV2ZxzhPMQjbmF3HkU5DhKT0pqqnHAw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/41.0.1/win32/.../Firefox Setup 41.0.1.exe&downloadAs=Firefox-13108-dp.exe  (434bd8ce567a7db5b4fe9413b6a5e6b0)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=zLW3OpFw7q9bP49 mZM1AxJDG2hzFQ4gDzGwfsZDvUI=&c=pLuu2bFMGwT9hXXwmRPlD/FLQh/ 968eKitF5pXWy/9Cc0z7Tq25uOfKDEtLPW8hjUkrWdgqv0eFZEv7k5D gnihGu1EdjZ8IJGowWnZUfWTqTd/sqPg73y0rbZhUJsP503 uQZSZob1/wgmTeirYg==&fallback_url=http://storage.dobreprogramy.pl/.../stellarium-0.13.3-win32.exe&downloadAs=Stellarium-12626-dp.exe  (72c90d0a6e5dbf8ba7f53418636372ce)

2 / 68      (false positives)
http://www.aaafarmapps.com/c?x=44aVld0Q NHYzcRcGLGZDrRQHt9pJnE8hVQKwZS3ubQ=&c=OcZNLnlRzJ5QKGuOcn61wrX3arts Jj9xv0vO1px2bkcj9nmHFcdylfzDve 7F1aY1MarmEZIpVSi99/PAQXac144swu4eeRS4YmbuA TxBXnpTNhOYqJ0iX1PKavz3OF8Jlr3/DRS2QniWdvOExIw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/41.0.2/win32/.../Firefox Setup 41.0.2.exe&downloadAs=Firefox-13108-dp.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=QNQoWYQLxDv8Y5j0h2a40BMKc7pEXZbxElDHQKtPf8w=&c=99qFjYFoTBD7gB1ZrXsP5/seTr5XOmpEcTf9RQu59AeM22/oNizKRLAnEpkpZ9KseeaFh9Z06rG5Tkd0i56ll17nLZ2RJNttZpkPby4uWiuNVQVlG/gpbVV8i8Z66CoFNLTZVzRwmhAh7 N5InotpQ==&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (269f79ed4fdac55c81bf26cdb897e3b1)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=UMnpxKQs0VIoTPFrW/V/WlPcUEgk7VcHOotjcaD8ri4=&c=8yUw2mRryCXaF3eOKdAmizlvbnQw6jiCbepC6y6SLZOtUO7/D0H4W1l8E2KEqNHrwTmoXqTUAvblzetkkiVEx6DIaCJX0A3QIaRZQmhz2y29MLFL mpvUZGZ23ogZ4Mh8DXfvMDLMlHJWmjPat4CWA==&fallback_url=http://storage.dobreprogramy.pl/.../gimp-2.8.14-setup-1.exe&downloadAs=GIMP-13219-dp.exe  (8bdcf8290e2b45427bb6ef17cedf6a6f)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=2rnl8hAmDQUQdTHXjsi3CV0MSiScEYt/r3ui rWPWCE=&c=7h5HulumQdbd8aJLnJY8gz29GDqq1FyLy7jQ76Ws3WTXhgr1YceKS0rn9rQL/mWBguHW3X/picAR5fNzwmSPIGmb/NQ1AZ55e9r4NYuEFjbmYJNKmO9SpK5H3vYXMUXE7AY/cL28H0RHvCbo6o8Wkw==&fallback_url=http://download.microsoft.com/download/4/e/b/.../wmp11-windowsxp-x86-PL-PL.exe&downloadAs=Windows-Media-Player-11848-dp.exe  (7b1392ff24d75ea203dc0294b808d143)

1 / 68      (Adware)
http://www.aaafarmapps.com/c?x=kJdcJkneoEYFMrXNUD9IbzbrkYd0S3umlKsRoNr7M0U=&c=0OxgukOK ykQYRjPOaj8sHvKzXryUmb02RuZ/W/uzuE4JC79CQm0vOGMnoSfpc/Qdch36bplLLgxlAcfKc5Bd6rcMIvvbg/cnpyna4SciI XYsnA85g/D9iITavUIahUJgqThYiPkli5eDoXFbuGmw==&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp-12928-dp.exe  (e9d3db4796d50f909454e31a99030016)

 
Latest 30 of 139 download URLs

The following 36 files have been seen to comunicate with www.aaafarmapps.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.