home

www.bitsfarmbundle.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bitsfarmbundle.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.bitsfarmbundle.com has been seen to resolve to the following 16 IP addresses.

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 23, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 23, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 23, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 9, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 9, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 9, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 9, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 9, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 9, 2016

File downloads found at URLs served by www.bitsfarmbundle.com.

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=XWdKfgChRKyT/oN8wetJsUVlW/vvd4mXgmSpp34QhHw=&c=76X/LogHj9NwMz7VDMT8ZyVUT82XXjS ARxz9ZZwTabpib5CDhIMCqFR9gE2bTYD9hoU3FXi6iU1IGMBEzzgYUDj1U9gwhgiBKdpwtTAlCC8YbQb7WF1Bo0DuBsIYmw&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (a65b4fac693b2c2671b39f3e44738e29)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=HDpM90 40ZLh9i6wBH03jWyBbln0LDByajrxds9 I10=&c=lV96DwlsVWZZwSD8vUqVd9mkdsQvQVF05qfaE9QePn8Bfb8DBsmU4upVhxEqh33Lc2JYFS4gzYVOYyyFHgeLA8Jq06X1N0 xCrGkQTq5cyutGCsKkGG 5jhait dlmVx&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (f531645e4f60df6e35dc583ca5084f75)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=IFH s2ZxpZjRYwPnvDsfaaavYoOjX3kZT7pKEF8yLHU=&c=IfGpyFbaDzimGNKtG31NYel/Ix42321hJ2PB32xbnFBlKPQ1mBxHAPlI191EDpTD3qCGluMDWZ qojhcJQ//pl1n/hxKYQtA0g/a0XJkgcktbz9U4UslVjGVfiF0Mxww&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (64d40e039953891d6dba7a8dfe7c6c6d)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=/YXlAos4TplDozNbV7Z8k7aZMQg8J2qgZ15F7Rx9BOw=&c=bLEAn73AgzUGE8xjSANgmzFHkE/mZFKN9N8tqMWp8lpJ5G6K39pOUI9KA5PjlieaXh3wEFzmRjnarsDfJFcjyBPM5TT7J UDm57cA9Qw/NShtghnAsloCGBvV3/CtnMF&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (9117fe3556d2fe75a46aea39550b92b5)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=Grflx VCw9Laa6/aTKWpLijJpjZVteuqPPMX6Gg0B I=&c=bL3rjhk9ExLlPh7vFR2aDWWQrMfJ8bsC8tKRP9XwdGzLVJ5/6stF2L6Gjb9QzJCmj40ML7Zpdbua/U LzY9FzQ7Z0ADdwLlDddK3OfUsWoxVuZu9taQxAbiDlUrKuKD &downloadAs=HP-LaserJet-P1005-Driver.exe&fallback_url=http://ftp.hp.com/pub/softlib/software12/COL20938/.../hp_LJ_P1005_P1505_Full_Solution_ROW.exe  (setup.exe)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=85ETQIQ1kDj4Aglo5gKF9ps6qQU6xWgY0IosvWp3xU0=&c=XpVQdh6F7lBPRBPuVCfra4g2Bg7apVx0SL8VNCXOHL6ECByoWLziU1PahoXnXgAMCxId4J0nNcOcNP7uWEKue8R p5HSAFBHe2tkp8Ie esiz2am5/qymDqtyHcwTC4o&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (6a9d82ae0a9a384bc380795c72c143c2)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=YVvo/gENQDpRYbwL2LTvJ2IppE/InlDSKjsc4exZ8qU=&c=acqk1QxcAwE3cy3OaSXl04G1HU/aXlAT3XZpWnGH8clVvgOeMlxp4faT jqmS2U9BnFFEeBgdcl86tPgggv8lNZU iDRZv0g8cA9KNzBYCCvp/knOXj/lPw/vQ7raP3x&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (7dd990f81facb07b0f8bfc4ff73fd455)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=4nETb4 u pPfP4jhiROF/ 3J6MA59nNBoe6FtTlfvy4=&c=MoeK0LD2lKzHRzxqAhPiiZ9xrwJaTbNGFfSfL92MDWEI2a0w51bHZrZ3Abl4m/WDYYkVmH/qhF EZDUPt zG5iXemjQQt8kbfCuPlmBfW qFnC2brdbN3HjJaNdwgJ/B&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (937390bcc5d5cc32f46165a64357cf70)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=Qu7raTvEvch1dE120cSoT7Wxw5uKoRa9 4U/RCF/ Hs=&c=21uo73joX4esetHJ wtEkncv 5WFt7kUB 8rrw3QZwzGQaTU PhHJcr1NTISFwl7eg4xfLVavjYgNpeDgzB4jHPm6EGjEZsYHFz3Q3lT4DWyfFh/EY3z/bAZZI RYsq8&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (2277bbf1a1e07526a1ba072f1de9b11e)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=qQ37JGsK/Qq7SliKmo4X9yIzMerMf5exgRI//PsgcJc=&c=iM9vMvWts2E3e M3RqaCeAOx3HH/rZGN/yBIMUwhzWVI/LdPDh1U6 SgXLtRGWOSQdhb6zM8NJSMMqHu1bTZSzuFFNwIIXujES5tiUlSCmaeQCbArJpasv5y aGdDTTr&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (d969240fa854d89ac0a098701f7dc251)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=9uqW7aLv0YvIQCKjTsOkn7ENJdc6y/L7xJ87jfz3rho=&c=UXxh3eThIzB0Wqc5RZnXX60DFO14u0SGMIsZMiTRa/ij19EU62mPJTbu4jzhEmBc /nK37 noWGf Yg6QlGwPnZIpQiBq8lpMP5ImflKpVYbc8RQepNdB9ecQTe8GLcn&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (598d15ae4499eb0100109e26105dd7d7)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=S0ZKL0aF3iRBxe/LNewcNjWHxWYqTWHdCkqNPPdNEgc=&c=lvXeVA5RqsnIotUF/nHsOAd9DgryjQ/P3TIyVmvZc6KHvtffRnCUJmwL2uvifyDSMLFZgDsMeEHSmxNNxRY2suMS3m6netHsn1o0mfkNimz6Z6tVPSQs/Et8jLF0 QyD&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (3a4f1cb35138b655d717bab37c50f1fb)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=DXt2tP5bBLFgYGuMAbtpF2U3IGZR7NcIhM01yhswISA=&c=lb0CSqWL Clk1DEWLZedI42drj/Hp/1I0Gur5 vcHpAtA9mFH/hE4go7TlYIPuARZVcAKi3zTLui4WoumBmkfGRbuk4grwJDZ4RTQxE4osCQ2ieCx7ey5dJ3kPzuUF/z&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (5a5d801b44b3b92fadda9583658ad716)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=Baevn/r6tH2tojGcFTXquK0IPt/hWdm3vAqMFWrnG/E=&c=oU5qeUjiBr6IS6vsrFSH5/avu 7ZpJbFcCywSOUeQRpcxS07RcNiiepbDea7L1wtmvH3RpgoSP3Kp0vd2ugpeXSKo7cySrcUzRK5qp1 4v6QZ2arcdXCfsHJLPYHVzkk&downloadAs=Dev-C-Portable_4992.exe&fallback_url=http://ufpr.dl.sourceforge.net/project/devcpp-portable/devcpp-portable/.../Dev-CppPortable_4.9.9.2_Revision_4.paf.exe  (07305904517b48300cb4be7f609b9987)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=riMi4h4UuxaoDbO8YJRB3XN2GHwt46m6dj3Bpn/y/QM=&c=82X9wZKYst8y1IWaEUF7jRQ2OFUfQdlbvn6/AUEaf89T r0faDTgZl6vL2naYFtFASFMrKwJeBevOyGT9gk F3GcEs5 0AiwaKljseNnPl34dzhQRPDozvEyYwXcaQf&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (7078bf8e9fbf65f655e861942ae3c4bf)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=99O49UV/hZ7J3/r7ziAdaoN lD7/euxI77MMfE8wYXc=&c=1PQyVg49IfKDzkE2y XtA9djWFiazGIA9HJh36YRpp/bRXxpH386odNRzXNNif12MLxfEIFNfPYUeZ9b7cdGksqITX7i8O/hUQvJ4lybuMVj4V88gPz rjBKTUYWI4m3&downloadAs=update.exe&fallback_url=http://.../7z938.exe  (828dccdffe93e486223f38982d23a79f)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=csuzyQMZPyOCsizO5SD4kfxlbr Ihhn7jt4sLezW6wA=&c=vlUsOCwau4KH7WF2A29sLWZP3qjCwaudlSSfYbD/DvOgYvCoWVpvSgEfmNMNrK m1d8UuAqnOxrBQLQwYxTM9wgkDmd4vBLl18Lu8Nv96Hh0i/clBoSScMkVbk0xZtEM&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (bd05599c639f6efda8817356aa709ae9)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=YKeMIt0GxhL4eOxRowfZxV261pCpjo5b/AFvmBxbrqw=&c=pW/6XEmxozaiwQAYWMVf9Fs98cMUlxUM2/t5MIar87ydxH6xDa5Viin2nxoRdeBW2SRvEQYgyc29RGBQcCsCeT4xyX0KRUkf9xmUfZI8c bNocgityyhbBWuGFMG2PTo&downloadAs=Hard-Disk-Serial-Number-Changer.exe&fallback_url=http://files.ultradownloads.com.br/.../241278-HardDiskSerialNumberChanger.exe  ({blocked}.exe)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=d9F7m4caFT4GfYeCue2cN9jgGYBqNyp3VGyhwIU7uno=&c=Q IhW28Ajrt9aXeOB6cJ0fYnVa0Jxfv4zM/6XK9KVAy9oBUVrSyrH//J6GXu7b0d8fGGhDcjJsC8VCoEKqnX3gF/pt2DN8/Y0HSjTsuXsqBS0RVCgbcVtiqrmU8iILdI&downloadAs=Modelo-de-Monografia-ABNT-14724.odt&fallback_url=http://files.ultradownloads.com.br/.../95884-Modelo-de-Monografia-ABNT-14724.odt  (icreinstall_modelo-de-monografia-abnt-14724.exe)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=9jL1OZaOkfR8p0Y5Lpd0L93tEDTp2l0Uk6lCIRo9Iq0=&c=7nMVxG5eJb5uz8W9 fflq1kdjEFj3BsjC9TdCCGqx8JWQcg7TH7B6c2INv Rsd72m04vl3hw5y0Lzn8Z1o4Z6kYz4 VWZizDpMylrbS6sEjPJLE67UI2H4TjDf4LzsvE&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (ad8466da434194db49788c2fc07a4e36)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=FZ2odmSqPZQoTpmNpKHaJjaggz4wIOSWmjOzRjqZyEs=&c=r bhoqTojWhTnhuuaRd5HUrVhApns hloz/RSvN8mJ0bHBfvDzzCjkihar8qcUGVk8480ut476qT63OzBLDjCOufT4pJyskQN4KE211srHiAw6eEo5ftzzVrA6Hkjqk1&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (8772290dd592607e389978538f0aad90)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=QR34nR4zymLit/FdcFLcUP67RN0jZiAW0oQz9YOMRV0=&c=0fht/jBJTkd0ImJq9B0/DZoK7 sRfbc8l5OJ4pmInJ/hciHUX4Id5JOLFyXf96APn sh0qm4fdb7QJIbN3fznkm9jXWYvr9z07ZjmXxGvORwxmoBaB13z3slGOh9Y1FE&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (72496276b409b3b8eea5095fa99d0131)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=dceXYa m9A4ONcK6thoMxt7J0YwAkysAUAiNH36xHPU=&c=dpgqk8qwh2GnZh2hcrjvP7qKH6ggHnHqYVE7moPOoKIfB0carQrD4Oq7OT vH5j8vYQmeT/wWKhsZ3j FtxRc/aqGv0hfszCGblQeGcCY exEEWCFwIKKx8Btsn9HZPv&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (aacac47ae05a12d2d745e87d0038b5b5)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=ZIgiPrmllZ28tuBZ9IZ4Oaci4l18giMUMFzQlIV0tRo=&c=xtKhT3PIV3IpiNM6QBsPYoFnLJXNiMyDkAol8qtADAccdMOhALpHqQD9S326NRoeX ZFmSlBCqVrbhijUb0CFjNyiOegBQy7ANefzbJukkq6g2J0WDv8TNRrbetrQOUI&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (362d5c8f33aa9d0a76a4da8621ada182)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x= VeULU794IAxLCEVs1jylXnR94kiGZNAwt HPf3m2C0=&c=PrjWb83l368Q1v67VatBeq7wBzY8q9VRjx88ywujdNMbXy7U2Gc7/R0zdjUBW1f46AEHHwHmUWvvoacUe2VNjlgLf0LaKzReLPuR8EDlKfEL12HK3K877np2vKUu Cok&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (fcba9647f53cf69f4c71a26c3d02dda7)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=b2N6XYvT22v6UnnS7hLjIfTXdBl9RGUYW273bJalXWY=&c=mujZabEw5hlrNSqZynNOY81fxVQn6RjWYU9vx 55mvkV8DOsmDszd9oUz44/K6RnKGnbSY3t aLVPoHIgqluTpOgffDqR9bTB4gI8unWOwbDKYhq0pNNKTV9ca 2St0n&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (0907b1936510cff076f89cd0f7ab68e8)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=0pOIlruNTPnrGqaX9Fm8AoQM3Roy7v2muXBbQQMWuZU=&c=4k5CUqlNMZFzhCIelVLRWHBbCnaggZIXSkGZ1BNsPqjwfwfd TRnzXU59uJRz I8d2I3NmMm1qHsU6HMAOO U0u/OAWtlZYvzvuoOkKYquvJaa/svJgSvk/ZQCFTqqRV&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (eb908cceb8bf56df527b0e1046a6a0a6)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=cmK9lizmSu6dsakJAXrZ3wsyonC3n5U9AhYqVA/1JQQ=&c=9XBZsXz4qdsW MNxxxhyH2r74dNf1vZHRxTgzL1ijp9i00ncDA7VPvtNTWse6 UOyjEh4DQhmTG1jd9LcYNSIYtgecQnHQ DaZ7l3jw8v9JyvX9j fJJFosIE4ma4Fa9&downloadAs=update.exe&fallback_url=http://.../7z938.exe  (51b48552f1bc05af5b0d762873d3f26f)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=j6Yd6fsY7nZO6 wm9nfr9C4d jRR2gXXaq4gSdtgn9Q=&c=8Hrj4CoaDDMmj7sjHOD9ywVYMHoFpT35cmx6uAW9s13HR1r/stM6Ay3QVC2LyxbOc7sZKVHu N3YTL7MufCt8eDKDxfmU7WPgxlT4EVic1cbrV6GuDI583AouFn Un1m&downloadAs=update.exe&fallback_url=http://.../7z938.exe  (1b6d5cf840163c045aacbcf07d043f50)

1 / 68      (Adware)
http://www.bitsfarmbundle.com/c?x=WNijf PbKyqhvvExbkS0uGWqxrBEcF7GtFrTL3XkD1c=&c=y8kpAaK0RylEb9ux6O6zpX9ZFrnoxZlAAlwL5Q CXYIt9YEnwnZXFOWJcUDKgiACsHCA8p/GKS8ETOeY5pIi59ZE4RU1kBM/XEBuRwnhTXexOoCQD/6UrmIkOQXm21 2&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (ce5126ab14b3ee4b6b1a4fd3bb9b0770)

 
Latest 30 of 41 download URLs

The following 23 files have been seen to comunicate with www.bitsfarmbundle.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.