home

www.clearsafesoftware.com

Communigal Communication Ltd

Domain Information

The domain www.clearsafesoftware.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Monday, January 11, 2016

Expires date:
Wednesday, January 11, 2017

Updated date:
Monday, January 11, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
clearsafesoftware.com

Whois:
1 clearsafesoftware.com record

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DestinyDreamSA.Installer (M), PUP.installCore.DestinyD.Installer (M), PUP.installCore (M)
97.37%

Trend Micro House Call
HV_ZYX_.A0B9C4B5
2.63%

The domain www.clearsafesoftware.com has been seen to resolve to the following 22 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 16, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 16, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 16, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 7, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 7, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 22, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 22, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 22, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 22, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 22, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 28, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 28, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 28, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

File downloads found at URLs served by www.clearsafesoftware.com.

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=RmzcdCsjFoSr9D1z1Ttx6vNwgaeNQk ww9GwAJipMjc=&c=UW5GXBTQ0eOq6J8WW7JCMQmzfn7Sm/H o9peGjTfopqWH9M2XxUYwlLta4 eC/RFUzRq5cH/wwRu0DvhmNZKKE2OoEOuFD1GUSMHfpLRxAFNy5dLXF4P3z7GqCq2JA4z&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452579838/en/8/.../83929-92631-microsoft-office-2010.exe  (3a23d97fb40d530d76fbca2b408008dc)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=QHEaenufdOtzauTMIRCFxhd1X9bVt7TrhUw1u9 ArPw=&c=PQ6WEr317a9w/oqU4Ut7AAnxCE27Rtk9WmxoVSXry9pT4n4z6ixF7ayeX5 8Kfy4/Jl1xh2Ls8XLn/KcPRs45Bwb8FWeaOwLK1B18l7udJmuHlPqgYkOWrRtscMHZ94k&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452582681/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (228bcefebc7370fe765cb4bf45451446)

0 / 68
http://www.clearsafesoftware.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  (professionalplus.exe)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=ZRea3JvlJ9nh/3MUKiCL3L4M/1bdxGkbJe1YlMGg43U=&c=nDXlua7k35SjPaFSCI2X AMTfS ZIBJaSImctpFYVdbUTq1KjVomLLL611Ir0TIi1UeE3hBHZ2eOM 8zmUfeeYNWIWi7yyadDZj00mbeOwn3/3W7q97k232jEmluj2ob&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452530221/en/8/.../83929-92631-microsoft-office-2010.exe  (18d4e86b21b026b47122c0eb49953855)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=UCYGN7gjOZ8bMl3YfQ4K8n4 SoYjUOglTzYWnGqZz7o=&c=gwbuy2eOPtYKvLjJPNMFN79NFp9L Yt9r8cKRW3NJTay0c0nKyD9yJaQge586KXeqrnyMwYs V1 rCY6jcv0Z83AfR2tCLufQWejYj5cVQt7ZvDyZ5k2O9kJ/WK8zcy8&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452552660/es/.../2/227519-1807427-minecraft.exe  (4cc716d941a0451a174bc0b36cbcefac)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=ubqkygwLrMKdHwGbjFYCbUms6rbokSXUX1jLrosUOl4=&c=6ejXw48Q9pJYD2z4f3Eat7vRg5ml7gXsnGqf02vgSdWVmI5vh9FfbM21zN63ewxlLtQUjeo7N6E5VKw3Egr1G9ZbCpgI3302y9dHWgC EAOVsckxVexQ/o/v28vmi1FT&downloadAs=the-escapists-full-version.exe&fallback_url=http://store.steampowered.com/app/.../  (75424028a8c71a2efd67c72aecfea94e)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=CvVcRK9jhLnVqoBmUhiiLKJmLBW993RpJhbEMc9cWkQ=&c=ohjEWDy8DaNIjAHX9b8VbgYEtuothfKomP7Wrm/FY3hRa6F zcDTJDHDnRezcJ3DhzbP7nLDmJx4l0W9tGIWvGCyvCP6PNgsMcQmBBFuutHBEJfdVFEN8LrENab/wKVu&downloadAs=windriver-ghost-3.02.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452573637/en/.../2/225233-651963-windriver-ghost.exe  (27f929d3c39d22976847bab959f0396c)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=uhNnJxNpPt3BjWfaTmfHaANQPIwkIFAPVodLHwZB3yk=&c=4ChizsZm KfG/B60l 96HmMtI0Z5UIqhI9Qf5b2fZVYQx1WQ5Mv2GpqhdbIojxq5YfhOui25kWtkMHTuq NoFyhJ4lLtrOs4r5RWs8mZQ5XgJPqN4 HYNpnS8HdBVLuR&downloadAs=microsoft-access-2013-15.0.4420.1017.exe&fallback_url=http://products.office.com/.../access  (b97bf6f1ec5ece49ce7b5a9ec7266b3b)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=M/4PRMXoSYGi95PJhjDkeu2IYO4M2 55Qn A1kleLpw=&c=GeBTq2ttNpMM1Y1v8pdyhlHfZ6L26c8nyJC9SZg7ldLwFAjwAi1AANnnv/ouSeR/jhYqcxydV9m2HQS9YuZuHyMJDM4cj1vjSdi3N ZkaQp90ScSfYYX12hWGD8tLc6l&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=lo A45uTuLtK4NrORkN/Ce80 EpLqlSGZBqcXio9JMk=&c=WZ1hb91QSlLSWewUIahohTXiLdGZN50/64vmXqEt/4mwZoi3dSpEUFJJmNkrjq6iWeDkZp1hNLVm0iX6arMLnVMiQJHEQFO 0 szUHVS99cntRYxysSDMdHlccj0yvTn&downloadAs=microsoft-office-publisher-2013.exe&fallback_url=http://office.microsoft.com/en-us/.../  (b26f681150ccf44d8ad0c5bbb317b33a)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=SAJ7SHpFvAZnGwMIg0G2KdcB1R v3IhkyC9egVkozyk=&c=JkZhRn UvyNnMupdoV5ZVBcKZv68 0SsfZc8DQJeQ7aKvkmpOjgYJ21HAH6mdUymRLdh3VuoBdPx9E9JNgk0d2EUYzdM8fWR0 iprNWuLFmrtDllSBdJ/MXZp/0awSBo&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452547615/es/8/.../83929-92631-microsoft-office-2010.exe  (c60560c9d6beb35f7c41ec4fa92d3091)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=w2bMrMRPw7nAJCmMCtisv9v1VtaPGcyEpDdNe5vWgGE=&c=Dl5Tx2gPITo3C5GEyKa/1L0MWpbti jzf/Or2X faSg3FQHhyQzKyGYeQtnkPf3Kqb9ZPHuDffSPGllGPH4lekQ2q6IT7S8C2L3Q/cY5ldC2IrvYDYkNqN0Rfyc80evg&downloadAs=outlast-full-version.exe&fallback_url=http://store.steampowered.com/app/.../  (3fcce8d7e369e18fa824923f4706534e)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=xBPXQerA2rn4jz 6RTEWZgB/p1YUrqd/5a9OCaLEdTg=&c=j7DtGCsML8SOwg5g7S8sQcLEj8GP/D7r kg 7rtcN1SdtPJN70nEbhNiVxXNCTEnmo3lCJyytIGb0I8S7qXbM3sJ0SN0f7YiATZszprMmLb3HYD pfGFqf 5JieHTiNL&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452569932/en/8/.../83929-92631-microsoft-office-2010.exe  (e237eb6cb2a3333ffab17c06365aa1a5)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=nQs8zrbSTZ9t1FwHN2o5SAtRKfyEtKlebmF2dZVDm A=&c=HxLPTbz1JIAiFCSRtR1reUmYxN2kfo8HNbgROKNXvr7owX95Y/qMTTg0V jT3xK7w6xE4IhlwaHtuyrigB391g6YaPok9bnX3B7ltWHQX2/88i6SfS3fC1eIx9RdxuJh&downloadAs=the-sims-4-full-version.exe&fallback_url=http://www.thesims.com/en-us/.../product  (38221278d97c933fac9d7984807d39cf)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=Wv5DF/xxRPyTZDAVj5mQDvvgPR0eBIUGmDyygJm JCQ=&c=bYlKxHgzdCw0dsLfyyxfOySJPmsuYzFk5AGGDLfXt6iIJzLSWt37C5ulZksu2VWSqod/kXkNfbVnJ9qSI0Hs6wjY4dX6yctvSc3gsIMrjti8DiA3nLv7s3donMz5sj6S&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=cqMPeMsZYvLuXy76NkUjayEeDbxJcv2o1L94iAdVvOY=&c=vUhj0zLPVERr1AULjOh7zvWpV7RJhJ5XR8Y2IYtzLgh3Xcp0BtfetcKN974hH8bCjwAEFOakUOsLAvl8LI1WE99Wzg7hOnSI4rQm6KwHbSj0TFmPSHlMy0vBI3myGMoT&downloadAs=grand-theft-auto-online.exe&fallback_url=http://www.rockstargames.com/.../GTAOnline  (icreinstall_grand-theft-auto-online.exe)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=aDo zDqWeiXuwIiiFWkHFjgagfPfc4bYcPym VXk7t0=&c=wAuAP1EI5X0EsILF3bLxRZs/zg69FMsDZ7pnwMd7POa06lf1x0e k5ZOldn8kMdRFAQHOuBAxCfLfTsL0JG94DPqjBY738ry6ww/NpMluala p6t6 cJtBkGo05tG7G8&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=4NFrAhnCv43FeXJqI dwiLa5t8mdqy6HDOtADjKDU c=&c=Lu u yeAZFhhSURXKqsuAJ69aQDuR0vgN3JJN6D1BNNDbsRbwOfhKvTN4mRyHvUmQkV0LQiyJr5VvQ34sR8qxd5ERso47KMSi2J LIJfsNLyJ56dFZ jq/gI7ysc k/ &downloadAs=driver-samsung-ml-1520-laser-3.01.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452537015/en/3/.../35176-35178-driver-samsung-ml-1520-laser.exe  (1adcef785ff813bf763f5f9d22f7a4fc)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=q v4lU/DgZpLHTnBl7aHBs2qzlMYxnKd6ujcn7hqO9A=&c=mxge53/fIgNVQOyk1rdtszC41vmQ8Nczm5tq0x4Fm7eQFID6HAHlWKWNjfnoDMWxrdgWP5oRAsQPw/WRuEdUEBadQ0lqOSxCIwJbmIW6KKkp99vf3yJWCzgA6jFxBumr&downloadAs=ytd-video-downloader-5.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452590058/en/9/.../961374-1808471-ytd-video-downloader.exe  (463bf951f49b5469e35d7da67323ea25)

0 / 68
http://www.clearsafesoftware.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  (20110513_chuzzle.exe)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=6XsfeGRIqV0ac8tbgEqfI32P i36qK h8kEQLtHENaM=&c=XngLzG4O/ijfFBphj9jceCy6n0WJhQea92NTDdqQCTgFT oeJxW2fq7FOzu5gbaR/TkR87X1G 7Ve 2JJZ/lOR mYXNz8XyuiDxOMLETFfpQJcxqOjMK0dwiBPJJi7D&downloadAs=minecraft---pocket-edition-0.13.1.exe&fallback_url=https://itunes.apple.com/.../id479516143  (69f497ceca7c98a7a66946bef21d9a6f)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=8x3dHA5unyaFQWaJQOFxHrSmLz3TUB9njBC7AlvArN4=&c=6OJc1pL0zvS5aZhzVTojVQF5s99Q9zbFWTzDefuxBSbaHCPivhfIYhV1vzoONwtwvBfXWxRIIZjisigptQ/9OA7UJmLgG lNBX21SHQ9qKCg45AEgeCJvC/c2JSRBWs2&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=13cTFcDDCcJZLw57RKOSop6G2Ajk4q6U6XuCZPPZxy4=&c=oxHetlduVe6b1DRds48NK4Kpn1GVbSFyJ7EwW/Y9R2IznWBwtbL2IKkUESWs9Z1ngLslrjLqGGjMBu1 617rbVrSPjh3/rKYTLbtD5C 3p04A3M5RN7C gbwGXD3P8v9&downloadAs=dragon-dictation-2.0.28.exe&fallback_url=https://itunes.apple.com/us/app/.../id341446764?mt=8  (9fc6d42abadb294b241c8e398c1be7f1)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=LoQAOKmy RxHGbi3WmBh7nu0B80/qSxUMolze4Clx6Y=&c=ZHNft9LbtGQUnVsOOCM97Uqp/FrtJMjj5ZDCri8t ZRU0b3CrJXBYGGUD6Cp1aecl9EKp/u7XLjgUZbH/eIXibpAcHNnuleLqK4IhpPtxG9e7R/vEiRPIj9sxdC5O/Xi&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452547897/en/8/.../83929-92631-microsoft-office-2010.exe  (79f8680b4cdad20a54ce641dd5e62eb4)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=3SKW8ufMwYlciHh259jtJBZWpYaCXkivHXgXMmqsc9I=&c=Y06S0CUcmxoe50hc8bdkGtanDrmJuOJklQtbn3AEzWwzukoGwVbA8ucAVw0ANo4yOJrTf4qe0iuQGjvCz0NmHPrwjbF1tLvROCLwzXC4m02 xflE2z9DcwnSVrBTFA38&downloadAs=microsoft-office-2010-professional.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452553436/es/8/.../84962-1797817-microsoft-office-2010-professional.exe  (e3ce51c7bf6886bc9c04dfdd2510000a)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=JvW7IDrUY/LXmOlrRt4YrDkbJ1vZZcGzs27VUE2NWvs=&c=DtVMRS5gi5jZPRIbO1IMcR2MWNGn/olK1eiV4eZNa2K56sbFSWo/mVog HmRhDs4HNSBoL1PMSU1pbVaZQA8jWrJxyQXr4jLRDmfl1kPohatMXYHuOtRUVe9tH7sl1pa&downloadAs=adobe-photoshop-cs6.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452548507/fr/2/.../230911-1800984-adobe-photoshop-cs6.rar  (c.exe)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=D6vSBALt6l L26XhsPJGKM2WwSzQsCqA3GrA4DxNFMQ=&c=g0h F7jkkKrgFykkMTVNZDINl85bAxU5fQXnZ5YVhhv262Q/ebctjTg/O0 GCNYpLiC/lhTuetBpBNv1BvkENptwNLNWG03ZwxsHZ/c8BQP3wicIopq87qq6OIoCsmGm&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

0 / 68
http://www.clearsafesoftware.com/c?x=OLb22s4b37BcPpr7EgWOAzw1g/ONDJIB zrCiVClaiw=&c=7EhM8erPiMdNdj3Pq0HJ1oNEMZHLtri0tTeQUuJHogfGWBm9KSDIhAQzKWgEkaAfUAXN7ssOqwUdrrC6bp oKjhll/ueh9/Ky3Vq5ziK UY=&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452527061/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (x12-30196.exe)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=ITBQM7Bm4F4QXqyPeQqD6LiwnMeB7Jm4vndOkxTcY U=&c=McKv0t1w6hDl 3NcOl6rHoirACOLfL8f3OLfmMOeEK3NjhFGW/k84XyS8MC14fI2uja91nt4MpK8eFiCif/xdO6sCCA 3iUhFZxfW54aNTUWiuYvREFOoolKEEIg41Mc&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

1 / 68      (Adware)
http://www.clearsafesoftware.com/c?x=m96hUTu5L1WP/O80p9541dtm1U0h48kpNOu11iWWRTk=&c=05bWPcaISyyTG06mbemR3tXvuVbgu28SGWNhEjfapekVoxSHr4RX76p2iIGbxQICDy6/JiePlFX8jlcPyET2dUB7KzcLd0f9ctkFlZaODGyGQ9RPZW/5EhNW7USFTR2s&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (4e5ae414e58dde49c7abe64f5fe453f2)

 
Latest 30 of 59 download URLs

The following 36 files have been seen to comunicate with www.clearsafesoftware.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.