home

www.hearttourslaboratory.com

Communigal Communication Ltd

Domain Information

The domain www.hearttourslaboratory.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Thursday, February 4, 2016

Expires date:
Saturday, February 4, 2017

Updated date:
Thursday, February 4, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
hearttourslaboratory.com

Whois:
1 hearttourslaboratory.com record

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bibado.BibadoInvestments.Bundler (M), PUP.installCore (M), PUP.InstallCore.Lite.Installer.Meta (M), PUP.Bibado.BibadoIn.Bundler (M), PUP.InstallCore.RE11 (M)
100.00%

ESET NOD32
Win32/InstallCore.AFF.gen potentially unwanted application
2.44%

The domain www.hearttourslaboratory.com has been seen to resolve to the following 20 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 5, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 19, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 19, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 21, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 6, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 6, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 17, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 25, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 25, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 25, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 25, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 25, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 25, 2016

File downloads found at URLs served by www.hearttourslaboratory.com.

0 / 68
http://www.hearttourslaboratory.com/c?x=i6oAWhQHUSXgaliNTGAYwaEJVyeMJj83wV6IM/4FsG4=&c=qf8GkVaKubaBobpaSrV0RpS7Ita6DGK8mj2uDEyRxqglbu2n1axK/byfRXwW8Eq1rZIv RtL QHkr9EKJMgqyXdfa/vUwXqcXW5Cc1u700iz9gNABiwg14zVPyfRagG5&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454618732/en/8/.../83929-92631-microsoft-office-2010.exe  (321b5d7581b0ddd9615a6a7d7626b139)

0 / 68
http://www.hearttourslaboratory.com/c?x=UQD0zi4Z8M1CVpTbXT 5Zvb/h HonAYxoDIwoPSAMM8=&c=mOXnTwDIrvl0YT/ej0Ue4j6f4hmDX2/Tu6Xl1XvTtsP/RAbTHh0r3fjkgRtFQCzag0Lc8fiyZ5dw6UApg8keJJJKQDGKEZ7wYnmEP2hDCWW mi9yrtlg21yQgN6uJfGa&downloadAs=hotspot-shield-5.1.5.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454670172/en/8/.../84579-1808733-hotspot-shield.exe  (f0c08eeb6cae3c594280f847b1e9a948)

0 / 68
http://www.hearttourslaboratory.com/c?x=HgZJZHYuvLtD1aNJkWHdxJTMki5/q0Dd1LyBSz6hsQ4=&c=pv6y021AvtfSGPpbL7Vg0ftSsmNEA3XfVsnVKOMMhfBjDu7hHThjhaslYz/ZEvfuMEJUBlXi60X73UHjmJhygwEJJi1L dJVtJwpK2eCGQeIDoxLqrjkpRdwPFonD5Ee&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454660983/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (4caf8a264c832e4ff05e7ff927197a97)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=Xgkd7L fekIQd6gzsFqzWt/j WaNeUoHWT1Gw7WOPlM=&c=qQKj5iQ4i9oILJvlBtT9kDWS3ZSAxj2RewT0HLutS8ORxoWnMLccoQZi8xDQ/wZ/v2RVEQjXzkLDdfe5Ul5ysJVunujhebgwBWYH4PjavjGwfkjcSRYQ6u38h QPKVTl&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454599064/en/8/.../83929-92631-microsoft-office-2010.exe  (18a9ecf3a08b7e6a70f17a83a2c93403)

0 / 68
http://www.hearttourslaboratory.com/c?x=N0IfRjyKfLSchRWr7y4ScPi/rRk8vCj20ka6e4CoHmU=&c=0NhWA4HEPQPyHHQmr oO1tFS53VU rYkJrZGQ 8qf gx9TcUkD ZjXai8LkIWN5bQCsQJ6fnG9mq13kVgiANuWwXMraOIDAujsmwvW270W7aKgqnx6NPTgFNTkMelKrB&downloadAs=candy-crush-saga-1.48.0.exe&fallback_url=https://play.google.com/store/.../details?id=com.king.candycrushsaga  (bf6d3b06cf2b0f4fa0875e0bdffb559a)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=1bd92Fqv3v50f /uZLwW4NAXX/qRuagK1td wfdyM8I=&c=kz1/oXBVWPfWHsOz7fBCfKUd8/hQHK2MYPLjqx1Yo2yP1 JN0Bg5BsvGiBzldQSzX/7FstS7XNQeTuNKBSFoqsGDpeIv2sBDFnKTa4O2GWhY7J1/Y/sCFXtTBEyJBC1B&downloadAs=adobe-photoshop-cs6.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454602557/en/2/.../230911-1800984-adobe-photoshop-cs6.rar  (7772a53a7dcf3d2c1701cfdbccd46d20)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=b5bvV2aZfY xP8ZwqEfMQ d1iH0yTZcjZ8CQemdABhE=&c=eU4Vjt5ceYhJogsB3TvTxlB/8R5O5RjhZFq88zcmGkxGw g41z96AZVAhVWipqyCgjPWktg4ZQM83F SvLrcnpAwSQSBMIGWMJ69ZBDKz2Av8yqG3a/1EMWd59JLUErU&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454596602/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (e4d297232ac9e54886fa29340b3fce7a)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=OWJG//uWV4r k/wC83uWAVpbc75WkD1kWS6IarMl0dI=&c=ai0q5yce2Ghb3fDI JzBE01/otdGuSuMn o3gIoURzoHhdxrGd5wvkVYnj1bzjNs vV8JuU4OAqVc5xDTEOtHQHPEDmUgIbxTpu1faXnXVnud1qdnO8FGVTpWEnu15Fa&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454640838/en/8/.../83929-92631-microsoft-office-2010.exe  (64d041f7a7d2c571d8e93cf837324d35)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=ZFz7kq6pxjrRjjgIDphr4AYemtJRgBjlRjwVe060kQ4=&c=x4lvwhvJeUw 2lm7dfW7 JGFkimGebNaClJCwFhN3RC8qFQsKiJOMHjkoIZpw6E5i/N5u7B4vynZCto1OjY4cDxKpWF2nQnQHMESfe828hhGBYMbKJ8rvl3lQV0lcAK9&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (6634a76deb30c0a656945d0ffa806d23)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=blbITflUks7X9 H2ct1Pbcer hDzkviYaejC0Uc9vqk=&c=syEVzDxod/K jbdXkVIIMlQjTTqMK3whG22ULT4WZrmcqhElohniv09t6boucbg01b4Q20EwXTh/D01pHFroDhuqNVpZVuC6wOJCHDP1NStILYKnkALlk1thpIMWC5RS&downloadAs=adobe-reader-xi-11.0.10.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454608447/en/9/.../961995-1805408-adobe-reader-xi.exe  (349ef1c503622f133f170dcab86e130e)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=EwXi4ybyyO9aSLYAhTMoqdUAmA2QpwFO6GdmlnMViEk=&c=6f8dfdpGEr o27WR8D5oa7A6hdnSi/F2NwXtnEZOs9F4YI9F9uipYU/jpYx3MksH/pFbh8Nu 1MA7M6y1DGFw9gwHEyuYpCvK asNdgPz7/IjSwdbhADL5X5HIdcpcet&downloadAs=mp3-rocket-7.2.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454613803/fr/8/.../81532-1804749-mp3-rocket.exe  (c.exe)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=DasVYfcMhr7GlKGqMNQHjvWJgceCmEfaaal/WNJRASE=&c=BKAA4fblw8pYctf3VcmfkDjjXvhgvJbL2N08BA vJwQWYagPPZJK6lbqB3jbC0sPQvfgGq5 tifdmRfoly/Q9YuGYohGGVufeM97UFjIq5P6/e5OcwZKtz2dMOaSxhic&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454624639/it/8/.../83929-92631-microsoft-office-2010.exe  (5040e4d425502a4271a4f832bf3b7881)

0 / 68
http://www.hearttourslaboratory.com/WVl6OTRQV05aV1RWUE4wWWxNa0p5SlRKQ1QzRnRRakJLY1hOTlVEaE9jbmxyU1VaNFpta2xNa0pQVm1keFpGSm9VWGx1ZVhNbE0wUW1ZejFXVDJWeldrbFlTVmhPUlVkdFNTVXlRbTgzTW5WeWFtRnlOVzh6VjBneVdHMTBXbTVFZDBGSmIzVk1ObEV6T0hCbGJpVXlSamc1UW1wcVpVdE1kazVXVUhneWJrcDJURkJMUkhWdlNsYzNjelpwTXpkTFRFNUxXa2g2TjJ3M1FqQXpSbVpzZWs1cE5WWlFja3dsTWtaME9DVXpSQ1prYjNkdWJHOWhaRUZ6UFcxcFkzSnZjMjltZEMxdlptWnBZMlV0TWpBeE1DNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1p3Wmk1aVpXNXFZVzFwYm5OMGNtRm9jeTVqYjIwbE1rWnpKVEpHTVRRMU5EWTBNRGd3TnlVeVJtVnVKVEpHT0NVeVJqTWxNa1k0TXpreU9TMDVNall6TVMxdGFXTnliM052Wm5RdGIyWm1hV05sTFRJd01UQXVaWGhs  (professionalplus.exe)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=7TbAcYWaYDf1hfQtZhMC2Tv/Fx9KnUnNKzIgT36alE0=&c=Ggeh78QWKgVAceUWBdgWpesokaddtArrT5KChZAJTL0 i0D2MqUUMfOXG5LzMdCgDvS90sQlVxXWRQN4Q/tD97Is6gzvLevi6ho8VFcnI5rYtSUH/TNsrjfQ0tVSaDsA&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (icreinstall_microsoft-word-2013.exe)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=lIxZQ8FqBADXQfeJHL2KEjiZ6Dz4NS8Hyul0 7BKW 0=&c=BFHkg Lc3qWBg8pke63wadZ0xY2kKMI/Y6U7eE4Id6JkV8x1a6Z8FcoCGB/u3cxze1JhsHu5lKBqlftAFzxJwSmwdoLwRwFKiZWoRBqtI xmKTNikzRW9NCXAUOP v4c&downloadAs=assassin-s-creed-iv-black-flag-full-version.exe&fallback_url=http://assassinscreed.ubi.com/en-us/.../assassins-creed-black-flag.aspx  (c.exe)

0 / 68
http://www.hearttourslaboratory.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  (professionalplus.exe)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=0mWbHQOw/vkSv6KON3EYDgZLSlBpjKA2IjA5xAX4abc=&c=kRWbJ 4Yi lUurbhgmp7f0HfxCKf1nJC79gg3sbSVKcLf5lY mw49n/8ewlcDvZ68w3mvzqKT42Hk994E1RSIvzs91EcYDO88ZPApPafhwfIgG7LcOp5eibAmlQYHEqd&downloadAs=minecraft---pocket-edition-0.13.2.exe&fallback_url=https://itunes.apple.com/.../id479516143  (6ad7c6a29222f1e0297911b7d60232ea)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=pZZEDsAwlq/Film14uY0AdN4sK5cjfSsJrWBEt9YH68=&c=ZSGnj79c0qVCTbZD5GK56Q0yrHvpkFfVn4RJeJAqFTEk4pwWNFzX76AtRABfEg9x1cGRgFPoEkKSFdYYpdxHAIS9QYISG9DA9QEt0kQz9e8vU2sCYYOr1XzlPUdQg1zh&downloadAs=minecraft-1.8.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454631112/es/.../2/227519-1807427-minecraft.exe  (ecec92d24b391269274500d016e1e658)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=fBA u6uZldc1Ewvrtf5Xs9dEhYuOXUugOZCR66Ki/DQ=&c=32HCVWF95RlJ6A/W JolwcaA8qeE9kJ/YA4kQn3hqZWVKJMeeBpft7nqez9Ld9MSKWwF/87TN dRAH3DyYC5v/OKNeeYQs09Lu4suVm0bhAk8cdIop4C4avdcCH7R64Q&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454679533/it/8/.../83929-92631-microsoft-office-2010.exe  (af15094025c6f6030dc8bb53300c75bb)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=MAbJNiHSzuvRIbBuYftg1B8J8NyUiZzMyKc0Uky31DU=&c=tNstKvPmSYQe/ z5ZMrqsP3diPVbQY8Fvtn7Lp sQgirTna5mgX12x2YTiqYUNZA35wUP6GX7ttTphSZQdVf6IXTlX2D ocOfRR1/nucockwHrJ3uhwd PA1WdvGg9Mu&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454680421/es/8/.../83929-92631-microsoft-office-2010.exe  (0a4df9bf5a07d3c53d1cf828b9eb2d31)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=JHKJwdxdWTVTLqcbbbRyyKMjFz8OAoVeR n2Mk/MRI=&c=uoed/Od0lImnCwTayXAMS3ADJbfB5mVcF8NulImnOXNjaROxubCogTMmECGIMZVtOeRFWMRveqvFoLIwEKtprv1M6NrKd/.../jJcVKLxgTBQsNu/OYPAaDPXrLv2 Y0oQ&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454656666/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (990875edb2a01d964148dbc0ad1e3156)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=taPdydQykBL S4YKMbrZusBJ/UpbHF9OoKd1mz090PA=&c=UVOoGoURqvWHnWm6hclLMz7iP5aW/98p9wsmxnXl0 XkXy8EqjP8x/W6U8pXuZZbh5hdgYctSiHKBIQz1PPJ9jsAGi 5NrCbPILI0wb/7Atwm zCoaNfrJKZ97Et1Uyi&downloadAs=internet-download-manager-6.25-build-11.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454662691/en/2/.../26881-1808779-internet-download-manager.exe  (7081d9aa8d71094e9d5fd4fadc9a821c)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=qbwnCuMpIlor 6DLaFpasotK7CRq4urKZv2S986hx E=&c=pPPz1L1ItPHy3CZFp/46ZfZT03jApa8hmJklkHdZKXtrsVtx72EVg80jJQVHZz4d4NNUXjhj9XiPwg4pVfbttwMpYKcimH89IbTVjz00R1VOA4smmmxAtLHGLlVwHX2f&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454668452/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (386862f2c8050eb035e83253120bb2c3)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=cml5iDsuWJfl9O4f3QxURN6ZLJpU/o0VFdYbauY996g=&c=NnzIT/bOUFEdpJ13bUnkrRJXBRrq9Pvrr4 G6tTffKJyRia6kDX1EUIz6jM3mmm6JB7iBhchRh1bYUhNe6M2HIlX87OKes1 SawECoUegKQzDD4SUq07eMhJrkv7XK2X&downloadAs=adobe-indesign-cc-2015.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454642854/en/3/.../37909-1806877-adobe-indesign.exe  (52882e5e605bee17b75b952a8642d5d6)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=NdoTxv7k joYuNeBmjWUh1knwd48t5boZvxvynV23aM=&c=z6 nPFYp25z zPGNokxdjj56ggaCWrz6ypQJjWke/SXWCvfGldR Cu03/f9kv2IIZRrh4DyZjcCjmmzU Fppj8DJUdKDB9hxTyo9sikSOr2BS/ 3oAMbWbHW766iNGDk&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454639223/en/8/.../83929-92631-microsoft-office-2010.exe  (42112f02cf0266db7d3a35ec8443148f)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=6qm1HY507TNpsTgRuHDIIthCVNR2Fh41vg3M165AtNw=&c=ZKV/5Tt/22Pp WR3uOqALcoaA Fk2nu7VN eBjLaeh7YlbgRZg9NDmMr88CBticX3s50h/6VcnHDQLr/bPa33HEOH/Q6SQd5rBjveH32t Nnn2puH98KXF6PY5604GjH&downloadAs=microsoft-office-2010-professional.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454645761/es/8/.../84962-1797817-microsoft-office-2010-professional.exe  (494ed3f7b9127d453e9e131b52438c95)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=hWN7Vu7Y91lDzOqsg6cjR02vB6AtkA2IMYUw7EoOx3U=&c=AItMkJJYn7B2XdDCTd65D5BepBxing89gvkiUtFWUgN1E H1ApWRbISP TAJphp zLpNpn2W0MTRCbXebeVNc6qMhxH4wgKBcA6PrLUb35rkQpr0MM7fJ1ZcumTOks n&downloadAs=ramcleaner-7.0.3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454645010/en/3/.../34677-671394-ramcleaner.exe  (1ed90bc21c9ceb7b2076b5a73e569465)

1 / 68      (Adware)
http://www.hearttourslaboratory.com/c?x=AtX9Jrn/aDxy1ME IGeSV8R6OCL16B4NBPp5xd6WCIk=&c=8CuucMLlZRDANaNRwdwnQoOFSdl1GNxrveU79Aiejmc/n/dKMnvtsJb0ZdsK1h5huzVsoJ0JxKqLnP0/1cGsY8S84CnsrHbKpddBgdI9MIfKTJGp4Ic4P13YAqLjh1E8&downloadAs=wifi-unlocker-2.0-1.1.2.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454674052/en/2/.../231119-1799568-wifi-unlocker.apk  (7101dcc5ae11d67f258199dc29d2656a)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=A6cTKAQcRjuoWTgzhXJFCV28pFyCLyzfZpk5w89XI1Y=&c=RzHjXNV4S2u mNVQpkpa5AQp/v4zNAa5gewJ90Bg2DcLMmeg5HgxKStmbqyglJLkNW4/4EZ1CTYcJgZ8oOpq8EL8RGmkJJFWZKOM8NKVDXdhTWopUg4AgtuplK4U4vId&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (icreinstall_microsoft-word-2013.exe)

1 / 68      (PUP)
http://www.hearttourslaboratory.com/c?x=5dd01omlO4WOorgYZ6fCaQpdjDgfddfxI93 GjmZJk8=&c=jnPB7prXqdKwxeBoeywNrd3732 6qVh4im1ylKbFAfzB3JyKLkwfbTzuUWR6xgm0ImM8r2LLSlU3e2F43w9TTwxQiTYjimuR2cH72Ge1zrzPONK sm6CNsm4JXXGiAid&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1454616263/en/8/.../83929-92631-microsoft-office-2010.exe  (c.exe)

 
Latest 30 of 58 download URLs

The following 36 files have been seen to comunicate with www.hearttourslaboratory.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.