home

www.quickfilesontop2cities.com

Communigal Communication Ltd

Domain Information

The domain www.quickfilesontop2cities.com registered by Communigal Communication Ltd was initially registered in December of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, December 29, 2015

Expires date:
Thursday, December 29, 2016

Updated date:
Tuesday, December 29, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
quickfilesontop2cities.com

Whois:
1 quickfilesontop2cities.com record

Scanner detections:
Detections  (71% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bibado.BibadoInvestments.Bundler (M), PUP.Bibado.BibadoIn.Bundler (M)
96.43%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
3.57%

F-Secure
Application:W32/Generic.70053c248f!Online
3.57%

Dr.Web
Trojan.InstallCore.15
3.57%

ESET NOD32
Win32/InstallCore.ADZ.gen potentially unwanted application
3.57%

VIPRE Antivirus
Threat.4150696
3.57%

The domain www.quickfilesontop2cities.com has been seen to resolve to the following 23 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 29, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 18, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 18, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 18, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 21, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 24, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 24, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 3, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 3, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 3, 2016

File downloads found at URLs served by www.quickfilesontop2cities.com.

0 / 68
http://www.quickfilesontop2cities.com/c?x=DnFi5tnX7AZLFrsjhL30sJ9wO/Niow4XJIspJ4gK2vE=&c=IIsQvRrGMggNlQy9KYW5uAmKpV2VUaBpPrbGVOn0tjCgPlMk6GDf0Dj0uGYIm1qcwnnZos0VI5WPqGSmf00JkTM2ni8t0l0cl2XXeZ 0mo2b2maunzUBOJp4hPah9JvtlHSrSb4ZEYnPkscs1HNG/Q==&downloadAs=need-for-speed-carbon.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451499370/en/3/.../39772-665155-need-for-speed-carbon.zip  (52108e00d3068d3496a2960f58c266ea)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=cAShCNNLHMp7d8Z1iTLHl2vKfQwt19VOMtzbHo4M3rA=&c=jkefMyh10OvtQfPsFpk82KadXASRxuWY1rU4gfEmQe7rwhhwNVPPljIfGiWLrqi2g5INkO/LaylT8JEHPe qGhi3xfUkIRoud2Sc I6wuea2W3WFsI99ZAhjcA7Gx Kp2dOMPUG8zsgFkl9OO1N eQ==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

0 / 68
http://www.quickfilesontop2cities.com/c?x=fmWyJS7Yt/5ztmjgqan2gy/rx48BafdG3EvtEMmrMvQ=&c=siQq8F2/hAAxHIgV1T97PTEESncHH64EfJrr84r4t0UYqHCbjl6Z w1Yr/RqcZb9DGVKvbbmFBj9b4tKVBkGUoR9mVcJEEsokSlf1D0OJaGr6idBkYgM4vFQZLXByQe/jOm9l4z7ug3un6ee/1CS3A==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451886461/en/8/.../83929-92631-microsoft-office-2010.exe  (b7eb3d23d7b603a97366c1c37e32f048)

0 / 68
http://www.quickfilesontop2cities.com/c?x=U5GKA3X3qU6i23JHT/vgsD7reo IewdR3jqBbheZt1w=&c=KQwtlYAEMZIMJpsBsMQRQwqZTEBSpjbt1IaomvzK Vtl 5pS1S/5e542If3aM4RSaEftWAzn gZUPrwaz8T1YhLb8YAWw74mWZ9cITKZOdWfIpkJlCDzOTu0mNhblSUZ4nyEOlVtMsReiNqZJstqKg==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451655164/en/8/.../83929-92631-microsoft-office-2010.exe  (80fd634e222d3663aec3327996f7b4f5)

0 / 68
http://www.quickfilesontop2cities.com/c?x=261t/lrhgetDp TZyarhd0e4J98bUWT/NME VKf/Pko=&c=C0ku4iyxn Au2pddW tK7l3AP9JFRF mQjGqk4yYcjCnbCQeEt2kRInbL03HV uDhLc4btG3pYimY4i4nYis1eYokmlE4yRtzGV/PU3tLMRVXY7nRaDsEpzgQnDHnH0kyZLQEJybjVhvhs8SU0eJ1w==&downloadAs=traktor-dj-studio-2.7.3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451903456/es/5/.../56227-1804604-traktor-dj-studio.zip  (2c7623e67eb8e6aa633bb93b6b2a666d)

0 / 68
http://www.quickfilesontop2cities.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  (coreldrawgraphicssuitex6installer_en32bit.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=uPe1zx75AMr8oi0GTW9M5XuG83kg/1/VNlNHTByKkq8=&c=no 26 KVKYfvdlL8BFEGn7CWmyjy6UB6Z V 0s8FBnsIB06 0ZMq8VKc9 UX3lFhIVOfKhPMuItfpyvG1 37VIrxojiArRViAQA5qYZdXe5zSAXZQoXS8Xmg7sZAIOUi3LmPMisqWsUeK9gGVlDAjg==&downloadAs=ytd-video-downloader-5.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451546897/en/9/.../961374-1808471-ytd-video-downloader.exe  (ytd-video-downloader-5.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=22yFT4Pepctxb0aBSslWy9G57tSwKfhNKUlPWglq6fE=&c=GQ3fCu94432OvElWu1lkt6sK qLkdkZD1glELrXeM88jnI/v3SI/LuYPg01//oXGnw1bYclVYvDlyJwUXQzPrPnfbPygDphH15EfBlroswYd1/5Kx2erh 5wuChuLZxyELj0L1ids/eIW4nh0vw8vQ==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451751890/en/8/.../83929-92631-microsoft-office-2010.exe  (c98e55d573e707f7d0137c479894be6e)

2 / 68      (false positives)
http://www.quickfilesontop2cities.com/c?x=WijJgqo2x87uuZbq1v957bnpe40culHPgnK rAfcHv8=&c=HRQOIDPLBF/HsJ7LdUEyOMAJEeLwFh75zwsXNPNTK0SXkp8ERfYNrQ/HxxXm2z3eTA5NS7/oZjYYXrTMWNZpcUG/4Pm7XUdujUDvC6WCYpYRzxi2Y2U7u AbBMf KRX8ovCdG6P4NW9/VJfavermmg==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (wrar420.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=HHsj4v8tf301bS8bThUqw0eai6Zd3CxGNVDPiiKqnzI=&c=n6CbTQsXSwg3Es28iT4ZbS5f7P2o0xZLX0J567WpKb4nqpzSn1X9nz jNDXLNuGh3H9L5eSW50FKcq8vwec7jgyT Ce3S3FJxoRa8dj2hmKM5NhHD URyGa07oTqlOE49xfHArqTe1jLYGcbVy6nwQ==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451932306/en/8/.../83929-92631-microsoft-office-2010.exe  (2da15df7840b83e9edfb033777b518d2)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=OHMptQ2iZcgRy60Qx YJG7PQh8SWTgya0wY XnwtoDU=&c=/9Zn3Wqy6T3/OYu6CBGywQIQ grXpr/fLs3HrWq06ma55JjFHtxWF8LoB X4iOEBkY8Oqx4nEDKhW3gp30Od2xsYN6RWNM2boVe4pMpi1L13BCKmM9/y3H8Tylk5ie6ujTGhxsM7sF25Yx/9TxiU3w==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=7MErcBKMS 6C9U0Hj/ILqUC1Gpr07XvUZzhpb/D7MM0=&c=0zwotYvQbeCevwBFQIHG4x X x7wfbnffCbJQNuyGy8boi0fOHfdETRZ/MZCE8bdRYLMThnIKqO0noQDvhBjqGOiMXWU 20JnDexeBJksDAkMTriZUYwqQmIvtUh538N4Qhq0kunry7xn5oXlqetzQ==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=ZP0AZKdhI9Nz6HZC0jBv8GPOo2uc547K0 0Sg/ex7pI=&c=9zKJOz/X7yYmrjlnPyxUY82nnnw8L466kc17yq8u7S9RrkULK4lQKJB8SDu4jQJEs17jFNOUOS27h/KbJNWOXu1sj1bmhdEpSd3E4hhxl9x7HT FWQIjuzD9kB3N2m06NlRb2x8qxSQmRLlwMl0Tag==&downloadAs=adobe-flash-cs3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451913262/en/.../2/227917-1802437-adobe-flash-cs3.exe  (0e20c6843478ce8b7750dea0bc16b4f2)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=dCNnGZpA46h1hoPZ45qyFBHszSEpvG9v Qj6wYUVYqA=&c=QQNGysercKgM /gEkHGmeR2oInwjv8Q6yCfiKApmxCBKX30zGc8Vt/g8CiKfeXjqIcKap7w1jy2 HZarAphyehR7FcLltzWoq1TEZGBfNQL3YWgVgZd9Ue1wlHn8saKC W1wdsIxrfnytJZTCjlwNg==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452010978/en/8/.../83929-92631-microsoft-office-2010.exe  (0f63ab502729fc9fb8a0a45c32092871)

0 / 68
http://www.quickfilesontop2cities.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  (professionalplus.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=pPaPPkd0ko7ETwOwaBfUypzdWzSIMQ3nd9HrOJww1Ak=&c=G1BnrJQmEdA32uWYkwn5jxrWP8Vn0JyPUvyH7BX8p2c2H8WzjlGaoKr/1ZTqwkqh6C6PG6VqSqJzQdQ3K2Bza4Hc1XcrodxukZs3gkLr25qTxlP1SUfJxm7PN D3f3wcyw6wG9qxcoIdwScNxI/uMw==&downloadAs=windows-8-professional-edition-full-version.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451940003/en/.../2/227557-660201-windows-8-professional-edition.exe  (c.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=nadzkufEtxkQbiMo2MY/xqlHXMLhV6czsmU3nSeZlY8=&c=kkN72QUdRXMGBl3CM6dPPSTCzPzxcGItixULx8/SnXSaZMB4TFWggbz9llpeSamRZ 97ka9YvILVD41pNsUtSfuD2CRQE2JqP7TEpNhB484zfJbkfJrfwb6nxEJBurLnRyN/AeJe1n2T64thmDOBpg==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451581352/en/8/.../83929-92631-microsoft-office-2010.exe  (3262a30137e7d3bd91f371ab9d08de09)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=XtlAfkiPlfZC3lxJPacglu2Qt9Iw2av9bmMQnwgN8 s=&c=6ZtobUjrpGMhRoRU9BnV39roSSxYAER550qa/BEsqKuIBvAhTKlV0jyYmcBMFqgV8uAereF8P2puuLasjeyHChGbunUIgsbvetTGHPmZSiry81VSjusbVyUFcir23IsD5l2rXYccayywEtCkw QbYA==&downloadAs=painttool-sai-1.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451673727/en/.../2/226535-1797368-painttool-sai.exe  (painttool-sai-1.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=buWYlu9tik633OcHDO/v/3mCLODpoPBH/RxkmAjcQZg=&c=/h LO41OYzdUdnHmu9WrlcD5x/SCFL5Y4lb9mC/8tEK/okxA TXQqqTRF o re6h kUufFbKcdsh/7ixCp9xxQfjcr71zgvzCo0EQ0jmTOGXKQ ZWDOzTXjhWk3M2Z3DrnjtgIBBxS1UKjwdJSSF0A==&downloadAs=autocad-2016.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451506068/es/.../2/227021-1806203-autocad.exe  (bffc3f1a2add01bd281098e789fe24e9)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=2KKhG/HwNUSnCq0sctc2wtV9cfGHGdLZ7kDFlRlHksE=&c=5 yF41/p5Le6ZmFSFkAnwH3YLJuCyCpvSaw3/C2/LxXPGhNZcl/LMIsjf5wnfyvSZGe Bqv8uWuxAtMMd85EI7415rP7 BloX4k5xvzlvXT8dyZlv4FSyuMDOrpsEE/9K71CDq6PVfyDPgRKTDI/bA==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

4 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=W0TOBI7m4GD7t8A dO1E75lCnA5QTqGmFDDk4pDNTwo=&c=4eyr78ln7s3KHfonPln1rGQ4b93pApoFIshs6j5yFAZEvGlz0mngbIBQMKeQaQOFubCTsFELXepzrK0vjX9mfw/OPSIzVutqjOob1 S4iWddlRXrmXjdlexvGXbBpytdHsnIQlWpbA1FSJuj0GKUZA==&downloadAs=aol-for-windows-10.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451438454/en/5/.../53254-248446-aol-for-windows.exe  (aol-for-windows-10.exe)

0 / 68
http://www.quickfilesontop2cities.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  (flashpro_12_ls16.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=8scj98jzWHDPa4a5dPDhlhCX1Q/nD124cEnZE9AQzdg=&c=du pQYZS hIcEJ0/a0oZ/psvaHfKY316k7k9qJnUjsFrOTVtWX05lqxdP3WOZWPATIsGTP7z/Xga/nlkE4ZRVhAFvmr1su4pP7Km4MWkI7zTKOu1p3z67sH8VK0DH5IC0QL9vRMROSa1IJOhwO5p3w==&downloadAs=yahoo-messenger-11.5.0.228.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452015131/en/6/.../65168-1791976-yahoo-messenger.exe  (9b2991c313ca93d2978e35df5f7a4c1b)

0 / 68
http://www.quickfilesontop2cities.com/WVl6OTRQVVpWSlRKR2VXVnVXVWRWTTNKWGNWWllkekZsTXpGdFVFZGlORklsTWtaeWJtbFFXR1oyVm5wRlNGUjRSR1pqSlRORUptTTlXbVZEYjNKdmFHODVRVlZEWW1GMlQxUjFiMEZsWkRaMU0xSlRkbmgwYldnd05FbHVhV05UZG1SbFRUY2xNa0pSZWtORmJVVjZaM1E1YlhoVk9GZHhOVEZST1haV2VqUm5XSEZOVW0xeVdqbG9XRmxXTW14clFUaDVXaVV5UWlVeVJqSjRSVEJ1ZURCb1kyTnpXbFV5U2t0NE1VMDVTQ1V5UW5Wd0pUSkdha05yZG5RM2JUVkVVbTloU0ZVMlJ6Wk1UV1pVVEdOaVNtNUVkREI1V1U1S1FTVXpSQ1V6UkNaa2IzZHViRzloWkVGelBXMXBZM0p2YzI5bWRDMXZabVpwWTJVdGNISnZabVZ6YzJsdmJtRnNMVEl3TURjdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdjR1l1WW1WdWFtRnRhVzV6ZEhKaGFITXVZMjl0SlRKR2N5VXlSakUwTlRFME1UWTRPRGdsTWtabGJpVXlSalFsTWtZMkpUSkdORFl3TXprdE1UZ3dNRE0wTkMxdGFXTnliM052Wm5RdGIyWm1hV05sTFhCeWIyWmxjM05wYjI1aGJDMHlNREEzTG1WNFpRPT0=  (x12-30196.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=e 8 GZSMT1OgHbJ7SuwZj4B5H8ymz5H3g9XziVYVYyc=&c=ZFqrSVUM2evhK5b cyw2M4CoNo4pFtvJgqfONCRE /cVHS TPne3Tf75bO2Jz0ht4tuIAOvSOStuhbYQXx 7CUCtwuj3ajihNRs1eMD9TRidbulGI 2mM/tBgyqnfFYqm2mFzvwe4wrn1v70ohkiLg==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=DbdYBXQ/J9FXzVuH2WfpRtiSJDlDOCOXdGOnyvIwUEA=&c=q1Q6hIlbcthXzBVkcT0e27xX37HPMRcBInMfoem3f3MuT4UV UEEZDe0jh3xyYccpPT04tol8dF1f 9HjrE1UfZlo9VPMJGuZSXjkMBdyQQnoKOFtXD4L Vjn23TsUiCmaloN9BUQ6/BN8rgQ8RfxQ==&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (a8acfcb766c1384605239d93c2708651)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=xbeZwFVyX90x/ 0iGS/nkI0LPmZsUWu1rkm2ZajWHIk=&c=ZzTuFv1bzsZafnrJD2zt8zs1Z7IwK LytRmJqYfCdhIzjKwWppHAProk40KY2MSqSdLrzc0RLiMw 91hDEke2K1r6t6AbtRZ6pLT4q7mfbD8F/ UnJMvgi2DXMcPzjJaLbYMp2N1Djn0OPujYYT/gQ==&downloadAs=reason-7.0.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451457069/en/3/.../39629-1797146-reason.zip  (reason-7.exe)

0 / 68
http://www.quickfilesontop2cities.com/c?x=NB4KqqXE 9ufHNbgvd6sYY659KiL Xv6hYW//Bbj0Ag=&c=5 l84 Ge3iHIi5LBhlwTfDxY/y0Qz3Rpst VvbYIu4mciQA9irYntz7YmcVzivnmGQ9oRkEC1MMhgRWa7EJbEyfQw sVzq7fpgBFBPTcNW6Z78zJR1HxmyzsOai2AOdvuTQYYgQ5qJDfhfpMflj68w==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1452018445/en/8/.../83929-92631-microsoft-office-2010.exe#  (professionalplus.exe)

1 / 68      (Adware)
http://www.quickfilesontop2cities.com/c?x=bOvxjYVk/QVcQih1x oLy0vr6P395/eJJXenusBRpbA=&c=oMjdpZ9Ie m2/cH6hBNJPct0HR8CJ4a9hisON6hm9m9L/q0xi1swq1zwT0tk/m8eWhBbw9K3Ui32xM3K9GzHyWZOIUQDgbclk50/NXyYTIH3gt3EI3Vzyv3O5jrrYPW/2Wak6IteWPeV2wJILqhLiQ==&downloadAs=grand-theft-auto-online.exe&fallback_url=http://www.rockstargames.com/.../GTAOnline  (2b263924fdd1e662613dd9f5ab5adc61)

2 / 68      (false positives)
http://www.quickfilesontop2cities.com/c?x=uRpUj9ykRssSl9L1XJmCfYO5oEKAm2mKubqD0YBZMwM=&c=BrXRVC6BYpEpQnqiRGuD6fmhz2srjsPB5CiNn0kr56et8jFoNkXvHPD nNdKlPF z00zgwR5DqBwLnyGcP5L9dQEYUXtvCdvyysWRfCu9Y8w9/pWN0n3/nB8J6tO3hH/yYPyRiePN14GS T9KjDCTQ==&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1451848202/en/8/.../83929-92631-microsoft-office-2010.exe  (wrar420.exe)

 
Latest 30 of 149 download URLs

The following 36 files have been seen to comunicate with www.quickfilesontop2cities.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.