home

www.towerclearvault.com

Communigal Communication Ltd

Domain Information

The domain www.towerclearvault.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, January 9, 2016

Expires date:
Monday, January 9, 2017

Updated date:
Saturday, January 9, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
towerclearvault.com

Whois:
1 towerclearvault.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), PUP.NewMedia.Installer.Installer (M), PUP.InstallCore.InstallerInternetprogram.Installer.Meta (M), PUP.InstallCore.Bundler (M), PUP.Vittalia.InstallAssistant.Installer (M), PUP.NewMedia.NMH.Bundler (M)
100.00%

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
10.71%

The domain www.towerclearvault.com has been seen to resolve to the following 14 IP addresses.

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 7, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 7, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 7, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 28, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 28, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 22, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 22, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 22, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 28, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 28, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 28, 2016

File downloads found at URLs served by www.towerclearvault.com.

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=AxekEZ56y4Ivxragt7lheeuPxUQqtc7zaNo/nQHqRJs=&c=0Ewv3xyN7IrA3b/zkZjlBpn0Lbe6pTHo3xT9c/blMdCNFT68e4uD8e5m8aBj6u60va TyWxAz9GcIHiaA7zK7sDtzVlK Hx OqATpLsSC4x1Oyi9dao/DxRA2IFb53UjTViDxF5p0k8dHCbzE2AktA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=IPrIBL6YrmKJutWd9Z3HVKSYzL/Zu8HcZTgl52Swtks=&c=NcpgM/UxMEsIg8yXIXaLr6xb8rriarhf2 iZ4BYq2jz3PcYp1KBtCLYm3h0Wcfmov WZnOzlBBpcHmT4BcNotSXhU4kJzrxX/SBPv7LIOlplfe9dsFduFnl3L1L0adj67Rg/i0DfgJC1j0KIxjbkA==&downloadAs=microsoft_office_365.exe&fallback_url=http://.../setup1.19.exe  (5768a1e792c956b655db543928e0f8d8)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=Bj3XTK566O5twnkCBd11If27z/5nNn0Po/wyT8IYs7w=&c=HVt1PORZ 3Kt2/ij KKA07DTPc pTRQsbmtbKMXRzjTCjBy1oE0Qwv8pPeTkjdX3H1wSVj Hf56MCZUzdX2OnuM1pCYk5D0mxeLGoifvw6v2fSFTmB2 DTa w0ixHZW5c 81/3UM4gz9UJgB3XIww==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (d417c441ebb9caca7ff054f6b18ce18f)

1 / 68      (Malware)
http://www.towerclearvault.com/c?x=0DN6ZZ94389UDN7qQXE1ctLshKjibWuPAYJVbfFlBC4=&c=Z5xJZmTV7E7pKlJYOACE3nvCZG6DPRp0Z3yBFnZSVRQ2eWjLPeYtg6UUSUb92EjdIerVRZHh01e Vl MTrKiALPOKNGPAhzM/bDpzWowVRe2Sbnx MSdZPa463qk/ImvRqORFkTyyjRwJY9KKIIaA==&downloadAs=AndroidPhoneSniff.exe.exe&fallback_url=https://s02.solidfilesusercontent.com/Y2M2OWRmMDMyN2MyYzQ0NDExZGQ5NDE2NWYxZmEwYmQyOGJiODUwYjoxYUkwZmw6UHRQdFBOREdxMzN5Tkl2dVdqaDVPUGRsUkVz/.../AndroidPhoneSniff.exe  (androidphonesniff.exe.vhdx)

1 / 68      (Malware)
http://www.towerclearvault.com/c?x=zUae0Lon1YT cqMLt/LElrgVZV3eHY5ek1U/1ngghy4=&c=gl9y B//rRjxcnhKeVUUcKC4rgeyB/zrVNIPoSGJCvriu/ oQHsWN I6WZx6OYwzJjsS08RhpU8TQoD1SB1EoRHIhKzQrXUOkkLaLf9lN LYNMC3fI/BRsLoNXGNSuxNtEW6Dnrdc3oe9VpoDmbSuw==&downloadAs=_BAGAS31_KMPlayer_4_0.exe.exe&fallback_url=https://s04.solidfilesusercontent.com/OTQxM2FhNzlkMDM3OTdlNGNmOWIwNDM3Y2E5ODA3NmVkYTUyYzI2YToxYUh5Ylc6UkxaTDNNbHpteEVXU0l3SUtBQ0dQX01HcC04/.../[BAGAS31]_KMPlayer_4.0.exe  (_bagas31_kmplayer_4_0.exe.vhdx)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=x0AvJ 5usz8 mb/dCWv16zlAWV8xl/7to9aUs4QZPI0=&c=I6YtgxDCOD1OzL7lKj/AqJ/rpax EEM32Av71xE 6fBkma3etQeHF3ffRgZE9pewum80FTAJXbcyxCECa8Ddcqgn0JF5aVg7LBKpeYfm0dL/fNck CnkEytBOpVsplJfS sI0g7qOM884VuR3Yz86w==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (808141c6ea76659c7484fd14fe4d2b92)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=drqk5 Z4CkBp5YUrKnQVNEPG28FZAX3ozPOQmdS5bnc=&c=J1IJ906dQR/SNZGr2FZav8gko1QecR5kHlBuVOWoyuDxggnFbjFVvNeKskmro o1yV8a g7bTdoPKhhKLIzjp9wfQo/HxjZBzwLdqr3GS1QsuG3hWI7D/sTzecVcmHt0WVpP8xZgo3DvV7noyzTwQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (11f59807004c874d9380407db5d29a5f)

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=lY9huo E6zV zzj61ij5BCMUO6AflDEpevmJs7MBqK4=&c=nrAgKoCfS47UXziBcr/MBkN3xTRq1ogWqJZagHiRC86F6w28xv8bgKrfrcLaORvv FaXAGx/ej5p2fuNjP3Fqb5xyu7k6YHrudj7i8MuYoNXKXzWxf33aUqzybnaObkiFWN6dXeotba6L6VB JbbnA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=gJA4Zntr7yzwZEd5kFhs63b4Ooo5W Bwt0CpUiPjBHc=&c=wdGOWwzkleubGx//wQr4Ze2QLhTs6Ws7PIDlpCITy7iI7rsED2k77ORmiNRKbjZUnPUcOGyDDO5HJf0DT0yY6WhDZ3Gg2xXnEvbpI6B6T84/W2IuRcTK8R4ENymkjmxYSCytCvGn9aAOoFXF2d5ztQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (808141c6ea76659c7484fd14fe4d2b92)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=yFjx9KxjzuFCVLWw/f6iHTdQsqxvH8URF0l IVlEIpo=&c=EOmWSB8kHwHV8KZXqG2ZjnWDPtES9yNgoyTbDnNVlIME4npnsVicPPbbPnSrMZ2GnH63nEXZyEKhva1n2dVs/XorspmVJr8yy56RhXxu676nRVGWDQ1tZeMzw6PhhaNUyXWjYm28iGgWhaqYTH5Pnw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (d417c441ebb9caca7ff054f6b18ce18f)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=unZnOPU3fi0eJR5oI4dsDu9k5BcPfdpXZXKHfg9QBfg=&c=V/ TpEyN bmWplogB1 AgHlZSnzWHDRwtxyPQS6eroUMhX6/2x1gSsZtXp QfxJ5BZP7Iljs9teCPQkqjw/nPcF2fB2RNXXAqyv2WMxaDB PttlQyKWvHLP4MRaB0ye9NtKwFho3O76cxca20u9Wxg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (5fe59fb545789054b872f2d993612c9f)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=dFfSyHARo BfsRmCJiqLwRBzHBAL2DGNTGOfBCwk8GE=&c=ipfLDoza1dbuDHLSZ vj3/nnR4UPiBX1tdo20dO59DaqJRKcuyTyox2B/N4UBNj3kVWLnuCtpPXD3RlTovg Kz39sR0 4JT8AIr/GKvspGrSOs5a9Fa6iHajXMwbBLCyeJUnCYVoX11iJiXBF7O6HQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=Dsw0jHj34YPd9n5OT/ZEKEFWGzuXRkmtDeUshgT04pw=&c=ODPA4KsjjiyRcIJVCQHWpNxpiJ7JjZxQnfhlV5Y X7o8kbZDvGzrF2q/tU9Xi1spow/3VW0rCBj/Rp2LsuSAGZfoRX2cGFztR58ThxExb5jGdOb5m3L7R6t1LJyR57fYV9KbIVJziySQe2ZVJGhY1w==&downloadAs=photo_matix_4.exe&fallback_url=http://.../setup1.19.exe  (b743b4f6d7a7e5c86abeca8a25ae6c65)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=iHKJcvUQwy1qs9dZSTx1MwZwTBqFgOnJv vjK5nondE=&c=iqmxi6fMRojELH9l21gLnwrhddCsTnHEXt ipNCAd1e Cmn60flbGLl6A9Lo3Yfu9SYaz53YfTN4G78qhhGxPsBwJwU EqF AXFqF7P2S cVEAIoLwzTJzvJUcmFpKM5n4y/2PVRfgOS/k0ZPA8 BA==&downloadAs=ChromeSetup.exe&fallback_url=http://windows.ratedfreeware.com/uploads/.../ChromeSetup.exe  (7dda57f973805d7979b615cd67527459)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=LrPnLkmKnWXjz5GYt2p3kfxf iXn/1XffDk813MX bY=&c=4qtFhXPcf3KYVHOSzvkJgp6huRMXwns0r6Sg4RNi8HdqUOCr95OrW4gUNnE2AMX91m361 CQFrCBrs4NlFMtMh/VwIjUpna6k23 /c2Cz9uGclKnTDLqJM6V5Mfx5bE3PB uoFHcIuW73AyadhdsKg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=/UFdHSOop7HuvLao1YQ2Lw4C57410iFHror3Pach1SI=&c= vuzKgFZ2AKbkC1Z58AJvXwyHG4/WPDlNoIhVZM57vJ7V WUMAWXU6TXHQ4qaUuTyo0OOkFuqQg9LmgKQdCPFtdCmqXNubVGK4XTDfJpHiQZuWyByNLW/o9/LNhFQcbbrMtLE eirx7g56J8t1ibHA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (259d1dae07c6c7c1c23f00b9beb56e21)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=RdFm5JREzL0WbYv eQ1AB32lPOrnD9KzoQ7IbT9rEA=&c=a93nI3yTY4no4HgJCRjQi2/j9GAjfLNoTLogLsHBAp02g6G 4CXLkpGxljQIcOg4Pz0kfTH18tU1jOg4lPH9jZyL9N8Olndu1Pkmd3j9CX42y4YJRq8QXvuiBw8dsltlgSOk3DsDdYRYT1ScprRwlQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (d417c441ebb9caca7ff054f6b18ce18f)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=/hgJ07bJki4m4H5yUqacSMEpg FvfJ2PEZ1QmYl1WLY=&c=xfnOHCUeiLHQ13HyC47CFvsOZdlcLS6AHQAbiFtKSFbwF9wo0vVhjAAAvTNqc1mDo6jfAsky9pCt ol942hEyPvX5JVi8JR940gnJxBpcOaVhmvj9SiTAAgBoC61Cxb Nb60LyTa5BTS1InfEzJeQA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=By/qkPlsVCY2zGlu6uFtcDgT8x/QeaAD9dznPzfnzXw=&c=Y7A5FPOamov4vUXZpgHPGJWdJdBSyZ AJnpGJcSYG noOuQGZ2xol9j50m7kQFAj ExmseTGIu5cFAi fpAag4i nOWjsBnOp9O/HQADc5HRTbSTJ8WR1ycomH4jUdMFgJg7YA l1D7Mp4iRo NYXQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=T8t4aKQfaDsMlUmyoDipYThOGVCstXfofaJAaLGwLQc=&c=ZqFZV8plVEc5LPUkCILTFjF7NUnBCK9jFlNnUhTZUKOzcRbTmq918UffaQFwmH7nRXH3/Zeo8MbI7Z7mgJ0UMsvqlO2L/dnLzFJJzlS39Lcb5knrUYdqlr9baY45exmtZXXF5Sr7iB4b9huLYi13Ag==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (b97216876e3e41eff5da6c1ff15e8dca)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=UoPlWDSQJkji/QPjHvvfWluRyGGZNaxaJQEjfGEyla0=&c=X9r6eVDUCooH413/863F8yshY5HT2 j/KiaRwyVtoDjBWW3ILMn48bVP2yq4KUbCy3dTNOMY3Pl2kr9NDInjKbqs/bJjgB663zKnm9VT1KrCQEMHxUkD47D1SDS3RkZO0 zsnNuClWk8LPmOs5IWbw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (b97216876e3e41eff5da6c1ff15e8dca)

1 / 68      (Adware)
http://www.towerclearvault.com/c?x=qfokBO26NgsMCbvhvMvE5lfQgRzl W4vQoKrGqixrkY=&c=YJC7VS mxkkxh13riGv3l1OXurssMFqMq/STGCrktghpztggbxBJpo KR4GJSlIZVOl1fnYug4qrS9JbMa7FvF6u1egoVX4y4zbVt9qmERS00g3/mwHW/FuCvIa/Wr7bJoqJJtIrNnOl5fjKY8h/GA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=ni9Cp4xgxZz75ao7vhQ50RDZWdwnDhUPMAKZH6fe16A=&c=vyO9nNRfkXDapn5A3Ok1rtgSDI21qemw8LKPqpL1zXTsQWkEs23f0svF6cj/qoq6fIAs0fdXU3hHQNLG8xS2CfqjfniI6BEU24YND7 GTD vgyqp3RO4Egz82LMP4OtUz/a5vzTrg3URuCNiaMJqIA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x= uhQPAkEO62RPvMl4Z3xezTrmLTFCDCZyMsDNTlbriE=&c=gN2CK7h1aH1o4xAtwgRxTo1FCy/4O fDHD0UK9vIVNd927AJc5bLEpQ9ooWzCq QMnz8K6GX7RKP3 HZHGrgqSidqEIxn3GMwtewg0Hg FmDIDAtENDEeFQh7dr9NGSmrAWAilxBc7FVhLcXrPIcoA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (85ef5eb9249721325763bb6c476c93e5)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=5NRjZKwXtyE5CvecTNMixWAxOH7 LVnxLpv0xZMsv80=&c=C5aUXmxw016MkKbKR1C6FCVVuhIfb2I CXjlKnnKvyMXqKnUNdhKsesSMZJCbrFzOaPYHVrYvCWb1VTBI8DyHboY 3NABEkYO/MTsglrDv6y/Sr47TBwIag8laMbHMFCDX7CN6Sf3XryC9jgWO5xw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=rN9H8ZWcGajzbbcMbovkYTZ0UVPw4O2r0Vo2YMtJ8SM=&c=wyLNklhRht13bfUDKbkZITvSToy64gazbjIt7PxB6Eo4K2zoWKwRJ/RzafxlyITusE9cAXRY2m2699MIBBnOeOFps4v7PGL33ffuICex O/7zpxzvvlqNBVKRkeUMz48dV7XA9t5IGAwISPccgagvA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=KCPLRr39bhsRZz8Inr/lMYH1wtH5itrM8v4PRrENN5g=&c=Ghyb2PHF3aqSDFPsL8yoIEJuSnTe0uMuJezad8mo5O3fh5y5Fa6NXeoFQcFM6UMwpHZF313Pt6AYMLbSHDfc RnSUIPIEx58fFFH9fSERBiZbJCyW88 eyfo1CsjCTLbN9X B7vZgzyP0i01L0Uo8A==&downloadAs=guitar_pro_52_by_vas.exe&fallback_url=http://.../setup1.19.exe  (4eb47c5d92a46637a3552e475de7f58b)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=CGieKQGPEXVKGwey9WYiYaFukJed8xDH52rB okKQ I=&c=BqHUFTQKXSRlQR5MUJ phGzVuIsJzEnGJZQsbpQ/SMrTQEkiG7PjcOzBjXwO/7zWqBjmP knLPROTx6zL5VAHHoPbPfGLq6wKG/lWAQBR3hojNMIsdggruhYEcOENmTslFTUaCr6heme/GHRrSyRgA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (b97216876e3e41eff5da6c1ff15e8dca)

2 / 68      (PUP)
http://www.towerclearvault.com/c?x=1hSY66Nt5YgQki1mfQsj57E6AAjMaYqtLsjDuBPoWUQ=&c=uGKY8YJDim42hXLdzN3K2R09nI n8wNayXH4WWbI5ZxGKweAgesskCo9pmjNbvCgXwO YPvCP6T3FHcu7f8UjymJ 0bk4agf1bFn9Zup69yYaDcwawPwPkxdipe9y65DLGGtWz6jtMSIIavYd/vBDw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_setup.exe)

1 / 68      (PUP)
http://www.towerclearvault.com/c?x=nVQUzZVEXwCR08 co20EqRZikumroPkVgQ2PI3Tu5Sc=&c=duLP6pDfEayvTXmgLsm2YrMnmaHxqPaI/rwReLgOxuf6NxsmxrgY7FfG0yYq8FBFWnz5GeNAnYM1umZ2cNfdVq5t1pyWpYDsFG2/9yf 3l4mhDCz3cy1qAi0iTGsnGhVesZ5oRQ1v1c1gpimEPgp7Q==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (1d5f18ca8f18c448469f1f3957632f69)

 
Latest 30 of 41 download URLs

The following 18 files have been seen to comunicate with www.towerclearvault.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.