home

www.vaultfarmbits.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
vaultfarmbits.com

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.11 (M), PUP.InstallCore.FC.Installer (M), PUP.installCore.Docesipete.Installer.Meta (M), PUP.InstallCore.EST (M), PUP.InstallCore (M)
100.00%

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
5.00%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
5.00%

The domain www.vaultfarmbits.com has been seen to resolve to the following 14 IP addresses.

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 4, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 11, 2016

File downloads found at URLs served by www.vaultfarmbits.com.

3 / 68      (PUP)
http://www.vaultfarmbits.com/c?x=HWgbtKbaoRdbOcSCz5jt9Omi4BvG4xVQtcbzzOMoz0A=&c=iY/VbSYgVorIDRhx5dRPRcgmyF2lO4TSkB5brZSWblikrbzfc OQIeA4lAECC/KUqERag/ZtUf3Z7OyDsXmSZ946o7NdaXyQH00iO7qh/MrGvgdjorzoirqG3aaX45R &fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (ab9e23c5c4fb6d78d2a0d6ae188b832b)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x= 5ePo6mPluBv6 pu5GegeYj0dqn27Xuo7zGlAECmIuE=&c=3Fg0v6O0YVQ6IvFppRWz eO9s6CHwFuJ9Y5wntX5dzq4F U2nN8K3bw1475nMdV6AOQLf24qOmJURMiMX7yr3g AHT1l9x77HqDwid5dEzA7ucnKdSz10/DnKJQEEy8O&fallback_url=http://storage.dobreprogramy.pl/.../PhotoScape_V3.7.exe&downloadAs=Photoscape-12505-dp.exe  (5922e34be4905e36718c8069ceae85df)

0 / 68
http://www.vaultfarmbits.com/WVl6OTRQVzB3VUdWbFVHODJiMDVJVmtKaFNsRTFNalpSSlRKR2JGcHpTRTFuTkVaQ1V6aExaRWxKTWpKVVdrUnFXU1V6UkNaalBXVkJTRmhsUTI1ak5tOUVOemR2Y3pSaU5qUXhSbkJzVW1Od1IxWTJiRzlrWTBoVEpUSkdZWFJRSlRKQ1ppVXlRbGhhWWpCS1IxRjVUMHhNUkVGUlFYWnpVbFpDYkNVeVJqQnhUMWM1VkRod2EzUnNZM0JEV0hwSGNUbDFlR2RPVFdkWlZWQTBTMUJOU0dOeVVVZFZkMVZ4T0VseFMyVlBabkp1U0dsMWJEaHZTMFo1VUZGUWFVOG1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWjNkM2N1WTI5c2JHRm5aV2wwWm5KbFpTNWpiMjBsTW1aa2IzZHViRzloWkNVeVprTnZiR3hoWjJWSmRDNWxlR1VtWkc5M2JteHZZV1JCY3oxRGIyeHNZV2RsU1hRdE16TTVPREl0WkhBdVpYaGw=  (collageit-33982-dp.zip)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=BUfp72zlcyAoufzdrD76yFhCflZRaE gwasl8SqOSxs=&c= OT18bDs1sNCAi25iUnSzbiXl0CzL9fuKZoZQKhO9g/neho7r5UnLVqG2yobHAzWuTDIVMJi PIzkfB9hSgJK/PnADA4vGGWYgGhctScArYoEIOYgJO2gBZ6TkJuSR A&fallback_url=http://sketchup.com.pl/pobierz/.../SketchUpMake-pl-x64.exe&downloadAs=SketchUp-Make-68678-dp.exe  (fc4af2dbad36adf89802bb0a9b30f65b)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=WZBCpWOfz9v7sSLHkVnZR/1qS2rNO78URx4JiHeIqrU=&c=s7BK0xFoUKhkGMZ7ak9BJLL2bdEw/pYyLegWofB4hVk7ftqcY/kYHvJy9gTwB7FiXcC8lWEkcYpdmEkG0AYrkaOszYBuvrAlPjJvu8DmoZHKM2zLLRqF3YlNrlh3 BMJ&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (585058529b99807285378964c2f065d9)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=hSU/TFCbFYNYB8DU5GAOAQOS3pQqmxwfVg8qRUzjLxw=&c=L FaEGqOnulDRKbzfppSRXLWL5XTAyz46cvSbDJxxqa488OPTuJQUEAQ6VwTEoCzhVErMriXoTh4NOhu0yQEuACcxZ150Ibgb2wQWUvwv2yOl6TTnUpHCdXBM/TfQGqk&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=NVR8VqykotnSkJFHV2WH4rdwYlok6C4eERQffJ7ON3Q=&c=RuemND9jf50WECbGSmXO3dqCDXh3/URW6LGdmh4qlFOWwThyfofgkw5StEg57gNK9FJx2SU7XB2QU7skX009RKDgya4E3nHIJpkN4BKz0s 2rS3C6RLN1F w5dN8kFJm&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (7667748bb5bc7d1a9231a55664e663ea)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=JRm/EhbL6VjtzfiTDJ3m7fLmS/EUqQ8 MYJbkqY1jD8=&c=Kql 0dtom4R9xVz skaIezUiwv/jIaaF46lQXv dH8nql1SX5RboNGV6Kj7A0pJsW3zsiTgGoJsKxHS6e/h/Hu5/uRv2V4ROXWqSwgUWYmC9V74Dqvba37YFcPX2sPPG&fallback_url=http://freefr.dl.sourceforge.net/project/aresgalaxy/aresgalaxy/.../aresregular240_installer.exe&downloadAs=Ares-12480-dp.exe  (b49b47e2a4b404f64f2381046336b311)

1 / 68      (PUP)
http://www.vaultfarmbits.com/c?x=GUmCh249nyn1NNbGM5CPeLHdmpFyoDzn6ZMzeF5zzvc=&c=77NTcsw7OjRdw0Nej1gYgw3Z4PvkBe2ng0GYZ2sJOmmAjSTRQQCZQSL2ekOesnQ11JBn7Hsy5TIJIL0vJI56Cnv/kxYOgN6iRj7rJwehEOaLZYEuuf2ZqPHDcnA1lHcJ&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (c.exe)

1 / 68      (PUP)
http://www.vaultfarmbits.com/c?x=3lzrevoMhHESmZ6lJNiOMq8TfK0WgoBr/8f6OzOGb4Y=&c=pWNQjXbMJ9XbYTOsi2ByCusBI6wXfu0qV72HzMj9TbgVFUcTOHDYIdxbAqnkKH AuDSGCWqPB440nnCI8zv7QX3kD6xAFLXwesq//m5sTurH/CnKu2QJ7hxxQ6v/zlC4&fallback_url=http://.../ccsetup515.exe&downloadAs=CCleaner-13061-dp.exe  (icreinstall_ccleaner-13061-dp.exe)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=VLPAVQyKy7AAaTx9RVZsNHIf/26jjMD5gRvLYaJvd5U=&c=R9oh6Tyae8GSf8rsa6yNqj8JwhQvotkDBt7V Mu/E3eHpdPThC45cYLlyX203uNYTqQ5fECfvHvx1R827Z1idR K7BSF2zm6ofyUmtF4V8B3sab7Z5Ubl0NXw3qe5yk4&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (1fd63f01a6bf62bd29ce031919e763a2)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=spZAe/cx52ZU1PkeciBEY5DCnV6NnH5ZFYde8y HCSs=&c=Tc/gJaNNMIBjj4R 2uXkyqx7iBYFuSiZ9exvw1dsNZw7T8MjPIQ3wKTZMgBCwYYcfoXRwvLieA2CR5HuebTaknvMmHSt0JB9vYJYxWyFgBSOdB5aln7Ve13ebPibBebI&fallback_url=http://storage.dobreprogramy.pl/.../Alcohol120_trial_2.0.3.8426.exe&downloadAs=Alcohol-120-12712-dp.exe  (df857966785f65e4cefb9f86cee26a5f)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=YmBsgs7tPF55Bv35dSLcazhJJLVS86BsRHQ2UUoa2I0=&c=IgZiURp2A90SEayCBkhtxuJ9oui6z0B4BL0mpTcytKMVArO2vyqcvr5s5iDET/JIAU9F/fSeT37CHHLrwTQrWg7nvq6hdbZW9IUpe0fPUWyUD4AG8RrDfG1lhZqkjMOH&fallback_url=http://www.rarlab.com/.../wrar531pl.exe&downloadAs=WinRAR-12398-dp.exe  (ec1791be1c7d6d2fa442bf38cfa5123e)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=JVMf2 mwReT0yyHhCQbafwtvUzO2daxcSbrdEcWIyPo=&c=YWY5NYBi2A9vbNJsK4KOCBKEq9P6XQ2hZtgTdeuCotWSzwCXSccHBGzFFPkniaQiy1SQ4689w4d41i3FdrBCE9OD0xCF4UeoC8n5gVRLRJqKBpUlM69t2Fk4gJ0hGsDg&fallback_url=https://cdn1.ashampoo.net/ashampoo/.../ashampoo_movie_studio_2_e2.0.9_sm.exe&downloadAs=Ashampoo-Movie-Studio-43446-dp.exe  (44e38f1a92591b9bde82c13f641f0141)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=xV mlXN9dVIcU4qoAv0aKcLseWBxgXo3APDlrCqnVEQ=&c=MRZKE2kUqSfgQONelDrkF3jvMitjY6 322i3qK7H0da0uQQgUIjJWUfPN2wwjdH6GmdvGwXNbkoSw453GFIOBz/HBwhGF1lMhw3hbp9c5RTqC5jGt0/Ub0xEHMGV5hPJ&fallback_url=http://dl.4players.de/ts/releases/.../TeamSpeak3-Client-win64-3.0.18.2.exe&downloadAs=TeamSpeak-46554-dp.exe  (49c2cb862e97f0ab9b75954fa4c235c6)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=i1oKxe BJcfhNqxeR5vpvY6fSaQTdlWTe0GgLCLUyw0=&c=M1BJ ptG/kFYrhaXrWHw9Z937aGmMOu ZDGHT5VrsaBZi0 rAbLovevpCOzEbuPWAEwK4cOaGrFyOrKJJ2sP4TNkn/AmW61FWDQzRAdZ0s9uj e0WtWZLS8FHh3FP5Et&fallback_url=http://.../no1vc.exe&downloadAs=1-Video-Converter-13231-dp.exe  (9d1bd97083379a9a15b2e9b95fe47e9b)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=uDS9EGbP ll100IHlkBMwwQRDY kiMDz1f5qukzRqAI=&c=/60q2MC3XjMl7Qua9sO8 mzM0t5ERs8zTaAqDoKAwwOpvDZCFjTJ2LjlxYypCQeuHlmGJibtzNC7yzOEpj BtLfGwLF4LAi/OOzwwT05rHeVVj7JZO3rOPbfHw9VK6Zj&fallback_url=http://storage.dobreprogramy.pl/.../AutoGordianKnot.2.55.Setup(dobreprogramy.pl).exe&downloadAs=AutoGK-12557-dp.exe  (685bcd5e04aed6ad4a320de9aeec23dd)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=pk0A7v5048ui5SOdl9JHlF2aMXPQ6RWxs4e8AfTscUw=&c=VghwNMhvB DgOPnhlct LuB5g9m4Dq4s6Wf22z73NYqN/XLbnjWL4G0pRxKAoAcMYRAiuVokwccRDhE1KlY8CUSWPm3jp U3M8PAuaJMUlJ1TNS82DmC5EU 9fnhJQeg&fallback_url=http://ftp5.gwdg.de/pub/tdf/libreoffice/stable/5.1.0/win/.../LibreOffice_5.1.0_Win_x64.msi&downloadAs=LibreOffice-21562-dp.exe  (466cffa333fb5fb6a6fd3ca689c7d3f8)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=tgaFGtxJK8255jXE6TaVFmTCUBRw6/LDHM7zSnnawC4=&c=y8uDuE1tKboBLJqQJISjWUF07B v3Ipc5u2T0qn7w o6VJVKCTwW51BoKFNMcQpPqe0 qUoRYWm5fhlpDiTWqObM/ff2WZ06ZmRzRX fm3fEfLRDnD7nSZzPlOfi6EdT&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (beb9eeba2e04c0b85cb79fe3c9f15475)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=mdyoXwKueUY3 zRZBW7btsqUHJbgfrrihCdmh0EHNdQ=&c=xxR4y4E3KNahhTTm881zpqdKiEce4SVDTDgnVo5ZWOUt2LGjS1yyIRd JcKCRG3AmAczHmXbUADzRyFuzXAXgxMi6DFfTok8wr6h115YR5pCAksvuKy6NDTmdqrpnQ7x&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (1fd63f01a6bf62bd29ce031919e763a2)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=6V0jk32TqPGmsB01iRibYx0TrfuJdj2MspvPzZJfkWo=&c=fZIihXHXxEngvzoSzTgJ6QkZLpdt3ysE EJ/bCq SLJROUnX5KHXR67eJ/xp2hWryTdO vp13y59o0DjAFgOAZMLPFlBnSubwAw2p3IDrB3yP4VupFNilWv7izqABn9k&fallback_url=http://ftp5.gwdg.de/pub/tdf/libreoffice/stable/5.1.0/win/.../LibreOffice_5.1.0_Win_x64.msi&downloadAs=LibreOffice-21562-dp.exe  (f38f01991540b766c02ca6938caa9f33)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=wYpK1UknFVal1H4NtctISz9kufgodJtf7RDIs3cZa8k=&c=I1Ua1rZZPdOJaWfRw66aAlyUKTjSJn0zT49E33PypYDYDsSakz/4wIPNYnk2g/3371Y3PD1CIJ7wXpX/jyQOO/Hij32jzLHihzD A7lIWiM M8AsLOYaTxaJzeA5ydSf&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (09f75fdb5f74388177848b7761908f76)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x= S5ZOxCn3PuSlG6xQQsZQ5XqlKREzQtrO840thPdI3M=&c=2uqrJYWhNPv3agvYCZzCeegTQlU4MJLy7UW2IL/yZ2r7OAwP 8qBGln8Ad 2QINBZnblTTLIMMKMHQH3kLlp4sdqwiav5ZScwT3Ezt1DaW71Z2hVkRbswLDEkDW8hhR1&fallback_url=http://mhotspot.com/.../mHotspot_setup_7.8.3.0.exe&downloadAs=mHotspot-Lite-29956-dp.exe  (59e364de000669620fd8e94aa00ea6fe)

1 / 68      (PUP)
http://www.vaultfarmbits.com/c?x=7j53tA7r5G8xITDgQL2nSsi2HDdlbG9PZiI1Hd2kojU=&c=Xqg6nrX4wO9sOWMopbpXmlxqWVSSl62FEF3yVp YQzRYF9se8lBJR7FFJsYR z4WmOXXJ913zkzh2LPRAx9TW8yKY8X6VwSOl1hsjJd/Hu7g2yd5dq0IvNUTtz1JVcUD&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (a3331f90748660e81d91e0c4d9fe39a5)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=uO0CGdkbm5GFiKCLWoY2kmCtb8j/ao/xFzqrFnlekjs=&c=NmtFrCoqaiK5Of/NEd2oMYyichn9QsazWq/9EaY DBFgxmcU/An6fSeD7Z19/gzvD538 SbHmMIbBcXiRPe23pVdRsNdmADd6iiv0yhyaeo1DYITaSsatogqUJ85bohF&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (1fd63f01a6bf62bd29ce031919e763a2)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=fuy5gF7fRUsc2nqHxgQ0jzLu/SAyKp 8aegUDyhRT k=&c=kjXsIoNzyjoa5AdGgzQUQILdfrhj3vrtP5KYOrIKqHmemRroqq/56lWF7YCb6LNfCt GFcO6bOurUOrf/cMwop78xPSxcEP0iABrxMoWTodRm1aeKMCynxMLU0E5b6E/&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (f52899cb852a615e34e67cf4c197d60f)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=9fZ5mhP2gToRzkcbqBG2YUT3FJ8F/quJrBeU/OdlvJ0=&c=47lOOogD55aaNBqnUyOc5rFKBpsdy5MtMSpLLOXcogLkRX I TTehrD5anqhMTt0tHZ9LCu2p6glC4Rgx75F9XFGlJFucSfDB8vzZnFVCdvB 3OBoJU6EQeQtIHxl8G&fallback_url=http://homebank.free.fr/.../HomeBank-5.0.6-setup.exe&downloadAs=HomeBank-18101-dp.exe  (788f47440af45a6ce2d96e54fe4aa39d)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=Aho5kpZT0/74MAEfEeRPHGPoTugr2OM9bwEZGBT/N/w=&c=RpF9cTR9BF9Oq50Ra IOss1YLl 1rG/EiRg nhJIEvKhryu1vBuhqvvVopszjwNSwUWk3kPrRArW9f0aJjQAw3r2zYYolPFI2PyZtCnVbksaNLSXdItvAS1Q4ijPmbks&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe&downloadAs=Free-Screen-Video-Recorder-33557-dp.exe  (9c7cb9753442cab65e4434f8365e6cda)

1 / 68      (Adware)
http://www.vaultfarmbits.com/c?x=BgPuQ3/jRMAqGYmBXoW/or9x9LsvShJl5i LyHBnl10=&c=k07wBmJoJd0 0JTgBztJvjHhl/1x/qEcOK6twt5WIgrQTpqJrjpfiITOHJ5/s8On8XlM2SVfVbifus1ekVveV6whRGUwBq0YBTtsTEW36f35DiKBjfJaXnfNuFbrDKA8&fallback_url=http://www.rarlab.com/.../winrar-x64-531pl.exe&downloadAs=WinRAR-12398-dp.exe  (winrar-x64-531pl_e)

1 / 68      (PUP)
http://www.vaultfarmbits.com/c?x=N6WtOsEVWWRuMQq0Wnnw6uSjXVSTx7l3DOpQbjtQkhY=&c=yZgRWNZcgqctZE9SFpV23cWZ3X5zGZV54X0IoePSU uwA6s0JSm7rwRho12LGoIuh9URXwGf4yFxK2/NqX5x3umTfRu8UqKFJYPi7bPkYBDVj7Uoj5QFyQ6myRQSI iO&fallback_url=http://napiprojekt.pl/.../setup.zip&downloadAs=NapiProjekt-19170-dp.exe  (876df641cce2f4217f19472a22302d23)

 
Latest 30 of 104 download URLs

The following 18 files have been seen to comunicate with www.vaultfarmbits.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.