ilivid-download-manager.exe

iLivid

Bandoo Media, Inc.

The application ilivid-download-manager.exe by Bandoo Media has been detected as a potentially unwanted program by 19 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.bitssigncurrent.com and multiple other hosts.
Publisher:
Bandoo Media Inc  (signed by Bandoo Media, Inc.)

Product:
iLivid

Description:
iLivid Install

Version:
5.0.0.4705

MD5:
cfc5af2243aec9ec68cd7d2513f4d83a

SHA-1:
c8b1905b2bd918ccbfba526cf5fcaf96847e7cb8

SHA-256:
d6f9de2799815c7d36fa53a705be3bce6c1a36eb9a6e4cac1e2a01f20b0037f1

Scanner detections:
19 / 68

Status:
Potentially unwanted

Explanation:
May bundle additional software offers in the setup installer included a branded Ask.com Toolbar (Movies/Music Toolbar).

Analysis date:
11/24/2024 8:57:03 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Toolbar.SearchSuite
7.1.1

AhnLab V3 Security
Adware/Win32.Bandoo
2015.05.22

Avira AntiVirus
APPL/Bandoo.lpqsa
8.3.1.6

AVG
Generic
2016.0.3078

Baidu Antivirus
Adware.Win32.iLivid
4.0.3.15614

Clam AntiVirus
Win.Adware.Searchsuite-3
0.98/21511

Comodo Security
Application.Win32.SeaSuite.AKA
22196

Dr.Web
Adware.Bandoo.184
9.0.1.0165

ESET NOD32
Win32/iLivid.A potentially unwanted (variant)
9.11661

Fortinet FortiGate
Riskware/ILivid
6/14/2015

F-Prot
W32/A-f06bb3d7
v6.4.7.1.166

G Data
Win32.Adware.Bandoo
15.6.25

K7 AntiVirus
Trojan
13.204.15982

Malwarebytes
PUP.Optional.Bandoo
v2015.06.14.02

McAfee
Artemis!CFC5AF2243AE
5600.6734

Microsoft Security Essentials
BrowserModifier:Win32/KipodToolsCby
1.1.11701.0

Reason Heuristics
PUP.Bandoo.Installer
15.6.14.14

Rising Antivirus
PE:AdWare.Win32.BearShare.b!1075356890
23.00.65.15612

VIPRE Antivirus
Trojan.Win32.Generic
40426

File size:
1.8 MB (1,923,880 bytes)

Product version:
5.0.0.4705

Copyright:
Copyright (c) 2014

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ilivid-download-manager.exe

Digital Signature
Authority:
Thawte, Inc.

Valid from:
2/9/2014 3:00:00 AM

Valid to:
2/24/2015 2:59:59 AM

Subject:
CN="Bandoo Media, Inc.", O="Bandoo Media, Inc.", L=Panama City, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0254DA8BDA7284120701E659BC8B7D92

File PE Metadata
Compilation timestamp:
5/30/2013 11:09:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:ZdC4SCKd0X26c/lgGypWxgYrCz1fROlc3sJv1ovmv8zB7vP64O8RV1evegh5Qk:y408261GypJJOlMsNYdS4O8fghCk

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, BC, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 25, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 80, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 8F, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 7D, 27, 00, 00...
 
[+]

Entropy:
7.4803

Packer / compiler:
Nullsoft install system v2.x

Code size:
29.5 KB (30,208 bytes)

The file ilivid-download-manager.exe has been seen being distributed by the following 50 URLs.

http://www.bitssigncurrent.com/c?x=QAfujYIYrh39VHI8eYCG3X/YlaqXwEj1RAR296INOSY=&c=VzITMDmvtpT8r42A 8nPx07vWqj8Xrz3ff6pIoqluXDdw4V0eJ9VJwzcfYE0PmZ75qWCrFCCR8No/BsJNOfY0B/G8P11V/Y9G7F1vtdx0ePWOrmPmnAVkSaAEv4MtECyRIReg1fu4OS1T8UIizzzO6TzkIra7nt3PNEllyhHvpC1nYwyKe7Punjulnv5egnt&e=0&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.clearheartgift.com/bw1TZltBb4D9_vD8GMJ ABexK3sZCv2KpQ_yuTyWGY H78ukMDmNF1vV2EKaW0DHOakTCckuyy Co51zh6kWIMELS1VMYJ_mLT8DSuBfddXce8b3qx5xqfG4jn YeMZCoDzIxxmt3QXRBt Kbg0Mb8KysbuPh5U0HOvcyE_b4iaAIBvFKHeNUkIajM7GxZb5Ij8UASeIw6JPkJIrq2eRgBh c7PorNM8 Wf6z7TDxAZPrI iSWx8hfkLvcqvXfVfFp8Iab4RfcYL iYxnNVo5V Fg2umpcFLFoNn5jv1MdkgQuWvwwOJCYJrwJ5UHyda4qaA Y4acaRSrsDCgK7AMXYYkNZnJLx3vWHrQN4xMKLEPnMMq81MbPo9BO3c4oTkvTTPydCsEMljbsHwlrRxaHdBK0Eqdh4k17akKjfg3BwJatHur5A_575T3Dl7WU9P2vxFUXzj839kulG36jBhRy50Bh9qKjkTriqGvz9FsaJQ GZWGZnB2JYpNApSBaEkU7zZn2 J-G14AAGRwXmtru1GpCAg24MAlTWTQAXyCM9u 9Pe9LwHfyLCuWz0XjThEh3l4hxoqQu6JNH jXrdc5O5xZvn8R25lvIz cUlw qCRcYplMYblaQY=-e

http://www.repositoryuniversegift.com/c?x=APo rg4ljMakOQh9YYmNz5sSVdH UmgERbGU6je4Jas=&c=E5fRhCQRJYb69VEfqgkSHaeWu/teWtik6wwL4TeI87gtC/iOsKEcnUPKz0PrRRGgM2a4nVvdY/nvRYmIvWWUt1EiMNyy4hizNGXoY5XVLPqNqRB/N7ip Uw 0y2qYYLDybV/8/0ygAzUkKL0VmKdMxztf36ePKAYdgi17ozA5 Pd3JVooCTtfzF70hcTtzOJ&e=0&fallback_url=https://secure.inndl.com/.../ilivid-download-manager.exe

http://www.clearheartgift.com/FKY7GpF5NQep80aNHIjzi6o0yXWNgksyDa v3mRk78LYqt SvnoHa8VBW9QCojB11Syo9RYnWqtFg5S_pYazLRdAhtgqmixQOoweSJX4zpBrB0byEKp0Bn7jWvLErADItxCpUdxu8aGou5oIzqe1HyWPj3xF1QesT7 s_Q14x6wwZlVPhf LVedAVPpn63Z8wiPA3bD67SSoEcGe29NCru00KXZ5A==-G14AAGRwXmtrOKAIhQIANuDAJV0GHHQAX_jOgO2b9jzXS8A36uZ5KcdFI0twN3Z3V0JFkHuh6q3041Tfxl6q1ir4kEr_oHhz76vOB1QqyfA8y2VRBA==

http://www.giftchuckleflash.com/HhV16KBTxnvYarrUBTQ9LyucCSE6sftdAVf2_ajo_arp1DQlJZBw5Zix7yMjzeiOcJ0odYp7B2LvPv2Xo2BxR8TcW1z4ux7Ugg1dfH2BWYYPBx5D6WEqAksjh2SMso97Z_ 9L3zj6 XQIT xIsVFtbK4Q r_ZwVcXPh64AZkVmPQsKQ4gYsxF4g5qeITnkmOA7AgYljMz tzy5KlIdu_avHSw iNFQ==-G14AAGRgnq2tSYjiRdiAA5c0kUEH8AnObPuyvl63JeAb2i6X63gqGmUOb6fts42gIsg9oek3yc X6C4D C e_ucRzlbdrOV10ckUmESUoBESI1CGAQ==

http://www.clearheartgift.com/9UFHwhNO_mmh7QX1SqXiNxKvvtsE9I3fbqkaxFArQOXQoTivfrxoBHYyURcZfx_OeVOTzmr3YzatToQ6xlJ9w4z3XzIuOPr2V0291PHGQ8AL7IcegmgjLYuseGlYAh_TUMtpJbblEXleU6zGssjXkQ vWW1ETH__9k4ltPW0Kzk11waZp6R20W0S4GPvXMX2c Rt4LFosB6BTWZKmSJaIlxVSlIV6XDxNufOrL4ZfGdQtPzuRI3KeTt3 xJ4qZS7ZdY_WzIj5Nppn0OKjJwr4b4XeNkw YJnlVUzp37GeWJHCJdUIqBOp9yEe2f8R_qhpD2krrfPPYNNHFcc62IeVJ_Wle11hu99KzzHFj4gBxguEnY3ZiETRMRT5YsWmKy4njkRJQsT98fnckw2ifslUjkji8u2DQNKl8jRKH4CTg_pA1qjuGY4NmxYi9uC2ngXRFckmPoFIJ4LsTJ7arn7rvFDRIBl tdDdWq9c ggUoiFRn89Cu1fTlGl9tO4N9hg_D1wZqwM-G14AAGRwXmtrPN2E0GzYgAOXNJFBB_AJzmz70l3XtgR8o35Z1moqGmWO 6l_ goqQu6J6q82z0tnPqHqvKL9IlsqGOKnnzf9Nqh1yokiL1HCyA==-e

http://www.clearheartgift.com/nM7mB3qOVvQCChtyXBlzVV_mYOlWqiwzxYO5taVvWHegF JxxEuIxb4QscDNJn4E3XnE 4lsYxrVoRrJZ8AEK2qNo3CP_x XfMJ7n9D5dmqrceVMORWDgslCbWSK70PggPkhRa2hVohoRI4SS4tbNSHT0B71Wl43fTRNr6Gwae0oC6CbrWTqRl9ECy974UiPJxG z4tmoVKNZoc6KB3OPfleH625aw==-G14AAGRgnq2tSc7CBdiAA5c0kUEH8AnObPsyP5_XJeAbWs7z0u9Fo8zhZV_eSw8qgtwTGr6D_HiKjfv5s5duupqz0RXvyMtDMEiBQUQJmsZRHMFZ

http://www.clearheartgift.com/1n4jxG9p1Iv__eC8WzhUaJQfBAep4BNTlk_ltMm ZshY4QD7fIKvgz2rlip332W6hrLNhDdAZl0hWdNJVC6jBqXShNpt5gETKs8IItXrHWNw5RHCk8GRO HsB_xt2UFIw3Ea8hFUgL7xGeslDxKsAIbIeczvvFbTN9y0YFsV4Jp X2M4MCwrw2dZ SUXQetmDMa5CoNF-G14AAGRgu_d6AsezYQMOXNJEBh3AJziz7Ut3XdsS8A31y7JWU9Eoc7if qevQEWQe0L1V8vnJQbbpbcxEv7lgjFEOkygPSMpUIsoQVMMhuIsAQ==

http://www.giftchuckleflash.com/Y10_hUrvuxpLhoycEIb4ULJ6pOdHTYkjzP7qmTbss TM233W9hBrUHpqIHPAGiOI23QhzomeBpT6F4agrMLS5fgKG1C19JYiZu 55w7A7co_tlm0v7VIIsXCX2Ju3x6lOjreO9If9Fi54HSFhpndARTEXLAJ_QrvGnZCi37_mP11rjGM9Jk_oE7cL3C9K7TzWFAc6e06Ig583y2jUW8ik5B7bq17EqZWUnnIaix9rS09Xh1vfZCQsHAoFa7gc5OOJAdtgUm1kfcjVPbxHFKYP4YnO8ITHkD9J59XDH9MZa_rhWQ8b THVkBpRJnRd89a 9q3dHkelkWZlh0eniL6eayxe1T6kTrcBGwIjQS_LDfjjAfoPox66TO_vwq 5U1ib9tZx7_s_5HSDj761OdmouIR2XbqJBOyA2fo3UppRM2txzV_ClLo89WxoBV8yQC62UO q2HcWwm7nrQPdD5LLgcxWSxn0_q7a ch5S15QAZJuJzyKE4dSY lRWSmRqC4kabvbv2yC0fQLVF84Jm0nFhDAROEqg==-G14AAGRgnq2tCQlC9DEKNuDAJU1k0AF8gjPbvvyPY1kCvqF2muZmKBpJBLdDe7UNqAhyT jzfLj9YLZWUKb03tp4HMO8RRDjdTMB DAoQRMkTSAoAQ==-e

http://www.clearheartgift.com/KbNGvASq7c89qeXueaeZnOr15G qdTGcIz9 3992HWn77wzvEhDSTQgSOrwvhtYY446efJOxq4cdMbw8ogs4sVWGtX6oVc_gMFwscSNe3UihtxiXsPHo5WUo3WtvzsZeCIenHtZdHnntp jvfXsvbq9 ZV8icXq9FO ZX1Zmq3X p WZU9H_Y1U Or6oBCPSQJy6dkuBzNgFTqPhlSXNfilWY2p k4yu1P421X30s2wJYtYraf56zSkDHvaa7N0nVSjL02sGttEbIg4__TcSRuA_av7a3QLUgBceCb vvaQ6akCF6_qOb07buRcqiWFEFOvZHF1cofYSKda9woyXQoNrGUbSn oT6EA8G78bSujQoFM7ySUy DXajAu _MHhX7D651JuP7RpDNEV5jWu2QgkBxmdjT0ApcvDhTl3IDS70qfVmUb4uxel_EIVBv3fh2Xn_gA4q3KwqVBYv1zNysvI1XE1ifVkkIWbwxZNUMnNluUJ0KKSNDI9xxKezmo43oQWizNfXUWD4hAYm6aUhYv2lNLbhg==-G14AAGRwXmtvg9OZnoQMADbgwCVNZNABfIIz2770970vAd9wWNetnotGGqNhHt6hBoqAe8Lmb8zr1ufCPeLUZr33Secp2 fgS_ZpjU64kpJTQQQ=-e

http://www.giftchuckleflash.com/c?x=xwHdJkAI6R1VU2hRQWn5 vzxnZMUqQjTCXKi4cTemqk=&c=GzkHXgA7 L8HrIjDpvd3BQVwjMlB3k9ZZD1Ww6fnTkp6jS3lPSkvQZbP4lJX9WFQfUFd9wQvTXR9zDrMy 4RtDm0Zpq18ChKpI7QY H4Ms9L25 Nsw0ck6DfNXBHeT3g5lW9EXhlJy5Dhz5Weu4jjBa/xnEu8oHFf9JqodIE3XA=&e=0&fallback_url=https://secure.innodl.com/.../ilivid-download-manager.exe

http://www.giftchuckleflash.com/IBgs8Ys3_v9SxkIl6pZW7Tb1PJkz8kQLL_XyDgh5Lb_TJ k_Z9FmmWwtFgTwe8AWN9HmtIc3Ks933zIZ0EZu2r1hLstYuvQVjA8Ky5_reIfJUCTV3PjiEDwusQwZY3Hc6b0MKoqCj4pDH41RuaXHv5vN83IJw9DPnIMX0it8EiLZgFIIic4c novywuxD08aGYKHle6VFoiMPKY09SnBKb10yJVU g==-G14AAGRgnq2tSc7ib9iAA5c0kUEH8AnObPsyv9_3EvANLed59XvRKHN42Zfv0oOKIPeEhv8gv96inXgf7B3m22NZZ7u_OwNhrRQYRJSgGBJFWRQH

http://www.filescityhost.com/UIMzsjJyUoProV WmvrdJRFvBF4M6RLqsF2iTObCRxBk7_TwSeLHwpkoj65ampyRpYwK3PmUCJ_cv_K8nB6w0c4Who mLYrN h2aYXOyrULH_mM7UXawnsWTTNLEWtg5rWDd3s1ghQq3e2fCdKiqmc7s2TDgKTO3psTmmQ268mTlBX_luplDwTTspHHnFxDwXh7iE0RPsRVjCfd8GcIgkCflR1h_PIIhZ_Y6I42Mu2nuyJO1l0mKirULV87I_2jCdXMFR7n1KExkdLxvVSJJ0Jq9XgqKHW1TvN_ 2d983lDHAJtc7ynIjliDUz5v2PXstjQu2rrKZZvzHqcjmZTIX9LGlkkns56m871stIPjHLsoAPSYbrZ6HkG7XX __SKSAOmcPtKgLc0mA18U6umzxn7boT0B2jCYafri1BFw26kowxteUESXbR2_tvQqDI1cFX8DZYkZkb5Za8TzDPLt LfMGau iYXMNybF_eECo895UupWd2FNOrsskC38pSWZe5bq1GEU-G14AAGRwXmtvAJocyrYbsAEHLmkigw7gE5zZ9qU9z3UJ Ca6eV7AWDTKnOzG7u4ArohzTwK 0DxO_bwECH7vWJquP9ysboOjOVMM6jQnSjwvsqwI-e

http://www.quicktowndl.com/c?x=P/Mz4voP5adtAN7LSi9WMWrTDKKxpERV66jII3cHwpE=&c=pBCy7Cp1EP1YE8oHS7evfHATyar1/MMYKMcs9Ll6jFzabovEU/mHUrb zc0iwBUDz0nnsb1RNZk9rbNgPhfHWSEeDZ9rr/y9ZPigw5E1yRUHK71JZheRk4GJvqaa3GVPUj9NQ QiEdf4MOfYtnp4J7bIyRY54tWdCiDY78nNkmekOAhWwlfXIP15znT8SCyc&e=0&fallback_url=https://secure.innodl.com/.../ilivid-download-manager.exe

http://www.giftchuckleflash.com/qub1QKWMjwk0hcERKcHUDFHGOoVNWv1Y5dmgBINQeKqBt20jhUhOIXPwltie0eqZqI6Q74u_By47VnNikxbok b6KhTbwMc1o9TK_LHXsGByiMRC39V7O9EWtczMfLVzbV8GVzhptNyz27R086aeA6EZdAup bJw3CFb2QhPY5rPbFl6Fphm4teGyhgq5LexB8Cwyz15_WS3BLc fRVW2V7drULgZpTYExViVFcASBrurIPfilydV0gc9op8cnw_Ke9A74EFkt_OmnFLXVGYwckWKIfwEZuvLYZacmzd01wYPMta4V8YLjmLerhnOKvV0OWtQAYbBJq3k8wp2t4eFMc48Fy54vkefLquBIUQGHvLX4fjSd0dv_iAU1RPCAgtquz7lA7waJcTvjseikE5eGSAa1ZI1OB3mbGfEm910GgiAeKBOLd0PjYLUq4rzwDk3AETck0k3QG56pTIcLA0BMf1MpGCiC fQHveu7ZzWAiXiTDZqALFHA6vT6V7lhQ2_BE4vE5t-G14AAGRwXmtvIJP7dgM24MAlTWTQAXyCM9u 9Pe9LwHf2LCuG5yLRpHhwzy8A0QVUe6JNX jX7fKd336XowXgdqDhNMu9n4KH9KoJMMTNCXyIg8=

http://www.clearheartgift.com/joiPo56jdsG438jI8v7ou26q_lvYczQ D58uR0lCTrsBjGg37ywaUrA VzrCKpKUaKECKP5TXuaCBwUEOv6qJ5BIJ548xqf0c9NB5Z9vzJaWTVPKA1rv4DPBTlJyd0wnrasS8GvjouQ qDmqK 6riPp5yBrrKvsh7vHX1DFI9whurAfx0RuJ3Yrvxi8GB2ILHIDxwq_E1bZ3DtsXB0M3rAzqygwdkU01R7RT_CRcWGuqDsLX9vgItr42y6rSZOovSj4xeIT5 1g23O7ILPzdvco4zwWpYDkGmQKyKDxNlYsIcRD i JJh03W3QX2vSFRkEMvOV9E1KD0FZAMAcNuVbKRRc8EwXLjgvvvlmbFtg37fQboB 8EUQrpcivAhWl0CWYbSb1XZKojYdmkXGcq8yO03wJ_9adrnapI9IN pkIMCs6NW TaAD HB1ZiUpUaYcKa4ZWfpo9RqTAdZPpKj3poyqewMWaZw m57jutvdvP2QI0mhAsmXivcI7UXXEY7ffj7Yf-G14AAGTcXGs0uJil 7o7bMCBS5rIoAP4BGe2fenve18CvtGwrls9F408xYZ5eIcaKkLuiZq_0a5bqUs8pA1P2NbYYrkoJSq szvQKATNcSzDkQwO-e

http://www.clearheartgift.com/joYMFoNmt2XS3GrgzjgCEt8ANVn2Cv5UwGyTO xni9zxBMS_98Wu4dsv42K0CcnsXjlU95D0X_7j _loAfLWAb9g5zTcr mIkkvHuPmNAqDlnkX0zDmQNRH_8K2VYaGHmL0o5Ix8Fnpuns04LLjb9oGfVZvIsUi9CBSPHygX6XGxPG7OkgqGgjTnQlWviOAlgO6L9d00xP40GAlDaoX6GcgVHz9Wz 7aVEQ70I8sGdcj8AmnRIZwrdi_EBQpX_JyWn4Pytuno8CwAZQcL4pZItGp6b4OWK5UmZBvGrBnYklVuFfgzn4Nq0K5zHtLYeUkI3njj_xkz0IvEARuVnXW6nXjaU nWjbZuaLMS_nS56nKoHIMJTG7ArhE40TE7T_MPsbNl2P5txx fLtrjIEoXOI6S tXMjsdbesBb4Hf1lrWLCvxCwZkMxB2FYR8tjcbzbCLV0YQksT_l4LGhGwu69RxvnYJlZXSfJCq978P_6y3Ay8j9CTq r8VXdeQyaDGysev8jEt-G14AAGRgnq2tAWpbg_XDBhy4pIkMOoBPcGbbl F5jiXgGxq3bW WouHa8LiM39iAiiD3hNp_K9 PSHePe W hkYP8zNHGkQYy iBVkQJmkFwiiUw-e

http://www.clearheartgift.com/FP2Pn3ZF0FiVmBkBn6bvN6ZgeV4B4wvMUdJIW9xDUNR8JVivvLkZhEz5rICF07h52bbKMl8G4hgoZo_lqygiyw2moIBo L74k0XfvJrcjAVSLQifc3EJ72AD98PZxN80F_xcWFGVJedbTNAGOWKP9RwZAob0EoEFuV9ijZ9_8O ZnTb2iDor0snCkSVWJFpElc1wueCqlaG1SE8 xmuVYc 4KJ2EBY52fS6MYYsCkQXxuXsawARgSULrJPiUdVNZ1swFugklMXmHxe9UFsLc17fi8LJoHbEwzZkAOluPminpliDkXeZYtDOpDsSG2YvghAoA8GMaBT8JiSiBUCKD9aqUyTBUXrhwStTy9O9UFcCBlg9nBaEbvL7v1mfcDHWArAWyTlyr8G3UNC6HIdhp92TTuGKsvJ9zAogLvH_2CRguZBPlKsnfui00jP288Mz zypXKB8COmNRyTwkPsVdcG5uJ5UPSgydRxaaq7NDnyl4bAO8tcRxlbqTgKyrl3jIG VjliQ-G14AAGRsXWvX8ESk123YgAOXNJFBB_AJzmz70l3XtgR8o35Z1moqGlmC 6l_ goqQu6J6q_Wz0sl9s4tuj76kzG6y54yxITjI1CrJMPzosiwJAE=-e

http://www.funbestfarm.com/8826yGeI2CHzqzStXm_9v3cM8xJycij13L48VT_rOz8zjHhgTKUMA9oYx kmy3cCFo3njCaPxyuNjUvS1zaXW4oDU0ZAo47lZE22Absn7XMYo0Ew63wbQwVFIEly7j1_t4FlyzfHIrzNANEG3Vvu1DvZ1O0gnU4Y7nzlA_TDeXQ8 0q3TkHBT42CKZXtl0izTc1N S4VRvOwcTsbYeYJCdGJZEflZznJGA3ZWwpXnLWl2fnldx6YRA8f7KEuouLt6tqZuTi80IfXl5wNscau0A StiEz32BrauvTcFo1uo7jPpDNtSjHnFIk17zy00_OaMOa ljgqm43Nw_Ctx2X9kP9F81g8pus4gDOMMC08emNlUSQDkwRPZQrR6qqKqrPrmMLQhvF1HmPjY1IirmZ02MPWTMe9 CPbOtgRwfqQUnXJ5DG4DDJ7LAAu mvxbSaCjToYfvesBmYdXci9GD5l B6QGnzOPcQgw3eYCJEWu XlfspDjO_bRwfSJihntoeeHLX7r0Zoquym5x_98ap_lhSTH9LxQ==-G14AAGRwXmtvw50Ah2TDBhy4pIkMOoBPcGbbl 66tiXgG_bLslZT0Sgy1E_901dAEXBPWH 1dF4CVZVYt92CL5M1Wv4hfnbvVIhaIBme5XkOUxg=-e

http://www.bundletagchuckle.com/566jATgE_dCtrkneAACxEoN6k7If5T4dFBJ21WV_Cg31k3gC1e5Gl9G6 wAW7ELgIRmVF5OoBNK ge f18EGotJinb8Yi3nOkzikl4nQABdJHra8LBOh1xRBqCZa2_mUVwJ00aqVL8oIs2HDESEdSpAzZwFd4SPLnzxSlinX1cq va5AfifeyN6hbE6e6uPjpow03AOf1__dZ 4HoySymbrp8QCRmg==-G14AAGRgnq2tAWhks07YgAOXNJFBB_AJzmz7MjzPsQR8Q O27c1SNOIQHpfxPTagIsg9ofbbyvcjekeRF hYxq2TDHr4vWqD_X AVkQJmsFpimYI

http://www.giftchuckleflash.com/jTumMtv5gAND4FPvczUxPb_W3btKTGpOt6zR0w2iPnaoBBQQxSfIFkgpDvhayGmqA97ScNVUQcV5WnXDLPCaHMsAhyF9E3GYyBDEXAhUOgmZldCydYOwsVEjdfGmJiKeB1b9 0Or70NCNGRxjKkLLf7V8U87yQU04JYjZjXonZmAeQRiwTVFGolXLIQxNZacW4PXpSup-G14AAGRgnq2tCQzN_GEDDlzSRAYdwCc4s 1Ld13bEvAN9cuyVlPRKHO4n_qnr0BFkHtC9VfL5yXe7mGqWlIXw_N_D2_45XcAtkAtogRNIhSLUTQ=

http://www.clearheartgift.com/wUWjiKVqldGWH3XXkg870bSjq_cFVTKCp3rcGVQYys26nTHV 78SREHr7WOdvh9yXcDLeo2FLLyHHxyDP34gMbpFo9U0qZ7b5M0JRWVXyNiLlgFaG6YHslIwLEEEa00brrrlQd i1wLQdMgvsKyA4zwqP2UsLyKfw9ONnQn4CUqtR_af4xpGmD5h3rbehP4SmniMSMI587lxmBL0XmifjQe03s8YXKTnPnpXjOS_6yqi_TyBBWFNFfZw4Bpcc99DfUqyu9OnQ5C UaxBkmNDhoIiZdi89fB89yGBNb3oqQS6aGw0heAZfIGrkWIEFyLEN8QjSQI2ziyj5RICvcaEgL_W52lcvNkpnOdfJdJLct75Id55xFZDs8oyFU709of1JuUaLY8Oeey4O2Jo35oJFRgu5wckkPS_8PhODcvISuKZBQah8ZlorPNO74yJT62BMjRQMA1pIiVSxRzIAAeIIMiS1dmLaTUxxCFEvxmSv qLHvvn7ihAoeJfwS3T5443FW DYb7d-G14AAGR0W2u0O5IYSXVdxGEDDlzSRAYdwCc4s 1Le57rEvANu3leyrFopDHqxu7uSqAIuCes3ko5TjkzC_VjlX383xAH63iFwcsarpIJL0mUSYRR-e

http://www.clearheartgift.com/7_GKAYfK qt8s9MaSt2SAY9KVU1GJAic6lJKO4_GeSA9PJo1dXhB2arl6Ki97wKc7x4L1EwmG8E uxj5Yamj4 J3LXm91Kb3ahe1J0i_K4wF04qiVwaQ9H1UcyruOePwEbXLLq_o3QUWOe_Zlp2YcWqwO0vgg5IP5tSt29l1acTd4T1ReDJ7RrI5UI5YHvWp7c29zrMS3YmYCbNmnFwjwin7F214vA==-G14AAGRgnq2tGdEJ1gEbcOCSJjLoAD7BmW1fhuc5loBvaNy2vVmKhmvD4zJ xgZUBLkn1P5a X5E1Y UZjDAtqbRL_tHrDw37S_QiihB0xRDMDQK

http://www.guardsharebyte.com/8Exx5daiDSunWbMzM300iIelqLWZW58qBClpR3m7Sd74oOE 1CYmv9Ri2GjDEXBV1XKhA60wT_qhNN0EHmdV2wKI45LheT_u_V6EH7hs_QkhCgAdyP_PUBRV Qa1nOc2KAfzj6lRr2JcFlqxVKkSbJ9H5hdIxPC5GS7Ul5jPDykJTPDzXvNxq1ucpU qujQcWtLDFNXb3IQMOd54 Mb6gfydwS3O1BTovnaKlNokoRGW7NT6NPuWwkjcZjdpIadwu6LIQN4rRti_qdCyOCElYXnfUiFH9HjvyY1qK6LTB4dK6f6h9rwikQvkI Cog3fYtgBcPeSjgtP PdX9BjQy8a8ocg5_BXlg L7Hxt1cELgXAL16YqkKySIj5bcrpQjmrN61hsHIH_S_413h9Fq2ufAIWeRr oyYpoSBeaBE1tKJdeCsu0ktcL1IQCMs7yJ5MnIziOt8VeMpFOeclNOyN7X9oixCk_whQwCMeoNf1oHUDUn_SlKDj7YUzMW_s44Fjjf3eIyXqbyX0pZ xNi07CReEjS2aQ==-G14AAGRsXWvX9PK6kCHBBhy4pIkMOoBPcGbbl_Y81yXgG3XzvJRj0YhD3I3d3ZVQEXJPVL2VcZzan8yMJ9jm9sYM7VPLAjOBbkClUazAsyLhRQ4=-e

http://www.giftchuckleflash.com/eSdV4E7cyr69IHTVa97TLffNExVf8cmigLjKdfWuhXYDZqib8pioYpHnBdxWA1yDC55bD8GImJ0LXO3N9TpPX9HJLTmuAc2AD2R8YVi3cnfYEWbik0pbm51p3pqfOWeHCIMVUxFgH7ucTAiD 37S6jnKfByLdbFusNrrSM9m INISFPs5OsA8GLF_kKBk7GHYtEEbDEIGh19sqIEcIZrulMGDeuWDzpzM9FU7V7X052dz3NCohWPKWphZ08TAwK4rX3djXqMTz8IL6juNVJfFcxAc0atsVBL8D22E71gnQJxqm7zNHRHaGgEKPerM12u4mYRMymbwddEe7oNKZVfVhY8_ogj6YGsv g1BwBdVOl_LRYajewBFC4F147M5FHW9mmhHXJmmd3rxMsrhQgPY3N7uog6KuQYoCHMLZVVg8aQs21XBaWW6w0YrKS99D uyXYmOYhqeOD_XnEvsUR55yQBNuwmiMIcZ7MMg G_LxzqzvnikRjafvVCzlo8lAcVKz9gxCH3FTHBbf6ZRbvxqIOEZtM34Q==-G14AAGRwXmtrO8QIVRs24MAlTWTQAXyCM9u 9Pe9LwHfyLCuWz0XjSRCh3l4hxoqQu6JNH jXrdsOnq0V4vl5OHxlz7J1TGNf6CRcYolKJrFSQw=-e

http://www.giftchuckleflash.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

http://www.clearheartgift.com/uUrWfFLLD9r8nnS77IP6thwaXm2utGr5qfRSq5xVXYeFbAKi9G Gr1wgRmnTWMXWD4MA mHhq3PFiAd_AOM9nhrwG_GFgAHJbOfiU1vafoTwpWhg3_3dYORXBSG8d38e_169LW G5JGPBqJVj9XEG7 HMegIp6YsG4dpSz1BPNlf5JeNyOFWCtg9NZdy9rxDtfa4tQDSak8KX7dc aguGXikpgb3jV8CpSYVzALfLgJ46x85x5Nfmr2Ia3cWGd5XVg4IRtwM8ZuCa_oFTUDbV4Xqeed3PplMxgEIJ8GEjCWzTadtPk2IhcNiCxk9yUC4CSdHhnljWYsD8jNkE9ZS6EM4l7AcBxc H DcEs hkUskIUN1lHQG0l57VByaauPHJHQB5mnoJog9Q6a95_N91tAvmSgSMJai9GoKGSj99uuuY79WhKYZylpWoyIaRT2sv hc1UkL42kIpClVZwb4eVaMsk5Q1ZgG RkH_H6Xlcnf18nQNiYSKZ8xQlJ2nuKghXHeRQ6jg6fIi9zR6 IZohVeQgjNxQ==-G14AAGRgu_d6gscyYQMOXNJEBh3AJziz7Ut_3_sS8A0N67rVc9Eoc3iYh3eoQUWQe0LN38jXLaaPdZF3qFoNSTjnmFaHxxYq0IgoQVM0iSMMCg==-e

http://www.clearheartgift.com/GHHi0vLCEAoKuUD2NfXLXNsRTE UdU3HFyOZLu tiw9Pqlk4ex3bP6tyOi AUHTq92m fpQAwgJA6491_2MOB3ZKuYIIrPsBkecCcR6PgoVg1xJ8JVtr03HaaRUIOX_3 sEBURVrJERLqfkXg15CMMVJNjJ4P4X4oGlAUd0JnOEb2b6bg2dxSki8jZhGdsAK0J4YZ6yfTV8YASiMZC9R8OzRtiHPqw==-G14AAGRwXmtvAKMQyngZNuDAJU1k0AF8gjPbvpD73peAb46u6wbmotE1PJ3pSwGryHJPDv7Qv243 5vjvq9yaNN_bkQyPxGkFQNdUdF1SZFV0wA=

http://www.clearheartgift.com/xBghWgSTB1PH_3FYWquPx3ICZeBIPWk0y3 tsscW9bMxo4aIkhLpZ6YLHh DQG2pi0pPz76IaA7fG7TMTz4ONGnBrzpKd0Lc3UOat XiREJtbP5WIqpbBhkepHzPiXJu0mKpjsl0PSBJcVWjAwjfoj1NMvqahvJgZTWp2GHjAEey17HZRgLqG89a4DmuvVGtwBgcfMZud_VlcC9Q4Km64w5CBVCnyYMZOkdmUSgVXYagDjNA9q1_j5RBh8sRUtcK cYO0bz75d8kenYaSANjj0QcPDtkozDxETCicEbCCuUThcbVbzYjBDxInjTLHLWVKHby3VRXPTkwLRuO1B8ZpRS6Mm3lXaRxQaXQuyh56XE80aWkAC5L34lFK984Zkw2spGN D2uwb azrRwOQi6hxu HPOaFEttRbYxxAtSNlPBEIGOWCbAafzQGBNHbHRa93cPvdhbqcBVaE35pBSZQGrgxyLAg tRhK56tt3320JhMHW6kBTwONTVV42idFAjR90ce6ce-G14AAGRwXmtr86nQGAHDBhy4pIkMOoBPcGbbl_6 9yXgGw3rutVz0YhDPMzDO9RQEXJP1PyNfd1mWJ1ZKvdZQ9vyCYrpmM547kBjUkGWJZUrsgI=-e

http://www.giftchuckleflash.com/SbJuvMP2OIw9UXjlV8pHgNmjLq01K gwO98rdcEnMcM5rBtV7DJkZ15cFrwJ3Q5t13X 5 kGnY4I_OUyeVEWFk7FcxUdCI4pofdvKbcz5lrvFG2c nQjo4kHbnfSZtNkvh RsWi M0GLHOO8SxYZBInAn6zNaV1yA1JF8LaTcm6Z372PXu6e6Kc3umPgooF4y2RYXPLrAa9fYDasb6E6UXK9CO8UMUYvi A9Y_5f99dcEe1beH1pfqGzurIA44Z7 zUKTmoWfVWcTbhWO4JCeUeOq2o3THjC6abAkR_ yBkXhDfLUPLIuJn6czA_yFCHhshHzrFpJhD39ogirU_cranTXJcqln0biojeUrYCkxrKKa2EQAYtIjZlJXMdJyl1heVvElcwuumcOtdJmkmUMvB8FeKyikCe82AQvYy7MzxyDGgOciDPhU4O AvF2TK25j3WONIy79w8iYzpCfpvSD66hm5JEywjUnv0QO5ZdxzdZ9ilJ6Pb4vS8rfgMCntJax0YN 2IBT9oMv44eJ1g7EGPIXtCmQ==-G14AAGRyXWtr29tRuA4INuDAJU1k0AF8gjPbvrTnuS4B36ib56Uci0YaY93Y3V0JFSH3RNVbacep7D50_yh1_IIxcCEfWcFdFwNUCkFzFE7SOE0C-e

Latest 30 of 142 download URLs

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to ec2-54-235-137-222.compute-1.amazonaws.com  (54.235.137.222:80)

Remove ilivid-download-manager.exe - Powered by Reason Core Security