home

ll001.avast.com

Domain Information

Server location:
Massachusetts, United States (US)

Root domain:
avast.com

The domain ll001.avast.com has been seen to resolve to the following 6 IP addresses.

104.96.220.106
a104-96-220-106.deploy.static.akamaitechnologies.com
August 26, 2016

104.96.220.161
a104-96-220-161.deploy.static.akamaitechnologies.com
August 26, 2016

23.3.13.203
a23-3-13-203.deploy.static.akamaitechnologies.com
April 5, 2016

23.3.13.248
a23-3-13-248.deploy.static.akamaitechnologies.com
April 5, 2016

23.62.6.203
a23-62-6-203.deploy.static.akamaitechnologies.com
February 28, 2016

23.62.6.179
a23-62-6-179.deploy.static.akamaitechnologies.com
February 28, 2016

File downloads found at URLs served by ll001.avast.com.

0 / 68
http://ll001.avast.com/.../setup_av_free_esp.exe  (0126cab4b68528091d6f9e2c4d4e9e66)

0 / 68
http://ll001.avast.com/.../setup_av_free_fre.exe  (dbb952921d1745486f0df8512540e54b)

0 / 68
http://ll001.avast.com/.../setup_av_free.exe  (1cb2a4a7c5151ef5fae30a580bd52b5f)

0 / 68
http://ll001.avast.com/files/.../aswclear.exe  (avast removal.exe)

The following 47 files have been seen to comunicate with ll001.avast.com in live environments.

TCP » 104.96.220.106:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.106:80
GPlayer.exe (by Exent Technologies)

TCP » 104.96.220.161:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.179:80
plugin.exe

TCP » 104.96.220.161:443
kometa.exe (Kometa by Kometa Authors)

TCP » 104.96.220.161:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.3.13.248:80
tmp5c5e.exe

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:80
browser.exe (Browser)

TCP » 104.96.220.106:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.3.13.203:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.3.13.248:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.203:80
winrar_setup.exe

TCP » 23.62.6.203:80
pixelmon-download.exe

TCP » 104.96.220.106:80
adhmnhomokaffcfghgedmnnceemneohp.crx

TCP » 104.96.220.106:80
gagdebbdflpnhgahjichmoigigfbbmon.crx

TCP » 104.96.220.106:80
mgecpdghpgpnpbaipkgdmjmoihnhicjg.crx

TCP » 104.96.220.106:80
nkgehohdeddilafacnmjbjlnkomcneoi.crx

TCP » 104.96.220.106:80
nghakcphkjghdodhhjgpnnlhejchcbnm.crx

TCP » 104.96.220.106:80
nkgehohdeddilafacnmjbjlnkomcneoi.crx

 
Latest 20 of 61 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.