The host at this IP address (20.79.41.2) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://20.79.41.2/bins/Ares.arm4
http://20.79.41.2/bins/Ares.arm5
http://20.79.41.2/bins/Ares.arm
http://20.79.41.2/bins/Ares.sh4
http://20.79.41.2/bins/Ares.ppc
http://20.79.41.2/bins/Ares.arm7
http://20.79.41.2/bins/Ares.m68k
http://20.79.41.2/bins/Ares.mpsl
http://20.79.41.2/bins/Ares.x86
http://20.79.41.2/bins/Ares.arm6
http://20.79.41.2/bins/Ares.mips
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK