home

d.mediafhsignslaboratory.com

Communigal Communication Ltd

Domain Information

The domain d.mediafhsignslaboratory.com registered by Communigal Communication Ltd was initially registered in September of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, September 8, 2015

Expires date:
Thursday, September 8, 2016

Updated date:
Tuesday, September 8, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
mediafhsignslaboratory.com

Whois:
1 mediafhsignslaboratory.com record

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.Installer (M), PUP.NewMedia.NMH.Bundler (M)
90.00%

Bkav FE
W32.HfsAdware
20.00%

Malwarebytes
PUP.Optional.InstallCore
20.00%

K7 AntiVirus
Unwanted-Program
20.00%

ESET NOD32
Win32/InstallCore.ACP.gen potentially unwanted (variant)
20.00%

avast!
Win32:Malware-gen
20.00%

Sophos
Generic PUA NP (PUA)
20.00%

Comodo Security
Application.Win32.InstallCore.DQR
20.00%

Dr.Web
Trojan.InstallCore.576
20.00%

VIPRE Antivirus
InstallCore
20.00%

G Data
Win32.Application.InstallCore.EG
20.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
20.00%

AVG
InstallCore
20.00%

Avira AntiVirus
PUA/InstallCore.diur
20.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
10.00%

The domain d.mediafhsignslaboratory.com has been seen to resolve to the following 9 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 19, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 19, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 15, 2016

File downloads found at URLs served by d.mediafhsignslaboratory.com.

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=8eKNpKgmNTYUAp0xWelVtghr9Epf8M893cnAA0zdl7M=&c=GNeI0c1fNyilexX3kZyyGf3afaFOyaTVL46JN1ZJMRdC8QqMC2Zf0oYLrHFxKzN5u/03MXSfWiFstsOjqgwRg6DO6gl4yZbTItsXqak6uE1TBQgfkeB3pHyEcbp8gaCS3/3xHSmHNskviQvEpPjQtxVdqUDTwEn5yYQkO ItHdQ=&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (7485ef243dfbcd979e62efbc0b4fe90e)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=v8Ri4mxYHGqOpiESsPU5wJvCzXG1aNcV1N1vOk/8PMI=&c=jc4tU3BH/pNztSUc0TD9ce1/8hcshGu7UNSnhTSUpUJ8Akf50YXJqD/2qn9HZnFzozHgW8gpyxWrxO9n0Q3DE4kXJZxqDMDAqxAt1mJ4DE2puaJoLPXlbP41886fDP lWstj3oNkU3bzTqw9v4YPhf5w2gL8W415ygZQt9A2iSQ=&downloadAs=GTAIVSanAndreasSetup.exe&fallback_url=http://allmyapps.com/binary/572/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (a9ce799459336de86279909be5b7c50d)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=t1lSTjcOP3uuajvS4IEXSKNOmX4C5gfZB1LnKVwGgXg=&c=FkwxOaosgRU6dssYgelpWPnp euZPxyHnNvTpLH3BHzTHEisPQErU5Jbp/ c6hP3MCZgbHnjJKEZy/wVI0P3inZbR9BR9oFRxAOBfqRZqEwpTIkci1GAp4g312vCE482Ua8FQ2 ur5l3su5GsaQBsD140ycE0wYCOusTuqKXWI0=&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (df8dd34b67349c11a5eee87ba0a17a12)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=Nn/W69uiMcYmsGe7gZKmTs0GoaQLF6P8BVKJdCzFe44=&c=bqXokIjWqUHB/lAxccWtuWRgBmfUPkY8scqZ1DV8O2BVgE/MeP8/2XvFZgCSApntquNJ2 zU8Ot9yyMEZDFEOrEPGxlqHz5QnuD0DrvgIWn5p5rLY SDmeVqA5KPcmq8bjhUxoFhCkuK 7Ch5TEETJmL5RV9JCpULIlXdblTBRU=&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (77e63f253e11d6099909ca5e5c276c58)

2 / 68      (false positives)
http://d.mediafhsignslaboratory.com/c?x=a0RsiFqz2lAk2Vwl6kZCWluBN0WgdTJYif7ZMTE1QPk=&c=rp6bOu3f/AydImAathZyznxD/vxjsG7BwRf2yrOkcaBdzdjBMEtQJ6cutUhrEtq7bnxtLiXzn1Jano3Ssbwe3pWrH/DkiplXzjeBCEdrEKxq1YQrHGOFpq4Ea/tsIBbOc1YGHA0xin/jRCzRV8zPFYcLwqabHtGm DikTJikWfg=&downloadAs=FirefoxSetup.exe&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe  (wrar420.exe)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=2PJHtc1FonDhDzeWAK01sJ7oPIPzzptb/ppolEfkIeA=&c=Rxd4jhsGsuWWbDYgpEhU9B9tLJBkzDv6XDmPxJ4GNbKSyTO49mrUC9E8NLmtPzSWTVu21zX8t7ZY3oypxRdIQ4wtUQe41ZduDN3EEAm7yoE9 z2mVuiZdGz5Yz4eW0D5BiV7R1TNrDd5sSYh8SUVTrREsI0NUIsOh3ySXUye1Dk=&downloadAs=FirefoxSetup.exe&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe  (2afd9e4d0b42834d210ea7bee55155fd)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=hq9LpD8zJ21wyLeyEpLulNmkpVQNR7yB/PVLVSK0GhU=&c=wvf Z 97UdMeqOTgbXKFoBJTuZcNkODl3SHaQ8 oIMt8kABG40JBQiwS1g7gZdn3lZtpdvhBgCLj2JvogwgqW6f6By/UKB92WIdjbgsY6LyoryATJeXzFtbflABnbZKFl8OCCnxJ7xWV4X6hS9LjvUe6DGQHavPqoSTGd4DhSt0=&downloadAs=FirefoxSetup.exe&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe  (3ab00f359b20f9cb9f8c0603cac7e21c)

14 / 68    (Adware)
http://d.mediafhsignslaboratory.com/c?x= d8Mgypj2GOBK2MrT4qV9BxaEWVS8BHV22vT npDCQg=&c=eFEdcc3TTCcB7X/dXZkYh8PQDgoLEDYMINx/y6HaSClmqj7N1buUyhtRwIU1Jcd3J12wBkrVQYdhG2EiAux EViy0ry3ez6/mJfHs80D XuADV7 JVeAvWis9OhgqPkxyMcURAtg/GdBSOhLcjh0ur23MqCwIUwAa9LipveJsbQ=&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (1a910217c116bb246867d5b245b24ab9)

1 / 68      (Adware)
http://d.mediafhsignslaboratory.com/c?x=nwaWVUuaXYZdhYUgyz7uQ5JEUJQ635Vm220/Ucdc4Zw=&c=BpL4Wv5AJWNMiG1t54FJP0XhfQfaSP3g6CXkkWlBi7TZIesp3 OKbGPqL/Sp/btgXlB4e9cDVGOzJqbx3gSeEMPr7p5v90LNaz0ykRUxGBTWoKznlGhlmMwYKOkTXaq2yi6MoK6LrsdmwuoKYz2m9LGGDMqdLboGm3NhWLjuXlk=&downloadAs=FirefoxSetup.exe&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe  (9baa1961d43944ca468a5125ca03c6b6)

14 / 68    (Adware)
http://d.mediafhsignslaboratory.com/c?x=FI2OzXjOREL86HooEJ5hQq0WXO446n8c42zhqZnB7uw=&c=VlIeMsDp1x9/K55Jz1yuJkvqW2o1p7VRanZiLcH4MdeU NGdM92HbTuBmNiY7vFSCoHt1F54SISTVgsBRRZNcB4g9Wv13V0Ggo5SfVq/FJFqsnpsv52GUgVh3SSsF/OEjTw15tWd6X9PXJDynbVrRn/5BzP8uSh5VBsBM9Q42sM=&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b  (f85e0effd33d832c5293a956305fb55b)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.