home

www.bundlescurrentfarm.com

Communigal Communication Ltd

Domain Information

The domain www.bundlescurrentfarm.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Sunday, January 31, 2016

Expires date:
Tuesday, January 31, 2017

Updated date:
Sunday, January 31, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bundlescurrentfarm.com

Whois:
1 bundlescurrentfarm.com record

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.bundlescurrentfarm.com has been seen to resolve to the following 14 IP addresses.

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 25, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
August 25, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 25, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 25, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
August 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 25, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 25, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
August 25, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 24, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 24, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 24, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 24, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 24, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 24, 2016

File downloads found at URLs served by www.bundlescurrentfarm.com.

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=ogcPSb0AoAYPd/98NuQRXOrH90U4nndV 2cWDmwETvY=&c=FVasw/sip1zIg4rQ0gqmAoEVnGqap9DrnMhIjAWd0uaS5eT14dQi0wQM1zpRFcyBzo0ES9a2PDUYR2uTf4BbeTayEOb1WDFLCzvTJiZlTIG4Wt/KMGNDdwXecXQJ UjI&fallback_url=http://res.hufftos.com/.../jre-7u9-windows-i586.exe  (e4f270d48e484a78efa35b80c719e980)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=TzWb4ryspnZJjZF6ZZRciC1oLGYUclkgGCLy8iEwWJY=&c=FXyymx8FK0INNNYu V yEpo1/R7D/eSQ6SVxffAp1k m/f2e8Om2ChqbkyVFoA/Urkvhk1wiFcTkRtZBbJnCfa0qonFbdBo65JQYKPlI5dLib wJv X9rmQ33lTfmpIp&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (7ae50688bd415e0e06b62fcaaceaddb6)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=OKSQnrFIxd8azDLA6XOlwEVA0xcv7YKGU0j6YTLKYuY=&c=cGvSNOx1bbTsNFmBEGFYbVDzpGxV cFdKDMjZBNtjneA6Ab2KjK VGpKQRGIW8lipCHeoGkhvkifgIvZKnUnBnh1f6UExpuWk6cQlb8mvqeopucWReZlhCRXX9F7Bhze&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=qfGZKkklfRZsMtQ5INlNadRm VhVsRrI0d1dJB 0DqI=&c=jmFG4sGQzYeG3mqyl9SGTmiVu8IJEl6KlyBzk qC4OMmqKYBh0WuI NMIZMpdNKZoI3EOo1DG3YKIcwsabi6ZMACYxBLJqXs36z xqpu0ZofggqeUcWxM0IPYrJ1xEk7&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (f0c96759bdbb5901dfbce6bccadf9da1)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=uzTr5mErvW67eb89x1hzMUbTAuoFAsXfz0Q5QrVjlbM=&c=EJa3/x9J6SC/dl FzKzTVV4/VOT29N9fCGjYJvNIMYTJMvFQ6oQu9w IfmC9SlQ8DolxTlCGjQq/YVn2DalV9AJ7h Y4Otg51foXEf3pXKKuoYUQZq8jCDS09M9rDl K&downloadAs=heroesstorm.exe&fallback_url=http://res.mshist.com/.../Heroes-of-the-Storm-Setup-frFR.zip  (7ebca811d8c47a94b273e0a45e440904)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=wcBVYIbir0Qreov36j4dzMtkxX4Ukg0d66qfc kYo 8=&c=lWaJRCtXg8JDUZ0bhkFFqINOuHgugiGK7Hg/P4HdvLFQNwKIO3jozHFY1TQjYUyDaoJABmao9xMtv7Gi9hpc1w9OSnugmL5Nx/zEmTtFi/NjVx1bhiM94yCmH0YFKGDe&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (6eb03629529fa2be26aaea71995f7210)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=EKK23OCaWxjknDdfGfd5vKmQARs0uk5tbSOGHdZG1D0=&c=R4RfTpsH5aBuZ2Ww0nA3JdmVRmc77cDgxedZbARn4VJFTK9GkIAoJ/Aw9IPf1inHtdePFjrhMdUD4MgZ8PsUL/yyeSAdHPXxY61sv8rXj/Tov0Juc1eofo1n/Ral/oUa&fallback_url=http://res.mshist.com/.../Asphalt8Airborne.exe  (e1c10a6a619013000704f50e00fa39fd)

0 / 68
http://www.bundlescurrentfarm.com/WVl6OTRQU1V5UW1OUVZGaDZVVk4zY3poc1ZHVkVaSGRUYW5wTmJUZFliRmRMYVUxUlJqRm9RbE50WVc1SmFXVkNheVV6UkNaalBXWmlaVzVHSlRKQ1dWSlNaSEpsTlU1WWQwVTNTbHBsV2tSMWNUZE9SalZEV2pkV1pHcHNjVFpUWVZWcFJ6SmpRa2szTjNreE5IRk9NbVJWVkVONmNXRjRNRTloTlU5TE5GVlVXVGROUzI1eVEyd3dKVEpDU1VKVmExSnJjRzFVZEU5TGIyUTJVRlVsTWtaeGVWZFpkMnB6SlRORUptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2NtVnpMbTF6YUdsemRDNWpiMjBsTWtaamJHRnphRzltWTJ4aGJuTWxNa1pEYkdGemFFOW1RMnhoYm5NdVpYaGw=  (bluestacks-thininstaller.exe)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=wA 1TLEE1dLmFos7bHoHNVTOqrZhy5AUwoQOVrg5qio=&c=sadmGAyz7ZK WAVICLVFNtKoE2pKpHn7pqZ2WgRCZRL6sw5xgwDHlC0cJLFZ73kSdxC3xMVYjosbDy0/V2rY6Ga5lRSCtTFCWi8P60rok4BCvAP6za4ZwNFugIMXsJXH&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=xFvINhBgoYgqWnsy5vgVnay7hnM2/FVkTCiBlLKIhYM=&c=BGJGM/YdQfSl5mi6C4dPMqqCsShohVKRGRDB1P9CF6KZCZ3JiBgmf2m5Rr t x/ NXy2i1ugMWVg1OmnEOFxzMbNNhn66jRtfWAEo67wJzrn/lznRRmQtvtKQwa6jcxf&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=t/BVl4CBLo hgXoVqhql1zslsGo07sj6du8iyR0ruy8=&c=iZ47H8wx2cxpEkCy9Oa2RZlNMz3nI58SCRv/lwUJLKGWlgh4cgscJTlezncsUKNB2wgvdQYFqK9gPsJUaFUlrh4fJw13 dh VVm3wU H7ub7hyol67qcpqsuhlvYot1Q&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=fk17ms6jPEyp81AsS2iWJpASCTYdRZxG13qSYq4ZDio=&c=HA9p/tzWJc7 KURRS4jB6S9vxU9jDRrs/9aQI0PfeGxFEjAC3ju8KuunTjYF 8xdUlcn65EdDmCxWbTaOxr7hgWylPd4THM/SpTuXhP6TLeYwH9e0rNzz vdNi1w9psv&fallback_url=http://res.hufftos.com/.../audacity-win-2.0.2.exe  (14569d89219a5043eae6ebe2a8581806)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=KgOZAjBgPnjRH9lZAWRSKZiPOgjz/w F2Yn/1CEOYI8=&c=J1PPYNJjsrdJYw4hrHDASM6PqfY/32Cqxuu W4PtFRH4G0Pk7A2Rzk7s1OcpAIrGDtKs1INwdT2sC5pP/YOBYHqef18ii1tq78qK0EgYoqOyVNbQz01OMQOSBgMaBpoDLpb4Vh36IMnKyNx0du4SSQIwg5XUkq0Z8NcOQXGb tE=&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (aeda1e639177bca9b5fa3ed62fd14be8)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=RfA5FuH x/zP82VzoP4dkYXXWQ25IhQ1cq0shHVAhCY=&c=57kXYDEHyERcKq nNJCS5tTNr1Mddc1Jv4pgWiZwjSa81vnaUM8g8LhiSOnnUz8DJY 7jSLuNqGYHZnHj26IvgewGP5KWhBwnhqBAJ4SLOpYLpWqVfLdyIbK7wmhDQMT&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (7ae50688bd415e0e06b62fcaaceaddb6)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=Tyxka3dOcbGeA2aVK lM8QKC5Ejb2cpbVNAjdacdwK8=&c=PLywyRXrvQRBtaZ2ndkh8xEpIIKydiQvlqGI7SxVckRKyaDMMEklTYzEHgiIbqEb1U/Anz4WIgMO IJ6DL35/yuLHUtbEMOds0fvAr VC/YQREC8gphz0NcKFQ6mMkKo&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=7F/STbNPxVxwMbNCq5J i7VKIU4KMD8AZqHK4Yc1Hrs=&c=4VpBIXGLVtezEk3zjknn tF0nENEaWl0FhpSR6nabHpApEI5CA3dqd15N4GeX/xTH9tBHNgYrp7D1UDwgKuU1WpUm YWoRof bErWQvIYUR73Z4hNPiGpz/bmLaeXuuU&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (f0c96759bdbb5901dfbce6bccadf9da1)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=9Xi5yT4tdHU8DWWiOaqNkpdb4jd PehtlPmO SCNxoQ=&c=adLwPZCIutgBIyJ/McNQVIb9WKCesHtjRYh9gPqcKTg Q6JLgq9AyrLS77YG59c4nsN8QN9gUMIcA92eMf1j/gQ//y9jWu ecw37i5AJnRwkEZ1PjPSYh9hTfYrxNE&fallback_url=http://res.setauls.com/.../Firefox_Setup_21.0_fr.exe  (32cd0b6def608839f9c4f8ff1b0db4c5)

1 / 68      (PUP)
http://www.bundlescurrentfarm.com/c?x=W1oNxvGuPqxcb9rKOAtbvCeX9C0VtIx8iA89NXu9RCY=&c=lP 2iRDj9SUyO1ydms8YbKDLjH5sktiLeddnmuZwrf1Xw iJUHFuyMPxKwtI5Lf6VJW4zKJeR8q3ZQvCFyIjDD22hFfFXeLrKzvgyN/7KJwynhsSVj3P2EtVRNjwtciE&downloadAs=bf8d9c0e17cb77333c41c569b5c5e9c2.exe&fallback_url=http://files.gooofull.com/resources/binaries/2015/.../bf8d9c0e17cb77333c41c569b5c5e9c2.exe  (a5e945e9483bb7e6000f3e38dba4d0b5)

The following 36 files have been seen to comunicate with www.bundlescurrentfarm.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.