home

www.contentcleanpackage.com

Communigal Communication Ltd

Domain Information

The domain www.contentcleanpackage.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentcleanpackage.com

Whois:
1 contentcleanpackage.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.installCore (M), PUP.InstallCore.Bundler (M), PUP.InstallCore (M), PUP.InstallCore.11 (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.FC (M)
97.56%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.44%

F-Secure
Application:W32/Generic.70053c248f!Online
2.44%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
2.44%

The domain www.contentcleanpackage.com has been seen to resolve to the following 21 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 17, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 23, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 23, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 28, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 28, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 28, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 28, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.contentcleanpackage.com.

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=DmijYf5sJjGjmtzj/BDPaBzHe9IT vvEHBCPPtcVMwI=&c=k4fOjd9CDtW89uB/WfxjNnDFYmgcpVfi1jUhEqR9vb/VjEqW2UAHZE1zE6x7rbRQd8f9xFOfW//y12hD4LTRer/EisZk53 YQUuUyJ1IW2wxErPq0hpa9 UMBOKBA6dG&fallback_url=http://download.anvisoft.com/.../winfixtool.exe&downloadAs=Windows-Update-Downloader-62491-dp.exe  (9dc88553c669cc32cc795438a18ea832)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=GYwZoUJH f/7ME1p2MvcJQFP2C16qgrAjiTyl/oTFjQ=&c=OX4FEq3/9u4XEfUw NU4o3A1zAg7N r3BR2Mvc/stbtaVFauAl 9oFOTh9O/DnL2lijDpsPRFDI3aV8tUQMrPkjqWPK QEa7rjxZ UdGItu5CGgXgwZgHhOq1 gR77PW&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=H4PpOHzUhO47KMMJr0Digw G1T6xnf8yVgMoMj3Keu4=&c=BGihUPQFCNSH1tkyhUr0iLsPgigUwvHVfU5yY1MGzaoKJOX6RXagfPTJbaEJA3UiS7xLL7v2IXwnJcNM0gu9UAn1tKXYmSiC/GaVY/e 3ZXYiy639IjdB/ae3HgL6HQu&fallback_url=http://.../ccsetup514.exe&downloadAs=CCleaner-13061-dp.exe  (e05882427cfbcb84e71fe619da78c654)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=fIEivO018rdJGkOvfH3bpmVdZL62pnDoTrpP3aT X4I=&c=8tX0bak6t9wyGeINLEoTyDP7nt8E3NYhUEdYQjrJEAy1gp4ehDczHEBnnN7MP3yp9CXj/jUBAgeO8141atO00dvSplo9JRj8Y6gz/iTGGpxHj4k0kIjSvDoDupDzeK7Q&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=A V9HM/aQDkxnXlGq8sb2zWQ3lAYV2SCvrv4I5bZr4E=&c=vhTna7mNLypjam3AytvMB3vhu56hCH6cnv594Ku1Ccy2YFryjW0gsGnrl0Phegead8/7EK5541iaUFw0bE0BI3FhQW1gWlYFa85RRC5l1uUaaFgUrJmBwwlz aGomeSG&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=1YEdSuha4Nd2JxdWFOnA4AmfHupKv45WLwTBxW3bA7I=&c=5bWMEy90LCz2jgHCzqHOOCQf1muL3a YTzN0XudHKoavLrwpF8 k49Zlflll0SSOqTJ1PQDFhsZhYBA1s2f2vRQHfUr0HMAQSUZOiD0 7YklahP/CO50wFryrCYP6TYC&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=F1e7y1cbaRhwkUQ/vac9kWqblFc65p0sf9TsocSeFbc=&c=36NoV6q0XF2kMfM0ot3C97MtvJxXeNTzLwceNaIG0wkX/NivP9myoIpLKl8/T3aop9PwwtSbSX7h5dlgy BEbIu7 iFpNZDOOKZAZwVfc3oQuS4CQDFAf8NyBHEi5eVR&fallback_url=http://.../rcsetup152.exe&downloadAs=Recuva-13044-dp.exe  (cc80f45ad11fa3b2ae8471bd91125af7)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=QhNVb90pzbmdi7Yp4s0JzxIN/1PshQ4KqiwYRAmn9/8=&c=9xKt4M/KcP7U2gkHN0zv23a7Vpk4mQhctvpiI97jzFQ/tOovvKpeWtvVU8HGKSASftKLd0jbL9Bro1tacOLKkcn33WoNfTEQNU93OyoqdlWnBsgPZXjcAqsKVMpbeYYF&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (2fd65ee1cfe95b33947543cebc8188bf)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=iDn/tZSBszZiC0AqucM1bCL9gYzqGkvxVJIYc//nMys=&c=Zznnm6JCcnJMub6mOXpLriBMYYFKwH4sW0BSgl9nAMYXQIakPqcZRdJTPXUftd9obzoO/bO9uF/uiPMoCb9GbEm0PDWIykKm8m h18AOZnWlGj9nKZSDoTdCMT/JreBK&fallback_url=http://www.studio-v5.com/.../lm30.exe&downloadAs=Logo-Maker-12346-dp.exe  (5bb7d08c1b5911b49813c44774de8bf1)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=ZiKBjYTkT5KgVP3Nes9HorzGSveO44gLJSRf9qyqMHo=&c=HoFrnodJijUDAYL9gEgWPCHkePw59FTB3vljRy2F2XmYjq5Zmzt88YE1Z6vN0oRsYFJfCratyAtHtCrUohqFyjVQUnfFdBqdSJkoDRWJYy/XV1VqU2VxDoO7WovHd5RS&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (PUP)
http://www.contentcleanpackage.com/c?x=SnY4sux1NNMY1Y3Wz1ax/httPqJQFerVisIQB7rIjvY=&c=qG0JGZwGvAV1h7cq9U/yhlS0NoIeA/dyBOSo/Wkxr8U 7b5vdQMnFnCA3ayvlovhoTlnBlmnEZ3Gurjsud8G4dvFfvnkov4JOtseJfiqSw6MFZvk3XvMDM xci1uWGrQ&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win32/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (3cbdf37fdaf6c6a7abe9869d9e8ef448)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=ANjwCLWCYhoEmfZ4eJeHWlJM6vFfgOvDwPJeUN7kuTE=&c=27JcSxeMXMTGhKEz5 t4PFGVoTVpvam7Sv5tXcD4N3GLczAKEmSmDkSlzuNXMt 3Bt2BjWU6Ou RCmAeRDt2gOsegeDsf/rYNoVmLRntp/VohDAXOJh/OoRh9xdvYISZ&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (80ec7eaf5746995b6f54f5edbb6cf9a9)

2 / 68      (PUP)
http://www.contentcleanpackage.com/c?x=mAjSgbElMjhcw9RU7sLO6yLhudAmMdAFoxG4X52d0vo=&c=3vj2xN3zkRFCnqzEIf fOBjaHCT8GA3pIF/GCBoEni5oxzTRaALNSIw4U3YYeKP7XVcadkcYJNU3zFmCGEL2IV O5UoMssjKLOIDLBOLa oUnbk0Q5dXLKfD7ynuYqj6&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (bbd34dbd5d8554d547e540adf5b11469)

1 / 68      (PUP)
http://www.contentcleanpackage.com/c?x=rpFqvCYN8Qp21b63F83jBt9QPIK2Ci8m/ dl 8IfkNU=&c=K0zKoogXHEOo65jWdiek61dE/52QQC//noNOxYDqdCsAI9IuyZUAb1/LkaaW1C7GXzji LbJxAtgg6SoM3qPGPGAY8zDddg3pmLFZZZx Qemv1 ucFKWrrjOF31yoTho&fallback_url=http://cdn2-downloads.ableton.com/channels/.../ableton_live_trial_9.6_64.zip&downloadAs=Ableton-Live-64090-dp.exe  (221abdda06cd8e709374bc0696481456)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=OXLtcq2jTHU9awCPWJLhtokHqTm/zNDZfUIIAurjbwM=&c=9EjYAXPjaYyYTmRWhPGs/wiX1yKdbqJeQ VpB WEifEPoXBuQZ/rPQIN 9gmq/OFZVTjri3yMytOQwFtR nZIpOsPBHxEdWEgnG5v1K3IphI/DCIbJa0pMJx5W1PpGtw&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (101019fb989880cd1f9d9aa693e25242)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=cqLVheN0NnrzG8vrppg6UFmDDq03yIyarYOMdGR6yvw=&c=FBbPwHxxFTE/IvRz3ZV2qnQrUagfEYixi7zzalrODX3/WkwvVXljHs2dlvFjsw7hFuw7Cyu6IK3IWvaBu6/9XZRPaN7qETi75p9 NTdmyYaLod3BUQ/749MoAUSRxs v&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (d3cfecb65c271809a19c899789c4795b)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=oZraZvynZXWB8YkHJ8C9Cp 7U8R1usSJrZ2Mhy5T/oQ=&c=aGqHTFljQ5YtirR2J7x3Mr5yThzImVtk 6OSzLqnJaoCJvVUhrssmtVYeWBDb814e5Wl4gFL eeG/PxH37HzYmJeEgnBpEJGFHRhh xUHVN59PxiTRyjzNpGu8t/jek6&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win64/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (c3c1402babdbd680a5d0bb94e4dc80d6)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=IvaSSPHDbEcx YkHtvSsTUrtMiJwd9BUyKVK/l6n3hw=&c=m oTHlTJCnOSDAGCyWvE8 fdoIlU/CHdqTIS3 2oAogAsziktFtxHRBoxdp7o 9Y 2mOxQ36b8MtGpSG40S8pD4X9groDAO369Z5IbcEaaIPEcVczH/lNsJZ6Oj5TMmE&fallback_url=http://www.7-zip.org/.../7z1514-x64.exe&downloadAs=7Zip-12559-dp.exe  (e7b54f1b17cc37d35502eb78bc4a4237)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=U1fAlifhR5gNqjQ12idiSCF7eeNMliNy38W9F3pSQFI=&c=SqzjW aD7hmmAJfE meNDir2zqB09PGUSzO3Om4zix8NfsdDjdj IOUbUE2En1TAd2KZIVdfuU4O8de/0F6o8tt15lgngxTbxm5CeczkIsQzjLK7FVLZGBIdzWbQ6aT2&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.1/win32/.../Firefox Setup 44.0.1.exe&downloadAs=Firefox-13108-dp.exe  (e7fd10117175f15d0a77940ca2c8308f)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=v/ucWeKXPBwKaJ atgFesJj8c jwsQv8EvzM7fShznc=&c=/PjbhUD0AkPydbDE1Y6zfUW7qEFnOg1n7ozWO9RlhuojAj9JcCwuz0cwKF0LT3FmzGbOQh y6GSdQ 5v1UioPYUkdEt8YNPZzIz/6 oGjFWuXgawmLMuONtSKiJhx ye&fallback_url=http://vorboss.dl.sourceforge.net/project/aresgalaxy/aresgalaxy/.../aresregular238_installer.exe&downloadAs=Ares-12480-dp.exe  (07c866a8ba22c0f88d56af4481180224)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=eeOJrqxJthiF9Ch/Pp0MpjI3fM1G8NTWhTIwVKrAA7Y=&c=LXK rrd1famdgjjWyzJcUdKEY3u7u1/wPCTuER5nIJS3yPjw4 qyYduxZYsbRSrWi 8//UrRaTC5Ch/TIm8BJBWin63ffqfRfZkL78ijag6XKThYacvv4JLY/oKByUpN&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (80ec7eaf5746995b6f54f5edbb6cf9a9)

1 / 68      (PUP)
http://www.contentcleanpackage.com/c?x=22lDNlPX7aumNJrA7nNTgreV/z7cjAUbYXZxQHB2rbc=&c=I5BzaT17D7N x/Zk9qmkXGKzDR3PlWTtkd56dexl9ff/ZthXeNHWMEf33MMy23IypFN3aQAKAP9peD374RuRG4Z6laTygci 9PBfHDnH2b8S9pcQmZNboSsW6lpPHKqb&fallback_url=http://storage.dobreprogramy.pl/.../HijackThis_2.0.4.exe&downloadAs=HijackThis-12030-dp.exe  (11c400bd35d74271d36dda0d19e41c6d)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=vLWZwUtv8VWmN43xBb5bNiyJPLsJCh1UqIc4zC0gjXo=&c=7kpaHyL LobP7AAVR3MlXoJGlF0U/gIzm2VkbRj9ZhUyKAf16taP5UzYHEtb0R1xm0lDKY7tHqVh5rS98oQrxwe42BEnbAR7e 1vSPfCzYXE9nZo1o455SjM9dBRGvJU&fallback_url=http://posejdon.wpk.p.lodz.pl/~pawian/.../gtuner.zip&downloadAs=Tuner-Gitarowy-11537-dp.exe  (431bc325b58ee249d53d669d8ec11b5f)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=0oDVeUHtxAafOaR97QaLQW6nCHIAbQxA9pRBkobDwxo=&c=bahc0as2p72cQlGRq7V2QOq8TbFY tuDhtTZ98pEYjopRqKoAOiaepVOgx6O6gEwsxSX2lGQNWYmJqtS1IEQlOd1EzhWNrB SihFbRUqkm9GStkX3gIUtONJYixRuXcA&fallback_url=http://storage.dobreprogramy.pl/.../spring_publisher5.msi&downloadAs=SpringPublisher-33856-dp.exe  (0adfe91d2e016c9a1a3ebc536ee99d2a)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=X836em8sV 32P2VaJ6h7gdSVD8hMB7kHgRJhr2E4z2Y=&c=nhKgaKAhT0o3pDs2gktkYRF4dBbJK9YT9t 2q8l1Gfgl2rEj0wqdARnOsRHBJAFoCL8N7EgFgFa8ka/IGZWeMw9dil6Y2AtuAPuCiAk3bio7iVnpwIPVfhNmdLfKbMqy&fallback_url=http://storage.dobreprogramy.pl/.../VNC-5.3.0-Windows.exe&downloadAs=VNC-12414-dp.exe  (f706b015c48365a187bc4c5f7d279d87)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=GNmPUeha/3Gye/Mzk h3VG9MDvg3i2bSEaNasGfDXMo=&c=Kn59M2R1iConQMJQOoSM6jGMbyDOJAfnVidBUHbnM8XqIZNRqlYIY7QgEuBd0tbTSDAaHONsN4/239hZob BxXlaYF1yWyo77SJrdAeKJMowoJ UIKRjM/1BZD7xUo7s&fallback_url=http://www.irfanview.net/.../irfanview_lang_polski.exe&downloadAs=IrfanView-Spolszczenie-12933-dp.exe  (0de8ab09ee5d99cf3bf09337236b0024)

2 / 68      (false positives)
http://www.contentcleanpackage.com/c?x=OObPHGAKBTZHBJyPwP7sMQvjnvirLov7PPo0ze7xNTg=&c=L Zljg5kNUq8SQU83ox7CqQnoBSpbTZ4r50jDaEDqteAlmcm7iF50 IzjfHT0wszj4BVN08 gOx3aEJy2h3QMNXbk31rXFkEJ4xQGDJDxdReWozYGMgceBN8T7l/p0/w&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=56AINNgwO8UKLLCM QnGndI2fsWIyqHjat V7a7Df4o=&c=oQRsSWMf2S AvLl/bzSsL7NdevYmEp2kn5wF202EFOCLf4dylM4cNF6vMkt2d75riIfrCVNhtD56g0Ydela0bFzbr8t NFTUR01mTKI4LO5Piq d qPep/SeZR n8RvV&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (0eafb70921d1e6c81a498166fc09c91d)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=mGq65lfNi4Lxm0Tj9wxabE94PQgWqIi0CAhjSze1xPc=&c=FQjN1wmuG2V5ML8g6E/GvSrtKqVUZ5QVoB8o2c5b5hRlf4ZOrQYFJwAdUwTU6mWkVIfuQ9Rdr53OtbsCVN5a4wSpt9OTPldgn3pnQY6xRvgBql49WDaU2sulzwRWs8dn&fallback_url=http://.../iplasetup.exe&downloadAs=ipla-13125-dp.exe  (09142f609b644fa0c98be3f692604fbf)

1 / 68      (Adware)
http://www.contentcleanpackage.com/c?x=acaLH7nG/JYCD2pcu0wDAaa3rhZU48NeGEpdimT3ptQ=&c=QsihFbEi9LBhCfLKpPGbsgvqBCXGu0J2ApnrXOy5Hr46VMcCek901onp7L3nSK0aB1jAMphYCqFfqqK8V/aMMFbUEebuFx5AdsKwjvXCf9rC3wyMFvDd1JlNnJvaGlcA&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/thunderbird/releases/38.5.1/win32/.../Thunderbird Setup 38.5.1.exe&downloadAs=Mozilla-Thunderbird-13298-dp.exe  (9f1771806b76d4a10446e48da17ab834)

 
Latest 30 of 189 download URLs

The following 50 files have been seen to comunicate with www.contentcleanpackage.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.