» www.contenthostingsign.com
Overview
Analysis
IPs Addresses (11)
Downloads (56)
Network (6)

www.contenthostingsign.com

Communigal Communication Ltd

Domain Information

The domain www.contenthostingsign.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Saturday, January 9, 2016

Expires date:

Monday, January 9, 2017

Updated date:

Saturday, January 9, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

contenthostingsign.com

Whois:

1 contenthostingsign.com record

Google Safe Browsing:

unwanted

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore (M), PUP.NewMedia.Installer.Installer (M), PUP.InstallCore.InstallerInternetprogram.Installer.Meta (M), PUP.InstallCore.Bundler (M)

100.00%

ESET NOD32

Win32/InstallCore.ACY.gen potentially unwanted application

11.76%

The domain www.contenthostingsign.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 19, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 19, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 19, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

January 28, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

January 28, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

January 28, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

January 28, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

January 28, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

January 28, 2016

File downloads found at URLs served by www.contenthostingsign.com.

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=l844uOl74dNidaMZHjbkjHMjtD0kNc9ZbQ2ySDvZquw=&c=qVHEfr3Yj3twU/gxC6WefLYa33id0EFVcSRGS8lvGsTcUrtV7wI2zDGodj2dvEAXwlQApgADnTOv7xSzDaWmYaDKboxtERr2rdSATNHw6OzzJ23xoOYQellWEu8d11xQ&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (11f59807004c874d9380407db5d29a5f)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=bJsLrkC6e5O7SCe39Tk48bNe4VvvpQBTOIWgQGF33o8=&c=CKeXT/f5S8RYpzSX2YN7pxpR7lT2QzIFcpFzC4/3VM543Fncrs0KI/NKjY X5TgWlR/Uem5/HkYmOpUqbgY7QoQ04NNDVZV S5KQZ3qU3H/Pc1Xdv9DJMEdG8wvhvHKOjcbkUR49aLC/E3KzuNpAhw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (11f59807004c874d9380407db5d29a5f)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=eWE3Iw4u4sWkgljbuIB8bMNFtxfEUyodeS5XwR/F3C4=&c=GKKYNkFma4LBIJAAgPp3TVXjX0AMN8NgtgfVFj6Q11gURwzX Zlb6FTgh1Q2Fjp0DRYcGiLyUKFB4oZzVwN1h2rd4TbHtcTfMYVNpydUQrkAyjQDwevLmmIzk7YUlzKd zwq60i1z7PcTcfSc0otlw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (d809f206e3fcf35ec34c030e4b1a42ae)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=I54Gc pTXSsFF7NZ5nyV49hIhjISETF/JsuZgf6Tq5c=&c=1SHbpLulMGZJt/4KAFuiyPPDt wLzQ yoaL3A6YjP2kvIB OP5fpn4h5DH6CqslrwfKsIeZHlMU6CtLncf 5ZYZZ8JIvsuvRdtyqi5d2Ag4gUvidtZvK5OEyd/On1Qr0P gUvpKi5BphbYwlN/dUkg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (d417c441ebb9caca7ff054f6b18ce18f)

2 / 68 (PUP)

http://www.contenthostingsign.com/c?x=qujBkloCw49c7pTjEuZ5rYbfrIMUZo2bSIS1tpY3PfM=&c=nOBGRpgdyYbBvrXEHxoBnDfgdxmBOkaOublMMfwda9jOxKts0IxP/pp 9/JbNe w7iLBqK5Z4yMibPmT91WgtRQwKiNp0u1eZrwk50VLD8DlryttfXP/7a/Nems1a9ak6p3v 53D8Eq0vybvhxeySg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=joGJAfBweYO9R1UdYkvuNFARoj4gAD l3wg9rYRn5Ck=&c=XHF0j6UYJ2T93ovJerjy0iV0Ff8vEKtWJXvl4LYpFDpwqEkmg18m2EZPk3xezCUSJouRWRqpJ4/fUEu9dPFQ7hXjO4ChHxBylehjbw11FA61I/PsYXYY0vFwdcQS YJxVLfzSIdYf3fz0O9GR8D92A==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (a546f59e648e5560bbb4d8d921f46636)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=0rYePddW7HxzUaWEu6Me2On74RQOh7zofw1XkmV6nJs=&c=asj1RsE5tQCVqottRjI9Z/bXSgJUfq4XKSoJ9M7j5rBxP8f5ftlIpJZVJ34u KQZ M6raAWa9rC/xeq/g1cCZmV2FpTJi/FeOMfaP8jdzfZ4HMX0PcSrnQNpwdYFMlM7VLBZTeMkwKPSe0fP6SV4VA==&downloadAs=GarenaGCA.exe&fallback_url=http://.../get.php?file=a4509f9a&m (setup.exe)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=/BlwbIAhcnDUewoRXiDr I9YTXon1jaW8L11Vv61dqI=&c=qReVhnjbM7fEv6yIcFAcTcORwdR9E h0TfUN35T9cwxML cWTWgBm3MxvLEG22q EF YbV5ZNma10JYwxOJP3NKB/ 1sS/SAF0hUue R9Y05O5 YeT8jvE7LgmNC7bHw4 UDLdKT2nu4V81U4XVe5w==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (808141c6ea76659c7484fd14fe4d2b92)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=akqiZpMCgghcnwpfyugQFnNojVgX0erf5VsSPXfwRDQ=&c=gqV3nu2KssfiJWLcxK9Jq8wb5lM h9QHGfthjkYHdg3ZhNiMl3Ls0 Yz7LrgiKhNj ToI9lUz/itd8eD8lQMSMQ15qodbKI0N/hkw12cvZ6MRDiDWsK71Zjqe Q9x7E4&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (11f59807004c874d9380407db5d29a5f)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=9nK0PrTCEA/5EEW09LP8C6b0cwZSbtmNhqRCbdsol78=&c=EMLn7KKqNnCWgF3m2en8cfJ1T8tTCT4MCIrj3t6hxOa72yPdBZiivC9PMFjeHCDVb3om0xYM509ifrcTrSdwpwld3zydL0qntDR3klmDSQ7QnmPYbE VJBrPDWpzsWQ4WwXDH3hwQzWeMBTQol7Qug==&downloadAs=The_Legend_of_Rymas.exe&fallback_url=http://.../setup1.19.exe (8cd877c3f5751e7427b22238c75ce983)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=C0TjJ24ct715rXZzD6ejLlzcn1D/MTW3UixSfBDsOwU=&c=ZD4zIi4c4IjPHUSWWWhP/PDfoFftkZ8cBuae jtWMNTUFY9H3JfnU9CZpfvwLuipgnpnMOJec6g3w5PVHGyu S7mLcX/1rg/2DFfZeQDvAG0W86ikikr35xvEmHY6Yelyusq0uWSuP8qeOoBSDeklw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (259d1dae07c6c7c1c23f00b9beb56e21)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=TVCGhOBnUI5KS3RO2zh0oHtlQyRxcDbFtrgseBQB91Y=&c=/ykz94XhHPlGVCi/i6KBhIiFKqHgalIayo86YtMAiKAyiKCn9Kl25hRLIPHSlCgM/gWcVilQUcDdcKbn6OFBouB6LFUeAf 5iMqCKyqsnQYhwQcdBfw2r5FOXfzbJx5CCKCgPenkPv4pH3L7QT2EwQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=gOSn8ErJtFoUay0XEmc8KsP4pueSbMwlcfDkrSdmKJU=&c=AlM0mKO/orEpw581nq52tRuPdM4b hNbBlPrtWUdlwsErajGEOUQW40wlsLPGp40lcIeLhltp9B8DE6TLoP zhIYhD0JQB5X1C23GITL2k1c7e3FvLk4/4O3AmiLl BNs8G4RZHQ1YTiO8d4NahpeQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Malware)

http://www.contenthostingsign.com/c?x=dXYxrmVr/qArSz83Y31QNGzS8R8ftGnDaVGJ6FhR6mY=&c=cfhD6ZhKZDlLGtgbv EgXxZ27o68OxgNEILp47AvxhAtsF47hwoLBGUr0SBxnfQtOQ1TDJQcOEc9nMc2Vej1cveUbrnFur3zwLOQhoIH0Ytk1wuDW iq5oxtQ09kHBzmojmova 2Ek EtjezRr5AYw==&downloadAs=rosetta_keygen.exe&fallback_url=http://.../setup1.19.exe (rosetta_keygen.vhdx)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=y5nyQIKiMPR5CSSQW9u/lbc4pyZri5qIbZoNH iSJPA=&c=nT5nGsgktZExQA ZSJZZan5Vj1Yzz5rRDK5koMhsD4Y 4Q9fuidtJAex bBNGvDbvGmqVGT8fcnbfPvCB/QW9bUBPB2NQxTU3l35zmI qoI d/bura0USMbDCrSg0esGwwrqfw4XdryMDSx342dBpA==&downloadAs=GTA_Vice_City_Storie.exe&fallback_url=http://.../setup1.19.exe (24b37e26dbf8ced5e7a89cca11b02d12)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=zICOgCpxnL8giKToKHspTSDzOgeOHbP5R96YDf71Z5M=&c=zDjWIQI5m3wl Yc IhdLMcL6RgDvPCnVXYqiLmcTfIaSl9MwTmctL9nBhGp8Oetc5A PvfXC5jtt/zSNWeH0rkx/txp WJeZ3SKtulfqLKgfZ70zmlAHDQbkTiIZ7rxo2oTbdKNzow5nQAqw0NDOpg==&downloadAs=DnD_5e_Players_Handb.exe&fallback_url=http://.../setup1.19.exe (29f93762fba5f76d2b9acaf6d11799c7)

2 / 68 (PUP)

http://www.contenthostingsign.com/c?x=0bT9fw7Mw1IXzklh3zMMpJZuGpbA0AaL8mQy6FZtXiQ=&c=c9Wz8c1FZWwCOAeIOa EOJAoLYflm4AoZAmENLS91aoBPMGyGcOdHLpkw2lShIB2zQ3DjBeN4SpXhezrvQ3UzvYdU2rBysHrAMNq wJpSAbGYS7DBxwWw409vNljfelGlkoQnCedADW0CaCwWHuMxw==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=aZHaCz8q/tzeV5kZJv4RjzB0c/qDv2OJ/ e0gY0j5ME=&c=CqDJdzyqbuzos1SCcAL8TYWimY6GmurtUL9cwfHa3mATWhld/J1JgG4he53aa7i7uuTJGff/z64Gf OoKteUVIIbO9MQLsfUpVyFi XOg7jgLo0lkiUqFdhhIhUMXK1pT2dMC1i9p3xSGavcgnH7yQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

2 / 68 (PUP)

http://www.contenthostingsign.com/c?x=G cgFR3TYekxjEYVU92HJSzdDrX4rfAFeV3VV2IJaK0=&c=8F7zDXlCXi8P6OUj uR8wbv3bpfTd6SXbAWbI10SMcLB0J5YSpBkKGGxWZwXZTFd4ZR0UEP4Wg8LpkAzn3V2AlEQGlNH2g/IJwVnpXo7Y2luWrpHvHkPeBKYKULo13s0MHLuZqoQKntA6Xo6l14x9w==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=ef6ESCYrnuMuGquidmZkfjaeWADR7/YDl5CAE9l2nEI=&c=N6kQR8horKIe6z1DBTru7H6OMoQcUHE9raCED q8m4Zs0lbjXOePtOb4qRZhOTY5HxN2TPL9Gdgq13gwsRzxw/4pP9pNS GrbhIQGlkLbsHUF6h7ZHIlUmMTQkn7klUk&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (d417c441ebb9caca7ff054f6b18ce18f)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=336Ev59nQqXD5Ti3HvUWaqycfOmnIi9ovZ5gL U2ECU=&c=h7vTHINSntjzk7A3xyW8nECTjUiwSJnHGCbcjYBZ8JtVfEsoF8 hEYdbGKQoBX3nJ8R5x9WFE a6y uhdvh2vYWgyLNhxhLnNaxx7AKi6nsR7y11eDLxYZo1lONyEoQKQmMaho7AhZbXfIFL/C9DiQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (11f59807004c874d9380407db5d29a5f)

2 / 68 (PUP)

http://www.contenthostingsign.com/c?x=CDCVdwZj6xogP8XxcU8jEUk2bHW9W3GywlcFweYSArk=&c=VLXJ ZyLx1DnW0vCzmZ4rBW57xwDa0OLQ8ornYo4pXsK/GttnBYUqsCluwi5AUA1cIqOwi0WsCs1z7kc8jOQiYHJqk5d Q6f0OqJS0SP9UCBDO0TZZS/rco7p4dbdB7qT8oQyOCzwbC6Yoo5CjOMYg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=h71q4Sb/AFcnwvCRJlk6wcnhcMCi20C4qtfxlPecVfw=&c=A15mQaHOnNNWOCPUH3HDXiBCA9fybo7pFiCRfuG1njOdcsroeaGt0XPxzKaFQwYrdGtmPvCVQBrQAFI ojNDqdUYCwByTaXJDRBolccE/1tbw7b5S90cCgqwdrT9p0Qqp4iqT4DQj0OVhStFAF5ung==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=/G7eO8WHREzgGtTCzsbpwUfm4mZrJNI4j/nt3jJIzaw=&c=sArpTXjEWGl9Y/FhhPQN/Ksoz2vzsWaDzY2E/rhPjNVg 0JG7a7T69mLQXeCn0oXdihJQEw7fXbAa/Zw4X/OUOBpWnDz0YZlriaaxfF7UOPJ6UiKs6sLo49QFRscjM54KTROC8fEvje1Bj5ivkivIQ==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=KpmGhPikBTWlHw0QMrgj3xCLoI/NEoFKTI9c2Z401oQ=&c=QEbtoHDEigF4Bp78wIHYpNUj bJGu9HkWK0JKZUdeuzsEifcP1tYFjrPOifk07HLa/09F2XH0jFfTReJNTx9buCGGX7ZDxqv8rjXKLVoid0ijcBiksnGGEjhnPr28sRaKQr134qFb7zOJHbWNzD ng==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=yahipq4LkBBb8ONlxWqlw9Sdl0s0InWHilgx0P5XKx4=&c=mDvyfukGFgfqMWA3Yda6N9qYwguntv24gD3CQ7UMXhlzRiYpoYghjhVnAejvouXq8hBT4roVJ45s716EnNvPWkKv6kAXd3azdXv2x4Gk7EOnNdIPgrJS9Y4Gcp5CCxnDIvX5sDpT229IdYxTmvQyng==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (e66e5c6bf9316768334634b6f01cf938)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=YrCmXgcGk4RDl4gAYq1zpiyVZSWqa pbV2LYMVRZF8c=&c=XCK39fiI5mRcDpby2vBfrYstBwngrGg6dwXj03BH6Ng7o6zl7kwZmawRZ4/22lawB 4/MeeRja7MYs8VKnTn8gA OuO6DJh6qKGmE4avtaTc6QrVD4fzYKRd fxP2Wqc6Ji1HMgkApk36gVwTXHc/w==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

2 / 68 (PUP)

http://www.contenthostingsign.com/c?x=tcf7Qfj6xpGnnOHQf4KaM467veEzcIpftQFuHM0nFX0=&c=t2WFv0vCOIsEs07 pPXWDa6D09ESYbNv/mmVbBA0HAk6rAn2XNgRxcJvuYUsk XAmlNwSXmfLWt5g/ahJi8R8qyo 6KDerwzW7dWgCokb3j2kmaaYNVjr67cFXXtt3pOpGxi5w4GlLRMcUWj71bvXg==&downloadAs=wps-pin-3.exe&fallback_url=http://.../setup1.19.exe (icreinstall_wps-pin-3.exe)

1 / 68 (PUP)

http://www.contenthostingsign.com/c?x=iRRic5V7oxWPYAZzUJmFRjL/9f6OG5Rr6lijxbE4//Y=&c=is/qhZZGRa3yq2LXKd1Lb/YaBUSnGIYZzJHX4Zt1brV70f1/YCaCoMT25x9rOYb47lnilfyu8ITEAE0Kxk YgmENMCtkmqSUxb8dC4EO1LdZN5UOAzSkF4Bhgm1ViJaNIVq2egMGez2b3B3p1P/qEg==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (1d5f18ca8f18c448469f1f3957632f69)

1 / 68 (Adware)

http://www.contenthostingsign.com/c?x=gMRn7vRSWZoFClwUmVWVJWC54gVCObyi5k3SjB4NezY=&c=bQV/i1vVeyTBuvtD1Yn6qfKE65ALTsbi3lScN jzpOL66kQ1HEcpSiAZm28UdExGT1g1zTnJy 4JyLSQ1DgDJ2XYX1OD0DyWIx01ke/6m0ZCGO4J6PWCH/EnqUNG5DWqggsN/MZox//i9MnPukSLxA==&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (icreinstall_setup.exe)

Latest 30 of 56 download URLs

The following 6 files have been seen to comunicate with www.contenthostingsign.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.