home

www.headhostgrab.com

Communigal Communication Ltd

Domain Information

The domain www.headhostgrab.com registered by Communigal Communication Ltd was initially registered in March of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, March 12, 2016

Expires date:
Sunday, March 12, 2017

Updated date:
Saturday, March 12, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
headhostgrab.com

Whois:
1 headhostgrab.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.EST (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.FC (M)
100.00%

ESET NOD32
Win32/InstallCore.ACP.gen potentially unwanted application
2.00%

The domain www.headhostgrab.com has been seen to resolve to the following 22 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 2, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
September 2, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 20, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 20, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 29, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 22, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 22, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 22, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 17, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

File downloads found at URLs served by www.headhostgrab.com.

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=n1iAtGPCQbpRtGjh3kMfd68/o3MGTWnr2eZqC1AvMOk=&c=CvJocYDCi31wjtUwcdcW40wCRagctBFAl2jhLgQk52fOhZZInw011mwqz9rHT9kWbM69B3u5pSFT88yG 1bmcgqRj6Fau2PYfX9ROJyqKwXx1pFsh6 mUhOqm8 6K4Ek&fallback_url=http://storage.dobreprogramy.pl/.../MaluchSim_v040_Setup(dobreprogramy.pl).exe&downloadAs=MaluchSim-0.40-Maluch-Race-13691-dp.exe  (06622a39cb4eab819f81b58136b0fab8)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=13j9XqDcn4jHs7UTcjldT1 sTJfoaDE/7D Gb8912ps=&c=2AxM0w BIxWOSLwP4fKJwLo1 bJ44GYnY4qkuBQpW4tMP6GZKkSnDwavK WzuXqKdvJRazNLI3fptj8ITBQ3ln8rHiVTdkSvBzushqe1s9TEzgl1QJ5dHqS0VKc7wTlF&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1201_Mega.exe&downloadAs=KLite-Mega-Codec-Pack-18588-dp.exe  (02d2af871a41d2390ef2e26a009844bb)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=9 bNkSQ/GZTbayGv147PRoIKCWLvQWP6uFgfp6XARGA=&c=xjx87IsylDc2PtPMtXjuAY3SfvGVCwD4MpKa9p768WgcQOYDRtXYSFeSXymvzuEaaHGNRQBNRnMrPHZbGapDzHcZH5UHWnus63UomUKfmlZZRiaUyzu gIHvaEQBMAOE&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (d61d66795818a8ad3117a64a36c7dcaf)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=xPldwILbcAUjjGInE5PhTLpjaZ 4ftiKHVg9ZpH8K60=&c= H8gcjT BqM/grS5JV60EQVD2Rp3KrNGIqoM4dpiUpT3yvIBxDiwMnsNNLKGFzDZJawkLIfoQVGA81QSBrkmJaeYyAQZkJqA/ baz9P7ruv9auBTWLzZ2SElHohvP/hV&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.9.install.zip&downloadAs=Paint.NET-12332-dp.exe  (9a1612d502704ec19602b6a05e1a7ce5)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=X6NEZbx1F2DdnISndwxroRntvH4TMoEYpo4vz1q5lfU=&c=W/RmqniqrcbAu9WwvliWSXPxjrEe9ygfUu0mo6hC/C7X 8Vkpf83A2ZeIFea4Oi4uCm/hXrh1zBoNhmLpn9wF1acK461RIa/Lp3awYgvzMRb1XjTPqX e9HWE6GEJ7wk&fallback_url=http://cdn.download.comodo.com/.../dragonsetup.exe&downloadAs=Comodo-Dragon-Internet-Browser-16593-dp.exe  (7ae26ab6b788a605a3e34aea6495bed1)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=NwobH8zX/2x/M3lEc/pAkzapfRQWDTX65EMyAsENAq0=&c=bQvHE2O6OEW15LJHIEVtsWZQM09e9a y2rzi zPU4mfuCQQzBO6lNjag8eMVnvemJPB3xo0pst/bTk 8dNcmeMMSiwgrGOByOBIZy64/3Vdqo Z/7tDH xNFJS4gaYDe&fallback_url=http://download.microsoft.com/download/8/4/A/.../directx_Jun2010_redist.exe&downloadAs=DirectX-12667-dp.exe  (4c561ea0c205b27ef91912bc32ff3dcd)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x= uTcCm6nhvKrDGQkkcbTDmYN4aSqWoW5zFrXJd3hMls=&c=SBTC9BV67Xa90AcRHk5638VYQwqVEvwMnYXV4R3ouOXIvcuzq7DRwXodhWfAamPO0QTut8Ek4lOEOR7ZMv7NgF0qMUV5ahy8qekusVA 7YI2WFi9viM3SXsQaAH4dw5c&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (b540522696a0467d5f19a4b5e4ad1ce5)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=GlU20TZIeW4nvV0KIOj5k8Yvo GOmAOYcLdbY6EkCcg=&c=zhMMpE9/5i 4waiteHQV6YSTppg25htLuD48PdTQYMjFkIzD1YXpn81TArQdJBbcz511AAtciPd53X6 mUxuwNQFCGACaMJ04QK2n2r0ytR3zDbs/QxPDyFxVP3wN/rF&fallback_url=http://dl.acdsystems.com/acdsee-video-studio/.../acdsee-video-studio.exe&downloadAs=ACDSee-Video-Studio-58840-dp.exe  (370c758d55bfc607982ac78129b26cbf)

1 / 68      (Malware)
http://www.headhostgrab.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  (free-studio-12679-dp.zip)

1 / 68      (Malware)
http://www.headhostgrab.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  (adobe-reader-12627-dp.zip)

1 / 68      (Malware)
http://www.headhostgrab.com/WVl6OTRQVkJRWTFKV2N6UlZlVWR2ZUU1U1ZESktjamxRUW1GaVlucHFXa2RxTjNOeVRteHlUMVZLTVU5dVZrMGxNMFFtWXoxd1JEUTNVR1JoV0hSWk5VRnlOSE5KZEZabFR6UlRTREpYU210cU1YSkVPVGhLUXpKa1RqTmlORUZoZGs5MmFtWTJjVGQxU1d0NVkyOWFjRGxtUmtzbE1rSldiVmxTZVhNeVRHMUVaalp5ZERZMVlXdzRVWE5YUVRGVGVWUjRWWEpWYXpsNlNGRnVNM00wYVVaWU5qQlpOR3RwVld0cFowOXlVRUV3U0RZbE1rWm9jV2dtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTJFbE1tWWxNbVprYjNkdWJHOWhaQzUxWTNkbFlpNWpiMjBsTW1abWFXeGxjeVV5WmxWRFFuSnZkM05sY2lVeVptVnVMWFZ6SlRKbU16VTBKVEptVlVOQ2NtOTNjMlZ5WDFZMUxqVXVPVGt6Tmk0eE1qTXhYM2RwYm1SdmQzTmZjR1l4TURGZktFSjFhV3hrTVRZd01USTNNVFlwTG1WNFpTWmtiM2R1Ykc5aFpFRnpQVlZETFVKeWIzZHpaWEl0TmpJeU5UUXRaSEF1WlhobA==  (uc-browser-62254-dp.zip)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=3eaXO67EX1cQuK23OlSGMuPC5GTsh7AQiOpG2jrs4ik=&c=w2s RLkYshUeo3vQE/FZbo5gZIws6ZVtv0JPKAK4BR6hpDVV iA4P0UVUwGHOOIR6XNpQw4BlA4GcM/66cG6P3yVQbusBApW5cSDEi1hodMnk9gjpQrd2aodVFCtOALs&fallback_url=http://downloads.videosoftdev.com/.../video_editor.exe&downloadAs=VSDC-Free-Video-Editor-39919-dp.exe  (4384c99aa9ea5a99fdf7f274a815a0d9)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=ZYzBuiu38NDaGVYVXP3A8SsrdbsEcwSJOYo7jIKYonA=&c=hElwoInfWxjI6gATYfiOV YNXFi2vYKM tn3CYB4WaXRv878JE9h021RSJkxgxqBSWShiMS58RUu1oLh0VT5Gw8ifXUSsBQT9P8MPVGrYhmB9n9Mv/nWs58/FkPFjg3O&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (3b31585e800f088e19433786c1866d54)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=BmyIkE7/j15J2zy98ttAHZM6vi9UPFnV3IJHa/IxYbM=&c=cQvvlgCycayING4h8hpQXXqZmNFW1mdN1fWYl2H7B/60kIN4eNugs62MOhlVSAtI7IRoJtN0oRWvmatXIeynym326HnfXoDLltDERVo0Vg0dTPWZS/DfjH7FPWarqsvm&fallback_url=http://download.microsoft.com/download/e/a/9/.../ExcelViewer.exe&downloadAs=Excel-Viewer-12201-dp.exe  (55b79ca53a30171734562f08cafbfa10)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=Ld/JCBEfTpK23iD5qrFZCcF2TuXpO rGajOcaY6tvAs=&c=o5GcgK8BbGkXH7Ut1e74qTJ2HAF7CJhC6aNEgYWszY2wh6ihL7v7gLBei4sajo4hIpfMwj0aQMC2ywc7j0L8Oq9QCqtHLz6sLw06u2AUMZ7DpbfAsUzcatQlCb2 hn0z&fallback_url=http://dl.4players.de/ts/releases/.../TeamSpeak3-Client-win64-3.0.18.2.exe&downloadAs=TeamSpeak-46554-dp.exe  (acb5a4bdfa1b8e8bed9c0a6eef092e62)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=RC9401yzT YQ1ggUk2OMhiAv7kZ0J61hYeEBVGVGw5U=&c=B7W4oSVv/iqWka69yDgVqqkYsVmUJ8Qz6cWogsAzTK0HA3B EpwUIOXCrgh28C7XEi85hzgrkLPoRRZs/WBzTArcYzGr/TBK/gUg8Pj0RhUzAiAyU86VHl5ZppEmOv2y&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (adb460cf076e94f97a1bda714bcd2a77)

1 / 68      (Malware)
http://www.headhostgrab.com/WVl6OTRQVWRvVkVOQ1NETTJlVTF5YzBGaWFWUTVlRXBoTVdJM1duTTRiR0pGTVhWeU1YbHdUa2REVmtwa1ZIY2xNMFFtWXowMlVUSlZia2hFZWpWa1FrWlhaamRhVkhsbmJsbDVSM1YwYjFKeFlVRjROMjVJTnpaM1JHc3laMlY0T0hWcE5VWklNRzlPYmtWNWRFSTNXV3hXZG1oVmJqUkVUREJJUjNWa1IwMVZVVlJ6VVRSUk1HUmpXR3gwTVRWTFVHdHhUakIxU1VkbWVXNVNaMWhCUjFGM2FVcGpPVkkxTlVoc1dYcHNXSFZaUVdacmN5Wm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpZU1V5WmlVeVpuTjBiM0poWjJVdVpHOWljbVZ3Y205bmNtRnRlUzV3YkNVeVptMTFiSFJwYldWa2FXRWxNbVpFVkV4cGRHVkpibk4wWVd4c1pYSXVaWGhsSm1SdmQyNXNiMkZrUVhNOVJFRkZUVTlPTFZSdmIyeHpMVXhwZEdVdE1USTNNRGd0WkhBdVpYaGw=  (daemon-tools-lite-12708-dp.zip)

1 / 68      (Malware)
http://www.headhostgrab.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  (winrar-12398-dp.zip)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=Rf 8FKVLrMmuSdxOdx VoiMVgZR1fy7jcIVhCSh1mXg=&c=jCvoTWCtn05IVWAvWHXO39ND8DLaDhn2tppvvo08HsyzbKv9H8ek6yxLvchYSRt0usArhey/nulCEKhhclwnHN wCcBTni e9ekjgSVXcaz5BQ4LQKClIlIa6YLNDp4u&fallback_url=http://download.freemake.net/.../FreemakeVideoConverterFull.exe&downloadAs=Freemake-Video-Converter-20113-dp.exe  (755e971dd0e0fed24f72166dcea462ef)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=sqHVf9qr65fxGBuE/2MgZVnZ5lCubIa6UbO1zm7 AWI=&c=ihgfby2bgMo 93txaWvIlwYJT3dw3eZPLCT8TR/v9hLBHJQtsSeDG3k9i/2ec20EgQq5bF4LOPxiPmraYunSRiKHpSU8ggCgWQHlEP9C33rWLdvkQuie7AbRGUhDOI6k&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (icreinstall_windows-movie-maker-11546-dp.exe)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=Mb6bzzyFpcQGhTGq8uHKtANNw6jthEeYLbcNnm9Zfqg=&c=MaYcxDurfNbnAcom A47WUzUWnV0QS HX7CDKdC5uWgd3xcOKDgOFNXkiMoe3O519tUn6GuYwDfSvUGe2 VoqMFMpm2i9vGpYx0acl3saZfAhRRhJO4bNV4rml1IRbjX&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (b696550c95079b9a49421f4b71fbf5bf)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=EeEGDgHSe40AMSXZKePH8XdMbQlfn5VYNQcrYu nmn8=&c=nh1PAsQlK/jTaFW06q9Jvv5sn0ViNexPLImAaZ rdzrqRPb7p5VlF6evp cFrneXyr5s zlybZQgH/45i0iVhtXelWHN33HlGANS31QF1aC4mcgDMayjV31 R3oTmnUx&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (fb97be59984d3bae68698652f981fe27)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=naiL9rdqMAytT7iT2/ hQYxZ6wmTfxinG0Gszsm/hns=&c=6nJVO7ysQyGfMHeR9rYbdHofJSuqQo1f7OFaui3L77j TjYajsV/FxIrx5ZwOpVaohgecd3q8iuFl5lY9hpp3sM6NuniZwfW661HOyPTB792LU9eefOtXzMxfdtmdH7B&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (302af354e104f54fdcf0666952e3adf6)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=tnrUK/q 024YAFpnru9u663LgGWDHbCDV4wFwbq9FQQ=&c=venYwmwB2VMkn/d822UlynCSzIAiHLYo39Sb8Nwu/0pK2 pwtaw1OjIdp4dey5/cBUK5y4rNkBv4B nMh/UqM6NiZUPfF/FjbprXaljzPg4rkhtJDtmM09N8fww34la&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.2/.../vlc-2.2.2-win64.exe&downloadAs=VLC-media-player-13060-dp.exe  (910ebd9ee58c1eb29917100af923f703)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=ZedwtuW6N0tH5FZlpZsz7mB8qgzdl2MOjPcbG1DrP k=&c=Te1Kr4B46I78 wl6iIZpGhxAKeuHDQV/0cFMFOH9FWvhP/g3sSyLY5QR SY9qHbZlmFiSqkYvhrGpFa4TvixxEHruyS1vmmw7/LusHOM4Mi0PCSdZKdiJQri99uXrppR&fallback_url=http://storage.dobreprogramy.pl/.../mp3DC222.exe&downloadAs=mp3DirectCut-22334-dp.exe  (8b81ebabcfd7a624ba448e6b7bc9fa37)

1 / 68      (Adware)
http://www.headhostgrab.com/c?x=kFRuLIQkCX8ptaq9fpRnQfi/8SACc6E4I eZFjs4D6Q=&c=FZ4PMT2jjcrT0/krbjd8Yg/5g0NUmlZzKO6DM397nkO6x0cyOejHw HpfV VJ9q33aYwnqguNrNLwBdcrBK16 J6efkC8FQeJlTcubj0qIpxsQI4ubOeLGlJNOI1f1YZ&fallback_url=http://www.glorylogic.com/.../isoworkshop.exe&downloadAs=ISO-Workshop-23534-dp.exe  (7084bd92b9851f89715a821a66be992b)

1 / 68      (PUP)
http://www.headhostgrab.com/c?x=kH4 x5z3/39YkPzfXBcrQRICkzhGMe X dmGIqEh1K0=&c=diegfKyhKvOiRKbXqFMFUA50ccUF7/aqDfahPtLFw EWQaqwNu ucyo9Pdv2AnbaRhC6j3kXaTByYjub rXmv3k5DYjaEyxIkFla03C0gkoz/AoZX/4EpL3X8qbnatoJ&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (29f758a11974aac714bcceb05727e17a)

2 / 68      (PUP)
http://www.headhostgrab.com/c?x=Q03U8GoIad/ToNmyIoheVuVJqbhJ20CoEmIAFP3PQg8=&c=uH8QbwUpmCvAyI6R/l9VpfAPeoYwit0l4M97xsvY2pxR6BnXhqs0dOt440PXq214/Nle2iJ5agvR000kGkr zkLsOf1I7ZiGYD50WDuttfrPkcFTTmG9Pgk6NOAdGA/A&fallback_url=http://storage.dobreprogramy.pl/.../FFSetup3.8.0.0.exe&downloadAs=FormatFactory-13295-dp.exe  (87fe567101ab3ff5ce398d0ef746f912)

1 / 68      (Malware)
http://www.headhostgrab.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  (winrar-12398-dp.zip)

1 / 68      (Malware)
http://www.headhostgrab.com/WVl6OTRQWFZGSlRKR1ZYZGFaMngxTmxWaVExTlhaU1V5Um1aNk5Xa3hZa2Q1VmxCTGRuVjVXRWxtWkRRMFpWVnFKVEpHSlRKQ1NTVXpSQ1pqUFhscUpUSkNaRU4wYVVkQ2MzSjVVa1pqSlRKQ1dtOURXa2cwSlRKR1dteFFSakZXU0U5dFkxTXdZek5IYm1wYWJXWm9kV1V3Y3pGT2NVdDBlVmRTU0VvM2MxZDFKVEpDUVhKU1dWQkZVamRQYWxWVlZXdEdNMjk2YjNwU1NHWXpNMnRUVFRCTVRESTJNR1p1UVVGV1NIaHJZVEZUTW5GRWNYQTVUSE5WTlZkQ09XeFhWREEzVlRVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhCekpUTmhKVEptSlRKbWJHRjFibU5vWlhJdWJXOXFZVzVuTG1OdmJTVXlabVJ2ZDI1c2IyRmtKVEptVFdsdVpXTnlZV1owU1c1emRHRnNiR1Z5TG0xemFTWmtiM2R1Ykc5aFpFRnpQVTFwYm1WamNtRm1kQzAwTVRBeU9DMWtjQzVsZUdVPQ==  (minecraft-41028-dp.zip)

 
Latest 30 of 138 download URLs

The following 50 files have been seen to comunicate with www.headhostgrab.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.