home

www.mainproductdownloadfiles.com

Communigal Communication Ltd

Domain Information

The domain www.mainproductdownloadfiles.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Monday, January 4, 2016

Expires date:
Wednesday, January 4, 2017

Updated date:
Monday, January 4, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
mainproductdownloadfiles.com

Whois:
1 mainproductdownloadfiles.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Softpulse (M), PUP.Softpulse.SetupMan.Bundler (M), PUP.InstallCore.RE11 (M)
100.00%

The domain www.mainproductdownloadfiles.com has been seen to resolve to the following 26 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 2, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 15, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 26, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 11, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 25, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 18, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 5, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 5, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 28, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 28, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 28, 2016

File downloads found at URLs served by www.mainproductdownloadfiles.com.

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=rboHatktZyX6HRb91iPglgmD1IAPqYaxz1N1pcg3rBA=&c=QZy68pfGrE7xxnlYnWQAJW3W/sgeUW3KUc7me00cH4IawWhWIksZ4jtgbW30f227XNPfWmkn3ICUwZPPzey0mCquUoeLTSlUGnWRJSF6A7wujiaM L02cf4Slt/.../404  (super-stealball.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=EscNTcRNu8mopbvIzBxdlEkw4Fdq2enFQFzGHUQ3UhM=&c=G0zOF90 gJ0b k1eHqUeaeVHHtiFa1TnT68LA5CB4ssWbuDdakQ0EjHunGps9qj5vJhsNF3R0zEbm3o JuVzEJ/P128oKXCMDGmQXZYSyz5AJ/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=A/aEgTqkDHj0Go8LiHBS/COevaWkAogxLAq5b9EZhlo=&c=6IbL7oV72mVaGv/4d oVCaPb62E5fJHLVkccXj/Ao6LGaelHdTncSGvnq3CaT6bS Fr4D0fs9qHakEeFybem9TFKte/.../404  (itunes-32.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=Ys3NIqoeRbjteWtotszLJsevSkZo8Yah2FrUu7iP4EA=&c=ktKi4HVCklGWojjsVkurqBR/dDywq3gL3TC2pqBqfID03tucoaAzE0GVdo6mbknc/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=MoKu6datCFdpO8UT5YzEipls0xyOjir4JX7byD1ymSQ=&c=YMwH/Ihe6iwUc/zhIlh3beUGiLLIT417cqBA/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=Z363dE3AorasX w1jHEqLE2r tau4vB9ur8Lfv0YCKw=&c=rx5JyRg/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=4dAvg2EUk7Mx1bfDQJroh MKKsOUUEfObryebSJ8sZI=&c=PGiBXWm798Fgz6Z7Pkbdgp/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=YlKp1yWV3bj52pzFDVn/28UVy6MxTn8VupyujctQ3HY=&c=vnKPqAqt4VhSi0eIsLRd/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=0JDt0qnE3rM9vmH505mVhPcLck1Ot0gixVQv4wHyRq8=&c=FQr5fO8OoInPC9aP egIJ6NXYzqN9x VVUbb/hoSFeyewspzJMTNSRjX 2s2yKyIgWT47f8 h3QdyjPsCjiAtxX6uVIr9UQpWpQ/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=rDSAH9H4 paLygS5jt0TXobRAh5/vt 4jiQPjIRIk4c=&c=7S94SvuHXOQBOJ96NsDtpU3RZYgKATR88h3MfM4XyfNwMwFWSeZD MGOt9swAZV3L6/yU9fK7EcOrSNqUxKnxzIs9sMTlDuQvsDsZKWTWyfXIbAKq5B/SiL7gmz FOB/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=/nJrx9YhBGIP7urGePOfSXetEd7gjpG8WmCL09WHKKo=&c=zw/00ESiATukMev9O1qXWe/QjnjnE2sXtCSIuyrpu0XBWVTsht3RUukUVxMniuHOfnkaOsn3o/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=f1EbRmVqIrIpSh2uP6ndpK6Ptw 5Z6UjWd7g7H6xBTg=&c=MK ElBEA4FdBVfqm6MnCdvtL HGi6aiKk665CgLix0J6gK5LNdntbg/E7oyzwC4wRRS0/8ppxHQ GALAXZUThFwv0ko362bwB7ys2WgP/.../404  (itunes-32.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=qHEslhYBvQ5/dGefPLrztEkCfxYFYecVGCkUBoPhGqg=&c=53QzLqfXzczHPkpb4A2YTjU813l9H9Z7IuPM15Rf3ITal ipHAt9AgQV loHAYtCgC10cJC31C33NXdOs0LdsOGNFZXb/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=iqHmt4uC28Si YPuNKUdTceOC9ItMpQign0V74agCJo=&c=zZtZNiiqqppj6YbX7mpJg5PwBq27flWNV6iyrj/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=BBpXj2lwIUZD3qf FbwyWFSbYRkS/NZxGAPB95N1d0s=&c=xBL4tO/XaJoxS/C7Lm69CpWBVVA3rMJxbP9eHsMmpvPW2ffZcCUnz1Y9p32eT3R4H2x9gQuwwJjAMN3xaK/.../404  (chromesetup.exe)

1 / 68      (PUP)
http://www.mainproductdownloadfiles.com/c?x=IOlNa7lD/CzxILEr/PwDBVO0MPaInkoWLAgXhW9jjUo=&c=OW4JJtNdQaST3GUjaUT4OYJgd4IiPmJ eDVhfZ09jALO/eLBhqBkHeYf5qZ1CIRcGDrC1EAErsnhY5YFJPX1AIuF/RVtsAsNiHcYCUrZC/r/.../404  (songr.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=nev31QF WE8M9WhS6DN7zSps9C6fiAFqqdHs/AMPTXg=&c=MnkXB7/ZQiF44Cy/F7nqpH5qF983oGrgBMxVfvjOVfMkAEfs44pK0Ht3iyrcfNVqjmTTalUaiZz63Ck5b35g azWC/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=XXLySP4ycYulAMUnYlpOKe4cHg1xAf8iW6hOHumfhYE=&c=i78rIvFMiHSalUxGLCnqHi/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=8KK wHaQ7PvqHapabcZIkaKqencBFXg6UQG S7CLX5M=&c=ouuGsFjvTLdLm0RdbfYPhnOc1nItm/.../404  (spotify-setup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=HXxYIxGUao5T6j3YdWFUZLJb/USjU4IeHxYYmX HJJc=&c=vXRuf4T14eJATES67dDJlXJNFmJWGHHp9Y47xVWtgMur1ds kTIvrpK1VRg8EhrahAf4WDSKsjTzubrjQV4zJqd/5ACji1X/8sTGILyr1p7t2t3yeZ9NMSW/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=EfykhFPCe/KMEyjq/YeZgitJenblLPUG4yh0acZiLis=&c=ablJHYlUIUSo7odKr/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=zPVJ03gzmZ6vpAOuNf bJdJtElolWjwKpBTju2LhxSw=&c=lymV2DJg9pTnff0/O4qlT7vOWuK9HjWUYyVUfBw6QHbA/cnGUcYTfWF0K0k 1Y97Cg5pvJlJteC5r WedTld7e7/.../404  (ChromeSetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=5wjlHnErFqRZLKzfDeb62q 3PhfR6hByAivtaQzYaJY=&c=3VH0N55ZyPj6vkC0jRkKzLhON9rpPZwnW6brmg9P Lc0CIdBnCw IZ8Pv 2isB/GIKrZ9HfBS7a4E33ctvwpiL9usLE4ESO xAJ2Jw4ERmpBfRax3jqx/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=4fX/3mahyjlr1A3WbuSSzbcNRn81OctYTWMMhacH41c=&c=gA8TxE4LQOk/Ay1zrkxylUtmqW8YBnzPXnlzMI4btyPxyg9Hv3 TKEgn5U4INgh0G/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=mjQ1 yogUfhlEoe1sRhpwhc6aefTYM8a9NxYkt1P2DQ=&c=kTvsDVEN4/6 5Vp/0ezCZoFmPVHbSF6yv8KZ28kpnO0wWyKjXPL1wKwZ8u6CtfpWBvaBMoInwQgOl1YXLdc/IaqIT3U7jlkCXloCZ0Ob7Kw9P28GUf4QJKn/.../404  (tomtom-home.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=Q2 GHegD70QbWU1ZKMm1gRIq0wxmQiC6ixR7pF3rcfY=&c=Db8AptI6GBPsp23Y3y3pduU9Xuoo5Bpv/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=xz122n4HVaNHcnblPKjusCl2G Hh97tme8ClQxmzvIs=&c=npeMWBnRQL 1sS6 KsrtvxddgYZWXLkihwlr6QrDnuQ19FwEdPhbQqLvBhR2kjXHdQS7DheosooZLH2/ne1xzHxkCXirBWZ8A8//v/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=fnvmn2CovJD5ueDV/u9VlJqAwIFtpTpqAXWI62kPMqU=&c=8z4hU6/yr7lkzUdnSshl2RLWxdczd CcWq6kzAZnn6VrGHtWGsq8A2F/oqUOUjXQRZeMBO2prpAhaHZSOk WIb/EzPmqbN5DHafIMLI2sPYrFkeS574/.../404  (chromesetup.exe)

1 / 68      (Adware)
http://www.mainproductdownloadfiles.com/c?x=ij8RVyccduwfvT2Tr KgkTXONMnIP2kVlld7ZNdWZ8=&c=ea/ZIIza7ASim5 kNK4KtikN5kBMmzM2XB3UDNSomCpOXdevXYjz c7F1VUtu/.../404  (ChromeSetup.exe)

 
Latest 30 of 14,911 download URLs

The following 50 files have been seen to comunicate with www.mainproductdownloadfiles.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.