» www.megasignsbits.com
Overview
Analysis
IPs Addresses (11)
Downloads (25)
Network (6)

www.megasignsbits.com

Communigal Communication Ltd

Domain Information

The domain www.megasignsbits.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Friday, January 22, 2016

Expires date:

Sunday, January 22, 2017

Updated date:

Friday, January 22, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

megasignsbits.com

Whois:

1 megasignsbits.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.NewMedia.Installer.Installer (M)

100.00%

The domain www.megasignsbits.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 12, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 12, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 19, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 19, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 19, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

February 12, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

February 12, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

February 12, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

February 12, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

February 12, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

February 12, 2016

File downloads found at URLs served by www.megasignsbits.com.

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=KDeK74r5FHkA HFdK7DR16MPGWmfQQybhnqB vTkJy8=&c=N/ePYL6jIE8vAUs A48XS XgPnfT989Hb3GkaudTgBsTrqshert0ay28pfJN9J02FXHNUXcXTM3 6IhrFIhlDLGjsrwEbY8Ertm7KGxUAbuo4xcACgKBYhKIj3FmYNjp1ON6Wqc6QodMdArnPHg2GQ==&downloadAs=WindowsMovieMakerSetup.exe&fallback_url=http://allmyapps.com/binary/509/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (d200e3902008476186aeeaebf04b2514)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=I1sQtax68vdp97BqPegK9Ym7RH3wxGp5H3p2e5vi8ro=&c=pTZ9qXW7aaR3wibDc/NgCpL98EsmvpIQjmAlJmqJQ6u0cUQxDDfWFKLUIyas2twvZ5rXWRvGgvwv6sR0hqpdjuNlZFm7hdR9a7cWQp/B1mprksNo0pUG 5aHF0PeWQF5&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (b8a2100ce1bac0e4f88c7864c487c9c3)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=zIr5NNDy8BPTtV1Vj5ehueY 08YLscDwh9hwty5n7n8=&c=EEbRxNGp15mXWmxPHBxDrQlWC7nCbOjVFlN9SaFsRSFFZ0VccmG/E/9KV5EqPf0t12rCZMSQD0od4WD DRz tkhnzFmpv4B40NjchW1ZnY7FlLju6iHw0SAYo8xMinMh&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_googlechromesetup.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=EqsRUFCKsDBhiXEeX6WT0bXv/s2G/reqULMKY2JkX7c=&c=F5fgqgOR3e7bJDMBTuf5LJyiNzEKzL2vVVtyWGkDHuP0dNHJOXtvlVLgAKO1VKLnnmPApSqKTWA7pG9OsAnp6U/BFRsiuIoo/yAlrWxgx6ykEa7zLOUwyjMOXTRcRXet&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (ee70ae60aa9c27c797c64b0da788916f)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=qZE0IBgjJkw hQA4/BytT82T cN dsSo8F8BTFgTPpw=&c=8ePr61Brb2AavehJaVXWBLl4WI0enyswArx4bUhPNFVibai4nRH3LnB3k0/w4em5WATm9RdB2VsvJ2aukmm55g4GoijZYvm2sp4 P6/m6mSsPbL4o8u5xDn qTkFrJGc&downloadAs=SpotifySetup.exe&fallback_url=http://allmyapps.com/binary/605/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_spotifysetup.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=ja4LAGHQKF8ZVsK3nsDYLsQXZ6yhq9pc1PeUJpRNm U=&c=ttOnls8UESczb6q6d/3FGQTSjb9M8r6GTDUktRlyOCnXpA3xZimMPB0knNrNHJUAykGz3pE0/RKY5txDPdVK8ihgyHlCJGeMxB HQkLYK8ySxZI3gn2cgRShADJNQiMj&downloadAs=JavaRuntimeEnvironmentSetup.exe&fallback_url=http://allmyapps.com/binary/16891/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (59b05449090984a20143020520bb9dfd)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=qUiPXtHPyeCQVU/y6ZCh/NalIkMqsWMmW0lmjfmzH6k=&c=DMK9RLoA4JrH8bfbVHAx/esJMlXB3VWT9s4Qyud87izury/SgZywGtPtHiFG6HBYb2ANUAQAyAHReW5jETadPBhrSMYCU0IyHGDt/xiG/CQsb1H3DuMFzKuzd4kpDFO2&downloadAs=AudioEditorAndRecorderSetup.exe&fallback_url=http://allmyapps.com/binary/568/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (919964444df572abc5284dbd54deb8f6)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=4WhJT5bjKlCZaql5Pxzy2yVqniVMjLY7EpYiGd IGF0=&c=nkpPbPmDGD64Ho0otREYWyDFU9ELizEpqZOPAHAJMAF13RGOdJMoQf3gLayVrtQ3CogcU773dREmY4XNdHq3hLUqkaYfkcxWHD/jBWDLSu9MpPElZbVRK/IRpkMUhbQEjFG9XL6f9Jz li vzyDQMQ==&downloadAs=TeamViewerSetup.exe&fallback_url=http://allmyapps.com/binary/653/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (e39fcadfe4397c71b3371eaaa2b1173e)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=TZvlZHN3MuNlxhe5Wwg2n0fZJuHHFJIZ/Z4L5MyufJI=&c=Pw5oPQqScCeeNbH0FXC3yfLWZ9CpSyubAKzbIWELrqDCV hDopDCQ3padwIam7H2nhjvW4pfExmcIkqc6yqQiKEMDaTRizKzd8xSTr4UA2qJXWekjuA18Xx7ZJbPafuU&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=PcvP/VomzIPUn71Wvv2ehS9HaLm9HzFglEAvKL5RnKU=&c=5lA 1U6DHzJoSxOFXTgQ04SKKFXY9Bz t9bJwUBSgnLYQT9Ka avTpnyOX0vZGKOnRtbEw5HYkqeQ99eMSmTOt4zN0w0qoqBqLtiPk4fviJI/d9SnjhaN760/3FpcSwN&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (2c8722e04c0d419e41fc00c453f684a3)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=ZelTxPRMd9qxTSxO4rpnrY5VNma5IiJVl55usv7OorY=&c=HYP3kqUTrrymxiQ2Kcl3 /qGhGZGQOeXUysUt5brZi6Y/CxS/zATYcLnQYXp yYoI9csuvUFQZVuGpXqSamyTrLHhd3Tn/P0Dqai6BmPHfC6JNr3pxqrAf II/Pn3DCH&downloadAs=TeamViewerSetup.exe&fallback_url=http://allmyapps.com/binary/653/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_teamviewersetup.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=P0RgcnWI/fkUG uiRdE1AAK8RASwwPyWSHqtqiiUk2s=&c=6gUFJiGxkxRmiba3JRN11D9xEbXrAu F9lAmrbWaVkL3oKki840xWa6TvkLXR0pjY/mk7lIL0dIQRfopAKwrGjB2HrvnGMyoHULoUgzLKSjFh8WF1csdwLwD3KkQrhII&downloadAs=TeamViewerSetup.exe&fallback_url=http://allmyapps.com/binary/653/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_teamviewersetup.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=X492T4I5zhnzWzI2QWxFzzxOws3CYsEx2w6/rryaWRY=&c=93xgBVh M35LP4WrysDM9MJzcdBDVouLlFLImtu5/P68rpE4PANlf/lJd1vxCfVa68gu34M4lN1OR 4C1vMUgVOmIynbyKMNPHIfjIWtsDeuwdhHc9Ec5trVkXUiQlVP&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (16e28ee30d1ad9ba91d313b71623b1f2)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=KFRyTbG1ICloq OXtlCRGYje hIztCSLXMwtFpxxLRk=&c=2ut1HcAU 5LenuOpO Ksk3aEBbGE5iFhC2crmBRvhb78dp/fBXTlyYa8IwnqqsFc/HoE9QiFTPVr4MCeLEVyQKSRGoAvkuGp icBTUqJ3v2TpcLIIQvM2h8kHQc7lrtX&downloadAs=VirtualDJSetup.exe&fallback_url=http://allmyapps.com/binary/634/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (15c3761b9b6b52c017a2e6e766729d68)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=BqcVolOCTcA9qLvYPmDj7WZ9nmUWi2rvxuNr caurhc=&c=7dIujmoby2B8QLiV4kKEwTTuXFfdtjlJDr0IucMcGYt9lvgshROcCf3efxRXSjzsUqVjaeHxxaUsMrxKR7u0hRq3riVWEGws/i1IFd6z7g077yJKFXhdE8n7L/D4FW1F&downloadAs=SpotifySetup.exe&fallback_url=http://allmyapps.com/binary/605/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (3f5e13ff1cc80269cfcb0c7ea9df8a2f)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=bzicE6Zk 0aa5oZPbzi7qmzMQMkJ8/nuLlo6MGWseUM=&c=3I2tgWFZbrZ88PU4fP5XMIuXN56R8Y8BxRZhYMfDybkh9eQyeBYAuZxi52qIhay/biu9q0Hb63ftGorl WtfvrdvwSs3kPmxkTjmO9oFV64Ueah31riXzLSmYhE4WAfs&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_googlechromesetup.exe)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=fmaIw19rHPVMw3AWvOgmNZUkWAGuYkK/VmhtSAI4 78=&c=Mq1gQU0dss8aQs0c4bXsrrjwbVltlMRyGp3sJj m5jZaqsEQO7Kw6r8voq2a6u6oLsSDXyUobnTCblDblnNKUBHdaMl2JsJ8xsRE dDc94Sq9FM0DuLeDwLmbCnGU0G/&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (695030911d341814b7547cf8167e5476)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=ep2b3RWhGjN5zXFG6OaWM0E8oy1OYXdg5UH/g3MiFUE=&c=LJvnSBf2Txo1/IHVrx n4DTqIOBcoroYsmZ/Y1mlatpMpEqMM08dnJfnr5AMlHZzucZ55BIkuesxHSDeUAcGkaI7Ube1DWZEpHxQ0UQQqzGiPmCJkpfnekJC3c3dD5kr&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (0057186e6b4a946647145626e06f6259)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=SHxlveG6kRJP65M5RwCu1M7qwtf6d2xDGRhbld51mVg=&c=mD9Jeo0uA0eaIUoaMoAuTZpdhbnuozenj1HgSKqS7Tj3WrfdGJJiygaQrlQPYqJqv/YpmLfnsb5PnhUzmAuJBC51MQgo fmnzihC/bNy5fhXPNkNUk/Yy2lAb1pvb2KE&downloadAs=FirefoxSetup.exe&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe (ce94500e02148aac3f9e9410f03daec3)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=BpG5 f/Q58IWEUaqopMolW/Qr1weUtYxbqlyZSDcg/k=&c=5oKjQU0t82fBfOEHl7FxtqkF7ybrEkYzsacqOga9/B2rEqExk IDC8ga1XEtG6K8/YEqJPFUtHw66BuKapMdpLtPGoA2BqLy3skZdoNH9hmELnMxt4/UIEbEzZgmYrXL&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (3766d675da1c1d5266b77aa0735b456a)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=XQBNseCWk8aXQcvA XgOevoq5rXtnsMeAoH2wI39xiY=&c=VRWJBQgpqyv2BDouAyuCMfnmIhiVb68LzsBhZJotlEynovC OFJcnOmZ5ca9hAZq2HmDB0db6Fi1NcGW6zxMbSQ8MPKD8b52ke4RJBmmrtyTLDVrTSWN5GBQMNE1YIya&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c53b75cba3d07e915e6bde5e199fc465)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=dZJJg9TyrO77DBkwe3vqzFKm0 ZYsIslUtg9YyrSfE4=&c=BEOj1cEhGocxM9twjRa5g3LrA7EHjliHqWb2RYygY4D03qd2FSyEacR58XGdvg1BUODpan6IymCO4kmcq5ATDhPG9blhzUSstzSY2SD7i6Do7NwWRpETDG/mqX0ZW3uO&downloadAs=PaltalkMessengerSetup.exe&fallback_url=http://allmyapps.com/binary/2393/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (bea4e67f7671eca5d5b15bb876c7ec28)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=uXZtKdAbrXal6mcr11eKcizlVT4H2j1mFCLunkJQ8sg=&c=jmM adI1KzNWXf7ew2heuDV36atD8o9VX se9Gwr2N6uH4tRnOHHrwexbO6OWsPaDtWDpamxX8HfnF7zDMgkE8 mUTx12/oCXPHGRRPcsKbxbvYH73qN7sKVGf T405m&downloadAs=FrostwireSetup.exe&fallback_url=http://allmyapps.com/binary/1721/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (725fc2355b983de31a7ff49818048794)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=s9n/uUnmVR/qwUgvO4LkOk1LnVMpsiGFq3rdDGrJsFA=&c=V7PO2qRkp42dul64 zoeDx8FnuthNeXpSCNT6g8G0//o F7h6Ftgw2iD8ESW sFFAxJjlIl7 fsn1SmGndlbYfKYwyQPyZ7mMA 0VLBSqXfj9hcTTHQE nC6zpCKI2Ce&downloadAs=WindowsMovieMakerSetup.exe&fallback_url=http://allmyapps.com/binary/509/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (e0dd521b21510ea4c05b5af7f2337fac)

1 / 68 (Adware)

http://www.megasignsbits.com/c?x=Bxn3diVVbqlluAsdV36HHSeftHbrgBdgiv77GKz4hFw=&c=zGJOq3tVeF2GrZlPkobxe7vBSu5wruspaZWrVZc/yHxfufua1V h5V6sPDrY nr8WawDuH81UmknkJDJ5HC5pWTKD69iYbUAgd7KnrT05EjcYzwZaB7Cmu42E5Z7mjC6&downloadAs=GoogleChromeSetup.exe&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c9a2120947773f35977cf302568cdccc)

The following 6 files have been seen to comunicate with www.megasignsbits.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.