home

www.nowcontentfiles.com

Communigal Communication Ltd

Domain Information

The domain www.nowcontentfiles.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, January 27, 2016

Expires date:
Friday, January 27, 2017

Updated date:
Wednesday, January 27, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nowcontentfiles.com

Whois:
1 nowcontentfiles.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.GERYONADS.Installer (M), PUP.Installer.Bundler.Installer.Meta (M)
90.00%

VIPRE Antivirus
InstallCore, Threat.4150696
90.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
80.00%

Sophos
PUA 'Install Core Click run software', Install Core Click run software (PUA)
80.00%

Dr.Web
Trojan.InstallCore.1027
80.00%

AVG
Generic
80.00%

Malwarebytes
PUP.Optional.InstallCore
70.00%

K7 AntiVirus
Unwanted-Program
70.00%

Agnitum Outpost
PUA.InstallCore
70.00%

Avira AntiVirus
PUA/InstallCore.diur
70.00%

G Data
Win32.Application.InstallCore.EG
70.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
70.00%

Zillya! Antivirus
Dropper.Dinwod.Win32.1768
70.00%

Qihoo 360 Security
HEUR/QVM06.1.Malware.Gen
70.00%

ESET NOD32
Win32/InstallCore.ABK potentially unwanted (variant)
10.00%

The domain www.nowcontentfiles.com has been seen to resolve to the following 9 IP addresses.

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 22, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 19, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 18, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 18, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 18, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 18, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 18, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 18, 2016

File downloads found at URLs served by www.nowcontentfiles.com.

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=qLFHgJ1hEUnKIaBUg6pP7DK4HuZwZf0QZqP/fEmJKI4=&c=Uze9PoS/ERec80mp/7VjMkKbqJ ka6TFS7BbXYfCgrdoLQkonmX5Rw 6 NvwWzdg3Ih9ZXRuVY8icVgL1Zkdc udoLMTaKrrq7RRn61EmYWaJsdjXio6UClL1njCQLGa&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (407a285d82279ad274b5daf761ab1519)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=G/thJ1aL6oBunNnj0RretSPApkQQOdHBvxdD1V0sh9U=&c=sYX1CtqvrCH8OhuRT3OK08lpikRY3ZIbBofiPB9NzZArZyzJx B6YnNO9nwd4GiVUo3LOwoJPVXSJkB1kxhOuOTKMdKtRcBVKZ51Xoho96OETxeiGD88jsul nK0402y&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (ddcdf8c42046769e57168311e01bceab)

1 / 68      (PUP)
http://www.nowcontentfiles.com/c?x=3GQCzuOR5bypJF/wxIcqGFCKKjm8vOJ GVv DpT5rR8=&c=LzL77XlZpOTMca2qp9ckcmR8uyIA1kE7FZ9i2HC4uH/f1ziAzG2MvzUoEPenURmv3q7KWWqY0/HmFOk6muaN5tX8aXi0IP8zpg18oEvoV B2pSQ3VQEl5pqhPe PF/PSSCFgc3nU7DFxgil9NsQkq3bHDafwcKMpM01QLrjlTts=&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (setup.exe)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=DIWc6M6BrHcaiQ4ViWRJntn/ilDtaQ4M443Kp2Uvu9s=&c=E/i/yixtA3DHQoyaHib2cMjhKqr9rcJS 9tT3znKNK01NYQ3g1j6oJPOTggHHASoU6hsb7ZY0ZKUKd/aXwTxfTUO6eVgPBBSjbCIOY7XrTi6PG7TXSpnYWZbV4okzm7Z&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=ZCVmfAjW34tjLDbmwMT AQVP71Ov GHuf2mOZEEKAG4=&c=F vrM7OtPQ4vAwXTSdTBVSHNV6RtiPv/M5ilIguCgrn9yxkf76G8VVxF5XaWsqYzqoKECSLX7Emz4WGrre8t4nMyEXHUj3mFe7kVFSHhjxdM3nav c/DhReNTwyAaaw2&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (8a3fe1c07c8833fd6a4b014386892233)

6 / 68      (PUP)
http://www.nowcontentfiles.com/c?x=IsnurE350Ht7f936c0QMJCxxRmdgw0IhxhLDZ7ZIAnI=&c=pB9OM8w1eTYYswGR19gtuajl4 Gob3fVF8W LJ2VrB3FLO9GF8NBz3FOUI iWHqsh 5F OVfIvuOkA1AZOKfsHLg15c54Hax8NgmcZFaSrlvOis mMsH8CBbtKj8ANGH&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (ebc1c4fe3739c5b83a4d9a902f1a3d0a)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=BpUgzIV94YH5MRQLqBby8 l6Kx55Mt7wpoJEI34cI78=&c=g8MZNbLJj48tHzkqrxuZdHSjk3RiNDz4bNvvLchoPv15XS v8HuKg595Fj/GiO XBO5ZFpNoqmb2Isif3dyGd 8DoZoCSwgcJkAXDua8RLXDd0x/8rfa1iJFrNTI4jP4&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=kgba fs0qVOf6ProkCpz4K8qSazVxcCbAHP8w/GE5cE=&c=w8ownRkuJY5IQpL7ie2604da5lP3Ad7u1iY4NtJZWUMKn/o9O0aT0Uh0jhWP/E5JVbp1RTj 8lvX8 YhnYKI99cysGgZaNjxI3ejz5fEf9XAJKfqfpGduB7n90vcyD/7&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

6 / 68      (PUP)
http://www.nowcontentfiles.com/c?x=JXOFSysK8B9dupm74zWTixyU4RPiA UXmPRQt jReec=&c=VJ2NA9aNjmkLiHxBRkK71v1iTzNPmPkvkOObHGKW/tfsMacPof02shB4vyBqy2dQyNFm3VArR90qIoCbz/8of9Q8Rq8qVgcz QR06sp029E9gVZtBabYCDfO0S/jJ2VQ&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (ebc1c4fe3739c5b83a4d9a902f1a3d0a)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=QyaY3V6pCc3H6XTTPYoGJXGcU8m9MyQwOcDOjtoknXM=&c=yHkJmisCI7jRcByUlAn2I/UeShY3Z8yuRNk18YesRISbOB1LaOJgFqFJRKoW6zIGbRB66VDh7ly6uqWi1PIVJxg4rb9guCigSEijOBqnMczXvNVfv9R6UfhiU9bfxhVG&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=uIenFvzP3BqJNLp/HyA/uOETGOP35NB45p/L8kXxUfU=&c=YxXS37X4o5/AQQlxC3DEOmItFurwDLUJVUZN9Kr1oFwxMVXktyVMCoO JMGA90aOHytFwLB0C/aX6MDhJJ34RtNLD5/4Tc3urr9Zc9ga6HsIgd5YFuHUdyIZtR92Eqqg&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=H btkafYODABOGdI22012nRT9kPEk3KQ1Xh4LkH2ndY=&c=kosvOwRHDlKqr/PIQKud55BUhvUGHFdK2SsyCNvlhtJlXbC2nQf1zBoAQx4gWboAhKjkLF Iji2yk/VY WtNijsJP9VPoAYOFfkDktZurtrWofbfqtuhmeNIpHqk7Ygm&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=rLobOlSSfE7gRoZlyeKBnQXZNXvtN41JeZWoA25/qJw=&c=cQ50rbaDxOKYW573S8xvpVWMFGBXqiFp2QWRJHZqRxsWoo60bkr d36wep5cZ2J9li1kCQlFhzs7r6xArLhw9UEGa0GH4N61okl/ipKZp0gjHTETYlAzKqSBn0v4I69G55QTdyYNa G2g5bWB4PSt/aMNobFDQScIt4eqkb9uqc=&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (43384749932638b6bf3d682bdb17fb55)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=ihDitCSJsOACEX 3vTtoMNqF6565 1Q2Iw6VKKWnc3o=&c=0HJADD50TkWX2oVx2/7yHs3njDA84ts3nB0g9Z USEkfw FtnzBa7RcR/TPchA6zjVEglZ dfHJ3RIHvLTvSlMkDTyaaL q6IDogre/zF48EQMg6 HHegwmQOdcc4M4A&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=z59LZfOMQP0RetGMd 01gNgRpewikxTMBEaqjPAFl8g=&c=6YeySpE3KYu19jveSVahXGx80il4xU 6UMiH48bLdlxgvR58IHCkDvNh5io3CklFw39TykQfD4IdJWbGDcxXrHkHOSXpHvzhnjkgOOGCs/tZvBTCFfrt5o4l9MPZL7T&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (407a285d82279ad274b5daf761ab1519)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=suv7EP6PR ITMmKaNCwuSl3Z/Yj59L4dJ2XlC7VGDOE=&c=ExuuIBQYNScczxg 7nelbYP1gP8nFcVYXlzcLm1 cF5e9/Df9H20u3AECS3v8aL79nf0DTvNNgc99hhOZ4zNOuLIEND4VEPFPuLSV vcGYcru/8DejiwWwP4iZjIl2eVrABF1ASb7T1uovnfcKdv4c3CgN/dxLCWGm2 ImPrzxQ=&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (43384749932638b6bf3d682bdb17fb55)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=dMg27A4nMUzbjXbPCGuwE2UmHdBsHG2coTZKE ToiHs=&c=pY5O9AhuWpt9v mzhTYBDAMLx4POYepu TqRYzzcgmHFisKadgr2VIaQu4gSrg3XoBf2g3xoyJieTzjebWRyAFXJI4hkUhhPx8hvLOVcqSIO9j5qk6aou0N US7ZsVFb&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (8a3fe1c07c8833fd6a4b014386892233)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=nwrt9uK3V7g480P/YE9Jl 2psmvx0QJAiE 3NbSajLg=&c=IWBk8HaydpQlw5rlMGAe/kC3TFxVRVRDLfUMm625D67x53DaM4qir7FvnnC8bYirF00Cu6i6OV8cBTWyLZSuIw8hbpbXGkaiAntC9e5bvnUEHMGiDgr7DrplttQ2pFg6uyiUU9nWo2RHUhV5Spw//MUZWb5JJ2z31Ycz3U8hm7c=&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (43384749932638b6bf3d682bdb17fb55)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=sHjgO7NiayOd5oV R/rX53IoyVgx1ttgbENw497zmUU=&c=VL9CEevtO0V3fTIecdrEL3vx2KFiIftbD4eQoUO xLPwcoXPZFFxu3/wOqaFfOWmO/X7X3 85lFx CVZVkZfiFC37fKaFiQZlj9XONi46HHz 0wOy8e8Re/qtAlZHV4&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=WQhYwrobkgpi1AIxCG/g0CHFUXRDsLwN4RNFemhFBoU=&c=7xH8pjWaB zUyZYlxuKskpGYmGwhA3ORM5ekwtZ0G9bxR9i MIjAAih5geTLCpAqw5eEa5p5/G2uQSTKUo9xBW7ka0Rlv/pzNTmPs8rjfptNTEQSLXnhBk4SFoMVoX1Q5pqUjL0Xcki4PTVWs9XvvEx5gMKd Kshd4K3zkicBjs=&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e5537d4f28fd9dd485f5e38d10073c43)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=Wrv1yuxxl4Jr4S1RL1eJrFoj1aNJxx97jQhrFrRmxwA=&c=iWgRnrI0nTm2DXbNQIA25f4G8cFnigMooG4vDv2GmfQwjr/p0SauHeA2r6jtj2bgiW4DcLTyrvj8IWRS8/HvrGckEPn5vPTs6PEICyPk4OnUkbbaqKYhyS3AsZQJa8CN&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (407a285d82279ad274b5daf761ab1519)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=OeP76cWBnfk64CRi/n3yx/F9Al7LepBvsGrdJomdO90=&c=28hYoLKCpRsSVtnQkqESO sa3teyKl3E PmJiDwMDTbcWg8amdvsh6Lhp6p2VqzG7E/aNRxkbAZDo4Kjhz4axWpWZ2fGBXAWxuw3UuZWEph4fdWvz0xwlR/BLJb7WmZK&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (8a3fe1c07c8833fd6a4b014386892233)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=vvR5Tkc vhXMHbn9c3XhIAiFOMRCmQUTps7xVeglFN0=&c=Xk4/oPGaFsBP410pSLk7xYXve7iUmwYAo0T6xpYnB4uJK9I8DXJceCR164KlsaIl7AspUUrBFyiN2bw0TyekSLhqAIrgJ9j1mUouB9wGsOdwVWuAAmA3y2405Qk4kNQ8&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=XZrrW0BayUbHRahKrKECDu9gbCH8L1sCe4Nz45rFafw=&c=6irI3vg3gOuraoPT2VXULAX9qgC4ahGEtcxUi2XthswVerFhgWxDY8EZqJc 7ZvgPRJ8lPN YVcKj6bl65GvOyhcxCC7WiTaScceg8qNIe1o/NA3Q P7/j/KN7ct98WG&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (407a285d82279ad274b5daf761ab1519)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=XD ZiFO5FmSNou2sT4ENX15x/Yi5zyTRDj9UUCyPYF8=&c=J/2h W3/rVoE1OhO2h0nxCeW8PIBCvCyf8b2eyZdDZ9dBZQ3jZEfThzRefRn n8sEEGI90FcodtBcuJk4DFpYlB1MRCDmNm/pkHpEWSL3 uLgDeW8smApydSK11HMBnceUgP4wkYpV5jdsKXGLmX2gD8r6XfKHkAVMBIMqfjHLE=&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (43384749932638b6bf3d682bdb17fb55)

3 / 68      (PUP)
http://www.nowcontentfiles.com/c?x=0YeBpEEoC2zhcORCzNuyjiFWvW3QY/zNRZ1TqSPoTkY=&c=hzzqwjJWXskt10oHOOxD IsMz4ARXqWAGOGtEAubAdulHMPMDWQoAk3mXwdueR/gJF2HXpgURZSdK0S7SgWLy715seU/BoaEjOLBLbrzsIcF6uv5RGam2vMOsE5LbcMo&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (c.exe)

14 / 68    (PUP)
http://www.nowcontentfiles.com/c?x=uCRpDVf28OBeMzo 0y8N2m6SbV6jJ3cdj0dlmZKiSH0=&c=8/w9IlKidwbd2EkAxEcNnhb9/xS8xkxhVmCwBUJYlj7oJuaLenV8nS8HBJmBGlaJPurFB7B ugju2aW5v18umZhBi/giNqYdxlLSHyPVUAK5EYAWDGv1AJmTVi/zqVOf&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (407a285d82279ad274b5daf761ab1519)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.