» www.presethostingstock.com
Overview
Analysis
IPs Addresses (8)
Downloads (301)
Network (6)

www.presethostingstock.com

Communigal Communication Ltd

Domain Information

The domain www.presethostingstock.com registered by Communigal Communication Ltd was initially registered in March of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Thursday, March 17, 2016

Expires date:

Friday, March 17, 2017

Updated date:

Thursday, March 17, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

presethostingstock.com

Whois:

1 presethostingstock.com record

Scanner detections:

Detections (96% detected)

Scan engine

Details

Detections

Reason Heuristics

(M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)

95.74%

Avira AntiVirus

W32/Mabezat, W32/Ramnit.C

4.26%

VIPRE Antivirus

Trojan.Win32.Generic

2.13%

The domain www.presethostingstock.com has been seen to resolve to the following 8 IP addresses.

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 20, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 20, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 20, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 20, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 20, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 20, 2016

File downloads found at URLs served by www.presethostingstock.com.

1 / 68 (Adware)

http://www.presethostingstock.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 (street-fighter-v.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (happy-wheels.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (spintires.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (skype.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (curse-voice.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (spybot-search-destroy.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (winamp.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (the-sims-4-get-to-work.exe)

1 / 68 (Adware)

http://www.presethostingstock.com/c?x=IWVtQiZ5M1FymTGwhHQR1DbABUHk87ezqC6RivYykCg=&c=TeU5y7ot/UYcs6uNeYAc6Ej3Eqowm5OPdaLkhtzS/YjSvyvppvW8L1i4n2K0rINEZHE9CJtf8T6IwtjRqkvNDP22sIVEPpn/zdRE2/eGPM3YdI/rphBs7Ap5CyNZEaFs&fallback_url=https://secure.inndl.com/.../wwe-2k15.exe (d4928f4dca8c4c73981c522e49ee6df6)

1 / 68 (Adware)

http://www.presethostingstock.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 (java-runtime-environment.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (chicken-invaders-3.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (minecraft-forge.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (free-5kplayer.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (geometry-dash.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (icreinstall_spore.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (team-fortress-2.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (car-games.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (icreinstall_windows-8-1.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (windows-8.exe)

1 / 68 (Adware)

http://www.presethostingstock.com/WVl6OTRQV3RTVjBVMWNVbG9aVmxhZWxwc04yVlFUaVV5UmtKMmNrTXhkbWxzWkdKM1FucGFOREUzYWxBM1prVkhTU1V6UkNaalBXUk9UbXhLWjJ0c00zVjRWMmhEUlV0eVMxUjBTekkwUTNoT1lsSnpWREoyY1dGeFdVSktZVFV5YWtaeFFVdzRNRFZCVld4QlJrdzNkV1V5VmpZMll6UjJjbEpPVFc1Q1RsSk1XVVJpUm1GYVJERTVSQ1V5UWtGeFVHSnpaRGRGZFdaa1IxVTNUbmMwYjB4aU4xVnJla3hKVkdOM1ZtazBWSFZwWWpSTVRqQmpVbkVtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEJ6SlROQkpUSkdKVEpHYzJWamRYSmxMbWx1Ym1Sc0xtTnZiU1V5UmxWVEpUSkdjM1JsWVcwdVpYaGxKVE5HYzNRbE0wUkhkbkk1TlZaSlprSTJWMnRZVG1KVFZVZEhNVmwzSlRJMlpTVXpSREUwTlRrd01qVXpNelVtWkc5M2JteHZZV1JCY3oxd1lXbHVkQzEwYUdVdGRHOTNiaTF5WldRdVpYaGw= (paint-the-town-red.exe)

2 / 68 (Malware)

http://www.presethostingstock.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 (Minecraft.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (minecraft.exe)

1 / 68 (Adware)

http://www.presethostingstock.com/WVl6OTRQWGh4UWt3bE1rWmxjbU5KV0VwdmRGQlpZM0JPUWtFMldWZEdZVGdsTWtaUlYyOU9USGh2T1RobmJFVk5kVkU0SlRORUptTTlRVzlWU0dVMllVbG1USFowY21zNVpDVXlSbmN5Y2xoRk1YcG5hR2xKVFdvelNETXhNVTFqVjFKRFVqazJUams0ZUdRNGRtZEtWMk40UzBoNFoyWWxNa1lsTWtKbE1GRlhabGg1U0VKTVJuZ3hZbVZaTTFWalFrbFFKVEpHZGpsMVIyWmFkR1IyUVZkRWJVUnFWRWROV0V0bVJHUmljVmg1Y0ROUVpqSmhZVUZ0ZURBMWQzbENWQ1ptWVd4c1ltRmphMTkxY213OWFIUjBjSE1sTTBFbE1rWWxNa1p6WldOMWNtVXVhVzV1Wkd3dVkyOXRKVEpHVlZNbE1rWnphR2x3TFhOcGJYVnNZWFJ2Y2k1NmFYQWxNMFp6ZENVelJEWmhNM0JZWXpWb1dITk5iMkZhVmxaalIzUkZNSGNsTWpabEpUTkVNVFEyTURNMU5UTTVOQ1prYjNkdWJHOWhaRUZ6UFhOb2FYQXRjMmx0ZFd4aGRHOXlMbVY0WlE9PQ== (ship-simulator.exe)

1 / 68 (Adware)

http://www.presethostingstock.com/WVl6OTRQVlpzZDNGRFR6Tk1jbm9sTWtKbVdrazJTazV6VVdnMldsbFlUVEZsV0dKYVJHNVZZMHRxYW1sU1kxVnZUU1V6UkNaalBXVmxXV1JLYTBSMmNuSlRkVkZMYjB0MmEzSlNaVkZ4ZG1wSGQzZG5jM1JOTUROT2JFRlNZeVV5UWpBd0pUSkdhWEpSVW5waU5rZG1URVZzZUVGNkpUSkdla05rZEZoVlJGSkpNM2RKVFRCQ1NtNWxVVWxrT0RSYWRFVXhSVFk0VmtreU9HNVFWRzFUT1V0Q2VqUm1WRzVaSlRKQ1RFcExjRkZWY0RrbE1rSnBNMlpEWWxWNlQwVldZeVptWVd4c1ltRmphMTkxY213OWFIUjBjSE1sTTBFbE1rWWxNa1p6WldOMWNtVXVhVzV1Wkd3dVkyOXRKVEpHVlZNbE1rWnpkSEpoYm1SbFpDMWtaV1Z3TG1WNFpTVXpSbk4wSlRORWVrcFRVbWRSZVd4d1FrMW9TWE5JWTJKb2NsbGFRU1V5Tm1VbE0wUXhORFU1TWpjeU9UUTJKbVJ2ZDI1c2IyRmtRWE05YzNSeVlXNWtaV1F0WkdWbGNDNWxlR1U9 (stranded-deep.exe)

1 / 68 (Adware)

http://www.presethostingstock.com/WVl6OTRQVGxvZGpkeGVVbDNiRFZYVVU0NFpXZHlPU1V5Umtodk9VdFNhekpTTlZFelFtbDBhRWRJVEdVbE1rWXpSRzQ0SlRORUptTTlWemhGTUhNNWFrbENZazVwZW05b0pUSkdRWEZqVGxoQmVYVnFSR0ZyYm5GV2NWSXpWR2huYVZVeFdtczRSRTVYTjJFMlpGVXlZMFZWZGtoMFptbDFObkUwVFVOUmVrdDFVbVE1Y2xSTGVFNDRSMkYyYTJwUFQyTjVNbEpIYlc5MGVXSnJNWFYxVFhacU9HMU1OMEZXYVdKQ1dHeGFRalptZDNOSU1rZDBOVEZDTWlabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0hNbE0wRWxNa1lsTWtaelpXTjFjbVV1YVc1dVpHd3VZMjl0SlRKR1ZWTWxNa1psWVMxdmNtbG5hVzR1WlhobEpUTkdjM1FsTTBSUmQwc3RjWEphZEdWT1VWTjBYeTF2U1dSSlZFZEJKVEkyWlNVelJERTBOakEwTVRRek5qWW1aRzkzYm14dllXUkJjejFsWVMxdmNtbG5hVzR1WlhobA== (ea-origin.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (windows-8.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (dying-light.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (ship-simulator-2008.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (ship-simulator.exe)

1 / 68 (Adware)

http://www.presethostingstock.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 (songr.exe)

Latest 30 of 301 download URLs

The following 6 files have been seen to comunicate with www.presethostingstock.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.