home

www.sendapphost.com

Communigal Communication Ltd

Domain Information

The domain www.sendapphost.com registered by Communigal Communication Ltd was initially registered in October of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Sunday, October 4, 2015

Expires date:
Tuesday, October 4, 2016

Updated date:
Sunday, October 4, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
sendapphost.com

Whois:
1 sendapphost.com record

Scanner detections:
Detections  (82% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.BeijingT.Installer.Meta (M), PUP.installCore.BJTsingincTechnologyCo.Installer (M), PUP.LiXiangShengDianBeiJingTechnologyCo.Installer (M), PUP.installCore.BJTsingi.Installer (M), PUP.LiXiangS.Installer (M)
94.74%

SUPERAntiSpyware
PUP.InstallCore/Variant
31.58%

Bkav FE
W32.HfsAdware
26.32%

Malwarebytes
PUP.Optional.InstallCore
26.32%

K7 AntiVirus
Adware
26.32%

F-Prot
W32/InstallCore.BB.gen
26.32%

Comodo Security
Application.Win32.InstallCore.AAO
26.32%

Zillya! Antivirus
Adware.BrowseFox.Win32.117156
26.32%

Avira AntiVirus
PUA/InstallCore.diur
26.32%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
26.32%

AVG
InstallCore, Adware InstallCore.ASJ
26.32%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen, Win32/Virus.da8, HEUR/QVM06.1.Malware.Gen
26.32%

ESET NOD32
Win32/BundleLoader.C potentially unwanted (variant), Win32/InstallCore.ACZ potentially unwanted (variant)
21.05%

Baidu Antivirus
Adware.Win32.InstallCore
21.05%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application, Win32/InstallCore.ACP.gen potentially unwanted application, Win32/OpenCandy.A potentially unsafe application
21.05%

The domain www.sendapphost.com has been seen to resolve to the following 20 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 25, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 25, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 4, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 4, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 4, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 4, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 8, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 8, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 8, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 16, 2015

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 16, 2015

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 16, 2015

File downloads found at URLs served by www.sendapphost.com.

1 / 68      (PUP)
http://www.sendapphost.com/c?x=8pPY49d wgrTmGJhMhJf4 eptD42CVXAEOonhfVhdE0=&c=GzSLbJavYOlY/GQ3m6c sAimkdViLT hofvBD1yQ83Z7chlBsshsYvQOyww8W8bB6m0V9Vdtfg6Es4P4TvL6AEb0DQrLI18c C/cNkqtLREDlpw7c9FU/PPFtG0BR4hWntOaiUnXTxxD9TPpGzmSoQ==&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (fa57be9031025280d1b6832286cb101c)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=bB979XElzK9LRV5htGwIEvXKUVpmB2hQT8l 6wHn0Zw=&c=c/Hf4JquJPS/ImSc0Nh3Ui/bGNYKWcomsr0lVaPCwSR46613 dqXl3DvclpehhG/wrbMDP8javClbj7 8lwiSQelZwuJco0FU9UNT8kWgTOmIv0k1JpivN0OEc4EB3GtFJZynXX1dYRYRowdccuWzQ==&downloadAs=AllFreeMP3Cutter.exe&fallback_url=http://.../AllFreeMP3Cutter_IS.exe  (a807904305844a1500d2f22dc0021d38)

1 / 68      (PUP)
http://www.sendapphost.com/c?x= HWkMgT0Cu5N2xUiIvp4QhM3ORfiVLOvO8dvTZuLj6I=&c=6r8xJR/8zSlOfM9WmnKTJYnfblShQ00FFh6bFVuNpunzPY/RdNdwCL/X7syVYiFZFeLKJYdza2QivTkviwE t35RJZGKwyyI8jlWMnJf/2gAA4lUlEGF9Jjj4xtgPJjNuv bTxOvWiu/RJGyKl9D6Q==&downloadAs=AllFreeVideoConverter.exe&fallback_url=http://.../AllFreeVideoConverter_IS.exe  (49524e9dbb85e335176510064f170b3a)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=Fyhifw3pFcHXnkO9tiFhk q5gPN9XthrgHC9XP1hOXc=&c=YKiElf/okx4VvlnKowmcHnIzUzfHw8hN3yF1MYHsoP/j 3mtycoGf0StYsQLlIHFib4iWoIHjgCJlE1PeF9FZaBykCPnm3P5U7hTw1wrbr0Fw6BeTD23 g5T8lHZUYXU0uFApjsGlIE9qj0P8o0GNA==&downloadAs=FreeOCR.exe&fallback_url=http://.../FreeOCR_IS.exe  (b7af6663eaab6a2842be7c4928a87458)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=ETSwcKcgqy6EY99NXbh/sVBYKT4VD3e1pk/WTfTQTDM=&c=VjMdSSwdfSk3bLjq1phLv4o3j6IeNHeUczU2g6bEv3a/3OGAb GUjmAp1DRQdbLE xv8ZITgOLw2yKnNP/cz5afgXHVLtFuApmj1OmZuRZ3QL2f3TykcLJtBRDL/fXZ stGneW0I6Bsn Xx5ERORRg==&downloadAs=FreeSoundRecorder.exe&fallback_url=http://.../FreeSoundRecorder_IS.exe  (5c7349ad17aec07c1483f30326506ffc)

0 / 68
http://www.sendapphost.com/c?x=Lc/N7BuKb0Xttd1GMezD2xPIMdzayeHoQH7yYIM4S9g=&c=Lev l2qP0BFbTeux5RKmJLUd4rjHUuCe1E0Ni9SXFPSnS60jSLy7PPxDVAlVjlcL9G1CzhcO6N6p/7WGNeVZSAL4AP2yLyXczclmbhUjzKql2Z6O6urtbh8qo3YZKa4jRwYmTxZcB80ryF4ZykLqVg==&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (107327cf_stp.exe)

3 / 68      (PUP)
http://www.sendapphost.com/c?x=6JZybzQ KpnajzSPzZjdkliHLrjG AUAh1qr5Ov7mvk=&c=xsZLpQFdTnbFM DI58ozFMdmx9Z8PLwrMExMfoJNN2XvNndsFmciUi MwteFuZjwOD1CtjKqUezWPSOiJJG9m8uT76bX LY7b5jdiRmPdSVOlfMFyc43reSvYbJYNsPim74fLGnF7OAZA2qeqdE4NA==&downloadAs=PowerSoundEditorFree.exe&fallback_url=http://www.free-sound-editor.com/.../PowerSoundEditorFree_IS.exe  (6057a1d0e6be56ca6d6c901c6faa1d9e)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=4HSexRVlCgGZXql2hEALuuh0e OCLnYb2GmoRcmooy8=&c=m8XbvTR nr3/BHAIk8DyGP0u0TYyAWVj2yUVWVhfDma F2nJ1UFfTM7Tom4Gk9KsPQgL5BkXg5doU0D/aTaYozW zJrDxrvS7P6DkspDjeJLMNYh71bLwPHoWFZgQnzg7qGvPWjr21O2a QbcNTnhA==&downloadAs=CoolRecordEditPro.exe&fallback_url=http://.../  (c1d9df023288c3dfe3c68d8cbce29b2a)

3 / 68      (PUP)
http://www.sendapphost.com/c?x=gwr5ZX3rmNrGKk7MwpU8WmvxGwpLYvAbZGLIJ1KDnJM=&c=pHj1gJI8rYbDifR54mp5Fbsogw VwEAu8/s4bTgH3bX6XghZnIbI/4Gv2qPWE4YHOKb8KY9RlCmaJ/BKV2cBcWnqleTrI/R7vRhQnTy7qu5eOIDzBo72OCy/Mu9EBKjMvqCr4uopwFZ budv9nWngQ==&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (59a6f4cb1144f871e6e189a972700b87)

0 / 68
http://www.sendapphost.com/c?x=gwr5ZX3rmNrGKk7MwpU8WmvxGwpLYvAbZGLIJ1KDnJM=&c=pHj1gJI8rYbDifR54mp5Fbsogw VwEAu8/s4bTgH3bX6XghZnIbI/4Gv2qPWE4YHOKb8KY9RlCmaJ/BKV2cBcWnqleTrI/R7vRhQnTy7qu5eOIDzBo72OCy/Mu9EBKjMvqCr4uopwFZ budv9nWngQ==&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (121bca80_stp.exe)

14 / 68    (PUP)
http://www.sendapphost.com/c?x=NDHZNESJnwiKd9OxvULrn7daWgH7RBUj9v4i7ewY6j0=&c=NQFW4xd6jnzFlhcagfIAtoDaxXVaMGRZVemNYtuNscopOptsSWQfsrWm2Y6wQw2OI/PvHwJZMuJb6S5NnKkxGQMyjZPKDNyCLS48qpLH9J8Ze1quw0x6PQsrewohNC3xWYVOs/SzJ/nyH d5Bkypyg==&downloadAs=PDFtoWordFree.exe&fallback_url=http://.../  (9c03b9f8b3511bd9beedfe8c0044b8f0)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=ilLai8ydR5ZSgFjeBQMWv rN0sSv5WW3pnhjimzt0x0=&c=R6804J1yT2wi9WVQDSiUF/YQjVF6l6jNfEyRb2SgiotHfbrEo wqMsg67fC6LChyrfq3FfHQ/i6dPrO /xEJJd7kH 3iSrhG3Nw33jK52aokY0 tByw 9lh9N5wuaNLLpy92T51Tj91lz6Vi1/kQ1w==&downloadAs=Freemore3GPVideoConverter.exe&fallback_url=http://www.downloadonic.com/freemoresoft.com/.../Freemore3GPVideoConverter_IS.exe  (212898c1a86509fdac480ed46b1be42c)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=65Qilbu18/LY6nGknkxSHhbjvdetaTLlpaco/N5JlIs=&c=fTBvb/1l9heZs7Bw0bof0k9T/pNTfTPdub1ehmbq4VyHCVUWyBJehlxwyNM8KvNBeLh/A0LuRqwRC9Umi41kpqy341mqqyzAOTiehkyvj88s PDY4I9iJRIQwQiSnq7nDUxxiV1n4HLuEv7XU77k6Q==&downloadAs=FreeOCRtoWord.exe&fallback_url=http://www.downloadonic.com/ocrtoword.com/.../FreeOCRtoWord_IS.exe  (c7f4c2aaf09da68adc888c6b17df1c14)

19 / 68    (PUP)
http://www.sendapphost.com/c?x=XfFhR8s2YOZrjVhpYwVU2BqYSxoldUQQ0tdTZxFPfJE=&c=IDtPxSUVf5HNwZLDrbYZeHkxVmZS3JyGy9WJyXE2dOJjqp3MRdF5c6fXY/ VPxBVPE3RrrB L0Q/BBzzMrhxpwIx/KbabEZVcHcmpJa/dpn/0AEqfylWr1imA5JtFV8YzP8LnlJdIjn3LVkL1q7Haw==&downloadAs=PowerSoundEditorFree.exe&fallback_url=http://www.free-sound-editor.com/.../PowerSoundEditorFree_IS.exe  (1702e7cf4c28d09b399cae457a7495e0)

1 / 68
http://www.sendapphost.com/c?x=gwr5ZX3rmNrGKk7MwpU8WmvxGwpLYvAbZGLIJ1KDnJM=&c=pHj1gJI8rYbDifR54mp5Fbsogw VwEAu8/s4bTgH3bX6XghZnIbI/4Gv2qPWE4YHOKb8KY9RlCmaJ/BKV2cBcWnqleTrI/R7vRhQnTy7qu5eOIDzBo72OCy/Mu9EBKjMvqCr4uopwFZ budv9nWngQ==&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (9980fba44bb24e952ce4fde407c94454)

18 / 68    (PUP)
http://www.sendapphost.com/c?x=h22hvQjEbPAnV/gxRpiL2NDBYMPUx0sPrQNa5jwGCZM=&c=DtYPCOObsPkVEWa4LyQd4C9wZODSqfw0NxZvHKU1IcACYofLAmCXn7fYWJUbqgFKj AJNLbgkZ8z6dacQFfdLGVECl52VggMa3YmwS3uuqd4WI6FTr6WupTGBu4M8Xh7EofgjaX/IYGDCiZoIb2kPQ==&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (dece84e96a154850dc86d9c0ae171d73)

0 / 68
http://www.sendapphost.com/c?x=0PLbtZWpKj CE0HPlNhSWScaGsYzsl6HheMgZT/x7J4=&c=zFBMvgCA133 DIroth5MDaQngkvCt7QLKcCxbEGZCYLnNwHvZD7RWRNuameJmRQC4rvYGYWD34 fgf3n5F86o4uFveeYNoav/uoOwcS6qOeKoZgK9YR34DUSRlJ5c2JioFEPvZoHHrgzM5J/a9nnMQ==&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (freeocrtoword.exe)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=hrcdfMMNNHVmuK0X5seMoSbtRhQsUkB2hvCAOoRwzTE=&c=IrzLFRm2V56edCbi761oe0uEKskjaKJW0snTPG ePV2JLGCfo4YCC3rVB3dxM FkxwExFlhxxpim6orbuOyVgUOhqHFGWOgcbfjzRVjjOFvr/xFa82X6dHuFVyDtF0bmn2s1LokCEhEuas11TksYHQ==&downloadAs=AllFreeDVDtoAVIConverter.exe&fallback_url=http://.../AllFreeDVDtoAVIConverter_IS.exe  (fbb04b6578f8717dadd815df05c699aa)

1 / 68      (PUP)
http://www.sendapphost.com/c?x=PU7V6u67Tr86Mr0LC/iQ1/pDiD8CFeEvtxb8tuXvfqc=&c=bZYY6/NPFYfaoFYeYdvtNUQazzKt8LkAEHqq0SzT8j gRyTYzZbU2ykjbQRkDQDUJQOYOJDpDHTnl6 ID1Q2WRf7SWf Ead5Vew6PjYXDEvfA7I7BsW3hKQDrghtVcpj76lTZviJ12nCf6Q OLQGrg==&downloadAs=FreeSecurityMaster.exe&fallback_url=http://www.downloadonic.com/freesecuritymaster.com/.../FreeSecurityMaster_IS.exe  (e7a7e4a668e1d883911b26e06d91a765)

2 / 68      (PUP)
http://www.sendapphost.com/c?x=RyFUqorADZKm4oDRC2IJC1SmIhFtSfEprfc1zW5hPr0=&c=4 UHjWQYz3mwybPWzsr8Taej A3e9YUifGFEXGiTzCm7AH/L2wirvEYiZsKW5ObmLiAzvRnlCmv8LRGng4bcFm90ULfcEl/4OKzuu/GphKZlLsaVl9TphU D1JOv2GAVxPjjvq2Gdz5cHbIleS55Tw==&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (b2e7c0c64115059aa1fe7867b7bd6215)

20 / 68    (PUP)
http://www.sendapphost.com/c?x=gjVl8dlWVf8Mf2gupx5QO9adNHKvKSFG4twmPwBe0VE=&c=Mwe1soPYrLb 84m8kOEwb5onVVoI2JAnN7yU5ofuWumPDkoq3bHMtKSk06YTr6QmfdSmSyqYF1GYCoj/yPr1JQdKe11EKatmuAqT0MQrfy3Q smFFEWfUgsr4hUvLij5CyT7uN3ZS/QfbxKtbUH2TA==&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (b8015e73c58dc3d60e8796eec2dafd19)

13 / 68    (PUP)
http://www.sendapphost.com/c?x=pevQ7daHfUtJZi5f3VRZkjwzpB3s/8goLrVqq3y9G2E=&c=YhVLmp5EW90QqXHT0sUcwBgi3OUamYUkRTzrfU6PUERH37rNXWTB6apMgCbyqr6kTn0VIcuanjXcpwKZH2ZirRCw74KsqYlNQUZs6IbnFwGZCQVClJBqtor5mVkNx5e6JWyadEDVKdVSUKHcGBIbZg==&downloadAs=FreeMP3Joiner.exe&fallback_url=http://.../FreeMP3Joiner_IS.exe  (3620bfe4878e0cd66a55adc097068783)

The following 36 files have been seen to comunicate with www.sendapphost.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.