home

www.softwaresignsbundles.com

Communigal Communication Ltd

Domain Information

The domain www.softwaresignsbundles.com registered by Communigal Communication Ltd was initially registered in November of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, November 14, 2015

Expires date:
Monday, November 14, 2016

Updated date:
Saturday, November 14, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
softwaresignsbundles.com

Whois:
1 softwaresignsbundles.com record

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.Installer (M), PUP.NewMedia.NMH.Bundler (M)
100.00%

The domain www.softwaresignsbundles.com has been seen to resolve to the following 21 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 27, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 27, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 27, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 26, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 21, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 21, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 27, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 27, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 27, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 27, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 27, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 27, 2016

File downloads found at URLs served by www.softwaresignsbundles.com.

0 / 68
http://www.softwaresignsbundles.com/c?x=muoooGc0nguM17ujTRQt1 WpbJPylHk7gjnrKAgneV0=&c=pmeS2h9c8dFoFK7AqGKOkRoaspQiWyYwVWcWszVD9XaDgOXLSiJuJv49z9WLDWk6k 4NBcALZk XGTc40 xTCgFvvwgc3KTalN GituTrEZC qCNoTM5SDa5UwXq7kc1 WPm H0coytkUnB1bzRuGg==&fallback_url=http://download.microsoft.com/download/8/4/A/.../directx_Jun2010_redist.exe&downloadAs=DirectX-12667-dp.exe  (WEXTRACT.EXE)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=8 uN1e6MdTw0BgZERBxI0QLio7jwq8ol3FwI4P218mE=&c=Eqpksm81IMDs7RD72 TMxhRMjynz2UDUA 550atbrYiQTm82iZgelDB8zW94WeSNZ93UiZgxK/SBvsDiKumDhaDd C0qN1mYU9pWCBOvvKVbldD8tvjczmmwjE4C7 5Q8cIyw rspYGwQqz1d0gRRw==&fallback_url=http://skylink.dl.sourceforge.net/project/ultrastardx/UltraStar Deluxe/.../ultrastardx-1.1-installer-full.exe&downloadAs=UltraStar-Deluxe-69048-dp.exe  (3cb89069530ca34138dcf6ce451f76fd)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=boJfohgi/NTxnjwVqEW61PwjljRiFqnkTH7mLnG464s=&c=TszxE2v4EMXvDV73rVa4Z65kvZjbFHfN3sclp8ApInEcG4VjBeootjbmGnNmtaBP/zEbJV7JWCsq1gEZy1x7Uv/K9wk8Z8ryqYit1gcFLD1Go8CvymeMQVOoEuzbY1wav6Y Fp02V1m meIqUCjCXQ==&fallback_url=http://download.mediaplayercodecpack.com/files/.../media.player.codec.pack.v4.4.0.setup.exe&downloadAs=Media-Player-Codec-Pack-37332-dp.exe  (c834687e2dc5605b3e64fff977061ce1)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=hJYiEZOofIGxg7/TLrxk7z20wJL1OT yoa2jSP/pxkk=&c=n5/WavCHB4awVtu4Yx2TBXl3BrDoFIyCLBSUawgdWbhpfm1hJ8JiAL95eMypKV sEUIBFR1YEv9invLmJmzhiOx/PmoMBLFS8Zh161ypfC3B3krR3 DCGfDnr9AsrHYZ6hxpWJiS1F0EecyWjfUtuQ==&fallback_url=http://nds2.fds-fire.nokia.com/fds_fire/1409/2313/.../NokiaSoftwareUpdaterForRetail_4.3.2.exe&downloadAs=Nokia-Software-Updater-30568-dp.exe  (d992c5da04bf8dc1ea472c87aae714a9)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=7obDk/6G4WHbz53RvaTkK/8KPAOulagD6i8GvGvrpMs=&c=M8LZAfawq3jmE91vMbW2T6C8xQlvzjhbpwswNjRRIGmF0vdP5K35qfIqbDfpb1F08r hYgPGkHy7S7pRuoKYuvteMmP1o/yJdJaVK1ppvIDyPZPbzYvVABDziT /77ryiBt4/ETXmmt25ekG2Dj4cA==&fallback_url=http://storage.dobreprogramy.pl/.../moja_lazienka(dobreprogramy.pl).zip&downloadAs=Moja-Lazienka-11863-dp.exe  (60527366bcc5ea7aabfb3935ae49e09e)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=AXwP9iq98LAg42YKjPA48zvNq6nJTho3ArReV1IAPRw=&c=79c7cKFUr1aIZ8YMk1ttFqQMm7Au1S5VJMA15jFRwulixmL3AvPT2lb tkF9JBb9cY5vEHeog8g2XTnXAwuxEHE3SDjfUZtDCdPUeEx0FvBHjeeroLzF5GrDId2cMN3j6PrjqvLYA5ZAT3yXS9AMEw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.2/win64/.../Firefox Setup 43.0.2.exe&downloadAs=Firefox-13108-dp.exe  (b1999146d63abcaee4999a320d6a1eb4)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=tfQX4WbviV5EJ3KU6PmbPhYMAZyaZJHkM7hU3bbfEtg=&c=sTIQowoiJ/BUZJFeTY64F22DXogFPhhGZ6JIDqmINfGKmZXB7sCEIQFxv2/Cq57hSg /lYva5xQdEeaByRcVByRk4HrxjdBUT/f99pSvioxG7YoOfyBiX8oDQqFOjZvzz4jEY70g4xQJz0fQk6tu/Q==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.2/win64/.../Firefox Setup 43.0.2.exe&downloadAs=Firefox-13108-dp.exe  (b1999146d63abcaee4999a320d6a1eb4)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=pzWM u26iraDc16l0PettdOBuoJYs5xg Av/XVxAeys=&c=CbKYBHqs940jj4l/w1Sbx91EMvQuk3s/bObSJxU0ESTpPrbwE2g1YmYP2lc/DK8Mh9mirQDaSX9QePtR1oUQtXxVFXGiI3i39CL6RY7U5MqljzUJwoKjhf3vaFVDcuTK0Q6p/lY7 fux SfLnyQj/w==&fallback_url=https://launcher.mojang.com/.../MinecraftInstaller.msi&downloadAs=Minecraft-41028-dp.exe  (icreinstall_minecraft-41028-dp.exe)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=2HfWkaKz3fjNBMG9dvmzubRQdRwdVuZctLSmGVKVI44=&c=y6I41XBbKSU6TR77TssdVIdECVvzr 0mJ1onSziTeygXiUsqk1BqXkXd7rJ6zlHcA5yF5Mk/BSZ7ZNm/TRGOWTJD1MH9NLzlnPqLQESEjiEE ARpqPbpVdo//4 qM1M jxmeE62A/hW5gfRmq9lBSQ==&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.25/.../Opera_34.0.2036.25_Setup.exe&downloadAs=Opera-12614-dp.exe  (f647d142649d5a5476ecb024f9e1d731)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=Hm6vpEeBWo4ygDk4UxVpVlE34vZHRnsETf6V deAyY8=&c=YlnPA3eDWHqYhqWdAnXZo2c7NtbF7tAWdLPkdm0LOkoc2euB9Vps z7WSgrbNLo5UQRGJu8I5kBWZJkY 2c0cYeDCLsktUr4iVXulc3aad4bWcE uCZPUoqIqOQO86c2PkFB2bK93ZTfUY4RWdMW2Q==&fallback_url=https://.../hamachi.msi&downloadAs=LogMeIn-Hamachi-12323-dp.exe  (ffa73a69b0e706eb0689f17838970d9c)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=1I82IZ3RMcW67g2z6Cn40hPbf0d We50NtwTRvD04cQ=&c=HBMxO0wi3Bzy32PN0BRdd/yD7mU86EuoTegNIXl0h36/pyNCCII1WKrfB6/PVGKzGffRUHSdJRkCCciFcRc6SEpzCmFItq5d06pJUBp30 fyOEzu0viaRjezLEfcgS9jVkqFikPWM496Cf3oCUFfAw==&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (icreinstall_daemon-tools-lite-12708-dp.exe)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=8Tc4yrXcEiUriM AbaEwM6J1zdYwrCUx379eQLu2V0c=&c=apCrhNnYtY 8gjIdJSJWnU rQIQpIrgOGBZcvWdXW9cFHnkQVDremoM97L3uYqGMFK1MsuKff5Hp/A56RM0EHoujRYtfseILn3tLKwIKIy4w9UtXbLzMaVTObSu5pbdGKzV3hf2/n1H204Fvz6F4w==&fallback_url=http://swupdl.adobe.com/updates/oobe/aam20/win/AdobeLightroom-6.0/.../setup.zip&downloadAs=Adobe-Photoshop-Lightroom-12898-dp.exe  (37ec8ed63a408e63f8c83e0bb69d6aa2)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=gnhnUEfc7URE370dKY4Nfz1FshB J/BGIzEmlMTqOOg=&c=hUpwyMUvJbvTLh6 7z2OIew 39CQm0FekxlTGUilbMJAAIuKOphy7aVaALEBCDKAahg4o5plOcYSMm45vSxr0RrJlTX8Yr9/T0M938gVAwKNdvAlwNifn0sT5d8AaEUWXWPaWUu1d 1/L6XOxQXw7w==&fallback_url=http://get.geo.opera.com/pub/opera/desktop/34.0.2036.25/.../Opera_34.0.2036.25_Setup.exe&downloadAs=Opera-12614-dp.exe  (d68efdbf5f52396711dd5aad626dd2c6)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=PqPpoo7VmGyIlaycsRHTJC0xFvSiUYemuwB2Gbz I0U=&c=l/Zxoz9M/E/4dUrV rYRmsqV5K0z5JVgWLbl0WFniNmFhmijECuM mpYXJgZH9ziOacC/zvmWRVhmz0bOVn7iQunaYQzV1E2GTdIFIKbVadQx4UBGHTYjzNwBcGkMPmjCZTJ1OUzmbdDiDJ7L5 H3A==&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (60df5f1f0b54536abdd88cac68d50dca)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=7oBz4eDx22FaBMMFqOJYGnmcA7uIZRx7wcd6knKszU0=&c=ub7DdDq6YU8Il7ZZTQdCUNTp3UdEpjOTRDl8FU1krVY7sH58GDxt7JbkF5EUllN s1/I mFSIzGuocYBpobtcMWBvK0H4OhYVWB5lvcaNL0QUQ1/bERfOGQsExlOmxFqYvewvvwtksdfm/KBd4edOw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.2/win64/.../Firefox Setup 43.0.2.exe&downloadAs=Firefox-13108-dp.exe  (b1999146d63abcaee4999a320d6a1eb4)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=xZ8GgDV3/0ygzaibQVMV sOypJgO ONOBqjUsbmuxh8=&c=wKY8kwB3fD6tHOe/fR00BsNcaTPXKPQbROTuGpO1yHwR5Dx40k/WJoItyibQ4DtZtKolqpDkQa gTPgdaS49i2L/q4Y0XCWhU Lw4LEoo2Z70pnwgqanDBWBxt2Zf /S7Rbwz 3c0bwPrpuV3KcrnQ==&fallback_url=http://storage.dobreprogramy.pl/.../enpm800retaildemo(dobreprogramy.pl).zip&downloadAs=Partition-Magic-11470-dp.exe  (ad326a73c5f5cfed08b908d04137b419)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=tGrx2jOzur2nlrC6NnYY1TrgDQyQAiGOnDSdZHkSUuk=&c=WzaQSqfp 8FIpg//ZjYZHPq8/1AnjhOYQY0f0EgKbIMstnmmTASfdhQCpVHsOwhxtk8gbSswSbu9qTRcUHV/0kcrf2xTJe jpBjalZwZMRiYRyCbwEMJmdzAPX9C7yM61hObFEPLQBMHhmQAwOLoxg==&fallback_url=http://download3.easeus.com/.../epm.exe&downloadAs=EASEUS-Partition-Master-12861-dp.exe  (995fe8489664b498858cd58134fd0d02)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=awpFRtQkUARMQupLJ8eJLbR00CixJpa/L5nUCfEbsI4=&c=rK8Z7id mQNm7fF2JCWa9JWdS5410GPvJEvuCSWblPJkv9Qvmy6Iukzaipr97r/V fepMsd8hBTQVS6l6KGa3X17oNQKc16ULWVEiAdMNCw7OcK4IaIiOWMd uFeZ3bKT3QMX Qn3ArtLcFn2yS9iQ==&fallback_url=http://storage.dobreprogramy.pl/.../BitTorrent.exe&downloadAs=BitTorrent-13103-dp.exe  (ad8b2a3498036919c60a5596f1973373)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=Yk2fDhHL2blTnOM8zSIt9hE7jgXKSC Uu5/z4gAUWZ0=&c=AZd21vwmHgdHz7bEYN98YMrzNzAvnARxbL/Z PJgTzFRCfjCwCZMRKaT/DeY1WqIzlMRgbLdXeKDcMJssZD3kubUcDgaXhheahi4dF zJLe6GaiJeGQFYWL8BqdyLGQ/LcX0vVsANzUCGwCt/2Y1iw==&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.2/win64/.../Firefox Setup 43.0.2.exe&downloadAs=Firefox-13108-dp.exe  (b1999146d63abcaee4999a320d6a1eb4)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=/MEPpPKMKCXujSPIzc1xLdKFvf5DNVCcTF8qlrb0fGM=&c=k HXuTfQxtzC4sNGsQQIpPbULTlXW7OGI52rFv1bhhCocGSxjppvJ3w3KYSDrVEREXlGZYdtruJ/OCINeJfJ5jW81CrYCa7AGhFzI/xJZ1REhIsysX5egx8EAI mBeN dxn5 hwV VQtg1zHE77qww==&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (a5313d828de4a602b0e0b765e81b651f)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=bmtUqn74/6GwHcgXNWbPZyvg2CH1ig96LE7ojBaupzo=&c=I3lqI6B4ec0ClE1VwYaITOB/L TxoyLvDm1gFXLKL48ZlQEDprJr7cx9 d5e0 jeQ4opexsYRxdUG17 BmbgqZcD7MzAOmOPUlwyIDbrf60 rzmrKfLtmNukJxw2K7doq1o AtfqmuKiZQCFnhQIQw==&fallback_url=http://media.steampowered.com/client/.../SteamSetup.exe&downloadAs=Steam-18206-dp.exe  (423c80bdef785a3520bbc5a850a46c10)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=67s2ChsGgi26P1tUFMli8/ihFVNO0HULU3roYaWGdgw=&c=95CaT5zxvyz6AiBje25zhh6rgLy0Lyo3s/qb5n4uOh53nVjF8Xq9fSjno7B5YnFdO K9viOdlLMgi6LsqlWCTc2YHORpP3CASofHDJW1egOsWNBjk3DllyN47uK2FouWXlc4lk60E3MiuiqmsPpPfA==&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (ee34f3b4108246bc42738a2d03727037)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=be3E8IWZYmeKqQdQnaKpzW6U3VLW8AXml NzZbUwUw=&c=VNSqtwSTFKA/XlQZdqGBaFkCRjErchQ3jcXErtIf4HD9eMVFI4b1U hlgY cxOvRHUuz/WftQrGhYFeWLRruDECOj0KpZ182SBPTGqhBPfq9yuM7fMpLcdF3QnCZkS7Ajw8uYTcwA3QhfYxaeKcI6A==&fallback_url=http://aimp.su/storage/.../aimp_4.00.1680.exe&downloadAs=AIMP-12499-dp.exe  (35cf53c2caad9cd527049f2cf203f33b)

1 / 68      (Adware)
http://www.softwaresignsbundles.com/c?x=06wmFJb9thdnGJmf7S5/AXa1jcOonCztnUXNpP7pKCU=&c=X7smLntP1OYC/qNWqioPClDpytzjyy8EVGvmgTDsZuXFgVGS7OHYzW2AeYb6brdZKIbWUVs2TjzF8hmruIpRvcQoK93toEIuYz i/ttp0xxsu7lLldI0khquzd83OVbkObpYN07p2 E1ft4Je3zhLA==&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (78d75467968f18d8c5205116635fd0c9)

The following 36 files have been seen to comunicate with www.softwaresignsbundles.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.