» www.stocksignsfarm.com
Overview
Analysis
IPs Addresses (10)
Downloads (52)
Network (6)

www.stocksignsfarm.com

Communigal Communication Ltd

Domain Information

The domain www.stocksignsfarm.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Monday, January 25, 2016

Expires date:

Wednesday, January 25, 2017

Updated date:

Monday, January 25, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

stocksignsfarm.com

Whois:

1 stocksignsfarm.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Bitberry.BitberrySoftware.Installer (M), PUP.installCore (M), PUP.InstallCore.Installer.Installer (M)

100.00%

The domain www.stocksignsfarm.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 17, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 17, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

May 17, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

May 17, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

February 17, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

February 17, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

February 17, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

February 17, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

February 17, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

February 17, 2016

File downloads found at URLs served by www.stocksignsfarm.com.

1 / 68 (PUP)

http://www.stocksignsfarm.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 (6dc79c7a_stp.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=RwjALLLQetvczwpPhbfkk7zylz Lr0N0zsDkoEHePug=&c=O7jYlEgkn9zK95DYhQkhJz4hJ39PUaNuBjkCIdqANopljJP1KaeICqXS0wTzOYSV5m3EDCLyNnslZUYW4j1 553S7fg3QbhuPC8b4L4mVcO/W7vJ9XZBGTFjSJyEAboA&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe (9f95670f9d37f8fee437eb616f6dd09a)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=ECLjTgDGhbhkntykVxku/lgMGq5HmegZzLR0bHBGK/s=&c=oDF4yyMbaH2SjP8manigJ3gnNSBZj7G/1TNnNNDkburobQOPNJPj3DBRw19lQg6nMZIJV AWJMj00JstTPQPj80zvQo4tBooR9R020ehTQ2jbTht3uNCvTrc8wBdg60g&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=2BL9ImT3S6JOEMcb2QDlH7SaO32Vda6yUUBzZ7yY2cY=&c=SpE I0zxMQchpQ2Rd5A3bFsPFICrvqYVgCwK4hZics4esEnS7FUqQ0PcT8n/mODEZswzP37A2Pc5ci9YyFsZzW 4H0hq2mTpr4BLqyt4/tH4csi3jNIjCiZNRMRDdnQj&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=f34bTyd5oV/0Fv7SKHpRB4LqIaQtR0sXEcSqvDiBCgo=&c=u3eaklfnH/0HQlgREAcRL4myKK/cIEDJYigjNo7vJ216qQInYIzuztpC/UeP1BcxoFyOXkPlsalcZlUNEpmdIADJus5jmY2zaeZlEXfD1H9s2zag8Cf4A2gwmVGfJhaM&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=c3lQlFA2DUC9LwSsN86HqUbecDe3X/sIPgeSAqRh HM=&c=BpxkeuExMa3R7fIS26laoLMAQrvz8g7y499/6ui0MThejV8p8B6Cl4Hejb48Cq3a3pFAalRBE5PNjgvU8yH72eTCsV/X2dzsPjn6TeFSaiTKmMBjvxA0zeqbeVuOkwZA&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=LwdpKHVyH5NvKtivg50XmhbtaK/y9r5/XfTsKvRjNaU=&c=x6VkEoXN64honsTCtx3tP rHhv5PuUv/H40TeLrxlXRIgHtu2RzE13RZM8lRNSjdKBI41OJOc0gnCsblvN8Bs5MztALdRolux0lFoDo2DLbGzdky9rnl7LchtJgJ3t7g&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=fblUZp0dIl8NqMKTPmsaNqJBhNQXtudVp4rdWLBrnvs=&c=6aPQHGAEOC/zrSuw9KR1W21vU9qIMK42OLCm9RhfW21fVShRibtjk x1rtP9zmqHSypzSH2w3IIsxFPuvYBI w2UG2c7PxYirjbDnRMXUbKodLxcrTBFiFU0AkdGfO/6j7 33KbxRjFREI0c6XZlpLCho Rm/dVE41q/He5ANpA=&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (f810eeab914781b070db8c02fae77024)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=mYyNj iA1ZsixwL9GX6fhG42w8a3S8ZkGa5DWmuKjD4=&c=j 0dPAnuyPFO95ADPsCdHGouUb50VCmpuMzRY VyGyCZFmAOpdSK2kvK8vS4WPZM8fOVyHlKLGUMiM KgVdYpaEGxQwQyraVU U7OwcvkjQTF9Dlq85G DpTrQIZX6xS&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=IhFyLJ82OLMYTieac0VTF1elHO2txou43W6nN6bFGX4=&c=FZfcvbV647S3P2uKZPmktA6c8Pvg/vJFhw5jo4hsaxQ5naHPc5AbHwJtZMU2wnK3R4LpcBvrI5rKOEyC4I5s2fpKTh9F9MAyWGqsCoWW691G3GOwC JRODuKYOBalY0j&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=0JHvFxYYtKxETJn/FL2Ys12P4eS7eO/edbuBwsGP/RY=&c=fR/ibQSuroJO8nPHtmMm6qE7/k5AyxdJpE5ogmfrVl/LHRrBqEAHBO1QRGkJLrHAm HQSmacaLVEtHuOeP3J3R2HvU6ba29Z62W6iLvXI0bV4Xs8WMGk2pv8YaTPV5EG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=Fy/XckLxPk0kfTF63wtf1xBuvyTkxd 9KZUZfxeCBMo=&c=9EaDeDneeqzpuu2d9azsMZucwCdiPbnmv/f roR2lL43X6G0KotqjPQyuEBe0B6c/JKJSI4iH596tjBfudIZ3dviOiNykubVNRC09p9AzGRW94N xEGrOo35FviVRadG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=2rWFzdQSGW4n6AlGtDA45E5WwWsNmbtSsnCNRJ4Qz3A=&c=k6NSVX 02opj1n 3NiI 0DQUnInL9O7jNVzt0GBYHv4TRotKbjNiqBB ZWBkh1yYINIIpABRbWYZ pAYj5MONZ7kFg/pV2id4KEJXiKjzpwxyVRdvV2yN8p I3ucL8oE6wZISoKUgu4R RcmeSCREexyrRV je2TienALjoSmhw=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (d51f59a99061818bd8bf4c9590d58cb6)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=jOjN1cyogVrRDcZw3NuYUQLP2Ohk QHZzezD8bsowWQ=&c=amEx30pok6qvpfoQa3kY0SHVFDO94rz7RuNdxLzm/RCigL1SV6tBNHZe3A1GQUAzlTeAuz/Ec QNgcI7q3SaFswDggYW6/ScXrZjlq6alF6JuVBs4keT6wUxs42cH/nw2FImEb9AA6w 2MKvOmYJUZsUYyQw8999khb9PNsok0I=&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (c05343f0a1f530a43505c0f58da421a3)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=FswoTaTvVdbCfjrkB5LWdSTaTrMDEFpwAX lENu7NWc=&c=XeqfKMV 2pOYGCULixMgpPItRmsU4qRXd WPM1AktelmOeY535d/4J5wVl40TRO3W qjOrueusxwQC1NtK7 Z6GKJ8zErLBXnJ95qAjTHiFRdlCsRGN3TU8cWODfSSMdUvmEceu7cGI/aRfVZ bKHCMRERWwi m097kmkKuJP/Y=&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (f810eeab914781b070db8c02fae77024)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=JJ3o0CqFDStAZWyx94vg5WgF2lq3yQ0TPYDHF/EiReE=&c=nvgGHInZNq0bv0eql8xNJGEvS 3efDrOThH8bnv4YuE4tur84KU3mWT/ekDZQRY6LVcZVqFge8w0lxLDDGsoqyyMe7VIraSDK9V1Ce6q0KZ66v/CJRUiQix8xNcfnHOHsCs83zlxDcE/5bu3cxiAwEQzBPtxGXfaAqAfL2Hhpg=&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (f810eeab914781b070db8c02fae77024)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=JIk8gptmLsR QYgc55XBw 4sbKZpiKr7yqy1tbnCWTY=&c=k4ylGLGkTuv9Z jM1Z3lCBhlfbWYl7SNACP8gYaXwpR f0tyb3fOeQWYI3Rb58zZb89F15MywjD/93Yl4B1ExEw8EBu3Vt5R5YlT2lQQzP9HCbcIgkyOkE/aa6DEDi8C&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=bBYqnpFs WU1CglgsWE7C1aEyfbsm/IB2MIxnvXASBg=&c=XjSIrzh7dGYGKeH13AnmWze2iR2hptz60kcGgwDrYechlYI5AYH42fmP3nuDfRiLJZaco I0tNkECJcaibM6P80LRePgqoh5ZCksoDD6kM jrn7ipTwGYjPIq0 tYNW3q9zdYkf/L6Ei5U9BpCJZHuYDZce11 AlhfJ6ENs Bm8=&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (c05343f0a1f530a43505c0f58da421a3)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=vAXGTsE7/30ugFB8YHbiqTQe11Izatg1 xw0Vozucrc=&c=R4AreMT9hGjUJQMTDxgFUoJCAT9MjzCPvm4IaqDBIrteXrbZ5gwqVwiv3/Ij27DPhvY5G8785RZ3naI8o0nmDFpQwseQexmLEtpz46rWyvrwiKKC9CmHv9Ewx rGocsQ&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=tHB6fvqYVrKmbkQXgMO2e4TJ3M6MtUCMxNRnXkyChYc=&c=xy8pFh/KHcsDeZKDjrbRIukex3y3EUNayhRyp3S2aOSxNzyCmPPeqpDVRPLUCQN22sIYnbRokLabgSkt5/5ztOl4wLWWHsSKiMbyKU40E6bkH0vxKF9IgNbu7Y15PFOX&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=LaBMiS eo0 uUQRUbFzEEgadLMjmf0wPlCx/I6Jt5 c=&c=m6yKAr2oDZEUNgXFWuA6kjNcKHrWOBnt9TjVCXYvaXk5/prJaj1KNiWaguNcnQcc2UHvuTTfOQ5SkdtB6feZIxkoQnATbVKonr7Xz8gfxoaYAaNPkXkfZNIi/nN 2pfg&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=fXb/6R8QmLUXtfvvsVJlNcK2b68etrRWn8SCq2Hlw1E=&c=3 6C0c6WH8jjwsUER/bPEkbmiiAlxFX7O7eqQG72m0x7fXrAHr4LFm1auQV76M4Q4vMEjdh4E0WSSJPg/PFYFNBP5LkxeoEfOmi8QzpBRRBeTGzXSFh9zZBK7GdOrtvm&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=kmuiFSnl9j7h9IAhquQnVSjGzAXzcVKxX0X9nDvXqyk=&c=B1C wmpjbcFPWYzcxU9tQ8hmNkZ43UEWaYcr2uzEscXowYhkdseUEt91QEvwgB54ST4YsDiYQ6dPxbrL2qPTS9txO1tfcsHJil0/F2uentY2vHmvlDBxRqedo6s7muKn&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=iuNuDJ14hPEPzLMnvJpSQLePSYfvSQoZPRzvBAUX Mw=&c=jUWrZ3kgia72q9DfXKWKObzYqTmJFhQHJCSI4HAWziJsH3aCpXfNvovcuUi71hHMkrhPNFPBRedFsySozAF5qN1n/CGblnL0lUQWGoVCmGUp2gA6 E6F0yQRxY0JECGx&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=V6UrjUuoW1SVg2E87Qp3WOxbP7dendCmko53yBkyogE=&c=T 0HgW5M6h XrFm6B6AWLdPh6hwByZvy4RBBMjD7HhyaTUPhRmUafb0c0hYNN3RMlr9FC 18LZU2p4oVTm2MeOCELvSrCFx2EN37bNeRi/bfycTpTRe70qX1sL4PHY5oUl8XZQdzzwhcNMlLzYNCapAubOwR2VlIWXKeFXsc8VQ=&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (f810eeab914781b070db8c02fae77024)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=R1Es/n0idSr88tPrMyn0vXVzc72rQrjDbBISNxD7zno=&c=YHBQF4xs5Vwr/2 tKS6Q6e11tgg0ajHbiiEjuiCj9iA20LQfowIz3UGLAchOYbaI3/nll8By4ifVgbx/8X5DCrJLze3W1C2hdQeaclqXFF8M2Y15tjlugFxZ0/ WpGS&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (icreinstall_bitzipper2015setup.exe)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=Y6hBiYmqREtP6Hs9LIOHEZL5Vn2rxtM7sL2uNRWTPG4=&c=ZF/MJo DctWZzRjZeQeX4YIFpEblyY9YHA4DE1kkuVmT tFLtDFbyIB9toh736LDK6JcgMMMpFRy9HyJylIYRZpc3pWTB5fB5LH0hHwxuDT9xELI71ys2BNoRX/zRv1KYMYs4CApOUqxxrpNdSREB7yHCnCF7TSzJ/Wpm4D PvQ=&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (c05343f0a1f530a43505c0f58da421a3)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=QNkYUNqTvl2cwq/TyPJJqlBGw2aUt5L9RPmmpZa7ij4=&c=YcPh9Q333vDqZVB6FFkxJzoa/oh0s6ux7ZjuvH2JCnnwgbT5VTq 5oPSR6IfneAbJhCpdn887WGa/qsmBOUKpyjatCOBXIn6DeDdJFGePTAx8cD8n9oU3ZmSUcHliPsM&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=K3JgYSlF4HDkjKvHaPPPXAKtKQmIA6lCxRJVm5 M/ I=&c=iIAT3jO345nxcAMdq/luotVcuxIq0D KXEJTHtbdAzCEgmNkOpeWFioVPW79PX8V4kgvPzSiKGMwkX CWWsUjsRaF7d13HJ08bB HvUWdixs7B5ZRgfcy/1I iAmYBEY&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

1 / 68 (Adware)

http://www.stocksignsfarm.com/c?x=BAGwmGDNMPm6H3EEBIiKIXscSh8L0EcfQTnyC3FIW7o=&c=MzHKTi/GsgWrWNcI jcO3VLdThtcNJMPbutbFKkbz3pbjpGjxpV9FDxH5G/yi47WwkvnYoX zw/563BLyqR7r6k/frDoCsPNGUqvKXTjLF1591VKbJ3ynvMA0KYIrc z&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (cd0e00612b527b30522b158b27ac9d49)

Latest 30 of 52 download URLs

The following 6 files have been seen to comunicate with www.stocksignsfarm.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.