» www.towerbundlesmeta.com
Overview
Analysis
IPs Addresses (11)
Downloads (116)
Network (6)

www.towerbundlesmeta.com

Communigal Communication Ltd

Domain Information

The domain www.towerbundlesmeta.com registered by Communigal Communication Ltd was initially registered in March of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Wednesday, March 16, 2016

Expires date:

Thursday, March 16, 2017

Updated date:

Wednesday, March 16, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

towerbundlesmeta.com

Whois:

1 towerbundlesmeta.com record

Scanner detections:

Detections (88% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.11 (M), PUP.installCore.DarwenMa.Installer (M), PUP.InstallCore.RE11 (M), PUP.installCore.Hodo.Installer.Meta (M), PUP.InstallCore.FC.Installer (M)

94.59%

Trend Micro House Call

TROJ_GEN.F47V0228

2.70%

ESET NOD32

Detection.Undefined

2.70%

The domain www.towerbundlesmeta.com has been seen to resolve to the following 11 IP addresses.

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 17, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 17, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 17, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

April 17, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 17, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

April 17, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

April 17, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 17, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 17, 2016

File downloads found at URLs served by www.towerbundlesmeta.com.

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=UbFvdiMyGhWN7cTMx4H7HzQj1kZXHj0Zmeow3j602Sg=&c=cpkdbQOJSCuDDacReEOZk/.../dJ7UAaK9e5sRaf3uvbjmWuOR6BCv4wXVkSXo0rQVGJD3DoYZg=&e=0&downloadAs=AdwCleaner Setup.exe (7d118cd2e7eb16fd0151cc7c8531cccf)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=3hOXzM NrpfhLd7h0m3varlAbIy5HVHQ7m7LvVFw IA=&c=xTpfHI8eFNHzrwBRtMivgMl f75LTY0Mq50GajfKsgQ6vr5ia0pa4Yx7S5bWmEuQnmMBmZOUoQtNUaJpiCNyQ3Zp7wq7ctc4odjzRXAgpXQPt2XSo61rj1zqFQvDpAKuBShXgUOZdibfKrC92oHc84ftF5cPKScfq0Hp87wHa7Q=&e=0&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (e73455488f38faa5021d790db1507de1)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=FhCGVylRed7KUSCqCOMsWFRmuYLOZrQvo3JmHmj0UsE=&c=k8AnH/aqFr8SnFG1 M3adSV4fcvRWYGcSK26fnpZ3/g9Pm/v8AP1pLawt/.../f7tUn0ZB75cZU6Y6yy2WYbfYq9 Z3zjr719ouxLzbWzwQlulC2N6xDdYQ fask&e=0&downloadAs=iTunes Setup.exe (e07ca1b4ba134a2f57fb17de93df0be0)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=maW4sf6IwjBTbZOWoxMon5RKMxBuqUOa2j17f/efkHM=&c=g9d1q5AIgOu1G7BzEpe8jR8M1xkwLJvc9c8l8pWTQR C5UQELmkIJqWVGXrXbHwts2ZWny2aC hjKlkGgnuxu9 xCa6tlplUD54vhy 5zAWa9aaCt4tfNBbKQuCzeW2l&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php (google_chrome_setup.exe)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=6A8x49XbVffmElW7pf07z46e3kqy5OeOXh5ZiRtS834=&c=rCY6O/uhvIyfu8oZl5AuJLQwt9LNzC9wkOjLLmvf7cQl6qYiaF5swDLFo5fqJkNcGK WvnaZs6EHUHmv8WBFbDm2LWOxYqbjo ShQDviTvyn7pG3Ls4WOH ClWwFDrZsDk0ABSr8miFIKkR64InRr9Aw/.../fMvMaT llSKm15vKL&e=0&downloadAs=WinRAR.exe (b4b8498a686fdbabd985556a7735b03e)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=HO6ncc1NmRjNJp/S34HyQQAM1Ie7LzwvaG j4HvFh9s=&c=21Ze 0D UYWU0spmWe79BlRmCVQ0w8iKuuzTDiFBkWthfKKfsIV7wuSZ0tTwly6vIzUA5GT8Dh4M5ACP0E2sFMEkbLQ CRCPwEWrK/gvpQeB9XZTaSVm1XjmBaWq2wUS&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php (90a114e5ddc8fa6fc3a00e2cb92d7bb9)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=m7nbgui5yZ6j6EXCMZwRpxVz8wF12mkh2JZOgneCEwA=&c=DGqhvngVWOb5z9op3XWAV89suOSqCApo8BN4ctuUcv5MddsyiqKinppkAPJCAaViiOVlPJQSR ZKTseOX6GArGvVbA40BGLMcWT68jZ6Ntkj5vIa5stZhwfH5F5Ccmt4uCmpFDaRZkKTByXs1pUdRTVvsYUy6IUP03jM gcqeVY=&e=0&downloadAs=iTunes Setup.exe (d857634e20bf873b1e1b04800bb676ef)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=MKWXBUZny5qfXjhRcknJcHzJWX1stzx7MH8xWucwoKA=&c=264AENKjACxj7wqCKxWr5OGGl8bV 1DlYQkSqvr9cp8OFLiWXwYXqIpJzhTrHl8bGB0QdnWCtGs5dWi4QNWe 7ahdHiYnWjG0e6yCQMATYAV/PkcK7ODIfX02Xf2kdna&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (52f569ed0e8dd0882efc4b778efa5efb)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=s7S8GFD12AnwdhEiLyjae0ATfU1Wb3GsVqHssyIIu/g=&c=4WOG14/7n3IMLYgoKtssmTd6QNpRKM5LdzNsKIatyD8Doo3c YVsxMrEpq3mwePaxvzTCtl9dPhuQzIhzsDthNWIa t3oZFPQiS8Z2G783op9Xb55dzd78NtJzKU33f5QAQBXPVylqpYiC9BXdmV/Q88WfHxldh2IbmimNEkPWIRme3u9G3YkO/uvNxNOJan&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (5d84e2ab92f9ff6d36e821fccd5f6985)

1 / 68

http://www.towerbundlesmeta.com/c?x=NCGvi4rRh8ooK3aFWIOHeLCOD2BLDqENew2HdvKyb/Y=&c=0H3pTWNzbyKrply8uUGHSYESDtZKp7T3SAEGMflGT0I52exQMcCP1d1h34xYHiRz0RRqezGLjhfrdLVPkLBWgLIcA9N2EJ0FtITSiB3hFJGPxlXOrMhcE2Fiwyjbu/p84Nmi9QboAhZKAxiDD Kz7XMAtnEdISHcEzakRlVfLG0=&e=0&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (installscreencastomatic-v1.4.exe)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=weiqJa24MdhYSAbfL9PhEetSVhJICALbdj1DtgOJXnE=&c=zhl6iivMRbkDN62aGmjCK F Kh6V9Pwj9onfNIV7IZb2f/5z13sRDxDjuCOF2U bMoFXyDnsK4mz2hFhKMfJX4MuyFnBXr17Xp45xrGDpY2IZt0oArrTiW630F YhWFVkeNo4OHloSQ0SWEW/XE/.../2m8xH672VmalnChk=&e=0&downloadAs=iTunes Setup.exe (d857634e20bf873b1e1b04800bb676ef)

1 / 68

http://www.towerbundlesmeta.com/c?x=Y93w5K/wtqFvhwY x8 BGYp3MWv3grgle54qUXlppDA=&c=gJw37fIzkkIvCzvbyOcLa/STjgl U/6EqW5a5oeyce2EK 7GVpRv1 8h1KJ0nJOW8Km2jtQjMZTfLZ AZFY/47J7DiXSxTdphAvkAI 98JYLlBJS9joW3WOFCIQdyPKv0TrFMkpk17JrjZ7jL0aF/m/aWollJ3XxVlvQ7h5G7G0=&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (teamviewer_v9.0.27614.exe)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=rAh4t6imH0GeRCmCvEVykj8 Lhh2bTEK5hokxyejf0I=&c=V3pv/3wQEihOLSHVXWFviS3xTUhF7qik6Lzj9Ev00qH9WwRDFZRS9Wwu8wx1ZivqyitHVy9cQq607I SltMk8D/kBOYNuQz6vCFlgOhjnP d2vLyNxerRxn4Qws5wXT8RS8Hcgwj798yFetFiQTBRd1157Ey5VOWxd6HFwTbqlY=&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (e7d0ac88c40935ae36419c5670a64b38)

0 / 68

http://www.towerbundlesmeta.com/c?x=8na1MyzieV9QTjzMPirU10oeng7M5E6qEqCIltK8ais=&c=EUbiUn1sO/UcDstC65gzGNdi/3RrO3s57VG9hO4CSEkfHor2DmReUfCX34vZ6c0BE1Rtgk u3nsOVWpJUfVDCb0IWlqZyDE6sEvIbNGyhnp5GLD5AT0mi0L6Ztw46VAugt4Q2JxMgcrlu7r3lfeoE0JOC3C3fMS7kq1rS9OjSQ8=&e=0&downloadAs=FRAPS Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (7ccdb06729e2731af9d0dfbd86b437de)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x= 70nSdRnM2Q2mqnNM3tRy3KEAKBQzibqocRj X5HGwA=&c=UZLRq1tWfIqCoeB1S2pPmWooAkKiifSsoqTCJlYZ9OHo3l85i2Wink5oOxF6LPECfMLE0xswz07zi9PKX5Ut2A890043 0vLca9MMl1kMVqUC5BdGylrS4K7ASI5d1QN&downloadAs=Firefox Setup.exe (271e27c69b8b89c6e505724835c9b304)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=i2xGmpjgVk53xMAcrt0vi5Y7vJ rNjCwap4qmS3xgTg=&c=eEJZSHQ2jr3CVC9AU0pa5yOAqdh1BpUPD2Ieek9tKSu4jj8T3J/bPJM/.../BM11ap41SRtRd00fiavw2Dfl Xh3lVA2yVtpMrRI3mNJFpjdE AP NhABasnZP1OU6AZK4gMaufIK9KpmfT&e=0&downloadAs=TeamSpeak Setup.exe (icreinstall_teamspeak setup.exe)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=J0UOki/GO69BAQUTC MmAUK3fZY07/rmrerxyF8Tmeg=&c=yrN7vez2nJLY9wDSALxJC123XmfpUuw6T3apnVmm5PkxbzsILSlEDDrEbJI2241/pg5qQvgWmRwhAb9CckH0TkySoEfZQO123zw2bAaHbiXNghgcTHj4a9Nk3sRr AeL&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (513c6c0e39afa76d9f7c94b31b6485d3)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=meQUUaAJkVXUOoljzbx0jUF d1isMPVcHwUjj212muk=&c=MKIn2ghO6cGNgE4KeEID5lgd/FV2BMan/A GIZ3ivHFxzbUi3L jNopoNAYfx9KgQsbcQKZQvNW7GYbaLKOksVezVJHAkh6Aoos8d6n8uiCiZM291TY0qi1Z7Nrm/BfY&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (4365145faa40d2acfadec0c227300b7a)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=FMDx7aQGl4jFWbI2B9KBBmIcSYOcudEUZgzpZFCg2RU=&c=jnSYDZ0QAC3sZu58ydd1INOrOmZPXxK2wq0hneKShtUFtw9xCH3seRJiROeGo3iJjTfHJzhtWuk5T4oj8r6RO 2GroemleSziow3pwjl/axTcJWaPyKWnE6fPt6NLzEe8KTRqF/kBnGSkNwNk05CPVbDqg gD9aJtB9aZGAXI6I=&e=0&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (e73455488f38faa5021d790db1507de1)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=M2ms3ZGRLitWr0QxUkHcUsnV9E88T5nr1oABr/69c2o=&c= vfdBJ/5HH6iaHLTK3MAxzH95Mufp6Nx0xIMU475tMS23Ry3NGBkFCcqW3rzz/UmbXF6anU/Qe4Gz7Py3wrO5teOG2MM6yn0af9qyzTSnqMIzhlB6H8tNPUcvQvmw/wfbvMXodJE2Zcn9OzECbF2GG/KYIwSR0MQ2GOmx9rje7H6oObFUorZ7VT52FHVa03A&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (743711f0599bb9dd408f817c41f6fb3c)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=3Tvqn4WUtPF5NbBKBLrs6PDr WvWRDI7PpqWSASHDbc=&c=7//qJmEhuRIcMq16VgbnVWTk3E1raOR7DYnfKyAAOqCt9YKmxejMPkC4l3dZC88P58q5ffsOsF5cvnlhqFHHS02F4lbO3d/m9P81gnsb8G3g lDSWbw 9Uenn7CbTGbP&downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (14ce5fff72fed632890f4ab7024ced48)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=IQJZOkhjs6Fh5ltOLeRy9ii8ApRC4By1a0DlZ9Bg3WI=&c= WrqDSFKA5vJNDLM65e1XOS3D4tQF/MTay8ImUzSdANeFvrHYaieZdxU/Pk2VHbtcpegj c79Zk HBh5izGrXJrVw8PkA3rOnQ/0UnIh6j7HJdY7CXrXRg7/4gkMn rh&downloadAs=Samsung Kies Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (2ab6588b47b2bbec3f5448182dbb3896)

0 / 68

http://www.towerbundlesmeta.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 (safari setup.zip)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=gVUVO4ilg2Dyf4Bk9DinpsdIlYfdbRuQPAmZRp8JHmE=&c=NVcR0wVRv1wlIEvV1vD2hbVfdZQIIjl8Qvq49t2AwOOCgpUcAkK zzhcb64TF aFbTZWb478MFQL6WTqZTV4cqykTCCJ/6 EHfbxXs06r47IHAP2/jvghBhIkatygIJNpufW4bRSdjGgYVA/ODedRZ3fDRW5oAdKZrpCg3R7joc=&e=0&downloadAs=Picasa Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (9dc073f76b2e3302cbbce4364fb3758d)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/.../8NhxZBYECNK4m2 XkM9paFuWh6JVbz6osAAHPoHySK2AGLeIQ1L2SMQftbAt2UoXzjsUecKWur0zauu5htR6ifSj613SfF5OgPnvui4lMDLfILtw1hI=&e=0&downloadAs=WinRAR Setup.exe (d5d1cc657e3be53ed91956ed3ed62293)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=ni06Y9 paUQmI8O9vwTZC wh6I6JnZYMQO6qLCPIhjA=&c=hS9TqVuSqDXGrQBeS6EJOANjBHDVYnRIjnTGWIyLAAX0x6dpUyetEOCZGmBCdQrLynggjUsNWz3Ze CbhSvAH1oRA86hFopwQJ1L3ezVSs a3liuj6kTbE/TAuh9u5JA&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (95115c56ffae85bfec39839dbd90a67e)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=zvKBRwWtBzouCUoo60a91V0zSYSQsC3UZKHQNm MAOQ=&c=48I4ZL4njaqkbdXBPqyyOOG62LOsnTAyqW8nfVkknvAA2yuLfiTcXf4TWlEj5HLFSZrqEdeap68QyoLjL2uNrk2sr/GynOL2SjHjcDhkWFQcfoGIW/KQ3Az4KmJt9ih6&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php (06fa695fcf6514e37313296bcf434a2b)

0 / 68

http://www.towerbundlesmeta.com/.../ IjlXfcFCZ0dXjLcsipzvYT3spY4OjQyuHUgzHk JLqfDxYrrkPMranN3Zass37pkDrloFhkSMSs1KUaCPBXD7iT0MxBj2IvY1udQq0ggD8qZ1YQ9gsnhiiNZEgIu 5KTnzUfvVCymY8KsXdZC0lMAb7n332FZrtlA04VZvWjly7iMY1HSHT9dNUkxnjTl&e=0&downloadAs=iTunes Setup.exe (target.exe)

1 / 68 (PUP)

http://www.towerbundlesmeta.com/c?x=fuxf7j6cZZn6TaXILqF8M2LSiovdgTT0XnbrsewpBaI=&c=MS5Ye/OWGxSqiv5VJJYgMj FOPAGjjtuGBLWGcyekzd2Ue/a8aYePzL41AvLZ/PHcib9tpL0aliCXlu7Ir9sLJCtQbT2KMIYDHNbmHa4Vml7F00jFnkT2507Mf9diqCQvkWxnF/.../bPfUMyTZsutqKY9c8fhCUbb1f0Vb&e=0&downloadAs=iTunes Setup.exe (e07ca1b4ba134a2f57fb17de93df0be0)

1 / 68 (Adware)

http://www.towerbundlesmeta.com/c?x=1OFMMJrLhRIkvAnqrnV HN7cqliOH/Tj6kR1PjPk2o=&c=ORsykD5S39OQoF0t5NQSWLMUFXn6GO7CZxPoBc/dpqpfSnlFeEQ3DQ3VDelNQNvtGgbCkgydUQWoJLc1ynzHFTPZEtI/1LaNWNEPrsx Ivgb8VJBiN8MNFW49vgQkCTlx0Sl8fcsVY5960h8dhGxv/NEOcwAwTsNm0R1tCb5qkE=&e=0&downloadAs=Five Nights at Freddys Setup.exe&fallback_url=http://.../download.php (icreinstall_five nights at freddys setup.exe)

Latest 30 of 116 download URLs

The following 6 files have been seen to comunicate with www.towerbundlesmeta.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.