home

www.applicationsfilecapital.com

Communigal Communication Ltd

Domain Information

The domain www.applicationsfilecapital.com registered by Communigal Communication Ltd was initially registered in September of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, September 18, 2015

Expires date:
Sunday, September 18, 2016

Updated date:
Friday, September 18, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
applicationsfilecapital.com

Whois:
1 applicationsfilecapital.com record

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.installCore (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)
95.00%

Agnitum Outpost
Suspicious, PUA.InstallCore
10.00%

Bkav FE
W32.HfsAdware
5.00%

McAfee
Artemis!7D2C368C412E
5.00%

Malwarebytes
PUP.Optional.InstallCore
5.00%

VIPRE Antivirus
InstallCore
5.00%

K7 AntiVirus
Adware
5.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant)
5.00%

Dr.Web
Trojan.InstallCore.864
5.00%

Zillya! Antivirus
Trojan.Bladabindi.Win32.58383
5.00%

Sophos
Install Core Click run software (PUA)
5.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
5.00%

Baidu Antivirus
Adware.Win32.InstallCore
5.00%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
5.00%

Fortinet FortiGate
Riskware/InstallCore
5.00%

The domain www.applicationsfilecapital.com has been seen to resolve to the following 24 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 2, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
September 1, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 22, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 22, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 22, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 1, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 1, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 1, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 18, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 11, 2016

File downloads found at URLs served by www.applicationsfilecapital.com.

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=ymlYImF/yk76Le4SIhFOxhkQ/NROZUzch8xobj8l9UA=&c=hdXdFMQeHASmN6iSVyOEQLmdaqh2SlBynFwUN1G24Kryw35TQtQE1uE z1FzQet1xHX4clb0U5tIVxqDk1J33SeUmY2xPxSkbFGL6DhI5ZQj4JFQmrrM9tKB2Y3dZSm7m6tz0sfNTpJ8nD2wJ YqWw==&downloadAs=Microsoft WordInstaller.exe&fallback_url=http://download.microsoft.com/download/6/2/3/.../officedeploymenttool_x86_4747-1000.exe  (36bcbd3f2d1a56d421d157e63b9633c2)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=hzGUyXLTevD0U6Slx4k1k8YgbB0JkFTd3tVo5T70qYc=&c=KMbQC34FHJnUxPmRrMO6iRgEcOJKqkH43eWTrHMsnZA9k3T4nXe/pV1XeyfaCuwCLpkGBVoGwStP0QN/x5PVb6cyeFLIVLGpBB/ Er63X0z1yUFqOpI0de/ee7umRdgvHDwJqVrvlXFSW4EXL2hlrQ==&downloadAs=Ally's Adventure Through the Glass 4.0Installer.exe&fallback_url=http://pharosgames.com/.../allytg.exe  ({blocked}.exe)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=x/D/lbbNFuTnt4L906sRxyA8fp4oknm0vxXYKrpxQJU=&c= 3IMxWDVM2Er jzFvJOtQX I L43dnJ1XULEZ8zC2TcuLo5WHhuxOM8qdMYC7tAx5/AGjoMo1SH3w3ejWgqvGFHa mOopNR12OLhzX Xcsf6afeMB8FIBaujHW1mj6t2EMBlUk5spiiKWmAl3SirP XS7Y /F1mEa9MgTOvgnAw=&downloadAs=Nero 7Installer.exe&fallback_url=http://.../download.php?id=n2014-pad  (a4228e9e701f96620d8a817952fd3d0f)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=QleU9FJpVg9YkPV1l4m9E3dfzVC5YIwY8EPmmZ SwUo=&c=Q1ArtRW1ti16TOUAktkSR kLFVCzDQp8 c8q16PjJQUFhCFwjVy8OUcoJu zWkIzMhK9se2CJK/6drPpiiqAWSIZ0pSAiizN 67hN9DiRpPhE9HsVW2elL olgkz8Xu7Xz7FYfj2CdPsUqTDpJi Jw==&downloadAs=PDF ReaderInstaller.exe&fallback_url=http://.../pdfreader!.exe  (bb8707445437fa7c6966797961d2d751)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=fKd5D6xEiFfP2S1XSc8ktmRn6ryL4U0/c4bmaiKQpV4=&c=UtrF5Mm tNqCw4i2MX5MIXYnU5nS36HTRMT9U2JkjTnX p3GGbLkQx1G72mWnTOx3G17ROUkc9lZ1u8jl9nqUt46JpAt03wI/RnnH8qtNnt QhRebYnzM2N3lrrY85BUbjVkbG/zNPgU2MklmFUGVg==&downloadAs=BlueStacksInstaller.exe&fallback_url=http://cdn.bluestacks.com/downloads/.../BlueStacks_HD_AppPlayerPro_setup_0.7.7.813_REL.msi  (icreinstall_bluestacksinstaller.exe)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=1NGegOChIiY2csDUk5ZH GbvFpx/IDLwPdJQ9pdUw o=&c=gZhD2aN715b79cDGoB3fSETJgJZNmD6UcuRPgTQZYLHXfWP/cSHpfwqL5MKYajiYRQVfOZ6KHTjYiHwtRp5R6fCwwR 7LktcgazEdmirU40Qapu2Ac6tzvGkJEWQsQSxlAVK9TG4vu Jk4YWrTuZGA==&downloadAs=Viber for WindowsInstaller.exe&fallback_url=http://download.viber.com/desktop/.../ViberSetup.exe  (9916a090ad5838d7fcded4d223e3fafc)

1 / 68
http://www.applicationsfilecapital.com/c?x=yr8AbiUJMGn0d6GBTdjAW rALc9VvDqR1kSgs7fqiyM=&c=vHhmJAC9Un9e71bfwQhHwS2SRA3MlzVtwB938IlhbSGeTgj2da4ZmnNbqhRc0fY8Oy3A2Gy98zFeWzKe6UOIFWPv2BrCfLlNfN0lLrgrekrJFK7fbGdzpK9CO1w8aeZQNDm3hxCAWTTmZ2N3tgpdkA==&downloadAs=Fresh Download 5.8Installer.exe&fallback_url=http://www.freshdevices.com/.../freshdow.exe  (5d15377b3c602243271c4ebab8bcaafa)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=mp4nnF16vurCPAw8JNh9EkXRZ 4AB2n4iI8WoXgqQJk=&c=hEs6Zv27ZWxdYFRUsZK3FvbycMmsKKE2uq/K4Bbw/h3epQQmJmonUhPURy4PJLg zDCBrpdEwdpXJlR031RnyAgvUB2gqDL1pDIrTq7fFeqGzagZqvl1oF DFFplR34DZo JxU/HFymRzLPK1WAvmQ==&downloadAs=Adobe ReaderInstaller.exe&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/10.x/10.1.1/.../AdbeRdr1011_en_US.exe  (1406d86aa3a67733cabc46837895dd8a)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=BmkF9QLh0ThcqEWtK ywSKWxNkUEyIibhQHawYKNct0=&c=QK9SaDkSQTNytgH7QVoi2x3zza1/otBRS9F acvd 5xF/XyCSvi2y4ADGKyT2Ga5gY1bnP7fEkkZb4oDfXIAb1fYnCt8gnsMJ6D5co0wt6hhykZbz8MTZ2oEsvJbsAav4nkMEVpLm6S3mYoFjvcujxMLsBMR6wpYKh8hi4q7wF4=&downloadAs=YouTube DownloaderInstaller.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeYouTubeDownload.exe  (230999ae01403deeb58f1ec873c7a4b7)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=iPlp uPWsSt3kUWVhxfnFBiw4jrhFRnLLUc5sPV46Y=&c=p2LZFisaSy HFghYUa 4KoD3k61aFcCG 730FcUU39UJVEj uOlbrdy7qgj7pq2UkJIw1M8eAMjldhwnTAVnUQcJrBjrbHet2CtIg2ZzIzsCGwhN1angn6kJ2wnvc5KDFI Pl2HGVc mO2Ltsosx6uhaeX/N5Uj9Tx0t pHqL0=&downloadAs=Internet Download ManagerInstaller.exe&fallback_url=http://.../idman612.exe  (8989beab26403a562c4ebd0049c5db9a)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=Cb4QFRCjLuuDO/NKe O6qWRmvojifEZaVpLU 31Th78=&c=PW3R0JjIIoi4ijrCz5roB33vFLahB1dXc/xo9XoyZzpeX6/VZPyS1zQkNeBKne4tmosgW0CtZGJ61y744W8PCXcUjIJk5FBc3KpjwPBXYh sSxBi8Pc APURh5DBNa5hS5cm mgwtTxRabteesEmlQ==&downloadAs=Yahoo Messenger 8.1Installer.exe&fallback_url=http://yahoo-messenger.brothersoft.com/.../Yahoo!-Messenger-8.1.0.195.exe  (yahoo messenger 8.exe)

0 / 68
http://www.applicationsfilecapital.com/c?x=qCc7hxCK 3t2NLUQd876lfv7getHHDHxUsNcljozYqU=&c=gOnIsdWYFCYxWYmjIHGUn2XLsQnABH/IR3dzOtKa5yD3hf2JwwAPK3vZpFFbGKVTlCtlCj/pV3RavJcNvdoWT9cVrHgNoIHf9HTEjLLBFA8SX0F3mvaI K0IOnmmmCeQ4oQovxz6931oPKDOgh2NnA==&downloadAs=Internet Download ManagerInstaller.exe&fallback_url=http://.../idman612.exe  (idman625build2.exe)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=Pp263cZ7 qtWmjw15GdSXUI2VkvTm8KAQ4n745rrPx4=&c=kZ17tTqe1lghXCJfZemU7nsmk067tG0NBx 0xZtUBJwDzY4wev6EqRF5C2YP/Yn6zmGPTkibiOwewRp90t5uedyxNiLtnIT0aaERQI6aMJ5ez8tSWxzwx6Opk2nnx5iW2DEf627zHEdS9MRnN3MJ4A==&downloadAs=PDF ReaderInstaller.exe&fallback_url=http://.../pdfreader!.exe  (96ae3e9a84850973f51b5b28fd70c913)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=KUq jzF63ww6N/8Gr4QZgf/xsG1oZBzEOpLj8IIIQUs=&c=Zc3xz6HfrA47VyCy2t9SFY/AleR8QWKAFCAcwbT9LEE2BfAHIz1aSXLbMynLpU/HEf/K26TXu 8YqZXBnohrcgjv9kG1AVQ8rK/S1IODW7Ku4cTTDINGIHe hPaA/RtoDBDjtnrRe7yNbT5v2LFd9TZVcSYTyuLyfZkHROfKd2M=&downloadAs=YouTube DownloaderInstaller.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeYouTubeDownload.exe  (230999ae01403deeb58f1ec873c7a4b7)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x= AJhd0CBQ5ftaV8ma0RQjQLTTvd5HH/u0SYOCUVx uU=&c=8Nj0M/7Rk792DqDZxsLiT375ZnXbSaC940aYmP/o/Jb5Ky 98EU1FBTgKAKVWqrvR7BaTM2JK9wB5uhiYOxb1Czn7lbUnFHU7K9S YmbqzXPZ9x8yLUe7QKq7FufwStD0V/5ANDoN2zqJp83o3f44w==&downloadAs=Google ChromeInstaller.exe&fallback_url=https://dl.google.com/tag/s/appguid={4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}&iid={95315A21-492A-291B-AE25-E00412B9D2FC}&lang=en&browser=3&usagestats=1&appname=Google Chrome Canary&needsadmin=false/update2/.../ChromeSetup.exe  (dfef32ddd9954e4bb0047b6431102878)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=1qPtGPvuU1dFUpuXU1sYYdCGBdXvH3Lq7kogyEbzG8o=&c=1aWIqs6o8X95JY7YR9HnXl9Iy0F3JDCiRy6aPFMy9B8paQ/6WP6Se/EKPokq Vgv7qKmTuuUYG4nt671gJPZR1lBZr3SVTY wzsh8ohib8v28p9bkWhpaDBo 47DLrE2aFm1HZOBxwiRMtxkUkMjBw==&downloadAs=SonicFile - Send Large Files in EmailInstaller.exe&fallback_url=http://.../sfsetup21.exe  (897c6f0e3bb0a26c0660a9163ce5ed48)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=0x323UaKfH8sI5DeXj1twFLQTi7zahV GFT6OBQViCU=&c=mIa81qTtVH jSuMkvFM HjVsSXE 0fC23CS1OpJ95KLoVh3IrmTmiQk91Vz7su FwfU4ujutWwWeN1rJDWeoi3ivXbQ3EC SQDjMSm1uHKh/KE ywm4bw7i3q VpP7yz lRD5FUvQZe3NvnwVT2MaA==&downloadAs=PDF ReaderInstaller.exe&fallback_url=http://.../pdfreader!.exe  (d152c7fc3ccbcfbc29d1e19c56da0d22)

17 / 68    (Adware)
http://www.applicationsfilecapital.com/c?x=Cjx1abJpI0JYGyR/pXWfIqwqKv4ui0qVlWzMihkHsWU=&c=EVqYk ExfukkHDx/rABQ3N2GziFNdi9wZVFjsajYTh7735TCJoR3kvxU1oiuM9rIE65gPEWNYOmKFQ7D98DEG6L2tYk3IDDVT6v30pwD36yAKdBWVPbsKqe5XZyKX90 w/oM2oVIJ/ax41Q7ofKKqQ==&downloadAs=Internet Download Manager 5.11Installer.exe&fallback_url=http://.../idman620build2.exe  (internet download manager 5.exe)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=R4jN30 D0RWFvhBBOWruvIOPoxOxQp7rZMsa9DOZ Cw=&c=fxKl9hMHYFJk0h0al05cE3TAvkA1DE41KhdiI/wr0fAZgXhhyoVElOw5fiNgpGwYbRYo UoU/xgFt4VrPoFPeorMYagaMEdIQfYdJnUQOFYPMQ32CzUawGEbLgHU8dE9gqTq/ed54iNFPQj2VOacVQ==&downloadAs=Adobe Acrobat Reader 6.0FullInstaller.exe&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/6.x/6.0/.../AdbeRdr60_enu_full.exe  (adobe acrobat reader 6.exe)

1 / 68      (Adware)
http://www.applicationsfilecapital.com/c?x=aQHXijSl8wHjn3HcNGy5eH G3SdEx G4h10EvyW7Y Y=&c=43NhTA/3cN9r8jbU5W1RctTKBkFYefC4VgDm/2 eAB2ckvn6J2KU59ojStw1BaGVCFzR0EWSPFDB6d/Eha1hsIK7qwNHwg/Lf la6pqeKoCqicOAWOnb//P6knb3l7lL2bJT0s9WnzPhSaoTsoAECv0ysuSGqHKofRYIvkOCQ6E=&downloadAs=High Quality Photo ResizerInstaller.exe&fallback_url=http://www.naturpic.com/.../prsetup.exe  (c996bec7d5d90073e6789cb9abd0e177)

1 / 68      (PUP)
http://www.applicationsfilecapital.com/c?x=BkmydsxGeCERvlqaoCHyrHM yVcPZpe1dgqO62J J20=&c=BW /lN2VF 2zDl35uBIgxzIML67QgcPPUkZ2FTv6 U19O8WNGYoe4Bx1Xk VTD M0a4og3GYkcAvl83/lKjDRYAMMmpuqdyELS6Fif4foT0GIDS0edFyHbmyZAxOZTic38xPtNBQn1yZoq1s7PGfis3bJHJvvrt FdLrq95h/WA=&downloadAs=Chicken Invaders 3 Christmas EditionInstaller.exe&fallback_url=http://www.interactionstudios.com/.../ChickenInvadersROTYXmasdemoInstaller350.exe  (dc610de51c72a4975353f84975b5d328)

1 / 68      (PUP)
http://www.applicationsfilecapital.com/c?x=yr8AbiUJMGn0d6GBTdjAW rALc9VvDqR1kSgs7fqiyM=&c=vHhmJAC9Un9e71bfwQhHwS2SRA3MlzVtwB938IlhbSGeTgj2da4ZmnNbqhRc0fY8Oy3A2Gy98zFeWzKe6UOIFWPv2BrCfLlNfN0lLrgrekrJFK7fbGdzpK9CO1w8aeZQNDm3hxCAWTTmZ2N3tgpdkA==&downloadAs=Fresh Download 5.8Installer.exe&fallback_url=http://www.freshdevices.com/.../freshdow.exe  (e4a127ba8658152e9b3a434901119807)

The following 50 files have been seen to comunicate with www.applicationsfilecapital.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.