home

www.capitalmetaupdate.com

Communigal Communication Ltd

Domain Information

The domain www.capitalmetaupdate.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, January 19, 2016

Expires date:
Thursday, January 19, 2017

Updated date:
Tuesday, January 19, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
capitalmetaupdate.com

Whois:
1 capitalmetaupdate.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.installCore.GERYONADS.Installer (M)
90.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
70.00%

VIPRE Antivirus
InstallCore
60.00%

Sophos
PUA 'Install Core Click run software', Install Core Click run software (PUA)
60.00%

Dr.Web
Trojan.InstallCore.1027
60.00%

AVG
Generic
60.00%

Malwarebytes
PUP.Optional.InstallCore
40.00%

K7 AntiVirus
Unwanted-Program
40.00%

Agnitum Outpost
PUA.InstallCore
40.00%

Avira AntiVirus
PUA/InstallCore.diur
40.00%

G Data
Win32.Application.InstallCore.EG
40.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
40.00%

Zillya! Antivirus
Dropper.Dinwod.Win32.1768
40.00%

Qihoo 360 Security
HEUR/QVM06.1.Malware.Gen
40.00%

ESET NOD32
Win32/InstallCore.ABK potentially unwanted (variant)
20.00%

The domain www.capitalmetaupdate.com has been seen to resolve to the following 15 IP addresses.

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 5, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 5, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 5, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 24, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 24, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 24, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 24, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 11, 2016

File downloads found at URLs served by www.capitalmetaupdate.com.

2 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=bnYzKyUe35jAgcvP4CooZhLNBXMO616nMb/PUyHanmA=&c=ikIFJoafgGt/EuG3C/2PRkpDgWs00ig4lW4b57AJg ADRNG9GLZcQ5yYSEP Fxp8LX5ZD4mMUeLzJ/gbDy DkU4kdv94ljOZ8UmJkJV9hdFzBVQcjfelNTsULRfk/DNC&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (07486b8191bbd41071b97631ac1a4473)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=9lqC2wYSVyZEWgLE8Pe5hBhxSWey2XCipUhDFZHLXhY=&c=02UorWiz4c9g5q yAak6t0QZRxckfAWt0 n9jZFvdaNHw5fwu1PHI4Ydmqz8aBwWrGzWDv/EWKC1TtM2julCg3Qsac3xOq7o82ZLNUftTnqRuEuKi4W2Xl6psiE59yIT&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=SUlOkZMoaF4Mug65YxUJrSlnLerHCl46xw0KsuVs5os=&c=F/ayrXYVuFuqj/PuX4LoMgWXcECW1axNttd7G0VO/64bEnxBOcpk4vUv6hJLGTe /Ke5dvTw5XmhUoeJZ QVm9MBWseZtAZLd2Y3OObY8Szh/hG24xHRDpwtvj Ud/BK&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=xcnmbZTFTDelnEISAW3dLYa/K1TSMcHio2KKoWt5meM=&c=qyianUxAXhOVFINWfUqTv8AGblO8oH7F1CbKuwWw71D RPn0Ai75x4TdOTHqc/tux5LYv4WO06JcgSwmSakOF1QWjTReQJmQwYNqyt87OHMazgtJFYXdKpAztUf0e7Cl&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (4d92885f59cbe65ea843553bda45d400)

2 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=YWRgBnKtxuPdyJz1VeOMEFMFV7eJKqMf878lDVAFZp8=&c=7e1EgHzda6ek9RmGLlRYCupe2im pmDKHvNKZqLgtr2PObRfHIbtHi3earGviNwtNbKkv 7OhFgk3 PGJJEzOPSKz/WYfBwF1wSjHAvQZ71EWHyxN8b8W3Bsuudqv3Za&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (c.exe)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=nzS92OygS2viCy9rp4v9buJ8Gqms7/NhqAOijRGO22M=&c=Y6SpcXE/VPnOvX20cyTDQnQS II B8iKOhAetjKzX0EhtSPPUWuYtdA2kEEzu hhj/f8f6hKRqiy7gj2 2mkZdRZlaDyc2QgX 0LvPtxtTW4CwXy8MgEfw tfP0PZ3GE&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

6 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=S83yNskuLdUi7ZAQ7/YcUoF/I1xJee2irc4oDcY0MO8=&c=xNKwBSyg9f2KmiZQK52B11Eni3j5WWoKjPFHxmITUfQJoDIKVPqCvyhAoQkXPEMV0snOD4ckavyTndqQH15Om3/MHxBMmd3ePn/sNqWA nNEsoCJ3ctdq6qmW7BvOVsR&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (ade97c18d208adc8d88ddbd1fd423bac)

2 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=GCYTthGBFdkgwfC3lRaVmHI3J1cjJ9LnHkC5caG1UX4=&c=6GIghnqtNwZ4yH4/B36/DF2ISTy/P5ifws/5TFFnWWH 4mhnFmX2NaJeVJwY9A S4ju3NLS4tn7dy34inSS9vsCOwBnYePaC4eVg1H eyeqF/K9 Bf0f/hF8MxLjlriU&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (c.exe)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=cK77rIYIE3p2T9FFlQte1glTJe2dPr3owgQPwzTkkiE=&c=0sUQ0h7zcNVcW8jSz0gLTqNRKzQjPyO/rWdgRSBCmUHwafOIvprkycMreDl6Jg1mKV5ay6xKsvmJlpvy29yoDEiKLvNa0B cacz1fEXodctEyYR gI9SFgxKE9pMeV5X&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (4d92885f59cbe65ea843553bda45d400)

1 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=HqGQb0HwQBE1cUEM3fmnx/T7u1PaOMpBtUZ fCchKvg=&c=lHj0uUkbqV6dT9G0RBCvLLu9/IbFgt7UiInV3GIEzUWl5KVARTj1m/ntXiIAM HKsciOvVeb9hunDGOthfNqwZ1zoh6Z Oo/6i3VUsw0gC0WPT/LH4SD 9KjSJoIWolB1nxDQ4ir0qgt6tJ8sdm17Q==&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (setup.exe)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x= Gf8EisTy54zaTvJBo3mfrDFqfojkn/LAX8RNbVA4wk=&c=ARpnguohMASLvWc1rjs/vL loskHAi6AJaCfa5yhyqDufZFUb2bp0VVKi1cjYxWFYdHvUVH5mxA5zE3WysmwSj/WH2c dkqVzpvwDI/zVoI8CWJzWnmgtdu Uq 6thmt&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (4d92885f59cbe65ea843553bda45d400)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=ZXGbzpFAA44cz7IEfaFHw61mCe3dny8IsGJ3i3qYVGQ=&c=lpTHItofHXBd6gO5m0Phu U8HR6qPMtuTUJezWp0SUVI2zcGYU8zEW/IPwxOiFETlWLFIw85huorALPOSpCtpsgAk2vUOMYZqLDu2DUgCWkKkJ /IoCDwtcKQqNtnuX/&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=D43XI4XjQPcfNWSt3jOpNtcwcpjIGeRNlEKWo75rM18=&c=vjMSBJt02CEZ3SOMyDC1fLqPNgo8M bN4co4CbWdRUDqm7wrcA1vVUNg3zf7BIuDEBXPJc9RxH6yvo2Sgq2GsACTt1iiP1 NegSvNcupTAmxgrZp9L9JnT8huAg 1Vqu&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=PjB7S6sDSTF8GKHDRsZa7w3Aqpk1 i pd RJ22fnYd8=&c=Cn9hjd7p8N2WBBthL5TWUv03cyUX2uTXuPZ1R8pBAR Kg wGVQRzkt8B5tlP2S6VQFIMTxqVWcsSkDEy//IGHGkArNd1zj4O2oedQ10qypqIuEo5QTK5dz m2ebH4Yq3&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (04cae4a7c4d53e284300ce9afb2ee300)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=q/4bjv6XNB43LwpM/mahrYG11fJfe6A5xXJxRVyIC9o=&c=7p ZpWZOVlIitB9RzZHHesS11Pp9ZEpQoYsCBfN//teR1wyDdWNiGwNWqikw3d8YJDgDZ79Po3EcZHF/pb4XEfxlQ2adCPGy/aW3T5JFhZN9xG5p1Haj4nqN38Wgk70w&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=MsE4N48Xzr3LYX2fHvsbtP ZrFU0X dO1To8VWkDeAk=&c=ABNklGEjL/qIG9xHf2CtVszt/e4K3/WZsFYBeafIVzadpbUi/mWVLfGRVTZDTew8g/JYpe72ctgM8 j9dNghV9M6o1I q1RCmp ymnucvZXva01KbULKIbzc426UzvHX&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e92c3ddb320fb7b5cc3bf60d9b5c5e88)

2 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=hxPFoIms CCYB49D2dPyUa2pRs1gdess8poujjONtjo=&c=XpuQtPu Qd2amMviKfEKId IufQokGl2Z SYUUK KCWmBgC2mCOfEVYZv65cVE20wSTCViK/cGIjH93Cwx71hdtcGgqLNQm70OgPPKdtQs1GrhV1 l87qWy5kEeC4RO0&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (c.exe)

2 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=Vhp48jhEG/X2VjZhbXm6d7MAFiw7RM3Bb7682eZLlNw=&c=SHpXrQA/VDZVxkXtnzfRFXpdek1c2ScSD/882DA9L7D7w8bmct9mZYnqrumtnm ghu5ORiWYAznP9hlfUzIoVKXDWD5Mk2GlBZnKnF0ttOGTOoMhGe/AYtHnA7v6aZyP&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (1343fea5fc7fd86eba9d90a5ca032303)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=5VRYwZfIUSI5mVs7m9uNg1LPTfUgUPni3JLWLX1gP4Q=&c=KD0PL44JM3JURguOfOCndBRw8qjhyYD 00Tqlnq28A0dQIPm 9K KbbzLCCsKZ/FHYmzGkUVeb5QpnLpcxJMJCVgdXWRE/E2EIQg/uTGbLt1C60mGeqmuTVtAtVnFkyp&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (4d92885f59cbe65ea843553bda45d400)

6 / 68      (PUP)
http://www.capitalmetaupdate.com/c?x=NcNreGO0EwnZrSjTCREy2XJO8QRkmVZ6vtemLi4xe5U=&c=dQvxfb4ku1sPtPPI7AxbM/VY9 0JygKROeBJhTF2GeD8bqq85kqqorAu1Kx2lR87YVHD4i1yYvI96wZkoYmBMBXympT374jPgIDpF57GdIxGbIclr76V2C4nI4HEFIIL&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (172336973897999c73048f3f86441732)

14 / 68    (PUP)
http://www.capitalmetaupdate.com/c?x=IKn9mfsnwuuAeDcQvbUp7cCiTgwlxUOz3utKbyx/oAM=&c=GlYQxky4VzkvWX7p0MFn8dpdlW9GrIVXJhjWiaAA8cBd47kl1faK/JnR6OdpE666GR57NOS3UbqhzEngtQJeWsGZGOBSko4hib0aU78V/BuzfFiEiq 7vpEpuXVoupeZfIlhgIfi3JZaTVhmydLdug==&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (fbd099c920deccdade1133105d18b276)

The following 23 files have been seen to comunicate with www.capitalmetaupdate.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.