home

www.farmcapitalmega.com

Communigal Communication Ltd

Domain Information

The domain www.farmcapitalmega.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, February 5, 2016

Expires date:
Sunday, February 5, 2017

Updated date:
Friday, February 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
farmcapitalmega.com

Whois:
1 farmcapitalmega.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M), PUP.installCore.WMDInternetEIRELIME.Installer (M), PUP.installCore (M), PUP.installCore.WMDInter.Installer (M), PUP.InstallCore.Iniciar.Installer.Meta (M)
100.00%

VIPRE Antivirus
Threat.4721115
2.17%

McAfee
Virus.W32/Sality.gen.z
2.17%

Dr.Web
Win32.Sector.30
2.17%

Microsoft Security Essentials
Threat.Undefined
2.17%

Emsisoft Anti-Malware
Win32.Sality
2.17%

F-Prot
W32/Sality.gen2
2.17%

avast!
Win32:SaliCode
2.17%

Kaspersky
Virus.Win32.Sality
2.17%

Norman
Win32.Sality.3
2.17%

AVG
Win32/Sality
2.17%

Sophos
Virus 'Mal/Sality-D'
2.17%

ESET NOD32
Win32/Sality.NBA virus
2.17%

The domain www.farmcapitalmega.com has been seen to resolve to the following 20 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 31, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 16, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 16, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 16, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 24, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 24, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 24, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 26, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 26, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 26, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 26, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 26, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 26, 2016

File downloads found at URLs served by www.farmcapitalmega.com.

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=0CI mK0i5CvwNzclVHvkNx0mqQxKu/cBlBAcrXnkTig=&c=AZQ7MlEvmRkQ60nIjs7GAy3rrHHzGxpMcqjI41m96qADuFJrPUOkzcgQq7gIwC2VMi3B2zn67hwes/u1a3Is9mxRXpC6pNgIPMDomdQxSQWTNbolAug4tROO8BzdNM1f&downloadAs=GTA_Vice_City.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5hcHVua2FnYW1lcy5uZXQvMjAxMy8xMC9ncmFuZC10aGVmdC1hdXRvLWd0YS12aWNlLWNpdHktZnJlZS1kb3dubG9hZC5odG1s&n=R1RBOiBWaWNlIENpdHk=  (b9cd2c9c0864a929228989a9a3fa39fe)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=glqHMgHB2y3vLwn kwQ9jT1xk1KyzepJgyHU7fsEPzw=&c=hTba2dRVbmAq/nBoxYTfFiD5L2x85nuc5NVcZ/sm1ywT2bTL 3nOVFJZSWWpcuYLAXLqRjTg221dU3zkEl9zy2OPhjmu9dXjpP6bw7QT0UEEYbjZOdOL6JvhDtJq7KJP&downloadAs=Commandos_Strike_Force_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMTEvY29tbWFuZG9zLXN0cmlrZS1mb3JjZS1nYW1lLmh0bWw=&n=Q29tbWFuZG9zIFN0cmlrZSBGb3JjZSBHYW1l  (1de5aafaed06b87817181f36d0e1b355)

0 / 68
http://www.farmcapitalmega.com/c?x= 1irGnqfRyEZmNq6bCauAbTMLcGYdKGZr2Yed6vQCF8=&c=13gLGJnB93/wYGYzdJm6wL23HRedPlsjSD5ceMSqVmTyd8NIGt7b9P0aoGkX8yDVCD5SP0tM tgcD1wOZZHCa//9osNB5sYP54nwgF1P1gur5HCSv lTUZ8zf79YEP05mLEIl5AhEK8e57lonflWfpPwvQyHEInVvKNGSBnqPN8=&downloadAs=Hard_Truck_2_King_Of_The_Road_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDQvaGFyZC10cnVjay0yLWtpbmctb2Ytcm9hZC1nYW1lLmh0bWw=&n=SGFyZCBUcnVjayAyIEtpbmcgT2YgVGhlIFJvYWQgR2FtZQ==  (c.htm)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=aUegXgUD3nA oaw8c3gtyz9bWSK6zBoQO1rIu2n3zgg=&c=WM7KCgxNTBmUh4LhwkuhhjV wrpExyBtFw0fZprG7BN8KhBWik fX8MsWX45GRLGPd0SS8Ggp0xefPcIT/eOOu0DAtFV84JrB/oUsj2joKpL/kw636VlKRZ/TAFwjL50&downloadAs=Zoo_Tycoon_2_Extinct_Animals_download_free.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3Njb2J5Z2FtZXMuYmxvZ3Nwb3QuY29tLzIwMTQvMDUvem9vLXR5Y29vbi0yLWV4dGluY3QtYW5pbWFscy1kb3dubG9hZC5odG1s&n=Wm9vIFR5Y29vbiAyIEV4dGluY3QgQW5pbWFscyBkb3dubG9hZCBmcmVl  (ac14fbdef642b87b495963aa72ed13b6)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=xamRrugAVrWbFZ5x957VuU6OczWRdkG01cguxy2T6RQ=&c=jR5kmP817NaScOAx1OKZDkz29 EvHShSPydEHg0FwiQ Xsj201fSU8MFW0anQG7zCf xEGs7p1ROcdtAkb0deeDYJOqOlG3TashSb5bg7WL/2dMY6cvIFW51YLZMFpdd&downloadAs=Minecraft_1_8_1_Pirata_Completo_PH_Downs.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5waGRvd25zLmNvbS8yMDE0LzEyL2JhaXhhci1taW5lY3JhZnQtMS04LTEtcGlyYXRhLmh0bWw=&n=TWluZWNyYWZ0IDEuOC4xIFBpcmF0YSAtIENvbXBsZXRvIC0gUEggRG93bnM=  (c9e8f75fd9845481d26f14be56f18596)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=YM4lMxMuBPPbj3wNrKf76SsA9UpwabFIMyWqyBisxg8=&c=cbBuoXae4R/vwdy14BTKEhwFemjX7hwNa6roS14qKKGpPxPZ1zRtvv Ld4GHboX LmhBhZ4Fwe1ApH2QVM5/V2GVG3Fbe3klhfZfBliyYKDCB8tR8Jf6k9f5G3pu50CP&downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (32399c344bcece3499ea26dee59f1b43)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=XNK3v3/Om3QR6PBUwq NY3Q8TAapW4y1yvu6od3RK7U=&c=Ehaglf5QMTHcnV0xUDiaWGxS/9gEvz47LjoCXv6OX3UzN5JssLeNyP6rMSdHKFliliubnX8aYxKyEzIcT 1HG9e1BSs25oz3v1iH9dGxRo4rMxRs8wAXeRa2UABLvZdC&downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (7ba23e87e46064101e80cd3208af677d)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=Vba2hTzY0P0hBuvp2795hjkUAzH0ZTT J RjAim5bOY=&c=XwaZYtKN0pHH8bsqZsaEin 9UMkjtfD5p/M04hARg8 IwLp/AqDchmy3Evi36rI/IXxvqsq53I5qp4OmD5dRrEhRkR6yNMlKb1xMr dPIn9RRiGtz7Z6JYmD6NjzQ4BB&downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (5929c8a1a649b6b05f90784a5288f481)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=cAS96 T0vMuoFptugQq4vcLgeFZFI5qGQLNleTyjPxE=&c=9nFl vaxWK/qilLR8yrHxiHgtbRJ0DaXm6MGTx20 fpU5whz7nuvKsG2Vz0j8v1TSpsRLisx6eU z/THBLPHHu31a6 6k6Y5mK88AIyxj3PxB4eqdpPi0iY0b9Md/5uG&downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (138281fcbdace1c98d67633eb4490f8a)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=/mxMesg/qzI8MAJk6RJYmu1BdwGuI9AZbyeclOYjFQ4=&c=yJLT2CMyoXJBYk5eQAgAcpUrumKVSecARQ8X45QYiBi27WSlwvZKA 7RWCs9LQxRHKABH1DXW8xzK/W5rDZExqPJc7TNWxDphRJL5cfNbz4CuQYc3j38tAx9fZ8jzvwG&downloadAs=Minecraft_1_8_3_For_Pc_Full_Version.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL2h1bnRlcnNmaWxlcy5ibG9nc3BvdC5jb20vMjAxNS8wNy9taW5lY3JhZnQtMTgzLWZvci1wYy1mdWxsLXZlcnNpb24uaHRtbA==&n=TWluZWNyYWZ0IDEuOC4zIEZvciBQYyBGdWxsIFZlcnNpb24=  (196c6f40a551bf0986ae3d248b44dca6)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=8F78Ty83XpHubRgKwEEFL95BxiweZP HcVSBlIoWaac=&c=H45l /JfCj7sRUbACO8WV7Ps8/LZPZ1ydM2K70KhfIJ OYCcdXcIaMbCu/Dhx1ZVbYD5 5 lAnD0xysCu3qDh/j bgkzPxvjCVybgvtxvhOJFfR3XffsNECsixLQmqF8&downloadAs=Deadly_30_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMTEvZGVhZGx5LTMwLWdhbWUuaHRtbA==&n=RGVhZGx5IDMwIEdhbWU=  (4408291b289b15c88f284e11302a7666)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=gquXMGC/elMCsb bEPIBY7ilHyl85ympBXhxbUWwPjo=&c=WWPV0Pkh4mM29YvSL75NvwSQC3 imsytt4RqGuPZ5G2QLgeJxatEdCjC0BlRhlziQdLMNbgJJkpH6I1s/Oj1M9/PudwBnPyGlqQIcTcMc4g3ZU5YJicZ93Wi tHOn6o &downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (0b5d1da478978a715100b8fc12735ebd)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=2XVomByMBtDaukNfRESMKtLWhUAEZZqaGEZ HJAhGUY=&c=TU zg5A9j0mhktX1KSbt/I gp3I4sp8W0daF9YbTj2IaI EQKHvph91uQRRuz7XlVlY98maHMxsvWpDxHSLjzIFZkNOXv/TAROzOswMqUyJzM9R6ABjOTkh0se4Rdi89&downloadAs=GTA_San_Andreas_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvZ3RhLXNhbi1hbmRyZWFzLWdhbWUuaHRtbA==&n=R1RBIFNhbiBBbmRyZWFzIEdhbWU=  (dabe734f38866e6d8bab388d0e3dd236)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=gRShpCWdMA6CQeHKy/eiOwc dllZiFXpbzXYYbG8dZE=&c=sbOuWFsx71aep4gJyIzAcdJCHKQrGgf5fYp2zqdXiCsZcWO f0z6RKvGELpmfdudEEwoD GnDfIhCCOvuSzuQUzXRZConmw6hXV1 InzH65ZK4hL 7v4d FT8C79Pd5Y&downloadAs=GTA_Vice_City.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5jaGVja2dhbWVzNHUubmV0LzIwMTIvMDUvZ3JhbmQtdGhlZnQtYXV0by1ndGEtdmljZS1jaXR5LWZ1bGxfMjIuaHRtbA==&n=R1RBOiBWaWNlIENpdHk=  (a05014d95c971c7dfd0abb429b899903)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=vUV7yL GfmBtBYRH4fmzv67tI4G2SIDTKveL8wDpsyY=&c=tc/9 S4AcOvdTnrfYoOdohtJpsdg8YxXTAooZNJFCoH Ni7alX9z1FHPg4ujiflUhQUhqHqtSerQC9hSAO4F5rPJ962mLfN1IXJYv5rdAEUIGUKQlnUXN81mjP7cCDXn&downloadAs=GTA_Vice_City.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5jaGVja2dhbWVzNHUubmV0LzIwMTIvMDUvZ3JhbmQtdGhlZnQtYXV0by1ndGEtdmljZS1jaXR5LWZ1bGxfMjIuaHRtbA==&n=R1RBOiBWaWNlIENpdHk=  (980abba4db23696a86318cefb898ffe1)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=QtiuEWykQDp9IKn hhCMUlDZkvttOGRu03Ka0wlkMMo=&c=H9vrzUG QgVNNLZYAj5PjR8wYe6TxOwcKwBtbtdiGXIxNEUjVKD0F20azeFPcgUmsf4hSlqxft5y6hScdY71bye6HcDOO9VZxv6w5cvAb0tDpqLC2ZhW/a9rh9Kp5Bxl&downloadAs=Crazy_Taxi_3_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvY3JhenktdGF4aS0zLWdhbWUuaHRtbA==&n=Q3JhenkgVGF4aSAzIEdhbWU=  (a1b3ef1e084a19e8c787bef2628b7319)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=fyyKluj 2VO9HPXW0iXW2vwk6y00705lp7VfAsiElok=&c=uIv34N1QHDHIMOGTUlMQ0/9D8foLr42tvtvVyH4frV4CftPKofJGF81m jCMdl6 S3NRoriuAumIgmhy37L7ZoLsGt2/Can54dvEz6Az/Tf2q3oT9hUQd6JIiw2CGhUH&downloadAs=Crazy_Taxi_3_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvY3JhenktdGF4aS0zLWdhbWUuaHRtbA==&n=Q3JhenkgVGF4aSAzIEdhbWU=  (92d7f5cee24460158f3dcc7116222f22)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=SfMR7qR89Xe IbhIVjzuK/YvL7JNJ5cCfdZJihTt7wM=&c=tg G8dWryfKpXFnIKO0Rl6YuZ0kDf58st7tfPab/Dn7GH8Ypr/827vwWstGxq2XGb/oHk6Q2ob87e9NtsSq/2PyAo7QDhpZjP7M6Dz0vFD7tuEFYSpZ1izvjgYfLrYzd&downloadAs=Crazy_Taxi_3_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDcvY3JhenktdGF4aS0zLWdhbWUuaHRtbA==&n=Q3JhenkgVGF4aSAzIEdhbWU=  (b7212a303a030367b9b53ee98097581d)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=0kJbvT/78bbsDAQyya5vJ iV0zgc/ZTKvnMQ73s Nh0=&c=5uDXNk8AQPPsymulcMzbk/8DW2At8XprSNtSHuQhPTp0BrpPjCFtVsXNH1Cm4a5VxW3pdMStQAxMQ2a/rKmB8bRKKCK7gaOTkzm3wUpgaCJzRpzK3WKUBfHk/qtHsn2z&downloadAs=Youtube_Music_Downloader.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=&n=WW91dHViZV9NdXNpY19Eb3dubG9hZGVy  (icreinstall_pisetup.exe)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=vShRvVaPTo9bRhf15F2JSToZe9rhW5BZV4MOjwdns0g=&c=CIqDzFBOhTS8ngra5hbIKnC2OcM52VFy0/2fVSY1rZtfid wm8qRUn0N5wIWbf lv6VbHsnPl/HAerdimrP7fwbbWrhk0uncZgE9G8PMPHvTDz6mJ4kdHbNLDDktrTvR&downloadAs=Street_Fighter_X_Tekken_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDQvc3RyZWV0LWZpZ2h0ZXIteC10ZWtrZW4tZ2FtZS5odG1s&n=U3RyZWV0IEZpZ2h0ZXIgWCBUZWtrZW4gR2FtZQ==  (c.exe)

0 / 68
http://www.farmcapitalmega.com/c?x=fiDzFL1CDaG1c8G4jOssJrsfXR6UG6YJdWYFo1hFKUo=&c=ATA2KsJB JIKABTXSSrZ2Vowy5VBsn6EGHXfnPSABDc7bowp7OYvvwRn3Juid5BUSyoZJK7HNr2lRglu S8yA/qww2oK/WCIm6yTLu54/xI=&downloadAs=Disney_Hercules_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDYvZGlzbmV5LWhlcmN1bGVzLWdhbWUuaHRtbA==&n=RGlzbmV5IEhlcmN1bGVzIEdhbWU=  (disney_hercules_game.vhdx)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=vpJXOOiFV2lFeU7ibhVJ2N0t9gUEaiAWGjVnjvgkIcI=&c=RZeJ5KZWrKo/kcN2hkCcBZCNTiqz vi2/eqxKQdiGxMZZPMSbEx2c 9nmck8BFtKDT7EiuWhjq eujNQyrOzWGU08Y3q0cNEspz/vT71YMhCI7yryjt6gI677KW8RqbQ&downloadAs=4_Elements.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5hcHVua2FnYW1lcy5uZXQvMjAxNC8xMS80LWVsZW1lbnRzLWdhbWUuaHRtbA==&n=NCBFbGVtZW50cw==  (30f4dfab46b1287b722f846caf415e18)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=MD5XhaW2eGTfWyCmWb0qyWcak93vUt6TrmZXFSSy/pY=&c=TY3SiV2mpX3bD0PaZPa09WT2BT4/4dp7eDpBBCAdQlpmIgUCuqP2IivahlwK0BHCfnNxUKfu6SpVZsi/ZH7lOn2fLZzhieIvxe9HS0LKQuigF2YV5kGYXUmbOGXNik8t&downloadAs=Zoo_Tycoon_Complete_Collection.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5nbG92ZXJ6ei5uZXQvMjAxMi8xMC96b28tdHljb29uLWNvbXBsZXRlLWNvbGxlY3Rpb24uaHRtbA==&n=Wm9vIFR5Y29vbiAtIENvbXBsZXRlIENvbGxlY3Rpb24=  (91620400096f53843e3c8ee1291f78bc)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=Fypu/M7o0RH0xPBiVer6z1HsKCOJs4s5OYlB27HWEKI=&c=5TM6w bHF0AdornhQ38BRGOdXMLroxP88hedojrR1VcU4FpsVBlx8QhLox2JanKMJnmseg/HErfIrRL7cGF/Fs4xPI6hqtbiM45DeIEaL5gWAZEAs7lTIgOJk3fFjeLs&downloadAs=Zoo_Tycoon_Complete_Collection.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5nbG92ZXJ6ei5uZXQvMjAxMi8xMC96b28tdHljb29uLWNvbXBsZXRlLWNvbGxlY3Rpb24uaHRtbA==&n=Wm9vIFR5Y29vbiAtIENvbXBsZXRlIENvbGxlY3Rpb24=  (1fe9bf67874bb6fa7e6dbff11351c139)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=cIJs4ywCBjf7n5o6xPO EcoQ6ZnYpMKB46dpGTMKDBI=&c=jXpiCrM9rWp/fewJs wdhBlfhP9NWafijScRaFEgxlGUfsVt3D7ykeQoxCjf/CsUyAX/zFLWExZVoexq5VxxHGgufJo5Usolr 7NmZSe1VuB2GCLmC aZBomVbTgimvI&downloadAs=Counter_Strike_Source.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5hcHVua2FnYW1lcy5uZXQvMjAxNC8wMy9jb3VudGVyLXN0cmlrZS1zb3VyY2UtZG93bmxvYWQtZnVsbC5odG1s&n=Q291bnRlciBTdHJpa2U6IFNvdXJjZQ==  (7ecd9a88cfd8e03e460554dbe4e79db6)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=9mwIIEj0kq65j79DxyqspsmqemQH0o5MiLS0Ui X0Xw=&c=vkUa2PwsNqSZsZs6AXmVqKF2SZybQOfpgnXZbgF2LofqsCm1c VsBIiPBneYlpKa8VppmaScymaix832YqH humPliu3DHg1Qew5veGGkDhUDaI5R41mosYq06ZoBvpt&downloadAs=Need_For_Speed_II_SE.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDQvbmVlZC1mb3Itc3BlZWQtaWktc2UuaHRtbA==&n=TmVlZCBGb3IgU3BlZWQgSUkgU0U=  (c.exe)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=kdXgYo0n/gJBE2SWam3u6J fVvC2Gm6mHn646MNRzWo=&c=cE2vOIq9Zd mWLx2bnxkufCPrB0w0d42O lx x4TMFHEqRhCmpEyKVB5mVeyznhWTig7DptkQxbvyYYdwpGBJ8xtMmu9fQeUE29Cf76SupLNO7DUN8l8y62mTCAK9pj8&downloadAs=Need_For_Speed_II_SE.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDQvbmVlZC1mb3Itc3BlZWQtaWktc2UuaHRtbA==&n=TmVlZCBGb3IgU3BlZWQgSUkgU0U=  (c.exe)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=AXL8KQ4UX/zTf/hjB03B3/lq6qj26XK QA1vbp1Uegs=&c=J34iIEAtfUJJA ry1aalQ1FDYOdVjT/nUxh49FRsP17IXYZEG1smH sWQjpvJKH TPs6pVGEk3yS86ysBqrHP2anDnyQ4z8kNjJKMqUAfcViohu9gbKyqGzIU9hzqf7G&downloadAs=Sony_Vegas_Pro_13_Crack_e_Serial.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5yYXRvbmRvd25sb2Fkcy5jb20uYnIvMjAxNC8wNC9zb255LXZlZ2FzLXByby0xMy1jcmFjay1lLXNlcmlhbC10b3JyZW50Lmh0bWw=&n=U29ueSBWZWdhcyBQcm8gMTMgQ3JhY2sgZSBTZXJpYWwuZXhl  (357d15735df488ca86152a57ba685752)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=oMfKX2weoCyhafk55zdVolIR kqpBCO/TijufsXx5Xg=&c=U9kOXCw0oY JCJ4RHzeGuSUx9ZF79Ns6dAtykIa9aF4MATMNedKwyIyFqa4dhIthMk/ym0S qFJFZkcZc4z2aZGDrUNmdxS6CZAEacXB79Ja31ljxPIgyi2Qf8/7clNr&downloadAs=Don_2_Gta_Vice_City_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTMvMDQvZG9uLTItZ3RhLXZpY2UtY2l0eS1nYW1lLmh0bWw=&n=RG9uIDIgR3RhIFZpY2UgQ2l0eSBHYW1l  (6099876ddfb21994647619f3943a0a22)

1 / 68      (PUP)
http://www.farmcapitalmega.com/c?x=1JPH8y3OWI oVvxPD/ac/TzY6FnKAcS8jCDJQ1GadfM=&c=ameqtT6RWfkNkWewOqAVDaxhaN2ucAPdNSrUpSbskvkkAS0sunsWjdt8g7hJZ9LwD9uyXjByW7tCglGsicC5RpqJMJNSUF937tUFJ/vDn9JNvhZTbr/xUxMU9HVYkYwf&downloadAs=NHL_09_Game.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5mdWxseXBjZ2FtZXMubmV0LzIwMTQvMDcvbmhsLTA5LWdhbWUuaHRtbA==&n=TkhMIDA5IEdhbWU=  (d73ebfc53e8d89b76ab9d6152c473088)

 
Latest 30 of 97 download URLs

The following 36 files have been seen to comunicate with www.farmcapitalmega.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.