home

www.nowfactorymeta.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nowfactorymeta.com

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.SCCE, PUP.installCore.DestinyD.Installer (M), PUP.installCore (M)
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0203
2.44%

ESET NOD32
Win32/OpenCandy.A potentially unsafe (variant)
2.44%

AhnLab V3 Security
PUP/Win32.OpenCandy
2.44%

McAfee
Artemis!ABDCC2CD007D
2.44%

AVG
Generic
2.44%

The domain www.nowfactorymeta.com has been seen to resolve to the following 21 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 13, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 19, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 2, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 11, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 8, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 23, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 23, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 23, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 23, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 23, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 23, 2016

File downloads found at URLs served by www.nowfactorymeta.com.

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=njqz7gNcNdJmvI9r/ 6zr131E/GeJN9sVcMmxflewRc=&c=2/w1SQIUcPipDNqWFSQH6eX4jpokzMk15bTYIXfDyP eoZFHw1iGeAoq7/YXeRzaEXYxEiRDC44y9EJcMS77ovxPXBvGavBZNoQPnl7opwfUAa4/v61xufVNMxzh/pEHly4dTmIjIV4Cn51O h9NtVC8pm2/T9p492CaTAwUNfY=&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461991748/en/8/.../83929-92631-microsoft-office-2010.exe  (7f8550cd0e318be933f2f928f970db81)

1 / 68      (Adware)
http://www.nowfactorymeta.com/WVl6OTRQWEpVVFVoUVMyZHlOVEk1ZFZaNFRHZEZWR0Y1Tm1WTU5HVTBTRlozVms1UFpFMVlkRGcwYlU5b1EyY2xNMFFtWXoxMU9XRTRSbm93Y2sxd01EVndOWEV5SlRKR1pFVmtZME15TjNsS1RXUTJhMkZMUjNsV2VEbDBjSHBFTm1VeGNtZzJkREp2TXlVeVFrRm5URVJ4U2pScGNFRTRKVEpHYVRKWE1XMDBORGxzU2lVeVJsSWxNa0pJVUU1SGVVaERhREVsTWtKR2FrbDBlRXM1U1dJemFWQnlRM3A1WVZjeGRHUkRUMlJKVGxoaVducHBXVWN6VFRSU2VXa3dkaVV5UW5nNFNFTmhRakF6VEhCUk9Hb2xNa0kzY1dreWVrVm5KVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFdkaGNuSjVMWE10Ylc5a0xXWjFiR3d0ZG1WeWMybHZiaTVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaemRHOXlaUzV6ZEdWaGJYQnZkMlZ5WldRdVkyOXRKVEpHWVhCd0pUSkdOREF3TUE9PQ==  (icreinstall_garry-s-mod-full-version.exe)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=D0cE6Lt0fbMfmajL8UMAwo1wsHMaO9KON765XKR41HY=&c=0MF5kn6S4ynvhSlrWo9MNuRg6D69oatBa5FwnZsEt1bPiz4ZH4gz4MecD/Ts1aVWlQXV7Gm3fepP0gQOMHEn8Visy2lSrg7tYKo2 2Ls9xUdR2bwG4M0Y9ZdY/R0OHMDN2iATvtBHrDJb0aZ JaSTG6408BRYft1Ro6Mn16aBfMVnOd73/211iAUiKMBjEeB&e=0&downloadAs=plants-vs-zombies-2-4.7.1.exe&fallback_url=https://itunes.apple.com/app/.../id597986893?mt=8  (icreinstall_plants-vs-zombies-2-4.7.1.exe)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=5SJiDMdKEQWHmpgPXiBo5d/f8ZaO5G5m143oTjeAVZI=&c=2dIG9ce01Rj4dTQR23EnJltbJJThtsZ6lGFinFJdSyULuNSuYtH0FT3iQRxDjYqYHfdx3cnENMOVYnM114enXp7koYP4UkpwAIOc 71WN9JK0mmC7syquqSDfDt0ZILIwGTnRtlYs90fuZxgtGiOrQ==&e=0&downloadAs=mozilla-firefox-46.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461975192/en/2/.../25535-1809729-mozilla-firefox.exe  (5a44677c5e85c8b369740575b48d1ef8)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=9qhkYzQOM1LzLM1qW1SJkV0O9j3Xrl4s0A20au7spE8=&c=HyoHQBUq6Yct29hvKDKwZU5IjKT4SWG5zgUxhJu5Q2iGCI47v6qlyKssABiUpx9gJr6kcs2pbSdsZrq9MqQ9YBA5tGaMvyn/hl5XIwSc0vfbuvFDW0Q5KpRXrlt8YLZpxBAJ7Jfw74wQuBHafOoNCXGtO0wVSss/RNk5/vCnz4jl31SHaQYgUPdg3npmyCIe&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461967285/es/8/.../83929-92631-microsoft-office-2010.exe  (c116da0a3b51390b0a2ac9c7b584becf)

1 / 68      (Adware)
http://www.nowfactorymeta.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  (microsoft-office-2010.exe)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=nsBysosXVJHM35s/tx2HG1vEN8h5UBFiX8r56RpJTTg=&c=HbwKNns1ezrCePEV5PpWdjt6cUW9Ai5DLZWVZgs5vpbHi0vB Budw /B/zg31qL3WGZCCYTqoe86kPrpJeNKEPaq7/spgEzoT0thZro8FeNOAhsurOhrAR 9QpJ4IAn5RdwalvDFsFgm30c8nuciRzzIRg10rdQBBnEflDPmrez8Hga0KltIYu4t8vSopINJ&e=0&downloadAs=minecraft-1.9.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461981197/es/.../2/227519-1809098-minecraft.msi  (b083508f7256f7e99123f2ad2e4e2baf)

0 / 68
http://www.nowfactorymeta.com/c?x=c67XPJJ/TljjojAN 4p2AeFs/JlSVz3YVVOhpu2qXo4=&c=owNd74bU 0FvzZ4G4XX1R9rWnOVEL5ALY Ry5P1dn4DqgAiZA2THQXXW5cBxVWmftCgIDXlqpfsxSDiEmVC1psLtP5dpY708guywer BhL Y5LQULLWB0mFEKqXeNXq5lnI iN2uLrJLSscj8Bx3180ws I2nWjSpbHuj5kBw3wC 2KOV NSa5nrZ8tZMU w&e=0&downloadAs=plants-vs-zombies-2-4.7.1.exe&fallback_url=https://itunes.apple.com/app/.../id597986893?mt=8  (269747c7401d254090a9bf75814d5dae)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=iWeIIJ32SjaZpHN01g5hnk23V7tKxK2mNI/I7zE0KjU=&c=KBFro89TO/Y52PAxM9/IWT5aasHA3Pa7jECkSaTbhRXsNApCKbf2AHmbdMdZss7nWBJs4aD0PWEI1iWh3jGOgIuMes1qgWltcuTqg76JPedxkx sMABBPwD1KLfwCfvD72AHWq/Iok xiLKwvU4Zds6zniajFWlK0aTWNW6NRtQ0iviPcAXkSmr46l1DgbU3&e=0&downloadAs=pdf-password-cracker-pro-3.2.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461978139/en/.../7/77380-658780-pdf-password-cracker-pro.exe  (ffd62a47b82b94631c591509467631b2)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=XLK9dcNPHKoPS7zaPqrR2vDgQU2n91N rSsuMBo50cw=&c=7K6rtoaTdeOfTh37sRFiOS9VMUHwameRRfRzGdnj/ynV3hNCQ1S4phsweur/oaLD0HKg9JF k45UUniJSkHRVIYzdhURMlP1wpUQfjqQVTGKSFEcyOP757JAOReDmOmXvwODRZciy2ygYyDhJk211zefQiyKPbTZd2iocBgoj7k1EgmfjuISzcj2Ks9J1oRl&e=0&downloadAs=team-fortress-2-full-version.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461967006/en/.../2/229403-664773-team-fortress-2.exe  (1a924b0f543448300e0a2589c9cfa4e3)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=CTdUVwKoKh6JBMkXdiVbBB7MkiW8NnNBhIiUiItqTG8=&c=4/rjRzzwrKF41gMKjXhISBdAKapIbdhm9RmxXZJ7OtqHlZl Xgbu8XjKIiuZbiGZJi g8x39huraMXq3DWbqLw9 pxszNorszmIMX HhhK2XEwU5Lx22DI9bAh0ogXBHU/vR5zzPhbGtlxZeYg2lm5KCLG3gBMUkVBau2CYIu7w=&e=0&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (462fcc51716408b2c500bf30c1e7b39c)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=pZ9u8j3C/5vYpwMH7xKX5P6Wrl0oz8YzmLcXcWwcOfk=&c=eujBJVYBU 3BM/m5PYZ1p4 fqhFsd6IQKI9fVaXUxjwbHvgHhQudBGFX7v2rJGQIAxFLvACi2iFBeS8NwIWF1FJWsjDV/FMKNQRQop5MsJl81eMl2vg4 6/YvnkrvJKrGLtqdtrDSik5W1xLe20chw==&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461965490/en/8/.../83929-92631-microsoft-office-2010.exe  (7b6ac448e655adbed779aa298e2e8ffa)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=iCPgtlr3Q96jEtEPdDvzQG0tMIzqfTzPp7YXaMozL2k=&c=mkigKrgDG0cRxAu9N4OPCExAgEOeSLHmImWhjvLZh/YOMm3d8u6E0lm5SCDh6pKAtSUyQChayKf7rsjtY7Qw2gpS4V xq5z3MmlapvFU6Q3Zg7ZGnc3TJv7jRl3Dc4xZoDswq2TlpmIEfTNqllpR9g==&e=0&downloadAs=autocad-2016.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461960252/fr/.../2/227021-1806203-autocad.exe  (94f7f1ca1b6f547b9cd4e631e4a28efc)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=aftEPOGkeElCK/WhugQUxOihlzISOUeAB2XEVAH/Fw4=&c=ltDOyrXlcHiWk7cYe1aioBZM6mcAl4jMs20AyeUD71EBWtbPhSwTrjcuSx792mge 0cZcjTpv6n3AH6b LDrfSib8dqFgMkpIkmyZjeBFqjXUwriAeGyRBnQvsykfyWlnxKeR4K2xji92mUYuzrYX9mAkC3C8BQZBcJ6KdxabO4=&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461968162/en/8/.../83929-92631-microsoft-office-2010.exe  (96d70b841a73596f9ce1e5a482948d93)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=KtuzZL5856YaCo3HIzqiBqjZqG81X/0yY2frp0TLs14=&c=qtHpE0oB6ksmuiM L1yk DCzZ2askm89vv9y9WuykhyIBGofFEJ8SEwPgpwqNmWfWIUUvQylvFG8bGUsAwNAKOcNKGpEGRE2lu3PtkeYdleo7E9C5DILRjvXfbUKPixVZnrDGxem961El7xA6ttGBo4njnjyJaiyBjoOFzTjtnw=&e=0&downloadAs=microsoft-office-enterprise-2007-trial-version.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461969215/en/3/.../39719-1793953-microsoft-office-enterprise-2007-trial-version.rar  (dcf38f70b9c26bb32f58b0fe5653a5a5)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=wOiBVCw9DRjaUCrjIAW7pbH6N5DHfsc7pWPbx6LYrHg=&c=dzUYQbwoOBEfpMTDa9TZa5iBlHTBS5ZJNWPw4MSAkrpZHO73qijfb4m6QHqxgtVWy7/A0eabJqReMuZtkihRGwsWQ2kJH6kbxI rECSeLUzCMgVYo1 Rwlto4QQXcavgJjg/KSKOU8PfBQT9MqMdWxJDPqp2kVJgF253rwVPjAJ8G7/R6DIQ4QWAoiQzJDxp&e=0&downloadAs=traktor-dj-studio-2.7.3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461981858/es/5/.../56227-1804604-traktor-dj-studio.zip  (dc2c533b7a1a42d5a2e91b374167e9aa)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=X4nEGRwUHoM6sLGIUJWgHpEOPThpQ cV1LO6s7PHYuI=&c=lngEowQ5MdtIz1ScDXcFWRESGdKYsfybnWYsREg6GNq3gB3mDJBdHihJTHr6Ha/imnwWT3Uh1hHD5AIoeVXJSN fDphNuWF00KpVomkTN/JGWbsTKNsWR3r2deq0iuqpfzC0pekjrTHeNA 2Wgx1Tt5sErbjrodUQFqtD/i9zZZ3Y9J4m6vEQb SBHjuqHn &e=0&downloadAs=painttool-sai-1.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461977149/es/.../2/226535-1797368-painttool-sai.exe  (cf92df1d9c3e59eb1e66b92a65156a3f)

1 / 68      (Adware)
http://www.nowfactorymeta.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  (microsoft-office-professional-2007.exe)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=WQKq0uAtsog5/Pfw1vBWx9cFizIICZnKtGJNmNLyP5k=&c=kC9AkKUcvQSnGyyT PlzPMnR4frNEWelkaXgGUCzuiGOZ OFeNrpFzEc2a3CSoGzam2MDT PLqUBZYBXrlLcpqGhqPJyW0olc51dZj12AvG1uLzZ7h4DxA4vlXiiBu90Hvk3RzeHb34rXB8vlHiTDwvx0SFnURHQOhkzbo7hd2s=&e=0&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (462fcc51716408b2c500bf30c1e7b39c)

0 / 68
http://www.nowfactorymeta.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  (fivenightsdemo_install.exe)

0 / 68
http://www.nowfactorymeta.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  (minecraftinstaller.msi)

6 / 68      (PUP)
http://www.nowfactorymeta.com/c?x=o1ZkrwOUSNRNxSS Md57YLv5Vs3mScgmcXTKLBD5RTA=&c=u3Oifn5nMhgD7r5Ov4 IQgb lYOGoTSXD04h2Kgab7Z0hONuTExZ45nKimQqkmcWuXIz/oH1j9/9x3M3o /WFNAP6yWTSryucKUAZnTZNoh5kTm0ZCcgNMWXdeHUCMp4iXqNPk0iCtUA26LbqF6lJx0xji1RUFqi5aVuRN7APuY=&e=0&downloadAs=mp3-rocket-7.2.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461961023/es/8/.../81532-1804749-mp3-rocket.exe  (mp3rocket_setup.exe)

0 / 68
http://www.nowfactorymeta.com/c?x=5w/foCDWmsOCf2ow9KM4P0xaoVzB/sefSLL5IfYwNdA=&c=6IHV3RFuZJQiW58sAx4kSzZwNQsEPiFYF1jWXDE c8nKpJzgxHfxTwtLPOVyyObJdkRj96tObOAdNWiOq10AZpkShU8tSNV4HmzXx0/HHOmaRizdh1TnZVcmd1EMzobtQ2Hx1xrAgF95rrS redWaLpieZMNnmP9RHPjfN4OYak=&e=0&downloadAs=pro-tools-11.exe&fallback_url=http://www.avid.com/.../ProTools  (91ac0865207f31685e9cea994e972611)

0 / 68
http://www.nowfactorymeta.com/c?x= 5uWs3FnSB3/Laot TxKLR9iYy1gq45lwsQA 4Valr4=&c=2L8hRnsuF4/OX2d8VMQANSuSzRsJ0mL3lcka3SYLpjXXs64qE7yA6tPlklnivLPnQtzJuqvKQLlT8 jlCMFnB7CeqP48vSmkLfP/HbGWh56QnEPSXPUCSdKawg6lkj8N6P9UccZAn2D 3b/aV7sIsLjczjSYXZR2OQQNcfKg2YK5EieuDDIapXNLZ0VJf6ap&e=0&downloadAs=garry-s-mod-full-version.exe&fallback_url=http://store.steampowered.com/.../4000  (26c8651caa9a2242564f3dfeaa2d9670)

1 / 68      (Adware)
http://www.nowfactorymeta.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  (microsoft-office-2010.exe)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=TPL1d5WtduIhsHnc5v5wewCnTpfpyligEAojG1 CfT0=&c=opK1jGG2lWeqMLEUralNuzLq7hOCtDQP14v4/7b5hxa6xGe x 59xasY4HNLq5RYw1YloCyvJCU7a6Dl2C3fHS4P3aKyYIur65Z gEnHMNv4HAoaBpWPBGwfby9lI4m608AJ1nJFcwVUullOlIlr84xIEdU58z8dRXdq06Hvxun6ujDs83yI99Vx0ZSacC16&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461993437/en/8/.../83929-92631-microsoft-office-2010.exe  (d858e1f6174fc90ecfa6f28154a14f66)

0 / 68
http://www.nowfactorymeta.com/c?x=Ol5rrAa9ZoUljYxv5MQSEsLBQmXyJmSHZg5/ggTk6/w=&c=snyIhUvik/5pXGFu7yAi4lXHPROAbASrYaU01mNyoPzzouAvVUhvuSKUVOMh7Xqff4LXuYeQvSkOUS2j/Uhtv6Ikwe/JoX7dy3bH/z4dm8DoODeC5n/0d42sEvex 4kgYvnq7w0ZkL0 y9A7WK6DKkGGfERTqtIfo6rdhZorJm/fckf2aXENa DaiIFlTbcL&e=0&downloadAs=minecraft-1.9.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461964629/es/.../2/227519-1809098-minecraft.msi  (de2c6624c93e1d83822d11bcc57b0c13)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=UEFMKIS3j8388NFCu40 z/BAZzGIPVYAw3kHgOw3TTg=&c=xiFp7184cweAsob/fb35cRRrOKsMPikI2btjq4dxUPqt3iXOMKXG1oeLhlPsGrgxOfwLwudritQIK 5VXVIEm2cc3KZ48mf/bTQyhcWwjNMf2Yrv baYdFZMyK7Zm2MX0VDMWP3X0sZAsjvmFvVcLw==&e=0&downloadAs=itools-iphone-manager-2016.3.2.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461966548/en/2/.../235387-1808567-itools-iphone-manager.exe  (da2a259521aee869f4e8d0ac1d134a9f)

1 / 68      (Adware)
http://www.nowfactorymeta.com/c?x=ja9DjXmaLSJ7HJYhsiPPo24s9K2IWyXGOahH2/Vu/uM=&c=9WZrjLoXQ3Q39RpjZtqQgCR9wH7EtxQz4PYGdJol Tu565W3hVsKVSngEy gEb9EuKgEbq/MXHf nOIYvFrrdqqt6Wl272i6B5du8ef1652qB0bHK6gPz9rT44F9pSD53ndCkgzX6KR6mXp3X0hb0q5ZAsu8185LdHp6A5f122s=&e=0&downloadAs=garry-s-mod-full-version.exe&fallback_url=http://store.steampowered.com/.../4000  (icreinstall_garry-s-mod-full-version.exe)

0 / 68
http://www.nowfactorymeta.com/c?x=ylOqZLomuAkVGxWugGUIbv6 Nc2k3uk/HCeShbt49lg=&c=no5kyAaDw9x X/KkISQFgrtK4Lpwzm1iLJiatVQKF5rhcCdd85Hd2HrT/dgZjETDV4NYk3lM2WHUrg9Qw3FwunTrObvu1iBIYOSm igHTeDvHctJalGt8p/LBuBZhiC jhx98ZkVxBDrF/iwYy746xmM7/AhrPs4ppWV/AJoye5dBBVk6rq0fyxkIK67g1ds&e=0&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461963835/fr/4/.../46039-1800344-microsoft-office-professional-2007.exe  (x12-30196.exe)

 
Latest 30 of 195 download URLs

The following 50 files have been seen to comunicate with www.nowfactorymeta.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.