home

www.presentfarmcontent.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
presentfarmcontent.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M), PUP.installCore.MICROMAX.Installer (M), PUP.installCore (M)
100.00%

The domain www.presentfarmcontent.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 19, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 8, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 8, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 8, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 8, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 8, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 8, 2016

File downloads found at URLs served by www.presentfarmcontent.com.

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=R ef4JkBDDirfDvypdfn6lALfXMeqncCl3tgEvY5Jls=&c=BusthCTUKuZVSaYO1li0CrD8QxvMyWAADaTaXzuI4IgF J/k6C9i3dPWCbUhrUifX/31WCU8NbR7NOBpf Ih5uacLKgM6lnKlcGnx4w02GW8DDV0XVEu49QwGt8Qn/sZ&fallback_url=http://res.prograbay.com/.../install_virtualdj_home_v7.0.5.exe  (d07d31370d4e1d738a66e9e01b55646e)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=ueQ8BRPoA7BQBiO2Zi2MhS/ZGhwHdyp87YEAT2ZxDGg=&c= Sb25riRvTQ6IlSAMmSbCOJnJMGHgZ9DuuoQKrpbov6fhXjSDO8DhlcRUOehwiV/7gnP yXmdCAkXFmTwOxOQ 1OhxMyoZF1SVcCNqKNfLtcXORRZ94/MeG8n3sE7c5r&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=jf1uPkIMcAe5zaeKILI5TF28dNVcngzDJWivdYyjFuM=&c=t3q9wEH3zERveH3R2itRU6rPV7DYO4sSE5VWl cBHKxFish1F14kVGZiyRBArahIDHS613hn2BfjberKtEKog2BMAcJo2fdzcFjbcyyvp6x drxFInKuFtxyQMV4v6pe&fallback_url=http://res.prograbay.com/.../wlsetup-custom-fr.exe  (2ebcef383b9edea5c1614d3161a3d0c1)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=N53XAxvjYYt81P7p 0X5qCdw4hBT1GttVYsUaR9NdIM=&c=3MsAELDCFhQNPRSekVnO0GIM5bqV xx48cxgdkJ9aGQvm EQZh2I/ufERXSkuCssiV3I/Tw72E8d0mlTVmNyvCksCD6uhKxDgSGvv9cE1qUig9mxfm8BO4EJaZmKATe3&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (6fbbdda78eb07e18a67b1525ad32c9a7)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=5kQUIduqzNMfshPrgh2PKS3R5QJp652GsWjw0CzBdwk=&c=zJDU2HdHkuJsDJl2llfsz8AU7ZDSxCY/apK5Ubuq NGlg6Ybte2DnRnF H9dUNS/jAaFWe3y3QRUckn43rhSMZLBzEfOnAtUUgz0TJmBw5fMfQs3jaP6Qv2WbeMpm/xx&fallback_url=http://res.hufftos.com/.../Photoshop.exe  (3f3eab26b169d1b01f18475367d6abd1)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=7w55WNt3Axq9fjLZgZ3R5BnneTtJjqltycrrkml48yM=&c=1g/3vEtNPFdhOR2pew490uNfsJ0tMav8czf7nf2IemiIZJY3xxshZadnosTI7UMXqKC1R6QYNCfobeIhW5IqORWJsAfICio1 xymUQV2WfwJApAZ/bY4h6e2m8lQaMdz&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=Mao 1rquIEm6vB95VZybQJHMXXolZrAgZliMeq6q 8E=&c=PjqT7gtykcNgMbthUxc8qGJ 10hA7dq4HU2g5euwvX5nkw4FI76airLhm73zAUzfXy7ZWg GYdfVGR2WgI3TQTO3Wxz4ec/FVXD7aa477ppAc9hnRuoukowiVDQHCIb2&fallback_url=http://res.cruffus.com/.../Firefox_Setup_21.0_en.exe  (c.exe)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=OSy7iTxqv/3jT2FUrqiiy/PHS6dPGrP8OFsSBOCqXx8=&c=0fhtM0v pcEq3iRUbGrLhdfHJoOIfDKPiiIMF9lHGCGyLHfzNY5nHXvtP5IAa0B74IUpUwChmvIFzXAqbmgXHBfDWMs0lPJUMHZBXLEWMk3MLLzcXKRwYG067SsDblrH&fallback_url=http://res.hufftos.com/.../jre-7u9-windows-i586.exe  (fe151048573af886e16d31e4da4f3a6f)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=X6nhh41W0FNSsCtXPo7mzHJ1AnFICNXDva7sAfJgj8A=&c=5TPo5r6vF47n4jfaxx8AIs wivquV3ZC7/ZzSmRcPXerKeV4/0xrfgvD3WMP5rwCUYkpTxFNIgmxfVgSWpGV5y3rZQr3nP2ysRHS8C5U2WWYIsIjVmxWRlrdvddiUqOk&fallback_url=http://res.hufftos.com/.../audacity-win-2.0.2.exe  (e75e5f89aac44b598ac9765ec781e9a9)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=myK7bby8WBUOxsL6qOvzfUos0wyTL/rR6G E2PVYEf0=&c=017thomkBx8ZOw2dniHJ4kp0bGtNErokDvaKBQ90aHl aC1FBSLiaB VuEuQ5lyOsP1sZrfUuzpx8DmpJMd/pv4tKUyDhhkMLnBp86Yo4xVpb5XzuOMECMfSHQVdBHlG&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (fd97125faaa6146aa795e9fa37971efb)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=rrnt/eOuc7iL7d3oCXWr9K0JC1lPRJyYoOEeRWhYRW0=&c=nMnI5IaUTysqNA7M1Q4rjU bVMRR7KOBVtjB/q0p8Thv88zb5hvwMpu8qyI2FDFH GVcOgmavZZaTYfKPV5CMhi5uhP5Sesjdm43xiAs/4ph05cnbXaKTjFGFEMYotwu&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=vUN PqGEjuvu2dRkzgKUQZpKrq4WlkcbM2U4uFSfdy4=&c=jfGFW89g33EW/aw Lgeitw DqFjQwcMQ/Wphx7JP6Akh0oObCh1ia7RLn1w2IoM 8a6JSJkBtAzD/0NHPdN6HhTy8beqdWwqeEBdMuIwx53mTDS7l24YYxDm2p7fOVL4&fallback_url=http://res.mshist.com/.../BoomBeach.exe  (0a19ed46336b0262c279f7897ff5bdbb)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=8QdsGbL81V0Rd6NN1PYEZW5qGwCGjJTnnk/EtF5s6OQ=&c=mvsi8lo gqWyD wqlc5Afi1nYYIl3cR7EC49yoAIkfBosgR1dOEOEzMW5Lh/GUqZ8cmv1MXc2LSWYz8CkKSiSLGrjX5ZEIkKjnU7ZS3 6piY 1yJeqGhUNZ0FYAhxNCZ&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (1f3250b482d1243ae456e9dc700a381d)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=A9ORITWE7799mfRbb4c0O36rdfqPFVyKsFP1QuEdcuA=&c=AhCGbCSHLJJYlW8gis/8IoY3ueR6Iw QQxmfTPa3zWLG5S5CqIDLNELBfHjrH26WvswjIks1aNElIkeT3Q5Md5MvXWPkBN9T03e8HeAz2gddVgKzlrlG/rkgJ1gGOok6&fallback_url=http://res.mshist.com/.../LaBaieDuParadis.exe  (9ff22c8519c6ecb2f0533671a7700422)

1 / 68      (PUP)
http://www.presentfarmcontent.com/c?x=C6lE 2AHyZ/ iHZ8H/PwEQgcYaO2quKFNaA0H NfDHs=&c=sQG3lqbc7K4hT4U EgSnd1VIwCIDCSm3/6wddP3uYwL2JmJo/v5I8Gmz9RJROlPMRBcunzIEqoVS1GnNLrLVfTBozjfl6whrI3N cE VA7cip8oc7QfwnYiKOKUt78ip&fallback_url=http://res.prograbay.com/.../IE10-Windows6.1-x86-fr-fr.exe  (ca0f9ea13ad9e7d9f428889bca563961)

The following 6 files have been seen to comunicate with www.presentfarmcontent.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.