home

www.tagfuncapital.com

Communigal Communication Ltd

Domain Information

The domain www.tagfuncapital.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, January 30, 2016

Expires date:
Monday, January 30, 2017

Updated date:
Saturday, January 30, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tagfuncapital.com

Whois:
1 tagfuncapital.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.tagfuncapital.com has been seen to resolve to the following 14 IP addresses.

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 6, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 6, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 20, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 19, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 19, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 19, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 19, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 19, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 19, 2016

File downloads found at URLs served by www.tagfuncapital.com.

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x= JschenCmje4lT0RzuWSYe5wp1lHouyd5i5Z7AWkaG4=&c=rAh3vFPFqHovMpnVoMUiSGrot2SbkYyrp0JVz8TK1qdzbdaOygq79ivk4pzijhoFN cwVJDwhq/Q2ggzOnWeerCzqFFtiBVETo/012p9A7faOS9hlDfpfD8ZmBfyPLuI&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (f0c96759bdbb5901dfbce6bccadf9da1)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=Ie4hBKE1xcfh3x8JepOaHXGQOJ9wB25B/vnxt0Jao5I=&c=C3d1nSX GTWGBj66fdDTJxdimjKih3JrgLj1wcSHYl 4KyYpWYEqLxPEgzEDP8riFemzW3JmSbA21LfNH8fCq0DJTbb0MsTG7S9vXXY4eArjg90yjUHtWdc8rJbTn5Ii71l snXKlAb0OMZjoJc8tsv5W/nNDInzEM8NWYWlnD8=&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe Press  (aeda1e639177bca9b5fa3ed62fd14be8)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=aJvpZN9vaiLhG ZF82FR8WShbSoV028mvsuB7wlAK7A=&c=MDVImAupO2/WODEro3k7gxb2XL/z8vcoo YDTwDAQuPG1ZNIbVaA/1VVUBbU HMZplTU7DJyXwZuJV2A8YGm2/jjKhnHz9siPXiPcOaTGsMdtCRA8q0QJY9yIMQWwzWe&fallback_url=http://res.mshist.com/.../Asphalt8Airborne.exe  (e1c10a6a619013000704f50e00fa39fd)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=SmYcmj968105bTO9GM2tpqBninUJSCPrhy qOEf6hUo=&c=8 cGxNz6r3RMje6MVoobJV31FzSEPjJGxBCBGw/N6DT0X49XMGmhf9WD7Ao9Nsg4GWiR0kA74zpP0aVO/vVvZgTZjeLOlm6d6jtnADwbkAC325mVTxEc9e/qsEZrgq68&fallback_url=http://res.mshist.com/.../CandyCrushSaga.exe  (16eeb8343ee00dbaf83dafdb70cd0ce1)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=znPTwBK6ganC0AS3cMCcSM7d4yPiC/CllTo7MfZrojY=&c=wqxOh2WwhVZ4a5wp/FyKI5Bt/Frn8DxY FsPqe88cYcPoCKg6R5Y3ZP7K4yyGPbyn8da/hD2hWtI5a1n0kDhzlUjtSPjUppI9R4flX5YHHeA1vBB/U3SHMnQdf3B4ggx&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (fb029e79ecb2fb5ec300b22eac70095a)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=VSPqSTonxe6/32hTAle4zszMCaBTyH4eDTa8roi6i0w=&c=bxQ5YX6jDUi1poTBlyJTL MRMRu1cY/gfw/OSrdQj3Nygb1ikw Zw9QZNIgsr051cWQjm0hsqAu8rVATXRrEuhOyoysE0pX9nuL/ivCqPxKCOQe7R8f3d9xqPlvvfl3T&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (c02e1dfab17f744ca2a63bd7a13e152c)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=gZuTVKcxsYTA6xG5Sg9ZG8pvxxoGpdGkVirbrAhg5Ek=&c=U0JCZ qZ0E/P FCnzmJGdkM/jb56LbSt 6WrFUlwqe18jtBBLy7edgcqXrzeL DEJrCifVaZ/Ot8 3SpckgJowIv8ctHDhjkbBVosv21tXCErO32y/55405 hOfPj3Ms&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=pB2uG8QzcsV5ZFkg3ymvuwteDUyGsOQEOLDyCJECxEU=&c=pPEPAqqjojnlE/2 mc7n3P3EhRcIhAyRVPgyOVszutjKWWEwJ1xUbVcJdkTqnWVBQpen7jjrY2oZ1enusMEMuZ3O/nfFExuv 0A3XCz2 yuTDQ6z5DNfwJi1gPVLKT9A&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (4077d56236ea1fa1581560184e6d79de)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=ZimKDXXUh2SdK0hixWIsuZS/5G1bEJxYmaVe0Ds8Qnc=&c=qu9hH/t/Wi8IBqjMm44c2uGgjZjc44G9XXHqv4IWQb/NSgePYC/Zayj10x2q/U0mCMIwwwa/7Z0QiI1jslyzkkU2xTLWkjFEUVYAjxOO9cYE4Rz0TXSEjTfX63NpUCfGvpnorZ iygA9scSdF58CbtngCcSup pGiwy6QHuHPYI=&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (aeda1e639177bca9b5fa3ed62fd14be8)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=uV85NHLp QQmNpz1w3fRhnXVpUZstgB/O3BXx9Iwnk0=&c=wn6sX4qbAdPRMUNTcADWVHgZ8g195sYmcPDzTdCYYKTCzNhVIzACpV1o5i8 WntCccp86WhgEX02QSuWiWv4Uz1HUhJws FEyRHQ0tNexQf0g2mdHr03NEnTJNdaGMQk&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=BgfWdN9mvT2FJPpCYetqaOectS6azoSmn5ebszNTqcU=&c=7SOahAYHZ7b3EKtuqj2jRVYqO10Ka5TPtD 1AmKhl82n5dkVDtH1ZpcvHCnBTVbX5nCanqg2uknXZySQamAYHyx3Np8c6cinvZJhE6KtpzLGRbwCjrhpkoiJSoXRPa2P&fallback_url=http://res.setauls.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (icreinstall_apache_openoffice_incubating_3.4.1_win_x86_install_fr.exe)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=px9kbQXQBYa8NJMurDjeA0kMEc9/DwKGegGvFAJWO3s=&c=yxBpG1GWpc0rKEYTR1FVlLqYsqgJ o3cNDT5IsTdXHfhgNRit4fxniSt7nqQ9t6rovxUMn0zzI0X6S9tP0kRJlCgHYmPMYASKFopy5QB3l36 AfOLw3Hd/mJm3lNE2 U&fallback_url=http://res.hufftos.com/.../install_virtualdj_home_v7.0.5.exe  (3d17b4cd0bf1134921685cf836d03cc8)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=01EZncuuYOVOlsyZVIbUoGghXz7JiVhUCxj2uzWGVYQ=&c=P2DqXM3nH1ejD5HbkFKJxfa8Q6aP17mrNC9yKuA6t2KJQRp9O5I/AZioNwv8zkvc/SHw8i7yRChuAdLOA/y37RmhHWFqNjZc867f1u6BsiEqkqrgOp5v4bpsbU2MsxeP&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (7bd76d4498454f0005b964bf324fc688)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=Rwld8dCydAlFtmqRjjrlE Fhm0q0XZ8 uqcemoPXpl8=&c=bzUl5oiwbTvycbCvi50bWsxmyeHPvSCeBzzHHh0vBVTuDRSdB mhxZrNKq7pjL1IutDN1vBsIu9gzQAq3fcZ1wRTofWfVODvo3/0OrKfStkKUekjIO8oaYV PL65w9QY&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=Zy4iVd RYwCI5nnLVJ9qYOPd5Q/zxIlwd4msYNDX7/Q=&c=WjBUKsHsORie6e6U4pkLihmyo JyS2CS7vDbZR hACB1lc0c tMHBWCCjOBulkxdZF5YtRt8BtVTBzCkhUp2kR/gcMUEvvC1qyf3RjcFckm4NQx3BDnCe8X0TgPWOKA9&fallback_url=http://res.mshist.com/.../CandyCrushSoda.exe  (caff92d1612712d818f6ca67f4b32e13)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=RINLO3HgwreHkMgJYciB7pUtByUuywbaWwVv/2rxq0o=&c=TjrztDM74mA9pknGqhIvNlZ6m66Dv8yFwIQTxQZKbKP2prgVrAm MkarlO0feOoXOeZcoUIXmln5vTbpJ R7NTDRD1sEyCFFi9gavMp7rp4XPRvHbImwvFz FMPmGwwo&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=mfYiQIusNQ7TsqGmsS15camvHBiK G9Yk1F1b/zxu58=&c=NbGYAGI/SEN0ahKO5JdwJl1iflQhvSBDKVLRYi3czY4LLHfiQ2tszVDIH7gWSOIMR0ha4bG5b7CtnaChub/RvvsCpcS jBVdVH5au4hvpA48h1ichTveSAKzzj3qInU2&fallback_url=http://res.setauls.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (e0ad0109e43efa3ab28b5346d9f665e8)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=BiiCP7DCo0tFiABAAQ6RTuBrVeKzgdMZMbgoN1oFGpw=&c=tg6nIt Xceg0B5UUrvwDYcWcMEXNOfB2c1zlWB7dEGpWRHY/rcrhD7QD42CWYJPV3R6qM8J5K3rZoVuWwq4pHnlxgizh/5Q21BK JaMvAUnYHXLDDCWCgxiutv/DDgVUJ1Jj56NRyj7PMIpOK1SwuZ geINWw2ABh7pI3eyCKVk=&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (aeda1e639177bca9b5fa3ed62fd14be8)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=9l9uHJ1jttaL5o6ZBnqvqZ JWqfDYCbn2f3N6pI3ZtQ=&c=Y2jSYiCiMesLB0i6k9R5Q3dKxgirdratag9nqZ8q9dFRTLaW5/xG7NUUEHWeoZ2nJXHKJAqiYtCXwCo3GfJH819hLPUrFmrRATgMNzC4HVtwvOsdwqvGg256Vgdybn1e&fallback_url=http://res.hufftos.com/.../Opera_22.0.1471.50_Setup.exe  (3792da8c160dd4d6f26f968b9893edc5)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=zCyb/lY25aFGdx3jqG i0stw3FX09pbHbk BzA 0xZw=&c=oBDgJQB7uPKkl2uImjjGB4KJmd1wU8TlwLh9k8E7EnsyXyjSNwSw g6hEXg27jPyfr0x1S3lBFHTT9ZS2SoJ8ydO7DA2i86aVc DA7bEVtqLH0/Ypa0OalxfIC981nZt&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe  (ce29b87ecb66c062c19b2463dca0725e)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=scfvWwkF3N 9kPml491RC3ciZ5YABEDHwRzU3Jz1sa8=&c=KrKW Qdkwx3IDDg9ksCVXZe7zhxTsMXrHfJxe2LVRg4k8/WubLx6VYVGXB3xzf6aYY0APkRCJkj9224wb gtAOS3q840Owz4p wUuEMH2NhCnsbiQLIY7 qCQNbzvGr6&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=DOeMkKNei1JJBlg1dvID3cdrAYhFKI3B1pdN1Aqk3I4=&c=D9VEoTL7RRkO SOl4Jnw4jspgLKSZedPT4cjHWuF05ZNqbRDt5nQC7MXTy0j48jDLe5WOeWTPCxH vB MDDn1qDDuSo8bkNFLGvK4hZtSD/tHifVC2mpBTdTDKP5D5uW&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (50f2af701b1f55f0fa6eba516341d072)

1 / 68      (PUP)
http://www.tagfuncapital.com/c?x=0g3vWrayataSrlNrcAWC/N/MZr2LajuMSlSlu6ClBdI=&c=eyO 3fyl5i33StPZIPSknTsOqVVusoxaVlKA /assULc03za1aU0kxMAVHHt749R8fIaycgjrJo5VnvakZD1GWhlujt/sS7seQQyomwEVIzxRXJK8SgpmXv7PWLDGxBt&fallback_url=http://res.setauls.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (e0ad0109e43efa3ab28b5346d9f665e8)

The following 18 files have been seen to comunicate with www.tagfuncapital.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.