Download
Community
knowledgeBase
» www.safecapitalsend.com
Overview
Analysis
IPs Addresses (12)
Downloads (11)
Network (36)
www.safecapitalsend.com
Domain Information
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Root domain:
safecapitalsend.com
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Vittalia.QUICKIDEAS.Installer (M), PUP.installCore.MICROMAX.Installer (M)
100.00%
Trend Micro House Call
TROJ_GEN.R02SH05EF15
11.11%
IPs Addresses
The domain www.safecapitalsend.com has been seen to resolve to the following 12 IP addresses.
54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 20, 2016
54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 20, 2016
54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 3, 2016
52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 3, 2016
52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 3, 2016
54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 3, 2016
52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016
52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 2, 2016
54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 2, 2016
54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 2, 2016
52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016
52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016
Downloads
File downloads found at URLs served by www.safecapitalsend.com.
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=2cDe8t9nKzUMqqq8fMrRhQxTNiqSAHqyTgR1mwPeLv0=&c=y8TEHpEzC5eLgnR3l CVgx7Q6m4C4gp9s32jowrvPzkFb9esRNvglrF2XPxPUqm3kPqjH9UPwUTsD7VY4h7hqLMJ9EOhIbJZa0oLUApaLiybkyTU5m0iARL5 EZj KTu&fallback_url=http://res.mshist.com/.../Instagram.exe
(74026f16ccbc8e6654249b5dc8d07951)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=JgaIH3DXLiF5CpCCgEidv5VvekCgv2aI5W65Jb0Q20s=&c=Qa2DY7oXMVOggP1jrmq3IjJfi80zUqMxoR/X5pEVbqWNb O5E P/vjI2JBG/i E2Q7O0/oI2qiuoYCEHCyaM9gBk5BadHnfpGMDe0v78rUtlXJZctbZeMl9GmpIfs6Wl&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe
(e63c0177d0618f722114d775ae959b3d)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=vqHRoMQZV/xkeja6OiJZwVR9WbnwYfhGT8rN9k qSho=&c=mGn968vbFjHFVPPAZoqrl9R6n llxZjwoDjFqIri9L5EkrIsk6qExNCOECyKMcVJy9eAKT18dpwJnMhafITmyPAm2p6oIxlsePxdmBHEc11YdiirUxs/hHHsiumI6bTl&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi
(9c93b18dc09215098a8e27f6a0e875f2)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=y77uO34J15SZgx9uI3Gc0A7MgbUCnfo4/AAXrVO8SgQ=&c=qMNqrfwzrw9t7DTZMGWizNE2ldGtEOWEcridaauO6dQL5pxP/2fzeA/Qc/xJVbYMIpiXGrK/983dy5TcerQjDPnJEyBZ0 Vr1qPfXMly/6qDi1Vq 0heS8PP/ryySEo5&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe
(d6392f3fced89091c1067a52736fbc48)
2 / 68 (PUP)
http://www.safecapitalsend.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
(updatechecker.exe)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=A IfVn4avIgNOgSl pG4TFXDRZD3Y 07XZ2pCpCfyYI=&c=c JEYECcvHTraabITMxOHBEhUJnFiQt1sBq5Vg/7ai/7/lXFTZgGhvnqfNrJaEUU5T3ft5VTmyOZcXEFWKpnRcn4o3XgDfqwpSQjlKVYXpQ fKEoHm9YzzRJKkfhBBC5cuykxtKY9jNSLnbqBiUqx19t3t0BMIaxAm1fxN8aspA=&e=1&fallback_url=http://res.wosoth.com/cache/upch/.../UpdateChecker.exe
(edc90de148f8e02e171ce7b455506840)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=DSerZ8g1pfCz3FZce8xfeDaN114IrpNebDG7RIA1778=&c=2u4mJSuwovRk3KxYsrCMfM Lc1AWAf6im/4w3WbUw4yShCDiC6pwil0HQVxQJsxtZDJZkJgNTqlahXwvjXWR3VCc5Atuswgk5ou0TlhU7so rKZhWWXtNOsK0c56jQyI&fallback_url=http://res.setauls.com/.../ChromeSetup_fr.exe
(d6392f3fced89091c1067a52736fbc48)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=7g8kA3chFnawXRMJVUrkOymIsksGDzywaP9sUtf7W6w=&c=yoV6AsfWFvUp3gO3qgpeFEdLdbB4lwZjKoId32D48 UuoGDmT14fZ2JB5hIQ8qMJ8HIFK8XUtSDbuoc7l7YFclexaQw2glavl7dIe7pX0apMMKte6IgFRcd9B5SX6Rgw&fallback_url=http://res.setauls.com/.../Firefox_Setup_21.0_fr.exe
(icreinstall_firefox_setup_21.0_fr.exe)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=l22oDx04/REm9VWPTdRWKNTticLLeEhZjyY8dfPVBLI=&c=nrGb2J8C2u25AVDL3SXsZTaIV8/CqSEs4pzdffIIUS1YZaMQ0BnemwJ0rYyQ1BsTNhVH3zrLv YBskt0dGMmq/UcyIyCkUvphg8riIXERG9gJjKwulrmFBnLM57BDG/J&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi
(9c93b18dc09215098a8e27f6a0e875f2)
1 / 68 (PUP)
http://www.safecapitalsend.com/WVl6OTRQV3RZVkVaQkpUSkdlRTFxTW1jbE1rSlJjWG80VmxVME1Fc3dValpFZWlVeVJuZzBSVlJUY2pOUVNHRlVNekZRUlRBbE0wUW1ZejFzTUVONVptTmpRMmxaWms5alMyNW9VV1ZHUkhSc1pVMTFibVE0ZFdGclFpVXlRamxXTUhKblNuQm5TVlF3VDJab1VtaGpVRGxNUVdoNVQzZFFZbTFYTUdsaWEzZG1ORE5XZWtKUmQwNVdTREJvVTNwbWRFWjNUSEZtYkZGTGRHcHZUVFpYZVhKbWNVMVJlakJXZGpVd05TVXlRa0Z0WTFsRE5VMU5SR2gwWlhwTU1YaEtSR0ptVkRaM2R5VXlSa2xHV0hreFNrODBXWGxvYzBFbE0wUWxNMFFtWlQweEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2NtVnpMbVZ0YVd4dUxtTnZiU1V5Um1OaFkyaGxKVEpHZFhCamFDVXlSbTFwYm1WamNtRm1kQ1V5UmxWd1pHRjBaVU5vWldOclpYSXVaWGhs
(updatechecker.exe)
1 / 68 (PUP)
http://www.safecapitalsend.com/c?x=2Vw51f5OmT0R8LDqWgRouvc7XvR2G4bkztVnrcar 1Y=&c=A/qhuETOKBdXugw78qIzM55CkkGiAYl7ZgptzgWmDlzXXai5jqv 6Z1KGrlZ2XdH5PPsOxXx2/U6ML1V/tOsJ16jilQGLEI n7ZzGHIk0r06AOs9EtOpXam00SisQEjF&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe
(483627a4149138358ebdf7b2ec6990ee)
Network Communications
The following 36 files have been seen to comunicate with www.safecapitalsend.com in live environments.
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.33.46.229
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.33.46.229
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
52.38.209.219
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.38.209.219
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
54.200.224.121
:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)
TCP »
52.38.209.219
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
citrio.exe (Citrio by CatalinaGroup)
TCP »
54.200.224.121
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
54.200.224.121
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
Client.exe
TCP »
54.200.224.121
:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
036629fbd4864725737a8ba8fe7e8cd6.exe
TCP »
52.33.46.229
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
52.33.46.229
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
Latest 20 of 77 files
X