home

cdn.vipbundlescase.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
vipbundlescase.com

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.dobreprogramyspzoo.Installer (M), PUP.installCore.dobrepro.Installer (M), PUP.installCore (M)
100.00%

Bkav FE
W32.HfsAdware
50.00%

Malwarebytes
PUP.Optional.InstallCore.A
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

ESET NOD32
Win32/InstallCore.AAJ potentially unwanted (variant)
50.00%

Dr.Web
Trojan.InstallCore.60
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

Panda Antivirus
PUP/Multitoolbar
50.00%

McAfee
Artemis!27AB021BC05D
25.00%

Baidu Antivirus
Adware.Win32.InstallCore
25.00%

Fortinet FortiGate
Riskware/InstallCore
25.00%

Avira AntiVirus
PUA/InstallCore.Gen
25.00%

The domain cdn.vipbundlescase.com has been seen to resolve to the following 3 IP addresses.

52.27.36.155
ec2-52-27-36-155.us-west-2.compute.amazonaws.com
May 24, 2016

54.186.192.212
ec2-54-186-192-212.us-west-2.compute.amazonaws.com
April 21, 2016

54.149.161.12
ec2-54-149-161-12.us-west-2.compute.amazonaws.com
April 12, 2016

File downloads found at URLs served by cdn.vipbundlescase.com.

1 / 68      (Adware)
http://cdn.vipbundlescase.com/c?x=304LSq29u85zfQhalvs24ykC7LR5UyhbOMVe5Ra1mWY=&c=1MrwAOaaIgx3MZqaJsNS1osJE9gQDOFzZBPLhvfcakdO7G37PUoZpUgzSmmIA0UJw39Q5faDhBoJM1YJK5R3O1JNgBzwuyoK/Dy7qjpyCsF3coNa4ABhxQjr0iaT2X4A8rYJp X3RTU9WnoLsfDVGg==&fallback_url=http://storage.dobreprogramy.pl/.../Faktury_7_setup(dobreprogramy.pl).exe&downloadAs=Faktury-Express-12203-dp.exe  (065716f7a5f3f5e9b6453233f35c4205)

11 / 68    (Adware)
http://cdn.vipbundlescase.com/c?x=5KqTSSz5in3skGDH9rsI VmPiQDdK9fwJMfv1v7sAWQ=&c=EyGCWw1WFoc6KbVnfK0We2BNWQYroF73blS A9/KYp7d8SseVIgWLuaSx6feOfxzuwsREsA2lmTUj zEpHbmHEBZtpVKBGt1uNb08kXVOZB61TPXwfyJjEfvfJIAkdFgWm3CcKVDJYQiA4VYpsoCQ==&fallback_url=http://storage.dobreprogramy.pl/.../winrar-x64-521pl.exe&downloadAs=WinRAR-12398-dp.exe  (3e3a41e8ed504f8b04b64a55cd711e06)

9 / 68      (Adware)
http://cdn.vipbundlescase.com/c?x=QHCWRT23rPaKQZhNXBt6BSID6ybSvYrpV5QKN3I/sdE=&c=kA6O8dQAVKmx4B/nSPYfE3aiY/TvyWcTlyzYOfQrO7N 7oKnZjLeSpasqnhdN29NNzId64PRaFc084OF6dqbth3/PRnJmlamlbGz4mvbe6/XeMGZI84nIGbRNFrC6/nW/ISIq25mhfvIvr w/0TdRw==&fallback_url=http://download-installer.cdn.mozilla.net/pub/firefox/releases/39.0/win32/.../Firefox Setup 39.0.exe&downloadAs=Firefox-13108-dp.exe  (d29851258422562c7327391e77079ad4)

1 / 68      (Adware)
http://cdn.vipbundlescase.com/c?x=wMy0HtN4nEVJIcWJwuxPObMyMteAJOPakbyP4GuN2ws=&c=Mbl1tre23J3JSk/4OUN6qZmdCLf3 9yQr/bUULde4mpUIDs9ofHEmJ/qgz1fHOUZjbS8imeBh06dmW uWNvrnQ2yIdtLsr6nOhKEr1I0nN3d65rWQALMm o5yfNPwy9lMeXSjamGwjO05gTOCk61Eg==&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (8040d700636726708fcc72f8ddfe5642)

0 / 68
http://cdn.vipbundlescase.com/c?x=5Nr70DhNddGuoJoEjDpQatt0sZz8 eax9H brz PqHM=&c=5daLjp9NARTyUxLkPmSUVzXlpT/MmhgdWZ0ksnWE5c5Yg23fcj UTY6FRRnMK8iB3TLiEzJiR5sZJrnJxIO49rWQFkTnHO0GnL5j7LliP1uVfYm/gDM71MtfITpOQ YX2Lz4FstArkWZswXOy5canA==&fallback_url=http://download.lightscribe.com/.../LS_Update_1.18.27.10_.exe&downloadAs=LightScribe-System-Software-12914-dp.exe  (15003553_stp.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.