» www.bulkcitycontent.com
Overview
Analysis
IPs Addresses (11)
Downloads (26)
Network (6)

www.bulkcitycontent.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

bulkcitycontent.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore (M), PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)

100.00%

The domain www.bulkcitycontent.com has been seen to resolve to the following 11 IP addresses.

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 19, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 19, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 19, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 8, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 8, 2016

File downloads found at URLs served by www.bulkcitycontent.com.

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x= 7OagSeAGBenbjCZEoPiPS4UayiNrmAgr65Thb/JWU8=&c=NjlFB0HxWetTPbIYk3QC2iuGX5kXRoWd7TEQegBtTs6aXj3wpwrrh8hGLG784YG2twdDwnl 5enKFq3bJpl/slbBMVR6RLPRtpc5mzu3HuZ6NccAbCMSvCza/ 0EhOBh&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe (c9b2b54dddac574e89aaef5d1a7327fd)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=K5Qunt/6gj1IAGfaq5iwFmZDCwFjBuvvLhZUO9ws3RQ=&c=xchc7ieyDb32t2fixoMv3tdgcdybX9rXoKJVe2Idl7C9f32fzYhsmwLZrxRC3Q2Bzqz5NVGs3mBQ0S9Aac/mrB0FvZixR2bdtQRraTkNkPisyNzleVGCFyHusqc6QOZu&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe (d04edfc71b425b7dbd9db0d208d60c47)

1 / 68 (PUP)

http://www.bulkcitycontent.com/c?x=kFIhBwARGaSFiRs55nUxDQ5f1DgBNyyXDn3oVyijOPU=&c=bm2mvTDYfQjNtrjy6brTA7ek2j61p9bYDKhssZx5VUCNcewUPTEJJLT41e464I3y5azAO1fw/5NuktgTCJUqVLa98xS44v5O/h2masuQ4UYLL9HDfpK8S3IlOaeQvPSr&fallback_url=http://www.7-zip.org/.../7z1514.exe&downloadAs=7Zip-12559-dp.exe (53fc12a87031b713ff06343e72b2d52c)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=j5Qf 95YSaaa6vNuOnuca8QCNbk9yKL1QjjaGiOmJ4A=&c=c7NZIckKXFcYFuPk88Y 5cLO8GDlDVYT1ioBdyiqHeyh7lNufar1rjkORDC8xGE/NdTimsHE3ZmMsm2udqAPfEcwTRbuDJYlRNErj7v8bGw4bKQH1zRU4Ppud14zEIUF&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe (18890f03ccfdb6128672cebdb609b290)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=/xPvUemP9Hj43 XNP5iasFXK32dqChPOmRzuFn1iv/I=&c=1WMOjOSVbuPNsEs6tZgW9EwJzsXn0siuiV8qdR2hnaX/FspOwexZAVrwq5v73VSrj2EoCSgNdyAaaItGVwflJJzXfbpou7 tL1GcIiA qgwlXt1U3JkaQ4DSdorOqXB&fallback_url=http://kdl1.cache.wps.com/ksodl/download/.../setup_wps_office_2016.exe&downloadAs=WPS-Office-28152-dp.exe (c2cefa9993583813dab1b9669815979d)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=yN692Y/gOfABRQNYLEdhJMSn9c8rkFMWESBzHOKsTio=&c=wFvfKAoOn93navMXdFhYc48O7X/cqZBK1So3jdNMwvoSeUXxG0CfBdLkDW2EjWlIj2GZur6IVVdgGYpMOJVjhZdjezITSmal3m xgSVvopBK9o2KCA5sJcPkdnNnss2f&fallback_url=http://www.ardfry.com/.../PSDCodec-Setup.exe&downloadAs=PSD-Codec-39248-dp.exe (a9e6a54e4ba51ab4cd31bbe6392eef2a)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=WQK921psz dxmPCQt5Hozsape1l1e0vQzgyH RjfJRM=&c=w/6JD5fvphwKKkWhvhuOgiEAIpoyhe3nymfc5Gt5N6nZ3IPxwBF6peF/DWMgWlgGkV8eVVpvhgSRcSNIi4v3Z r uthZkT56qoD9f1IVej0YKIkyiSkDmCu5MVR0cvoE&fallback_url=http://.../winzip200-64.msi&downloadAs=WinZip-12854-dp.exe (f6ad8a5685a2e5c84b53acaf7afaca02)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=uKuTo/FretxBNopRsSSXm8eaunztM9h93v4gxAhO0IY=&c=4DJyu5mVWcUAts2KAGNv0 ivBLSj5dAdw0gsYrfV/2P3ME4ZcGmjGpJKZUlkpzuLls5mie4oPLbDPQcb1nWeL9ALUOc8yDueHdLDGjzUfEPzf4kkgkI4/uYb4gB8q 9t&fallback_url=http://storage.dobreprogramy.pl/.../OOo_2.4.2_Win32Intel_install_pl(dobreprogramy.pl).exe&downloadAs=OpenOffice.org-12495-dp.exe (08ac0322a342734c9b023267c18b8824)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=T8Y3WqIE/QlOPa/PjXJfOMchqeLh/Mzw3LLPzCDLsyg=&c=Wg1 37XjIup0sb142P6VlqmMq1j3xGVXeEm9NCoKcHW1 npq2/DM17vrcdCwqQU1Nv88gnrZE/noNh8k RkdpQzJdbJHBwHH1Qc2atTtyAV7Pc32c3MVE1N8OrewJoG8&fallback_url=http://www.7-zip.org/.../7z1514.exe&downloadAs=7Zip-12559-dp.exe (a5fb183b960130422d98d6cb53c6595f)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=N9dg GxIHYG0uZ2Uf89QVVup3vO R3SdYY8yMBWM8I8=&c=vtreqxRLn/XhpRZh8m23dmEBppvw KK1d9 mkxOInl/Ks6cvx6c/ GUXEW64Hh8fMwLBelYpnaJ1xYGaeNiDpxQYwu/hRSDdjtVTPfwx/Me9mOCNBcxjfbPz0aj6ViAy&fallback_url=http://www.softmaker.net/.../freeofficewindows.exe&downloadAs=SoftMaker-FreeOffice-35583-dp.exe (126e3b0fef265d899b05c010c2a41e23)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=stBkO53NuIwgASI/oT9nGE2jd1jwohibW7pYFspJ7Uc=&c=trVw/Tt6wcqCh9Ci9fQDlLKOHgjQyaGvaaOjPxAHD2gnl1nHSLpFQyCTU8cdKxnIZh8IgB96PFYIHBBleIU7kRKXFC2MosJ2xuaiIMW8klQpDkmnrvizuXhQmSE6f4vr&fallback_url=http://download.microsoft.com/download/0/A/0/.../IE10-Windows6.1-x64-pl-pl.exe&downloadAs=Internet-Explorer-39521-dp.exe (594012244f7b21dad09df8630386b68c)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=WBXY FKouVfhZMP1sXprnNe3v7Xmx5SjRo0iQyu0SKo=&c=B/hSgMcm5GFIQSbSLBq8TixWkcF8dU6qq8iPMgTJ k4pNgTX91tF4WDlL11ZIYp0S7k7sO8LYnrgGXsGM18SyhnfjVE65D8pHsKAokY5YcN/B0NIh48tkKjBYGbl4YnO&fallback_url=http://appldnld.apple.com/Safari5/.../SafariSetup.exe&downloadAs=Safari-13196-dp.exe (f8a85fa7f0b83f415a8454c4908bde57)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=VV1mzt4za6sW/r6jjxMNFKlzoXSvUrkPVZ49yl0mR Q=&c=Qx0gaDEIA5H/j3NThJjujZ80IwLhrtTfjrOnz6Fi8fZLYgu5tMTk9Q9jEsUcIPwwzFb7I0CUOMnIE5Yjz SIc8xL1ZNbBheMny6tGWwCDKNAKLLdUgoTGwNX/ NRa4F4&fallback_url=http://cdn04.foxitsoftware.com/pub/foxit/editor/desktop/win/3.x/3.0/.../FoxitAdvancedPDFEditor305_enu_Setup.exe&downloadAs=Foxit-Advanced-PDF-Editor-20595-dp.exe (icreinstall_foxit-advanced-pdf-editor-20595-dp.exe)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=7duVYpuu5tKTuoboeeCuFzt86OuYtfj5DsXg77pRZHY=&c=W ANrNmf/RnbNaVz10eKc98y54SnyM3Z/dxOFJQRPYYqBX1gM3zSKwquTj8fOfkmqts9i55JVbvyzNrN maKC wrAg8VEjgZPc8Vc2QxF90cnvsJtxIG6RyqoksDUwwI&fallback_url=http://storage.dobreprogramy.pl/.../PDFill_PDF_Tools_FREE.exe&downloadAs=PDFill-PDF-Tools-Free-25188-dp.exe (f44d037b9958067ce74d9c3c860f3820)

1 / 68 (PUP)

http://www.bulkcitycontent.com/c?x=GlkKif5T277xHV0h0wzpeR Ygvd1EK/2ta8Ec93EZwE=&c=kDrfh6d 9dHmhEHHbaxALCe AYpKM6XjnYfz1QPef9/JHC7Ft6mpilQr8OpTnb5bDx2FAANXTQPM0Ov xx14t0OWG8FUVc9HL/wdK2wdUx9mtlUKRpzgg4qCk CzUS7IVpVuCaEV7r8OlHXAjovMIOq10GjvvcIMvaxTfsmi3ruJvLEe44BruB xTcuU8wop&fallback_url=http://download.freemake.net/.../FreemakeVideoDownloaderFull.exe&downloadAs=Freemake-Video-Downloader-20102-dp.exe (5a7d03b85d92085dce5e09602368b6c1)

1 / 68 (PUP)

http://www.bulkcitycontent.com/c?x=BFaIlpsEsAumQnU92S2smk3exQ26ZxkatGuMFwpv31I=&c=pNmPgVZaVAtDp75mZ21KCgVM3kqwAJSXJZxu8uSrHpSjdhq33b9nS6NJjlktOudga1BY/LEm1B jqhDSLkeHV48QjOaRCd2m8q3d8TwM5jIWi7kSvXiphWaNLFM6FTzg&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/thunderbird/releases/38.6.0/win32/.../Thunderbird Setup 38.6.0.exe&downloadAs=Mozilla-Thunderbird-13298-dp.exe (c.exe)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=8sZGuM7QbFSClcbX1oqCIaXco9kfH1hC1ILKXM00TeA=&c=KpxkIB92/ZHIEJpZ6ZkpQE2KuH 2pW7J3IkiRgCx0SgdgCggttMKo3HbhbrgS/Vr5ciQUL2LrzS0 6d9OS11HAtGQOdSOFCDss5lfvryZdkjMFw0pLex2XLGjH6EUccg&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe (05970fc92680659c11ffd0d54a70efd0)

1 / 68 (PUP)

http://www.bulkcitycontent.com/c?x=zHAOV9r3ItOxAWfAPpkuBQZGWXjz6uUgZv58NnS6Qrk=&c=0wBnLFhYCEYKi 3Ztujrb/zQ hojyc3cSIa2k0ktz4tnyfljT dsVgEzjjcTHbReCra9IliLRMIpWj/k/7Ckw4hiQ7fejHAaHAeju62LSDknbKHsXoOJY0LU6sISCiI5&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe (d27975358bc8903918b793f25c2b9dee)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=pqXYcE379SmywaViqobVBXnvITJ6FaGYNIoIzMXqe4g=&c=fFISkQyMRkSl2J PhMXcwz1NNtw3sVqrQ33oN3Ygm5lvZZvQv71j7DepfCar2vXBe9svNd1 dEDSFnx1SI2pxbnvgBPQUxHP4P4Mlbaeq7mRJm3KZkbZgr4 tkzdynNk&fallback_url=http://autoid.net.pl/.../FR12_Trial_PL.exe&downloadAs=ABBYY-FineReader-Professional-12711-dp.exe (a574e010182865e294aa9d4578a51890)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=CHXBE7KB346ouirONQvt3NE8fYZSGNo0Gqu61a2Csrc=&c=slY0SCeAZ3h3SxkrjTYTMpCjXDVF74KXfWSC7sHbPY3Kq4r5ZBrdTtkjflO8FQfixeRVQQnYr s0Mal6CvzsnXlOeM5CbQTrTajOjiuPSsVlDqWmdxx2pFGfkwWNZoSh&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe (9d20a4c8da404b224327d4de569db661)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=2M2DjuadUqfY6 ToJBnTVSImCEEsg5csipdUCqjlCdw=&c=7Iu7opJBzlKg8ZeLAtrmxUzAAgNCc6j31cjPjd27bldw1JyDaczb8WaADpePdYpt 6NZQv8kwMj2GW40FNh0hyVHVBE4ng08poA0SQzBXvzqnAb9IvdLI7fljNJZNOTj&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe&downloadAs=Free-Screen-Video-Recorder-33557-dp.exe (825a9125d40950487e0ae12e7bc0bbb0)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=2VjsTcCj3FD5pNGshKUhhF/NPJabO6DV346JpkoQx00=&c=i8ROd978CbfBcXzFosjX07naCZd1xI9IprRvtzxcYU9GbGaiJ2G/saENJf/EUt3/xzrdAKtKHiKWNLDnj4nEoSWEX4iq96be1NNWGLJYYkd9kH0Zyk2sJd3sJb9deYeE&fallback_url=http://yowindow.com/.../yosetup.exe&downloadAs=YoWindow-15367-dp.exe (1fc2fe8d81bc10e6e8796cd589ba34d3)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=ksYwwRMf2oi7m58rbBQraQygeQL9ZnBU8o3pY/BbCxw=&c=39T bycc TBaqR7X/07p2blGXZjIlS86AddPuAbzioSyVH9jrGHlPTtFCc1tKw/bHpLP9AyGJRG8GZR dSxeUvGQu942vLdj130297qOl9Hl4p4tikAOdJnZ8Xoc4YDJ&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe (99d3c06de32db11185d2983b11ec1236)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=auPZHjYD64y4tv3bQkW3uoF04qYAViUWWwEeh/yXfBI=&c=n9zFzDWurAg6PurRx0YS5OcgML74qSZ/IcrBboe4EZPnI5ed6537hDUMF/wWdbSMkRZ5bjoePZHA78Xybzw1RtW6CCt9vXFMHpzcbgSGYpUxJQHcpIedM buYRg6orHN&fallback_url=http://download.getmailbird.com/.../MailbirdInstaller.exe&downloadAs=Mailbird-58095-dp.exe (251b47d8754b80d8150a090c6749a354)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=U/6T7Y7ep412BB3gXzg1/Ac/mmZMM8tNpfDv4B/c7j4=&c=wHQzweyIYI1JVF4wIknG9GjyCKPCruoyFoQ5bSz3LzTNs vbgcKyYx79f5q tsIEaQY5KTiEKmphgnYUpuEx3fv61vdQFqs/xks9G3Wd49BRlP4QpibD2zcLL0A64HX6&fallback_url=http://storage.dobreprogramy.pl/.../ffdshow_rev4533_20140929_clsid_x64.exe&downloadAs=FFDShow-13336-dp.exe (71458db425b470d03371a6f29c22b6d6)

1 / 68 (Adware)

http://www.bulkcitycontent.com/c?x=6PovjnjbKQWTUnskabcAbDXCbRqCvpb Tl3aJ7BKvIc=&c=i2Xh79GjR3VbcMuo6rQBiNGY148K38kyWk0aQrMEqduxULGRCnBUNMtbXH1HLo5hJkAZJ0nFegXMYFBqj2B1HuJ6piTijKxXYlf1VX9ClffH7xIkfdHy5N7RViWF69F &fallback_url=http://download.microsoft.com/download/9/E/4/.../PowerPointViewer.exe&downloadAs=PowerPoint-Viewer-12204-dp.exe (8badddb1412fc51c72ea3ecbd5713ae2)

The following 6 files have been seen to comunicate with www.bulkcitycontent.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.