home

www.downloadsvaultbundle.com

Communigal Communication Ltd

Domain Information

The domain www.downloadsvaultbundle.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, January 27, 2016

Expires date:
Friday, January 27, 2017

Updated date:
Wednesday, January 27, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
downloadsvaultbundle.com

Whois:
1 downloadsvaultbundle.com record

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.installCore (M), PUP.InstallCore (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M)
100.00%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application
10.53%

The domain www.downloadsvaultbundle.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 14, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 14, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 14, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 14, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 14, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 14, 2016

File downloads found at URLs served by www.downloadsvaultbundle.com.

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=WAMdzGFAFph rEhWH68UzopsGHfiC9GoQyAOKsW lkw=&c= 18VMbgf1GsdcKijFR3EcOvPwOMun6NR0U3hiYNjW5dqM5ZOea WtxtITK tPPl alDsGdBWggiurls t/XwGTp5VYJgc0UI6YDH3ypEplZcQXaYZHyxENGW4W70jfZg&fallback_url=http://storage.dobreprogramy.pl/.../eMule0.50a-Installer(dobreprogramy.pl).exe&downloadAs=eMule-12597-dp.exe  (8d18511d7ca7ed076898bc49b33d820d)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=s9X0xpVSDf1Ck Msz/NQEXVNQSnoUUcv53UES73r8Q4=&c=gSAXKBDYjTt5 B5oLU0nR9XzQ5jNbHRLEJcCfqTyTFTTkJzgamzwFNycM4snSiYQZq4DtWyXpV04FoEjYxm4XJ5fDh7ZUcmERmni9QXDeLHjbd6Xoiewr JIgTbKV4pI&fallback_url=http://storage.dobreprogramy.pl/.../Mir_ang_demo(dobreprogramy.pl).exe&downloadAs=Angielski-Mowisz-i-11785-dp.exe  (5ce21a486eaabec2ac80e1024444a61c)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=1ez2gZr/mmhsKtlT6Kxn9ZetKVHfiomKvITBhS3uq90=&c=sA/Bs32LSUodNrPxebN5eXCBRHuR6KiuQKL0GeL19RhcIvwM4jSFjKcSs6ZSs1mtq8BCpPsk/i7YgrOXib2sQIFcP75fQ8vz7xQ5N5iiO T24e4nrRatrKFQlXLOKF/llFjYtXeLmS28DZSffoTsjM9lpxfveLJuwLW/DNazt40=&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (icreinstall_camtasia-studio-12665-dp.exe)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=cUKeWSyrDXIcc sQWpYulSJ6pzUWnBoD4RJsF/5WiFs=&c=2m8/MCz/rPDLafF6paj7vDvFjZrLJwGcAWxh2HvIkp5i6GlO9o0GJraCe CofHapU4dNckAd EEGu4Y7imKedprcJmlc48Adnmwk YULPEHWWhamfnAQpyc8NZBEF263&fallback_url=http://.../ccsetup514.exe&downloadAs=CCleaner-13061-dp.exe  (f31a6a7db23e314a486f1996ee342434)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=I9LzEfCdY27/PQLMFUxG6/ohosczAYB9JmB/SbtZqJk=&c=1Qsy1yC1N12SlfUN7fV2vmJ9tff0wqkEi954iEK aCqfV7utzoJ1e pz7X7xPmgj04aoJNwwSL9oBnW6JfkEb62AVlG 8JJCQIAQN7B7Q21eU8EGEWBFkDEovq5uUvEQS7BNyC4dkK8ivPEN3OFtA4p0sCm3DAPvzlT9/8WzUc=&fallback_url=http://storage.dobreprogramy.pl/.../Samsung_PC_Studio_7.2.24.9.exe&downloadAs=Samsung-PC-Studio-18722-dp.exe  (4a4e1ec0e5994b4f99852a4e9285ae7e)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=QskZbKIrmCU3oT5J9kdRNfJTWTzHNuk5L2JBpUQbJU0=&c=yPZmtGfpSmrN4Skh1Zfwjj6nsCQnIcfZOVsZhu2WWYR5Tvdp1idB75Y07eAT4JN2KsO 6cej0V04BqswjsHG94dIFtYDDS1WVVs5xZnJopKEoqlc4G/yL7Rlmc6frLwE&fallback_url=http://www.emptyloop.com/.../Unlocker1.9.2.exe&downloadAs=Unlocker-12240-dp.exe  (ac2dbdd7ec8d937a7334a9c6b710e398)

0 / 68
http://www.downloadsvaultbundle.com/WVl6OTRQVmh5TUV0ME5IcHBkamRLYVdJelRESjZWVEk0YlRWMEpUSkdObG9sTWtJeU1Va2xNa1o0VGxsaVpXMUpaV2gwWVRBbE0wUW1ZejF5TVVVd1RrUWxNa0oyWmtkR1VtVlRjRGxJUXpaNWMxZEZOaVV5UW04MVdubDBkRWxDYkV0UlRUSlVNSGsxT1RsMVdGWmxUMmxLUm5kbFFtUnFkR0ZSV0dwVlptOWlKVEpHTmxabmFUTnBObEJwVW1KWlMwOVFOMWRtZWpGS2J6RnJTemhzZVVkT2QweHhaaVV5UmxNMFVDVXlRbmNsTTBRbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0yRWxNbVlsTW1aM2QzY3VZVzU1TFhacFpHVnZMV052Ym5abGNuUmxjaTVqYjIwbE1tWmhkbU10Wm5KbFpTNWxlR1VtWkc5M2JteHZZV1JCY3oxQmJua3RWbWxrWlc4dFEyOXVkbVZ5ZEdWeUxURXpNRE00TFdSd0xtVjRaUT09  (avc-free.exe)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=h8I1VKmcHTVv8GSDo4VLSmNrYhutNOmjPdw4c0cdvIc=&c=Vqvv3IC2VH5LzKZyHbgtZEjLLe8K2 1Qkf6KGvEguyMhsbiIXaubtpXyriB0oB7emzB1fgechITTpCqdXrBWbE6twv5UcjAS4y6VQwYSyzgyQEu051 Q5KQZfWcg0ZIr&fallback_url=https://inkscape.global.ssl.fastly.net/media/resources/.../inkscape-0.91-x64.msi&downloadAs=Inkscape-12218-dp.exe  (icreinstall_inkscape-12218-dp.exe)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=tveX3ytLBAWA/HeOCvs914wjDay/QHCQblTwjmTfvx4=&c=vMFvBFDa7wvE8j613YOUnuetxGKqX95sf25I4kWU y3K6RC1DKmFAObKkRQcalS9SCTM8aYGOdSSbdp0WsgwQ4YKkEgsvBr8CMESP90zQ2bFW7Cox9XFiCZLvClagPtQUa/8fFiGDeAPAPl5Mm4JdkAvSDyTa7DtX2NT6lsmxWg=&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (c14b824f3eb3c3649ebf7ff6bef2063c)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=P MhT654rId9a/YuZUPEhm0h4ncxlKesXN5r mgRbw4=&c=EJQK7Z2ZxsRp1sit10j11wvdX/e4JW9LkZkDWCoC1EhXBaro9KVjjhiu6cyiwcebtmtltXREoWjLsGZNoZl7FuxEXoTJ3Qms0Ao2DnlUn8BtI0KHDeMjeND77NY24CYGJ14HHxLzy1Ib3oeRrViJWGEgn/Ja4HYhsPjntQyFxN0=&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (setup.exe)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=PrUfMoq/ZYEitzAQ9OgvyKCOcyNmP02vZEDs/P0pCnk=&c=9Z34MzpHqFc 4YY2Fc10emVKOqdS34YOvNKO1ugW wPb3SLptO3INcLMXxm/tCuF2gTX08ikjryUk2M0bihQrDeXbR7Ln0q3kBjO1yPrGmCFGPPq39LE9LTLIAeTjwKI&fallback_url=http://demodownload.image-line.com/.../flstudio_12.2.exe&downloadAs=FL-Studio-27643-dp.exe  (icreinstall_fl-studio-27643-dp.exe)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=28ARcBLYKnALyaoQ5OGjTUpTlIrnGTuzDqSdSJ93JgU=&c=yy355Y Oh/XxZ8wA0Eq5aJedCHvTaW59Vmjk4cUES4BjjHJTeaASeGlHurFfnX/y4iO9Wlgr ZqWT0Emhv6Ng 2br0ud48LkCDKbD NmfJYoKuiUDXUWSAg5n95EJwdwZHHDsZRXSGvfLIVqWZSNIUzCjhbqKGeiC6vOc1RJnn8=&fallback_url=http://.../FreeAlarmClockSetup.exe&downloadAs=Free-Alarm-Clock-24929-dp.exe  (cf83d9ce11660328717664f5bde12f0a)

1 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=7H/kIvq53 eNOnpAw7QUTzJTZRb0sdCKRXLWoRW6Vqw=&c=tA8l76zFFhUBKtpaZ70S3EjwdyyxAD9dtdbC0rSmefU6wlMJ1OZgPV674hSEWimqrDnXiQR/UssceTAHerpFnFfw7H0bPv6L/9P1Oy5/9SEWLZc4Ml6zt/vkXWC6j6XvHw04Rc91t1pq5DTaruTcP42LTh8Idb/R96mGJ EV7iM=&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (setup.exe)

2 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=wUc/qeLBuHofL8oaMQk1iS0zdGLYeRQbiK TbZZkeBQ=&c=N4HjluaGYD5sQEcrc55leaSC18fdD1PhrZ3huWhlz9lSdQ4S6bD7Py4OyLaM5vjFKqtcgsGe4Ef9DRTngkmgURPFIdKf34Iv/K24 jwFLC4KhGAZqcJb 6ga8jgn31IB&fallback_url=http://.../YTDInstaller.exe&downloadAs=YTD-Video-Downloader-27896-dp.exe  (dfdec0bc416c80de54503ce537d8405b)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=kEFg1IW2vUBgimBOU4m5xXWOpwHP0IKIy3ucXuUBflY=&c=7ZyU0wBNHuHgZI2ymiVPNFALomFsBdP7DBoNjWpMwKaJiyrmbul6n 82Qz4Iu9JHBD70z1tNuhMK6WTl8uiJ8ZN0Y2blGt2CP h6S3FQJ8cqJs6CoNBFANv D7mrewvF&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe  (50217b9d73389b07e58dfee48638ad49)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=plDwuPGfsVbIepU7EXQ9nRN14YAlmG/kWDhMi4uBBgs=&c=T/I2yhj/4xIyuohbm R4tNvQvZVmONABf4puEEfzmfBm8M2nXqDedxAJcocwVC gGh0XbIERhhNOkEDNTAitTeDOGNwquYobl36Ni/fAjTOpFyf/QmAvn68Y6e2ix/lQ&fallback_url=http://storage.dobreprogramy.pl/.../DP5_PL_dla_dobreprogramy_pl.exe&downloadAs=DesignPro-11693-dp.exe  (e2114ba493e5b971593cbe9a80cff9b3)

2 / 68      (PUP)
http://www.downloadsvaultbundle.com/c?x=HK5HI6oE2KqrfevTDxI4Rylntp mSaimWIzdV V4tXI=&c=gj GKFojlVgdcU7tgycqRpXvFaUZ39H15Ei5V6np7rMqIZ/0jpDNdo9bUagXzaO955lV0fi9bfIHOXxMa1Ujv9//3mpzKejULHyXi0U27v6w61YKtOot46tDA8BlvQ38bzzwswQOuqNlQiz9/p8sr1PeeQE6iRvSV68WZYAmwqE=&fallback_url=http://ankisrs.net/download/.../anki-2.0.32.exe&downloadAs=Anki-63358-dp.exe  (577d15ed44f261f3f2eb9995a802e97a)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=sSjnOaB45LuI4sE0z2NDx710e9Rj7oVtGAVlbg330r4=&c=BCh/EHoPTjvKwL tBf GDHCujPj87XByljQ GL3ngkP j7DuazptMTNBBAf2tZeRnRxBht6Iy/pJR8Iz5i9vs6xa8gSzXtMRpJa6uEox5YVP52sglh6LD06DpAzwImIan7jZl2baCbSX8OnwK26RPLrZRMpFoDCkktjUigeKxcw=&fallback_url=http://dpstorage.pl//.../K-Lite_Codec_Pack_1185_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe  (6495bda27dc3f15882006f17c1e0195e)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=C59jWfGHp 0Qcj4Mu5tkuZPhC2hMoZUZDSRB4W6Beto=&c=U5p4Ua79mSMWceSj9u6vy3t3ztWJJfy8tyiHM0P63gIh4jKM5o5LBidn1YXMne453dWA4zXybiqeuOYIepaTWmbx ZOBdOOqmam4LaGZJPwaZalKpvexl6AxGHDUB22d&fallback_url=http://download.videolan.org/pub/videolan/vlc/2.2.1/.../vlc-2.2.1-win64.exe&downloadAs=VLC-media-player-13060-dp.exe  (6887be272b9604e7160c3e3fcc9687d8)

1 / 68      (Adware)
http://www.downloadsvaultbundle.com/c?x=j8hxRc/aT FkBohu/qopbrLMAebVlD8h21jiYn5q HM=&c=uJEwlesKQA 6ROH1oPL9/hlso6MFXW6X/QgJ5nrzzlkWkBopIyFgz6cOntcgX8pHJ2S1jt8sZ9RXlKOHx2awP16LUSeTu3ebt09vUhcocCj/vBB08VdbFIPBhSh OjE79KExe3bwIk2rg7mMFOx86ZNrkAUs28WYD NZihIUDtE=&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (21b131cdf05c2307572cdf8b5d4beb32)

The following 6 files have been seen to comunicate with www.downloadsvaultbundle.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.