» www.heartcontentvault.com
Overview
Analysis
IPs Addresses (8)
Downloads (443)
Network (6)

www.heartcontentvault.com

Communigal Communication Ltd

Domain Information

The domain www.heartcontentvault.com registered by Communigal Communication Ltd was initially registered in March of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Saturday, March 26, 2016

Expires date:

Sunday, March 26, 2017

Updated date:

Saturday, March 26, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

heartcontentvault.com

Whois:

1 heartcontentvault.com record

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.RE11 (M), PUP.installCore.DarwenMa.Installer (M), PUP.InstallCore.Gasepi.Installer.Meta (M), PUP.InstallCore.EST (M), PUP.installCore (M)

100.00%

ESET NOD32

Win32/InstallCore.ACY.gen potentially unwanted application

2.33%

Dr.Web

Trojan.InstallCore.1903

2.33%

The domain www.heartcontentvault.com has been seen to resolve to the following 8 IP addresses.

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 5, 2016

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 5, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 21, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 21, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 21, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 21, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 21, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 21, 2016

File downloads found at URLs served by www.heartcontentvault.com.

1 / 68 (PUP)

http://www.heartcontentvault.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 (realplayer setup.exe)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=pAKIajreraT3chZTM0FUqdprM/n2dlYFc3cBux8POWs=&c=G/e9lAfm04l AmVCCtVdw7Og3KTXQPu le0USWXU3RrOn89rL/Bu3rYWtBAYu37q0AcYy7jWVB /Un57l4qO0rhO412Kl1IBhQA4Nu3m5EtjthxzeZNYFruHq79zu2yMUOQcgaJKVSCPBrJ9ylIzgqA5xdTbnOPLQIGmxT5mZTU=&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://cdn.downtoad.com/.../teamviewer.exe (3539b24ec6b5f49f438ca0f2ef3f7d4e)

1 / 68 (Adware)

http://www.heartcontentvault.com/.../ve06VB43vPoDerHfTJPzlxvHNafSJHp23O7G qrFdliKOfEwoRf3C7NQf cUOufNakFY219g8ci r0xyd3LBZhbHzMFIyVFDGeDyE=&e=0&downloadAs=Firefox Setup.exe (64ba8088066a30f2dd79763245652b24)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=s2EcJOuyMTmXKpts/JXEst4w8/Ep5BOws8ynasMIE1E=&c=BcH HQZbGnVvRtj87MDZSDhI DgnE/Q4puGs6UBCUDGuV2/AYA4KxVosqfn9 NPWilF9jvQwMBaKft7pkH5NX0mJKEdfeHUluuCqN7Ga19SRj8cO7l75NnigZxlIhnch&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php (885ed61bc9a23c2da473453fa6f3a86b)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=niXn9 a0E0e1uFy0jhb5lKRRM/pcB ZrvGw2wGRVQoA=&c=jBNsZwpBP1P9awybi2I YIaFOYpGfSlKY21PA8WserkAraTLRZa9y7/B 75gAL/rfo8136rZQPogfjhg07ZttBMOpYWzUIo3r1v3cj1XddNYctqryI7XMpqWU NVqu6TkxDwa9Hw 1ZCWdgnw1V6v4fDGvdKcNI9yC LcRrkvRU=&e=0&downloadAs=Unlocker Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php (d61979bc701ab792ff292b8d0ffa37eb)

1 / 68 (PUP)

http://www.heartcontentvault.com/c?x=m3uCK0MWWbmrpDPaXKzzV dOmN8J16J0VMZFgT4Qf 0=&c=0ZR0we0ZfGRazdw1Yk6RU0XKnhdZmehs7X2i61U4D3X4bsv/mgjd0KR DYrWxKg2NGSu0JF44UHyiFDTBRr1G8OBpCBoGCOFGfBSh7hmn9OpIduR6Gze/zvtMfjZIuHdQ6qpm74Adv1qEWogFvhBnmeq09oHhzC1aOvyucLS3vtNDoflC35/IEER60jmSGBK&e=0&downloadAs=Google Sketchup Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php (7d94b2d4e534e196f9c1246417b1f185)

1 / 68 (PUP)

http://www.heartcontentvault.com/c?x=8ZePaszK9gai wfJMS1BW8TSPmaDbnuW2Y3sfFt6KQ4=&c=6fV4 V75qqDA2B7O1qSYhrjPVjj3 YQgFT5amtjGWajOQ7hUuw0p/x7fzYr/yEQBIL4Y6pzk9hsKdxhdcR9Zn4/.../rlsOYS38u 2rlvmPTq3PFtFJleGfmy 1VxYyk0R08RzQwOXDsZWJssns4fOCiW 2Q D9&e=0&downloadAs=Ares Setup.exe (icreinstall_ares setup.exe)

1 / 68 (Adware)

http://www.heartcontentvault.com/.../4rTJU9Bw556W5S4o qSvIpsM3dNivFilHpmEGTvWr7OI4uiv4HHBwcYgfgPD8iMEWsyz07VlOzcYeQLquRbFQjihNy2mJfzz9EgXPZAUPv3WQb MiHZ0m7PglAbSB6AFy0bagpmClUQsafjGssc7topi10=&e=0&downloadAs=WinRAR Setup.exe (icreinstall_winrar setup.exe)

1 / 68 (Adware)

http://www.heartcontentvault.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 (winrar setup.exe)

1 / 68 (PUP)

http://www.heartcontentvault.com/c?x=LNLtbbIbaYjTXPsICtgGwoO8BQ8ucWXrHbb3hTH/6jY=&c=haSy/GY4Z/XKPtTES6qKlIOitb3qybOWWTdfD N4LYX84DAbGzHrbi HlmSuQFbese23xVlKdJs0CGA7skz14BhKJNlozFV y/vFcyT/iZI83lOEA/ v8AC4qOMhqty17dRX9/DFA/gYXJ2rrNhcihBxUMImyIx ZfXb1IstXoeoelsagJX1eih2ozNJ2e&e=0&downloadAs=iTunes Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php (31e1963911678e097dbf83bc2c22d841)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=PGIdoCufCBZmWvpF5S2onrq2 8hl6qXDsX8PovIfmYo=&c=fSCGfLY5 a586ut vNy9teVz2vofN2ucPq bBPE9OeKLsV6qyhF489wWBWRqxuoXD2dQzzF4mdwyozML3wqkfr95peF4WPz aK//B/fcO4Bok3IRopn5OBVrErCw8IEp&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php (c.exe)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=3jja3rwNzlXmooAFIHUOkRAgniHQZtzKm7ztqxUgks8=&c=Y9pBO6j/yBlGZ3CmxU5lc WSjfx7CjcIJKLBYENhKCz2SuyFRaSBEp2ap5TWeS8Lge4QPnqZga42BAYN/Dw/KImsyaYb gllDRbYekf/.../ZEuehwRZmCgkwMQNFk=&e=0&downloadAs=uTorrent Setup.exe (62f2ca02c09323f92b6bd853e500720b)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=jbX6GCpJCdtghQfXqShcIelxIEsHL0bb4MDczLEBjZM=&c=UAiU3XQikk0JjdF3ygQfYnfTQLJsuE/.../yo0MBRFpTMIm MY47iCfNi5 ubnu56MqE5LDRZ5ppYezfgdeJ MAoj7dq6rpEFcs3Bi6tghOY=&e=0&downloadAs=WinRAR.exe (6d6c34cc2079159d478c418b175e2c4e)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=G3M4Giefb9o6bSMuWekciD7KSOGpS2kIsznM a5LqrQ=&c=uex 52mgf kTu0WuArgi6BRw34SVODGDL67/.../SaYQ544s1hQ0JhEdt0ggbLphz84i3cYBkw0BWcus1YfaRXTAjiZwGVo&downloadAs=WinZip.exe (0428f166fb5af219e696b35c09431d9d)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=GAl4 1e23UIbmR3APVke4n5xamlRRvJ1NDsPHQpEITs=&c=tO90U3jW QLOQj1MER77 9eCzhmufNlxGJsN06b OlF Ztv4e6mDWatPkdbWKf9Y1TRqNIXYH08OkcS4w5EYCQdHL0VjyEw/dI7Jdu0iuRu9Cmlmw7f 1R3A81V5zm awPaBlNHiE0Rb8J0FnEvYUkphDcDJtS31hIaaof nCFQ=&e=0&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (06758ade59a849f58df1fff0c2191740)

0 / 68

http://www.heartcontentvault.com/c?x=gjMvQL zaZ0SGd4dXa9/c9F9yaJO8WsKgacpBNpFkUk=&c=VlQvDhjStxIpIcxfxNMjZX121yg48M97eeTlNlj5S2C6AmOu2zty0MyjJIeZhVItljH Zn88Uf efHbKt6H1ydgUj /ych1/XuA3f/ ivJsDm1mGkIrzT4JCWoY4Ds7cMUKX3eG MEwCEHRsj5aKUCiNGqbIknYsL 4ePIZ5g8M=&e=0&downloadAs=TeamSpeak Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (teamspeak3-client-win32-3.0.14.exe)

1 / 68 (PUP)

http://www.heartcontentvault.com/c?x=ujVn0EJyJdOOBcwZwuKPHsLCEMpCxOtKGJuHI FWrlk=&c=uRlMJhhmsE/hOqiGFxlDYxsC9uGrI19BPOI zaSj7aYEptXPD22KJdf 8xVWCllAKh3zblIJdvE3hbztmhFG03 EgMrf lCWZ7tinr 3xrb9AbBBPzxKQEFvQpjUAig0OFFbccZNhPcgKxNxkE9vXycoVkIiQ69hqKkIzZx37eGIUOB4cOptNtxQG/Of8DNS&e=0&downloadAs=Audacity Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (b2d16b123aef4a71fe1f12834d93e83a)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=fZ8tg0O L0bWM/BF9KnVBt /9BUnm9IoNnLHFSA7ruI=&c=krc4F6TcUG0lvtQ7XzuJ4wLlm0JZ6gQplI0BKsj/PHZBI49JV7aSCCnCxXpvyU7iuAEMynyeHDjimouYa3RU4hOxWdOr WxF2NF2Cflz8hLqgpSKg8jWwo95HTlIGnNgkpnqT MQbh0EY714H8eaYyGkQss/wn25ck95ojRZqzc=&e=0&downloadAs=BitLord Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (6ac5d3d5eab731d53f45c4ed1c5dbb09)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=nsFq7QCJ8vUrFg12imIO/e6FfOFdM5y/eTIP0pfFflY=&c=Bjhh7nir98FW1NBlY7gDnWLum7HY1tU3ncHvPfHIPyaBFAlFUn6J/.../zOa2IaXmwLdEW4yS09RDDl1YBgqEf6DKC3I0Co0sXHxylUKNoDIydKSjQ613wqxeBuO1e2ihQbs8EYVQM5PbazyuS6Ab7B257ieuI=&e=0&downloadAs=WinRAR.exe (6d6c34cc2079159d478c418b175e2c4e)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=Lzh/f7CGea5J6 Orz0n5W4hCc4jqKbE6MRnn9pRUUCA=&c=nGYvlmVHmsiGHi4D0M4hCXl6VQG4oS3OneJI2V9v7geps89fJZQ4V9rote/.../gq5g5gQt U4q0v2ryJd1z18B28lf5iEMp9NTUUl3xadKQ62qdnqFw=&e=0&downloadAs=WinZip Setup.exe (d688e05af1cb2d89552575d08913a20e)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=5ri8p5TVo/.../0ogoobcaAFGVHld3sEp1FaWTlOQ2MYTp3XJMaJekVJv91tKwhx353zQgu3rZXRdWoEs1NY uXxNBTYHnfYZRaiHWdkWhJu0=&e=0&downloadAs=Firefox Setup.exe (64ba8088066a30f2dd79763245652b24)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=qrR8RbI1WRRxPZmIo/.../igVSU=&c=Cmn67mMheoEEB6HWvezKWOqmyxpPaBs0HyANAAZLlRZlAz3ORixsSOjVODFh9A3ym4gQSUiETG2w5BBKGd8qIJoOMd m28Cq CHeVROQakxtszdTINm1zFTLP25KYuqs&downloadAs=AdBlock.exe (8688733bbe2cc3ea04ad9e05962329b4)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=R6diBOQIoZ1NPPWPIyixJXYIm/a/1PmtB9/.../qd6SiEXFVuWFT678aiN5amKP5bpmSY5Xf&downloadAs=WinRAR.exe (9463f0c9f30b96d6dcb7190dc17393c0)

1 / 68 (Adware)

http://www.heartcontentvault.com/.../3l4HV39oh6hzGFSYYC23UR8CPrc26twXurZCIAsD8ysSr72VKPF65w4rIpo=&e=0&downloadAs=League of Legends.exe (5bd3c8998ff06a32d8926514619f35ca)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=3VhLVOj60Qrb kh8Mj/EJ5naRI8mJrJOypITBVjmDx4=&c=yVA9aDqOMjIAE4rcipe8sZlyoovFyH5IZFWm8rSH5YKhVWKgelCiQuTr/4i1Blk4scEFVOAQPwRGbSbUYW8KdV74YeSoKZuUMhFF5r 7TSxAn3o8pAtMdfXKK/iQFX9T&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php (78a1bf8aede8d1d7dc9b153cb1836863)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=/rI0EE4d5m4y9YK4NG9OwIGBcmTRvB/8spRUWuI484Q=&c=qSyGjdye6PvUoGxSXbcDiBBfSqZlF4kv6PvG4bXYEalNj23AO8 sIsR1jQSk2TdvDe4SNaBsZD9DXMB0GB0ZsSsBub/dNqEw1M/Q2Ol6033U9wuAIvivMt3oLRAyS4in&downloadAs=Virtual DJ Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php (a8250c11fca991a115220918878d0915)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=zqKnv4Sr40FHylC1zgTbmtVEFAvpPe11FY9IzO0eZGM=&c=MVHvTsHG/TBK7uJ6is9ETc9PQaeLT9LQvQOYC6Kh0cieLhkGH9noW QkzcVd1KWVrPb7BVcmG4O5rte7AT0lYB9kpIgNrxqInWzRvh3pBJEczILcl0DmHL1/p7lSX7LL&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php (1f060a04bf1d65c4c80069c8737b0553)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=qZevQxwB/P mQelNmRg3JTl6wA5vPepMMJOnM7ZPMAI=&c=oFlWLb0dRwy O174v98Db8ru1RB0G9r38eMDgE6cmP35lKN8X1XLOdMQMjUxAH4kig0V8r7SFskbC5OEoQShTjpwZu/.../QLOr9jSiXEca5X2LiRkPQVMlCSbE9KxyHYdVreEr9X5d6VddHdHM5TE=&e=0&downloadAs=uTorrent.exe (955d8e06cb64b331fc93dc61db0bb56f)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=rYAZTKenhz/3/F53PYT/3gb sddtIIhxO8tmx01Z2Rg=&c=26oScxpROvXvsV9HPkXOA3HA/GPhAHH8PKx qWBIrnalZZbeEbaxoOYDX LH XBwldTc1 FLgwFdOgyYvXu3nns357uwSAsvhRwTDAHK8WbDpRGhHupSf5uwPk78rY4gVE7Kc7U5MPEpps26r/lLr5XjUdk1/WK6ajUYJlgV9ps=&e=0&downloadAs=Tango Setup.exe&fallback_url=http://www.onlyfreedownloads.com/landing/bing3/.../download.php (555045fdaebd547e8e3e797bbde6bdcd)

1 / 68 (Adware)

http://www.heartcontentvault.com/c?x=3w/VitOgPp1HAE/h rFjYh83us1wLBMSRBH5GZhTQCk=&c=luQbVn4 LUrAFT/T8kLl9U te JjvCvpnZdPD3Qb8BylbrlLOaS/.../&downloadAs=uTorrent.exe (3578894d81eece9c9b4f5939bd943942)

Latest 30 of 443 download URLs

The following 6 files have been seen to comunicate with www.heartcontentvault.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.