home

www.packagebundlevault.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.packagebundlevault.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Saturday, February 6, 2016

Expires date:
Monday, February 6, 2017

Updated date:
Saturday, February 6, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
packagebundlevault.com

Whois:
1 packagebundlevault.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bitberry.BitberrySoftware.Installer (M), PUP.InstallCore.Installer.Installer (M)
100.00%

The domain www.packagebundlevault.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 24, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 24, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 24, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 24, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.packagebundlevault.com.

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=w6bXEGMV3ad9nDIzM87sJ73F/gZv8vAxoC/vTBx oII=&c=ISYEkcEzBjYJloO1rrlVq2CojtK0k4D5MG5UTGzPCYEM1OdW/24ul3CLai wfRApjN8fn3P Gott6J/LuB3QfmSWXtFZZ4SktkrOB06Y Vkk2ggDox8w1RvPhDjpWKwR&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=7z0CjSyMbF3eH4CY/CAcJ3jsF3yAQ7jyHga i4pvajw=&c=sDHo0IaYhMHLmSX5Z2qoyAmTqmAV 2jCajZq6AqEIwV917lrRuG4VEKk8e1CrDV7ydz24aFarK7wjIQf5/QiHPthrd9nJNP5nNPDynaIYcIeOajWp4W6/RuBugzIpBsG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=wH6KpJ4KQ2gn2PgtsjcCVzkGKCniiEhtLw6YTGDVUI8=&c=rKOTEDLrt1yRH5 i35Cl8uKN438agn92An1e6Db1mKIlPJ3Xvqm7TWnhEi/xAiLTgL7JTQU8pl63XSte/B9Lg99A0B1tKn4sMzOGvYbq6IsSHQgu3tOWkpHFa78jGvw3&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=P9kKxi9ylLFtPnl20nwmIOAiBjmZb5E6fwF/2O2FmAY=&c=qRjspVodyNk672C2ydbokbyB8rWeLpFtOxVyonSGIxe3arMxV35Ed9MiYIgJEXPo2errgdaWKPitdJeALlG5rNo4rhv5sW4Oj/wkP31hcmhz4QjvGnvzGpJw7zYs5J &downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=R49CE RiPMKSV6dJO5r72zdNq ES/G/jhg2zxBq/6g0=&c=zivy6KpiYxotnkZvw9mLWwiW7ET7n/dYmFqVCeYUB88FxTt1YIEZ2momj7jlvv 9UaTsahUTvckH7vAEziF82Xan8TzCxbcd/TclM5AMi8Hjs4LOU4IqUWJrxBuRIj1O&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=BUuD5pZC4RVgDjuyKaVBqZhVPO0uGc/5NKB90kGKSFE=&c=y6pBJ5R51qgWYToBdEdvVZ37zIUMqLy2iM1KhAH8p6FagGarB79bavxzCdIC04o3SGbNXn1AGlnd8LezTf5500k2oOMD9ghLfd0aWG3TNDZz8CNeumOEoTtXx89qkdW &downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=fg4kGJebUj8L1cQbWmIlkJzZXrjH9RFPV7hdfDTfgBU=&c=/sMXR0RRlBhI86RNGWtNbEeAjNAknl0S wPMsozSoVNjV 9gc0 72BSYUqe5mh 6DaAV5IL 0qOIsknOhuUtLjFfNoBjVpVojxRpWiEUDGf4fat3nmbBj6tMM3ZB3Dx&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=w1A9AoZBSe7qKim3Mabcwbkltw55N uXaBgwNipLHVY=&c=TH4qpiuh2OCLy6LBARqHSEK2rzAXi5S 1eqdNPECui5ZUJIePFuTSkcRnT5CR8aJTEEBzSmPlT7M ISHihC7V4H8I/xZgHBUqgqyFLcpvvgTVZgY5zrHoFKrCfgfzkuR&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=fjAN57mlzaq7mETCU/tq0sUsNDgHgYVh4kqFRubg8P8=&c=AtixxmS8Fdq7 Qqey1k4aMCqK aGweITNV563W0fdfb2HG9kc6arR6WT8Gn44x hlevQWnGhsgV8CX8P5tJoAuJDXkNL4 x/6yOCe2Ru5qbbPYKh1nIuGojUqi3rB5zA&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe  (9f95670f9d37f8fee437eb616f6dd09a)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=kEHJVO5hgfIwEhlcEGzgoIow6dJZmDNQPzAkrJOoNDY=&c=AAg/1KHy3YNdrOTOI2VrH/31oCUTXwFh0iwCDeOcTbXkeVbTkbQmlODmEO3F4r7HAYk15cdWdLY7RX uVVCgY9P4CSZwy8Bsg PTbLgjH5yDML0NOKzefAI5zy1IXx b&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=uzOjhjv71sObVaBU2HFBHBJV Gif7cnHWvV1f9UhHHQ=&c=I9CN/6KUD3CLazPCX75vR6ZCghRUOZQqa8/kcufxouCbHhFxZjX3uW/rSLIgGgvgRWfBWpFM6dH6za5xRLa0cAU9tzfbXnxUGGm3ZuyAufNpOr KJUDSgNCZCLM07gOB&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (PUP)
http://www.packagebundlevault.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  (6dc79c7a_stp.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=3Q7gfWYeNZYMp TgcotN/PFj/jFFCF4wF6wJKezN8qM=&c=92Ox/54NqvIELHAbHhgDsRpOK8aaGswzUftA4 kLzw7Hbujp7Go4N3Y8GlHdgb/gNd/dJSiC/jfP9LGhVjP6E95u4qs5mOLZl/lLis RM85E0Z5 Ia9SgUE6yxnmLGiG&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=9SxQr3OUUQ7zA2CdaBoN21zeF9SIuZorVdoFxkB8QW4=&c=y9AaDrqI0cWwQUArrBBc9XB4EDHR17Av8tlS3Ic9f5VT5YIBbSx3BL0SGWbTYuQB8XgBt7PDSVSZWj9XDOgKaJRbiU2AqLKXgG4ZBC7btwbglwjsjiPunNIVyraz3qaz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=BI1cejBLOzkYmsC90papJgQewdLtF Sgf55tIF3zWpY=&c=9IcwXDIB66STuEIi0wWNyb7asUF6daRxXScth4bx5JdHAQ3Scirvz5YnXOO7ijola HqSL3WPFMn5rBGbXl9zmi2hTz7PSV91QgwMugy5nmRFI89jVfCzmXrNVtXVkTD&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=IjFVVzkWUyhB8j5D0BiPGLv/md2 sUqTuMulUpSZ/e0=&c=Qkp7KyTRIVlTesZSIpYNl4rXIneI7fpgSuaXpPbuQv9aSaJijW TK88vwAFJj6nlepAMXGJtmeSOhgJ5ocz4wJsa7/95Y08w7fJistR7MmTSWpmHr9OM2s9AFV2xBa6J&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=Y7AIsuoXlTwi9FBzC72HShbgMEizSlAcZQ 1/67qFB0=&c=ZOUN7/xwuSACKxI0YojqIQiVidX sIYMyyefwDkVuRVzOWeig26rjA5OdlZD3Z//mFR1y1tb9yCRMEcZYiNGhM8pvDQeslYkXmmXUvaMLTj92R5vSsRN2GKTxRV4D8RS&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (icreinstall_bitzipper2015setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=oPchjk3deFPnbnxwWet/HPjw9qMoVgwHxbiY20uWB1U=&c=jKfqY0BEYNrMCXW6YnnpOwbpV7Y1mGnsq7cSNgqp SEfqM4yzY70QLiYEo6HuJnakBNybOEFzAUVGHXeK5gdEBMo94hop6euWelebIxic3EQdnGVe6SXOSJ5J6bHtR4V&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.packagebundlevault.com/c?x=joJE9qalvvrQBuuCdBwK500rj3cclCKaJLNLqZ0VQDY=&c=vq1UH7smo20IT/8xe0xXUw7IGeTLEfhKo4prcz971Umddc60j5WIKJ45bK3jq72NqajaRtXVIcy3FBq9BZrRmVje3LTZrZrS8BZKK21pMK2x2swD9v xTTKnbO8WlxVG&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

The following 6 files have been seen to comunicate with www.packagebundlevault.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.