home

www.packagechucklegrab.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.packagechucklegrab.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Saturday, February 6, 2016

Expires date:
Monday, February 6, 2017

Updated date:
Saturday, February 6, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
packagechucklegrab.com

Whois:
1 packagechucklegrab.com record

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.GERYONADS.Installer (M), PUP.installCore.program.Installer.Meta (M)
100.00%

The domain www.packagechucklegrab.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 2, 2016

File downloads found at URLs served by www.packagechucklegrab.com.

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=pGzecZqeF57VFMSirrGcRZKXs4JsfztnDYwY9SDzrto=&c=SPy0Mw1ZegP8LwqP/F2Iunj6bnUmONyiTEyvkDClAJYNCR6oWTy ToOpVcEFO5Kc jGDzBfg4GkNHn8wmKYdRRsKiRZkQ3PD9tMaKAmeKu/5/AKMSRtcGe Pegoqj8cU&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=OjkmHjg43Q5mTjzx7d HpwInEUUZnY3eIuMZk2j7C o=&c=YUEoGr6WQd/Q9piz7AKFf09S8kmDOvs dGLuKerG38TKbuEAwSarTp3G4W01qNQSWl1Mrpmle/z5Q0gwp1wsAAqMFwIcEOfYk1mHmQZuYSCA2BGrWO9pYjXv5V4Le5qM&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=ptE8 UwsnnRxlXcqOlX2W3kwlg0pyi sbN8vWAlqtME=&c=3Fod3iV9d APxpv iTGu6oqUfYB4hMe9GCLf5l/V9Xy8Pm0puJSZwEtY79Suo6jdyA7a74/SyANu5wdi HfUj YejxhNugzDduuX8RVB95jM6YEXaJgPpa3EtnlgbaKl&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (9d97a93c6dd952c12486fcbd53427065)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=3NWjbhS5GZHoVm2NzLkCLRYr9pE6vKXmoLSwrZ9UXmw=&c=gh35NEvFcR4Sixd/cYdHpq2HowG9S8rZXXqxtMPFPucGXBOAoeNT1dmSCtq0O/J/GCuPFDn2d5E3bBA6t2wSmkGWWjeJTXwsc3elEpVRcsXVVOHHDAWLJLWXr12/TkoN&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (9f7912951bb9a3fb9ab6142632a7b744)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=lpKxnYqTcZQ6HphIb5gBgFdvhkJPgk1MjH3CElbShi4=&c=X1fxl4PPlplSkXxJf4iSn8x138I16XiL nkGGR1a4KqLuJ80NzoJ5gW8wKG2ljdX3fCOPi6YOBLplwbMoDl wc41tWJoMW L9O8M IyJp0rCDvXZhljOEUdIXreDxQtw&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=pVwolFLqpIww abKKDtH llukAg5c NSDtg9X2B5STE=&c=3hKy1si1Svj5DQCBtMCdZWPbvJFc6CHP/G DOurwAuIn1 jk7J 4mdWX6dXmu7HxuujSUIsGg3Qn3eE9nmUTsmRqw4QN5wawSV3cTLNkV/ZhZ0 ZR44 aZmq3X7Hq9m7&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (9d97a93c6dd952c12486fcbd53427065)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=242PLlKabXF1RsXMtu6O24GAV6DyMH4gZfJBxO8rO40=&c=Av2npHXU2zey6tzBnQ3/3HQsWJGCnoQSe caWGJw9Z8cMr/W6GdcsoQs/8DRyZWsA7/dy/ZkaFUoUEWWq9Q6Sjo//YSPdeHF0DGGBFuYYkGK3dpis5hwX00up0hgQmeV&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=jMQVd2ADAxVosTPaiE/paFbVG1C7RTdw qEc1OWfL1w=&c=CCYNCDrBXtBjQ0idLF1t4dPER9nb7lQrj7eTZgnmaDKdXd p/Vo7LX0APRDBP1 VSyuLMwwk0ngUhYUWScbfPL2Ql62Qs tve1UKMSkvjKu6dULoGceAJS1XaoxM8wgG&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (83c3b9a4b25b13a532664575819b4bea)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=q7X2EZA4cp2Eh0DkLAD5yERk4g269W8a07EQtKxTejk=&c=TN/eU0MAN5jJjzYBtLdB9bophKwEMcvWMqrGhA6v02wsFH4yxsF aeZSWsI4J6tpEOuQJ8 6oUGbh oVjkmhP7/ofDeNLYB3ZWmRscbDyxwNIUsx4cg/75iNUEVXryQA&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (a4fd1b101bc8effe7f31aea1d059d769)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=pA6XgSomyDscMprd/FlYkjt38CIVCLNnuoHkD75fEik=&c=ZTrpPYvIGhMVVHgzhb1OCblP KdCyy9MME8nGyCxLoDH0Yn2fcPF99mVoyLz75 3ylC2SNyWA48/oTZlYB0JWtHYnUe/bY79vCH2rcWXwcCdCvqb0qA33KaFKrtszz V&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=T3OzR9cc3tkh0JdVZ5NsuxT923Xe5zQolnd91P4bLxY=&c=LJ lzkgLvTQvjrhAYYYgjypSbH0z/OaHuUBdA7OY4I/7DGzm9eFENJ9Dx1JWz XY2iE4XhN5WsZZChaza6vRBmYu2Xu1Ij6 o4cN0NqduUu5K80zHgIHI9UiexfpjZu4&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (89185610974fd85a0248d0acaa64599c)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=JB7Sl6Tb8uUikIrFAZN04FJjEo7e1vKhJVX2gt 35b0=&c=aVqBtde/jan1zwaIjcc8fN4ttzgwwM1fDYbWy0 N1JpUpdciOvwjczT097hdopUBBzh4tVMM1Znc3oC3Jd8zLF6E0cp6CIJxFu/Ldo/Prs2wnsFVT/p3f6WkHsC4M5cP&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (9d97a93c6dd952c12486fcbd53427065)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=Fg/0IPY0j3q2ED5I1mQMtK0N/LT3H 2Ah86mp4N6Ox4=&c=Y0xW0308 rqSr/ktBgaEDr2DACEBIiueurQ/xGsxgug3JxlDdErvJd6Rs7SpntHQkSPTTESuthKXKj3UUA5vvZvwyATIHOft1rr7YhvxsTZ8eiaLsv TG FMtVaIUBZK&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

0 / 68
http://www.packagechucklegrab.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#  (javainstall(x64).exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=vs4J6gaPZLhADYUB1L6vMWEuBsOITwDYxmihtiWWCdw=&c=72EQzpQrjf740/mqg7RBnWeXkBsyRfdZmQDHhXJ/icHacjuGwiTw15DmKnRMBXycQkJxjPCjNrH/SCZknBOef2 cEJ 11weblVUyJ13uZkgDehXyl22lZQa5k4Chv/5V&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (89185610974fd85a0248d0acaa64599c)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=Immf0SDDX6SGA/PQK1LROHEGu6E4 3N2gbUcCudwj3o=&c=OeRg1WhbduK2oVKrRSHPoZArPlhGZVtmaEGCTw25lPCWXOJiwGZcreSgmtpP/V9t2/hOEb/DK6sNUGw2rvemEfhGfLiD aIWUQb28sMdltLsN6GDn5 6l4GGFEW3xB08&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=EO05tnZyH47tJVVmrfBxKNIKfFE2bBpmi0g4Y5CC0sA=&c=nURvOPVGUHYsQW/7ojMUnhH9TtUqrawhr2mG17Z4lbi21lbVY6bnZmJ7yxOmzFzjKzaCNW/fqhEjG75RrRXQNxPSXMcH1iDJnKRmiqGoTn XzKsQaKCrIzo0oDMotw8w&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=zBLs622eiGwZtQoSGQgq2rEtpPN75OLlno0862LqrJk=&c=bt3FUF8bxmMx28s2/kaZEpHpkhQ6MmYiMKjdwacegmZLiK82Sl24cxjQr5zVLB75pjRwKmYxL XFlKuDblg IslhY5BvWQokH5mipnYcoTKumofrDq78u0IVfDthhNR1&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=OVQh xI4G v3sXewr2n16zCcet/cYSEc4vaPSRDSlYA=&c=H0BmygM2goFlE/9dsiGoF9nKtsKoTBgpAICJqaRFQ/cmxi kBW0I5excaQcmeeT8Zy1A/r2WmUNo0ZtK7H5rkIswuRxvzg7urtlKaBiPzxRR1SJKGG wueZmqkLvPR/F&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=Sn4TPkoszlzYPKAOXv6OMQz Wdu/5QDBBsM86OZtQGU=&c=Mrwc1QNOUl8qG4M 0sEJ4dlfYC5hf4bEqATA1YlpuIfjdBGW7Phv5aPm35Qn5TfdMc3xP2UgjzTds65PPAy3ig soLdkdgYxBHY/b7VDZwADnMwgOAT4auk 1pJiDwkN&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=x1JvI i92pHRAvDXnsdGlCZgtOpDUgCtpMvl4yXn6jU=&c=8SjYrluCj8tH1Uy7vwngFe9uKwjZWqOZAJR2/yYlutYOePKDkoV7cXbN13ZCGNBE1N072CB/wNTac9ROJOfwkIZDB1vYqmNS4uDcFUJQOOnZYunin9gmcHRAfXbEwdZX&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (9f7912951bb9a3fb9ab6142632a7b744)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=e5hxRAaAznkDlm0M88Yix4iuFoZfrwz828zBRMU8PHk=&c=2Fh88P5b3fYvXx7xGTcL1cGK2f931m6EIBR0tMpo8jUy0lApEpp 9VNwC5J7vsdYd7roa2abeVjMFPHsrfO6 8csinJP0XqS6 tcxUPye3utPJB//xgGP4TjkjVtMJf9&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=VNc381IVFDH ETe28I iWki0Ho a/3tYmV/rM0kSLf8=&c=5i3sDS/nDC54ErpNotupuo0tlKVda1qrrLX3QquGtDwtB1XTy2dNgQJtBcwNl5YuKpCD3qyk2sIyD1I5geK4/2eKS2z01LSomwd18LuPTpNQiuBMMxdEbEWTSSUEnOWU&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (83c3b9a4b25b13a532664575819b4bea)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=RRn 8gAPGUD5RoxKXQJtPc6L6VwmbASBy/F62IoJ63U=&c=GYrubLDBmBhPyyLzdQtI9KlM4nq2AYKGnGPiygm6G6H0XZUUsId8S58sxbZvupdG0a6HE 4HGUxafLtafNK/m90d8LtqXj6hMbcT6QwMa41h6KNxMLCB8LML9kMSqUiu&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (icreinstall_java_update.exe)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=AF8c2xeGgBOG7HaqQdCV8InWIgKtr927FKhegO0OBQs=&c=C9pzbb5 Swjyru3Xi88L2Euut1DI8aKhY2dqssLjuIWgxjbFVsHmj377VdVIk5x0ij5VpGUI9918q zVK6RHlPWTFTX 2vG4Le5CoG66htIAaAn9gmkor2TXkJG3bZ0G&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=jguLgiiHdAW4tVWY4bQ9H/ITLWi8JewtBR43M5/01/Q=&c=sDs8kQ1XoQDNV/eCfP/Nw1uMuGqN1CUVkhurbjbe3bS83A8qyXDlS8VzGy cuZlu bQz9I7Lykv ixDGhKesHyMwjP4xG6q0P7hO D6xDv7exG3r9NZGlZmOUtrYomZ&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (a4fd1b101bc8effe7f31aea1d059d769)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=pse67ELHwa0s3Hq18eDabwczYfB0LHDFJUpAZKpHR08=&c=AsYbHKNB1M7GJrdsz0aj75bre5VLsUNA sIOcPwnd7hNhGjiNeJQCh3csdfbz1 IvD4Ezbe2lQN6KlHGE4kALfiSsoY1z31WyXFUomoEg oFdTeKytUfvafzs/A7MyVf&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (16b8db5c639782d2f36adc4747d5e6d3)

1 / 68      (PUP)
http://www.packagechucklegrab.com/c?x=tqDxaVPAyr3HHAvqI3VgB3t XgBixZTBxdLW8OsFM/k=&c=hwDHDtM8 4kMl29BtVDnGDD51uu2 8VMNc2eV pS44aDW0JFX1zcxjS/vWTTIsgd3lOJFs9FERdApb2Fm4RSlPdz0SAqy57vhhHZdhlt27zrAWIFZmTwqfweY ehusb &downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (8702e4cb8ecea4ae5455c02b78b4cc2f)

The following 6 files have been seen to comunicate with www.packagechucklegrab.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.