home

www.packagemetabundles.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
packagemetabundles.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.RE11 (M), PUP.InstallCore.AGORASA.Installer (M), Threat.Win.Reputation.IMP
100.00%

Microsoft Security Essentials
Threat.Undefined
5.00%

Dr.Web
Trojan.InstallCore.1411
5.00%

The domain www.packagemetabundles.com has been seen to resolve to the following 14 IP addresses.

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
September 14, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
September 14, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
September 14, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
September 14, 2016

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 14, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 21, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 21, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 21, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 21, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 21, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 21, 2016

File downloads found at URLs served by www.packagemetabundles.com.

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=MKKG3bnJGkMCoDvPjTKf5giiYMDxr0OF1ZN9K fEN1g=&c=/KonMfbU/BJjX/4FBa1CUEbpXU6ZEeBzjqlCk4a5uQvVlw3MUWQMa2BKJ1g3rlWjssRK6c3DPHwLi8ZqojXGPEu4Fzq76DMBCvTzG35uuW4SeFqx656Z0ddOvpWhcj4g&fallback_url=http://bi.sciagnij.pl/0/gry/f/.../f1_2002_demo.exe&downloadAs=installer_F1_2002_sciagnij.exe  (d45b5535258afcacede1bf9e6af55d50)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=DL5Uk6J/y2M2HCBsN6ir7DuNehcHfrIcu8lSve2/jJU=&c=IETx1JcpaMugxKWUxPy89m/uRPjPYZpXr7dxwDyBTeDeK2RoYErxfKIwvjP1ympmYIXs2L XuYRClQSOHixQCre 2rqiLATGpaaFsN1QW1Rc5vUsQaddsxzGAXtq077&fallback_url=https://creative.adobe.com/pl/products/.../illustrator&downloadAs=installer_Adobe_Illustrator_sciagnij.exe  (3a1bed9fbfcd98eba7627ecc4f4d4c30)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=ZAKI3kP4I XnfwcV0Nb4OFkTtKnIVhY6GlUwjNBo8qA=&c=Y3Sw4FECO/u9jYc8iWy2vPG2f/CLF3652ha3cNNhqNEDfVfd1ucUy9Kn5AMs5JPvkwW4Uxlcm7Osy4M2yYOw dqIOi8sbLAI6AHiOUlSsJWq99re7w4pXsMsVzV3PBH&fallback_url=http://bi.sciagnij.pl/0/.../FarmingSimulator2009DemoEN.exe&downloadAs=installer_Symulator_Farmy_2009_sciagnij.exe  (0a8dc2bd0ea7f475c89e61732ba69bcc)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=L0WGQdqz9BJPh aYZTSfGtdYpqjV1Y5jeYY6tFMPBxk=&c=UiG7 T4bIhNLGdwZ7/jgSU9Qhz0HIndOLpEV5C/zpKCbqcb8VSAM6UMPa4RzHrAooUFc7gTwc17EZJadDgMZWKqLA7RB7n0a5yxg5CpybuNktkPo5TdBc7ZeL5W GhXn&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (e34d195d60719605b0ef33428d8f164e)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x= e3R7nvl1Qxn0AAEi/gib8B1oGeEKhVMU/GJDrHczdM=&c=D 7rkk3v5z6kfvzCoR765KlHZgsJz6Ox4kdZnGUQwOe r9EK72H/2zRtNqyF9F7fs/aIMxG9mAXdB9wwKzqmORVSlyqBKI/iEUoGuLacx3ou/EFwAA0eTfnEu66fDWQo&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Office_sciagnij.exe  (e8e65c352cdca4c4cb111a677b0bd872)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=JH9s5ogvNU4yX 9sfuHpX6ZdZFm2mpSNvMV/tP4UDXY=&c=6vPbs7 f8fn0QUhYsN7qZzFlkfTOwhqDrH0Jis8Gb6H4eL5nqXcBnBcuerlmPvKk/mEMcmIaQFp6Jv/Rd/KtI1zef4Sipn/CJnROGo0BFF3xHChk9 d8VWuTWQ7FKZJb&fallback_url=http://bi.sciagnij.pl/0/.../Instaluj_PIT_Format_2015.exe&downloadAs=installer_PIT_Format_sciagnij.exe  (c0dafefb3dcb16bc4762edd4dc78ebaf)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=LHJGRjDg8RENKnNQiMF 6iG54LgqqSqoMZ2bGu1Njg8=&c=VWkcoWBy1rPh8Xw dxdZMm cM01OFR/eu5qIErsdTGjd0x4Wp4Og7E0SiuABxUrTiDdOVZRWS/g2wUfdJpvjhZGK chIYV6KB27McDJLpDqXFuzVbSfH y17br2NnEgR&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (7c88b576ab766f3b1ae31d3ea8a19806)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=FFHuReVxGPJiM1lvfKXulC9awRkqduim53aCV8JDt9w=&c=bzLNTQ8T0Rt G9q4omNrNN/ K912KLMin1NWd6pPD1FtLqHcBEQVIGq//uOFyBp9yaEpsCSjoaJNjZ5ZJxC8pyEvRPTdrT8QrTv4mmnJK2HaDwuJjZnTsWua9NBOnasR&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Word_sciagnij.exe  (aa52cb2306e8fc65ed6e7927be0b0323)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=88TXrUeR6/xRnvciesciTgWAqk5djSU Re3hmxmV mY=&c=RV6Ca3UXKnUA06GJ0x7cTDArG7Ff1vFK1TJRSL4yJfo3Y/h3QgKHIgt8csYRF9WfgEedLCZXEiDd2rcYYEjAbXvQR87McacJY7HYSfeptKaAN8TcuLfkx0RQ1OohmGYp&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (e34d195d60719605b0ef33428d8f164e)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=hFrxKKHf6O15bTI3o0nciwe71/pEWnrysV5QF4hp98M=&c=xNFcvro6uGnP46HA3M6zR62nr5DBH4VX8TsxBQt98Fb00hdrDi7qtW88P6gRAcXLcD7mfSkGoRgafaWwLY115jCoPH5fNREKcRxyO/vsS 6HRMjCcBIV7FqDaGkvmBL8&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe  (0736915b14aaa6c39c6b0ee6c96175b9)

3 / 68      (PUP)
http://www.packagemetabundles.com/c?x=mjSRbZpJQqbtldaGHnXf97XKZgH2HBQzqzhXDxp0yKA=&c=P9KNetxaXMr80U/cW/DihXCbbJS8p9GO5X BrJYtAdaU3UFlN6Pd1ULNirMrcYBZ6mNXxCf7rKea9fUsq5oPRkZj0RK6fJItrB4X9n73B g/iQ57wLLhG 9RXS cr1FX&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (7f54be3d0f87fefd9605d99517343080)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=x4zHjYqqxGfg4QGTisiWNMhBIqBdINEWYQJtOdqO Ao=&c=LkVMPbKRpJjlN453IQV4sa4SXNP86sytsEdu38SgJcduP9OCYcxlVJGJvt6uJTidmpllhBkYtY0r78st1AoNjCLpgJDd4zXpHnmjw4hn5adpgDOykJ3zZLps1oE7n8Nk&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (32f04340e436fc26eddede4a55cc1f78)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=Duoz2kQUqWXkcrmKH1SOiagkFnHWu/SsyToqZRHQi10=&c=ThodYa4Rlp3g/d bRDZJ9AdaK2DHbJ/cQ9sp0xWj4Zmb0MO/hzCg9E bRIRPIofGouMmargpibYc3 L2BwmR5DWbWr1jvA P8AD 5sziqr8XDrOrqvpErcpvq66Mcyw4&fallback_url=http://bi.sciagnij.pl/0/.../aresregular238_installer.exe&downloadAs=installer_Ares_sciagnij.exe  (730f0df59c1f08ee81e340ec760cd93e)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=sSptnUxXOr2u8QeJ8rGP7Vfjon20FxZVqi5erA8aaRc=&c=kpDaSGLUifo4mRpjY1qfX9WVuEVeuAhk1c7WDf/rvY8EFYX5OLtLtLLLEZGrCIlDNyELj2tbAA9QVPxIVBL1RGo3Dz4OBER3AKoaM OsCdQ5q4Mz2Gc1fqUMe7nNf4jn&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Excel_sciagnij.exe  (ce5ce28711a9ccdeeee1ae8f496dac95)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=D Q/fv/epO5XlJFsa ZLArKHaEgkF1plCYyzeU4Y3Q=&c=zNOHCQ MK5UpVYJoVvy6YAYbzxK1EBGF6lCQAv1aVgzrQvYkC4Ybcdh8/nKSUQPlC0gvo62DWbjIN JDNe8TzcatcCk ldcCDBGvVNx0aLsdQzE7QiYinFTRFdjweNrt&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe  (82cb73cd60a5a824de67c843beaf2060)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=NJKvRCVmPPH1dKRH0Hu2KX2IEuscLyh4qwcXmyyYn I=&c=8P7/6lWdebguvyOqmM5K98WMIKhjFHi47N21eGg0Q1mA5Vz rHr4hjrVfGjCAFmavpbRj92Ht5bI4BI3x7XF/ut0EN u6psSMiRtaJAhGa3UCGSkVTiYbbpxm7T2w05N&fallback_url=http://download.cdn.bearshare.com/cdn/r/.../BearShareSetup.exe&downloadAs=installer_BearShare_sciagnij.exe  (31ba082d5f0893ddb33910cffc6578c4)

1 / 68      (Malware)
http://www.packagemetabundles.com/c?x=KQGOwmQxklpViWMK TCtFC ijDEFQKYZU5OBDoktBW0=&c=PV4Vk6MyCO08grEtk hZRRwXn8ouXxx2zvitC9 hrYCHUfuR2bCmPJcwoCOAgYZAK5bNwh 2OHGkcPT2p9PWUuEE/lLQwfyLnawbywEZhVtVuflESMWFaEiSBcQxhD40&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (9776420b113eb1055ceeead6696fcb5d)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=6d ZkNxdTEDNTnx6eyhUI5VTk2GeWg2s9a9YFSF52zo=&c=gyu0bG5Z04tUJPZWvPtiYCNOJ4zbLZt10Tox2728XyIfhejzc0/Au3cwc/doMBJlB2F8kM/roN/NE U6xPwKxaU71q/jKmgWP48iKG8aHloU401BhpEYKjb6m9q3G4 R&fallback_url=http://bi.sciagnij.pl/0/.../jpegtopdf_v1.0.zip&downloadAs=installer_JPG_to_PDF_Converter_sciagnij.exe  (1c68f41b9095bd060e575cdd29db1f59)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=cvaExMrepkRLFlTsRKvdunmXLmQYWETrBEcXnLJaxgs=&c=uASjQ3mminwTce7lL H78tinrkUQd968PVkj9Mh0sGzWc4p8e4ELKBLi5 MR/hdK/ojP4ppCjQdN FXDPgepYBEa2/YWGGOHelYoUZNKd2w3dkcVrY9OFpTdOD1Ejihp&fallback_url=http://.../tibia1081.exe&downloadAs=installer_Tibia_sciagnij.exe  (fb0d4b1ed3322d70373392a4d0721a64)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=MOSc/BSfOxsh3uQRbv c759 bk3ZlBJDUnZsY69bCRY=&c=foL r52dweUR FvKP9V4hYZdCVwl5ApuzzlIo5e3jvAhQwVPDW4dhFQsBblmoN0ljys/HAoAH6nqRzRddW0f4JoyBC4IThvOx6Q4JctTgbqHkxhBfaCXRHWSp5ytOAXF&fallback_url=http://bi.sciagnij.pl/0/.../HP_Smart_Web_Printing_4.6_Downloader.exe&downloadAs=installer_HP_Smart_Web_Printing_sciagnij.exe  (75129c283953eb78d85c96c61a8f35eb)

1 / 68      (PUP)
http://www.packagemetabundles.com/c?x=2aCM/Ql7kg3i0XG7UbGvhu8jV1s02cmuGEXFBlZHO8Q=&c=rTYUBvicbajct3 bcD8RRacuvUP3/6G1gFPx3HhAWXGjrLCyD2DfJM9CJxkuOGXgUKwfMq6/2lD2Zj8RgEKbC3uF0VRCyzq/4HQAWzpM00 i37cwLIF22OqNf3CeZ0ae&fallback_url=http://bi.sciagnij.pl/0/.../paint.net.4.0.9.install.zip&downloadAs=installer_Paint.NET_sciagnij.exe  (039d8c532c56ee41691be47baf2d0acd)

The following 50 files have been seen to comunicate with www.packagemetabundles.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.