» www.vaultspackagesign.com
Overview
Analysis
IPs Addresses (21)
Downloads (290)
Network (50)

www.vaultspackagesign.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

vaultspackagesign.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore.AITIKabe.Installer (M), PUP.InstallCore.UCOSICIT.Installer (M), PUP.installCore (M)

100.00%

The domain www.vaultspackagesign.com has been seen to resolve to the following 21 IP addresses.

ec2-52-36-112-186.us-west-2.compute.amazonaws.com

September 3, 2016

ec2-52-34-184-36.us-west-2.compute.amazonaws.com

September 3, 2016

ec2-52-10-159-134.us-west-2.compute.amazonaws.com

July 26, 2016

ec2-54-200-224-121.us-west-2.compute.amazonaws.com

July 26, 2016

ec2-54-148-183-210.us-west-2.compute.amazonaws.com

July 11, 2016

ec2-54-186-99-90.us-west-2.compute.amazonaws.com

July 11, 2016

ec2-52-41-114-34.us-west-2.compute.amazonaws.com

July 11, 2016

ec2-52-33-46-229.us-west-2.compute.amazonaws.com

June 19, 2016

ec2-54-191-246-249.us-west-2.compute.amazonaws.com

June 19, 2016

ec2-54-149-195-20.us-west-2.compute.amazonaws.com

June 19, 2016

ec2-52-38-209-219.us-west-2.compute.amazonaws.com

May 31, 2016

ec2-52-33-165-25.us-west-2.compute.amazonaws.com

May 31, 2016

ec2-52-32-12-104.us-west-2.compute.amazonaws.com

May 31, 2016

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 11, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 11, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 21, 2016

File downloads found at URLs served by www.vaultspackagesign.com.

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=vwjEOZFbgJwGy46NGeNJ8XMAVlaMkVcjsE7oC8kK7YU=&c=ohFXVxbj0Re325Uzp1Ec9dmlNsLGLQTefzK m0VUfBdMygkAmyBD9OrP7M09PVCrzzQP1cTrFJ1znc0OnRoWHwSMhPvBSH6 hu KvrQMXplSeUu 8JfMiEyd70EYOeqR&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (c0d7faecf8dc002945d6bf096afa7af2)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=r24lYNlrE7igdL80Ic56H8OsVJzCyX9TNtJbR6hMhDg=&c=me veRmsvPyX/Hhe PNDu7XhE8tyROY8WYd7wOchx2S6IijpK8hhiSQ3XS UMS/O65kquo2WIp978CTMDZrcfRG0atqRPeoEl7IoVNypLJQwC8gw4sTya317k147DwPv&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (34bec6deb6c7eba3ab58ba28756b66e4)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=IMZ lrPcvea4zoIyHmyObCZkrbkF5nuEfJU6nNF1uaY=&c=Fh DBaznKfAbzgQR1mf9oLvcGCmb5qjYq3QAwsMWa0ahORrEfGnpUHDTIgy9eY760hBNEdxhMgoItoLEn02Oecl5p02O/t5zVazxRV cLJBQuZjEWZJHAEyTpPtAdV1C&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (60cb50f75390cb547ceceadcac2b0eb0)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=mF3 NvlmPekwbBXXA R2pdfgD82qw4KPbqOBtRW7HVg=&c=NkdfXgzCuagJ7vdzsLOim2DS4TT E45vD5vYflyEFGIaFQWVDY9wU5XU3avRY9FLtP74wYSam9tlGoIUkfWe3ktwYLBc5Myz ycygY8 244kjDO52AprechoDcS7glSd&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (fa58ac3975af4d94d2616f5071d45459)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=izdgeXOOzuVp1rmdcWXEWB87u eamQjmbyGDaoLJ0Gs=&c=sL8T2ylJFx5xHO4zmF7sHkpSlKAT8C3Zx80iyGGFMiOTaZng094OPEMKQAjEB2ct0ke1tibGQiGUHun93vsiFZX1U1BtxCfzeqkdyu3D4FNR3/Vxc0cp7L9Na8IjYICv&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (9b1e6828f4a1f2b4b217e85416c1ae0f)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=7cK7U1yanamf7DLVyfj0tr2ONVezcQhAzRQ5DxXuFVc=&c=M9fesmLmZnoevHcNIZs1prZV21sFd7vFBnL LnhopSwIE25KGMtL2PGcAsdmZ7Udx/oZ8uVLYUhQkh0/IINwAmW30nsGtOs mYKaKVO8L9u7GM39OQrVKBJkMx1sFyS4&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (105aabe40f1d28813ff53e50ef55b8b4)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=LiNmvFzD9f0Hcb8GFQAbfuckZBmHRY29kdKD1JFNv3w=&c=eyi3lpFozoxN0NalKyCH0T0H6mbJ1sgrQnw0r7vFWaPJJnjss/KK9QBGs00owaY60xyjgSpRBizR8y/HFFdoAS3vhRU5z85sFHLTPA0m1hyE e1Wd3bR/7hk9fSwZ1eo&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (d2bba252fb855c14d6c04e2ede139b87)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=2JI8LHjfMVihen8YZ/rQoObGuNdmTey 5P99enUPqP4=&c=oDr52Lta/NwqKh/nLfTK/htIH9w21/Kd4Yn 6Hjk5CKawrgajSqwsrrp2a K56WKnFSe OmOiM/i6yHjfmQIsr80EKrcdBR2JZEULQEtjTkue64EJUv /Xe4g0h7DvGi&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (e64f051be12d20b1fcbea3bd719a376e)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=DtKUDLhPjbni2I8U Zefr5ouOIkf5bcMuSmDy91HtT0=&c=q7/j7NeRI/pxFOEw7okaU238qbl46WyLN2gTZjk5eQiMgrZj1KUejisJkUjz8N3x5zTRGcMpcvzcebtEXwSK877rLOH7E90UemouXoxd6wI13t9UsiJpmtFha6aXexpN&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (6bfbc97d857612fc9170a66d593ebacd)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=HQyD0959437iZd4WgJ/ gn/srlhFD/C/JUga3f01TnI=&c=fk7ACdBLoi4oOPpOvTCuFJtLPHu GpKqg9rxk3QdiApkMSHHgArM1TmnkauZ7KaO95z8Rs/h3xfM/h86udSaQdLYCW r1wCMOOtJdotF4b4y4T9cxFj28EwukYsW8P8t&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (2f4a4664d3c503ecd7e8cf183993672b)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=y0ycspRXHxWzVWGqPI2HO1QHYkIOqiDTFE3m6AJo4Rg=&c=ms39jGayHRKHSghEMHZfMTXvyVxyEkt2DV/2PeJDjBrVbnFvuoNYjogvM1iFUzcAaBrgU7z7sklzs/hS u7ZvRjGIYU8beoHC8H3IKOf6DEcrWnrCDCCmJu6OahawRSI&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (9177eba641387eff811935746d34f857)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=jMXjoEy48c0p54NqLQ2HXzb1SnAKGIlu/nRrKlwu87I=&c=ZNSM7uwZlqdDmrkfzJNVmFVUnJakXtxvSeW2bxh5DVz1OeO5c2XBEDCA66RwE9NQ/Hjj N0m6aUwOhCdNusbIfo12E7iLoOW6p LIJ4IRkGQeulTJgEDlR3AtuCoXtkb&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (1cda17df339401a705488d13558c268b)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=qABVo6R3eat2Vorc8uOXrLGHuBJraMaKlp RLaQfllc=&c=en7 DLC2HlPFZzJtr7SxiOSWX4341 C6NO1BIWoy50cycYwCkoChiA/DSyUGcxflNTkh5aXABfDxwOR6k/tpC5rMbKKwONn7Qo QXuS0FKVlNZob2Pnid6sItPSQLnwz&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (199647e988d97a8b89808e82f1f601c5)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=Ime ro/Op9GOi9aF186Z3nFAyYYsKZwk6 2eJYt/QV8=&c=McyAfjX8BOFuTH Cu0VAUBix564y6SsqhDQweBJ7jjjUVSN/uJt kqkEO38f8h/jIDK8SOHczTYWHPpj58elPT7MYQ4sm1LI6AzuJ0WRILXR5HPSn/rb3 nE0eRaSTkZ&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (cb81e7b44456670510c9ae74151fe001)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=T7JJLwVOgX0NSDDYd4SDRyeXs FddTEHjH2kwsU3ibk=&c=ayIKF1mVqTQjPJk6Iul4Dno6 La7vw7vUFHp7GomD4jES1h/4zwjH2NrppAlqkL6Ew42WOEpKrO7L8XTznDFAoTnFfirGsHneJi0zuyQSimqwOlAJcCQyxIoA91E Q1j&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (522e18008cf24732c99a0d514c433585)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=cEORjuUPh7MJ0pPRgJtZNsWhfRG0MA2EuJBOdWQjWa0=&c=uW0Hro1ubu6l5IGITJbH4EYqKrKfuPWKNivUtU0m24n7idKw09RrgL8yMZd0owIevdF7wgMo9J/CqSl36ui300TbE/7bSL66hKZ76ePqM63ytnh0t3OnBTGukCqc2wFR&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (27cc8672782c71f71edf450051332f8e)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=onFvoAuWmwl sOApcCVybSWX0N2SXN75VYPNKR2os/Y=&c=F/oACqGXpFMcU1uCEqNtX6c/VhoY/EeXhuC2Dvykms8fDjepNx13 BGME6Xzh ZT5y2eKpm8db8S1cdKF9GX7onDjT8QVma/mWHFOa4MPHWlnWAbbWKhsgmqQyK7Zym8&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (536c1d9dcfb2c2f11872555df066c4b0)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=RcAJ3uhIVlf2B7KfbwvYUYegp21uGJ/rWvgu8JPAhas=&c=kzx3hzgWwgPPV7sXaXMefUHqgGEF LoBOEk7oM4tAo07CwY2nekqVuYS9wC386hhHy4MVD1VfdckXioSSeWTNsVEyeMTkciTVXblHKzwb 0n2az599tkehV/DcGWYumi&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (e823edb78f204386a2d1c034ab292bac)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=wR3UYdITRpVSmH9j1u/epP7TF7Ksz5YP30tviZsk71k=&c= dla4Ry U7myChGNw7MBd8XD9olZf3tBP59toMVRHKqNqs/kEpdUiN9lL797lQamQqPINMOnpWzrpT1YVOrY4OI kAmpu2jRWdU2enyXeexK0arzBRhuA2dGSuUAuwuE&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (66ce3043eed649fe3c0089988eb4cdfa)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=7rUvtaraKJpQgSr9uvGOMgomiLZIwi6KAGAzMaIOXOY=&c=IWBW9wfzpa9Uny8kWSH1TOsYRA zpBWsOq1WXgZ8VPGwTIJduiVzCwEoL9Ewbfcc31HnxbY2fmC5vwEDggzvbKQXTUgUnZm9/ZPdRtWhxG3GVvkoDzUW g5i sKAgR2T&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (794baca1c877e0cebfb97b18ce5d66b9)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=XbooNHfVY6gs7QfWP5ZtkzTpNBno6BBUgnmXPcQkRgU=&c=PIGnRPxEPfjdi0NyKJI9Qa9MEAyIOZa5lutwapPTqV1Wu4UPRzX3/o3gQd1CevTYmmAnd7/1lGST n9Wjo0Z61ujE sHXdKyrNkqOoGU3R5omgpSOfL2 3p3LkKCX8o8&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (af8a6128f21647699949ae5a7d03d3f4)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=zEay7cEDhtQfPsHCvGHXyXITVDxB8gPbJAKmWM5g 1c=&c=a9KegE6ynktfguzG7 X 1HVaL SVvgFOC24SVXIlt7lJXPSERUPdkDWyv0A f4YIw5aQ0j6 bgLbdMRmUfH9d7jHcDgD6yPlPl4TjUfaCCIO3Q7yb t5hBe egQafLtd&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (45611979fccdcbb88f3d096914f92415)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=rUWO9mAlFU2yDK3nTeCKGr8s9RESDhCfQ4tMv2RDfmI=&c=WriqL1Uq1t8M2bJgmO60 Essf0 gdazAoN0KSlMglbDRI9GJ9SAzuSKJmUapu5/UyKtPIFSL5e OiiQj9TTl8X8JIuPh0s6mD5imYZANkVw5Om0 0aIwwnYl4LtIORxb&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (8b46ed015df1912d0218787b5512d47e)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=5aU3v8l2JrSMGbIjWRQsmFIyigL04BoQEKhqYyMBoYU=&c=tF/S8OleEJV/G8BJfVTmMwe/MPtKtxAgndIfEh7SQgV9Iz46GSKTbASURJ1Cf9Kd2nEUiTsJdS XJGtsuxlqAtSBr9Aw6gtXyoL98NtNUMAI9LLsW9XSIx4SeAY bE4&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (01e3d69e6c3a9061be315f51d278ef16)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=LmkeFupl UjPYjy5ZquELdhYFPXS5/E3cF4YMBQ Dx8=&c=spX9PS0iUmPH15maB3KcF7CMLIrZoO8DwlyUsXLHPaWT2wDbNBJ2Gj5uVMPa8H33MqzTWSPKioM1L2b9a2eXKLB5m8NdLxehwDpJU7x248 VqDjehNqHGcEa/jU4zHf8&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (c42eb47627d3566031792c57f5c1c8e2)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=G2VUU0lXy9pCMPfElCNpSPxnPIDxXo3zDTvvkHsdsBg=&c=1kw1FAt6v3 sCSRZGRvTg9HIqrDBTwgcCfSB3GK52YAiceM637WocNRr/KzzRJJtf3Pjcp6l6ZnpqtTjlpP5WGOEdUBB0qm8JfkqpphtWSr/TBtCI1js NWPtOCNqV5N&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (dc7cc3dda2689b02e6cfbf3650cf6311)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=WOk8r3SbLpz2ogFsAZHow25KBb7PPx5rGAsXiZCRLgk=&c=9hvJSRm9aTyH8wK58DMkQzxflfM5z1KzmlEHInbfN6R3J5GArsNEo10hEBBtS9VNgdUX0INzNMHbLJkVo34xZA1ubx0kKDVvlM5x8/ql WZUsuba5/8CbFoZDJs4d1n9&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (e4ec68a8f8c1b24fecd4f5d2ae84a1f3)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=o 6Vx fJNf3wpBJFSKf4yO EtC3iwO47E exQc2MDaE=&c=57TNBYFHKnBZ AAB6JGEsW22oWPhK0BDQK7Kce5BZCIJyZcgxyeQlXNaZHssXro1LG9AWT0A/0FRqJ2tPYd1UyvgR96DJ51FdEpfkP6FYUXpQ2qMkThahTyNSejAh2Qg&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (c595a7b93aba49a32a613a75eadee8e3)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=HDNG1CMWGzBx3EyNgOYrq7xb1CwpGQoHqU4xmkhP0uE=&c=AdVPNr2nTbqECYveTpIAJe4Odr5lLQoxScZSR8G2kqKa3BwudiuzsNgHCx5xfMfaUp3ynSeRi8h 5vV2oMQ6VeFHzCMbByHvOKCoT9/a/ZhAEZGXr7nCF/HcTJLOq6zv&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (046dd000f2c80d690cbe62e703284460)

1 / 68 (PUP)

http://www.vaultspackagesign.com/c?x=I1CeC2SUIDwmhdMy2CQVR4JxDoX7HgTldE2NFp tAtU=&c=3Wm86BOH40 /upFtGqyzL/b4zGSwOsSP9taCR6dBXqXLYNZSXDKPnwoOK4D7/4DzrxHNM0 TMzhDq7Bu4WRxgRWe12p6r57nX1sWDQGoymplI7V90F7Fb2e1G8IHQ8Fq&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (6a208b85e9a48338dd3bc0f24687ed30)

Latest 30 of 290 download URLs

The following 50 files have been seen to comunicate with www.vaultspackagesign.com in live environments.

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80

browser.exe (Browser)

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80

browser.exe (Browser)

TCP » 52.33.46.229:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80

browser.exe (Browser)

TCP » 54.200.224.121:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80

BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80

ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80

browser.exe (Browser)

TCP » 52.34.184.36:80

Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.