» www.vaultssharepresent.com
Overview
Analysis
IPs Addresses (21)
Downloads (142)
Network (50)

www.vaultssharepresent.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

vaultssharepresent.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.UCOSICIT.Installer (M), PUP.InstallCore (M)

98.00%

Microsoft Security Essentials

Threat.Undefined

2.00%

avast!

Win32:SaliCode

2.00%

ESET NOD32

Win32/Sality.NBA virus

2.00%

F-Prot

W32/Sality.E.gen

2.00%

F-Secure

Win32.Sality.3

2.00%

Dr.Web

Win32.Sector.30

2.00%

McAfee

Virus.W32/Sality.gen.z

2.00%

Norman

Win32.Sality.3

2.00%

Kaspersky

Virus.Win32.Sality

2.00%

AVG

Win32/Sality

2.00%

The domain www.vaultssharepresent.com has been seen to resolve to the following 21 IP addresses.

ec2-52-34-184-36.us-west-2.compute.amazonaws.com

September 15, 2016

ec2-52-36-112-186.us-west-2.compute.amazonaws.com

August 16, 2016

ec2-52-10-159-134.us-west-2.compute.amazonaws.com

July 25, 2016

ec2-54-200-224-121.us-west-2.compute.amazonaws.com

July 25, 2016

ec2-54-148-183-210.us-west-2.compute.amazonaws.com

July 13, 2016

ec2-54-186-99-90.us-west-2.compute.amazonaws.com

July 8, 2016

ec2-52-41-114-34.us-west-2.compute.amazonaws.com

June 26, 2016

ec2-54-191-246-249.us-west-2.compute.amazonaws.com

June 19, 2016

ec2-54-149-195-20.us-west-2.compute.amazonaws.com

June 19, 2016

ec2-52-33-46-229.us-west-2.compute.amazonaws.com

June 18, 2016

ec2-54-200-103-60.us-west-2.compute.amazonaws.com

June 18, 2016

ec2-54-148-209-28.us-west-2.compute.amazonaws.com

June 18, 2016

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-52-33-165-25.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-52-32-12-104.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

May 29, 2016

ec2-52-38-209-219.us-west-2.compute.amazonaws.com

May 29, 2016

File downloads found at URLs served by www.vaultssharepresent.com.

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=OChFO3tVKwNQDsyDAuAaKvIGPKdlrUuLvy EeB/M0ZM=&c=VMWaeU7U2tQVSUlItlGZ g5uatO8mbZaDu0JorOM51hbgdnmrepWmXI7cj93E9COKP0CJi/zEDB4imgDb7oupTzPSufSCAH MzwTdyz5E1xmz9mn/YfuaEq2iHeZctJw&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (878a88f8d8f506bc222dc786499dea02)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=oMo3ux/SuqnKzddtdTR9G/oC/jK1/THiCKK ko/wXto=&c=p4bqLgfJQa2ggTbYrlvahdSD0HZYF KlNOHKOEm8arENhhTxn13NS7BlgT4k54MdyFV8OXzIZhjZSvSRUt0Bcfr4BocuYabySptv3O7SRMKFkLN6 bsnN4okST8mJoWE&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (a2a9c30721c7e3f573605f57e60a5ce9)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=IXp0v5uK wcJpTB78VH1LN7f6Y k6 n99A7rsrZK8Hk=&c=oqYo3FXyzqQ7VGIp4E/K6saTnNgfM8K 51F vzVeuHR7CdcbAaE8TLaQNOgbsU7poiMkiH34ZBauWdpHpxVX/oOHsTpJrOjl8cJeCVq50y2EpXELvdrI7nWsCAXuCclH&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (a93cb8df173695f8dfb5daaa59f38c02)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=8ThjKHqVD/mWy54fuxokTKmv8QTlzJzete2dtP6Mm4M=&c=unw ADbRcp284abBP8ymSeDVFo5mIt8aTaft DmqZ319HRywPJeb/A1SIjMRjDSboxGNifHVkjrEqpjGg5x43vQBn8CdBsmz6GbbhDEfQ1htcole79nP4z74ig9wzafu&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (88455a87512b442f04cc2ffee21140ed)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=A2g/M7r7N8iEIdktHu85/xeHFj6pFyYR2mdOjmut K4=&c=Iwco2XYiG6dBT5bf6UxrOpu7/5qc3ghvW3H5PIeWHZdkm M8QYTSzIe7xn1f9LE4UGniCortO0O2HFCzFEqGAG4eRhWDb68SCP4xq1Til3WsyzLiTpXrGedZ/UzUHidf&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (c183cf1ac6550af2bc17e2948a31d894)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=92g Fs3PiKkcVIIEoR4pN4phkgSEw7RZNpkTrCoYX9Q=&c= f/WqcPl0eslYpr mTEPTPbZ7ZB9pRj8bJtxdS9prkI6sm/ZDH DDwedq/fJj8CUGZ1o8 zTFMwMboeaJziNqM18D/Syg3VlHcRPRPVhOvybHaJWHPkBi8Uch7XG/Xba&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (f5d1cebf72810044d54c419bcd7de3b7)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=j3CPPahGCAiuUGBZveC8 AVAkV0VVBBTAxxbUCFarkY=&c=Kg34CcvaLNEDZZ5lrPBNBS1BX4r1XgztyPIdad6MSttdnZ1z5eOyphB9DhbDI6ME8vkPwWo9UiLGYvzpllz3hHtdLPDW7ccJd9JQTPUFE54rLt3TqUZz/FfuK dIkYGz&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (61f65b07ed06713641c75dc40f96b6ab)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=oofIxP7iyC9MmSoDNqWwXabI9yGF4L2Z2IgMeM1/Lwc=&c=WVHdnwP435I3eRb3uALf0Jdqszza2jsQdPSsaAApzAGDUytjm1Y6Wr9E4ZfPLIvYFXH8JvY1jIqA6Rkacl9JXFt4SvJqM59mQxgf3wSx64WCbcvva49oFfTXpPPvdIlX&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (01e4c5c87c6b8e8966b02d7cb83099d5)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=FJ3 vu2OAYwbbe58N17dEM5a9398xcFPekBr1r RsI4=&c=IHkOsYCGNCF46bvdu61vVP5sLfPMolp0XvU3MffBwubggL87UZjT/zczB7SEkDZK 2z/qfuy7qfTJLcHTSbgKN1vtuqBUCtEEL8vahbXTKKmElATtVMwUA3XGrsveeFR&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (c569fefea9a57cb66894c462db002a7d)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=MZN/QEWOuq97C0nztjZWS5ONSAMBMXDW6XzgePj6PZM=&c=towuK41N0YftbcwZB3NHxoMXae b9c4Up3ViaKzV V dQfvpx4IpWXOHPi2Ouwa lB5QJE3w61UgwHRRsoG1Ctg2FQXcZnpvutzC5Ey9QZ3Zo/VGc809rmM9pR0/uQ6I&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (9a5da7aa54caaa3b1812b70cbe30afe7)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=6o/s5qF8vkCV212z9TkwgdejkoF3VpW/iDQCXUpAxS8=&c=TdlW9ScKZN3pWT7s/9XcG2zROnN8IU6EL5qn6K4cd72ep2Y8PwFF NErtyDpYGCJbF37h63Ia6H0/jbZpCiaPhkXEOYuUAatWF83rD1AiTMMssMlh2P5qpjRYd9grEFz&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (1282b70030602dcb3541d69cadf52630)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=VfEpmk79x90rnVDEd49k/o/whcmViMAwO5AGlp801Rs=&c=lHh5L1fYaT550MiO7L6Diujo78IjQqERrJWcniVXUlWhzPXqmiXfbVmDLC5ndR8EBHBTbkMR9zQK JA/GNFkSGhNIIkAfzRHJclaS0mrwf9r6knvLiGK0UPJNx91Um4Q&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (dfc285f9e94208d5161388c90880c6a5)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=GGG5CKHw4JO4hVATc0M6rK/a2ItcUCQdukMWYyD0phY=&c=eOZaZTXbRuU6SaroMbRRQj81IaPyR1P6EQyc0/ivNC0EjY0IkZqbUW7GHWDRsV5V0ofABVM3stZ1/CPvK ocOZ8qvi8WHkDWTodHGKmxvtGYS9atJubZMc7u/g5Y2dym&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (22d575ef99cf2316fea4b77a4fd3e7b8)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=K2FtPYrAPOqTybfNiImxH95PytLlO4Zi0MhgrSZtrJo=&c=q86zjdDqJOrvAOiUJ4ft20/ZKy2WSzeVLpNkMyGPsOyI4E UlpFv2Q0MoNKtj7zJ5hfzOS4xqrLlY9Rl1xJXdYBPSyaEdriBzO1BVLJltnZmMGk04Ix/DU9NH8iHJr7I&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (icreinstall_mediadownloadersetup.exe)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=ap Ocs7t57sTBNcdxJa3YXkzbnhEMqfGAAPcWzNy9EU=&c=xtEvbavKDrl2/h/IrN4pxOhJMRfTU4tV1lZB2sKLNTMTG3j/vdAKosDQYpqZeA6zalgcUZcDtcciKuxOg2ZFpJm9fms2pScXmsOsP5R0anVWQw//eZE drj7erzr/Ow4&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (f1c8087db389171d28745ab60a45f7cb)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=MysPndNbfpMbAdg4P7soOCqDmZVHD4qguxfpAHjQEUs=&c=TVx93SRP68Vw2TCR2pHtNcvINhEuR BDENzAYXeTY0MF7A8qTBiunGThhtHbS7pYZ0BSVSfq/5ccxZiKv/XKWCXG29fwmr qclAPbKwCY L/E7cduUvrU8cJYEX0IOyB&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (4a33dec4dcc633cabc0db70b5123099a)

10 / 68 (Infected)

http://www.vaultssharepresent.com/c?x=C1oVhsq4SP2Z0MDiffXpDW/P1LUiSMwH2HkqEhdSCE8=&c=O7ImHWIX4PvaRqP7fX7TdIpJW3RYreFJpQ5ypKJeciJ3J/fYVneiJEn1n6E11nxer5KfCsm9tZfr67wCstlTcmZhTEBDVTHRoN5sD8/sP5SiZprofpY8PYgOJd36Chqb&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (5a11bb51c190660820b0c61d33b014cd)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=cPqt n5aS5aMQkIWKQ25rJqN00xQWDS7 04Pow8DvTI=&c=2tC/NlmGTbtn8hj9awwlU894a8Nt/Mt5E9Lnhz5T1WpEZkU636NT6x8tz/fq4z74o254A6PqQXj5IyRCJqg3zN0tqQnIiaMEUVnfAkwTze4SQXFHifKkAdQOIQU7fcc2&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (cbcf2ef004e4a0d16b18cc4bef92a854)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=gnbLuhl2gyqqA/yMQuDTDXleZkn9dzoIMYNkd0P7ujY=&c=uqnKrwMiP262UOVRFzsma5SA6CMeNbFtdfIVhKHAbFuown/h F1/wSQdO6pr4pGgE7u1McV0zsZ3hAQBqAPtrM2 y7gDYY9ryjI6u6MiJlB5F6Q m47bW/yKmZ46bpXH&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (3cfdb8d5fd4ac37084582ef1a5ee7f7a)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=cMcP5UZfhA9lRPIEKjqkXnTJoy YzE5RYHSZqbbzm8o=&c=sfXewrYcnqi4pEb/nGfLiHwhddTSqVuKkVumUkeMV z95ikaESHlwHSuymrtZ OgIXV9E8 UHxccIQzuk ARkt4RvJULWpFehH8GrKtLojVrAx8IrswPmeUCVoL4o d5&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (de21502e3371ea171b51264de2db54b4)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=se2YuChCLO HfgaUd3GjpUT1qU1gngHD3Cs51JIfs1Y=&c=Tx71ylIiM56L8rwlfS0I3f8b czUzhWzUkRHT5b0SnuH/SmkG7kTDZyHUHx8V69SP5x5iTQx oyIgTcq4UUWBbftSmGDMCfFsYl2VWmQQWegtuKF2nPvMDlrtAiWMVLt&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (35b6fdff712543896717853dc5a75721)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=PnPWdIsRLXS0P6u/xOW0mzV5WQtKQUfo5IE1Zk0SE/Y=&c=xZfoGkplDwYdtBgo0s27c5RN6rWExBpl8Yp0NOusFa4l7Xrwz3p7fXTjdtjXqf/E3KxePGm9vxlWaNawVHpk5qMJ9YO/EScTICS0 vlahG2hO1ymJ8H46 VIgOmpibmF&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (551952afb7e3ed84ef4e6e002f03874f)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=7myOcEJvXOWt4JYfsEK5QwP2QgeZJkXp6Jh0YoXbtI4=&c=ml5W3viz0Ql8N9Jowyg5uA9ldrv978fDhqedZ6rAM44BTfFb65CPz DDnjJGNQiZRtlnw3JyAOuXDJp8bIDqcYBAMV5eREg99AtNX8b6S4CwwTvbqBMVKiLxLCELJt5x&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (16662ba1107e47a04d50c4b25e96bbab)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=vDklIcGOKOeMgmtgPGgiY63SPmuJovk7Z5j4HiqOpvI=&c=c Bog5JM2nsr5Fni0ZgPsp Mo1nl6rs1/onkVIv4gXWEGtgeKnLtUSZVwHppUfnH2Gx1bnjFvnkVtAsORehBUqdTntCavfQ4usHWo0grf5Gslb9zlxyn tpgjWj6gu9v&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (76bed3e452d41875d8b15d1a2695dbeb)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=zApE4Xl1yz10xbR4kHXV4IRc 2SVTrQBuZFVuBfFGtw=&c=x/ceh5T g0Xwqs3FCZCsgp8mu3k/CCHFAoGc/WIRONOCk7Aenwd4tSu9FB28TkOItKfSnAkYF9nsLCwA4wnH9ayV kvJSdhjIwBTi1b8u8VCAFhAsvZKMYtKrxnpxeI5&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (5a19cfc78023fedfa6005123a11c57cb)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=6UvqRYr0ZwYgxWNac/0pzBoWIHszjlqEblnFQQ2lVeY=&c=FQDLBgpdDJjtgoiiBAS8idw5hgfGF3J2TFK1MJ4pkQz2O/cnYbBy7JraIMwCOdfrkph1o5PoRdUxhSxWWHDOrI7sOQtybKI4GGnsa jLOXrPuyRYEmOOS6SxN2CIs2zo&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (b98a9a9cc33872a24c0d994ed64cdf91)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=VdUbDgvlTm3bIOb8dFsnF9vJ1CUnaErpQTEZpPgPTig=&c=tvYFqnTERIkSpZ9 Fai3nHCP17gD9D6GHNv7 Cn2nOKE5M83SvUr4unBSYGzgyW4QG3CbraMXe T4Yl vN0itaLsNZ76g6CT6g0zxjvTqqrMnhD BsXeJcL4RjrSR7g&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (10a6a7bf11efbce99391f80ae347050c)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=wRbjLkGYvl5vfN37 01FoYm3apVK/3rg34k 6iJWf54=&c=yL/InBOPj8fVVoP3j zdr4VToJx9BkNOSXa8iDlhhrliY/S8uMo3pm94StNSeDBQQI5bYaybY1CJj1DehtyfMbE3h96synVFY/ImDrrKWZ93TEm6arXsX0jH5dlF7hQp&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (ddc6ad8a3abb1592c2dc32843a530180)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=l/DbZh0VT7dsNkeNXep5TWAMlUNcBnNnGyuzm5FCJ/M=&c=6fpye26b 1AwgpETvgmpfh1TE3BoyPv1QAD1bPnLLNoUw2lTp6W17btQuYNF3C/G9nnV91QtRrdAk7jF6qe1qMV2Muposrbji66rP29HYSRbahBiD3YuWxFVKdGRgrSH&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (dcea493027beeafee9bb1746f33566a6)

1 / 68 (PUP)

http://www.vaultssharepresent.com/c?x=u8vgTrlV/snM3JVU7qVN/Z8d7CmDgG/Q4G mnQ3ECto=&c=FwfslKXzssUhJupdEWkUlD0FDoTMv3ngQDdiCfLSx8Ih41MoFhv5cPrhfrD ZzbJERrlu5fThpj721luC281ipB RZ 2/nt9HOeqppqcqntMXboAXTOK4qS947Y9kreb&downloadAs=MediaDownloaderSetup.exe&fallback_url=http://.../MediaDownloaderIron.exe (ca930e94b0fb023e2adee9b9ef4b49a2)

Latest 30 of 142 download URLs

The following 50 files have been seen to comunicate with www.vaultssharepresent.com in live environments.

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80

browser.exe (Browser)

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80

browser.exe (Browser)

TCP » 52.33.46.229:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80

browser.exe (Browser)

TCP » 54.200.224.121:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80

BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80

ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80

browser.exe (Browser)

TCP » 52.34.184.36:80

Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.