home

www.vaulttourdownload.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
vaulttourdownload.com

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallMetrix.FileValidated.Installer (M), PUP.installCore.WMDInternetEIRELIME.Installer (M), PUP.InstallMetrix.FileVali.Installer (M), PUP.InstallMetrix (M)
100.00%

The domain www.vaulttourdownload.com has been seen to resolve to the following 18 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 21, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 21, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 5, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 5, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 5, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
August 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 21, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 21, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 15, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

File downloads found at URLs served by www.vaulttourdownload.com.

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=OHXT9J61a3HWQO/9BjtW4JJtC96UI RitX7tMU6DG c=&c=rb0FsLAIBy/VcRAXAvKoCcD6R4iHeWtNbuuIYnt1UttS Az47ggNZFxIhLNBCijc8rIK1O/Y4qAYLqsykd/KEiV4FZ22 0tMd40WiivLgw6RMkWrgYIr4UwfAJ6vko8&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://cdn.InstallMetrixdelivery.com  (ff0dadf0ef209750a9228ad4a6315739)

0 / 68
http://www.vaulttourdownload.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  (cers_portugues_comecando_do_zero_video_aula_livros_via_filmes_dublados_musicas_games_programas_e.zip)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=K4 4H7xQMv2bSXJX/6a9HwB1EI20n1SkGV1Xu9a4Gyo=&c=4QzGJJsy3Qi3/ZCtSdO1wrSEW4VoaCb9nUiTRKYRQAdkCqRN9gHWhYnviSCgS4es lMJ3QrUpgfDgcL29lsQLcTMsEWQhWquJYM1UDUHlNXowz6A3MF9I2s0mWl Tf5G&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (0dd538444f8244ce0c21e9411d479431)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=pcgiW2s9SRV8RVkvjbcxp62Z22gI7ZOaCdN2XyT7ED0=&c=FRosPSehOgnZxD 6iRbY8GwFYAMCBjZWIdQB3lGuoNEjEagwIPTJF0MGV7E 7wN1XEBhMHpFdGuFABXcdvqi4hZ2vZ1mfFPR375j0Q026 yx IjSJSloLl2KKObvYOJb&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (0885fe3623ff3b8a81b0cb134d96c26b)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=NCf48rbTudp7H8AdJDiEwQfh LkJk/jTOeAZk1Vpj8I=&c=hEMrdGQ59j4iP6SdMEQmYGnaWOyoYTU0FaSpRU3bBYaUtApTFGEy/vzSMysYP7ST6jC41YlOUSYB8CECzXOWv0YkmJVQ5mhvs30AxYapas2ksH7xnJ/JWJocBcx934wi&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (40e3ac0e4b0205a4f1382d37e017a98d)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=yR1flU1Nim3f1balGwG XfDszwAPFrwR1mFQ5GSUg1o=&c=Z38e8m1YuFnYywkHNg8HWyxKpFApNk2h/ZdMpOY1j26YvlWkpJ2kyWU1heU5BSDNxhCtUnv8wZYALB10G4PxCSVAEsEpRy329hx8kwYmuHxjGoFQrlapHi/taK5aDX s&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (1b737a64442e2e449aad8dfbcf58dd09)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=Bnka3tnLZVR/iaSScar9ldS3vCfBgbBQCNsQUs7/ ac=&c=SlueFd7Wx1uDUWnexjbOqizEktw h3VXHexc0nn a1R9oql72pe0qViHfAAU5VIvm9DMsbh9iCQlLb46E0vUOxVCs7XDXTUgy6vTjNbqR/Cp7ZbCSWg1A0XMaqXoxBaH&downloadAs=Minecraft_Game_Downloader.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (e479a35a5637e1ef9359097c973adef5)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=1nYGINE01wv 0edIoofZZXBr/lzQZ6XW60Hp7K1YY9U=&c=XCs2AamB4hTdF2FRPlQNRzOXqB81xVvGjlaciXkvLTkYXNyEAftovW1NjDTWn5cl0duxEOJbngPsgtbfTnhvP6L9KByK5GTsfuBVQvqbVai8wkYOS9q6aGp35T1BkExF&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (24cb4307ca45d5b72430bf73366f4290)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=RmsGclukzXgcDuuHDUDR92Vr0SRxzbMRjAHvxEfyoP0=&c=tqyqPbIs5Ho4pe2W9y 4LlWVcuW0WkwVTsQSQy YM2A519EGgzoiqdAYqyvibWeCdhvpcukxx56VHrG4MGjmw2toJA/k0Li/DPO4s/VHaWbIAGJHzWSvh9UWITUBwpIl&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (f04742263e76dd5362a828063c52ec55)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=oI1z34pZXXb6tusE7xHY fSfbCpYGsPF3fl0On5EQmk=&c=TI/XRBTta3BRB4sazvn12RtL1BpnNJiH1ja6UzAd6XedQVgoeOwfGZ/OcShjmUrvcqtqZL43YDEpkPwklvFHWwDBpS1obGChEY2KgkuEX99ENn1fgPv1pGjKsoLP9GoL&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (f576b05137f91043be6c2146a8b294e1)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=W5r67 tQCffiMRrxEVCzsN8EskJS1UnkXsCESWz3Hs8=&c=VEMO8uiS4IeBIeEm dXZBgaptpe szp94TH1csl3aDE2uwD2dTW1ABxijGrKd8SA94ogAElNy9E8xHrAJVZsNQTAnYvH6KQit5sL9vCrfXf eYvfKmDPNBTdek74EI1f&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (7327cb43aeaa47ab4d8d51ba609dbfee)

1 / 68      (PUP)
http://www.vaulttourdownload.com/c?x=cvp256mauM9bZh9mYKac6cWjZ1TonxBl8U5hGfBGZHY=&c=d7JcCIp4w918hMMNWVEkrxP7s2QYJE1M7/4LoCcX2plmPj9Td7Rh5vCvx5elGIg09VfJ LBG3LSzCCAsgq/gH/eQ888inOf0YFAWKs/3dPvJrfd6OKRr3u1 BOiBzWG&downloadAs=AutoCAD_2015_Crack_Portugues_BR_32_64_Bits_Completo_PH_Downs.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL3d3dy5waGRvd25zLmNvbS8yMDE0LzA0L2F1dG9jYWQtMjAxNS1jcmFjay1zZXJpYWwtcGF0Y2gtY29tcGxldG8uaHRtbA==&n=QXV0b0NBRCAyMDE1ICsgQ3JhY2sgLSBQb3J0dWd1w6pzLUJSIDMyLzY0IEJpdHMgLSBDb21wbGV0byAtIFBIIERvd25z  (cba2aba37dfa7a2fb915e5cc638cc116)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=fgercv9bc/NK2z6inrUAJVaKq2P/j84sM6ciz CRnps=&c=icL0FMtLKHTw XiqZ4Jz/Du 2anEDKc1wyFK1MHSFzfT6NECDajadxbxmjQ569RkEbPA6sZIicV9XJMzS9 St5VKBkWkW1ob44s6kcfCDMQmAQDWoduLzX8R8LwQS0dj&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (c7e4d8f3066dc327c1fa6ee1a664b691)

1 / 68      (Adware)
http://www.vaulttourdownload.com/c?x=RhNvPENZ3yhjWTV4xPwH1PoVc7OvbrZhfldlekyxnoY=&c=3y nG7Gvki8M00cMGjBsS0fkGN nGwzDGv1zQzomTSKyiHw2/BD77wFpr 1eCbSfcGBBQJwwSI7Pdpjpoey6L5fVNVaQK13uEvkfBdUTg3aFWjURn9Q8L7FM2mFyAmpA&downloadAs=FlashPlayer_Updater.exe&fallback_url=http://tundra.site/pages/.../IM_IN.html  (cdcd5e6e8e6c65f8fe01582154fc5ffb)

The following 36 files have been seen to comunicate with www.vaulttourdownload.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.