home

www.bitsvaultslaboratory.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bitsvaultslaboratory.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Packed
100.00%

ESET NOD32
Win32/FusionCore.E potentially unwanted (variant)
100.00%

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48 [F]
100.00%

Panda Antivirus
Generic Malware
100.00%

Qihoo 360 Security
QVM08.0.Malware.Gen
100.00%

The domain www.bitsvaultslaboratory.com has been seen to resolve to the following 8 IP addresses.

54.192.19.162
server-54-192-19-162.iad12.r.cloudfront.net
August 24, 2016

54.192.19.63
server-54-192-19-63.iad12.r.cloudfront.net
August 24, 2016

54.192.19.19
server-54-192-19-19.iad12.r.cloudfront.net
August 24, 2016

54.192.19.6
server-54-192-19-6.iad12.r.cloudfront.net
August 24, 2016

54.192.19.246
server-54-192-19-246.iad12.r.cloudfront.net
August 24, 2016

54.192.19.232
server-54-192-19-232.iad12.r.cloudfront.net
August 24, 2016

54.192.19.201
server-54-192-19-201.iad12.r.cloudfront.net
August 24, 2016

54.192.19.188
server-54-192-19-188.iad12.r.cloudfront.net
August 24, 2016

File downloads found at URLs served by www.bitsvaultslaboratory.com.

5 / 68      (PUP)
http://www.bitsvaultslaboratory.com/.../installer.exe  (f521d2a270ac4cd55b6ec6385e63dfd5)

The following 125 files have been seen to comunicate with www.bitsvaultslaboratory.com in live environments.

TCP » 54.192.19.63:80
interhop.exe

TCP » 54.192.19.19:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.188:80
browser.exe (Browser)

TCP » 54.192.19.63:80
yestonyupdate.exe (Yestony)

TCP » 54.192.19.6:80
safwaf.exe

TCP » 54.192.19.201:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.19.201:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.63:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.232:80
safwaf.exe

TCP » 54.192.19.6:80
uncheckitupdate.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.192.19.201:80
saber.exe

TCP » 54.192.19.232:80
uvconverter.exe

TCP » 54.192.19.19:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.162:80
jingling.exe

TCP » 54.192.19.232:80
tsvr.exe (Trend Service by Trend)

TCP » 54.192.19.201:80
saber.exe

TCP » 54.192.19.232:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.192.19.246:443
browser.exe (speed browser by Smart Applications)

TCP » 54.192.19.63:80
yacqq.exe

TCP » 54.192.19.63:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

 
Latest 20 of 184 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.