home

www.packagequicksafe.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
packagequicksafe.com

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.RE11 (M), PUP.InstallCore.11 (M), PUP.InstallCore.EST (M), PUP.InstallCore.FC.Installer (M)
97.67%

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
4.65%

Trend Micro House Call
TROJ_GEN.F47V0228
2.33%

The domain www.packagequicksafe.com has been seen to resolve to the following 8 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 5, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 5, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 20, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 20, 2016

File downloads found at URLs served by www.packagequicksafe.com.

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=9F0RPp9OGgZqRb3f96SlrcPJA3l/5jzPtD KM Jhtpc=&c=umUmIjlDV0TGEF0XQ46tNeVq41DkP fLjNH5KvIrD8br392HTcxE51c9Zsre99kMpKP1FzhmMptsg6n3/JDBsgn 0mfy6Z KSqttocP1rfndL77lY8Hu9OC0UkoZHFlxizYJlizY5IaHKg8roPKZOKn/yR8PAEWK9L7Xw0CJEB8=&e=0&downloadAs=FrostWire Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (074623c60af8a85104d8975dce2d3c67)

1 / 68      (PUP)
http://www.packagequicksafe.com/c?x=1OWyStq/naKQ GC35tN8uXeTjgVR6niwxIXXJV8 jTo=&c=eOItpvvfvf5PxnDSHwLPtVdEPaZvsktK1dqeejB6ZPOrlFRhv5SeofW3FxAz9W1jrmSMNWumk/.../IbwivgGn5c0XCIN7qDjrkxIEfik7tAHebigrZeyCJA4Dr2oHeHNqAak7fZZpHrXMX15eOkBi67UrpoUvgw3MvggwkbOP4B&e=0&downloadAs=Safari.exe  (4f137777436d87d31be10b10d096156b)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=J6fWgxbsbVb14vFFNLsyP/TIDfe2gvpjPNbF7VUXJp8=&c=EGii3je5DwGxczgxtswtUZ/f18LjHDLLHIdH7BOLYXNOGzez/MHuM1H1fngPcmlmNWvr59NRiU7rl6F24T8s8L0qRmlmafMgJ8O1mNG43GELt zE9YoF5N03D7wYhpjQ&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (62ea54442be775e98088b84acf4aa6b9)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=KUUqt/1TfMtHR7DHIZLoUlM Aikfrgg Hxs0g7MfmKc=&c=HA gohaMzugaM2S9NBrCQpS3AjhyDKTnLTp7Yet3LIVwVDUlDSpSm/1Gt4RfjdNlgFv 3N qjehxcFoLj5osMc07tn36Myevvs7q2RbBxGq5epNXOR6uItYSkaRkmYVY&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (b46b48fd3f72bd843bf81881f88f0f62)

0 / 68
http://www.packagequicksafe.com/c?x=n G8aqOkxkT7V2dHEA6ZE0D3fgB8TJJshRFDpNjrT6g=&c=FDX5Q1uwmtG0IceVmug fw4ygM5AnW6oF6q2ZH/24olFzXvd359UfVM9WG Xiyj6wLyulVU1KoQdrF ILL//59Gr6BYjrKiYD4 1cfBf6fWILKCdwVuJWB/FCHjwyoizlrnG485E2n 0D7ILDgh1wpFuvLZWUI5qit0mcgn9zzU=&e=0&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe  (eie11_en-us_wol_win764.exe)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=64cxSv phzDG3aZSuKzWTDxIcX0M3DzyOE44hj9UY2c=&c=BaBQ7JAwCfiyDCRLxe9aufUwQ6b9EA3XUMHw8EC4OXm6o01mkj6m0/rr8KZcGMFkXkn5qljkyfc8Ek5MQIriFzUsNxyG/.../3DGURFDrUwUvwM9vT52F0L8sqUl3Pny0Wft 3bDmhGwvvvyauoT2sX93APFmS0=&e=0&downloadAs=Firefox Setup.exe  (49f54c0fb427a3c345bcef3d354231c0)

1 / 68      (PUP)
http://www.packagequicksafe.com/c?x=VxEEu08q1hy QvqEHHNFjPMIgZidyyhgf4QuW LP344=&c=9JG4KtV8QMKIiN79Jnh2HC k4aa7AIv7WQt/cNVtGHzZ8XZ9V1VrCM wuT9wfmB2Y5CW5oW/yao5V/TOgAOW92i3L6A2 iK9MZUkgWAFnd/gVvysA4d2b1K1DZFbuaps JA78BKZuMjo GipLgYJS68we6TEE0dFfFpvaZSOOzePJzszEZKoRaQP9Orpq4Vr&e=0&downloadAs=Internet Explorer Setup.exe&fallback_url=http://cdn.downtoad.com/.../internetexplorer.exe  (0938cede3122efc8e133817cb4fc41cf)

0 / 68
http://www.packagequicksafe.com/c?x=VpTDzsVhUfsa/IBBVEpFQWBeKAhbXkIvOq85t3UfpFA=&c=guOVSQU/ZXKzHdOTczOTz7q24 m6oQPc6EchOTDJujG8es 8WNHXWFMZnnLrWTNjdFqLl8MdwhtBbXtNnZtbAu6jZhfHybfoOOTDu iT0xJvTa4S/.../hiluL7EzffzKOPTXBPSrLh6gwKMM=&e=0&downloadAs=iTunes Setup.exe  (target.exe)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=5vAKHaIuOlzFH6fHy2HYCdZqQtPD 8348 vPS0fwrEg=&c=V59/ebdIWbF9LKxzNicBJZsLsFPgzx2jMeSFiotEhfA3vunCBL9GQqlhth5FYoafN dvCWmQh9ILjSCV6o3K/.../w5rrcDwtb s6ABdAXQ9Si0lG0RY2RP7hDdOzjZLMcFyYLPWwFd1oYaf yOpEzz6gamo9kEaKPVRLCWQ5THMM=&e=0&downloadAs=iTunes Setup.exe  (d857634e20bf873b1e1b04800bb676ef)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=K 12HX BNe/3rQLhLDmxCl8Pt93CaN1ZRt1an3ckX8I=&c=RVURcSa7GQtIiJ1ULgqYBnSIRnQMjJ4C7R599UXQlV t1KvPVXc6PvQ/UDmLAxNelHbyVFEQxKlXwbzvStxMc4ZfdalhIqmTDVidEgtpjTMOIsTJ290MX9QGzFiNhF/g&downloadAs=WinZip Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (19e9411f631d6e5bab477a6fd9bd6102)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=ITkl3G7C kLInNLIjZclC 3Ye3ifqSI7FGUSkxr1rkM=&c=wOYg/rn55ZE65jY17DuFgq4 5sRn73bzgxA8GT3ok OhFZjTtx9FOQgjayLXxRB6G3XqeEELeRAnusF9h83GtEsJ1hEHAsmu0CpTaz/.../e7f6XSSEwFv0IwSmo=&e=0&downloadAs=Picasa.exe  (b8495bf42341c60de768107deb79f46b)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=2uYfm8JhmhRZEST0bGW8uj5jWD OTlnnzUcUdOLHaAk=&c=l7GrXokplFGK LGAmaAl75Wmrz9kxlNeTh1EpFk5j5j0TZtKCn96wGbZh0LGJGRQ3qHxUmi0uUCmbtneWb9/p7j8GfeasiWHW68HPYDndiyXyatIHjakbdc7XbVJ2HZzRSxsMELbAqnApKMbEuJLOpWeAnIOZ lzjIQ1zL/vzKQ=&e=0&downloadAs=Bandicam Setup.exe&fallback_url=http://cdn.darwendlmfilesnow.com  (e55dcae0c8dca4e065c59505bef78e1e)

1 / 68      (PUP)
http://www.packagequicksafe.com/c?x=N52 vL/MsVWDUxNkTvGLpiU9jerL37j2zsUBYMDJLQ4=&c=PNOL40nWcq3ZnDx9aDcn5pyPoxRK4 4qUYcWt06nyvuLulCM3gYWWb3l8TVEzSZppFBY9wugJKumm8V2XkyNbFAly7z25V4cjV/K5UAI27b6Hl06S k41xCT19 Fcin9 b/.../ReauA9MvedM1kQ7MYt6L1&e=0&downloadAs=uTorrent.exe  (e7d35023e5c4207422e30c11370edd9a)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=ngj8TF9XBQJw1KZ4mHa9owHpNui1Gx3oJzcreP4omAM=&c=ZD6pPK2r 5PcSvUEJ1kjAtNfzQwGhXm6tmzHgfO5DzmJQbf0aOI0A/KeqsEcLw3tJWAEj3fSaYyc3GQhH9sFbegG83QDG/KLq35fuEBKj6bncGwHvnvCQu5umqEz2GP4NlNC3zfJcKMBuFnsMTkkJNbNz TRujBUfGG12Bu8AzA=&e=0&downloadAs=Technic Launcher Setup.exe&fallback_url=http://.../download.php  (7ece5845bbf1d5dac269802aa7a7a597)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=CfNoMRJo s3xN1ZentE9cN0qX5DwO1h/3/jELMzhNVc=&c=GmsOYgSNLfAmSp8Su2mdd0vAq/dGKtjYkUgDG6DfX6llif9MHqlKt7j5djq if62edjPAlCKfPXPVi8R9UtYvJfSd5iBxrbEirJNOwjjw4dNmrZbQy5AZ06SmEMhNERa&downloadAs=ooVoo Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php  (95115c56ffae85bfec39839dbd90a67e)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=4jivWJjOP9HeGwfbw5ZTpLRGE EkRqA5O5WAECGf3FM=&c=Nn/EtMBVVKfgSne1M0/5VsybcFCMNO5zgd7l KPz6SXOuKA85tFZkbWjprTJR5HhuZe3wyHRMuChQI90TtNTKR UD5F3cm1x5S91C15nEFakJRI15dAzTWkts66s75o8IDZX0UpEntr2ojHPTAq yRZcEODg9OhSjRNZCFMzFI=&e=0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (e7d0ac88c40935ae36419c5670a64b38)

1 / 68      (Adware)
http://www.packagequicksafe.com/.../1SO5mHcLwOH1rLyiebPM8SeWSppdwYMzaszoRI=&e=0&downloadAs=WinRAR Setup.exe  (d5d1cc657e3be53ed91956ed3ed62293)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=64ub1Gkwg6bmmnq7Rg/OU36/SGZrAoSEPg3vn00oMEg=&c=osGjZ7cekQE41Kfji5YD1j gy4IZD1ppH0MJrUVAooNnIwrqFMrU3TEc63P5T28ttc2QWWec M9GXooi0lrGU9G /WS3evKwnYtQNEutk0MiJD8gv/UwCqqpZg vOsV2suMQK/cmlU2n3Eo/.../zAmO16mAHc=&e=0&downloadAs=uTorrent Setup.exe  (1449a217698419fc8de8327c129f957d)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=sQ6ajLyC4ctfknGabTjsnVMQWxHUPioUuYhn6C9SC6U=&c=H31jspB2XvYp5iHRK7pJ6PUyyT3hk YbIfTGj RAg4ku1wBwT8 tD156IobjE r/QTkzc2TSzqdNqQal7bli8zN63HNJeoOEXr0uZ8FsSdS5dCEFKq7Pr0brB daa7iS&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (b010cc1035264e07dba75bade568d771)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=974qNdD8JXsWGrZPttuRHk9K1h6j/W71KHlF YaHWYc=&c=HRrfWu8pvjrs9w9yJ9ZOI9w8ev PeGPReashqFsMLMlYhtnI1P9JqjHselcpoz1uesfw5oHFwANO7sHsYgUZ1J/jONtvIAIaaXBYqYBw0qAtvVC jvGLS02d8e/eeiH3&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (a27d3fffe808073b3c2201513fc1e301)

0 / 68
http://www.packagequicksafe.com/c?x=k4YCynepCFjt an6hlTGiHljNcwM8jC7YEDcBxof5BE=&c=j4omIBCGhdCbNxff7PLBD/.../48JOL3by1NArg2OEyJdygSDehQaV8DK7MPjzcjn8Bb6tEIr0wgAcBq91i9ZY8LRhsEBmkLc2Ihv6G9dwikihQJEAv4mi1g4JZee ncHqZB7rB4d0kE6&e=0&downloadAs=iTunes Setup.exe  (target.exe)

1 / 68      (PUP)
http://www.packagequicksafe.com/c?x=G0DCKU8aHIEqoIIZAPcAjTOT2Sg6J4NAwVdG4j9nYA8=&c=shfTmmhbQhzskmKi514LW97kGQwepQzXLG5naCNmEIGnNoqc9IDT6ePngB7g9ieUc1IIksSQNrIPkNfZazh9ydVmR423m4 CP15 NXBYQkQRE8cKTr2Z0Hqb7YICpU5gf3ld0Cv5IQOYEnOazXRMbWpvm5X6P9vLfVcfgKZAPiaX8jM364e7Atk32XCcraUb&e=0&downloadAs=FrostWire Setup.exe  (28971079624b049975fa8036b1a58d03)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=YVOSf4YdMohMm2IH5B2qj8qnuBzy U9u0Lj2b6sxeYs=&c=d9zuEzME96PLKW67Np faLfmZOxu3Qy7yp2YXJTXuj7NKMTcNJIM80wpi1/nfV32mdK/DMe8YtFmw8yTH/.../&downloadAs=Firefox Setup.exe  (271e27c69b8b89c6e505724835c9b304)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=TczlvNVgMiCui/7NzmxvYsC/AkqnZDJA1/GZCjiyoQM=&c=OR9zj3sf8wD/v2f0YJpc782BphqT4g9pkCIVTGEQbKN/BDoCZncGpS95ElaHbcEKOUScLB8hcavmG/7smNomRdWPAP7AnF5 fQ3RVcQCmIoaW9EZBqWaJEXrrQ5TQvRvpNlv0Thts4OEIUo/4SAVeoOW79jPvKYHWp3zXWHka7g=&e=0&downloadAs=7-Zip Setup.exe&fallback_url=http://.../download.php  (4f8d66c3ce282ed572d08776c2264579)

1 / 68      (Adware)
http://www.packagequicksafe.com/.../Tk3jK0NxLn3IYDHm6 IwH FTyG1xm5Qu8SXf eTl81fKw1fC0empijs2VhxajUxeJcsWSGRvedbinHoZMa6xakF0STYttyR&downloadAs=WinRAR Setup.exe  (dbf8f5205088ed76a08a89c899ab7add)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=k5a9X5ytwj58HueVakQ/eVar1ji6LkBGP6cg3yjZXPs=&c=/JVYPj7 C/UsywjaJiNJW5Ehw ouCV3LVo5nULknPdxvWEkzbzWkM/pqc1dKeBcs7jibP 4FM/.../5yvqL2nh78HNLvu5GF8NPPw4Fk3ob9PJMr9ICsmbERDlvndbBvP&downloadAs=uTorrent.exe  (4cbc9be8988ba794e8071fb651f89ce4)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=aeRe45vkBUM2NMkaRyNyi3Z 3OkmkKWaQ 9Yb24nQBc=&c=2uYDDzUqVNB7gG4PIem3LJapPtkF8l lqCd60tBSoFaSK4lT8htakOicghhFFmoKjP99C bQACthGr2FPghvWijoejKWrkDBtVeQ5L9CiXQ0q5QPs9RqanZZTdPEa2uzLSl7ldo6EwmN3zSNc7xk2CMpEK120/Ri4BjuykGNIaA=&e=0&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (f4f9a7502b936ef584bff11a0153606f)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=0NF0c0HAAcEq9 R/CpMO7HoptLCaS7M0TsyihV1VnYw=&c=vAVVlEtCymbYFIMLA8FLw PtiTUH9c/ByYneTgF7P5Oytv743JQRaPLTTJ4evloAZJS95VPrKSU9BlHQv PbNiO6MEBSjcTim4Qmn9FqUJhCkxomFydrBwjr5pVwBQfG&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (b46b48fd3f72bd843bf81881f88f0f62)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=EJIR7 0U5De4/UISGsY7Nux/CrzatTemb/amOSfNc40=&c=aHUuoElujf9gKfJwgLWwOh5hIfmPZUppz2kfV8QzByxdctx2gq5 t4WN4iLBlFpczz6RPVG30R/69HJE/WP5dyH4cNQB07lxoVDt0ObDDML0yIYLSVM4sT9pnQeGzpnKyWPQ5WT85I1g1khMk sNcK6YyYyjAbd6LWPqNT5jn0E=&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (f4ae0fb6c6a1d852a8a9c211e7b37288)

1 / 68      (Adware)
http://www.packagequicksafe.com/c?x=UpfbPGgTT1Z7/3ExTko9VxBgVYxchZhEtFIMaLmMQBs=&c=4gq1nOqpCBG2uBmBAVXR5AHubLkbXQoUh24h61ccakGqYCJ4FLsqTwSrPg6oiHoI696LQzjzmlu8kaYBYrWaN1wFCRl1d0bgjJnwmw2S2WY2OW4qQht1mm7IZ0 3PBWEvQ2wJnEMWOT99vwQI0g2HOPm2ORsPeA7qXD/4KnG7BU=&e=0&downloadAs=AbiWord Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (91028fd496d1fd6085c3eb27ae1c79b6)

 
Latest 30 of 136 download URLs

The following 6 files have been seen to comunicate with www.packagequicksafe.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.