home

www.bundlesignscentral.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bundlesignscentral.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
100.00%

The domain www.bundlesignscentral.com has been seen to resolve to the following 14 IP addresses.

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 30, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 30, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 30, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 30, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 30, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 30, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 30, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 30, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 1, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 1, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 1, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 1, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 1, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 1, 2016

File downloads found at URLs served by www.bundlesignscentral.com.

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=H3eiI9qLWGPbtjsoRYHMFdPZFkhWtJafltF1aLg5 i0=&c=GwWws/F9R6PvNgJRdKvwerbt9QdTvjjFi4tsEF0EVbMfDQFrg0KypkKuXkHHCSh1fn5kGa7uLPo9xXgFHwbc3cBeXeQp Qb7 2uWpXmixskiTP8QhDerIOhdI7Rmx0NE&downloadAs=Mamae-Que-Nos-Faz.zip&fallback_url=http://www.sofontes.com.br/files/.../Mamae-Que-Nos-Faz.zip  (setup.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=uOw6wsAmcTLJ4xs6SWv9vm rGP9VsDp61vvw2N5EjKo=&c=DKJKvOO/6ZLr624X2 e4VmzQmCj76LzkuHjkhMe5CUFDxMkQg/PK 2s1Q3FiWKYw/wk6T SZcO5g593151X5wr9Spbk5gKa8uw6pWt1l6QQDai/MHy2u2W5mwnyxnbGE&downloadAs=Mamae-Que-Nos-Faz.zip&fallback_url=http://www.sofontes.com.br/files/.../Mamae-Que-Nos-Faz.zip  (setup.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=RwLHQ k8s4DxY0hf7evwhlylLByM72GR6iqHJ6ubkZo=&c=Al4FleXNKRUy7Dr5sakfImRcmfAJxU8oONPR32Tdfl9MBIB2CvU2kN73ZWu GiWsdIn4eZppZj/ghnMaJ6xMZdMzBlwxktFqgLg/NHp0JeTkJ6zRkvVzR0lMrCmc Pz/&downloadAs=Lexmark-Z605-Driver.exe&fallback_url=http://downloads.lexmark.com/downloads/.../CJXP600LE.exe  (b1c12d792779457c0571df8dd5055123)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=DxGqepNskcZ9xES3kc4 yDCvVcoywNwCnqK6Fek0yXw=&c=5tHEiQRwJ2eNwlSjBQcLv7CxlemrWqJ7YuSuH6RRaSxeO tEcxBY g1/0yUUorFScVVaaClvZW6qnLP18y2nFAEU9XOTPsRR PhYUQ0n57Dk/dhVl9uCgtLUE4gQkkEk&downloadAs=Samsung-Impressora-SCX-4521F-Driver.exe&fallback_url=http://downloadcenter.samsung.com/content/DR/200907/.../SCX-4x21_Print.exe  (13b16a3e1228589c7b0e533ffe6ea446)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=vanlmWTfGqlPg0Dc948I148JmG0MwrqtZtonK4PUOYQ=&c=5kgIQIO4pfZtJXiEnrt9J0hERcaxhQxDKrHHkF75uKs/aP2GceOkJHrZRTgPDkxfxKX CpRpYtWt6mlkeN5asl3ZjU2ccsTAREK3b owC1MX X0l0IZL0WOWrJnLMLXY&downloadAs=Spark-Browser_43221000436.exe&fallback_url=http://dl-vip.browser.baidu.com/.../Spark_Setup_all.exe  (389a7751ecebc63ec3866f33c34804dd)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=5XPDEof25qc 2/mWDNQiTbO7bPyDwXfCfQTKLklkpj4=&c=pkK p8y5UMzKyh5/kYZ7nePP0EQzideeIsnDLYi 9ZDNPlEFsA3oecJdV/bMLfqYxTV8MIBsyJ PkepnkiYhZi8bZL5EtNJ/1tJpewBUUFekkvcNWFEdSPLDWZS3tCEr&downloadAs=Google-Chrome_4802564109.exe&fallback_url=http://files.ultradownloads.com.br/.../79939-Google_Chrome-48_0_2564_109.exe  (5639ef7148952ccb166c81152179165c)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=e7AN/uMm1r73xSy0BJvW8V2ToNXBvWx7yQSLrWQmgqM=&c=dfCxo8CoLiSF3TSWfg8XFslhzKUHY5ViUYKAH1ylq4sjXpeWoIuNZNBrpIY6 cjfkNmQr4y0pgCetZaf17sIsd7RZoNqovkIzY5Thag52SAjHncH3LOoTfmxHlLqn/A&downloadAs=DownloadHelper_4921.xpi&fallback_url=https://addons.cdn.mozilla.net/storage/public-staging/.../video_downloadhelper-4.9.21-fx sm.xpi  (icreinstall_c.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=rvo3PSNuM ISK6XoMOYswDlkB4g5TN21fAoB1OyHHro=&c=jjgpF7k4l0B2ZGiN4aSQKpKQuSO9dWDnE6Wb89gvsTng9XTegPljvNbuYhbtSwL40E7R44lJF3b9z6z1Bt3XiQtyarrzMjlj/Uc1lbzhKeEZA/4An yFc6T4wRcEXFgw&downloadAs=PES-2013_Demo.zip&fallback_url=http://files.ultradownloads.com.br/.../280970-PES-2013.zip  (icreinstall_pes-2013_demo.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=GYq QDOb9RMI89GhuUr/IwwN8OaFq6HkHK5d0ELzbYE=&c=5nI/hcQhN6J7Q/J1A8m8vcu4wq4FD3qtSiWg48AYtvNXvX6dTLv9nzi50x2m1nc0Eo3 b6nix/tGa15qRRMMDD6mDcikqMrxVUyMJkOL eTb1 aYn710Fertb8S30geY&downloadAs=Mamae-Que-Nos-Faz.zip&fallback_url=http://www.sofontes.com.br/files/.../Mamae-Que-Nos-Faz.zip  (setup.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=kDwqN/m0ADtdxAtdORIZvjvEofaMirB/TCLIkKfO5/A=&c=iABZVIJiprbCyB4xwguZ0Q11gQN8AwiFG8pdEl7j8Y5IUhhcEd0/iaIFduZ/D8u6U Lk2LgZNHLg70vdyWtXtJHR47F1zZ5MJTh7UrYszjpUkY7ZfwXy0DOUttgXfzu2&downloadAs=WirelessKeyView_170.zip&fallback_url=http://files.ultradownloads.com.br/.../85639-WirelessKeyView-1_70-32-bit.zip  (wirelesskeyview_170.exe)

1 / 68      (Adware)
http://www.bundlesignscentral.com/c?x=TuuuI8OhyXeK9rxV5WzOhkVOG7fcX8yZ4AEzCPpGI7Y=&c=gLk5FWn3FFILlEo9cHmUnH6MN7e5iwpLQXITbmHeVIOGYZ80C1YAe N18mB3NrJs7/tFl MGzq/KYZvwQpJpul65m3Cz6XVq0 tBKjvLnrB7FcQ6X/rXJOWTVM7xjbBM&downloadAs=Oficina-Mecancia_9.exe&fallback_url=http://www.ast7.com.br/.../demo9.exe  (a3eef8a479f01ea009285335e515ec11)

The following 23 files have been seen to comunicate with www.bundlesignscentral.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.