home

www.conceptssigntour.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
conceptssigntour.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.conceptssigntour.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 19, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 19, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 7, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 7, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 7, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 7, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 7, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 7, 2016

File downloads found at URLs served by www.conceptssigntour.com.

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=sHCV3hsmoc4Rlx2079d2NuA6HgS0NTz3PcAAt5jYPRo=&c=XMH1Dwg1jE9aHxq5XwOQBQz2t2JOBGb2FUbPInOSjYJRuT44efRZMNV3V4WlvTZ7yG2Ak6T3X7hOjnuzydhZ lu7ahG9MNqhfk4m Kl38qSnFNLKBqMfsXKK55Dk3eeS&fallback_url=http://res.nobistex.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (a0e37964eba16ade6d7a8fb002fc486c)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=hJ0 reKpgon3FnVn5cDfiqgvgiSV90O04/3mvMU65xY=&c=LhfFXDV2DFSdpJxhgfLZrWT0pioP j3XvSOullDmiA46gLMFfVPeHCpdd/sz9C5ie esAMWY7VBcxXVNDn5vO7D7GJlqSsMKxT/12N aQfX67CUWFeN39VzmIo5lkf3f&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=7pUiEUL/C28S0/gRlaJm7uPVfMT3WsFHU7Mlor8GWiw=&c=Uv9Amv9X0jeGuTCVhhACkzEpfO5YJ/7EqRwXi5HiuIhVFlB9qOFUMbFZRyI/lmVe2LAcpuIS2sIUob QnOPKwAHr TrL3OA4uhREneJ6KZXh6GhvUBZEAoARJcmVg4gq&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=Im27/b0sSXrKdmzzu7zjrj0E9GE6kg5p8M NGlrojTc=&c=IzaB1ldwrmQ1rgrPQ25SmMAS9k4IEXPq90zTazaBkafSJv7yUNI ZV0vZip1uMPO jxqKeEWh5KXXM2bQ0pynQpDxr0 N0tOJq9/YCG2di9mSzgl9D1KXpnqODJeBw3&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (3736dc28250f410f34030f26d6d8050c)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=z/scSosGxLPLWM/5WQabW0RmVOrffAg45yTuSkRibQM=&c=RsMEmxgmcjp0JeJ7PI7qmqhZDEbaLrf7RCV0painCBKOQAD7Idayd6V9vkFBYAmdzcHLbTNQMw5hkpUdliECPGDlXYIusCZMp5EqWfqcNNiVBcZDklhbuLXYXFNoZGwp&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x= KA2uXRm/I7lYwYa3z0OdopoWY2yk t7ECPy65GtJV4=&c=P4VKknYaYjzzZa0FKEYILFQvneyWbmXtA97jF Ol6H6N3ezfXr1l/O YtNFex9A80WfgBFlhACicbz13MNgWR9VJv0uDmzDItb7YAGzpyUe7W0VxVCsy9 peb31z252j&fallback_url=http://res.illeprog.com/.../Firefox_Setup_21.0_en.exe  (c.exe)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=EnrjIifAgJZRS3JE6KvmhckSCZ/XS7z4MJ/eR3oxDjA=&c=vVN8jNK2ZlANILa3kPqxkzjYm zGPeBcJv/oPRQMOWjSjhJCAZulHQBFcFkdGuUEgLgqJ/p1bx90vUR74PciBI1NFJYBMxTMXOko9tIiFimxfyZUJuIwT38cYFajxcOd&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=0Laxxk8oz JVoVMSliYtGPHUnF4NXeirX8HpXuAs/S4=&c=KihvKFlbcnU1zGc5lkfN Fm4Hz6JMjAATH P2bGPLellkPBMcGvXyj6v7BcAcgQEHHxAgqTt FehgSi8jKrgelBJfXgnqaleo9Ur1CxND5ApCP3bmefmFHY48UbBdI4S&fallback_url=http://res.hufftos.com/.../audacity-win-2.0.2.exe  (e75e5f89aac44b598ac9765ec781e9a9)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=kYGPQCoEYP5kzAiNXr0muLoaPSJTUWsXMsLkLocolLI=&c=vUgmm9w4V2fAUeNlCIIO7tt79cvbphQqZQcT/HCMonVA NL SSlkd6uCPQpwgQeavevZXQcJM2WYnGDvFUX1P82oxfv3l1u0wAVjP/HhIKf saB Oh0CS1xP5IUMVtNm&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=eSj25qab7x98Tp34nW a5teah8 Ppl1tVVIXalJh/uM=&c=fT1 bQzdJIsEkUcgTYynGwNj1x aE4RRj9KMl5UalI DwGsKlR/J4VAVVHgiWetV fE3LQ0Qr/9EXTaTEA5Zb cNf3vl2wISwOvZccjlgS1Klw9COLDYTnod7AIGR1 &fallback_url=http://res.hufftos.com/.../install_reader11_fr_mssd_aih_fr.exe  (cfac20013467c8d55b5cecf1b3ee2a72)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=3cCfOYXnQ83rGIr8DxTkASiTd/JxFgwnxiPOcx7ZFJw=&c=MQsfPr7UzlORGTS3I2aODGQnWmo52HPCIJKTvxxP9UUFxIKKRrw2wbra526BqAhlOrpGfCzL5NvALTeM5YGGbNfwV5m6x0pdQ kGkmPQe2ujPNMGD74LDpKyu2zQaJn6&fallback_url=http://res.setauls.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (1a9175fd95ed346aa79f319d97973a2c)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=bA00Ph oixJywts5pOXPA/m9SmH2cW6EmY5 GHpBCyo=&c=Wnv5TAC lbWKkOwh n1eLx1PMkEXpv2S1Ppwcp6rdon8AlBep4a2HW9RXh33CNbLIBtFUQKjLYVOzj08lIL8r1QQDcgd6kTQs1jfLnVRpQTR9njOSNIzuI5p1yqiq7L7&downloadAs=7b4366ade340f0af3eff3160a47d659c.exe&fallback_url=http://files.gooofull.com/resources/binaries/2014/.../7b4366ade340f0af3eff3160a47d659c.exe  (20837180f6e1cd0c26303458c8848626)

1 / 68      (PUP)
http://www.conceptssigntour.com/c?x=FZL9pWM8akAodtcrf8zvUkWlpS7BCuOCxYzbO5NNr4M=&c=RFGXuwf8zNHeQjBYXAt4HV3nSYdXT OAIexnEFLpsMiTYFJwmUPWbD5WUB7L3ftJtY2/gKeqBSiEitpTZHxUHt0MW9PV8nDGzlJ3UeXX5XmrCe43PCm6YaxHC4d/5vXB&fallback_url=http://res.hufftos.com/.../jre-7u9-windows-i586.exe  (fe151048573af886e16d31e4da4f3a6f)

The following 6 files have been seen to comunicate with www.conceptssigntour.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.