home

www.contentsignssoftware.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentsignssoftware.com

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Vittalia.QUICKIDEAS.Installer (M), PUP.installCore.MICROMAX.Installer (M), PUP.installCore (M)
100.00%

Trend Micro House Call
TROJ_GEN.R0C1H05K314, TROJ_GEN.R02SH05EF15
6.06%

The domain www.contentsignssoftware.com has been seen to resolve to the following 15 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 23, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 17, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 17, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 27, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 22, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 22, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 3, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 3, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

File downloads found at URLs served by www.contentsignssoftware.com.

1 / 68      (PUP)
http://www.contentsignssoftware.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  (simcity.exe)

1 / 68      (PUP)
http://www.contentsignssoftware.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  (hayday.exe)

0 / 68
http://www.contentsignssoftware.com/c?x=sGXX3OgRV3oOQyYAVckfT/r9sMvhEfxMVc9TMxmKDR0=&c=zxY0M0RjS6h/kixvUpa2B3MjfWCfpZYPseOWaFY0HPasnusw8FoNZH2kFej/rPpKTb1wKXTLXwBCp8EL8EFk2Dk1ziybTxLRSLxg 8EfLYdW1DoIfrl4hc0bWySjOPUmjvlIY2k4t2Tn/NT/MFyoAZgRFg9IVkcwV9mQM3BFxFY=&e=1&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (511015114_setup.exe)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=AObwRTvb0pqyK7pPkqkoNLWhQcupqYHMgkor6bL68FY=&c=c8pBZrnwTyerKI8psypePwlsUx GLPmGMLVo6VKyjB5ZbRALwdcmDJFcaTu8t4GOLni95cpqOFiqeLR194qnBU78YWwejMyVjYlppQHf4XM2rIHgzJJQxCl28/cpCcQhNUSIVTEN/mOcVtkCA6xIXQ mzHkJFpwEw5ei4UHVv g=&e=1&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (cd006f02bd9e480b12c5274a9c2e94ac)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=lS/pLE58qqJSJ9ZvaxO02npMOljRVlYaZABooWZ66gc=&c=hE7PIIjYyFDGKrAE 5/hU5XljXS0dU8KgZPxUmc2JYRU7yofuw1UW8/krkUCBXzCFmeUJcI0bNtPRxZ9tN6PWlj33EygRtP6YjuNtyDDy0zyxuTMnAl6SpOynDQWVPOKqicy8sldzf59per/C/PKImoIpPEuQLKXRKEQuJ4pOUeFqSnoNEmYo8GFA0EVOAra&e=1&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (697532a07a429116650c225986829a43)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=sIx7nQmQd4G8eEvKVgA draQxnF4qxpRhANKsieZChM=&c=wYeEGm0xbd5An50C5NeushmYzAv6OGWgHzZ1lU08Fh00BExCUrY7Iz8dX69CtMUg2gVH763CYjRmbBlJa8BuleDCMx8IuFpsVuV9jHzZiAJip5GOEkALnq/jjIJCL/co&downloadAs=skype.exe&fallback_url=http://res.kchuss.com/.../SkypeSetupFull.msi  (9c93b18dc09215098a8e27f6a0e875f2)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=S/kXB4qHdOIDoUpP RR6/puwvE3eVb8WkUS0lNi9/O0=&c=BSc89zvtJ7Rbv0gsv35OAU/16p/M9dilSb88IlnxgZs/M ImuGLh2DN7s6P5thDY3rXdVEDWPEP/BwxQi2I6BsZ86zSz8DTRDSS8LsM6mDL9A7McKshomzJGuFTIWJKN&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (e01524ca6a6bd63940a3cec1d4a3c668)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=F2ddhmwaJ4NFo4ENWN5MEeMkRNRVMoe6eCsAzl5F8Ps=&c=a3AyqnZS2pkyCa6c17 50aJgjkIgugDcMimcscZMyItfvD3AZCRUvhJ2 R18a5f6YCqlDK cGQlLGfY6lhphB8RUFVhYB0p3DpL0NYGMTCSJSYrrHB34WJTykvzm3ko68gv66lwJe/SmaX4VnNRjUsio eg9h8wVkbggclfdccqdWwIMbn5K8ko7vqTXV7vz&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (ccf728fef9faf65fab9a066c4a71219e)

2 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=xhQJwfNqdEOj7w6V4Ob8609E3w3liOguL4UpevZykzM=&c=myosoSC7g6BplzI24zuQjSompB0lVgntT/kY7Og8AYMsU3bZxXHg0j8tKnkftYH83pxALZbtNbMABL809aMHiZ1kRny27sohEp8Fgaii8a81Ms71SxT9PZ4uWtONEWXV1Q2b71Ty6Xg9Wz8aI2i93/EkZ9nnpkxOhhUUWl50NPc=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (e555e9c59da4d0efbb2d68b4f8c330f8)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=EgSsBitJyfLti1FGmZqezUMboaogDxIxw2kaXanxzcM=&c=JkRreAMpqJGPpRKrgBoLSbn1VtvsyXO3vpFeKBWFKTK NkuVAAw1DytjxsHDVOu5wIIV4KvBlzeJFxBdYbJ8vGdH0A8yc12x5gQgH1raXAfvVn9CkE5/3fgxSe955ghbD46qQnYjLVjYjSJxWNBmsK28jpaDGoVu wxZUNFFsCs=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=DmszWS9SkUGneYcKGhaSUgLlRDh1dcUqPP79yO5t3CM=&c=NsGdroSn0qK4nUtg2/sZlYGHb fYhHZr3RBvmfDXErCT0Bk9 sZJ10EdfsWin0e494gXozcXqYvL8tXQuUmHpa/vdSqBVvJdEav/wlQtcjKRPCaroSkaTQ4dZILggFAxppeVg7aGfJBvnk SCrYQoNysUdOqFNg5IFt8n0dhPAE=&e=1&fallback_url=http://res.wosoth.com/cache/upch/.../UpdateChecker.exe  (edc90de148f8e02e171ce7b455506840)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=Ka14mOixGY8NNjFm/qdsc/TjnmnFI3MuRzRj6DQ1ERo=&c=HJFu6DDR8F/po8ytvjeqh6SWMjnUm5yb7PPE25KQ0erfLP2bM pZVJVVnuowefqNgAWHPOrx0Z3XNUShBEOferiUAPkURvC08J8QyrffcyEnWWC6pEzRsmdpY0ZRTVYU&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (e63c0177d0618f722114d775ae959b3d)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=m0gDclvVvF1Pv0sW sGNO/7LZCM Z4cNDehmdXbkKk4=&c=spjmf2xRyBGfMSGyVT1x7IfJ/8Q5hku9uUO03 kWFAPkc5LkK7X80SQ6N2N8CUWnEvjPzdW794mfNrVczOYiE1L5E18BGJSWVLxdDk/bn0WMHl1bFuuo9qjgGHW3Pgqq&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (1bb1f673f78e9fb7f8634c19d3f5326d)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=Xtr6So cMGNGlkHAY9oZ2M/Zh9urHSMRILp/gddfIrA=&c=ZbeJXXb/Yjw8p9VTYxqq5HioL80jNnJpzQlCYuGodJIehiMq0TWn7gvnceQR5pDew2zoyTiRtWPjvMjQimxADP0dp/LXuqpITTjXa98ywvC887AE5CV3i7x0XSSQvf1G18u b2idLhdda5QA6/fUmgYGC7dCpPbu1eCHk01lIzM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

2 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=IEqS EVXcnNBeIN2rTJ6IRFiAmwshPnL2VR2 lqRMmY=&c=JaOrH Pb5qkUSUvh1Pzt9zjeuu82K4 CxapuLXDnFzWuSjusgUlkaL/sfc JJqIsiWBfjuI6UrWKpvpcV4C1si7ODmROX2FoHTzqB/oKVppeRgVbbAjmgIDjvoCbmdbUGXQO2AiNiqAsiDBNEXjFpn5NKb 8QBug65sr1lG8YNg=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (e555e9c59da4d0efbb2d68b4f8c330f8)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x= fFBUBwIuzj iFMsONhc3F50bCMJTUSOYWHUUQgZQjA=&c=Yfz0T6 t4lF5cF274ooaDrLStHcj001TMuPWsJ7JSEFH8XgMnUeYl Vdqe 2EX9URvCcXaSGyJF hJaPjKyARPLErtycUAvk4NvuD2c4NjBtiXBVifupx8JtKmLwu98fF3L9oezrfj7ONZgowwmow5dwHWD5bWVccc/ug8rUWHM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=Ia6cdp4LIurIDRRnNIGBHoxinfFDEDqT7MBDjEc7bKM=&c=DjovVPvYImoxU2ZEKZcjY7GHlsMQFG6wCO2w vlVU2ZdVaWQSBcdetD8U3SGjoYLC MTGb1uMu5fTIfN6zTW1WSaOTGjMaxLtmNOBRihnoS9ZPq7aHtdjDK f74iwpIR&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (5365780cccd91cddce6e24addc931d8a)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=FoPesdJDj2fi7eXheSxrbal6lCQECHVfWxwbbCrzyjw=&c=P5ZyNPbl20keTPYz4Cr0jl8pYsZURdtAU3fDuGSpc/n1mgbJDkoxaZ9gNOpq WYUjJM1VUmYPrkqXkmyhAJmNbgUr7Z6Fwh1oUzRo5jVoVRm1jfkbs9zsYAgQ9FmNHjOO0XrkTKdlNZPQGrNcA4twiJrm1RbLhhiY5P7lN0ECHZ3k eevMUeA RbtD/8ElHb&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=7uwKiplY8c3luICCUNv0inDyfejEOn0Q7t65wAlGh7s=&c=Bw5n56oLx9GXoJTLCIMH Czekd7pWigJBcFw4FMD8SLS jRKymgH8rjaKrT10YVaWJWrbQt8QQe1IcVEN178U30p2QcZn/c2bRXj4T1aZZVuEvYgUUifgeAa0f9ISXcNU8s eybSjfRtUiXhdKBwhySQ3fmAJ7taZgX16/HA47w=&e=1&fallback_url=http://res.mshist.com/.../Fifa15UltimateTeam.exe  (391d9bfa0ef549cc41e78906e233b6be)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=AhVGnTketbUL786BkAzrhRGCHWV7de9hcABuN6esMDU=&c=8wR5CQzLjAoZYCFjDXdUS opmRlZqiGVJ9FSdsL/Q5rjRPtsuQ98dleRx60eBv0koiDabERAuQqVlxLJY6einoz6d5BAZH JbPzru6NkqKZ0iiin3ItDfZjsueNGkSZ3&fallback_url=http://res.nobistex.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (58817171073ad2d5d738d94d88cbe462)

0 / 68
http://www.contentsignssoftware.com/c?x=Gyzub68 qkxCU6guNf3kmzfQSiJWhwxXZjgPS3jptq4=&c=pMcyhK6V0VvmwIfxdJrNIXBuI0 OyNlHm9l56CsF1HX4j4xcmb6lB1KDr03nr90riMwtP6YNTmcKfOsLeU1or1uqQnZbBBRJxLcCjyEhoVWJARjWMqFrkaR/m71 ihUoFQYTU/4lw2OY5lQ de5s VAat8ovmsCuCQFmRsuUBp0=&e=1&fallback_url=http://res.kchuss.com/.../wlsetup-web_fr.exe  (2593540_setup.exe)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=NdUKGIqKjXvbZCaYbK3c8Qj9STs4GRBGGv5F7TAHsBk=&c=rQPu7XEezQeWGbUAQaZEoTFQdkFFKW 3U9wpQ0cC5naJssw0R38gtVYGytCa6GtHjTYx/9Iw FKwpLoVgE5OEY/Im9YL0hkSMnStSHhlEv2ieJWzYvkCtyD9sbX4eeWMFH3sY HdUKqbABrNZScvIym8fsnqUpig2yy/ QTjZ6Q=&e=1&fallback_url=http://res.kchuss.com/.../wlsetup-web_fr.exe  (01902f15dd5420e30c7767a8ba93b509)

2 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=wupXrjZTVaN8Aj07C6QJe57fO3rel5vf6Y UTpopf0Q=&c=UgERuKfevL/Zk UGTlP8O88HXTrlvW VZxJUeUc2/U1E7wTEoO/GnkxGbaioJQAkMM BMLjvV9yRLHa6DMnnZv6E2NCfsLj R0g265cwDEscP3oDdIWn FRWNLLNhGnTf iJLpU4tQDd2vTKinmXUC5yP2etBmMOLctFPGp6kIY=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (e555e9c59da4d0efbb2d68b4f8c330f8)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=ezCT6q02DofiNUwh26iZg0BjFiRCcVdAFh6cx2pcuH4=&c=PDPfr2 H6lsx0LRnJtiOJJrCTfSdpEk6hug2LN7BPYCD0xmH3wuRTXJU0FEgh7W7MPiphp2UrqVh40xDowuVyOYLjdCpeOq9aEFnQtNS/VJJc7cBXZ dTfzE VP7Ja6JVBSLerf5AiPowlDPZ/HRM1BQbMl9 um3g p1Vx590A0=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=Ogl9Z4jaVtSCQeDyTFLS0UOpgCvSG/gbepiVC255or4=&c=5FzMeFQJWk90wIVX1ilw2w049ZURmCjHcVMN23D7TVAgM1 w2eFUJRJhNPGXu9TO1jz4b0MCe9v0M9oTzBspE4eQJ4T4KiE3Dcwx skYn6ynlypNzZmxKsXsMpeo9/rC8bZuvEBi6LI71xFAoPh7daNl6BXx0vGdBcGGio9oLlo=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (f2c0907fda37bf63d3d94edf3152b57e)

0 / 68
http://www.contentsignssoftware.com/c?x=8DI0Ed/R7Y19veGXx3KmO9Wnc2HkBECuQo0/IsQxST8=&c=OCSEt3pPDDilZGJTtIiysguZ5pAfObjQbWQmy b1l1MD/C8/Geh0YjAvFdCx5ewjxHiK0H2jNNRsbMUsG/TzXRMUj/kPH41lqJJrPYVZC RAXFWLhguKNrPFDKeB5Z0CWWmTcxMg0peHHDPrKLKhZ1VoRjexp5extqH5sSZXDJk=&e=1&fallback_url=http://res.hufftos.com/.../PDFCreator-1_5_1_setup.exe  (cc8f2451053d69a01f4f89ee29d4b88f)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=prDWielXeMqB/biwjB8w799seLyOOkNXnen oJGxl70=&c=OkoJbqidMRCQbxGDdV0kUpQkiz2va4qV2NAlOEXaaoVuTKxRiXb0oOble9l5Nzo04fgcr1D3nBGqwY5z0vOoanbxiT0sMsv40KueoXE8zWW88WcaIFFH6uTKkNkJA3tq/0rySJxFogIbVYxTXz2fMphlv8Bq0Zl4Bt6DjHE9DTI=&e=1&fallback_url=http://res.hufftos.com/.../PDFCreator-1_5_1_setup.exe  (589c25d05026bdd95da1eb3ac5260c4a)

1 / 68      (PUP)
http://www.contentsignssoftware.com/c?x=7SoNhvj1bnzTQeZ7nyyIuAqkztIl/y/yNm7QX8QL8XI=&c=FoOixlL55/Z4Vyi62loNvI09SzQVOqNQuBqJCXytazNInVQsAVPCawCufsXdNTDSqN8kSA7ttHe90 PBWyb84I24fKuDtFgN/7J4jktuN0DfVfw1/EVOOESDUge/LSqv&fallback_url=http://res.ikkni.com/.../Firefox_Setup_21.0_en.exe  (01eb4fadbef1954d5bdb43554a41aa4f)

1 / 68      (PUP)
http://www.contentsignssoftware.com/WVl6OTRQWGhzSlRKQ1ZtbzVkbEJCTVdaalYzTlFaMHQwWTFCTmNWQnpZallsTWtKWWFGRkxaRTVqWmtWaVJXTllOR1kwSlRORUptTTlVRlZIU0hwVmRsUnBhRFJrSlRKR2FVUkVaa3gzU1dscWJXVnJPV0ZUU1RKNVRGRjRKVEpDTkhsUU1VUk5NVFJZTUdoaU1YbEVhbTVDTnpjM2JTVXlRbkpoU2xaek5rVjFkM1p2YmxZNWNVVnhTMHRPV1NVeVJuUTJaWGR3ZG05blNXWTBRMlIwUldoQ1ltdHNKVEpHZFc1Vk5XWm9jWFY0ZEZKVFozcGFWazVDWTNwV1VYVk9jREZtUTNSQlNrY2xNa1pvWjNSd2NHWklNWEpOT0RKNlEzQjNKVE5FSlRORUptVTlNU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbkpsY3k1bGJXbHNiaTVqYjIwbE1rWmpZV05vWlNVeVJuVndZMmdsTWtadmNHVnViMlptYVdObEpUSkdWWEJrWVhSbFEyaGxZMnRsY2k1bGVHVT0=  (updatechecker.exe)

1 / 68      (PUP)
http://www.contentsignssoftware.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  (wrar420en.exe)

 
Latest 30 of 80 download URLs

The following 36 files have been seen to comunicate with www.contentsignssoftware.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.