Download
Community
knowledgeBase
» www.dlsignfun.com
Overview
Analysis
IPs Addresses (13)
Downloads (18)
Network (13)
www.dlsignfun.com
Domain Information
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Root domain:
dlsignfun.com
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.InstallCore.iLightMe.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.EST (M)
100.00%
ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
5.56%
Dr.Web
Trojan.InstallCore.1903
5.56%
IPs Addresses
The domain www.dlsignfun.com has been seen to resolve to the following 13 IP addresses.
52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 22, 2016
52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 22, 2016
52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 22, 2016
54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 22, 2016
54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 22, 2016
52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016
52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016
52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 19, 2016
54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 19, 2016
54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016
54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 19, 2016
52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 19, 2016
52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 19, 2016
Downloads
File downloads found at URLs served by www.dlsignfun.com.
3 / 68 (PUP)
http://www.dlsignfun.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
(epsxe190.exe)
1 / 68 (PUP)
http://www.dlsignfun.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
(utorrent.exe)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=5ZtIGP3iPs9PtpGJIohhKfc2DyGNOFrBgE2OHTaSSv4=&c=Oi9 Is7UHSPWzMUgqt73jjLf1umdpTngXSPRiAN7Rd3Sh/2K0 g1NJgn6t7CIOAYzcDvcemPwjRek3YDyEtolm3Gj/tS3pG1pRaYDZ89yFUEY7y1MYBZ7oPkYCHyPyOfcKh2/p2NcMe4Mr0iDnTUMgasd1Wx1cT7RS1jtPNNuRg=&e=0&downloadAs=HSS-3.32-install-e-550-plain.exe&fallback_url=http://qpdownload.com/data/hotspot-shield/.../HSS-3.32-install-e-550-plain.exe
(52991de5e59d9591d1cd1fd899df33a8)
1 / 68 (PUP)
http://www.dlsignfun.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
(anydesk.exe)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=1uyy5dNrydVJZ8a8/g5g6QR sUNvJapidlrWQE9DgWg=&c=Mtne/ctrPdiPRYaZKoDH2IIOES0sHfWprhQZBAT0dJnwpvQsXqhw2AnLJsrHdXqA8/7OioQNdeKmwzfzugbeK2cyOANLiqlqiAceab6QR1qjcbW0pFXSff kKTon 7enHdj0oNTDwrYlAFIvDdMhVfnDANOxD 1lM/0aTmnhZ8w=&e=0&downloadAs=freefixersetup.exe&fallback_url=http://qpdownload.com/data/freefixer/.../freefixersetup.exe
(e56076ba97499b1e105b748d868bb107)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=CdIS2UY9Qg36zX hX2ezH6hCO7y3BAdTfRsuNjnk ls=&c=D85ox3WXvw5BxEud0k0C97Q4sG LVsY5G6HyiqqNFURF8gBI dcR6xKVai yT1ck5Xiys4JhtrYtoKPhk/4x4qrBb9ObrYN/OniB7SCCFEE3UJG5GOUHUFtjFlSAU hZ6IPYY1Nooy4V20jP5PHjDRDSZFfxI/uDYb6WRo6H5bE=&e=0&downloadAs=FFSetup3.3.1.0.exe&fallback_url=http://qpdownload.com/data/format-factory/.../FFSetup3.3.1.0.exe
(834123b74c4657bf2ecbb7ca8a4b24fa)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=ov6NvcHzVp9ha4btDf5svtdKknTgDaHYKKz3bedjl48=&c=3W1rBGMlHWY54NWqSTX/ArtOcwzge0vv6sRmtXrlM65s3RwNjnBbZsOQowgoRgIHlMUFTXTMiuwDpybSKehyqM4ezJt4M8Ak8UMa0buV MfRhuVzV5oxgy0UrF/fEniaGZm4 iI/KTPLEWXewL1ofQ==&e=0&downloadAs=vlcsetup-win10&fallback_url=http://.../vlc-setup-win10.exe
(vlcsetup-win10.exe)
1 / 68 (PUP)
http://www.dlsignfun.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
(webfreer_setup_1.1.0.0.exe)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=MAdGEnG1g14eJy4pmhjEJz04CmTqlADE9nAKrEtUqcs=&c= 1pacFV4FAxfGwzG0Mn vyKRT2w6f4Zadh5 pSYWXVWpzr9hN5 NTLM3j8nT4VjqVeS0FHEXBY5/KXE2ZPJo8qTenewrt/EPrZiku6hLte7UD4WeAipU9p8KpyDRrdZMTOp0I80VL14XOHhy5DtMHxsVZZZXpJqSCoMzlYg5h34=&e=0&downloadAs=ca_setup.exe&fallback_url=http://qpdownload.com/data/cain-and-abel/.../ca_setup.exe
(0a836bd91546dd3cc5242b137fdaa996)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=/q9fsVJeb/R0N5WYNBgn98cAG16x6ysnR0EJVD0cC6A=&c=0fDmttImWH2WkcBaiVgiQPNvpcg3p8UjUjAdIhy8NXKAVEzSNWvEOm2qqmjTcio5Q/RGty nGdVmb7pgX1dAo18Ahi0sYFvsLX00fkMsnnVC/nMj9NPXM ylV1THs7ztNivZ mNVk4NFiacju9coTaz3AxjE8xwNETdpmZpOrHM=&e=0&downloadAs=Bloons TD 5 Deluxe.exe&fallback_url=http://qpdownload.com/data/bloons-td-5/.../Bloons TD 5 Deluxe.exe
(6ef024f230cfe2b1c600185c64023cd0)
1 / 68 (PUP)
http://www.dlsignfun.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
(custopacks1.0.0.40.exe)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=xIdVF9LFxxHTGj2EbMNvZDmOvUFk9bAm1ojCh5x12 Q=&c=WfKsid8FNKOheIowAu58t3LoFLfezx02WOiwajAEHTMqhttZSG1R8D2oGS3uyhSSYxxJV7U9xmkOXTsKvV8EAX7GGrlYsY1cL2DBPSeQAc6oMSLRWMZwZs9kKPDyPAC2aIorsxdmkiH 6eTTgfCo3amBjgUI5cfSBHCsxonPG/s=&e=0&downloadAs=jezzball.exe&fallback_url=http://qpdownload.com/data/jezzball-deluxe/.../jezzball.exe
(dc40082f1794dea8a8568fffb2bb580a)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=CCUqrAImbw9AooC8SkAJDBdrj9NMrJcM/2UalBg0dIA=&c=wgD/zZJgsP5EtlPAQypDYwlSNpdr2Gz2KM1CnyfVhbK1/Ts1Fr87df0nlFUT9frBW6kQ4GkmlnjEjDN/S229FFs4V3k5AmMTrb b95HfLX511nCPn9oG5 ZisML5s524ETCi An6WrIrIb3ZEUu14dHqeQFvzMiI91ZPJRhyi3U=&e=0&downloadAs=drivermax.exe&fallback_url=http://qpdownload.com/data/drivermax/.../drivermax.exe
(dfa62f5240db093277b3caec34d57dd5)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=a97sbxKbhnNIxs8Lcgzd00YqXluNdg7NW8L2wPdvplo=&c=PadMrA7W1xDx rC2DCUgJa9XQsOVhJF335t6IIk4LKEklUtZ3jl8bmYM0b7y6LZbm3EKFM0KLafCy tcOzaRsBLvFgUkh1D4sJEoZx917R1j/857DEq61Ce/JYuz4 PsS0U0kK3oodLGHpG2RgKEuv5RLRN/Igxcd1Jw63KbMiU=&e=0&downloadAs=pidgin2.10.7offline.exe&fallback_url=http://qpdownload.com/data/pidgin/.../pidgin2.10.7offline.exe
(3e1b736400859fe7426376e771d37568)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=trdtywIrmbczDxHh/TTFjlVLVNRAKcRpsvPPWOm4yOs=&c=H62KDh82HjHffqM6vGTgv 50EzJcIOzIlBq61VjD9Pv2JkJPTRbBkfXGso706tzc/9xWBY6pUqxtzOpA5u8e3j2rPTsZIWQGQfcT4hO5u5D5fAPq4xysnn v7b7vm8eOcYMN EiOMhtFgt9V8SJ7gejzz2chP8RjWFI1w5MeVRc=&e=0&downloadAs=pas_setup.exe&fallback_url=http://qpdownload.com/data/pas-professionelle-autosuche/.../pas_setup.exe
(373c14ef447ea75aad90849d6737c1c8)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=hpHan0IybSWfa3adcJ qoCCA/xtLHS2OSevq1vIQQkM=&c=WQVHyXxjzX 09Y5R1uc0XGR6wGSNUDORUdyTRyS0kVr6o0aI1MJ5yrdmyhj8JLYlNHmRUlKxAxfbgjo6DCIZ6nWRIhNRMS5Z8CBnzV1IT11Oc0O8EVHNQa9Dqqa/5zkBuYhtTiOblahXAqDofFTTHaYi5dP/S0Lo5CRZZE9lulY=&e=0&downloadAs=lollypoptest_s1_l1_gF2024T1L1_d1377397293.exe&fallback_url=http://qpdownload.com/data/moorhuhn-kart-2/.../lollypoptest_s1_l1_gF2024T1L1_d1377397293.exe
(98fa3e937f83a0bf399dd7a5f1c80b39)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=2CPIYTTfoR1iGzuBjDdliwvyBC87wxGnRQiFjkjR9vc=&c=1WIGHMPosPKaXMADDtFRlbcjROIT7UNmzP5JwvSsGT/bbFnz5 HpZiIXfuETDmyuuy9 PvP2t9eUiqJk4acRYLyjgn/rFNiRj6SFVWYHxAkktPze84f9h n6AFEAG1TWByMVXaRPiaRB3uDY4BuFsBjB9ZJv0/pBqHqaIClMYr/ytomhM4FUF3HfCWRezmhp&e=0&downloadAs=OnLive_Setup.exe&fallback_url=http://qpdownload.com/data/onlive/.../OnLive_Setup.exe
(fcd0914b8ee8debecc9e37851306e349)
1 / 68 (PUP)
http://www.dlsignfun.com/c?x=L8larHZRsjlR9fwrgx1uZdhElllcHbdrbIonQSbsKN8=&c=rzZEzdQ6m1gAJ33Fu3aY6P1ODQlUe2Szusy4ZlwZImTKm/fPs2dxd8F2fb1u3x7MU e6IUoGMoprwM2gAoxaolUVFoJzRtTLKMyCNBZjCJHl8rhTfW8USpoCJHgkaohXL9MMBvm 9OtyOvANCIrbcH37I9HK5osmeG4OnaCxGtA=&e=0&downloadAs=Firefox_Setup.exe&fallback_url=http://windows10portal.com/data/download-firefox/.../Firefox_Setup.exe
(8affab8299a2e1168cfe61b2b9d80615)
Network Communications
The following 13 files have been seen to comunicate with www.dlsignfun.com in live environments.
TCP »
52.33.46.229
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.33.46.229
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.33.46.229
:80
citrio.exe (Citrio by CatalinaGroup)
TCP »
52.33.46.229
:80
Client.exe
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
036629fbd4864725737a8ba8fe7e8cd6.exe
TCP »
52.33.46.229
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
52.33.46.229
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.33.46.229
:80
browserair.exe (BrowserAir by Goobzo)
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))
X