home

www.headsignscentral.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
headsignscentral.com

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundle.Offer, PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)
100.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Agent
2.22%

ESET NOD32
Detection.Undefined
2.22%

The domain www.headsignscentral.com has been seen to resolve to the following 6 IP addresses.

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 16, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

File downloads found at URLs served by www.headsignscentral.com.

1 / 68      (Adware)
http://www.headsignscentral.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  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVEpDUlZCSGEyZG5hVmRJY2xCdVkzQktTbFptWW1WU2VHWlBaRE0zSlRKQ1JYZGhNa296VEd4bWRIRm1UU1V6UkNaalBYZFdOVEpSTkRKTldGbG9SVkZtVVNVeVFqVnVhaVV5UW1WNFpGbE1XVnBPUVdGQ09GaFRkbUk1VkdSc1Ewd2xNa0l5TjFZeU1IRllia3R5TW5oaFoxVjNkek53WTFGQ1pFNDFaVk5HUzB4UU1VMURkR1JYY0ZSWU5HdFBXV1JhVTA5RVNEaFJhRkJOV1ZWUldqQTVVRlpRVVZOV2NtcHhUak4wWTNkWmJXbHpaRk5tUzFOWUptUnZkMjVzYjJGa1FYTTlhVzV6ZEdGc2JDNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ptYVd4bGN5NW5aVzVwZFhNdGNtOTFkR1Z5TG1OdmJTVXlSamQ2T1RNNExtVjRaUT09  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQV052VEVScVdWcEVkRm8zV1dWQ2J6RnpVWGhVZWtGRFZVWkhZME5IYzJJNFIwNHhOazFZY0ZoNmNGRWxNMFFtWXoxT2NtcGFPRzVpY0ZoT2IwMVRUREpRVm5WcmIwOUxPRUZvVm5OelQyOUxXSFJxYVhNMlJHOVNaazFDTTBGSmNsbGllSFJzUmpCNmRVUkJhRkE1VmpKUWFXRlJjakJPZVRaWE1VcExVa0k0UkRKWE1DVXlSblZ0Y2tob1IwSm5jMjVoWlVOS0pUSkdORk5xV21wU1dqSjJRVXRsYmxKbFR6bExkMUZ5ZDBsM0pUSkNKVEpDVkU5M0ptUnZkMjVzYjJGa1FYTTlhVzV6ZEdGc2JDNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ptYVd4bGN5NXpkSGxzWlcxNWMyVnNaaTV1WlhRbE1rWTNlamt6T0M1bGVHVT0=  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVU4zTkdaa1FqSkVUMk5GYkZCRFNYZG5TMmMwYkhGcUpUSkdibVJWU1hsdlExVk9hemh3YmxoSVNXSkdZeVV6UkNaalBYVnhiVzVUWjNGUlV5VXlSbVpuYjJ3eVRsRjNUa0pvYkU1dVlrVnZaakkzT0dOR01WWTVlQ1V5UmtJMWEyNXBUalV5YUZKcE1pVXlSbFpMZDFkTVMwaDFjelZXT1RWallTVXlRa1l4U1c5cFpGUldkRkpYVGpaV05tNUVXbEI2V1hBNFVHdEVkazFUVEhkREpUSkNZM051VEZSMWIzbFVkSGhxY2xkQlpIVndiMjFTVkRWNVZsaFVWU1prYjNkdWJHOWhaRUZ6UFdsdWMzUmhiR3d1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR1ptbHNaWE11YzNSNWJHVnRlWE5sYkdZdWJtVjBKVEpHTjNvNU16Z3VaWGhs  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=bRJdoktJnq6oM1VKGZxdjqfi8WzuzjHiSNT5eHONzrY=&c=f1KQ7Ps9ghefZIO4B9oHz1qR9tClmPBeIKJVTAiF5b/wG uAPo50/EYJ6QZy51zm1EhqO1GiTyCogn9NJRSWV7Z8mJ1Awd1NXjzI7Lu9UPL75E4AftjzHipd5GGSAOCs&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (8cdff3ffd061a45f6a1a7ed0c7e78c97)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVm9sTWtKcFFtNUpPR3RFV2pGQk9HWnBha2hNZGtjbE1rWTNlbFo1VVhscVRXOUJTRkYwU2xsbFFXSWxNa1pHZGtrbE0wUW1ZejFDUm04elFtcHVNVFZZVkdwT2JsZHJUR2RYVXlVeVFuUjRjRlZhTWxKcWVFRmFlbU5SV0cxbk1Hd3pSall5V0VweU9UbGFRM0ZJUlZkbFRuTlNRamxvUm1sblZYUmpZMlo1TlRacVEzTkJNbEZKUzNVbE1rWktOVVZ3V1RKTFdqSlZOV05EVEU0eGVGTmtTVGRFUkhnemVsUjNKVEpDTlhKVmIwSWxNa0pDWW5RMmVuUnljbGt4Sm1SdmQyNXNiMkZrUVhNOWFXNXpkR0ZzYkM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWm1hV3hsY3k1blpXNXBkWE10Y205MWRHVnlMbU52YlNVeVJqZDZPVE00TG1WNFpRPT0=  (install.exe)

0 / 68
http://www.headsignscentral.com/WVl6OTRQVFpsZWs0emRFSlJSMFkzVlVoRU1tWkhPVVpFYkNVeVFsVnRhV1V6UlVGVUpUSkdZa1E0TUVKaGQwcHdRM0pOSlRORUptTTlTVXhsYlZNeGRFY3phU1V5Um5SMGVXbEpSMDloTVhaUGJGQmxPVWMyY1dWc1RYb3dZVzVKWjBsblRteEhSVWRNU21kWWFITkNVbVYxUWxCVmFuTnBVRGd6VUhOR1NqQXlOa3RsZG14b1RYZFFiVnBDVTNGTFpraGxNWGRIVVZvMVFYaGlXRGxCY2toM1dISkplVmxxU0RKSlMyVmhXVk5GTlc4d2VXMVdNV0Y1Ynlaa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdWMzUjViR1Z0ZVhObGJHWXVibVYwSlRKR04zbzVNemd1WlhobA==  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.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  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVWsxYTBaR1RWSmtNRnBzWjFSVlZXMXJlV3N6UkdWelVVODFWREUyU0dGVVVWSlFibUppUkVwUlFqQWxNMFFtWXoxcFZqZHhiVzlsVWxkemJteFpTazhsTWtZelEyVldNbFZvWW5oR2FuSnZSelFsTWtaaE1EaG9OVFpVUjA1elpsSjJKVEpDTldKc1Z6WjZZVTlLYTFWRU5YUnZlVzVIV1VaMlZIWkZURmh0TWxGalYxWnhPVUUwVmtNMlFXMWlValJzTUVOSFNEa3hOVXR4V0d3M2JGWjJRMHc0VG1WSVpIcEJZVWhXVTBNNGREQkdOMUZZZFNaa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdWMzUjViR1Z0ZVhObGJHWXVibVYwSlRKR04zbzVNemd1WlhobA==  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.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  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=aJ53q6yhQS8816z MbBrj9/WZQQTe97wkP zaYpySqg=&c=FPFDr3KBA938C9/UPoVXSncB23LbCwTZ08agCdoEdWa3Bwd1LsxZxhQD4tIybMeMa8Ze9JOwJXfv/96gpAa3X0ZUOZMqIn7tT /h6vyMqJjncF0g8Xs1RYZO8 oDWaa2&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (4cbd76b713958d51ef59b583ee910ff8)

1 / 68      (Adware)
http://www.headsignscentral.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  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVVEwSlRKR2EyMXphR2MxTWlVeVJsbFZReVV5UW5GUU5XNWFjek5hVDJsMmNuaGlSVk54WVdwMVEyZzNiRWxyYTI4bE0wUW1ZejFyTUhKWlVFMXBhV2dsTWtKdVIxVTFVelY1Vld4MmFHdG1WeVV5Um10UE9USWxNa0pLZEVObmNsZFRibUUzVm01b1NrSldUbFJYWkVOSlZGWllORk5qTUdRd2VpVXlRbXRJYTJwT1RHSnhTRU5HUkVGbWIyRm1lRWxOT1ZVeGRUUmlhU1V5UWxreFEydFlkRGh2VnpaSFVUbGtTREJaSlRKR1kyWjNaVEJKUjBsMFJUVkxiaVV5UmpsR1drOVJKbVJ2ZDI1c2IyRmtRWE05YVc1emRHRnNiQzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtabWFXeGxjeTV6ZEhsc1pXMTVjMlZzWmk1dVpYUWxNa1kzZWprek9DNWxlR1U9  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=0Mks8zh9AL6r/cwUrjnlIOxgaIFxOh78gyOHRJ2egk8=&c=qTGEISdQWPT10Nr8iyYzI 9q7bbxz75UY YvL4eoi7s/tm3LLTADmi2CTst//qW9vk rCt Z57kWTqrZW6Ftw5HGxH/BV3FB6Q9AcQOsamEKd6Um1JHInqMClZJbdGcd&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (8fef869c1eca6f3dcffffa8572f069f9)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVWxvYUdsMlEwUlNWekJKVEVObVZ6TjZPRE56UXpCd1NUQkJVM0JMTld0WFdsRmxOSGhZUzNOeVdXOGxNMFFtWXowMmFYRkNTR2x2V0RsTE9Yb2xNa0pCVlRCV1RGQldKVEpHUWpORE5YSm5NM1lsTWtJM1NUQkhXbmxVV2xaWFNYSlVVM040UTNkcWRYSkpRMUphTVcxNU9XOTRVR3BGVlc0M1UzZExNMFkzUzBocU9VWjRTWGh2UmpnelpFeFNZVk5HVVUxclEzVmtWbk42TVRoSFVqUjNOMUZwVDIxS1NuZFhRa1ZDVVZKSWMzbEJUbmhDY1Naa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdWMzUjViR1Z0ZVhObGJHWXVibVYwSlRKR04zbzVNemd1WlhobA==  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=fwXkXw5S0DRyWhfgpJj0gqOXxkN3xKVkOlcVpNrDVsY=&c=WM0TxJVPWhpAzjH5RgCwJ0FhwiSGFLOCtJLHH2 PrOMjl Dj3RCSMgAi5sYd DsNXOBm8UOwLpsa1gdpmx0LQXI88d0Mofkci2nFQ6 Q35qP0JW9itgpeS3MPo1Jg ek&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (8b99058bb9ed5771ef2e8f8b4563d7a3)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=KGKKJ3dUAjJ/nxWqmMrLwydQYrJOiruTqBZiLBQry6U=&c=WR Ogz41VuBuCgzPIulJr/SDbh0DRugn3jYahfwr5fCKQY7sFXb3BjFyseHH/OvJzOS/wkGUoathd2TmlOPqMjmu3AEvpS6xICOipJEkklJQxh9R8rmEbpPLWsq06sdK&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (a6b37e8b57c91ab8922024d4b5de8f32)

3 / 68      (PUP)
http://www.headsignscentral.com/WVl6OTRQVWhJWWxsamJtcDNhbUZFVm5rNE1rcGFjVXR2WmtKM1prOGxNa0oyUzI1NFNWZEhjV0pNTUc1UFVtTlNieVV6UkNaalBYVkdWbkJtUzNkTlFubFpZMHR2UTFBNFMwVllKVEpHT1ZRMVluUXpVM1Z3WVRsdWFsVk5VR2x2UWpOV1NGTmlhRFpOUlZKbFJXcFdZMUI0YTBGc1RsbExZVE15SlRKQ05VaGlkalU0YWs5TlpqVkJaekJJV2s1cmFVbHNhRFZvUTJwd2VWVlVUSE1sTWtZbE1rWmhUVzVPWjBwRlJ5VXlSbXRhTTNGWmQzTnJZa2Q2VG10TWQwTjNNU1prYjNkdWJHOWhaRUZ6UFdsdWMzUmhiR3d1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR1ptbHNaWE11YzNSNWJHVnRlWE5sYkdZdWJtVjBKVEpHTjNvNU16Z3VaWGhs  (7zip.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVTQzUkZoTFV6RkVTSFZ0UzFoVVMwZEhhbEZDSlRKQ1VsSXlUMEZRZVUxd016UmlhRlJNTVZCcFMyZ3laeVV6UkNaalBXODRjREpsU1hVbE1rWXdiR2R4TlhVNE5GZzJiRFJUZG1SamJtRnZaMXBvZWtack9DVXlSbkJrT1VKb1NrRmlZVGQyY0hkSlpuUllOSFJVZVhWdmFuRk5jemx3Y21kb1NYRmFhRVZXVW10Vk5HWllhR3N4UVd0d2VWZHBWSFZEZDJneGIzSlpSVk42YXpSWk1reFJVVTlqZW1wU1JsQk5NWE5oVVZCallsTXdiVzlRUVNaa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdVoyVnVhWFZ6TFhKdmRYUmxjaTVqYjIwbE1rWTNlamt6T0M1bGVHVT0=  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVlJyYTI5M1NUWTBWR05vVlhwRUpUSkdWVElsTWtKMVpuSm1NekJqVm01V1IzcEhlakp6Y0NVeVFqQk5lV3hDTVUwbE0wUW1ZejFtY25OMlEwNVNZVXRpUkZoUmVYcHdNM05oUTJRM2NUQnVkMWhCVVZwU1VrUlRTRWg0YzJFeGNqYzJaVUl3ZW1acGRtSlFPRU15UlV0VVNYUlJSMEZDSlRKR2VGTTNiRlJHYVhSeFJURmpaRFZSVEZJek1FcFNlbkZhWXpaNmVrOXlNbEZtVm5sM2RsbGpSblptTkVWcFpIaHNhSGRqZDI0NU1FeHRjRVpGVFRsekptUnZkMjVzYjJGa1FYTTlhVzV6ZEdGc2JDNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ptYVd4bGN5NXpkSGxzWlcxNWMyVnNaaTV1WlhRbE1rWTNlamt6T0M1bGVHVT0=  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVnBPWTFwcFdUbGpWVVZZU0ZsNFZqSk5RU1V5Umt4V1dWbERKVEpHY0ROVmFHNXpOaVV5UmxwU1NreHdOVU5pY2pBbE0wUW1ZejFTTTI1MVRVMUVSVWxwYm1kRVVteENhMnhNZVV0aVdYVk5NMnhCVVRRbE1rSnFXR2h5ZERWUlNIaHBPVlZLTVhrMlJtczNRV1ZCZDJwdVpGSjJVRFJrWVdWaWFqUXdlV1ZLYURsUWMzUmhkMDVqU0ROSWVUZ3dORWNsTWtaQlQxbEJWRnBFYXlVeVJreFBPVTVXU0RoSWJIRnllRUpYWjJFbE1rWm1WV2xSTlRsQk9FOXNaVkoxSm1SdmQyNXNiMkZrUVhNOWFXNXpkR0ZzYkM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWm1hV3hsY3k1emRIbHNaVzE1YzJWc1ppNXVaWFFsTWtZM2Vqa3pPQzVsZUdVPQ==  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.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  (install.exe)

3 / 68      (PUP)
http://www.headsignscentral.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  (7zip.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVVpSUldGMGFGQmpNVzk0SlRKQ1dHNDBOSEptYWtsd2FETkZhMjFEWld4cE55VXlSbEYwYTA1T2FrbzNibXR2SlRORUptTTlZMmt6VlV0SGNUUmlURWxWZFVKU1JUVkJjR1JZY0dsTk9HSkVPVFl3YVdwWFlqSklNRzlET0Voak1tWXdOa1I0TTNsV01XRkZjWGxNVWpoSlFsRlVRMEowTUVWcVRXVjRSME40Wm5GU00yRnpWamsxV1RoVloxUXhkamxKTTBWNk1uTnRTblkzVEZSTFZEUm1ORzh5VVVkVVNGTllTM05xZDBVbE1rWTVSbkZPTUNaa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdVoyVnVhWFZ6TFhKdmRYUmxjaTVqYjIwbE1rWTNlamt6T0M1bGVHVT0=  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=SB35v5J9IcHhGyy74a gOPedYmRckvL0 XeIuWcxxzs=&c=W3T5Htr3oEGjsIN52Syzme8xshkWxxT4HFO8sczb/yZHjBoXXQKT3upfxdUeIrsmjaa1PaMtpyZq/6iBWXY3FDIwIVa1IhMDxQEH0h1wARCaBX6A2j3IYAUVgfcwLEiw&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (711521f912eeac8864d37c4b313bd546)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=5pJyQOCtdEJdJfb8AkL9SjcqCS7upT4TNOscmvoVr7s=&c=9uO7QRGN3Zept0aNOOTQr12wASanghmDZXM5ybvfQ5IqpyfKJnj3Cw/fKIRPUeorXt bsKtubdcICke/Ibs8qxkhi9mX8NzQ7RjUb9Y80S sff5xoy5RFGqJdxLdQS1s&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (9e027aed82ba061cd87841ee27317eaf)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVkUzVmxnMU5USTRla1ZUWVdweGNtdE5SMnBYYkhsQ1ZsTnZiMHhNTUVkQ2RWWkpTVWhvZW1WR1MzTWxNMFFtWXowMlMyZ2xNa1pSUnpsc1pXeG1jM2hRVlNVeVJucFhTMU5oVFNVeVJuWTBTbkZsVm1sbVFrcHhRbG94WVRGaFUweDVhM1EwY2paM1QzWkxaekpJYmxkbGRqazRPV0kyVTFvM2IwdEZObEUzVmsxbE1XbGlNbEJFVkVsUVdrSnViR1p3SlRKQ056QkVaeVV5UWtOUE1VdDZjVWxXVEVWbVMzWlpZbFZYTTBJM2VWVTRkMlptUWpGdFNrb21aRzkzYm14dllXUkJjejFwYm5OMFlXeHNMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um1acGJHVnpMbk4wZVd4bGJYbHpaV3htTG01bGRDVXlSamQ2T1RNNExtVjRaUT09  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=o5LALS5XHF1V7btD4Gc8sKL/Ms17P5cWLvC71103HvI=&c= hxMHe8NV4MTgz1sizLRKW7DPejhDDJyVfHd6x00 RP0RvXVCHMraj/Hl6fW8pP3crsR8L9TCxs8MT7xKbMd0OkK2eua9Baa8IxIsk5nHiAfZXp Q 7V QC5iintSn3C&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (81695c0955b81866c5009cdb04263edc)

1 / 68      (Adware)
http://www.headsignscentral.com/WVl6OTRQVTR4WlZWQ1Z6RmlWVk5EVUV0b1VVSkRNRkYzVlRnM2VGUnVVWEJLVUdkak9VYzVNamRrY2xseE9Wa2xNMFFtWXoxRVZqUjRiazV6TkdGblZXazNjVlY1WmxjemQxZERURkZpZWxCWmRXVTRSbWhVYzBRNGVrb2xNa1pvVm1KQ1IyWjNjblE0TjFsaVNUZE9iRUV3UlRoUlJXMHpiMkpqZW5CYVpFczNlbkpLVGtkdk1WRXdVemtsTWtKQmIyd2xNa0pKUmtwVU1rRnRUV05LYzNGSlRta3piekpKTWtGb1ZEazFUMm94Vm1sT1ZqQlljRVJQWmlaa2IzZHViRzloWkVGelBXbHVjM1JoYkd3dVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdabWxzWlhNdWMzUjViR1Z0ZVhObGJHWXVibVYwSlRKR04zbzVNemd1WlhobA==  (install.exe)

1 / 68      (Adware)
http://www.headsignscentral.com/c?x=edzZAClw9FNECg12V2 M8j3P0lN/KEvWuVKr2bfi9a0=&c=7ro5JWJsOmM7M0zMIC7/PYtvm0kGtwNmNCN7m0jtSQ5mKN2GXOFWZYC6zwjeJdwbpmELZfc76vD4gvbXKbuykDaoETc2LID32u5V10MmxKDVWlu6eCLLN7STlXgyt7Kt&downloadAs=install.exe&fallback_url=http://.../7z938.exe  (9c8bd551d704f16c06c272fe2a3aed19)

 
Latest 30 of 277 download URLs

The following 6 files have been seen to comunicate with www.headsignscentral.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.