home

www.quicksignapps.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
quicksignapps.com

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M), PUP.InstallCore.EST (M), PUP.InstallCore.11 (M), PUP.InstallCore (M), PUP.InstallCore.AITIPROMTOV.Installer (M), PUP.installCore.Docesipete.Installer.Meta (M), PUP.InstallCore.AITIPROM.Installer (M)
100.00%

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application, Win32/InstallCore.AEO.gen potentially unwanted application
13.79%

Dr.Web
Trojan.InstallCore.1723, Trojan.InstallMonster.1346
10.34%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
6.90%

avast!
Win32:Malware-gen
3.45%

The domain www.quicksignapps.com has been seen to resolve to the following 16 IP addresses.

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 3, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 3, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 12, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 12, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 12, 2016

File downloads found at URLs served by www.quicksignapps.com.

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=nsr3gdJOgYQUuDxJ/KqdZVdhAYHSkQ2s5inNF7MPN3M=&c=tPioQwux/PEla8u17s5kI76DpqwjqZ7r9bKmXyN0ZpQ4jjEZdMCcZBM9i enRrc3hc1g fibKhb/MZ5Cc3cR9mQkfBE8BacpAkDiZq4mZEShXrAl/pSILjoTHKwpZTzA&fallback_url=https://secure-appldnld.apple.com/quicktime/.../quicktimeinstaller.exe&downloadAs=QuickTime-12821-dp.exe  (86681f11623fc8ffbb2d16d528d1789f)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=mJO0CFKVne/.../WqRNy28NxrylJw=&c=2ifgzIvAqXihATRkKxP7FBpJif0E TYC9iHbfwLsjpAr4roBBOlCMVLmqyDEpebPE3wx9fL7MrIpi8ROcTCu NnsaE4meBudJRRBhA8WuoEnhP3XuM0rGukCAagTQ93u  (videoplayersetup.exe)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=g7k2ZmY/LT4qoBAbhdFYaLY/Am/38t/NmwXvaSR8zWQ=&c=30y2Akr9HK5t/4Rry zRRxAj13uwJb5RAl4cSvUzYdvZVOoAiQ0f0S9ciZOe90Z0NkXkDY U1eCE swHrxdwFQPKe3Nv4uJrQffw9QdgwPXeSME4JY5 rja7x3xE476W&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=plTPmFy9REstDJl Bnhb1Dw3BUioq2xJHqSUSPKju w=&c=/AYhL52gTobqfwhJgr2NqGimf4/eBYf63 q8MKC3eGTCzzO8Iey/b/TukGcz81vLVs lNCmE2isY55gH9QGIob7KaxIOh LgZBwXvjt7U8 kI/m429o4AUMZC/eIzhnM&fallback_url=http://dpstorage.pl/.../K-Lite_Codec_Pack_1201_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe  (437b9a9432417442618662f891e43557)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=Koi HP9SNG2vgK7e5JDQkRwBKHyE9aBkXxWyBmClsSQ=&c=5Ajc42RgPl4idIl26JzLRWaeZzWl26uZIvMM0lwNdI vVqEWkRfzM4Lh9yiePr4BueKy67TKmGUwMyDO7gOsP5vxl2aqjGKRRrL8PNxDI0g95doyjB vIWjC929nxFZg&fallback_url=http://storage.dobreprogramy.pl/.../SetupDVDDecrypter_3.5.4.0(dobreprogramy.pl).exe&downloadAs=DVD-Decrypter-20569-dp.exe  (b31f7023fa0f22068cc1c98e71b20ff4)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=Si2xOGxlLlTlrzB7ea8TRUF1yADISE/tWTHaOPm9/j4=&c=Sl644KvKtmkdED65tV7nr5AHHOo 8gC6Vp01KRu7 pocEG/ynk0PN3YmilQfMMRXMInqWBi d0RnbzK44irkrEQpLffeXN6lD0qsHxL7onL0/bXlLZo12r1KAXLP0RZj&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (c.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=Bw6yf6yDE0NFndqBNxnziou6Eeu5Wi4WjC5Bwv3Aj8k=&c=dWZVcp6trNe5MBdPwTZkVhwpv8nZN1/jMoBC2AaPe6Q3iZZIKy5kHvJgjBsIxOn KoAfmzJwTuWMLARCDd/ZhtFJQtUNzdeZA1 q0 wYert88tC3KZgPFgE6fXwZIwjS&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (swddcoht.exe)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=bZcOKZ3AUYF0nupTfF6oIjyelyCg92RKWNOfoAy6rtc=&c=GVruxcEfNJd054T05eHNH/ET1qYUYVhFV9 4Q5SEmNMANUo2ac8RB3oCSmEJgmlOdrgF9it7pNTpWNz4yqiHqkV0VwPjWru6StZq1 Gpgtg3mBXr6xwqot9N 4pe5Btx&fallback_url=http://storage.dobreprogramy.pl/.../PhotoScape_V3.7.exe&downloadAs=Photoscape-12505-dp.exe  (db6943540b71b4e98540a7475da4ed36)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=rKO8LtUWuln2rbKZ/jVN1EM1jEYEOZgxAcZVZFJVCL8=&c=BZcQJmae9Ec5QOz IaRn0YEFn6erGT8MxZsnLg1ZYMN0rYPXpM EfaPo437FU/ dRvhhgxKTPBPxol Jey/JQzHLm0Pjk33W7aSqsEUPhZmExYakt /yfRsKvDLtDk20&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (beb9eeba2e04c0b85cb79fe3c9f15475)

0 / 68
http://www.quicksignapps.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  (businesscards-mx-12734-dp.zip)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=8nrdIuhq11UsQ4XczdJhSU92tdZlS43uX6uyBrc3s8Y=&c=pshDwc L4WGdPf0n434eVVu4/LiEa/n3lM5OB04V5dOrYGZT139 hqSCZzYbKiN2ri Cy/o/QVtz5 qf/YKM4An1fShqcybKfPWDqT5LcCIMNfVdNXh J2zfRBCQi/Yf&fallback_url=http://.../DriverEasy_Setup.exe&downloadAs=DriverEasy-20522-dp.exe  (icreinstall_drivereasy-20522-dp.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=CX0YcfmEPFDtTxIRfxpQP6xXQaAGS7ZeJgxZsA0aYvU=&c=6v14 vDe2 DKygs/LzHqexjRgi tDftxlE570Bg74cxTPB8vs5ZspC Dr/KJwKKEH873/DUUahL5D Ml/Tc5loLwzPINh1Un3xCMQiBIb8MNj8md1zcm3QmnzZ4f6EA&fallback_url=http://storage.dobreprogramy.pl/.../MSIAfterburner.zip&downloadAs=MSI-Afterburner-22659-dp.exe  (124e58c3acc229e4fd9174dc968f229a)

5 / 68      (PUP)
http://www.quicksignapps.com/c?x=mtnDZ3zJ1kiVEZUN3TdmwvQPKwD9QIjGIG1X8Ap HRE=&c=ELRfxjWwytNdejFo8ORVqILeZWlfZk5fhR/9t7wg7gzsdgr3gc6xZeosxWYt9E2E73btp3zyQmpsJj6phBVowQ a/7t8nL13mIvpQzJLeW4LIFpjqF4KfDJ7cUmrMgKs&fallback_url=http://.../bdcamsetup.exe&downloadAs=Bandicam-30315-dp.exe  (7bc3b26da6a377df3aac9953be80262f)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=aV VqAPps57BaMI8W0S01cTBxChztpcag xVvJ8nacs=&c=lYtDZajkgxFWa PfR8HYTsxFEw84bK0f7oQm10fcsdsmTlfdhK4ZDDHHI8BTMkgDdW9C kj1kNwUk4vQ8xpgvUyxTEGvv/w5Yu1N7rF3Mb2WpPTh3ioLcxP29Hq2hy9k&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (56ac583ba0712abb2337854c79d90650)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=kR5DHlTac5FBAERW7RF/mbE8HUqpOP9U8zy9exLthNc=&c=kXhs4vwLivdfkADEXrgu p7IZBbJ7D6CrA4LZlTbulHR2vALQkUIe9unsWiEAAeh2CTj2k9myBHYdPWKW7kDWVGzEOxVhJoal rhzLZqkQjPIrYdCYINLdc9jzQ7TVRf&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (8ca630cca3945ecd0721788fb2f2ecfb)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=zuPmlrhvrVv7h4Yzd5696vKVRg1/Rmm67rcdWOU9KCM=&c=ME4pIt3N85Ois5rWIfSolVc9Inq3KHhWeurAOOhxGFPIt3DPuo2Gj4cLXGqPUCc7IpmMtEGpW3EzizGPgUhMw42FSefsmYCS80C4mS1cWnrdmN79TaZYG/ONlLySZVE0&fallback_url=http://dl-ak.solidworks.com/nonsecure/draftsight/.../DraftSight64.exe&downloadAs=DraftSight-20332-dp.exe  (5fa0f714a4122aeec72e38b5030a46c1)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=MSdONCtFCThi2g0SHCrmtp064FL5iQzP3QUjil43ESY=&c=RD5WmMa06OmQfP5F0Dyvwhjb1ekRq9M3c154PmCgn9j703SQWNAziPlVvHlt/ks B93aAxN9WqNuVTCruCmp2qf1fX576 oAEV9/RMCyIQ6/pvc8GDsxQU/90QlaHZFB&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (09f75fdb5f74388177848b7761908f76)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=W YRAepZ5sJ7qcylWaU2Gpx551oA3qGty0HlQ8vNBaQ=&c=NWpAEW6jIStFwPU5sclt TRDLzI i6gSnXLSu6Yu51rW8nR8uke0qVgf7toN9p8xxA/ 5g2JAYOl6II2zK7N6U2WFCHFImfM5oMvRyTHet7nSPf/P0Xv qDr7pt4mIhE&fallback_url=http://storage.dobreprogramy.pl/.../unlocker-setup(dobreprogramy.pl).exe&downloadAs=IObit-Unlocker-26902-dp.exe  (4fc324d493136ef5e30889a11d324f4c)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=X2vQLbZzBw1RUA5cBAocKb3J 7rfGabZye2Wta7dhEU=&c=AGylqaOJbpp5t5J3jmV7Dj1905CW3NqJNzo 2z cvmdYJczz63JleSmwtGcqj2fMtQ2aPLW34hu4eWjaOklcHec7KsTcNCBbw1ie7JxZm8x7buq5MKPORwPK r8sMSo4  (flashplayerpro.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=qhgmymXT7Op0NrifNKUkUL5lkCI TdzeYO4qxCr0JA4=&c=Fehm1ZLmrH4PlXyKDY5 oyIgKfKdJG35S 2DscRj8arNTiHM5UxXlqWnf20xZtLK9Ka JYIAuplFa3kBodDGQhzcYPqXYjfZMVvBbqyrNRchoh6u3BNrLn91bRdqPpNX  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=9HO6G3Nw3TsQlDLvQ QrsU4pZ52su3wEITaFjzvHL k=&c=sMqIU3tZPavpI88TaNNMYw59og/2Lua59iWBhhtMd2tb3biytwoTEGZqb2szAgCjiBgpXU90iMTvt/npKVItliSrK UO8c3qnUWSjvyp1pZEaovhsgH1st n9owP7X/1&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=mKTuHrUdkyJpTrL Mtqxvzr8UOSvubkTrNXwFC8aEeA=&c=GYodixmOL5NfAExLP7H0UdWOpAH69awbriRBZeS3jtMfT2KV1GdCU015KR1NAeAISCQdsiENZspom8dNAtH7YNGcWHfJiW9Y1YNIKlKy6vE6LLHfdyDaMByermj2spgM&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (aa1d8589beb984d2c12df4f1da2a383f)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=tqB8RhM83qJD81tkqLAJ4ojJc0/tncSw1OkCp9HXcKw=&c=YKjGVq1QsBCJNDFsKqz3RA/K6IxAOiMcE52jJnKQ/.../XL1VTo8NfmoejzQEObGdjWrvYSbfpMwDfePa47 WNICLAYxZNH90EEgtN5ru0hvwNi  (javaplugin.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=YsuqC1odCKiM clXH4ROLVHdqAT/pUS9uN4eci7uAZ0=&c=/lzHwQ7Ko/qO0n0DrOFbhgDp5R9FVIlQ8XqVT W4 iD/F8n0p/.../RRIMs1goE0OgBmxXu  (javaplugin.exe)

3 / 68      (PUP)
http://www.quicksignapps.com/c?x=cidPZjnC17PUU8VHEojLCbfAYwcbZSaulDvvjEcAKZ4=&c=akQHfFkpWfYOaIUMiyhfEKMSbmgnsNNhh6RM papODSrawT P6aWcbuz8jWYNeiPOwDoNp2x6XUAsiEMZtn21YcMNNf9GKjXbGorV3UiW2FmWs1bNOZQVhAAD0EKiQiz  (javaplugin.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=NXyoqILRYI7MJd8oZcWpk1aNY2OMi6iYKE32 KErY1A=&c=rRllbJYA52fVf AK5Ppm6Zzx8 YA2GOka/wvJHch/POwcJKD1WHIircu2fX3u9tmpjSW8Tf5uoA9PcuK0cgErjgXrTOF wT uPNY7MyZNgTC1G/UzNn4HnOyhDX7AW/f&fallback_url=http://download.cdn.torchbrowser.com/cdn/r/.../TorchSetupFull-r0-n-bf.exe&downloadAs=Torch-Browser-38208-dp.exe  (icreinstall_torch-browser-38208-dp.exe)

3 / 68      (PUP)
http://www.quicksignapps.com/c?x=T73vt jnrq54dzdV6V2EaQLhT0PKLYAs2hoDQ2taXRQ=&c=L2f5ueT5Z25EWVinzOwWSRHMWByKUPZArfSK4qRjLlFLMujb5fWez IAwhgvmrtedZHGxYuYBGum8L7dGpl4X8qCq8M8421b4pGSCGayZ5NQvD7J0X/9rP8cNs3hOLdB&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (667261e4955339e66e5b79b8d9aac83f)

1 / 68      (Adware)
http://www.quicksignapps.com/c?x=JcZbOBXnXROoFg1TMtNblKlzCs5A5TDOO5fNDYUmB68=&c=VlQbs/i5mua2IN4TeVCfb0MGtdDvBUt4oVN5mIyIq3dwKvZZqtd2dog16AwiUeKbN84hT6nucU 37FLTmIRxhEa0W2pqqTz1VEyupcs7Wd4I80v46um10IQzLNcuBVT4&fallback_url=https://github.com/airdcpp/airgit/releases/download/.../AirDC_Installer_2.91.exe&downloadAs=AirDC-42455-dp.exe  (37bb922a201ddf7ca6f18eea7546507a)

3 / 68      (PUP)
http://www.quicksignapps.com/.../J7X5DLyDOrlZeVEXRINkE=&c=duBIFKtCpyy4XDUnVSXASgTw6afWSttvv4xW5THLo6ZL3AZxS0yeWtMa3D RK4dFDgJfHYIn1Jarsrn57 Sifn75pfPbehvnscYZJFaza 26wzo18RCIKn0RdUf6ezbw  (JavaPlugin.exe)

1 / 68      (PUP)
http://www.quicksignapps.com/c?x=4zfMwVx935mvUkxRCwpfvgZ1USqCHLG/.../4bR06m8mtIPYLvDCYAZUkjmN2APY32qbWjYhaJ2B fmVeor aMoUsqQWbb6aWqUz4KK0ZoSdUMh5 5p64QawA2j  (videoplayersetup.exe)

 
Latest 30 of 31 download URLs

The following 23 files have been seen to comunicate with www.quicksignapps.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.