home

www.signappcurrent.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.signappcurrent.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Sunday, February 7, 2016

Expires date:
Tuesday, February 7, 2017

Updated date:
Sunday, February 7, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
signappcurrent.com

Whois:
1 signappcurrent.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.GERYONADS.Installer (M)
100.00%

The domain www.signappcurrent.com has been seen to resolve to the following 15 IP addresses.

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 29, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 29, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 29, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 29, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 29, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 18, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 18, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.signappcurrent.com.

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=9dcV0uPyOOO2dyv7WSn0n1QipcNLmKddyRZad9FACbo=&c=6XCqQGeoXZ eO3ZudXBD3naeABXd5mq/ZPjO3n7ur7siXMk32XtHioiuuIryzl uWuacvEwY4uVCCRCoIw678gGW7JYBmYzQPMiw/MMN5mJamo74F9FwHQO96WhRIa1J&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (35fbc1479ea219b83801efe458cd2ae9)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=eodanLr4aUtbwLm2HnETmQI6 28DKSci2fCBY9lrVss=&c=HB33ZQn6wh62AMkz1aNiR lASo9A8r7awKaM5LONqkrBAhF1W5PC5do3Lki/dU6lXV7gRmxDt6sdsdtrteYDlyVqs5M jhr9cKJFb4RWoWbT0Tdn46U4sN8ddEXiMpWb&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (1cb2a16729fbd15bfbf8f9aa4f5a59b0)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=6aQisDB1LwxEcMAoiXLidX21CQpcgy/Pp sv0IoNDt4=&c=FsNWC7MRn7a XjAcRQBgtjlraU7KnSGobQAKigmubLnV4oiImAFcG6EouwtZ6N76MP8UAAAL6yF45LhV8xco1rvLW9snGXK8cudgq/FramfFjrbkiIOzY3/ZFDnfVbGi&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (497604b6a17a9f1aff1300971021120b)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=yuwHCftZGP8jWvNIvSt2msQ/m0kr6yjloAXDDkUuDMI=&c=KYg/j644Ef9NMjhCsshNyAwxkCaQK/egnlriG4YjqudbZFHGyy 2x h23n94WcKVwEOultOKc/hc82cI/WucgIT3/uJAYUyV62 3LOcXPF1y9yhWZzwxALZkl/ocrbWs&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (497604b6a17a9f1aff1300971021120b)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=cumOJFJs3r5anOUF2 zkoNhpyYAuQHzqMzkjllAlAyc=&c=i7znl53nIP8jpa/UIpTplBFdjn58WH7eOwD4mGDR5 TPxNUGhw7zjQTPX7nL8051 Td DdQ59C Ji2gmytRTfwnqMxY1RBnQ8eFPw QBDm91kjPGK5vI5 PsK88F4slu&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=WVecX1YF0RzUsO4Xoh1 lmeBHfH7ZNc4H9N5KbliyBE=&c=c2/cWDLxW kyXSwl9eg3jiw0q5obMxFMI1 ByShznk7KXXVTMdI1w1anEseOM6WDT95SlqlV4WD7oNTEwJZHAd4 O5gux2hcUASgMVbu LnRHtkiITODjeb40yLSsYmI&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x= 0WAHW//M6su8fBiUi0BV B7fIic9iPv Xaqf17CptM=&c=XGbw8DVrrGjxPEzZ502QkDQDpW24XHKV07qaOJ90Yw OIMc7GCyKS118uGqMScrxMwfzA1gT4iiHSZJhdVCRRoDwVVTLQCbfvtmILTZJkqrVrmkp6vdQjZZ2mueeRuv0&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=aHJuhxHUe0pElvMsGFGI5mI4xy pm6HfvMPoJpt8xDg=&c=lKj7tKX/zF0SnMs21n7Eq1vHqENrsIBTbnIdOC8jNftvlRBYtWPcRIzNFi7Y0 5bPmc3ZIaQPtRuZLvXChfPUaAJAFZWZT 4hjTibQN8aP8xtYyopUUT6z1MzWaCem9v&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=DMiG/PUaJMwkyl2TBt3kVWRuO vsZgAnd dAAGgtVqI=&c=tlVkDTq9pVflWLa1IdI53lKVS9qEBaNeYJ2t0e/Rbl1WntXOHzBDiwXvJwieJ9MMuolq9cNwynGpFTEYYWgf1zLrg5wUhyNLjJBNvE WJTHe G8w09vUzmkI2TVNrhxD&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (9c426298855f1c69044d1fe2fb47d274)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=Z7GZ//1LmFZXtAz0d47/LhNbtwRHxP00o TY5B7eD5w=&c=wh0GBDH4JALL8XQ/kjrpOIQ4EKeX48y4N WZ14Yf1Uroushl7TK6Lsl 8mQrxtvIAQkPwwLN/56bJmD0bWeE9VI6jw1vVF/JSA/nPw0Q3JpOeBVJBzSzI673 sCLyog4&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (9c426298855f1c69044d1fe2fb47d274)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=EL9Yu4Lutnpx 29OvTkhcpaitwIsVUZnTuKQJaWnXxE=&c=TiOnIRALZs62h4o/gQ2SeqSxuv2YolCxU5FuEeL4CigjIFHirul7a1EkRxIVNLq0oPOtNByHW97ywfe6bCvHkFnp1HLAqhYTbQKbOs8hh8tV9XaJ28ppjo2Ir3PPZLIY&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=9dH6Wu68YcIqHKIOWcVSUJYjXDeYwlIxi1q8OIQA7K8=&c=Banv4fCsPboqbbiiNKl RpGDqxTY9Ssj9BR9NLCwDpoV4GSM5FK0551grDPCR4uoKVvVhxpfBrGgQi5Z5/i9GfY5NP wEUHLc5Krdq5hLat0uVEAetFeoVdS6zyPxoT&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=REAlnSmPC1bXXLj2b0OHp0aCb2wdge6U99bceXPndo4=&c= laKVf6seYUX9GckRPnEvJkrOg7cJ7 hVT0ipvx8EoQZpoHAsLrQws9dFNT263oK/ruXPKQWV9WMvH4qdTLzGd6GVtAFpC7nE0/S/K70c1pEXi1OaXCXJNSy7YGdQwsK&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=tE3W/nUqsVH2B3 VG8HvPWZqY9UuSQ163 RC80jxa8I=&c=n6nBCZIEi/HOPS7dz7xfxNCs4wE52gwSSTjAFrNTVL28l6ry6u5JP7Hum847isZLUG1td /Dh1LXch6mX471F2x15j6nQfGbpW2aTzl0 oYIvtnyNUDlEW6vAt3CuKxe&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (1cb2a16729fbd15bfbf8f9aa4f5a59b0)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=6r55gv7/7u0 yjxJfh9cQ5J3p5fiy1ykNgxLVPGrZ2w=&c=q6i48QDCjvzob c x54MBVeU8oy8LZp1C mu6s2Gsd6NNXJ2UKfqeAYx7VlZccjDV UziZJ5pCPctKbRGlNF7RnkgDoJEXFLs5HJ36CrXX4M4BuLTnAfsZOBDsxi66Pi&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=TOj/sIGIZpyjF3PniXmNEbsIhF53Jx/Msv6dnCYOe84=&c=fOAfbhtAr8XUTAdh9idv3d6Fb4/yYmHU0e8lE5caZMHtjUacZ CKRfowxmczUHdMmtZE19phS7YU A7//ZjGfjEMqg KzrsXeV5tfGUe RFDRl gc3oFL5/cCBLhfbP &downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (497604b6a17a9f1aff1300971021120b)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=p5oWaKDXoGSskHIB3V87BjvT6yBgYFQ3S6gMq0iWj9Y=&c=DisIikhRO2YFft2lUEGpN35h t0vHj7Np70ax5 i1QD03H1A2YwopYjQrhhorFMu/GPZ49oXFgicNAMs3CQPiXwfDasoBIyFTAN5RaTUX9Kz iuJCyDLN6myu HfmSYk&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=d1WhcQ2gdQhrlKXeJqn5jX/D5Kipw81x0Acp4jjPGXc=&c=FOsQwexyxBIMFOY3g/OtQdFEScyPu3CIOS3ge0zlY9LENOSwFDSEg vaYGAKCBjlprcca6YLKIlklFZzcwbkK0UOjah3 MiKBrC72Ycn0uasKrWRmx1XCGO41h0NkseE&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (7aa1b8e54bab41738da5cf6ca2656e9a)

1 / 68      (PUP)
http://www.signappcurrent.com/c?x=B6NPBowFtq1ZzvQq4xgirGEHKCgbPARIyynhT9UYRso=&c=F6KAeBTa1oq6n0lvyr5qARq8Q0oMKy 7PSGM60DTmqlo6W2xdKTy4HEKgJJVRvOC5RAmR3z9/6OKeAQE8w/thGmyJXxWutFq6UfQg7doQoBVUtnVjn08ObqRZKijmBJp&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f30461af3e919b37d4700c370d9eed72)

The following 23 files have been seen to comunicate with www.signappcurrent.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.