» www.signcapitalgift.com
Overview
Analysis
IPs Addresses (14)
Downloads (40)
Network (18)

www.signcapitalgift.com

Communigal Communication Ltd

Domain Information

The domain www.signcapitalgift.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Communigal Communication Ltd

Registrar:

GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:

Oregon, United States (US)

Create date:

Wednesday, January 13, 2016

Expires date:

Friday, January 13, 2017

Updated date:

Wednesday, January 13, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

signcapitalgift.com

Whois:

1 signcapitalgift.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.AVSoftware.Installer (M), PUP.InstallCore.AVSoftwa.Installer (M), PUP.InstallCore.FC.Installer (M)

100.00%

The domain www.signcapitalgift.com has been seen to resolve to the following 14 IP addresses.

52.38.209.219

ec2-52-38-209-219.us-west-2.compute.amazonaws.com

June 3, 2016

52.33.165.25

ec2-52-33-165-25.us-west-2.compute.amazonaws.com

June 3, 2016

52.32.12.104

ec2-52-32-12-104.us-west-2.compute.amazonaws.com

June 3, 2016

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 22, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 22, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 17, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 17, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 17, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

January 30, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

January 30, 2016

52.34.170.106

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

January 30, 2016

52.25.23.136

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

January 30, 2016

54.191.37.5

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

January 30, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

January 30, 2016

File downloads found at URLs served by www.signcapitalgift.com.

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=dFacIqnbY/fNyFbC1NVbc9nvEEvOHOlwEEkT3CUDzdw=&c=L867OWgBL6VBHDSSQHqrMUgiz3TwdW6WPkcEAfO7PDZWC8uOt50PQL2VH7QwQXC6CG6Ch8wIMAdNDmp2IF/DM osDUGidTnqhvtTgJQ8v5ZEoaLBT6oMrwag7qHLMutX&downloadAs=naijaexposedco_Afroc.exe&fallback_url=http://.../get.php?file=5ddebfe4&m (68d18781436c0183d56a6c78dfe3fb6b)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=CIPP9ChZPrRU66eu JsRuZMJIECHU5wrwSLEfa5UQyM=&c=TAyq/NuvPqnEaxdvev5NxeX80fuNpokga7y2iX0mK 4WYshsGTPg7cIQw2WMOFcwRDta7MZ Mk39GCyoERNCToxA1mTUhtwl47CJl brDRNFBrd3Jw cgeU5XouIzDqw&downloadAs=culturas_hbridas.exe&fallback_url=http://.../setup1.19.exe (a44b6e73ee47a3ae0f2b5f27b7c51f24)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=AgBdeaWsb4XU g9 Lrb6MT4 Fcn35z6KXQCLh13bkAw=&c=aZbYoGH0aZhw4fpf AUcwv3IdapbkTq6uq7zm2F0TrFMxbdAAHchSb7Pb34jYZoLSerNQFB1NTpAZdD5IcJNSYoW/JZqVh9YktTj1A5Elpy69Ud20jQq/pdRgXdtOXDe&downloadAs=InPage2015.exe&fallback_url=http://.../get.php?file=7c84f7e2&m (73237d7e223f1f41dc61fc794cbee5a0)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=kAiqgO2G1flSBM/tyDS8CPxgvjI2aouAHVDSZKsBL4k=&c=WncxvBnEHPocRakC2p6GqeRL2EW9sIRC7kZBaUO4XrS h6/R2hAS5mY/3nCwUjf3hcTQBMMqNdCf5Oqg8ORcaM/14jOCMVrzEFq3TpCdVMeVNOgty7sNNlecC4F5oLBV&downloadAs=36Amhi_vitthalache_v.exe&fallback_url=http://.../setup1.19.exe (f600b02c6c7906912cb18a59ac410a81)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=E0cpEEb06cB3m2fp3baz5CHgwT7YeU6jbWL1AX5tdzU=&c=ePJtJrbScvOy5A6k6HlXKgrLrByb9bLEDVOOK6zcVmurDdchq7J zyXFLNVo0c7EcNMlU0YgDDqKrXzfqVd/cZ8sHETBsBFJ7wh qxV730TJY5MWv1oCTXMmBk2H30k&downloadAs=19Dhyan_Karu_Jata.exe&fallback_url=http://.../setup1.19.exe (a14c06660d81f1ef16926aeb19ff9a1f)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=98lE1NRDDNAUgclvFoNOpr/ffzaAMk1FO6FPHItt7HQ=&c=s4en jeDeQYtP3ERE4AsRwZW2c /4FOs4EF2xH6eVOkAuDcvgItqnnUOx9vXzh5/yUoh6gf5Y609lJcferTSp6wzpgt A4F4fZm8rj5jRAblCAP4CLormMbEUklLGEkQ&downloadAs=28Divya_swatantra.exe&fallback_url=http://.../setup1.19.exe (eb7df44daeb20be6dc30fd2cb58371e3)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=a8OlGop/HbRjJGN9X y0Dh3Ke3iWpDZTHfWv3o64GSc=&c=qVipSiHHuu6RhuLycqJyWQThtQ3WgTgs99TrlnSZP4UzAJNzFScLFfyAWjSohlUeBG5ujEYYLTFvqDwU89PjPAD 0wPS/mo9zXkPsaVmc0GFCzF321CbxdnYUQxvVnJc&downloadAs=Ghei_Chand_Makrand.exe&fallback_url=http://.../setup1.19.exe (3b75fbd9cd489d846c0966f917fb930c)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=S vtd6C QD10I hWTMsY51z4yYtNqxF5BqaimJvW7WY=&c=qwj Q6U25zx4rDc3mIuuzyQbE9ZYyJ9gkNNER0Cpitmh5rS0DFbATQQyYKE2h26Ha8bGW5HnAzHkMR4b5lHuOzVQVWsa20iyjfqKLJ8v4cJZztQDHo2vUfOcP7oKXdEc&downloadAs=26Guntata_Hriday_He.exe&fallback_url=http://.../setup1.19.exe (d428fd895e6db46698d60ef3b182ba83)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=dzwUDVofxFT9NeD 7j2q3ac18W9Ptf9ugOLOH5bUBik=&c=GQg6KtWQ4EeO/F81ajKmhmmY2kLw7ay0FdkDK0Ql9X1y2ckcU3Kp5OjnFdNDGK2xg/0M2/vnxk6PJbbxlxxFFz 4KtlOv9/llorMMziaBFkULKLCavOMEyVCTg97shbY&downloadAs=21Hari_Bhajanvin_Kal.exe&fallback_url=http://.../setup1.19.exe (593f76580339ab5a4b8f558688d3ec7e)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=cyHtWuJcEJY4mZFUnXndFFA1/1vF/JE2IVOlviKcA4w=&c=8pRa3/VynrNlOn1dhTrZUZ2oamIay 1xKDs3iNjVvRdRnhla0g2NLg7gG0daS/LW1/GNCqG09XC3TGPq26qOYrarqXpcwl66gjdEtXFzo3YLMZMai6xgj2JtJARQgVd4&downloadAs=He_Bandh_Reshamache.exe&fallback_url=http://.../setup1.19.exe (00225e52322c35f1f50431f034460688)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=JKaL6wmSGYMxKMZfcEUaVFCvIbO0wi/wkdG4vId1/vI=&c=cwYPxlhtLtrIepvnBrMuCrVox2UWT7yRVlkjJko9cDc37pLxgxC2B1f3y8ZrbeZlDRffVrxMSmSUIt9rmLMA0cZxi0hJSEer9996V37fAcfzYBIsEhi0VIkjT85vTsvp&downloadAs=27He_surano.exe&fallback_url=http://.../setup1.19.exe (ad173ca4ae92f066c985c1000f0118c7)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=QAcZgAfqH5ThJ 5bRudpiih8DyIUUXPeiFgHa5/khgc=&c=I9wB8Y3WfmspJLqGScFpTqBkse0U6weNMAgD25jbT7a8xH78pCrW1iUolwqoFltDdL3HKMXurJ vCCPy85SQZ3CWzLHDEBBUFXAsblRkjNNAu0hikLWJ8A2XSJ6NosP &downloadAs=windows_7_Warez_Sear.exe&fallback_url=http://.../setup1.19.exe (icreinstall_windows_7_warez_sear.exe)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=yUWl 3j8V9JY8hSIz505FVvsry6xioJrIyTTbBnF2/Y=&c=dwdHhuMBBeHVFgZzK3nkGziqFko8ypG0x iWH63A9gjAJALIPS3/JcLsj3J0M6WR6JawTx4DlIZF4UX2iBRnjr lVdr2OIBiJb5hxdn7U6r9zy4ou RXaS6MA6oQ4TFv&downloadAs=Barons_Toefl_IBT.exe&fallback_url=http://.../setup1.19.exe (59aadc2a23bc94abb73bafabc4a104ff)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=T8ABNdyByr taLvQaGaTcStEXiGezvyT5JWptqMZIw8=&c=uJliEt6KIv/rmdhDteWpzqHY27tdk9EJ4M6XdwZYHmLWPVSsFl/1NRgRXMNmgJb9WLVTMkEy7OfsTzJStKTz3cFamNYtlT7AdQ69vFEhvvnKLeD4M7st8awWpQ9AyDMu&downloadAs=windows_7_home_premi.exe&fallback_url=http://.../setup1.19.exe (b8290ba53cda773d0f3531bc7d84f8a3)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=5HuoYF2H0gtzoF9A3GCHY2vIl7 /Vl Gk87MnivBT1k=&c=65wZyo7TldtCG FmfHS1leOEEbK8vrYPwqiWEaMe22i0qFrnH8dbd/MDCIms1TBOlV NL80VqcS46MCyl7ikWImgCD8prOINjC0JjD/zf30XttlaE28RK4 2UYMjRohs&downloadAs=clonetrooperhelmet_p.exe&fallback_url=http://.../setup1.19.exe (25e8086dc6b0cd02495ac98039dc7d28)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=Pp NB7JIS2R/XKjRqQGnY7yaBWity2BpMokVF0YVmLI=&c=shJkLjlNry4rq7RDd2z7V mESWBfC7I8Ni3E3GnOdEMGCrnOkRf/MPBGLEfy19LB0CjekS6m6ubZR82bOC8qxaWZyPceHStDRD6mdtNwvwP8GHVmocj /XjuTiltmziT&downloadAs=Portable_Foto-Mosaik.exe&fallback_url=http://.../setup1.19.exe (9723a04824b372f5ab50c3f0c854a24b)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=7wEC/x8JlHHiKST8giSb HGXVnEZi1Fsfi/TDkpvqQA=&c=CUOjLUpIGjWIeXkljCf9AXHW/dpcQk07uNiNKZHpe4Y/utHXLCcOk7C MeVd6Bn7/2z3LDov/9W 701gNONwfzt8qte7aIFP2/fr4O72kCbWEHDskHZ4aOWNjAEUAr8s&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (74a1f0fb94623c83a10039b5fff5165a)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=5Uy8EXcYExY3XdZRI2QZP2acdI2AnuxQJykByLx7vC0=&c=18In50GgJcfMTZomAv hKOrgs1NNgAZrVUPPANuzfmH2EErWXBJIzJhh4xVRkBOO ejnRZjRDNpXxXMFhtaXi9zuc8q/7QEijER7RfoiVuouwjBnF/4JcRd75xCso96e&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (b87bdfc8fedb010af5cb28e92a1978ff)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=prPPV9mMFEqpN8BvjdGQN9Z8qgJD3i31f8GUd9sXXZc=&c=5HFbo fLMCo/0gAB5NDLmuNXjSk8EmUorXypGISLlYtbCV0OcnJznUZKMubia2XjO/EFiVf788tiCyHqkUo3VTnMMtNSZOPKudWDKBkN4c4LBVLBrMLAMZyBSQdRAVMQ&downloadAs=ygopro-10337-v2-perc.exe&fallback_url=http://.../get.php?file=f1c9b52a&m (33c86472f55cb57234348de2191f520d)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=P1dyHUVVvSHkdQdJacYQ3I5lasDOYEzuGDpaq15HOM8=&c=xBEgRndRnIqYUIIxRYvnNfpvHG53W0xUYMojw6pB0Jak6JK2dIeqHjy0Lz2Gi1sUnemf5acF6/BMlQn3Ixveqkqz46uO0SwsKH9XJ fS7APo9lpZHdrKxy1ej0Rl6uzz&downloadAs=SB_Game_Hacker.exe&fallback_url=http://.../get.php?file=cc296463&m (0f12f7fe73a0fd1a9356593a508509ac)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=DaRXKskWdVuYs8EClAPr9046HAIhVnYSUxDlv5Qjgt0=&c=sYVGKtdnPj9td 95P77TFo5CgSkBpVThUrLxsH7CHgyea1tLxXntNbfbV649XYEQnySll MDUjL8n7FqSPvInLqzIEScB3xd1CWyaDpycdOuw4zsvs0WJKW0qlOwTJOU&downloadAs=SetUp.exe&fallback_url=http://.../setup1.19.exe (af2ec163b53aded446afa433a790dcb2)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=PJJqzIqtxcmlAtLH1WtaNcr8S0rArAdTDd4mGdkXito=&c=cfTp/kwV4 4tf1innC6mQ2z8MPgybvbxe1tGC9o3nJmPSlmfU3taQcXR0262VbLq3yaIXxbd W8vzIh09 o7L2usJBI9yTelNf9QNE5OnzPL8lMaIIuy8rT fZxQ SKC&downloadAs=Minecraft_TeamExtrem.exe&fallback_url=http://.../get.php?file=d86363c1&m (620a04d6fc6a161b01289cb72bb3df4c)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=W1HUCG99nbLE2bGvz3P9IEvu3khzIF5NIb00P3Olnsc=&c=J2Ng4iI8oVCe2xGzHP/L2GeMTaP1zqKZ5krcQludPQjsy7XIGtj7FDJdQe0JsAFbZyGwHmIGUl5F5YPO88yxsIHWcf7iBWanlAPEyegUESyUZgI7D9zDsbaNn3eMF2HX&downloadAs=Eliminar_Virus.exe&fallback_url=http://.../setup1.19.exe (3220f09db545122e534c7207ca323d07)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=NDLEH aBHbYDeoQ9W7o4DNSPwEKNCZ2NiD5cDlrOkbE=&c=LAjAQJoRYrarSHSNC9qfEwvOTQ6IhirDRJFmHPbuw/Uj/UWVIMvTPROzcdvKjPpqTlb5307Gj9S6iHOzhrvr1ZMZtwG9sQqmp7g9mGavtuk6KXV D49wUiKxnjwspo7C&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (42d62bfd49c3a9b54fdbaf2aaad6c831)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=okxXQsDc4wsa15K4AH9f90V3Aw5wAn0GAW0NXn291F4=&c=WDa2us54Q0IwtYxFBKKUDqvwo81HhYisT0szq8aI1UmK03TnMbDuCkRL3jx 1cdxI8zkz3v2lCuaqSRpQl3z7CjBIXGSuyQF5xLt 9SwC9x42rC9CPFO Qxj4Zdsxya &downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (8fe4f07d855649e8959b3a4375cd76fb)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=9/66oM3aD3NIvqLMsd4Vm5ZsWOXM4 Z4UevL8utPPYk=&c=TP1Vh S2yG3QRY8xebQTSF81G6ECbEXgMFLKa6UztWgmqIjfAbPVppUmPbxgOd7jj9n5F0YTVOxmeC0o3qNOXXLbnStmmFmBtM8PUayxv30kZAIXWrAkzJ86kqg MRbd&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (872ff48d4ab432f28071a3c2c20dd0f0)

1 / 68 (Adware)

http://www.signcapitalgift.com/c?x=95V4cj9OrepYNC5Q2j44GDFc/ThrjXhWlRSlwplPW0I=&c=85hhznE1g95Mj1AfIIEo0klAoxcXSsP3LNCTrqCYaSB751 s4p3PbL eOKQDxIyPEu9v jXgF0ezXjhgn0WI5vz/zgrcmcXReeyMZ7KLp6p210YgdMn8IFqTvDS5Uszm&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe (42d62bfd49c3a9b54fdbaf2aaad6c831)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=8e74nslxGO9GIe6tB48lZ0gSE3vrSlWgMVc9nMIw50o=&c=S/pHYFz/F22kaVv2DoWthIrbw5y8xG7RSleysR6tl1t6cqShTaz12PROxcZdoTiQKr5GZvC1OB/bQHmzEjArYpO2LeE w4eIMaUZ HMxEFso6S0MJFNJhHW5fkCtoaJD&downloadAs=_Ost__-___.exe&fallback_url=http://.../setup1.19.exe (d77dc531ea1852f7e456141ac4131984)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=a4TX4NKA9dazd9q0SweMtyEhbc7bUCqfNjjwCdPGNNw=&c=4SscrFWDQC4kXARJq 9A1pj1E b29kt2eKbjx20906qrVNBcfuW6d8gX94IlJvIJ0IcW Ka U O7xm 2yA2Aaf2gY4UFmaUhNOtgdw/ckLFOGb2ts0gWwDee4M7puzkk&downloadAs=New_Resetter_canon_I.exe&fallback_url=http://.../setup1.19.exe (b388057b5ffaddcb4105b91116f1d6db)

1 / 68 (PUP)

http://www.signcapitalgift.com/c?x=D/0fspvCGgfaE66MzKdBGHjtgb9va8uG7uo3UueLcMI=&c=fPmuubN6kJgoyBjumgDHdIE4nsICA6m2Zm36ZX bV0F1tu0HcCa5dbVcZVRXfHPQkjP33Jp4wrPMbpHV5ufdmF0o1kixD6A0/f1pddp6wk6He77JNBYAQXRWV3St1uXG&downloadAs=ServiceTool_V1074.exe&fallback_url=http://.../setup1.19.exe (e78483391633b4cde49056b3e78718cb)

Latest 30 of 40 download URLs

The following 18 files have been seen to comunicate with www.signcapitalgift.com in live environments.

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80

browser.exe (Browser)

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80

3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

e5be.tmp

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80

client.exe

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80

online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.