home

www.signssharesign.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
signssharesign.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.signssharesign.com has been seen to resolve to the following 9 IP addresses.

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 18, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 12, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 12, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 12, 2016

File downloads found at URLs served by www.signssharesign.com.

1 / 68      (PUP)
http://www.signssharesign.com/c?x=Oz/39Co3xPXka5ABn7cjgew6EjRD83OGv7CrxPu5dgc=&c=US5QxNBq4u34KmUC2hvH56InYDZ7OK 8hHIyaQaeUSdjUcyReFdZdzfCeQaHZbsKdSZPxzfWWKTrDxmEvyulAGFlTdog7hxN8cQEhsGyUJ79tkanbMDbqU5CgiIfQZCp&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=noONkfAblFoDgYxF1b5Mh8364dNHjMZHYSMSLtXIRfI=&c=av124u4BDsKbXtwRyJbrrzskFhaOc1Dr25FXtRyaMWErIiDjEgaDP2/n8kKy SYNjbcpPBqkDdLvaCUrLbIn1y6kQNsA/anmpdkzIUzCYwBEektK c38ZhAOFhkl2y5R&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=fw80 OYFnu3pmamcoFCVf4PXMVI5zTQUwlAJxyRCCbo=&c=ffqpW4dF4kjDPrcSDMHPROC6e9pdpLfb/OInmGiUvWG6d2kC0FnJiOYUiuU0lOddL9P8kl8IVAtDln5D5bS YpL7ME8s apgk7txorEdXdvgaAVRcz7XXKBRDRuSLHBe&fallback_url=http://res.mshist.com/.../CandyCrushSaga.exe  (47796d8aba98a91ea0c8d04394b83cd8)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=9SFea7DX2G/0Cu/QybAdl/TCugbVNRYbtcafrXNFf1I=&c=YwDprWWHsNlcn/nr6u6BHAR/1B555XF9wrLui5Wurzcw9xXqUEcsH/vO4icGEvhkjbd2BhjupPoIqP3C3HDXXdwviOZaEZnC UASYnDYIigfUUm1eTO8cvafTw3VUK /&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=EUcxcd9eSEVQsNztkg/jahxEAH0vkdcZSOtL6kG0dA4=&c=zAC721FdzJCTj1CPjzPcGUgV Z0NgaqiN8E4nr71tc//Y3KRGoL2Me8FZg089wA6LmU1jd4xIhWMbpvCD3I9ATTPVYpfz4h6AM TRx3BddgL7NtGEPdN3By2XX5KL9hn&fallback_url=http://res.hufftos.com/.../install_flashplayer11x32ax_mssd_aih_ie.exe  (1f3250b482d1243ae456e9dc700a381d)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=CXJZxy711BjdXeDg2o1f5eUcHGJLwX1O9IBK4elyzws=&c=vieWKMUapBHqKmHC3MtlfS3xsg8ICYsI5Een2aDrI 3nAyiZfRuw6wbpHgxeI9dBIcpvRDL9gZYlei64hVoa2xWbkCnRlnYRc5KlfJw03IHdAFUNeQoVvhvQpSsVxxH4&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (b19e098f33e21523f461caa4b93955e0)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=5kqHRb7dwpb5qIbcwmvh6J53Kh6kYMq0edFaE/tKheI=&c=pMavgwiUNp5Axisnivm2GKJgRuQIsDsqaPZdn7iOCGygwTHSL2/Kd50qYdVALm62hhXKBCccYYCVCt3yqoBhhJRaMBQn8ncmrqhJn1GcTYGoMWFUAkH9sjkmIBzwXtmk&fallback_url=http://res.setauls.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (2a623a6607157e473923d2f3b03c94ab)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=4vlcxhPBytJ TgrkPLQvXDPKHS /hf7BjsO7ez2Y3oE=&c=XcIJ YS1RA0uVzlc6KKopG65NdyTAbVUQgfSN2vdWap/zjb6NhG9Vyxwm8G86mzvd/lb0Zpp2 yUeYL0wkOA aoCRJ GhAPNWBgwOxDEJ3fiY11cWNiILyYvRpfIlhiF&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.signssharesign.com/c?x=C4rpa/7qyszwm5XJT2K4oAjo6nT7SYkThRmzZdWeNRY=&c=NhToWCERswbLjDLtCdoJM/CO0oAqetz7 dHJeJ v31Wp EkkBYBtyC kPQ3sE 0sr8F1Cw9AGWbampuY68L86JDm0jXAIAsjKDcg2O46kFyWSkw3omFTwCmztT3RqviQ&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (78d93695c9dc259907eaa78f58250cbe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.