home

www.signstocktower.com

Communigal Communication Ltd

Domain Information

The domain www.signstocktower.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Thursday, January 28, 2016

Expires date:
Saturday, January 28, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
signstocktower.com

Whois:
1 signstocktower.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.SoftApplicationInternet.Installer.Meta (M), PUP.installCore (M), PUP.InstallCore.11 (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M)
100.00%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application
8.16%

VIPRE Antivirus
Threat.4150696
4.08%

Dr.Web
infected with Trojan.InstallCore.1590, Trojan.InstallCore.1903
4.08%

avast!
Win32:Malware-gen
2.04%

AVG
Adware InstallCore.AYH
2.04%

The domain www.signstocktower.com has been seen to resolve to the following 22 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 27, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 27, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 20, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 6, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 23, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 23, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 23, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 4, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 4, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 4, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 15, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 15, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 15, 2016

File downloads found at URLs served by www.signstocktower.com.

1 / 68      (PUP)
http://www.signstocktower.com/c?x=EWpYaPtvcWOy0TOM/k3kZ0y6teVTPOrYDzCXl6UD4SU=&c=vJGC2jPj2ewmMr/MbEjEaO6jsg3JgbqX43CVcfS0UId6uILgKk53TwnsE86Tg3PapZOyrpUU2nNDiwlCO6YLyUWoE9zXERJFZEldXm6F2e44fFgBqtMEnvJ4AR/h05RHTLPJ3IJjUHftDBL9uz0zhcpHnSKhHT1cnSslppd qzo=&fallback_url=http://dpstorage.pl//.../K-Lite_Codec_Pack_1185_Full.exe&downloadAs=KLite-Codec-Pack-13137-dp.exe  (39c68f954ebd930bb6fca0f1c73714b4)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=gB8RqrkFDwixG1czB/CNQ2EuEC8CvP2H/EP8f32ws4A=&c=iMFVWDKUxRQcY1Xgfj4jW9ANRjfAbRtyA UyB26ufPSJ9zQPARGxNxYZigmIwCbsKOpjQat5Q/rjPPgU4tr9j7fwQb0waLg535uPw0MO7YNh9Alv5 u9qHesW43WfH5k&fallback_url=http://get.daum.net/PotPlayer/.../PotPlayerSetup.exe&downloadAs=PotPlayer-22586-dp.exe  (58c7d85d579b0cea1ad60cdd582891fc)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=tc4Jn0icHf AJEDCVmOdVHI2AGXjgI7 Pb7UvHU8e9M=&c=kqSGPqlRGtC1j8qrpPeEkgSmH9WFX3lJI6jjFIkdlzmo8BIBsTrL1GLZzHJCbmlCQqusUiAVEYdPzjYBxCCyqp5ZqMwjo8CD0lfqOJdQdaMzmypFFfWJYMvh02AalvOm&fallback_url=http://.../PXCViewer_x86.msi&downloadAs=PDFXChange-Viewer-15117-dp.exe  (60288300b4187c3cf4703df3ec764fd8)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=m LvVhGxj7P BegaYw52t4GjuivxKEmRXmONyjPshFA=&c=8iV6bbl9R0qC8fuChdPvmF1DPUZUXHw195frJbMA/nh7HwJ5xNnwGgEXMdehl1naAZK5j9Yl/6YkM0Y5H8eAlkcvbw/Ia6oCPYl6zyXbHE9BBAK2BVNU91wAr fJDum2&fallback_url=http://airdownload.adobe.com/air/win/download/.../AdobeAIRInstaller.exe&downloadAs=Adobe-AIR-13092-dp.exe  (2d6fabd5dfa3fadbd259719eecf0229a)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=YtTrAh9 X7VWQjRt/BEA oQHVLehNuSWnxjsK7c201g=&c=QPZCuzd8xfl OM/cknGZo5mvq5/YOz2u DTexuQl47eJUa94Eixeb2JL4wrRPV/f4MdIuf/rcFISIQTWg nc/MijzV4/XczXjdXTUL76a991Os4JKUE6jtMoqMK/wVLvvKjWKPG2GeuYrafVQ5rE9AGFwjMk4oRjoMqXc1t8H E=&fallback_url=http://www.advanced-mouse-auto-clicker.com/.../FreeMouseAutoClicker.exe&downloadAs=Free-Mouse-Auto-Clicker-67780-dp.exe  (c5ddaf3a088df8ce776e65b9aa3af401)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=KufkTq6gVL16Y4AGYUiEqHt9URqmDVoElExgKnJu5 s=&c=ktUCkCWGZ4R86tDyvK7o4X5 3v/ELXdEgu4JKBPXRSGyWxUn JF8P0Dep9UW3NOtfTzXEAeDe1ctZKUOygSzfKpxMkjg29l7MQ5bVbIUl2aurw8dGzOpFaNfnHm7oYrLaA e6cX6FiCOA61Zrf0z4UYMShZSlf7PyPYM BfeU/Q=&fallback_url=http://undeleteplus.com/.../undeleteplus_setup.exe&downloadAs=eSupport-UndeletePlus-46514-dp.exe  (b51dc113b3b62531abefe76a9e4ec5c5)

5 / 68      (PUP)
http://www.signstocktower.com/c?x=SYqDbo7QwEp0U7gewCx5APPKwZs6aR3 vuk4bp6tEu8=&c=dlUIQZmqBve15UqLMR4iXwuyg0VESdCbLpT8NZ6awIKAylTF1htfrbI6eEAUU6T3zqiIpni04/C/HG7Pxfmv24LzEsVa64ddm55mw9RoqrEZTG5/8yeliN7LaBLK/91o&fallback_url=http://download.microsoft.com/download/1/B/E/.../dotNetFx40_Full_setup.exe&downloadAs=.NET-Framework-17635-dp.exe  (cf9009fe477e8b54fdb6c42d8f4286f6)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=H4 rhvfkBsnAJYvXVCV6UCcQSXHjhyVGZsX7CJKgcDg=&c=4RY8UlwPCUSc8bIGL43HHnUUZqzHfERgVb99wL5u8fp9EBVZ8OuBi9/KrTwgDAac7Fgpe5jTccnrGZlQpmv3jnfnrcpV/dwL3fO5LxbY7XBFkAlMe92ErsWn1ABOxvYH&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe  (e841751482c5ea547790f10754a13374)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=X lo/pI8sL0pJH2d09hIYFWmbbMJBqKgRbYKHmY7UGo=&c=Nsix6wLb7ylUY9NkwgSrSjk96TF8fFamP C6b7dI7Hr/kc1fzovX9X9Em BU2RaV/swPhhVwEx7heQT78LSiHlSFn5LbSB8/V3IXCS Nx6OQd920Uh7GFro1TymqPNGCMc176xzS20qHZRM5gceKDL1ZhFfhJ USR0Q5FFuwDro=&fallback_url=http://storage.dobreprogramy.pl/.../Alcohol120_FE_2.0.3.8426.exe&downloadAs=Alcohol-120-Free-Edition-52865-dp.exe  (b08266c1da0163e99439a67caa788707)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=9j5ynloHU4netY3tG82QS7OSr20QeAMf7 sw7ZWt/14=&c=ryK7A4j6kJhe0fnjN ungPhw0DLIQHiMCpsAiMgZQqUCXRVzv51ZVsqeRSHzfw9dTC2t6Azz8YVXsuRuy2nAJyEldWELiS24UdqA 3tgJ/jevOHczCd05jAP6LFpN1NHXeTiHLESHL T9 s7nqSS9Sh3GytlAQIO6kGAmzJfZQk=&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/AcrobatDC/.../AcroRdrDC1500720033_pl_PL.exe&downloadAs=Adobe-Acrobat-Reader-DC-62180-dp.exe  (7d296f58ff1aa14aa20d8a8e9b20c9a9)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=8FM2fWXWJJg/JCDhW8sScEgkbLxf yB5WAbO2W1woHk=&c=lOQtOfRBhgRzkza7vypvIyY Hoo Wu67c8aKBVPYKG4yeIrgtcE2gL9ghdJB4lP/Q07gnR8Hn FBG9e 8CBUsiT0 3hcvpvyojUuvRtaMfv3tOgyziTcx2jSmClj6eEwpA lhhVdEfufAgxzDTJIkoNGkxjERDkIb/1SsKqvpkE=&fallback_url=http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.5.setup.exe&downloadAs=Windows-7-Codec-Pack-18648-dp.exe  (bafea7d859b11e03c9824f94d2fd6dbf)

2 / 68      (PUP)
http://www.signstocktower.com/c?x=PPNyoAHCvo1AqEle 3vtKdmeJyYF9jGShqcVHLLUQgc=&c=p7a32KnnT UFMDhDCv13bhrfpETReCyFP8fPsZW3VGCIkswIvAyV5BbNeRc oObfXJPzkZ5laMNC3Qhv3tSgXA4LyB7AWwXX0E jt3aGcLKKi8bDt4EauodTLu6aZnPX2YIQ2ZtdLYQlSRwFQxikQaHV6IL5YA3OWqsqYg4u2Lk=&fallback_url=http://storage.dobreprogramy.pl/.../PhotoScape_V3.7.exe&downloadAs=Photoscape-12505-dp.exe  (60662721b2a9db0310eb850f60fc754a)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=buCCxza fu59 fmcx4blCkEcYVCyx13XofJgBHReuBE=&c=Qy02vqw80IW57/fFBrx8UTOyY/Xq l9fb9tR5ekNMswB0ELFZhDMUDtpoGAcBLDGR9cYk83NWXxvysT BqnZTKn7zkpLc1W9hsCv/txHSGXk5r7lWNlBhnkue38aRsD0WosrGPqi/mXt3JkHVPNBymLC4zOq0V7 TsCOMJ0LPEI=&fallback_url=http://storage.dobreprogramy.pl/.../1by1_186.exe&downloadAs=1by1-24281-dp.exe  (1e3e81c33f75e00008fdbfaa59a9488f)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=xppuBeWkbCEOecWFzKN7Rd0e0S4cLCPYWpNyXVgUzEc=&c=XNeqqLhZw5evB46fQBaKBsa/7y7L2wgXM1wfKp1NSkGTfwjPWQuVs3p5bZTcdUBpjPgStNAhNOCosvn QC1gA nRG01GBkfjUCoIjdDEVaWCXoRJ/nQl4Ow/Od044/ &fallback_url=http://cdn.kmplayer.com/KMP/Download/release/chrome/.../KMPlayer_4.0.3.1.exe&downloadAs=KMPlayer-12538-dp.exe  (82a643262c2e3024b6e754d518400223)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=zKY4lxPq5yAHIDxGDf9PDFCRDLa5kvrjC34bsQ1pqAk=&c=F7z90aPzQZWXNPQVjneCCpNxN4INlu0Xd5qkFVxc3K3zD7vku0NTww7i3LZbxeQ0lPZHWLF6Pj6rbr/JARkguYfPNKJJCO lsrvanIaqIeHnIDD8XYy4KihSVZzngIFp&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice-12754-dp.exe  (71c19e612f25bd5fe7bcfe972f021574)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=5HmWrtIUH67cffbtsxUi2wT9bbl1pJHw52nj rQN rU=&c=I9XEbqo7JYmAJUHF1uqUdO7twBwF/DcsiYEpbe9feCGrUhYQ0A5NaY0iddU2qELPQhFeFA9npCtVywoW6nGGvFsb0he/5oDLY0EzcY9KRHo36DBdPIcVkKgCRrfC3P/c&fallback_url=http://www.rarlab.com/.../winrar-x64-530.exe&downloadAs=WinRAR-12398-dp.exe  (b347a08e9c7da42dfe712ac05bfbed09)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=aFH/g0cFUsYIvbl24pYU5FKNCTXNAnCg6YueeSaofxc=&c=mKYc4JzMRifL9i3cD4oaESL1/n578ZVcU3f0K/vZcnxqO6z8CBMLkqP5WNs05Ug6EQLhBfcuN9gaMzA7XR7JWzLgCo0oGTbHXCd50d27GtZYfCfWbGtkwgcs LsVaqcp&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (icreinstall_daemon-tools-lite-12708-dp.exe)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=t8JXriIQQOBJCcxthFAHmZW3p/5i/ jUtgLcrTNBDSE=&c=g6VuAPlaP3bo05TadF3hx0QF4YdiyDEgw3zqt309HZb4PndWMcIcM0EKEgns9fj2stUqYv5Pm4mTJv2QuMFJS4bIgW2DzPmeL0E1ztbiyM7Qy5u4v0FjE0Rim6YUiL8wtJfDZUCJPdkV30vei5VBNOpyan7utf5ZW9UBFGa6/xQ=&fallback_url=http://storage.dobreprogramy.pl/.../CDex-1.79-win32.exe&downloadAs=CDex-11489-dp.exe  (1fa60e1e798fd7f7e838943de28de36c)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=RIk/jYUgaCOySI/cktuhuNGlmooZDXeL8ogIpKEWkGk=&c=WrO4SpeLsfEih3A02lNNjFbkJ5fM9crC2iYp2iuoFCrz56fHEZEqszELnWZ1B8ELmb9Ny8eKd5ZqZuvmgLjcXiqS3xuLXti7YLFxEdaLfS7vDD7hKVLEAaQyT7EKEpGg&fallback_url=http://heanet.dl.sourceforge.net/project/orwelldevcpp/.../Dev-Cpp 5.11 TDM-GCC 4.9.2 Setup.exe&downloadAs=DevC-28400-dp.exe  (da5b44a3353c02616e3c581063730543)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=5yoVgS1ORLhDveiMqL9dmqXnCpl0nH7CcBU63tArx9U=&c=IIUIXztf7zW6Qu/U7Lf7rU4Zg6Edk3JUm6YAv9RONElpzPRXmiDutwYvVV5n0IY2HDb64atXOAjGUyHMYQ83Ee5w8n daE ecpBWTzF664EEh/uGT2BLZJ2sXuuzEON5J3i8edLr Vi6I0s13XxwlkvuxzB78Btq7Px/7PulQyY=&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (9b1c94aeafe3278305670b676b74ac5a)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=Yd/tLvOESSs4xEsfoPe9pRtKirPDp5MXXmJ r6tVEdE=&c=apqoDoIE 98T/wIMifSari/cW 2HKRb6AQFyMQ2g0sBR1eegiqasr1V26npEwYMSvnzatMAjWZnBycHwb ZOFwuBGIH7jjIOB0/HMYmvFSVqJqNTxNNNnN45C/ON5J82&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (81a2492f6e04b35a7fdb6cb7995332c0)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=RI3m2TwMf0JWprPL7jOT8i91n7nDr5UTJtz5zGEu1Cg=&c=OsmDih/GEJk4ZJYL31XdWg1gtMSapNIwxxPzqZJmRcYLZiLQczYfJ6SV7yoby EZqbJHfBgm7KaaD/OWbd9D UMSXumqUIhcZwwOWVh NOlRANwDBgTLe/g/00EfsNvs&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (835c3c4f26abca02332bf8f1b09fb21d)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=lhVwkOOcKWSRo8NRB6dRqoUaCFSBL9/BfSFWjtyjskQ=&c=mpJ7QAkD01BV9anEiznvbY/3/mmOlXBOk4YE vM0RjUp2GxOhjT7RgG7jZK8eUjSlQk5Cv4Neucp EE/MfD4iPA2ECCSVhjbcEp9SKRMAQSp Li/SUo5pSrWlvEGdV/h&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (3193c2951bc88f22a5f5df1edb73a774)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=tH3cdnoPNZKDIJ5i8x0DugtFFs7XgnwiGftaiKanpzY=&c=m1f5bViWXpg5dih8iSdeDOQLKLjY0ZVstkBIG9Ki7A PQs7Ly Dgf8lbVEqMLmlrvbKCmOnqinKVNFXU1pTbFusUkw6foG5exv2c8/oZp863eCbQtZUeMYN1BNcRxzJy&fallback_url=http://.../ccsetup514.exe&downloadAs=CCleaner-13061-dp.exe  (icreinstall_ccleaner-13061-dp.exe)

1 / 68      (PUP)
http://www.signstocktower.com/c?x=Xi6ODwzsQUnalo6q8rHYlnOF66zPMzFM617t9enq6mc=&c=YBW/VNB8cFf5qkSg1weWwoDJvGa5/x6m3lhIP3iwxw0cz6wspHjV11iD97O4xef7Bp03xXqids4q6pdfn57uLleuK CNvWt5kZxnX/QM/JR 21R2j5JPYhYH2Bd5zz2wwOC0VFXu0dkeaHGQi/Dromf32valueMkgadFjSPAK40=&fallback_url=http://downloads.auslogics.com/en/.../driver-updater-setup.exe&downloadAs=Auslogics-Driver-Updater-57953-dp.exe  (d68b9c2d30d2ff01ea0aca8f61d5c272)

1 / 68      (Adware)
http://www.signstocktower.com/c?x= uyiHRfVwOOJrLQ 6du9QUBaEib8sc2S9j U8Y4SyRc=&c=xO/ 7fi04Sj33CTfcac6g1 rzI hSlIz7SbQF2gNMn2BwxgcNT2X08jDpLN9siUqYFDnkpm5U6//5Jtkg/Um kc3 S526dhgT2pKpvsj2ciJu18LW9tu3elIaExySK9f&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe  (50217b9d73389b07e58dfee48638ad49)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=W62cT77AvqjQKmZlc5l K6JuhbaREXXW9GdmNAU7Vag=&c=JFGbAs7OKd6KBtF ffITeZz4w4b4bhKm4rpQnlzVqeVxkAteGJ8V5fk0wJYfcRd8TIkhEda7PfQSr8pQGZHjjT nUWj9cro1kmDqWu/D1Z5Hg47Ncfah5IU1A4p9/TwC&fallback_url=http://storage.dobreprogramy.pl/.../microsoftproducer.msi&downloadAs=Producer-for-PowerPoint-11667-dp.exe  (5a2db96af0a82ed8297bb6e8c490de18)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=YabxFIHVvs8Dd4aZsT8u7abdPRb/IGzpC76nawATn5Y=&c=4PchFEPhXENu5sTlygB BhB4WBghKp6Bhf1pwYOI5KMCARS4wmGPA0xZH/JEvcehtOtNcdkJgOqKhJry3rsAIkyHsPQEDHrBGhS0RhSwDE9cM I5E4nx4o5VPLoEyPyi&fallback_url=http://download.microsoft.com/download/9/E/4/.../PowerPointViewer.exe&downloadAs=PowerPoint-Viewer-12204-dp.exe  (6baa83624d7106be4ee5efef7187f7c1)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=CNoLbSFSpW/ZultNNaMlElfD1WVeK9PsMDBfrvlnUcU=&c=Ec2 wlMVatrHb7t MG7g1NRlwI7m4qz2YeXCFhSwMhyPIocO1qpYSauhsSGax2db6hdmu7qb1K4jZHxSsw2yRpdAHrdyCzpYbqLpHYLZdsS0CDlaoUJa8n59ej6jATuA&fallback_url=http://atomisystems.com/.../ActivePresenter_v5.5.1_setup.exe&downloadAs=ActivePresenter-39253-dp.exe  (5eeea144245289041177eba86921c89f)

1 / 68      (Adware)
http://www.signstocktower.com/c?x=90cRNgChZ0ay7d1lUBAEMzYJHhMxXeaCEjwrA0Vp8O4=&c=gOYcHQh29cDOUEwSOXARHjUhzHFrUi MeOuMxLi1hUAbbG9irW9FFf0f8S6Axxf9t3f1pKbzNfw8yMdkGCz7wttx17o66cWfHLgKpLH8jGmhJ3JrLCGQSfEKqxdknk5VwmA/gRW5wh4sf9doy/WHXoSATWU4ZHrZkWMWYnJ apE=&fallback_url=http://storage.dobreprogramy.pl/.../cr_setup(dobreprogramy.pl).exe&downloadAs=CAD-Rozkroj-11790-dp.exe  (821b86cc6f752979a16e6324d92a3b24)

 
Latest 30 of 60 download URLs

The following 36 files have been seen to comunicate with www.signstocktower.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.