home

www.universecentersigns.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
universecentersigns.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.EST (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.11 (M), PUP.installCore.Docesipe.Installer.Meta (M), PUP.InstallCore.RE11 (M), Adware.Bundler.Meta (M)
100.00%

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
6.82%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
6.82%

avast!
Win32:Malware-gen
2.27%

Dr.Web
Trojan.InstallCore.1723
2.27%

The domain www.universecentersigns.com has been seen to resolve to the following 21 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 25, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 25, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 29, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 27, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 27, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 6, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 6, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 11, 2016

File downloads found at URLs served by www.universecentersigns.com.

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=bE7evzUnU6ZGis/3livKAgJZ9GNjAilN3KnVWEeZrYE=&c=T2ZSeu84crg0sTKZX7QNxT1nbRkrxnBg5yjCo5cma5sbuO9mb8Wi 3JG3AWylwPp/hTlbiVk3Oh6IQ2aAQh3IXnKGAtkh lpTfKRwdl9in8YR04rINCNH4RkEGfrEytK&fallback_url=http://storage.dobreprogramy.pl/.../OpenOfficePL_Standard_Demo_2007(dobreprogramy.pl).exe&downloadAs=OpenOfficePL-Standard-12024-dp.exe  (aa7617d26a32674af7aadf77a2e0991d)

1 / 68      (PUP)
http://www.universecentersigns.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  (skype-13018-dp.zip)

3 / 68      (PUP)
http://www.universecentersigns.com/c?x=GQ6DcvbzVTwlqaT3PpcAWP6cCQt7ZRWL4LzE/jD5jBM=&c=5OWV913GAN1D9q4zxtbbDgzzITrry9 MY6DrrTdYDGciHiaJ9fWZvievjdZCHEfiwiOI3B bl Wo67JGRIwlSn s/X2mUWYO6esQ6/d1ED9d/b5fuoAqjPtm4QUpl2FL&fallback_url=http://www.rarlab.com/.../winrar-x64-531pl.exe&downloadAs=WinRAR-12398-dp.exe  (150f11ff6e3bfa57d5849f43062f291f)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=Ru3UuOilVk/IPyWPaCP1V0cs6AbbAwAe6tqFgueiCAQ=&c=kQWNZ8UXQB5MGdsTBHwFfoeYEpyfi07FEU3eyW0VEmdpHuGyQNhLYHeb0aB4K8yUc7OfT71qZeGONF yAwZMsa96cYqee0FR/ KV6LGoB6XAp5tN2kbKb5XKotN5e/aK&fallback_url=https://cdn1.ashampoo.net/ashampoo/.../ashampoo_movie_studio_2_e2.0.9_sm.exe&downloadAs=Ashampoo-Movie-Studio-43446-dp.exe  (44e38f1a92591b9bde82c13f641f0141)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=zzNn5z4DJEoui/0XRlz2ksS3QxFndcGo2Tj8iQGFk0E=&c=plOazgI0a6KtPRn7g9NiPO pRaKdDncXCMyKBnoomPB6rSuWXTFM5tarnO6AiuBJSJRDjX5y6FvyMtqhTw1k BujzVOj/ZSksf61eDimbTvGaW7r3svVRXGRX7ssJpKg&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (09f75fdb5f74388177848b7761908f76)

1 / 68      (Malware)
http://www.universecentersigns.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  (sam-zaprojektuj-dom-wnetrze-i-ogrod-12466-dp.zip)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x= ubU EGSZo6ljhoof9zWl2IOFusnCe8OydZXGQPeShM=&c=5WXfKL67JENibkyYSy5qvxzcRyU5Blkc8x/ZmM0wCl9u2RIj4EpfjYNC6QjcHlTo5uhwsGCFGGaI8GRcgLTZGTf9NAZ0hFPrsd/6d21tjPnEonTlMGCWfXfFwOMtMdR8&fallback_url=http://.../ccsetup515.exe&downloadAs=CCleaner-13061-dp.exe  (964f9078bc0ff2c8abc0ac144c409274)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=XUeqmV JAIay8Jg 7kzl3/my70m0JAC2woCOSHbljUQ=&c=/w7w rV9ZlNj5r5niWz3qhqlmZjmiwkgJxvQiaRfmXEEPyVS7R1yerwXjYGCI1raC2JOrezrJgFUnbqtIJGaaK8cbFrfhrKcERmKwP4A xbumY9oN0fffQsnCbV4LL l&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (5d6dee9cbb9a73027b2d6642a0e878ca)

1 / 68      (PUP)
http://www.universecentersigns.com/c?x=4lhKxnDHp1xkNUQbArKZ7UWQ87GsFT36o3l u8/8X s=&c=/CNpPCaicQHGBtZKEyWdTmyKmGPOwh3TFl6Nr vcgOaAmQTaqo3Kc661A v AvfYOxw2tZNUfXQRKmRdJIp/kW3YbP69I6gpXxZu46HpsI4PP 0LsQxK9Nyp4akU sHi&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (989bccd0dc8f16025fc9787977fdb9af)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=don15b9DJIn/iENxlzS1UpwkabXfE6d9ee/lWsUUKzQ=&c=CKrPK 1Md qvQFCE290IUZvj/ 0BxwCbniu7XMzXJUaVHawOjVmZfZ2QDL6z0cHstQRGbXxGILkXSKs4W6AXTTCCeV2o6S5GtGZkjh4s LGpUG3WM5FO7M4guj1OFkee&fallback_url=http://programer.internetdsl.pl/.../faktura_s.exe&downloadAs=Faktura-13080-dp.exe  (e504fa4e6fbdfafa0e6c34f6a8290891)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=2/t4mHIfoxvcUOR3 s7pZh 50 6F0bHUtQtKZwDUYA0=&c=UM6U wA1svl1sV04axGNgOasMM5rmMIkwD5eOfOGmBmm3j29Iax9/vsYnsUQUBD4f4m5Mfew QoPLmVqh8PjXbO8XA8qkJzUi/9i5L76Cjj7YCPP5d4kx7FSlcFIYYKe&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp-12928-dp.exe  (icreinstall_winamp-12928-dp.exe)

1 / 68      (PUP)
http://www.universecentersigns.com/c?x=S36NrWSoJnfGPBfzmOHhGkmFYt5KqI0Y4AVt5H6RR2s=&c=mdNM8Dk8cCLAe8o9txmGOdF tbIVnKuWiIVEPfWsn4ybZNyUeVzRM6e2KYIp RtuSBpr boCz7VuX2oEKH28okmrBKRR9SbX3U1j7Lgvxyd1/mJvTB9LHaReYI KtFy0&fallback_url=http://download.virtualbox.org/virtualbox/.../VirtualBox-5.0.14-105127-Win.exe&downloadAs=VirtualBox-13122-dp.exe  (5408cbb3f12746a92ef3568707061ac1)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=MLYGAW2wV3c8QjdFVL5hLhZvr7EkhKknNvFYIDwFMuw=&c=kptUFOBAkHhswCVbHCuEpppl3cSWzLFcMNDnZL2PcHXyzM38zPMn61 vYH12CvyqhD3tWqTV/3zGpLCPd4fq7F5COeS1SC8Mc/5AMxiWcxBiNhnqXPZJMwCkGZWPoxrv&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (56ac583ba0712abb2337854c79d90650)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=ZiWDc8lw5mQrN/cO31FPg65LYWD0ANUkXuQSF6gYiWU=&c=l1iChAtZHWP6g3XPNzpt/qIQ7a/wu8vy01f92sR6k5MjQbVFeVW0WHC9BkgW97ztb7AVIjgKb3dNlYF2MYUmAjMcweuzJnhZYIh0nKS/I11E7xTRpG3mgGhooLIUD/fC&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (beb9eeba2e04c0b85cb79fe3c9f15475)

1 / 68      (Malware)
http://www.universecentersigns.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  (bulletproof-file-copy-11656-dp.zip)

1 / 68      (Malware)
http://www.universecentersigns.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  (adobe-reader-xi-21590-dp.zip)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=UYElngRtxKltxA8vSPUR2GF3EHlYPdAAmGJ6FEGeqr4=&c=UiCnhWOFMi0tyJNS212hIm3xSXrIb682pd3SJHF5VRhf3415YQ4lm0hVjR3x67yJwBVqYrW9bpv8CXwsIMQlb0L2vOhiNcHJxFLA/jzFiq3SQC6hhKpVMI7DTTHf5vR9&fallback_url=http://storage.dobreprogramy.pl/.../WYD_Installer.exe&downloadAs=Whos-Your-Daddy-68861-dp.exe  (b5e6a560d5912cd836f1bbb055b5fb0c)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=gbhsG9ecz1gAfEhBAsIJDDhkJ115uJ8pSC6KNHVH2RM=&c=ayUT12ibAfBkzwGnAKZVrsJa/gK4859sP4SjGqCJQHLIXWe4cSKptHNcaFRJNmbtyb9W2KMIxhBSi8aeG43e55ldzw1RYOHkGcS/tqsEVyQDaUaaO8oaCuBzRRfE0w5v&fallback_url=http://cdn.bluestacks.com/downloads/2.0.8.5638/.../BlueStacks2_AD_native.exe&downloadAs=BlueStacks-App-Player-35569-dp.exe  (ec8da64cddaa4016e25b143e2b7df69b)

1 / 68      (Malware)
http://www.universecentersigns.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  (adobe-reader-xi-21590-dp.zip)

1 / 68      (PUP)
http://www.universecentersigns.com/c?x=dSz97iCyObk276PEVTkJJ9kkzJHNl1s0QSgxkQE/3oQ=&c=hB5E5K68p79hJNcj6PT7XigVds84Xvhq1Bp8aUdweKidthVQsAN/7jRdDm2sdXWMH/ggtcULZugtQbxK0vgip3vq0Am2eV6jh/mj8bnbnDYaiZ3fBcSLturHUu7QM0ON&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (989bccd0dc8f16025fc9787977fdb9af)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=62JKpgglvz2cpGNE5R/KclgFRvaVwBK/ckOzFuRduaQ=&c=BvKisBYTZKTNb6/VjunlC3cgacFdhAJoe/efU7t/P63u5Is9Na6TDZs64Pjc1OS6Ogo3Cx8V0wBulPQjlnWP7CmgOLe3idaJxh GO8kE09okyczwlWZ79iFKI89DcFi/&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=kfdpOlw5jyCaTf3l67iwQZjtUCttRQNL6c5lMXn6iUg=&c=eem53Gya83tpkNrKFRPHoraAy1vmv7JmvJ LRSnHilC43mF3GMvzOYA8 ErP7fHsMdMeBzwn9AYyyfMd1izyFuoym8jv5xLzt2KkuLPLcNWzRUKd5qp CioeKCFGsAGH&fallback_url=http://download.viber.com/desktop/.../ViberSetup.exe&downloadAs=Viber-41180-dp.exe  (d6644b3a21db181bd24eda60d4d00ba5)

1 / 68      (PUP)
http://www.universecentersigns.com/c?x=lBHbexMpCN/qnJOD9XIn9FztXEyaquEmXigybY0ahuA=&c=9YL4igUJA6U1GNvhVVECErZHvkmH8e1wLL75JM5zsT 6B2W7aeKQGBXtsMz6p7IrO4okUTsLz1dWQITp3bDxdlt5TIZRwCC nDCe5ChhSG fFzN9iBdn/TSyVjcOCS3x&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (icreinstall_microsoft-office-2007-pl-service-pack-1-12126-dp.exe)

5 / 68      (PUP)
http://www.universecentersigns.com/c?x=oG8go WTPkTcPilvcY6QVoyLFxhzUeRt 6H/Ts7Ygfs=&c=YU rHDkv3WNDxGSDy7cFZSonULCUFL9XyzwvMcAx0AzIe4XB0yKRbLLhY30soW4oxBD2bPpahvjoX6k2cTRC1Fqwbl4tsUaEnr6OjixN HZuV75lROIbDdg9GzfRc75s&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (62f54c04be9b07f3add7f32fcba9d8c6)

1 / 68      (Malware)
http://www.universecentersigns.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  (teamspeak-46554-dp.zip)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=ZTV7LwAjYAGEN4yFbN2KC/W1/Zu1n77qJYKjs38gGS4=&c=CO/LHMCYAgOdNc/jvuywY1BJOnlCfYUKtuKQU97mX4HOY1V0SthsS1Ko8lEncQ1Zg59iZt VodoG9cy YbRHnLZBYqWmY1ta9JBMCCvGKreBWnm4WGZ2QTB5eQyOXDWf&fallback_url=http://storage.dobreprogramy.pl/.../VirtualDub-1.10.4.zip&downloadAs=VirtualDub-13335-dp.exe  (99863c48218440d3afa77d57443a2770)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=Tu5f/u4kq9N0uW lNfhRdzX 3bgsl0X/l1pWuuT9Yec=&c=PrS8EXXFwy7ka Ys81By6mQ6R0V8OaHcyEiWiArimJJClFWwhvVgB2hjXFNDuBdBo0/2H7uQu9tkgAm0P2SrtbPau9/2K5Y2jMTWQaAJYq8h/D gSmEHKF8TSFMzAmSs&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (e00373e8e234973edf828603aafe68a9)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=mf2MZgy6zxp9OVgMrB3aPMNHZmPuqpjBdakAPjWIGCs=&c=0e 5NdfuCA/nRWjNg6pfNmRk5u3pl756MDZByMwEvRfuadobq jFF6eCkqOqZxFcHPZ/oHd7vxngZ25sXFR/TkZaMrFDZPOmqqlSd7s vhs72mKJj584iXWPn2vOP0Uj&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.92/.../Opera_35.0.2066.92_Setup.exe&downloadAs=Opera-12614-dp.exe  (56ac583ba0712abb2337854c79d90650)

3 / 68      (PUP)
http://www.universecentersigns.com/c?x=hHeFvS97CKb1SgSq6f98DQYrfZhYRWiZuAIiGBOuzQ4=&c=5ccEUqzhvdhMDyht/fFx9TvgaA8VXGbAucAf1BIA3013Cl75uzlGa3WCIHg0PUvhvhEnvJIi8coicdgsgv/EJDsKwyOjw15MxJiiIO8qflTxX3c/hMw5bJXtwAhX9dYn&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (667261e4955339e66e5b79b8d9aac83f)

1 / 68      (Adware)
http://www.universecentersigns.com/c?x=OKv5o6bwLhX64uiL8FXhPvnbEExUkx1ziUqMu1EsyIc=&c=0HxsOvkJibyk1H8uLrVIud uvwe0cfF9Px054dI98Z8 CIVALB3iCvQ3dqhwbj/7TMz3V2tHYf8uWWGw1irklhuHAuoNoGMl L4vfVfopTYl2p6EbY6rDnnvh sHitV9&fallback_url=https://download.fosshub.com/Protected/expiretime=1453310892;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdWRhY2l0eS5odG1s/624463d1a399bd9b516145735ed66db82d2e787d9228a1d0b76239f64cc72e8a/.../audacity-win-2.1.2.exe&downloadAs=Audacity-11826-dp.exe  (671ee36d3f605576b7c1635b0855edf4)

 
Latest 30 of 93 download URLs

The following 36 files have been seen to comunicate with www.universecentersigns.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.