home

cdn.app-new.info

Privacy Protected

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
Gal Communication (CommuniGal) Ltd.

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
app-new.info

Whois:
2 app-new.info records

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.NewMediaHoldings.Installer (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RES (M)
90.91%

Dr.Web
JS.Muldrop.21, Trojan.InstallCore.152, Trojan.InstallCore.271
27.27%

ESET NOD32
Win32/InstallCore.XX potentially unwanted application, Win32/InstallCore.YH potentially unwanted application
18.18%

VIPRE Antivirus
Threat.4786018
18.18%

Bkav FE
W32.HfsAdware
18.18%

Malwarebytes
PUP.Optional.InstallCore.A
18.18%

K7 AntiVirus
Unwanted-Program
18.18%

Avira AntiVirus
PUA/InstallCore.Gen4
18.18%

G Data
Win32.Application.InstallCore.EG
18.18%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
18.18%

AVG
Generic, InstallCore
18.18%

Panda Antivirus
PUP/Multitoolbar
9.09%

Comodo Security
Application.Win32.InstallCore.DQY
9.09%

The domain cdn.app-new.info has been seen to resolve to the following 4 IP addresses.

185.53.178.7
June 27, 2016

54.213.176.160
ec2-54-213-176-160.us-west-2.compute.amazonaws.com
February 15, 2016

54.187.146.41
ec2-54-187-146-41.us-west-2.compute.amazonaws.com
February 11, 2016

54.200.49.61
ec2-54-200-49-61.us-west-2.compute.amazonaws.com
July 23, 2015

File downloads found at URLs served by cdn.app-new.info.

1 / 68      (Adware)
http://cdn.app-new.info/c?x=E9MgZ09JwshBepUVxe1h1ZcCPjzgi6Qzky4ZX19c7Nk=&c=tnGHA/uTaix28pHrTZEaEaqnHDWF9SqRYSG2QGoz7OA qV5D6WgvbcLRM19kBN6KKV0Qj3B3n4XzQd1CAUt1rlCwfWIHj2IFSlbKU1DXkVPHN9bKhVQZJFKadgwb5iSWJAE2dkvyD//cTDZiWlyZ8g==&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe&downloadAs=FirefoxSetup.exe  (beacbe9016062675c8e14734ba6de953)

1 / 68      (PUP)
http://cdn.app-new.info/c?x=s8h7mBnngnp3rHyxqDKyeEYS25CCLv68QsScurVpWqA=&c=z2VOFSMvrN47Uj237hn5WfiKQ1fJTh/To4QfWQRjX8MNy6LXmZw9J9 /u0OcGBzRaExwKiZlWqNumIgy0xQ 9pF1gRyBDiRuwtg7PLlQT4M=&fallback_url=http://allmyapps.com/binary/653/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=TeamViewerSetup.exe  (6a3efeeecc4a0b06d19038acb9d1f91c)

1 / 68      (PUP)
http://cdn.app-new.info/c?x=DMCh6wemcmf72kGG2t3jY1zpKHiFGunWnSKVABuPTkc=&c=RL4j6VuPBsd5/vpV EaZ2pk639Xfx2 vxLBxkFPZj HUUFUV4 n4ul oEUr0KuVQBeROVEZYmvHF/04XIEB75F5AkzURshT81evyxBREFk8=&fallback_url=http://allmyapps.com/binary/653/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=TeamViewerSetup.exe  (4a49d09d4ffc3556f8754b6e9c0f5b4a)

1 / 68      (Adware)
http://cdn.app-new.info/c?x=3efXHzYDWbfcMvLWQaX2AEay8ZBvkz67m9QZei OTdA=&c=I5ixrjPlenCJmpzodr9lFYlEue9yzpnI7aaxffiYqo1u JFr8ZG2IDJsq91cxpObg7Bb2yEdxh1E0CCbC38ZvD8CNkQvz14psL/PzCGNLGpU4MTDF3OHTU8dwfubEK14TeDKZnjymshS2MOeaUIejQ==&fallback_url=http://allmyapps.com/binary/17398/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=LeagueOfLegendsSetup.exe  (leagueoflegends.exe)

1 / 68      (Adware)
http://cdn.app-new.info/c?x=odalk/7XQQabPDJ5y7oXFPUUai3nyHDfMBvHefvJuS8=&c=5hchhpZnJ5u9KLeRgQU6KtzuhAlz5MVOS2UOO2xVOU/uJnrzpA861XUUfE/yspdVXcOQ7525QVHbvJknVoRcATrhtWqK2VZkPBW8yqWOmbIfcRDBYYcm3fB2PaezGI0JMENnUr8wQjwH1YOlJ4W89g==&fallback_url=http://allmyapps.com/binary/6385/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=CounterStrikeSetup.exe  (de268b99fcbb17112c894a7da89d7b17)

1 / 68      (Adware)
http://cdn.app-new.info/c?x=6PHa0PLBLfBz4qzfKvHfFMJPyxtbDJXIFSNYiK5kIxA=&c=HFUll/vJIeQ /EtEVO422fc4fE3bR1KlCDXqZIxISazfkG zEi7Lpb2aTnltV6KD327NRiZNCSJ/aJUwrm5bKsffZkalCNcn78vHeGIEwGHfKyqtW8VYYKnn6WttCr QPJoYneswXa8vyNGhKCph1Q==&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/27.0/win32/.../Firefox Setup 27.0.exe&downloadAs=FirefoxSetup.exe  (ecc5321f5adb95e4ee73cbc3716c4286)

12 / 68    (Adware)
http://cdn.app-new.info/c?x=L7LIE/lOpN5OzlxOG6KSyDcqyAxHRSiLt07H9dXOqlQ=&c=Dr2QKmc30SUJpTDpAXNnCwXSXdCPKR42fn5eqlEMja2rBVsmVUYwaOCBjt9J5bpEMoGq3fwCM2fn4SvkMyMRUGeThHfWGCHT1Z0XAOcyyfiarhL994167jtas0qfD1jLCEiMtNZU /bL5Pu3eKfdow==&fallback_url=http://allmyapps.com/binary/570/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=GoogleChromeSetup.exe  (9c4166a9609bcf01cf671455712ac18c)

12 / 68    (Adware)
http://cdn.app-new.info/c?x=m4NNTs31xAfKgxVtHpIdQ Kerc1fVzwRZu3OPPllcV8=&c=2cRSieU52sWKXumL7Yh9 cUStwfHm NEAzpDos9yzCKy4DoTDuwu3fJNNIWz5QhciT54HAJZnyxP0en1EoSf9OUPLqKGU3HQ0wkOR4nR fyIPE c/ksyuLEA04NLkYZ&fallback_url=http://d3qor7nx9zb32s.cloudfront.net/.../FileOpenerSetupG_V3.exe&downloadAs=FileOpenerSetup.exe  (0c00733bbc5416e90b0a0e8f616a7dda)

1 / 68      (Adware)
http://cdn.app-new.info/c?x=d s j3hmYQYTh9E6PkXbii9Eltz004qAgVi6ONDf j8=&c=snRDTwYn939xCmqsKhtZn9N oFymT/B1pNHuieqTBtBMvxBfVgF/htadghD8U g0cwYO9 yYJeqhfU8PhbgSk6in 2gswfy9lRMnj7jtFmRM4VMNoEtC mV2HQJkj3GL&fallback_url=http://allmyapps.com/binary/605/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=SpotifySetup.exe  (3f4e210494a914ecb10d990b42648732)

1 / 68      (Adware)
http://cdn.app-new.info/c?x=QYLCdSjGyKJSGX32uxOmEkAbdL17uS0K5Gut 9oakqQ=&c=CGxUDF3DYidjS8/k3V2o7PhsSonBAipT/NHnpdxsTFEoYoVApWmmNG rQiGdgYIRCQvxCAMLJBsaeZPiYv1vufMFoQVy5o7Nar73HMt8G eXEMQm3p/uYvMKCLH0/v0/xrcQFhlrVrjAdgni4lZOuQ==&fallback_url=http://allmyapps.com/binary/1603/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=MinecraftSetup.exe  (d9796e54180c75cdbcf46fda8b081335)

1 / 68      (inconclusive)
http://cdn.app-new.info/c?x=vNwifnRgrzgSgksW8N2xLmYEZjgh90guqq/02OFzXpk=&c=PcwaleqYo RZoQQM934xnDfmouPp 4DqX/Y2VL8K1xSfuonk2MG7dHFRo2RxCoE995HI9p5jo1AjTY 7TiOfSMZyB9uoLT4rg2kQNYWRdOH5Na01gqFUAjIVhj1KtFjrR9ud3t91ITIDmUDLUmMVfg==&fallback_url=http://allmyapps.com/binary/400/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b&downloadAs=FileZillaSetup.exe  (filezillasetup.jse)

The following 2 files have been seen to comunicate with cdn.app-new.info in live environments.

TCP » 185.53.178.7:80
adobe_flash_player_chrome.crx

TCP » 185.53.178.7:443
translategenius.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.