home

sweetpcapp.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain sweetpcapp.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Virginia, United States (US)

Create date:
Monday, August 11, 2014

Expires date:
Thursday, August 11, 2016

Updated date:
Tuesday, July 28, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 sweetpcapp.com records

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.Bundler.InstallCore, PUP.InstallCore.Installer.Meta, PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.InstallCore (M), PUP.InstallCore.RE48 (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore.S (M), PUP.InstallCore.RES (M), PUP.Installer.Bundler (M), PUP.NewMedia.NMH (M)
92.00%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application, Win32/InstallCore.ZD potentially unwanted application, Win32/InstallCore.XB potentially unwanted application, Win32/InstallCore.ZP potentially unwanted application
16.00%

NANO AntiVirus
Trojan.Win32.Agent.dhbpge, Riskware.Win32.InstallCore.dsmvqa, Riskware.Win32.InstallCore.dqheub
12.00%

Baidu Antivirus
Adware.Win32.InstallCore
12.00%

avast!
Malware-gen
12.00%

G Data
Win32.Application.InstallCore.EG, Win32.Application.InstallCore.CZ
12.00%

VIPRE Antivirus
Threat.5084491, Threat.4788237
8.00%

herdProtect (fuzzy)
a variant of bcfbff81233657cf699d19aa7fddb4407668dc92, a variant of 233a1ae573776be0f66f63f28caad7d97f5b4df6
8.00%

Trend Micro House Call
Suspicious_GEN.F47V0528, Suspicious_GEN.F47V0508
8.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
8.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
4.00%

F-Secure
Application:W32/Generic.70053c248f!Online
4.00%

Agnitum Outpost
Trojan.Badur
4.00%

Avira AntiVirus
PUA/InstallCore.A.2387
4.00%

Fortinet FortiGate
Riskware/InstallCore
4.00%

The domain sweetpcapp.com has been seen to resolve to the following 5 IP addresses.

209.99.40.223
209-99-40-223.fwd.datafoundry.com
September 1, 2016

209.99.40.222
209-99-40-222.fwd.datafoundry.com
August 15, 2016

54.174.184.216
ec2-54-174-184-216.compute-1.amazonaws.com
July 16, 2015

54.209.173.177
ec2-54-209-173-177.compute-1.amazonaws.com
July 1, 2015

54.210.155.30
ec2-54-210-155-30.compute-1.amazonaws.com
May 7, 2015

File downloads found at URLs served by sweetpcapp.com.

1 / 68      (Adware)
http://sweetpcapp.com/?dl=1&pi=NTaRAzaFNjcR&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDrLm7dAWxnLm7dREhKxlvmAWASDChTMm7dlChV8ROTg4AZMROTnm7K2pDZ1fOZiRAZnzNTnyAw==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AzMzATiyAZMq  (firefoxsetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&dr=cHaWck1C 32u rWPDk1t7KFPDdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzL4NTgFAjn0ASDPDdlChV81Nj7yAznFAZMz&pd=2323UEVw rWPDk1EDXiu7dWt&campaignId=9jn0AjLFOT7wAZMq  (superfastdownloadmangersetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATAzAZcFAZawAg==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1wIKNPcdnm2r0Wc32lDXiFvENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXznzOZczAZnFASDPDdlChV8dAjn0ATi3ATaz&pd=2323UEVwUK2J diu7dWt&campaignId=9jn0AzA4NznwAZMq  (picasasetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pipi=Ajg4NzcRAzg0Aw==&osos=VdluDrW3cw==&dr=cHaWck13IKFP XMm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXz7dAT7RAzn0ASDPDdlChV8zOZAyAZAzATMz&pd=2323Um2l2k11crRJ7Kiu7dWt&campaignId=9jn0Aj73NzCwAZMq  (winampsetup.exe)

0 / 68
http://sweetpcapp.com/?dl=1&pi=AjczNZAdAZCdNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fAj7zNjC4AZCRvm5EIKiWXzC4AzCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0AzL0NzAwAZMq  (popcorn timesetup.exe-setup.website)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLFAvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNj7zNjC4AZCRvm5EIKiWXzn4AzCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0Ajc0OZ70AZMq  (popcorn timesetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=AzM1NzCyNjgzAg==&osos=VdluDrW3cw==&dr=cHaWck1E2r5fSVDfcd5uXd5uDHvl7XAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzgRAZcFOTMFASDPDdlChV8RATA4OTMzATaz&pd=2323Umtp2dCtc3VuUmNJ i==&campaignId=9jn0Azn3Njn0AZMq  (gtaivsanandreassetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=AjCdNZczNZnRAw==&osos=VdluDrW3cw==&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzgROZ7dOTMFASDPDdlChV8dNzndAZc3AZaz&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AznzNjL0AZMq  (windowsmoviemakersetup.exe)

0 / 68
http://sweetpcapp.com/?dl=1&dr=cHaWck1o 3xzcrW0UXNoIKVBDkD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8RAjM0NzaRNZnm7K2pDZ1fNTCFNZgRNTi4Ag==&pd=2323UmDyDKLtDdWP HAu7dWt&campaignId=9jn0AjL0OTc0AZMq  (hotspot shieldsetup.exe-setup.website)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATL0NjAFNT70AM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=c3aW7mcm2r0Wc32lDXimcHaWck1z2rVP SDphXAmD3vpDZ0m rcWDK4m7dAWV5am7dREhKVuvmAWASDChTMm7dlChV84OTLdNjCwOTnm7K2pDZ1fATnzATAdNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0Azi0AjMwAZMq  (steamsetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATMwATC1NjLROM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzMwOZ7dOTMFASDPDdlChV8FNZ73OZ73AZaz&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzAdOZc0AZMq  (windowsmoviemakersetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzL1OTCyOZMFASDPDdlChV8dOZ70ATa4ATiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjgRAzgwAZMq  (minecraftsetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&dr=cHaWck1wIrW0 3Nj7XslvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzayOTcwAzn0ASDPDdlChV8yNzMROTiRATMz&pd=2323Um2l2k1t 3xpUmNJ i==&campaignId=9jn0AjLzNTcwAZMq  (photo_scape_setup.exe)

0 / 68
http://sweetpcapp.com/?dl=1&pi=ATi1AzgyATMFNM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck11 ml0eS13DKatcrRPeKVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNZM3OTMFASDPDdlChV8FNZL4NjL4AZaz&pd=2323UEsJck1p EN07KRBUmNJ i==&campaignId=9jn0Aza4OZgyAZMq  (unitywebplayer.exe)

2 / 68      (Malware)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNzC4Nzg4AZCRvm5EIKiWXzaRAT70NjayNZa=&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjgzNZn0AZMq  (minecraftsetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATL4AZgzNTi1Ni==&osos=VdluDrW3cw==&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWiLLm7dREhKVuvmAWASDChTMm7dlChV8dNTL4NzgwOTnm7K2pDZ1fAT7zATA4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0AznwOZ70AZMq  (bluestackssetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck10DK5t2mll2dVyvExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8yNz7FOTgwOTnm7K2pDZ1fNzCFAT74Aza0Ag==&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0AjgwAZAwAZMq  (teamviewersetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=AjC3OZiwOTC3Aw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWilam7dREhKVuvmAWASDChTMm7dlChV83AzL4NzgwOTnm7K2pDZ1fAZCdOTa4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0AzLwAji4AZMq  (bluestackssetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcRNZAdAi==&osos=VdluDrW3cw==&dr=cHaWck1tDKxp7S1w r5FDXam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNZa0OZMyATiRvm5EIKiWXzgyNzi1ATCzOZa=&pd=2323UEVw rWPDk1C 32uUmNJ i==&campaignId=9jn0Ajc1NTg0AZMq  (mediaplayersetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATgwNzgRNTA0Ng==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzi1AZMzOZMFASDPDdlChV8zAznwAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzAwAj74AZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pipi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1o 3xzcrW0UXNoIKVBDkD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWiLLm7dREhKVuvmAWASDChTMm7dlChV8zNZM0NzaRNZnm7K2pDZ1fOTMRNzCRNTi4Ag==&pd=2323UmDyDKLtDdWP HAu7dWt&campaignId=9jn0Aj7FNzA0AZMq  (hotspotshieldsetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNZM0NjC4AZCRvm5EIKiWXzC3NZ70NTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0Ajg3Nji0AZMq  (popcorntimesetup.exe)

1 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATadNza3AT7wNi==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAzidOTMFASDPDdlChV8wNTCRAZA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzAyNTcyAZMq  (javaruntimeenvironmentsetup.exe)

2 / 68      (false positives)
http://sweetpcapp.com/?dl=1&pi=AjczAziwAjiyNi==&osos=VdluDrW3cw==&dr=cHaWck1z2rVP SD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8FAT7dNjCwOTnm7K2pDZ1fATgRNTLdNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0Azn4Aj7yAZMq  (wrar420.exe)

0 / 68
http://sweetpcapp.com/?dl=1&pi=ATazOZnwNjAFAM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1R2KljI3xp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNzL3NTcFAZCRvm5EIKiWXzM1AT7RNjCwAjA=&pd=2323Um5j7dVw2rVCUK5wckFj d0=&campaignId=9jn0AzL0NZiyAZMq  (quicktime_setup.exe-setup.website)

0 / 68
http://sweetpcapp.com/?dl=1&pi=AjCyAZ7dNzCRNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1z2rVP SD0 T1z2dVl2Z7mc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOTg1Nj7FAZCRvm5EIKiWXzLFNZawOZCRAjA=&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0AzazNTCwAZMq  (steamsetup.exe)

8 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATM0Azn1AzA0Ng==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1wDr7tcmVPDrVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1OTkDj rcWDK4m7z0RvmiWAkDjIKiWXza0Nz7yAZnFASDPDdlChV8dNjn4NTMdATaz&pd=2323Uml0UKD1 QFj d0=&campaignId=9jn0AzA1OTCyAZMq  (pdfreadersetup.exe)

6 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=Ajg4NzcRNZi3Ai==&osos=VdluDrW3cw==&dr=cHaWck13IKF6IXMm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1ZiSDj rcWDK4m7z0RvmiWAkDjIKiWXznRNTn3OTMFASDPDdlChV8FNZaFAT74AZaz&pd=2323UEsJcrluc3xP rwu7dWt&campaignId=9jn0AjczOZMyAZMq  (winzipsetup.exe)

8 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATAdNTAyAzAwAM==&osos=VdluDrW3cw==&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AznwAZL0AZMq  (minecraftsetup.exe)

8 / 68      (PUP)
http://sweetpcapp.com/?dl=1&pi=ATadNZAROZnwOM==&osos=VdluDrW3cw==&dr=cHaWck1q7XDPvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8wOTA0NjCwOTnm7K2pDZ1fOZayATidOTnyAw==&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzM4NZLyAZMq  (javaruntimeenvironmentsetup.exe)

 
Latest 30 of 30 download URLs

The following 57 files have been seen to comunicate with sweetpcapp.com in live environments.

TCP » 209.99.40.222:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
online-guardian-v2.0.9.exe

TCP » 209.99.40.223:80
jingling.exe

TCP » 209.99.40.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
msn.exe

TCP » 209.99.40.222:80
apptrailers.exe

TCP » 209.99.40.223:80
online-guardian-v2.0.9.exe

 
Latest 20 of 83 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.