home

www.appstodaynew.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
appstodaynew.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.appstodaynew.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 10, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 10, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 10, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 10, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 10, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 10, 2016

File downloads found at URLs served by www.appstodaynew.com.

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=OZsZ UbKX4JTAALD5 4VUAXjuOQdwS5mGqVPlV6kEXo=&c=xla1289dbFPfdODm SKtqhK4cms0XaVl8S5Ch3FW3D9Qv3qW 9Q6A926HwPdLe1c4a7BWq1JYK1h2lfrgLP48bE Ry2 1X6DV YACviVgiiXj6QWW3ltY4fl0hkc5T5k&downloadAs=ristar.exe&fallback_url=http://gamefabrique.com/dl/.../ristar.exe  (b6bf772ff49d77d2f61365f9c1675823)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=z4a4dirbGT4 LxWNnRFIGYdpmj8piP8cwH20RrXRLBc=&c=DHpEVIYNDd Cit3UKYlz2RrKXmf/c4emiJGLdr/9OddPOvnGUTb ppkbOs4wu1E3//ThL9JNM/4u6rFlje5WxR39R9 7KNeCmjjoO5S0sYyIYM1OUBkaPrVyxWtEuzQG&downloadAs=fifa_98.exe&fallback_url=http://gamefabrique.com/dl/.../fifa_98.exe  (60a671dc88bca8c3ec5861d55846ddbf)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=fLW/qqJZwtWi7xMke5G/ptOokML71guKOYIIxuhz43I=&c=CWX5W1y0HYK7s/s/0wb 1b RUSDQWy2cyD60gQT8jfc9tCiG/0T8mZCoj2tjYFh/XM4ha2eXjXEZXjTggN3ZbrbLSs yFlidWnwuNf0V t6tHoirxRrCni/lzEwAQnc5E2ADgXuKpqsGHTaA/TioH3HCIfaft/GVKsMr5bwqFrDYoOA2cXCWnA8L/ilM2nTa&downloadAs=AirportTycoon3Setup.exe&fallback_url=http://d.trymedia.com/dm/take2/2h_d/.../AirportTycoon3Setup.exe  (e3bf4dd823561ea89ede9c80288d30ec)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=hVIwadzP5dO4YzetgRt4tqJ3OekLU0vyNMGK8rI8G5k=&c=FZC/7KPXA6GFPlpx5Uzsj8QSav4TmeiTYdXVm5YOTvNGkI6TogH4sfqMPUaNzxOQ0hYmPBxHhpGNNlQST2/u7Ts8iKjPK2SorRZIyHA5ZGS91VJSOs7c02a7VqOTV6dA&downloadAs=humans.exe&fallback_url=http://gamefabrique.com/dl/.../humans.exe  (f4ef48759fe9a7fa7616708a2dda120b)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=L5lTcsihQwVTNylRrME1xg39mMLE9MNn5VcRhKTk8rE=&c=5e9QbfvzDxqrK5YSHCBI rABE2Xj1LhxjmWb7riT2Ymkw5ZoEycqF/gcdqRvibMDwUZLjw2TS2LAY4omnJsoWN9GwHmexb4CutLCKTyx1p10OmxEgA Olkw LbvdYXAV&downloadAs=super_smash_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_smash_bros.exe  (f9722a07c80b1f2197f3ba2aad1e3e93)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=sDYYHmKuoIEFpN91xuPUZALrgbeZ9jACm6LFFvE/z/o=&c= yNOsllvf4cOMPCAfBLtTZmwiLTcM7Zrz9OpkBORBGXpXaJFkhEdEntnbAHGudtNV8bP5jp5Ggc3ajm0w3RNi0QngbKjTJwM/AABHzAkr2N4E8k/wvPvPL8kfrN9VcvyuZSUzGlWD/nD3KL1eHgoOPqEI0EeFZiH9MZKabrYO1OllTKCtkUsKFaCHl7P9TeF&downloadAs=yoshis_island.exe&fallback_url=http://gamefabrique.com/dl/.../yoshis_island.exe  (66191284a299e4aa17cf0cca5ba0f9d4)

1 / 68      (Adware)
http://www.appstodaynew.com/c?x=g0l7NYFpXRnFzUfmOnHUHjeDenXQ0UL MIVJA1/pb0o=&c=jBAsYgtwAariukIvg s6ibJvNMarmfnSoKBLo0BLFVspMzMTgGcaJVlyKFeUjUUtpMlXHv5XSV/lw5b4iNWm3AcrnK9NYEb9q0x2MKDOjVKGYFKigPzcITn9VchUIgMB&downloadAs=top_gear_2.exe&fallback_url=http://gamefabrique.com/dl/.../top_gear_2.exe  (55b32991af264f6996da11c955d9b133)

The following 6 files have been seen to comunicate with www.appstodaynew.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.