» www.awesomepcapps.com
Overview
Analysis
IPs Addresses (6)
Downloads (28)
Network (60)

www.awesomepcapps.com

Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain www.awesomepcapps.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

Privacy Protection Service INC d/b/a PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Virginia, United States (US)

Create date:

Monday, August 18, 2014

Expires date:

Thursday, August 18, 2016

Updated date:

Tuesday, July 28, 2015

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

awesomepcapps.com

Whois:

2 awesomepcapps.com records

Scanner detections:

Detections (85% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.DovaNetworkNewMediaHoldings.M, PUP.Bundler.New Media Holdings, PUP.NewMedia.Installer.New Media Holdings.Installer (M), PUP.installCore.ICSSetup.Installer (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.NewMedia.NMH (M), PUP.installCore (M)

95.45%

ESET NOD32

Win32/InstallCore.UE potentially unwanted application, Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.UQ potentially unwanted application

18.18%

VIPRE Antivirus

Threat.4788237, Threat.4786018

18.18%

Avira AntiVirus

Adware/InstallCo.zkt, Adware/InstallCo.CZ, ADWARE/Adware.Gen

18.18%

G Data

Win32.Application.InstallCore.CZ

18.18%

Dr.Web

Trojan.InstallCore.33

13.64%

Sophos

PUA 'Install Core Click run software'

13.64%

AVG

Generic

13.64%

avast!

Malware-gen

9.09%

Bkav FE

W32.HfsAdware

9.09%

K7 AntiVirus

Unwanted-Program

9.09%

NANO AntiVirus

Trojan.Win32.InstallCore.dlnpbb

9.09%

Comodo Security

Application.Win32.NewMedia.VDO

9.09%

IKARUS anti.virus

AdWare.InstallCore

9.09%

herdProtect (fuzzy)

a variant of 9d1a420b231bed2b2188992e43c6d7a167cc8f40

4.55%

The domain www.awesomepcapps.com has been seen to resolve to the following 6 IP addresses.

209-99-40-223.fwd.datafoundry.com

September 4, 2016

209-99-40-222.fwd.datafoundry.com

August 19, 2016

ec2-107-23-203-23.compute-1.amazonaws.com

February 12, 2016

ec2-54-84-143-69.compute-1.amazonaws.com

January 4, 2016

ec2-52-7-132-182.compute-1.amazonaws.com

August 21, 2015

ec2-54-236-147-238.compute-1.amazonaws.com

May 3, 2015

File downloads found at URLs served by www.awesomepcapps.com.

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1NKkDj rcWDK4m7z0RvmiWAkDjIKiWXz7dAZC0ATn0ASDPDdlChV8FOTg0ATaRAzgy (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV84OZnwATaRAzgy&campaignId=9jn0AjayAzM0AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0AjadAzn4AZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV8FNjiFAZaRAzgy (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0ATc3AzC0AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWLngm7dREhKVuvmAWASDChTMm7dlChV8wNzndNjARNZnm7K2pDZ1fOTidOZg1NTnwAw==&campaignId=9jn0AjMFOZAwAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV80OTawATaRAzgy&campaignId=9jn0ATC0NjLdAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzcdAZC0ATn0ASDPDdlChV81OZC1ATaRAzgy&campaignId=9jn0ATLyNjgwAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV8ROTnwATaRAzgy&campaignId=9jn0AjMdNjM4AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0ATC1AzayAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0ATgdNzMwAZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0ATLRNT70AZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzcdAZC0ATn0ASDPDdlChV81OZC1ATaRAzgy&campaignId=9jn0ATLFNj70AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzcdAZC0ATn0ASDPDdlChV81OZC1ATaRAzgy&campaignId=9jn0ATcRAjawAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1NKkDj rcWDK4m7z0RvmiWAkDjIKiWXz7dAZC0ATn0ASDPDdlChV8FOTg0ATaRAzgy&campaignId=9jn0Ajn3AjnwAZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0ATcdNTi4AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0ATcdNTi4AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV84AzLFAZaRAzgy&campaignId=9jn0AjaFOZa4AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1OTkDj rcWDK4m7z0RvmiWAkDjIKiWXzi3AZC0ATn0ASDPDdlChV83OZLzAjaRAzgy&campaignId=9jn0AjaFNzCyAZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzcdAZC0ATn0ASDPDdlChV81OZC1ATaRAzgy&campaignId=9jn0ATcyOZC0AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0ATgyNZndAZMq (spotifysetup.exe)

14 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0ATC4OZn0AZMq (spotifysetup.exe)

1 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0AjnFOTidAZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0AjMzATA0AZMq (spotifysetup.exe)

0 / 68

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1rSSDj rcWDK4m7z0RvmiWAkDjIKiWXzc3AZC0ATn0ASDPDdlChV81NZgdAjaRAzgy&campaignId=9jn0AT71AZnwAZMq (spotifysetup.exe)

15 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzMFAjLzAjn0ASDPDdlChV8FOZC0OZMRNZgy&campaignId=9jn0AjnzNTCyAZMq (spotifysetup.exe)

4 / 68 (PUP)

http://www.awesomepcapps.com/?dl=1&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAFNzM1Ajn0ASDPDdlChV8ROZMROZCRNZgy&campaignId=9jn0AjAyNTa4AZMq (spotifysetup.exe)

8 / 68 (Adware)

http://www.awesomepcapps.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzndAZC0ATn0ASDPDdlChV8FNjiFAZaRAzgy&campaignId=9jn0ATC4OTcdAZMq (spotifysetup.exe)

The following 60 files have been seen to comunicate with www.awesomepcapps.com in live environments.

TCP » 209.99.40.222:80

UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80

UCBrowser.exe (by UCWeb)

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80

hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80

ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80

TCP » 209.99.40.222:80

online-guardian-v2.0.9.exe

TCP » 209.99.40.223:80

TCP » 209.99.40.223:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.223:80

hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80

TCP » 209.99.40.222:80

apptrailers.exe

TCP » 209.99.40.223:80

online-guardian-v2.0.9.exe

Latest 20 of 86 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.