dl.appsdesktop.com

OutBrowse

Domain Information

The domain dl.appsdesktop.com registered by OutBrowse was initially registered in December of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from dl.appsdesktop.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Thursday, December 26, 2013

Expires date:
Monday, December 26, 2016

Updated date:
Sunday, December 27, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.Bundler, PUP.OutBrowse.TOVKOMSERVUKRAYINA.Installer (M), PUP.MindAd.Mindadmedia.Installer (M), PUP.MultiplyROI.Installer (M), PUP.Outbrowse.SalyutemPlyus.Bundler (M), PUP.Outbrowse.Bundler (M), PUP.Amonetize.TOVSONORAKHARIKV.Bundler (M), PUP.Outbrowse.OTOPIASoft.Bundler (M), PUP.OutBrowse.MultiplyROI.Bundler (M), PUP.Outbrowse.BONDONJOV.Bundler (M), PUP.Outbrowse.OTOPIASOFT.Bundler (M), PUP.Softpulse.SOFTFORCE.Bundler (M), PUP.Outbrowse.BestAPP.Bundler (M), PUP.Outbrowse.STARTNOW.Bundler (M), PUP.Outbrowse.Outborwse.Installer (M), PUP.Outbrowse.BonDonJOV.Bundler (M), PUP.Outbrowse.STARTPlaying.Bundler (M), PUP.Outbrowse.MARIMARA.Bundler (M), PUP.OutBrowse.TOVOsyaTrans.Bundler (M), PUP.Outbrowse.KompaniyaAromaSpaisTOV.Bundler (M)
97.83%

VIPRE Antivirus
Threat.4150696, OutBrowse, Adware.OutBrowse
10.87%

Dr.Web
Trojan.OutBrowse.264, Adware.Downware.2081, Trojan.OutBrowse.27, Trojan.DownLoader9.46827
10.87%

McAfee
Program.Adware-OutBrowse.e, Adware-OutBrowse.d, Artemis!ECEC9990C092
8.70%

K7 Gateway Antivirus
Unwanted-Program , Trojan
8.70%

AVG
Downloader, OutBrowse, Potentially harmful program Downloader, MalSign.OutBrowse
8.70%

herdProtect (fuzzy)
a variant of 8b5b70a85eef0e53a5e9623ec1aa23a93df42cbb, a variant of 686b461064cea9d214ac43eb7b21913604dcb46f, a variant of 4f55c9cff37e1d4ea81a50db3f16f0d2e12660fc
8.70%

ESET NOD32
Win32/OutBrowse.BU potentially unwanted application, Win32/OutBrowse.BA potentially unwanted application, Win32/OutBrowse.BQ potentially unwanted application
6.52%

Malwarebytes
PUP.Optional.OutBrowse.gen, PUP.Optional.Outbrowse
6.52%

Trend Micro House Call
TROJ_GE.9BC88087, Suspici.202D3B0F, TROJ_GEN.R0C1H06AV14
6.52%

NANO AntiVirus
Trojan.Win32.OutBrowse.dmikim, Trojan.Win32..cthmwf, Trojan.Win32.Generic.cthmwf
6.52%

Comodo Security
Application.Win32.AltBrowse.HY, ApplicUnwnt, Application.Win32.Outbrowse.G
6.52%

Sophos
PUA 'OutBrowse Revenyou'
6.52%

AhnLab V3 Security
PUP/Win32.OutBrowse
6.52%

ESET NOD32
Win32/OutBrowse
6.52%

The domain dl.appsdesktop.com has been seen to resolve to the following 63 IP addresses.

ec2-23-21-196-192.compute-1.amazonaws.com
January 27, 2016

ec2-50-17-254-254.compute-1.amazonaws.com
January 27, 2016

ec2-107-20-180-82.compute-1.amazonaws.com
January 3, 2016

ec2-54-235-117-115.compute-1.amazonaws.com
January 3, 2016

ec2-174-129-32-168.compute-1.amazonaws.com
January 3, 2016

ec2-54-221-222-214.compute-1.amazonaws.com
December 15, 2015

ec2-50-17-193-226.compute-1.amazonaws.com
November 19, 2015

ec2-184-73-196-210.compute-1.amazonaws.com
November 19, 2015

ec2-174-129-233-227.compute-1.amazonaws.com
November 19, 2015

ec2-54-235-198-165.compute-1.amazonaws.com
November 13, 2015

ec2-23-23-110-1.compute-1.amazonaws.com
November 13, 2015

ec2-54-225-189-195.compute-1.amazonaws.com
September 10, 2015

ec2-23-23-132-162.compute-1.amazonaws.com
September 10, 2015

ec2-54-225-246-244.compute-1.amazonaws.com
August 17, 2015

ec2-23-23-236-39.compute-1.amazonaws.com
August 17, 2015

ec2-107-21-101-233.compute-1.amazonaws.com
August 17, 2015

ec2-23-21-41-149.compute-1.amazonaws.com
August 14, 2015

ec2-54-225-157-95.compute-1.amazonaws.com
August 14, 2015

ec2-107-20-223-200.compute-1.amazonaws.com
August 11, 2015

ec2-54-225-247-99.compute-1.amazonaws.com
August 11, 2015

ec2-54-197-230-35.compute-1.amazonaws.com
July 23, 2015

ec2-50-17-206-238.compute-1.amazonaws.com
July 23, 2015

ec2-54-225-119-32.compute-1.amazonaws.com
July 16, 2015

ec2-23-21-127-136.compute-1.amazonaws.com
July 16, 2015

ec2-23-21-168-225.compute-1.amazonaws.com
July 1, 2015

ec2-54-243-79-171.compute-1.amazonaws.com
July 1, 2015

ec2-54-243-193-107.compute-1.amazonaws.com
May 4, 2015

ec2-23-21-52-184.compute-1.amazonaws.com
May 4, 2015

ec2-54-243-153-160.compute-1.amazonaws.com
March 6, 2015

ec2-54-196-192-2.compute-1.amazonaws.com
February 14, 2015

 
Showing 30 of 63 IP Addresses

File downloads found at URLs served by dl.appsdesktop.com.

 
Latest 30 of 191 download URLs

The following 20 files have been seen to comunicate with dl.appsdesktop.com in live environments.

 
Latest 20 of 21 files

URL:
http://dl.appsdesktop.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)

Remove Malware from dl.appsdesktop.com - Powered by Reason Core Security