home

get.0121f.info

OutBrowse

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
0121f.info

Whois:
2 0121f.info records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Outbrowse.Bundler, PUP.Outbrowse.DireCtdownlOadgtt.Bundler (M), PUP.Outbrowse.DireCtdo.Bundler (M), PUP.Outbrowse.DAiLyApp.Installer (M), PUP.Outbrowse (M)
100.00%

Dr.Web
Trojan.OutBrowse.542
11.11%

McAfee
Program.Adware-OutBrowse.e
11.11%

avast!
PUP-gen [PUP]
11.11%

Emsisoft Anti-Malware
Dropped:Trojan.GenericKD.2323683
11.11%

VIPRE Antivirus
Threat.5085447
11.11%

Lavasoft Ad-Aware
Dropped:Trojan.GenericKD.2323683
11.11%

ESET NOD32
Win32/OutBrowse.BU potentially unwanted application
11.11%

AVG
Potentially harmful program Downloader.FXA
11.11%

MicroWorld eScan
Dropped:Trojan.GenericKD.2323683
11.11%

nProtect
Dropped:Trojan.GenericKD.2323683
11.11%

Quick Heal
Adware.NSIS.OutBrowse.A
11.11%

NANO AntiVirus
Trojan.Win32.OutBrowse.dqzhmi
11.11%

Trend Micro House Call
TROJ_GE.105BB3D1
11.11%

Bitdefender
Dropped:Trojan.GenericKD.2323683
11.11%

The domain get.0121f.info has been seen to resolve to the following 6 IP addresses.

54.225.72.141
ec2-54-225-72-141.compute-1.amazonaws.com
April 9, 2016

107.20.138.96
ec2-107-20-138-96.compute-1.amazonaws.com
April 9, 2016

54.243.182.187
ec2-54-243-182-187.compute-1.amazonaws.com
October 12, 2015

23.23.120.83
ec2-23-23-120-83.compute-1.amazonaws.com
October 12, 2015

107.20.234.218
ec2-107-20-234-218.compute-1.amazonaws.com
October 12, 2015

54.235.170.216
ec2-54-235-170-216.compute-1.amazonaws.com
May 15, 2015

File downloads found at URLs served by get.0121f.info.

1 / 68      (Adware)
http://get.0121f.info/1429911063/1429911063/.../UWVIRUNZazxMeGtxLmwyQy9rUGhmT21MaDFaSmlzRWNhZ0A1WiRcS19zbWZpWXVqK2ZvVGVtMmxtU1JvS149ZkdUbmtDUU1sO2Q1ZHJLbzNlLDxLPHVnNEUrQUYdYFxqajstHXFmcDQp  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429899411/1429899411?52327806439YmNxNCo3cDczMCctJGE7Ki0yMDMjYzgwNi8wHm43LCNbLDsvLzAsMCBfaWBeaWZiNmd3UE9hK1A1aXVYJXVfS3EnPXJXcXBnLT0yTU09YHFpZj9ZbGRJQEFXZU9IMWtqP0lQXWhAMk0tYWtCaFtPaUhVc3Jxa113LHFLalFAcktoVlBkUFI2Ny4 aWxqSmpqSEFfU2RGMmxQUEBMXDRlMGtmRW1NXnNTUVhyTUBDUT5cSy1mTl9GZGJMWzAxaUU9OV9qdD5ZY1JHNElfNXApUllJTWNncE9UXmA0KkZwRGNYMWZhUkk6RTVHSi4qbCdvaU0oaUx4O0Y4a2lJPE9rSTJgTm5kNSpna3BUbUtkaUMtTC5mT2NmUWE1P3F1Oi91TlNpRm8yY0dxM0t0c3BDQkQiZlpqbDowH3Jpajkv  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429894731/1429894731?51519327449YmRvNSg8bjYtLycyMiFjNC8yMTMzHWc8LjIpMiRnOSwdXzA4TUxKQD5OIlpnaF5qYGE7SmItJ3NMUkJZZyRiX2tlODEheWBtOys  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429906866/1429906866?49176129872Y1xzLys bjQvLC4uHWM2KzQwLS8fajkpOCoxJWw0KB9iLTQxKjEzLh1bZWdfYmhdN251TUtdMlEua3AnQWJHRUpCaGl4Z1xOQkEsQT9MWTBcZ0ZXaWBFR0JQZ0pJOGlnO0VXXmFCLU40X2g ZGJQYkpQdHlvaFlzM3JEa19lUGtMbW4uRDpKJmQ0aE5sSHUvKUtBZjdWRXJzXTVmN3FjWXhRY29lPWNgUmROM2QxSDI9KTBAbDYyKihpXS8wYmxDQ2tKcm43SlBTXUY0aWcpQHQ0ZmcwX21gR10pWEtpMFE9TEFYX114dWswTWsxYWBqRzZJQWVBLEw3KWtbbWhdQmxrd1A5MHJBWy5HcG1UYEA9XWtbYHlhWUJNTkEfZ19mbTYsJXhgaDYw  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/1429887762/1429887762/.../aTQ2MiowH2A4MTQuKzIlZjsqMjQzJmc0MCVeLzYtMy82Lh1ia2NhZGVfPDIxKTAyLDMqLDAlaVxmbTwsJHNlazwy  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429898165/1429898165?80366662886X2VxMCs5ajspLzAoMSNeNywwMDAsIGQ9Ly8uMS0kZjUrHnBvaV5vXXJmWWddPUFpcWhmbVlcR1luXmFfbCBjcF1vamw6bVtcY3dtZl9sLl9maWFtbmdsKFtvaiBec2hfZWFdZmFqXzc Y3BdW25XRGxxaGZpX1weYGFsYmhbZ187PF1faCtDbF9fdGMjS25ZbmFbbF4lQ1xhbmFvayUxKC8pPm1mZCtQX2xjW2oeYV1nbjosIHRjbjUq  (deep freeze standard edition 7.5 full serial.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429927702/1429927702?86668702084X19uMCk4cDsyKy8eXjcsLTAwLyZkOSkwMy4eZz0vJlwtNR8uKh0tMEFMQUFGTic OiZJQiUsLB0uKiBbZWlha2FgNSoqMC8wNi8zLSwqLC4yLjI1MjApMB5jXWlmNjIkemFsNSw  (setup.exe)

1 / 68      (Adware)
http://get.0121f.info/.../1429890911/1429890911?81893165012X2RsLS4 ajgxMi4vMh5bOjEuMzc2JGQ8KyovNCBpPS8kXDA1RVJMPEBSJWFkaFtiZmM3PGkwLmdzLT5CbCBkY25sNTEecWZvNy0  (setup.exe)

23 / 68    (Adware)
http://get.0121f.info/.../1429907276/1429907276?66104369412YV9zNi08ajQuMjEgXjwyMTQqKCJrOyswODQiazcoImMvNx8zMCExKjpISENITixEPipDOyEzLh8uLyZfaWNaZ2hiNyowMDEyLi4xMi4sLDM4LC0tKzQvNyBjYm9qOiwddmhuNyw  (setup.exe)

URL:
http://get.0121f.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.