home

get1.fdg345.org

OutBrowse LTD

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

Root domain:
fdg345.org

Whois:
2 fdg345.org records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.Installer.Outborwse, PUP.Outbrowse.Bundler, PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Outbrowse.diRECtDowNlOadgtT.Bundler (M), PUP.Outbrowse.Outborwse.Installer (M), PUP.Outbrowse.VERifiedsoftwaresnb.Bundler (M), PUP.Outbrowse.ruNappSforeVerllD.Bundler (M), PUP.Outbrowse.diRECtDo.Bundler (M), PUP.Softpulse.SmartSec.Bundler (M), PUP.Outbrowse.STARTNOW.Bundler (M), PUP.Outbrowse (M)
97.87%

AVG
Potentially harmful program Downloader.GLW, Potentially harmful program Downloader.HXI, Worm/Delf.KKS
12.77%

Dr.Web
infected with Trojan.OutBrowse.655, Trojan.OutBrowse.677, Trojan.OutBrowse.754, Trojan.Inject1.28681
12.77%

ESET NOD32
Win32/OutBrowse.CC potentially unwanted application, Win32/OutBrowse.CB potentially unwanted application, Win32/Delf.NRJ worm
10.64%

Trend Micro House Call
Suspici.83A8BFB7, Suspicious_GEN.F47V0524, Suspici.C4DF53FA, Suspici.F4AF8F21
8.51%

Fortinet FortiGate
Riskware/OutBrowse
8.51%

McAfee
Artemis!17829CEFAD9D, Adware-OutBrowse.g, Program.Adware-OutBrowse.g, Virus.W32/Gnamer
8.51%

avast!
Malware-gen, Win32:PUP-gen [PUP], Win32:Agent-AODJ [Trj]
6.38%

NANO AntiVirus
Trojan.Win32.OutBrowse.drzddf, Riskware.Nsis.OutBrowse.dsqgay
6.38%

K7 AntiVirus
Adware , Unwanted-Program
6.38%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Threat.4775899
6.38%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse, Virus.Win32.Renamer
4.26%

Emsisoft Anti-Malware
Dropped:Trojan.Generic.14606224, Worm.Generic.377772
4.26%

Quick Heal
PUA.OutBrowse.A
4.26%

MicroWorld eScan
Dropped:Trojan.Generic.14606224
2.13%

The domain get1.fdg345.org has been seen to resolve to the following 40 IP addresses.

54.175.102.143
ec2-54-175-102-143.compute-1.amazonaws.com
May 16, 2016

54.225.72.141
ec2-54-225-72-141.compute-1.amazonaws.com
April 9, 2016

107.20.138.96
ec2-107-20-138-96.compute-1.amazonaws.com
February 27, 2016

54.225.153.30
ec2-54-225-153-30.compute-1.amazonaws.com
February 27, 2016

54.243.107.26
ec2-54-243-107-26.compute-1.amazonaws.com
February 24, 2016

54.235.203.221
ec2-54-235-203-221.compute-1.amazonaws.com
February 24, 2016

54.243.166.148
ec2-54-243-166-148.compute-1.amazonaws.com
February 20, 2016

23.23.73.75
ec2-23-23-73-75.compute-1.amazonaws.com
February 20, 2016

54.225.222.50
ec2-54-225-222-50.compute-1.amazonaws.com
February 11, 2016

23.23.109.139
ec2-23-23-109-139.compute-1.amazonaws.com
February 11, 2016

50.19.235.235
ec2-50-19-235-235.compute-1.amazonaws.com
January 30, 2016

54.83.202.41
ec2-54-83-202-41.compute-1.amazonaws.com
January 30, 2016

54.243.81.131
ec2-54-243-81-131.compute-1.amazonaws.com
January 27, 2016

50.19.219.164
ec2-50-19-219-164.compute-1.amazonaws.com
January 27, 2016

54.243.82.212
ec2-54-243-82-212.compute-1.amazonaws.com
January 27, 2016

23.21.153.169
ec2-23-21-153-169.compute-1.amazonaws.com
December 15, 2015

107.22.255.32
ec2-107-22-255-32.compute-1.amazonaws.com
December 15, 2015

54.235.123.16
ec2-54-235-123-16.compute-1.amazonaws.com
December 15, 2015

174.129.252.179
ec2-174-129-252-179.compute-1.amazonaws.com
December 2, 2015

54.243.92.113
ec2-54-243-92-113.compute-1.amazonaws.com
December 2, 2015

23.21.217.154
ec2-23-21-217-154.compute-1.amazonaws.com
December 2, 2015

174.129.207.140
ec2-174-129-207-140.compute-1.amazonaws.com
August 22, 2015

107.22.215.47
ec2-107-22-215-47.compute-1.amazonaws.com
August 22, 2015

107.21.217.57
ec2-107-21-217-57.compute-1.amazonaws.com
August 22, 2015

54.235.245.130
ec2-54-235-245-130.compute-1.amazonaws.com
July 1, 2015

54.225.181.53
ec2-54-225-181-53.compute-1.amazonaws.com
July 1, 2015

23.21.50.227
ec2-23-21-50-227.compute-1.amazonaws.com
July 1, 2015

54.235.209.215
ec2-54-235-209-215.compute-1.amazonaws.com
July 1, 2015

23.21.48.5
ec2-23-21-48-5.compute-1.amazonaws.com
July 1, 2015

107.21.235.16
ec2-107-21-235-16.compute-1.amazonaws.com
July 1, 2015

 
Showing 30 of 40 IP Addresses

File downloads found at URLs served by get1.fdg345.org.

1 / 68      (Adware)
http://get1.fdg345.org/.../1432492811/1432492811?14327351633ZmFxMC88azwrMC81MSNiNi4zODEtI2s5LjYqLzQlaDouJWxvbV1yXnNoXmpkOUpnZ2xfa2lkZm0nMCwqLSkvKC4jY3VrX2ZmXm1bamI8SWZsaGFnbmFmayovKy8pKystKyNjaGhibFpqYDxHZmtuYGltYGZpKi0rLi8qLSwqI18wNy8vJWVgbWc6LCV0Zm08LA  (minodlogin 3.10.0.1.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432507165/1432507165?11360608098ZmRxLDY5cDUyKislYzosNy4xKyZjNTA1Ni4maD0pJlspPCQxKiUuMDtMQD1NUyo QidJPCUrKCQzLSBjZmlba2BcPC8uKjUrNSwwKCgxMjEuOCo2LjkwLiVoYGluNzEeemBoPC8  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432485769/1432485769?41517915964Y2RvNSo2bzgpMjEiYzgxLik2LR1mOS4zLzIsHW04KCBsbm5fdFxrbVxkXzlAbnJtZWZgXyJHXWpgYmRrHVI4LzE1MDAyNC4uOFwrLjI1YTM4KioyM1xeYWFjXTZdLjYhXHJhcXFnPGFrc2scLV0hMWEkK11iX2UoXl5iX20qJWJqZB8uYkNtaG9ccUFgaGBhcVpSXmt0ayVfdGElX3hnWGxkWmhdaWQ4Q2tgdWBpQGVqY2BxH11oZ1xoXWlkOHJea3RrHV1oZWJmaF00Mi9ZX10vNTE0XStjLyoyYDUzL2FdWTcxWF8xMTYrYlodaF5maDktJXVoaTQv  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432485515/1432485515?21181952749ZWRzLjA2azssLCkwJWM1MS4tNSsiYzswNTEzHWk7KSJbLzwwKS8nMCRdLjQrMCVcMjQoLx9gKzssMB5jLDgrKiJdZ2tkZmBkYDtsYWtzbyVba2BeaWJgNHUvQDpSRkI1P1IwMVM3Pko UD8wRylDTCVhYmZpOyoicWdvPCg  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1426104223/1426104223?50049902821YmV0Mio2cDspNzQ0NiZgNCk1Nik1JWc9MjAwMDgkZjswIXBya1tsY3JmX2xgPVZIOiJNY1xnYCZQbF1wXHIpKiwwKTZhIltwbl9lZ2JpYW1hNE1MQSNLZF9pYSdHY2F3XXAqLS4xKi1YJmRhamRpYW1hNG1sYSUwLSwuNl0kbmlsKzByYHR1bB1gY21mOzQhemlsNCkmYWQ7ZmB0NDM  (vlc-2.1.6a-win32setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/1433413358/1433413358/.../bTYwNjM2HVs8LDQ2MDElaDwoLTguJms2LyVfa2BaamNkOiw0MzMwLS8zMjEuLTEyMDAqKjIrJmZcbW05MScdeWNwOik  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432487760/1432487760?35446521680ZGBwMis6bjwsKzMjXzkuLzIuMCBkPS4xNTAgaTswIFwxOiAwLB8vLkJGQUVLTylAPChHQx8sMCIvLCJdZ2diZWFkOistLiwuMDAyLzAvLjAvMysyMSouOSNkX2toOC8ldGFwOis  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433409799/1433409799?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  (download film fast and furious 7 2015 subtitle indonesia pusatkomputerindo.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../get15?p=5466&d=12647&l=12054&n=1&filename=Windows7 Loader Activator  (windows7 loader activator.exe)

1 / 68      (Adware)
http://get1.fdg345.org/1433416128/1433416128/.../Zz0pMDAuHWQ8MTQwNyofZTQoNjgzJmU9KB9cY2BjamhkNDMqKS4uKTQvMjEoNCosLSgtMDg4JmBjZmc2KScmeWhwNDA  (setup.exe)

1 / 68      (PUP)
http://get1.fdg345.org/.../1433350170/1433350170?63145469597YWJzLjE7ajQsKikxMCVgOC4uLzIuH2Y6Mi8tMSBlOCcfXi48SlBJPDxNHVxmZmJnZGA3aUYoKT9TSGBVLyBgXmZnNy4zInVlajQr  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433395203/1433395203?47978215029Y15rKy49bzgxMSczLB1dNTAzMzc1HWg2KiwqMyVpPS4dYCo0R01LQUBSJFpoYlpkYWI8PEMvJ0peTltfSyVkY21lOSorH3Jnbzgw  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433385262/1433385262?64899957683YWFsKS02azYsLzQxIlw0KSsxKSseaTctLjArHWk2Kx5gZmVbYmBbOCwsKC0uLCosLiosLS0rMDIxKiwqHWRcaWY6KzAecWBnOCk  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433354835/1433354835?06378209870Z19xKy49cDQrKTIyIGE2KjUyLiofbD0rMzIsJG40KB9kMTcuKiguNR1cKz0tKyNdKzstKB5dND0nLh9cMz0kKR9maWZiZ1lrZTRrXnR1aiNcZGdjYmFdPXdIRy1NSVVBPy9KSE5ORkNFMicsOjU2LCNiW21uNCktJnpjbTYo  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432465528/1432465528?68797931269YV1tLSo2bTwwLSogXDYpLi4tMCRmNCsuMisfZTowJF4oNx0tJx4rLUJKQzxITCY7OyRGQyMuJx8sKR1cY2ZiaWNbNygqJy0rMDIzMScsKy0pMCwvMDQvLCBhXGZnNC4leGNnNyg  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432502147/1432502147?34402866538ZGFwMjQ3ajctNS0jYDkyMyoxLCFpNS8wMDMxHmg3LCNob2tgdWFsaFtoYjVBa3NuamdbXiZKWWtdY2VwHk03MzQxMS0zNTMvM1svMS42XjQ5LystMmBhXWJgXjdiLzEgYHVdcm5oPWZsbmogMFkiLmIlMF5dXmkrWl9fYG4vJl1paCIqY0BuaXRdbEBka1xibltTY2xvailicGIiYHlsWWdjXmtZamE5RHBhcF9tQ2FrYGFyJF5jZmBrWWphOXNjbG9qIWBkZl9naWI1KlssXlo0YF9iX14qLi41MDYvYTIwKzJdLGEwLzQ0OS8eY11qazUuInZpbjUq  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432469176/1432469176?63941500636YWJrMjA6cD0sNS8gYTQuNC03MiBpNywxKy8yIW49KyNqbGxbcWJvbmFnYjc bG5qa2phZCVKW2heXmFxIVM9MjQzLi4uMTQyOWEuMTAzXy81MC4zOF9hX19hWTNjMjcmX3Vfb29jOWdvdHAfMFsfL10hMWFjZGgrXFxgW2owKWNvZyIsYEFpZXVgckZja15fb1ZPZG91cChicl8jW3VtXG1pXWtbZ2I0QHFkdmVsQ2NoYVxuJWFpbF9rW2diNG9kb3VwIGBmY2BiZWM4MTQyMy9fMy9hM143NDBjW1xeWi5lXjliMzQuWzFcLjQhaWNpazcrI3Flbzgw  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433390302/1433390302?86207637069X19yMi85bTYxKjAsIGI9KjM2KzkgYzUrNzAyLiNnPSsdaGxtZG5dcWdhZ1w1O2xpc1trPW9xZWRpX2RGW2taZ19pHl92ZW5saTZobmtoHzFhHixjHjJgWGZjeGFnKGBobR8pXl5td2dmbFpkYGBkXyMyX2JhXG9eXFssIzJfQkEeMio6Rz5DQx4sLUxlbmxoKGN4XiBhcm5bZGFdbGFmXzo8b2xcZD5wYXAfLylYLxwqKk5va25eW2xfHCoqQ2RibmZobiBdYWZjblpnYjZDaWldZkJyWnEiKzBSLB0sLlBobHFaYmZcHSwuRV1jcWJvaB1sc3NyZTdlbXRqHCtbIzJfHy9fYWZuWXNxLWlbb2xlbCVwc3glK2BeZyUtXWkfMWQ9aXRnbGlYXEdfblphYmsmTTQsMzYwH2NgaG43KCwgeGlpNy0  (coreldraw x5 portable edition.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433390499/1433390499?39415222923ZFxwMTE9bjsoLjYxHWA8LDc3MDAkaTooNS80MiRsNC8jbWlrY3BhcmxYa2I6OGpodV9sQmZ1a2lmXWNIX2xfXmNvI1x0ZHBwajtfcnFtHC9gIDBkIylkXmtgdmBpLGFtZCMvY1trdmlqbV9bZGZpXCExYWZiYWZiYmApITFhRkIjKS5ATDtBQiAwLlFccnJtJWF3YCRid2VfamZaamBoYztBZnBiaTtuYHIjMC4 cF5tX2ViIDAuUWxncWIcLi9TMyMwJ0RyaWMiZWRqY2xYa2I6OmtxYGpCcFh1Ii8nQ3FcbmZnWiMvLUpxaG9jIzAnVjIiKSxFcGpqJGt3cm9jOWdvcm4jKl8iL10hMWFfanVYd3AqZ11xbmNwLG93dyIpYmBpIzFkaCMwYTtrdmlqbV9bS15rWGNkbSRROys3NS0dZWJqbDsvKyR3Zmc5Lw  (coreldraw graphic suite x5 full.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432471541/1432471541?61352962649YWRxMS82ajssNCwgYzotMykxMCBoNCwzMS4xHWg7KyJnbG5hcGFraF9nYTQ bnRpamZbYiVJWGhgZGBwHU07MSxYW2JfMDEnLDczMCcsMjUrNDArNF5hLF43LS8uLy8kX3Rcb3FpOGZrbm4fL1gfMWMgMF1nbl1gZSwtYGprHCxkZG5cJzdyLTMkcWdoYGZxcipkMy8wLF90XCBjdmlfZGNhaF1kXzxHXHRYIGRjaFxoYGpgO2pfcm9sHV1rZl5pYF47KzQpLTEzXDIqLjUxMFsqZDYxLicrY1s1Li02MSszLF0kY19maDwuIXhgajsq  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433343171/1433343171?91062615186XmR0LDQ5bzgwKDMrJWQ3LzM4LTgeZjQwOSo3LiVpPCkgZ3FvXnNdc2lgZV80QG5jeFttP25vaGNuYV5LW21cZl1sHWR4X3NsazhnbG5nJDNbIyxlIDFeW2VoeltsKGJqbB0sXWNvcWxmblxjXmNjZCUsZGJjXm5cX1oxJSxkQkMgMSg9RkNFPSMsL05kbG9nLWVyYyBjdG1ZZ2BibltrXzxUbm1ObGFlHzAqVWRjXWkcMTA bXFtZ25ZXlxxJSwuSnFqJCoqKy04KDIoLyAxKEBsa2wfMCpPXHNbYh1laWZjaGBoZDVTZnRUb2BfJC0vTmNbZG8fMCpDanZmZmZgZF9wHzErT2ppHDEwLiwyLS8tKB8pL0ZvamYkLS9IW2tiaCByc3RtazVia3NwHzFbJC1lHSxdYGxxX3NyKG9ZbGpkcih2c3kgMV5bZSQzYG8fMl9DZ3Fla29bYkdgaWBfX2klUzcyMzcrJWFdZm09KzIgeWRvNSo  (youtube video downloader pro 4.8.4.0 full patch.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433397055/1433397055?05006813549Z2B0MjA3bzotMy43IWQ9LCw4NC4iYz0sNjkuHm06LCJabGRja2NcPDAyMSs3MDI0MS8wMS4vKjkyMDMzHmhgamo0MS8memNoPC0  (วันนั้น วันไหน หัวใจก็เป็นสีชมพู.exe)

1 / 68      (Adware)
http://get1.fdg345.org/1433405551/1433405551/.../ZnJnZGphXSApKz5mbV5kIDIpUGNgXFsgKyhRaV1gZiAtJ05tbV9paCApKywpICsoIDIpICkrQWxnZR0tMElca15jHC0pHTJjHi0nJSVWKCYdLTA8VDlATRwtKTtKU0ZKHC0rJChYIiUmX2RjYGlYaF41P29waWNqXFsgKyg b2tgYyAtJ1BlXVxkHi0nUWRbYGgdLTBMb2xfZGYgKygsMh4tJyAtJyArKEF1ZWccLStHXG1bYyUrKxwyXhwtKSIlXyYoHC0rOlQ7PU0lKys6Sk5ESh4qKy0mWiElIWt0bmpnPWFva2sgKlweKmElK2FYZ3JYdGwla2FrblxtKW90cx0tZlppHC5haCAsXD9vcGljalxbSFpmXGdebR1OOC8yLCwhaVxqZTgsKyFzYWs9KQ  (download corel ulead video studio 12 full patch _-- cyber cosmo --_ .exe)

11 / 68    (Malware)
http://get1.fdg345.org/.../1433360375/1433360375?23817790980ZWJsMS84Zz0pLzc1I1w8Ky0wNyoebDsuLjgtH2U9KB5jamZbamJdNDMqKDI2Myg1LiooNCorMzQtKzQyH2BjZmY9LzEeeWJpNDA  (setup.exe)

1 / 68      (Adware)
http://get1.fdg345.org/.../1432513581/1432513581?69789695983YVxtKi05ZzgpKzAgWzYqLi4oLh1kOistMiwdaDQsHVwuNxwtKBwuJz5DQUJISyY8OSdAPxwsLR8rKR5aZmBeYmFhNycqKiksKTMrKi0sKi0tJystLSguMyBgXGdlNyghcWFtNyc  (setup.exe)

0 / 68
http://get1.fdg345.org/.../1432485569/1432485569?16339109813Zl9xMyg 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  (msvcr111.dll)

0 / 68
http://get1.fdg345.org/.../1432443559/1432443559?16701499677Zl9tNjA7ZzQsLCwlXjYyNDMnKCBlNjAwMjQlajQoIF0qPB8tMCQwJzpGQj5NTiZEQSlAOx8tKSQuKSZiaGBaZWJdPCoqMjAxMCsxMSkxLS0yLy0nKzMuMSVjXG9tOSgddGJpPCo  (msvcr111.dll)

1 / 68      (Adware)
http://get1.fdg345.org/.../1433350846/1433350846?97492912042Xl5wKTQ2bzsxLy4uLCJbOyg3MzYvJGM2LyowLCVsPSwkWyo5RVNEQUNSImFjYl9iZ1s8Ym4tLl1gVURCQSVnY2tsNCowHXhgbzsw  (setup.exe)

0 / 68
http://get1.fdg345.org/.../1432483680/1432483680?06572740025Z19vLy84bD0xNys4KyFdOyszOTc0IWw3LTAwKi0mbjssJmBkZWNnXW1lO1JpaF9odWxIb2FiYHIlLScwJy4maWFqbjcsH3hibD0w  (msvcr111.dll)

1 / 68      (Adware)
http://get1.fdg345.org/1433364724/1433364724/.../LCovKzY0LjA2LDQpPi8cMGFGXmZgYF5NcGZkYGpraWZrWmlOY3NuVnA4LVxeaytscSlgZWcdYXJrX2RnXmVZbVw6RmZhaW1uZl50HC8pTGRdZ15cHTInLykuMR1kZGNdblhqXjpLYGFtZmtvXXEeLy5GZGFgW2UcLykvLigxIWBbb2U6KjEkcWdrNCg  (microsoft office 2013.exe)

 
Latest 30 of 54 download URLs

The following 3 files have been seen to comunicate with get1.fdg345.org in live environments.

TCP » 23.21.48.5:443
Client.exe

TCP » 23.21.48.5:443
spd.exe

TCP » 23.21.48.5:80
classnetperl.exe

URL:
http://get1.fdg345.org/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.