home

e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com

Google Inc.

Domain Information

The domain e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com registered by Google Inc. was initially registered in July of 2007 through MARKMONITOR INC.. The hosted servers are located in Mountain View, California within the United States which resides on the Google Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
California, United States (US)

Create date:
Tuesday, July 3, 2007

Expires date:
Friday, July 3, 2015

Updated date:
Thursday, March 19, 2015

ASN:
AS15169 GOOGLE - Google Inc.

Root domain:
googledrive.com

Whois:
1 googledrive.com record

The domain e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com has been seen to resolve to the following 6 IP addresses.

74.125.226.11
lga15s42-in-f11.1e100.net
May 4, 2015

74.125.226.10
lga15s42-in-f10.1e100.net
May 4, 2015

74.125.226.12
lga15s42-in-f12.1e100.net
May 4, 2015

173.194.121.10
iad23s25-in-f10.1e100.net
May 1, 2015

173.194.121.12
iad23s25-in-f12.1e100.net
May 1, 2015

173.194.121.11
iad23s25-in-f11.1e100.net
May 1, 2015

File downloads found at URLs served by e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com.

7 / 68      (Malware)
https://e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com/host/.../QuickMacroPortable_9.51.11790_azo.exe  (48609e8a6ec4fb67da016f10df35076b)

0 / 68
https://e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com/host/.../SunsetScreenPortable_1.18_azo.exe  (bc1cb5946261955e551c3e9c6892de8d)

2 / 68      (inconclusive)
https://e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com/host/.../ChromeCookiesViewPortable_1.12_azo.exe  (chromecookiesview 1.12 免安裝版 - google瀏覽器cookie管理軟體.exe)

The following 10 files have been seen to comunicate with e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com in live environments.

TCP » 173.194.121.10:443
pepimu.exe (Meskisift Visaal Studio 2010 by Meskisift Corporatien)

TCP » 173.194.121.10:443
ieldabletted.exe

TCP » 74.125.226.10:80
feeddemon.exe (by NewsGator Technologies)

TCP » 74.125.226.10:443
cupoiking.exe

TCP » 74.125.226.10:443
new_chrome.exe (Google Chrome by Google)

TCP » 74.125.226.10:443
wewatcherproxy.exe (WeWatcherProxy.exe by WeWatcher)

TCP » 74.125.226.11:80
feeddemon.exe (by NewsGator Technologies)

TCP » 74.125.226.11:443
plsapp.exe (plsapp.exe by Sendori)

TCP » 74.125.226.11:80
picasa3.exe (Picasa by Google)

TCP » 74.125.226.11:443
cupoiking.exe

TCP » 74.125.226.11:443
wewatcherproxy.exe (WeWatcherProxy.exe by WeWatcher)

TCP » 74.125.226.12:80
feeddemon.exe (by NewsGator Technologies)

TCP » 74.125.226.12:80
PennyBeeW.exe (Starter)

TCP » 74.125.226.12:443
BackupStack.exe (BackupStack by Just Develop It)

TCP » 74.125.226.12:443
cupoiking.exe

URL:
http://e1c28f70d98373367dd75ae13439d5968d518bd0.googledrive.com/

Title:
“Redirecting...”

SSL certificate subject:
CN=*.googleusercontent.com, O=Google Inc, L=Mountain View, S=California, C=US

SSL certificate issuer:
CN=Google Internet Authority G2, O=Google Inc, C=US

Web server:
GSE

blogspot.com

ggpht.com

googleapis.com

googleusercontent.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.