home

qw0pba-sn3302.files.1drv.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation,US

Root domain:
1drv.com

The domain qw0pba-sn3302.files.1drv.com has been seen to resolve to the following IP address.

204.79.197.213
a-0011.a-msedge.net
January 3, 2016

File downloads found at URLs served by qw0pba-sn3302.files.1drv.com.

0 / 68
https://qw0pba-sn3302.files.1drv.com/.../rufus-2.5.exe  (914328d9d8c5bccee11a66e8281b8c16)

The following 100 files have been seen to comunicate with qw0pba-sn3302.files.1drv.com in live environments.

TCP » 204.79.197.213:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.79.197.213:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.79.197.213:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.79.197.213:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 204.79.197.213:443
Client.exe

TCP » 204.79.197.213:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 204.79.197.213:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 204.79.197.213:443
client.exe (ClientWrapper)

TCP » 204.79.197.213:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 204.79.197.213:443
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 204.79.197.213:443
vosteran.exe

TCP » 204.79.197.213:443
Client.exe

TCP » 204.79.197.213:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 204.79.197.213:443
Client.exe

TCP » 204.79.197.213:443
injector.txt (Windows by Microsoft)

TCP » 204.79.197.213:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.79.197.213:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 204.79.197.213:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 204.79.197.213:443
runtime.exe (Windows by Microsoft)

TCP » 204.79.197.213:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 113 files

1drv.ms

live.com

livefilestore.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.