home

www.icq-tools.de.downloads.c404.eu

Domain Information

Server location:
Berlin, Germany (DE)

ASN:
AS6724 STRATO STRATO AG, DE

Root domain:
c404.eu

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic
100.00%

The domain www.icq-tools.de.downloads.c404.eu has been seen to resolve to the following IP address.

85.214.210.27
May 22, 2016

File downloads found at URLs served by www.icq-tools.de.downloads.c404.eu.

1 / 68      (PUP)
http://www.icq-tools.de.downloads.c404.eu:14089/?pid=icqt&cid=Tools82SmileyExtractor&scid=Smileypacks111package  (green leaves emoticons setup.exe)

1 / 68      (PUP)
http://www.icq-tools.de.downloads.c404.eu:14089/?pid=icqt&cid=Tools81SkinExtractor&scid=7skin77HelloKitty  (hellokitty setup.exe)

The following 4 files have been seen to comunicate with www.icq-tools.de.downloads.c404.eu in live environments.

TCP » 85.214.210.27:8080
ocs_v71b.exe (OCS)

TCP » 85.214.210.27:443
ocs_v71b.exe (OCS)

TCP » 85.214.210.27:443
ocs_v71b.exe (OCS)

TCP » 85.214.210.27:8080
ocs_v71b.exe (OCS)

TCP » 85.214.210.27:443
ocs_v71b.exe (OCS)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.