home

accounts.google.cz

Domain Information

Server location:
California, United States (US)

ASN:
AS15169 GOOGLE - Google Inc.,US

Root domain:
google.cz

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Gen:Variant.Application.Bundler.Outbrowse.1
100.00%

Malwarebytes
PUP.Optional.OutBrowse.gen
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

SUPERAntiSpyware
Trojan.Agent/Gen-Downloader
100.00%

Bitdefender
Gen:Variant.Application.Bundler.Outbrowse.1
100.00%

K7 AntiVirus
DoS-Trojan
100.00%

Agnitum Outpost
PUA.OutBrowse
100.00%

Trend Micro House Call
TROJ_GEN.R047C0EBD15
100.00%

Kaspersky
not-a-virus:Downloader.NSIS.OutBrowse
100.00%

NANO AntiVirus
Trojan.Win32.OutBrowse.dmikim
100.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Outbrowse.1
100.00%

Sophos
Generic PUA LJ
100.00%

F-Secure
Gen:Variant.Application.Bundler
100.00%

Dr.Web
Trojan.OutBrowse.89
100.00%

Zillya! Antivirus
Downloader.OutBrowse.Win32.1781
100.00%

The domain accounts.google.cz has been seen to resolve to the following IP address.

216.58.219.195
lga25s40-in-f3.1e100.net
May 5, 2015

File downloads found at URLs served by accounts.google.cz.

24 / 68    (PUP)
https://accounts.google.cz/accounts/SetSID?ssdc=1&sidt=ALWU2cuzmRQIZLRgsYrXw/a1BPBZtHC19wbaMzuArZY54biCw AUsw1deHJNVJ3Z0YgHhoQ20KT sJuCsUBVLLYkKw63OLRsz2pftDKXrkfSKB6VwM6qWzUDyKghIg9aihwrqWlWD/OTTx9FpKF NoqNZACU4dbPyeY0EWLm3YadBJNEnWYEkjN10qHOAu0CYmgjtOUimR3v17wR80RMTgmIwtOFrVitYFKq7N xTJE3eUR7X5nuHCxLxJNU59skuLB/aLuuhYYTZkJViSUi6u8DdmgvNg7PKjRvk17ckMQ6SswZ1WNE5t1POdsS26tkP lOMYWyRe1K0vZ7kNK5Jo/ZMZvjotq6WyeyYnPbDmGb4Fp4vVAfuMDhe6D6XOfkYLKfiFMbf7zeWeayeNOxRyOONqceOSboA6im6FTeYMqzgej BqbWhCqYHN0rWQsXbZj9EgVcRfjy5EEwpaveZ3o0hMO OYcIIA==&continue=https://docs.google.com/nonceSigner?nonce=k86je153ifluk&continue=https://doc-0o-48-docs.googleusercontent.com/docs/securesc/3elrdcnub69koqpkh1kptsnu88c2j8hj/e2fa8850k948oot4p6p3n193k0nr4v4h/1424196000000/13771301919198531426/04207183387802407933/0By7L_1SxVsjTcVhCYlh4OXVOUDg?e=download&hash=tl79h47e1ibrgch1mj0gm9jqqk4deh3k&urp=http://un  (uh v1.8.exe)

The following 3 files have been seen to comunicate with accounts.google.cz in live environments.

TCP » 216.58.219.195:443
chromatic.exe (Chromatic by The Chromatic Authors)

TCP » 216.58.219.195:443
browser.exe (Speed Browser by Smart Applications)

TCP » 216.58.219.195:80
masterupdater.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.