home

files1.coccoc.com

COC COC PTE. LTD.

Domain Information

The domain files1.coccoc.com registered by COC COC PTE. LTD. was initially registered in August of 2005 through REGIONAL NETWORK INFORMATION CENTER, JSC DBA RU-CENTER. The hosted servers are located in Ho Chi Minh City, Ho Chi Minh within Vietnam which resides on the Asia Pacific Network Information Centre network.
Registrar:
REGIONAL NETWORK INFORMATION CENTER, JSC DBA RU-CENTER

Server location:
Ho Chi Minh, Vietnam (VN)

Create date:
Friday, August 26, 2005

Expires date:
Sunday, August 26, 2018

Updated date:
Friday, February 19, 2016

ASN:
AS7643 VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT),VN

Root domain:
coccoc.com

Whois:
2 coccoc.com records

The domain files1.coccoc.com has been seen to resolve to the following IP address.

123.30.175.16
static.vdc.vn
July 1, 2015

File downloads found at URLs served by files1.coccoc.com.

0 / 68
http://files1.coccoc.com/browser/.../vi?plat=win  (coccoc_vi.exe)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.120/.../coccoc_vi.exe  (eaf3dd2bdd4e25008bcf52fa6859d665)

0 / 68
http://files1.coccoc.com/browser/49.2.2623.114/.../coccoc_vi.exe  (34765866a1c771c60f7f75f1945e7e97)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.120/.../coccoc_vi.exe  (da70b591a7e1621936c9f0df3c5a2012)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.120/.../coccoc_vi.exe  (b0a7b56c8860af4ee2aeaf3ecbda65db)

0 / 68
http://files1.coccoc.com/browser/44.2.2403.175/.../coccoc_vi.exe  (e1fd65a7f76d3517ed692b86acd42b8c)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.112/.../coccoc_vi.exe  (dc377a0ff89d281f927a75a80872e2ad)

0 / 68
http://files1.coccoc.com/browser/.../vi?plat=  (coccoc_vi.exe)

0 / 68
http://files1.coccoc.com/browser/.../en?plat=win  (coccoc_en.exe)

1 / 68      (Malware)
http://files1.coccoc.com/browser/50.3.2661.120/.../coccoc_vi.exe  (d6eaf5fb989d2e4be5582063ccde52c6)

0 / 68
http://files1.coccoc.com/.../coccoc_vi.exe  (e2a933f88e4d9fa98efe3f2a2cc2da5d)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.116/.../coccoc_vi.exe  (85043b09d5065ac30c6da8cc1b68d4f3)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.116/.../coccoc_vi.exe  (e70c168ea48c88e6cd8fd0c2c3beb154)

0 / 68
http://files1.coccoc.com/browser/50.3.2661.120/.../coccoc_vi.exe  (606535f8e247ebecb82603c8cffde0f7)

0 / 68
http://files1.coccoc.com/browser/49.2.2623.126/.../coccoc_en.exe  (35872e05d6b192ad70b6afa3f290ed9c)

0 / 68
http://files1.coccoc.com/browser/49.2.2623.126/.../coccoc_vi.exe  (de0fa06b7f390c510bc40d5cc608fac4)

0 / 68
http://files1.coccoc.com/browser/49.2.2623.124/.../coccoc_vi.exe  (132c5faf70d75a0d27550926416311be)

The following 8 files have been seen to comunicate with files1.coccoc.com in live environments.

TCP » 123.30.175.16:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.175.16:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.175.16:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.175.16:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.175.16:80
UCBrowser.exe (by UCWeb)

TCP » 123.30.175.16:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.175.16:80
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 123.30.175.16:80
pmropn.exe (PremierOpinion by VoiceFive)

URL:
http://files1.coccoc.com/

SSL certificate subject:
CN=*.coccoc.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT54633812

SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx

coccoc.vn

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.