home

static.im-updates.gg.pl

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
im-updates.gg.pl

The domain static.im-updates.gg.pl has been seen to resolve to the following 3 IP addresses.

188.165.22.23
April 20, 2016

178.33.48.205
April 20, 2016

51.255.151.160
ip160.ip-51-255-151.eu
April 20, 2016

File downloads found at URLs served by static.im-updates.gg.pl.

0 / 68
http://static.im-updates.gg.pl:8088/phoenix/app/beta/11.3.39.10446/standard/WINNT_x86-msvc/.../ggsetup.exe  (open-fm.exe)

1 / 68
http://static.im-updates.gg.pl:8088/elwood/app/release/3.0.4.188/standard/WINNT_x86-msvc/.../openfm_setup.exe  (821babd488b433c3eea54254663ed2b3)

The following 2 files have been seen to comunicate with static.im-updates.gg.pl in live environments.

TCP » 51.255.151.160:443
client.exe (ClientWrapper)

TCP » 51.255.151.160:443
di9coolsurfingfu175.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.