Domain > drivehq.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to drivehq.com

MD5	A/V
42b38a9f71796f18343259242acb4abc
0a99691002e31338c805c5c494382e2a
1b37f1efe7813b89b0b1289cdd975c75
3051fcc354ddce3d13cddbd44227d95f
0494da7d37cf02393795a559fb191bb0	[Backdoor.Win32.Swrort!O] [Backdoor/Swrort.ob] [Trojan-Spy.Python.Logger.b] [SPR/Logger.uqj]
1a672abcc5785c8fdad0443554ea4a5a	[Trojan] [Trojan.Pramro] [Pramro.B] [VIRUS_UNKNOWN]
3d6064b5995f218785be05734534554d	[Trojan.Dropper] [Trojan.Win32.PassView.cxfbsq] [BKDR_BLADABI.SMD] [not-a-virus:PSWTool.Win32.NetPass.cif] [Tool.PassView.849] [Mal/MSIL-BA] [TR/Rogue.qpeipul] [Win32.HackTool.NetPass.c.(kcloud)] [Backdoor:MSIL/Bladabindi.G] [Trojan/Win32.Bladabindi] [HackTool.Win32.MSNPass] [W32/NetPass.BA!tr.bdr] [ILCrypt] [Hacktool.Win32.NetPass.AC] [Win32/Trojan.d60] [WS.Reputation.1] [UnclassifiedMalware] [BehavesLike.Win32.Backdoor.fh] [Artemis!3D6064B5995F] [Hacktool.Win32.NetPass.AUv]
4e757bc56bba6fcfa1fb8c8f6def38ff
926b38d37a91e9d9f40d41d9f38df13a	[Trojan[Dropper]/Win32.Daws] [Trojan:Win32/Pycogkee.A]
aae263fe4cfb152ef3fae95424f917b0
046581afec25a4e72f710f8842992ddc
bec144af4e0ba4b2181cfc28fed2efef
898cb93daa1ef91149fe1505b9e8a5fe	[Win.Worm.Kolab-338] [W32/Refroso.NMZ!tr] [Worm.Kolab.Win32.145] [I-Worm.Kolab.czi.n3] [Win32/TrojanDropper.VB.NLV] [W32.Spybot.Worm] [W32/VBTrojan.9!Maximus] [BKDR_BIFROSE.DXZ] [BackDoor.Bifrost.915] [Net-Worm.Win32.Kolab.czi] [PWS*Win32/Strpasseal.A] [W32/VBTrojan.9!Maximus] [VirTool.Win32.Vbinder] [Trojan.38F0CF7E1D88CB6C]
da101470d8be280351f05c8d092b7e41	[Trojan.Win32.Spammer.aew] [Win32/Sipay.KY] [Troj/Spy-ED] [BKDR_BIFROSE.SMN] [W32/Dropper.AHHS] [W32/Risk.INUW-1674] [Trojan.PWS] [PWS*Win32/Fignotok.B] [Infostealer] [Trojan.0000#7209C7#5BC9C.mg]
d0ff02896ad932030f6872745a8ef247	[Dropper.VB.Win32.18179] [Trojan.Dropper.VB.1] [W32/VBTrojan.9!Maximus] [Trojan.Dropper.VB.1] [Trojan.Dropper.VB.1] [Trojan.Dropper-33730] [Trojan.MulDrop.42242] [Trojan.Dropper.VB.1] [Win32/TrojanDropper.VB.NLV] [Malware_fam.A] [W32/VBTrojan.9!Maximus] [PackedW32/Vbcrypt.N] [Injector.EBX.dropper] [Trojan.Win32.VB] [PWSWin32/Fignotok.B] [Trojan.Dropper.VB.1] [Dropper.Win32.VbEx.a] [Backdoor.Bifrose] [Mal_BUZUS-6] [Trojan.5573AB322A9C9258] [Trojan.Dropper.VB.1]
b1d66157a22a5b3a63906c24b5187e3f	[Win32/Sipay.KY] [Troj/Spy-ED] [BKDR_BIFROSE.SMN] [W32/Dropper.AHHS] [W32/Risk.INUW-1674] [Trojan.PWS] [PWS*Win32/Fignotok.B] [Infostealer] [Trojan.0000#7209C7#5BC9C.mg] [Trojan.Win32.Spammer.aew]
cfe05ea63bf7784b7caadb2369e45811	[Trojan.MulDrop.64784] [Trojan.VBO.06655] [Mal/VB-AO] [Mal_Poison3] [Trojan-Dropper.Win32.VB.alwp] [Dropper.VB.Win32.16434] [Trojan-Dropper.Win32.VB] [W32/VBTrojan.9!Maximus] [W32/VBTrojan.9!Maximus] [PWS*Win32/Strpasseal.A] [W32/VB.ALWP!tr] [Spyware.ADH] [Dropper.VB.3.BS.dropper] [Trojan.AA7A1EC4B1EED4A1]
e86c626878a0c693d3727024d55ff882
e996a3569840c58be9f722f7a8f647cf	[W32.QuaslanB.Trojan] [Win32/Perflogger.AH] [Trojan-Banker.Win32.Banker!O] [Trojan.Logger] [Win32.Trojan.WisdomEyes.151026.9950.9998] [W32/Banker.ALWM] [Suspicious.Cloud.7.L] [TROJ_QDOWN.I] [Win.Trojan.Perflog-51] [Trojan.RAR.Starter.d] [Riskware.Win32.Perflogger.hrpm] [Trojan.Win32.Perfloger.365620[h]] [Troj.Downloader.W32.Delf.l4Cp] [Trojan.Peflog.168] [TROJ_QDOWN.I] [BehavesLike.Win32.RapSFXpacked.dc] [W32/Banker.UGIC-2049] [Trojan.RAR.ba] [MonitoringTool:Win32/PerfectKeylogger] [Trojan.Heur.MR.E8EC5A] [Trojan-Spy.PerfKey.c] [Trj/CI.A] [Win32.Trojan.Qdown.Amcc] [Trojan-Spy.Win32.Perfloger] [W32/PatchedRarSfx.A] [PSW.Perfloger.CT] [Win32/Virus.Monitor.a82]
f5bf7cb0929e0821d52eb3761e43dc46	[W32/Msil.O] [not-a-virus:PSWTool.Win32.MessengerPass.n] [Troj.W32.Jorik.Shakblades.lBRs] [Trojan.Confuser!1.A352] [Mal/Behav-421] [Trojan.PWS.Stealer.13008] [BehavesLike.Win32.Backdoor.wc] [W32/Msil.AOXS-4373] [TrojanSpy.MSIL.ewm] [HackTool.Win32.BrowserPassview]

Whois

Property	Value
Email	contact@drivehq.com
NameServer	DNS2.NAMERESOLVERS.COM
Created	2005-03-09 00:00:00
Changed	2011-02-10 00:00:00
Expires	2016-03-09 00:00:00
Registrar	BRANDON GRAY INTERNE

DNS Resolutions

Date	IP Address
2009-07-31	66.220.9.55 (ClassC)
2009-11-13	66.220.9.50 (ClassC)
2025-01-23	66.220.9.57 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
ftp.drivehq.com	-	66.220.9.50
proftp.drivehq.com	2025-01-19	66.220.9.51
dhqid45r064utd5gygt2jy6.webdav.drivehq.com	2024-12-29	66.220.9.58
dhqidlnsxx2qigisdvn7x2f.webdav.drivehq.com	2024-11-26	66.220.9.58
dhqidctjo3ugevk9u5sev1r.webdav.drivehq.com	2024-10-01	66.220.9.58

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]