home

www.filesstockhead.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
filesstockhead.com

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bibado.BibadoInvestments.Bundler (M), PUP.AnchorFree.Installer.Meta (L), PUP.Bibado.BibadoIn.Bundler (M)
100.00%

The domain www.filesstockhead.com has been seen to resolve to the following 20 IP addresses.

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 6, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 6, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 6, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 6, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 25, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 25, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 7, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 7, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 7, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 23, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 23, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 23, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 2, 2016

File downloads found at URLs served by www.filesstockhead.com.

0 / 68
http://www.filesstockhead.com/c?x=qUtQHJD81fCrFkwmWjMkJa18TJILH4pIhR9aN90VhkQ=&c=ClXOY0uMAJKRRtGhcUBTcZp0GzcId3UmveLRaIOx2jREg8x6QpPRttJI4X9G0wuS3RMHP781YK5q0UGa0P7VxHzJWdTUuyoSNeqLP/PucJjnErW/B7QH/OuyVH4jgQdB&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455456765/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (7eb231ad37518f8a0d0d14e4fc2f7db5)

0 / 68
http://www.filesstockhead.com/c?x= v1byd57x7zRAtQLR2WB0nuUPwCM3jomUKNmzDcehT8=&c=p9lhilY /2R5OuuurPMMrvjEz7JyYvO goxURpqmJtA789PgroBZEu1se43V0I8Sh1AF1WdN3a30AErWe9nd6p2s342HGrktHDTkRjIgPtogwy1QInDZy6c3EUMmBdEM&downloadAs=starbound-full-version.exe&fallback_url=http://playstarbound.com/.../  (b6cf6a32c3160b4903900b8e02eaac89)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=0F6fWa7yEJKmF0HgpUhLjT41Pmn69tskFC llwHjlk8=&c=c7fDasVLLQszuFBx8V9Yz buzHUN5fUY0hd65mc73e0bwt10kJw1/aD0PcMwwq4uFvRlzWcz0PU /3wpyUr3HlIHwZ6fqlX8/XQMNmNTwxAhRBi6loICUfclWf uGzAW&downloadAs=hotspot-shield-5.1.7.exe&fallback_url=http://mydati.com//download/.../HSS-773.exe  (icreinstall_hotspot-shield-5.1.7.exe)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=hBfqGUl Z4e OgLRixMZb evtUBKzPmjYxEopJNrE0E=&c=iM/OOPgYtVFuhpig13xWa/FRWncC8O8yIK05YJN4gaAr5bgvHC2mMvbpzgzq435doVVBJgV0/6iJdjkj3GCPjKZRuXMsbRnPKJhb79LIF0l1sQHjVk1vCtOYaMQdESlP&downloadAs=ytd-video-downloader-5.1.1.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455467000/en/9/.../961374-1808908-ytd-video-downloader.exe  (bdcdafcf6101c774c669739937745de6)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=wHkQzpKATcPzSyD5H4kQkf56Kd/DUqh8xIbhq4NS8 k=&c=4ujPLYKJtXtUcSZBWxTOe3SoQvXMasxXuEMKXLyvP7WSsY3R8iPv/GNNc5aW6uqwlgXXIfqdLkRGhUoC9pMB5yfNzfyYCdAbF81B/SAk9CKQwKcmi0UNCRgXMVhg93X7&downloadAs=microsoft-office-home-and-student-2010-14.0.5128.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455467601/en/4/.../46460-658931-microsoft-office-home-and-student-2010.exe  (f2139c5385a2479de9f54f56ffcd0307)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=8zJJUAwabkhfHydyCI3Y XTUNbY9EEjqLzX3JLKruWQ=&c=EEAHPXyf6J5Ww4LF91sYu1r6M00Qs2ZaaaXM/jmyPdz2lutyrWXRbAApatWR16MjlUW GC6ciMFaYfQfJtwa WvwY9 HTb58iQGaUkMDyZFtXZSTQby8LVBXu3/juL54&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=rRDE4hqwY7iFGl8JHnY 0IT1GNlF3wzQxg77ZL20emo=&c=xuJfnQSe5XKfmKW6OmL5GuCzspujQv2QMLuDX NkCZLS8w3sNOFQXH/luWQhftasXwfX KElQxPQ7BGhx8x2FeIzDPgi8pZPyQzj FAQZzVa0dpLowWZ5XDZarL/NitE&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455464830/en/8/.../83929-92631-microsoft-office-2010.exe  (4716973a2b5b7ff78a29809c904767eb)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=Ayy mv2U ImaTiagBAhjqtYRWVdAecwjgkga2S PKtE=&c=t1EjDxpCP4bProlZgXTCFy49656uq7vSHvAvPJCCu4GyuATR7sz0RXjt0/pC5TyeFPcAhiOzEbqmq/Jr yu4okm 9pX0FcUoD7xSfgmfD2y406bqvHFV5/lKLUS5bswj&downloadAs=counter-strike-condition-zero-full-version.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455457987/en/2/.../234199-671609-counter-strike-condition-zero.exe  (58e8790da3181ab84b7b200379db0c1a)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=jsau3Fp tuloaY8V2Itku0hB1UhHBi vGTwwiFV0uEM=&c=npWXIZH9LvfQx3g1G5LlltwXHmLZQgIQTGsPNjlHDATyrhJITMmjywsYbrx4niQ9pjmige/ixdFXSOowRvG0M2Peda6NQd1vCt4zJLAm/X2yAJhXTOVY6 7enAMkcXlk&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455474521/en/8/.../83929-92631-microsoft-office-2010.exe  (b088fb85f4c8674d18efb4d9223dd312)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=JOvyKfGaAwo6loScdNtLlGHo9kt/DE9gpJrw9wRt3FE=&c=oQ60UaghAxdM8gdA ZBszmC5k UAoK1J8lxpZA4UHJWKaHL7qTMrVL7ZhUL6BzyJu O8n hkqfKpJT6p 5jGq8utEWTntfm uDVpaQ34A0jWNiI02F9q60R7Mg j5dfw&downloadAs=yahoo-messenger-11.5.0.228.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455450980/en/6/.../65168-1791976-yahoo-messenger.exe  (194f818d263829aa297c532d3d42abeb)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=pOl2yenb0/dJybNZvZPSPd96FY1XCNO7U2 ZoB/gcDc=&c=P69tE4mM9kPjHtSKJAvrwFDnW7vTqZfS0vVEsybII4l66klluu ALzpfBIUD6eQUX uxa4Ty9hIyRVuxSd1tJG0IitzNlMtknkQRDujmZJ FlcX4IpR1UzIIt/C1g517&downloadAs=counter-strike-global-offensive-full-version.exe&fallback_url=http://store.steampowered.com/app/.../  (264409907685e9984cfddc03fe0d52f8)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=NpXDxt92bcBjK057WP9bxdv0sJbRwirPpf/F8vsl1Ag=&c=fRX IjohGJZ0yQj4BGYo z2L3CiwrX9diPo0eOFir8otyrgGfH6H6d2nKvqwMNTpa SIZV7Up/8zyhxCk5Iet92QwIEeb12GY/obkTl16vLeoXDBjg UBTCXZ/ruAoSR&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455460997/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (icreinstall_c.exe)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=lahCOIL7lZgPWEHkMI13MC6rmyS8IBocoekPkTcizAg=&c= In0I5h7A/MP34c2NeQC/XOldU7g4IwTsT98BuS7AEjD9RIZqX6N9sVnSn5NyqXk 3/qkgpR9bS8pDN/tmG2oAUNrQ6vMLV9XX27J232NFppa3lHOGVs5DAA5HqnyEmy&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455467256/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (9d7bd942c8e64f8fdccea22204c1c952)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=/EPAfDML5WDriWtNYAz fTLnovdOA8s91fyDN0HcFxw=&c=p4YpmGQb8bJ noviC69OjgwqRAOFmYQ76eBx8RMoF6vzvM FpG2RPdgtW7nCSK8ZIFq/px6wCagj5gH8YCcsOv Rt1/7BurZeg5rzv/DaUIl/PbISzaX7BE6F3PgAwpo&downloadAs=hotspot-shield-5.1.7.exe&fallback_url=http://mydati.com//download/.../HSS-773.exe  (fab08e54edc20de78846282a472a733a)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=oW3RtpiB9zmo6Q9A4aZdph5m7/ Yx/pu/rlxVBrkwuc=&c=zvJ0CeJyl3bj6G13JaDucoz7S5xPnv06092mWssSuXv298Rz2Qn/pNnF3S/g6AAtW0EZWTbB/P6WZjbZ3eiwSb0/rmmm9KGeAWPAmM 4tp/OrHfH387cVH9GGlg xWn9&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=tpSLyi4Js8JLSzTGex3vVRdEGjZgmCCSP0LsHCfMCGU=&c=XiBjOBG1OdXJEqgtJMVNN7amp B/vfCkpt/s81LRurDgM4 HlZlsq3jvrFalNfDN5yH3mBOmj9JPBC0MdeSS9lRtAPZEr/DgDDQl/dh6LqyYDzBxvjsRbwGub85clz3Y&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455467556/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (9e45eff807c441efe0975c7ee967add4)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=Do PYVaIaBWJPO7Hdnzsj6sN Dr9ZIaiWAVwywmKtww=&c=LKdoWqscM5E2s8Nc6oChhip2B1O3qxq6o4Eih63K/EF029ldGTLR8VgFEWt KC6MKDcmWjb2k/aAiYgnhAlXZSJFp4uI3j458Q3dQGX/JY6UWJdEUpNqAWgH9I0q0HHK&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455458311/en/8/.../83929-92631-microsoft-office-2010.exe  (6f0718795e6952363d6d59340d051671)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=jbiaHtNaqnK9w5NnxLZYEYyVx0L4NY /y8vJFwB9eM4=&c=P2pWmBMVv tCXqB740k71uLmrI2G9nf19jAReSdvIjmitAOlgEnRj TidvlSxOoW8gbc CxwYKWHV/q0ImoyGQkBZtW9de iUJIozeIkjAEHQ2f8D62cOClI0dZMbbEY&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (PUP)
http://www.filesstockhead.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  (hss-5.1.8-install-plain-773-plain.exe)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=2Yz98RMe5o1SygkDUs62YRCb6FmNXKXw3oc9/WjgR6c=&c=IjGzaVvN/JEUeD2c6lB7UhVOIV1yjMVnR5Wn3zGH1tWmZ7S0yRoNpznhSM0bZZvgstqbHMgqbpncRX8OdYy4Nx2XFhfyseYmk97UOjTjzUCAQSBEBmxGEdvBs6W023YR&downloadAs=microsoft-word-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (733fad92c3b56c8d6019e2b4ee884f23)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=yvnklcEX9do/ Q1BDaTPn6czy1mItxxers9YbKMbRF4=&c=2wPdXQEeEtj/kgVx0fn /COBZs Dn6A HZoMdODDdHeb/DTn11OCnVARmK5uaDGzh6IOfm/8VtHX2pqJrth9JPKLze8kPwhTmtj0QfxfKisDrYLvb7iybAEFgjbca0fM&downloadAs=ares-2.3.8.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455460197/it/.../2/22461-1808823-ares.exe  (dff000b1aa26d606a24d78a2578d295c)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=0yEsUtnOp69S9fJ wYbfAB0UShZpQcdwXaR3nWYLuMk=&c=JpqhtK9WrO1LmY1HwypcLkRwiWw8KZqId5KdFoKWYwZVfgu6OLhONvXu4X6rYFhqba t8asR40tZaZK2bglqX/gUIW5Sc8vKW6QOdjsSE8W8tgY/QhfbpcRgD1X6620r&downloadAs=itools-iphone-manager-2016.3.2.1.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455474874/en/2/.../235387-1808567-itools-iphone-manager.exe  (e2c6882d1b87be2127618118106256e8)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=ul5aZTsbsxqEBJOI3IGEH2Yp44dODW7ZayQ2BOQD8nY=&c=Ov/Ox4srtB/GiJagRLONwyuH7p9GUwzk5CUJl SDJ0HyfKU47vIKNLVXGQ1GVCt97fRss8Z/luACWwgZ0dZvRT6UD0lHNQ80Fvha3HjzPM 8ocare16y1mnmlohqZyBE&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455468836/en/8/.../83929-92631-microsoft-office-2010.exe  (586243822bcd3e4efd03be09718416dc)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=cBfaBun8m1XZzUpHlU3AaJCTc2AmmiJUcPj2lbEladc=&c=3Wl5oX1ZlVKB0RmSd9G9M6g3jZl/9/zvvyR4o3krextDObNYlnAaKjBGnA9OpclkNw3i14 NhJwgOJUD/vb4lQwJW1YqGANYaav3c6jeiW53SgT2PCjuQ0B3MvqvyEmY&downloadAs=picture-motion-browser-5.8.02.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455454399/en/.../2/227400-1802466-picture-motion-browser.exe  (6756fae1d82a12395582691070b090d1)

1 / 68      (Adware)
http://www.filesstockhead.com/c?x=c28nQBg4YztkFjyw/Oig2hmGAUCoKKQ98jxyI4E9gyo=&c=xPk/uZvIJZtk4J/y5 p9/cX1EVcqI8eSCLagK1zymLgrZ6QjeWtWJD221r6ATB7JM lDyqNh0aPSCMXU5QiF wI5tivkCdobd1GAlWSbcKEQR42C5RF/aHf8yGdepX&downloadAs=nero-showtime-12.5.01900.exe&fallback_url=http://pf.benjaminstrahs.com/s/1455459852/en/3/.../34538-666503-nero-showtime.exe  (18dd8078b55f3fb31dc6e8905d25e8b8)

The following 36 files have been seen to comunicate with www.filesstockhead.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.