» www.staticbucket.com
Overview
Analysis
IPs Addresses (14)
Downloads (24)
Network (46)
Website Detail

www.staticbucket.com

SIEN

Domain Information

The domain www.staticbucket.com registered by SIEN was initially registered in November of 2013 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Jose, California within the United States which resides on the CDNetworks Inc. network.

Registrant:

SIEN

Registrar:

GANDI SAS

Server location:

California, United States (US)

Create date:

Tuesday, November 12, 2013

Expires date:

Saturday, November 12, 2016

Updated date:

Wednesday, December 24, 2014

ASN:

AS36408 CDNETWORKSUS-02 - CDNetworks Inc.,US

Root domain:

staticbucket.com

Whois:

1 staticbucket.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.Sien, PUP.Sien.SIENInternetProducts.Bundler (M), PUP.Sien.SIENInte.Bundler (M), PUP.Sien.LiveSoft.Bundler (M), PUP.Sien (M)

100.00%

VIPRE Antivirus

Threat.4150696

8.33%

ESET NOD32

Win32/GetNow.E potentially unwanted application, Win32/GetNow.F potentially unwanted application

8.33%

Avira AntiVirus

APPL/GetNow.ionb

8.33%

AVG

Generic

8.33%

Emsisoft Anti-Malware

Gen:Variant.Graftor.173330

8.33%

F-Secure

Gen:Variant.Graftor.173330

8.33%

Lavasoft Ad-Aware

Gen:Variant.Graftor.173330

8.33%

MicroWorld eScan

Gen:Variant.Application.Bundler.36, Gen:Variant.Graftor.173330

8.33%

Bitdefender

Gen:Variant.Application.Bundler.36, Gen:Variant.Graftor.173330

8.33%

G Data

Gen:Variant.Application.Bundler.36, Gen:Variant.Graftor.173330

8.33%

Dr.Web

Adware.Iminent.11, Adware.Searcher.2754

8.33%

NANO AntiVirus

Riskware.Win32.Searcher.dnfofn

8.33%

K7 AntiVirus

Dialer , Trojan

8.33%

IKARUS anti.virus

PUA.Getnow

8.33%

The domain www.staticbucket.com has been seen to resolve to the following 14 IP addresses.

August 7, 2016

July 28, 2016

June 4, 2016

June 4, 2016

May 26, 2016

April 17, 2016

April 17, 2016

April 3, 2016

February 12, 2016

February 12, 2016

March 8, 2015

March 8, 2015

February 7, 2015

February 7, 2015

File downloads found at URLs served by www.staticbucket.com.

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (turbo photo 6.8 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (acid pro 7 7.0e build 713 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (for the glory a europa universalis game provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (windows media player 12 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (adobe photoshop cs6 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (satellite tv on my pc 1.0 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (adobe photoshop cs6 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (hotspot shield 3.42 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft office 2010 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (avi to divx 4.2 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (internet download manager 6.21 build 18 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (grand theft auto san andreas patch 1.01 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft office visio professional 2013 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft office 2010 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (adobe photoshop cs6 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (driver genius colorpage slim 1200 slim 1200 (64-bit) provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (adobe photoshop cs6 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (nokia pc suite 7.1.180.94 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft word 2013 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft office 2010 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (microsoft word 2013 provided through www.phpnuke.org.exe)

1 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (spore provided through www.phpnuke.org.exe)

18 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (bittorrent 7.9.0.30637 provided through www.phpnuke.org.exe)

19 / 68 (Adware)

https://www.staticbucket.com/astapi/api/.../setup.exe (silversoft speed 6.32 provided through www.phpnuke.org.exe)

The following 46 files have been seen to comunicate with www.staticbucket.com in live environments.

TCP » 66.114.52.14:80

1468567241.exe

TCP » 174.35.73.98:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80

tools_update.exe

TCP » 66.114.52.21:80

1468567241.exe

TCP » 66.114.52.9:80

1468567241.exe

TCP » 66.114.52.5:80

1468567241.exe

TCP » 174.35.27.76:80

1468567241.exe

TCP » 66.114.52.11:80

1468567241.exe

TCP » 174.35.27.71:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.11:80

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.73.111:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.11:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.18:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80

1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.9:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.27.71:80

1468567241.exe

Latest 20 of 227 files

URL:

http://www.staticbucket.com/

SSL certificate subject:

CN=ssl2.cdngc.net, O=CDNetworks Inc., L=San Jose, S=California, C=US

SSL certificate issuer:

CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US

Web server:

PWS/8.1.36

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.