home

www.stockpackagechuckle.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
stockpackagechuckle.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
100.00%

The domain www.stockpackagechuckle.com has been seen to resolve to the following 17 IP addresses.

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 29, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 29, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 29, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 7, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 3, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 2, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 2, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 2, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 28, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 28, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 28, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 28, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 28, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 28, 2016

File downloads found at URLs served by www.stockpackagechuckle.com.

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=GpEFZaBEYQ5YF PLEUovDIAQOqqpatF30dsN9/UaKCI=&c=m5PBaDUeZGK3UBpXa6eO9dTo3eXSlSBQQaRkQmbVzNjwomS00KGDp8ulaAU0PQlJ2w1iI50mAtIry2JsXjmrJzWZ8TGZol6n6 doviMUcHhEM6NyACS5u2J7IsuK5qiK&fallback_url=http://www.wolfram.com/mathematica/.../&downloadAs=installer_Wolfram_Mathematica_sciagnij.exe  (bd11c479ab61fb5c274f649d13b70b27)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=cpS 3xPDOAcAle2OQ7ByRvAFjRuq56HwlsDZQ2pLDxo=&c=Vkczy4e0ghqThNtSt4Fi 1Lv3TWxZHqri7nbEGH6aSMMBROtVsdv3TgmtDEBY8hW9jsugLkCSCnSlW n20MHPRMdu1bNx/3Cnlk7z0YhOBnEHUh5CQ4oq 0LeslcowQM&fallback_url=http://bi.sciagnij.pl/0/.../xpadder5_3.zip&downloadAs=installer_Xpadder_sciagnij.exe  (4f6d7626cdd0693a0a1e8a0cf07f67a4)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=4aM0bR/XYjOJ QxZDi4wuS/riEZpAXba2GU4d8ynALk=&c=jOBiS3UKegKpKMXIIFhYrvbNxV2VejPKJrOZLRpCN81D/DBBNtb0FQY/aCikfYFE1nzmpHMVB aBpJXfbNSOM6G5eg4z YSRmUuMuFp8CDfpQkezF1APf588yFaKV/zm&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (6768c83cfed1b2c06812c0c65ff47927)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=JMgF iRHBO1YEe7Ac4Rr1SlhyTjqB3hRCgJFunInhzc=&c=Md06 LFIcSjZlaVfq4YWJEpXF8CraeOXKkMwzTxdvrsIXOGXbVnrax41IsmtqdhPv4qEKhUsBLK04fhf1slsbppiisUk1GlBUL5jJ7e73OeRx1/b995 MlBqa/w701Z5&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (6768c83cfed1b2c06812c0c65ff47927)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=E7JoNSR4FzqPgorjIct RyJvuzeTftGXZTLIS0O Rs8=&c=Uo 4QMTswuVn82IilMabXHzjg1xlr9db0xCOWOXm00Q5kttAs azoJe6CC/pJb5KB2bWzgPd51OY5SOKdBXKA7AwgLx0xrTzeK14dTaJwjHg5541o6mhVdPWtA70Mw91&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (04c10b3d52ba8fe3b4f402c5e18265c2)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=myFa1H3mshALTR1xAfBt/70A4WJoX/eiiHf2aHGDmhQ=&c=I3jqEbOXD0hfnYBcsBJhCJMqtIhkOc7RuPhe/Yj mJJruu 8kYlSiw1qtEKtFgh6we9SaHyZuaeLxlpTDLLADdG8B3d21HtDSG0CDr6JI9jitzgZczzo9m/HqsuLD16x&fallback_url=http://bi.sciagnij.pl/0/gry/q/.../quake106.zip&downloadAs=installer_Quake_sciagnij.exe  (c0dfefa8f188b0e859e2beb717665e46)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=gkV9BEhvjDhfo9ylaKUmfPY9J/vdEm5ZRByV0QeUtcE=&c=U3c/EbgVyX9Wb1EOX3UsXZ4IXENFKIlu80W31rYtBp5tEcJs/US8KmJYZ8CtzDS5upBeduyS1cuKZmltHHk2zocpCxGHdwNn5LoYHuBAK191yYJ26WE6CbIHJa5CfGOI&fallback_url=http://bi.sciagnij.pl/0/.../Mir_ang_demo.exe &downloadAs=installer_Angielski_Mówisz_i_rozumiesz_sciagnij.exe  (ec59542ea3764bc1e4caf7c3a475ef81)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=dcE8XGsYZmnLzUWdkVwen4KcH4Np5O5XnKaMSo4rJJI=&c=O8l0kRueo1/KZe3R4yX4AnPmVsJjDgpKd8s7u8ly2FbKvhVAdwJJ5GQvJ0I3WQi1LgRcdLoho1o2ciq/K0xTj5svkSXIovFp9MdU7skI5l6bvYgqUHGY40rcWuhT3WOO&fallback_url=http://bi.sciagnij.pl/.../0/ap_setup.zip&downloadAs=installer_AntiPlagiarist_sciagnij.exe  (194899ef4bd900b1a8a689ebb443a08f)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=elKRogdZ0/GHEWpnZM97QPnTjOkaFJvA vSIjuB83io=&c=R2aST3JRWabPBUuQWTNcr/Q07 bWhadwxlS/eDy9IIXcpUclUkCL3k3GaazjE1C5YzpPSG92x4ucradJyzLAgQ1OkmMmS2Fbav0vkq41x5tH8VHUuazHEdux RGvmDuG&fallback_url=http://bi.sciagnij.pl/.../0/DoW2_SP_Demo_Installer.zip&downloadAs=installer_Warhammer_40,000:_Dawn_of_War_2_sciagnij.exe  (installer_warhammer_40,000-_dawn_of_war_2_sciagnij.exe)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=hcXyc4GSMRiIKSi4Bzt6c/adZg2hYC3rZ/esztpfjjA=&c=2E3qxrwJ801uRhJL8E/Dxcp2DuUZOp scLGDZFk2Xh8D1hLKZp4WE30DaKjQ1i1FuPrxtYlhdG7SoaI8VyeKZMm3h73P63cjHYHcNsEbykZ7k43k/Y9dolWWWntJ6cqO&fallback_url=http://bi.sciagnij.pl/0/.../MotoGP08_PC_demo.zip&downloadAs=installer_MotoGP_08_sciagnij.exe  (951e8fb47997b09e33690ced0d7cce90)

1 / 68      (PUP)
http://www.stockpackagechuckle.com/c?x=JnHgRwV0DHsiE2qrdpcepjVg3nLflbTa1yMBToLTS5Y=&c=rCUIvBgXAPWgpR73gOyaDDCu/xICORjvW/EJyJ4voMjg68K0KxzsJFDV6u30FxtFqEw6Q2L4lK8v AfSN7AfmI5nuFGwPuH3hupFuaQBc8CFjBmzrHFo2nWQPxXTH8KI&fallback_url=http://bi.sciagnij.pl/0/.../simple_performance_boost_setup.exe&downloadAs=installer_Simple_Performance_Boost_sciagnij.exe  (2727bcab6ea0c5b42e4acdaac66b6d91)

The following 36 files have been seen to comunicate with www.stockpackagechuckle.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.