home

www.bitsbodyapps.com

Communigal Communication Ltd

Domain Information

The domain www.bitsbodyapps.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Friday, February 5, 2016

Expires date:
Sunday, February 5, 2017

Updated date:
Friday, February 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
bitsbodyapps.com

Whois:
1 bitsbodyapps.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AVSoftware.Installer (M), PUP.installCore (M), PUP.InstallCore.Installer (M), PUP.InstallCore.AVSoftwa.Installer (M)
100.00%

The domain www.bitsbodyapps.com has been seen to resolve to the following 15 IP addresses.

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 10, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 10, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
July 10, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 10, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 10, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 26, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 26, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 26, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 26, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 26, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 26, 2016

File downloads found at URLs served by www.bitsbodyapps.com.

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=y7Ky9HeX1ql 07kt2WuAr0SWP6Bry/LANh/XnueUNuQ=&c=mgWs6MsoUSalQxmKr6hHwyxBQV8djctpcjgnNtFBU3QbgGQ iNLn4FAWq/dGDb/jugq 7V8tSQJFcyO H xR8XH0vZJ4x1pP0P4vHifkS9AtAS5e4GLxjNRXcLxRUWhw&downloadAs=Stilo_Magolide_Ft_Na.exe&fallback_url=http://.../get.php?file=bf4438db&m3  (73438429a62b4c063b5ee2952e20fefb)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=yYCvgc79HE12qaChidM/Lcvz6H36XI1w4FK6mCz8nnQ=&c=4IcXDFl838Tf4hcAHfa7//5q9ljimXssbrgme9wFvqKfk9D54FDIT ZVeOZwJmymR8lUr8r82G8r882Bm99t7zo4YF72BxTMHBnuloLiAiy0CQcKWhTo1mdwURCfJgoF&downloadAs=14_Dont_You_Remember.exe&fallback_url=http://.../get.php?file=2b5072df&m3  (ed0ed1c7667e37bc7eaa2850cb091853)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=teERoM7LQ8JLASsTBC97l9jngl9V4ykR34UrhrqqzMM=&c=Jvra09NPAhiwsi3z3 Cqe7uPh0PiIyvmw3U hF3ceZQs7dnQEr739bLyQV5FuKtLQXxiRTQG2W5UkJQOBj96HNjtro2hQ1EXudtt MwyQUZQT/6ShUflFMUJF4aMfRzs&downloadAs=KuroGaze_Another_09.exe&fallback_url=https://s03.solidfilesusercontent.com/MjdlOWNlZmFkY2JiNDZmZGZjODRlZjRiZWExYTdmNjE3ZDM2ZDlhZDoxYVMwVFU6RGNsM0NWNFVKdUpPYVdQeTNtRE9uaDE5dDY4/.../KuroGaze_Another_09.mp4  (0206e2b3e2e30672676f9417fc13e8d8)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=7AyxG6FTOnEuwq/Ml3G1HTYxHDc0m3AhFh LBORYO5E=&c=E6fso Z/n0alFVJ8xVGq1vIgFcKde4SDV7GPAU1TvHupK1k9 UIhVn0DZXgmzSJpzE3Lf5G9TQw0yzmQ1pntOeNUOWq762wWWLPPbp9jZoX3jSRqASw3cSjr4dwuyoSR&downloadAs=KuroGaze_Another_11_.exe&fallback_url=https://s02.solidfilesusercontent.com/NjNmNzUxMzc0ZTM1Y2YwNTFmNDJmZDc4MTkxOTNmMjE1NTNkYzY2MDoxYVMwejA6SUtUV2NYbS1UanZzVkNtMFBSVk5RZlVsWnlv/.../KuroGaze_Another_11_HD.mp4  (2cc64e5b2489fdf184083d4deabfc8a2)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=1u5foGYZB6 W0qlkPaMXC/xBPX NLhMgJJqmRcdrpQ8=&c=ayNbcnpF7xRX 5tClqy6hQsYjhiu3KP9y8R84itdcQ41XmvvNlK5DCnElnS5hsi6ahCybOOYjphZUcdoDk/EyXME8JGW40VXbeee6ggt/dd6/ZmowO8/Uo1kUm0BF6P5&downloadAs=KuroGaze_Another_12_.exe&fallback_url=https://s01.solidfilesusercontent.com/YTEwZTQyZWI3ZjBhNmJhNmEwNDQ0NTUzNGQxMTI4NTZkNTI2YWUzYjoxYVMxOEM6ZWtYZ2RCeGxwZ09rck5FZTh2OEhMZ1B6X2ZJ/.../KuroGaze_Another_12_END_HD.mp4  (5d729bb4089c056316fc93b28d7649d4)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=0bueU2x7NZg8ioPwnNwJhq8x13ySbDMPueiEYmo1kCY=&c=PDMj2mHOkfKcudxxfNnZg8Uzci4AjoOYqZe5fozhU4qpRRC7539QCfFxKkZG3QaghskO0vPdZNZlI3usJM5o5ISleo4f WKyxiLfAdoO3gfWnFyp2Aenglmw/SVcjJ0l&downloadAs=Five_Nights_at_Fredd.exe&fallback_url=http://.../get.php?file=4cb6f186&m3  (89d4e2b5c220f7333b7ad99837f972f3)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=UaeCW8cRdhIi8aoR2/kWlwhsqiF01tFUcvdtm1k1nvA=&c= 09BF0SEGHdD1MbnxOnnA//uxt9l4Btz5rtVB8MzbNkeWSCRUSMZXogvZtEAdT/5DFmRUQBxzsK4dCVMMuaM/Fjq60lP WJc8q1bSuMzbwaVDhTcFlAn/vYTpcKYH7US&downloadAs=coretanhariancom-One.exe&fallback_url=https://s03.solidfilesusercontent.com/MmIwYzdmNzgxM2U0YWExODgwZmNkZGJlMGVjNDcxYmM1MjU1YmEzMjoxYVJ1djc6TFBPaHFSbGJmeEFkNThtNmRxWmRURmpIR3Zj/.../[coretanharian.com]-One-Piece-480p-708.mkv  (1a5c0059453a72c127dc89bc4454de69)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x= wljQO5jSUFa9FrB6PN0PK1gjsTD7XNCJ4FnbAJ7u20=&c=l1pbatjGU3HGArMeDAEyYs7DvW9d0FAnl4 eEEL6UQMdaW9St5vLl MzpaYYzkElWXh4m1Cx2ZT0Qvf5JBU5fW8XScCeDLi4XCFf1jC NioLsYosnAlMG7DFD2OogFw0&downloadAs=ss.exe&fallback_url=http://.../get.php?file=59b8af4f&m3  (af76887b663493ed42bf7b0de06e0622)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=EvYTnKKvfT0jpc6tdMevHmu6RapPOtyjLxH229L8HFs=&c=McBT3xYxZvVToMH2iBgSj4qKRXn8GgKgjZM2MYnx9oO1o850pUURPgfUW6fadSdatUlMT2S63oBsWRbTPH9aqGQkcmB4UoylTxfKNw tZgj72Ckvf/ pewQz17ehkUNw&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe  (7becfdeb84357a0b76fbe1eedbd20db4)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x= HpjyRuxbWMLTtNb8JTJzPVzTTmpypkB7EqtZgUhaoE=&c=nAkaJFOPT9XWIGAMB6vef5V4mHW0XM QqIgnzKJWGpBn63oIIHmcgAibqOVkyPOksTiwUwTuuDJ0S9NLiV6hAv4SEb8B0embF 18gFDWW8cVZVMad1tLoqqlrT8xz tX&downloadAs=IGG-Slime_Rancher_v0.exe&fallback_url=http://.../setup1.19.exe  (icreinstall_igg-slime_rancher_v0.exe)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=DfqQaAiEsHCYVElAMTPW9KEUf5u3lxkkepgIeP/QtNo=&c=3jPrQLK0OKGtlqvVjm21nfhSpzxzxTUwrf2i6EpaSu3JljcGnoG5y8LR4W7qAoD41yi2xQOobv2NW vJtSbN1NkC/egL j7muCw9ecezb2zAnr6pCa4eDRMS87nITXc/&downloadAs=Adobe_Photoshop_71_K.exe&fallback_url=http://.../get.php?file=aa6a89ba&m3  (c.exe)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=0FU Dpst4zT3d0ZK9CoJU4F4A45/blkrWt/It5uUFAg=&c=e7NApvSwpdw0w755SmWMA0uJt93snuGTbHostW6wbtiIUN/1xHtD56hELb BPS9V24Zxoq6V68scvbTnAG3yU5Ei9A8aCKtD5B9Xei2pKXk VrHzwBY1XXPBfwmTZXCU&downloadAs=tmwtif2tbric31mkv.exe&fallback_url=https://s03.solidfilesusercontent.com/NzYxZWM5YzE5MmY1MGE0ZmY4MmRmYjY1MmRkNmYwZGMwYzFiNmJiZjoxYVJxaHE6eHc5NnJqaVhSMlZ2d2ZadTZidlVhalZ2b1Nj/.../tmwtif2tbric31.mkv.001  (8d3117211f36c322fe06c9cba1024d79)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=hkWfrKUlzwzmafChddgVmr8m/xVdTEmA/A04qHSX5YE=&c=dfBtTchADdsaQziqWtyeu2q D4ZkQ DST42lHnHhyxgeSiESWZa5WepulCE0pz1joyNsuQzHRsD52Hzf2s6QrPDZ1eDkFgF/4bPn2W27tnrBrGUAQKUp1YFWmQXZn19L&downloadAs=Transformers2_crack_.exe&fallback_url=http://.../get.php?file=5f83271d&m3  (03131ef6dbd4560b788bc43ae33cc758)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=rEUsk0xkF8A7LXxRiCKqf6TBkh5ZVNGJKXjq7Oij1FA=&c=PN0rzGnQODwb3iAs7q50l9iMNNN5rmFgrVRyk0j Ra9EfP8WVTAC0jL7cxFbz38i21EepRwRmByqx hQ0IFIwNkeoB6RjUQ4Es0QXbL8DeU6PetGiNokD8h64flffoa8&downloadAs=db_roleplay.exe&fallback_url=https://s01.solidfilesusercontent.com/Yzc4MmUwMGIwYmY3YWU3Y2IxNWMwMmU5MjUwZWU3YTI2OTY0MWEyODoxYVM4ZUc6UEMzWVdpNFNjTEVwQ1YwbXF3THM2RmZ0WHNj/.../db_roleplay.sql  (7b97a52e149deba273f551d60f38d622)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=miIxJ74tyA7Vj9jT/gxcA OTdQyWva8zIAWhG9AH5Ec=&c=MvNrZjO8kRVk0lUR5hXgUzUO3TMs vgPcstdmgL7RevmrlEJMbYweE2BY81ryCDbP92AqSP mz41nphVsodfeqdrqFHhPAlmF3G5IAxeAj/hXojbpmpqcYM2Q5n3GbJ7&downloadAs=jumpstart_blognafaro.exe&fallback_url=https://s03.solidfilesusercontent.com/YTQxZjZlZWRiNDViYWMzZjEwNDAwOWJiMzY1YTdkYWM4NWEyOTk4ZDoxYVJ5MlE6NkVveUJ2N2JzdlFkcEVNQW1NZFNMX3JWN1Rv/.../jumpstart_blognafaro.zip  (3a33a83a9728a1d4a4bfb36c8a7d507f)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=F/0JpxXO8U0rzDCsQhnR677weItmxMGUFKMBJyEO8Nk=&c=/mGXn34Epvq0jVLDlNxlqXUhwXzs6vP3cZWRyFC9VjknjLG3taFxIr1ApA507hgIokenB1HOjHnxeIOXk4uk3RknwH7TGUWRYquHjtXM34lhplNhj1QBrcdvugNm9hv/&downloadAs=KMSpico-1018-link.exe&fallback_url=http://www.eveofjustice.com/.../KMSpico10.1.6-link.zip  (6c57acd9eb2a34b2658fc3041a1c8fb0)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=knsvwL TGFx0kt6l2RO79RyXy3dgYS1q9wvGzL4UQSE=&c=ZlaRQYmyvtlOp1mkdadinb8KuzgRFxSDtdavPeTzWMrSUYIJDD2BHmC4uXnuyj19HcvpfVZvZ2G92f4Oxuo5jmb483 8uvE/kpApMYpwCGmoEdKY8fCO9j8svTh2nt9o&downloadAs=Burn4Free_DVD_Copy.exe&fallback_url=http://.../burn4free-setup-silent.exe  (3a678534935f4fe916ca953d8c262380)

1 / 68      (Adware)
http://www.bitsbodyapps.com/c?x=A4obtq9lRJ6MC6huSWTT2edxVaKbywei180afsJl0d8=&c=rFxxa1tanWobUgQ4smTks4 gn57pquXHaqqwmBj4jXVX XtS4dCSFlqdtt6C4z6Y2HwU01x2T3qavsrpIGj5lH8MUxD3uhyDrpIGk5dc TUHymCRFvNEP8iukqXDZCLm&downloadAs=Simpleserver.exe&fallback_url=http://.../get.php?file=d439b2c7&m3  (icreinstall_simpleserver.exe)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=mDhMH Iquwxd1R7djRXzaZsTC5lnAQk9Sejk19mHi8s=&c=HdWJ075GxhiuWoyydFCYu8ZB0gRrmIGQbSHJC52F5JJEmKkD4o/0X0aPji0zmpLDdUsSScPRTY1MI6Mo9to8cQvikCipIKAF6VlpTQ NglvV5ye76mUPWKCRxa4/Isry&downloadAs=McAfee_LiveSafe__Int.exe&fallback_url=http://.../setup1.19.exe  (3361dc631076274df91524dbcb43f81b)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=b7q/1/qCNMBE0jmVFO27YjL4AFBFQGTb89q46seW6co=&c=oU04U6fynWmAEITAJazDOz7jWYVz/elz9NxsbixyNzPYLAy1CgoOCY0lku5GjQKKoVGsg4E1odmfdW9xO1JQOnI5WWf7aUI W94ipTbcZbVsPEgW5qNy7bH/QRVG lV8&downloadAs=PR0T3U5_83_SP2.exe&fallback_url=https://s01.solidfilesusercontent.com/OTQ0MzAzOTE1OWNjYWJjN2Q4ZThmMWRkZmEzYTY0YWMzMWY2Zjc3YzoxYVJ1TjE6S1FZVm9JTWs4T0ZwS2tNR2ViQ2JMcm9XcWN3/.../PR0T3U5_8.3_SP2.7z  (bd7774761fecce19e6e763c48f86635d)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=0ZaKVnX3eYPSWxKbd9Ms/TE8hoNkTKrqPNfkHk3OQac=&c=GFIWtMdBZUhOMOt/UIsU8700Shov7FUgdui8jpq1MFAXabvpLRhGxIb/xsyF7zgKsw82vU0wMfRRNxhU8XtO ek4YQkHvhHbwblgVLvir4DP6ckLf9WcsgnsnCEj9b M&downloadAs=WinZip_Driver_Update.exe&fallback_url=http://.../setup1.19.exe  (0b86bc8b6b7fe920ccb0fdece46f72d5)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=U0Uhu1yJ92x6Tv/hoEJ8ymHps2SUx34HXQacdfUO0as=&c=cIxDWxA9PwS4kPeMhHQFVpRaRoSFTxgiPcs85zRyU58MH8Ko2FHAM8kAOxrK/BSjvfYwFisBhtgZvOcf/mMZCnWLE2xJHE7gWBqU0AzA8C6f4bX/5foeD8ki1XdPJIYS&downloadAs=DVD_Firmwares_Update.exe&fallback_url=http://directdownload.burn4free.com/.../dvd-firmwares-and-drivers-setup-silent.exe  (161bf800aae8020ef3b395b0f0166eb0)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=e4DSUc4GP320XwZ43HIG7LrJwJw6FLdWkp3MDx1YsEM=&c=AmPFPQii6/KWDqsBlRS Cr0n0eIOvP8HiyG9926gXLOQeqeTDgWsiPulj 9VSnd82jGt7LCHo12WTlsbdKRB819hROfN BUFDas6bG5Y1IRwLf1hLPw8iDCehnHb Yk3&downloadAs=Need_for_Speed__2_-_.exe&fallback_url=http://.../get.php?file=ba82676b&m3  (cedb653108ce454c0b38c1cd61f76317)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=V5hbqhtyIun/T3GjSelpUFmAOHXCymwWiA1LnQpNYWY=&c=/m1UendUiOntNuWubbCdEYuj5yMDdqpNbQulMHKqK5M 3yO0L17XuthZp2XFUsFdEA4x1uNTQDzdu3YC08QOyBraUtvJVLtJ/uxWFGRcE1EFxPxw9oWIT/ JYwU2lRRV&downloadAs=Paretologic_Pc_Healt.exe&fallback_url=http://.../setup1.19.exe  (3dec08ba509a1a8afbe01f5beb3c1026)

1 / 68      (PUP)
http://www.bitsbodyapps.com/c?x=2xlcWjC4ubTP4oU7Us21XuR7 TeXCyNLp2h5QxAocIU=&c=ZWiQWQtoWayH6Geib/LHoawPh6VKepEojHZX6Zo6WwmXQG5WKlKq90p5rsGyLdT6iWZ1RX0qZbCiLUr7TdR79EJgZCoyRf Smk8uU4TLAnEZa400URgzPIZ3AN/SxxZ5&downloadAs=_____Upload_By_wwwpy.exe&fallback_url=https://s02.solidfilesusercontent.com/NzdlNjdlODU3MjUwZjFjNDcwNjBlYjNlZmNkOWQ3ODMxNjdlMGU1NzoxYVJ1Y3o6WkJMLWdUeFNQcEJVZk5rckR3SU1kczVjMElv/.../????????????????????_???????????_??????_??_????_Upload_By_www.pyaephyo.com.zip  (a7218d12600c4b1cdc3f6882986e7a5e)

The following 18 files have been seen to comunicate with www.bitsbodyapps.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
kmplayer 3.8.0.117 -[www.patoghu.com].exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
KMPlayer_3.9.0.126.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
3.9.0.125_20140702035547.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.38.209.219:80
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.