Download
Community
knowledgeBase
» www.bodytaggift.com
Overview
Analysis
IPs Addresses (12)
Downloads (5)
Network (36)
www.bodytaggift.com
Domain Information
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Root domain:
bodytaggift.com
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Vittalia.QUICKIDEAS.Installer (M), PUP.installCore.MICROMAX.Installer (M)
100.00%
Trend Micro House Call
TROJ_GEN.R02SH05EF15
25.00%
IPs Addresses
The domain www.bodytaggift.com has been seen to resolve to the following 12 IP addresses.
54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 21, 2016
54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 21, 2016
52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 4, 2016
52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 4, 2016
54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 4, 2016
54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 4, 2016
54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 6, 2016
54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 6, 2016
52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 6, 2016
52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 6, 2016
52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 6, 2016
52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 6, 2016
Downloads
File downloads found at URLs served by www.bodytaggift.com.
2 / 68 (PUP)
http://www.bodytaggift.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
(updatechecker.exe)
2 / 68 (PUP)
http://www.bodytaggift.com/c?x=idwoTe4t 6Qki dvjTC8ToMnpSvw/ u1SyWWB0ZhaDE=&c=XDqCOwvc1 6HZKdsi4Knhdui5jevOOB8JlVIz1eEXyaJwD4PNXUbi10QRZEfh3rqefo1ucUReuH96wwuOP8KjvMnQDYAEQ3hWI2qukpGCGv9cjaIRaP2K1GALDzmTZ4Ns74FEHMJUs/Bq7kstkSWsYXg7X2yBUG6NAkfMmEDvB0=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe
(e555e9c59da4d0efbb2d68b4f8c330f8)
1 / 68 (PUP)
http://www.bodytaggift.com/c?x=NTAVXDEC aISUWhBaskkaMewXNv946IJ84xHb90SyQI=&c=3UAUtUA0cieynoUA8m KlA5igAmA8ii53NbBsR60 qZOGxDrGuJmrTdPprTl jzI50FmHGHptcZek/k9Syl0XM2aY57YowfcXeLEWuQQJB91AXAz6GD285Q/Gdz nSJadYWt funnzNr8TYgNZLZxFSakHI2vrtxU7/9BQwGi8=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe
(f2c0907fda37bf63d3d94edf3152b57e)
1 / 68 (PUP)
http://www.bodytaggift.com/c?x=q/Ih /itYxZwF5qNj67CZvOa4SMuIyOxEP8RxGFKdkU=&c=0ni42hHXngcZ8vlY3NCqDTsNRsslIA5/XMG0F8gc4 wyLGEAmeYdyPInZa3U8/gZNAgx3jDWbFqbnb2HUCzjpDXgX5kJuurvDBEEfzB4b 5 HnsUFWVuNdtqA/5nO no1Sw7nBwAsrwhtwZP8OwiU 9dN1u7lwTFT oQA78Kqb5HeeJPJBKxfA G0vXk9508&e=1&fallback_url=http://res.wosoth.com/cache/upch/.../UpdateChecker.exe
(edc90de148f8e02e171ce7b455506840)
1 / 68 (PUP)
http://www.bodytaggift.com/c?x=iQzUWYMolA1F/lW5B8Nug1n77ABfz2zYHgx0kT8q hI=&c=nA9zR12R7PbJb7oQ8qg8eFnxo6IxZWyFjODYAqATtPhNvnQKO9ugXrX7uqwNaxiNrsVUrPowABDP2s1LK31f8IoPSx6mw40nEfMPqaENt20ygeKqrbEDdZ7CUGjw tP7&fallback_url=http://res.mshist.com/.../ClashRoyale.exe
(icreinstall_clashroyale.exe)
Network Communications
The following 36 files have been seen to comunicate with www.bodytaggift.com in live environments.
TCP »
52.38.209.219
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.33.46.229
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.33.46.229
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
52.38.209.219
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
52.38.209.219
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
52.24.26.116
:443
online-guardian-v2.0.9.exe
TCP »
54.200.224.121
:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)
TCP »
52.38.209.219
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
citrio.exe (Citrio by CatalinaGroup)
TCP »
54.200.224.121
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
54.200.224.121
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
54.200.224.121
:80
browser.exe (Browser)
TCP »
52.33.46.229
:80
Client.exe
TCP »
54.200.224.121
:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)
TCP »
52.24.26.116
:443
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
52.24.26.116
:443
036629fbd4864725737a8ba8fe7e8cd6.exe
TCP »
52.33.46.229
:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)
TCP »
52.33.46.229
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
Latest 20 of 77 files
X