» www.nowbitstag.com
Overview
Analysis
IPs Addresses (8)
Downloads (17,236)
Network (6)

www.nowbitstag.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore (M), PUP.InstallCore.DesktopE.Installer (M)

100.00%

The domain www.nowbitstag.com has been seen to resolve to the following 8 IP addresses.

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 16, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 21, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 21, 2016

File downloads found at URLs served by www.nowbitstag.com.

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQVVYwZFhRMFYzZGlRa280SlRKQ1VGZEZXVGN6VG1oU1JXeG9UMDQwYW5SVVJYQkplbTVOV2xSM2FGa3pjeVV6UkNaalBYTk1jVWd4YkhWNVIyODRhbVZHUVhCcWRUUkxlRmhuV1hBNFVUVjVWVUZtTW1jd2NXOUdRVWhuSlRKR1pGUXpha3cwU0ZFMFpFNHdRVFZHVVUxWFdXaHpSMHRLY3podWVIbG5iR1JQYzFsUllsUnNaU1V5UWtwMVFYTjRTSFJoVjJJbE1rWnVSRGhYVkZwdVlXWjRXRlUwVm5Wd1lVRnhKVEpHY2s5NGVFUjZjek0wTmpCaVVqTW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWmpaRzR1YzI5bWRHUnNhWFZ6TVRFNExuaDVlaVV5WmtoRVgxQnNZWGxsY2w5VFpYUjFjQzU2YVhBbVpHOTNibXh2WVdSQmN6MUlSRlpwWkdWdlVHeGhlV1Z5TG1WNFpRPT0= (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQVFpPWldod1JVVkhZWE5DVlZGRmFtd3hOVUZpTW01UVRqZFhOVFlsTWtaUGJtaGhURFZSVEZCcmNUUnFkeVV6UkNaalBVSm5kRkJ5VjFWeWNVdzJjV3gzWm1KNVdqVmtaR3RCT0VaSlRYSnVPVm80ZG5WcFNua2xNa0paT1c1M1IyVTJNRXhVV2t3NVNpVXlSbkI1YW5OR1JGWlVkR3RXWVUxUVJHRkNOMFpITjFoV1FXRk5NakpaVjFGM2VDVXlSbXBxYWxOR1UwVnBURGxQZDBoVFEwb2xNa0pESlRKQ1FTVXlRblpNVERGWVVGTktiazVvWkNVeVFqQlZkR0pDT1VZbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0yRWxNbVlsTW1aalpHNHVablZuY0c5eWRHRnNNVEV4TG5oNWVpVXlaa2hFWDFCc1lYbGxjbDlUWlhSMWNDNTZhWEFtWkc5M2JteHZZV1JCY3oxSVJGWnBaR1Z2VUd4aGVXVnlMbVY0WlE9PQ== (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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?EsetProtoscanCtx=99b9a98 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQWEJCZVhnM1MzcEhUakJSWXpsRGVITkVTM1U1WkVJbE1rSmliWHBxWlRjNFVXWjVSVmwyVGxKc2QzVlRheVV6UkNaalBUSldRazFaT0dkeFlpVXlRamc1V0dodlVFZENSR2MxSlRKQ2VWRm5XbFpRV0RaSWJIbFRNMFpHUldOM1lrVTJlVFpKVWtoc2RUaEpTM2xzVDBVbE1rSjROVTEzVEhVM1V6bHBOVmhRUkVodmQwdzBSMWczT0VWV1Z6WnRXa05HUW1FMWRIVmxOVTlXVGpNNVJFNTNla1ZKTlRObk9FSWxNa1pwYlV0c1RreE9ibU5uVGs1VlN6UW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWmpaRzR1TVdacGVHVnljM2g2WkdOaGNtNTNjeTUwWldOb0pUSm1TRVJmVUd4aGVXVnlYMU5sZEhWd0xucHBjQ1prYjNkdWJHOWhaRUZ6UFVoRVZtbGtaVzlRYkdGNVpYSXVaWGhs (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQWE0yVEdaNVdVVndUWFpTWmxSb05rSXlaSGRzTjJkTVVXeFpWMjlpVHpBNWJXeHBjM0JtYWpsTFFtc2xNMFFtWXoxWE9ESnBaRWw2VmtGaWIxQllZM0oyYkZWaU5rZDRKVEpDTVVwR2EybzJZMlJpVmpKbFNuSjJUVzlwT1dacmNVa2xNa1pETjI1aFFsVjBVamxHTWtONE5qbEdObUlsTWtKVlVFSXlhblpwT0ZNMk9VWXpOMDlNVkdkUGJGRklkMUZXYVdseU1HdFNiU1V5UW1ZMlJtdHBaRFptWnpWR1lUWlpNRkZrTjJKVVVtZHpNV3RDUmtSb0ptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbVkyUnVMbk52Wm5Sa2JHbDFjekV4Tnk1NGVYb2xNbVpJUkY5UWJHRjVaWEpmVTJWMGRYQXVlbWx3Sm1SdmQyNXNiMkZrUVhNOVNFUldhV1JsYjFCc1lYbGxjaTVsZUdVPQ== (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQWFp0YTAxVWVsb3lUMlJIYjJsNlNUQnNOMVp0WjFabVdrNVNjMDVXUWtGRk5FTklTbFJOUW5aMmVUZ2xNMFFtWXoxc2JWZE1WVkUzYlhKMVNraEhOQ1V5UW01c2EwWkpiM2t3V0ZGVGJ6bDFVazVxU1RaUVZpVXlRbGRvUlZaWVJFZFJZWFZpWkcxSU1UWkVURTBsTWtKdGVqaDBNSGhrUkRRd2JGbzFKVEpDWkRoaWMzcEVZakZhT1hSaGEyMTFZMkZFVWlVeVJtZEdiMVZxWjNaS1p5VXlSalJNYWpFbE1rWnJSMHAwZUVaTlNWUktNWEZHWlZwb01GbHdielJsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROaEpUSm1KVEptWTJSdUxuTnZablJrYkdsMWN6RXhOeTU0ZVhvbE1tWklSRjlRYkdGNVpYSmZVMlYwZFhBdWVtbHdKbVJ2ZDI1c2IyRmtRWE05U0VSV2FXUmxiMUJzWVhsbGNpNWxlR1U9 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.com/WVl6OTRQVlZYSlRKR2VGUm1kbEJNYzBVbE1rSk1jbEJoYmpsaWVtVnpaREJoTTNKWldTVXlSbmxWUmxrM01IVkphRzV6VkhNbE0wUW1ZejF3V25GdGRYaFVPVFpFYzNGbFlrcG1WV051YlVWa01Fd3hUbUZyZFVkNmJVMTRORXd4WWpGQ04wYzVUV0pRZUhBNWJrZFJjSHBWVnpnMlNtNUhOMUpyYUVsVWVpVXlSbkJTWkcxa1VGQk9jMlJtYzNsMWVtZENhMlF3VUhKUmEwUTVVSGwzTUVJNVprWmpVblJrT1dKYWVqSmxUR2cwUjBKNlkwbEdiRFZ0SlRKQ1RsY21abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMkVsTW1ZbE1tWmpaRzR1Wm5WbmNHOXlkR0ZzTVRFeExuaDVlaVV5WmtoRVgxQnNZWGxsY2w5VFpYUjFjQzU2YVhBbVpHOTNibXh2WVdSQmN6MUlSRlpwWkdWdlVHeGhlV1Z5TG1WNFpRPT0= (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

0 / 68

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

1 / 68 (PUP)

http://www.nowbitstag.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 (hdvideoplayer.exe)

Latest 30 of 17,236 download URLs

The following 6 files have been seen to comunicate with www.nowbitstag.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.