home

any-fileopener.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain any-fileopener.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in December of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Virginia, United States (US)

Create date:
Tuesday, December 9, 2014

Expires date:
Friday, December 9, 2016

Updated date:
Thursday, November 26, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 any-fileopener.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.RE48 (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.InstallCore.RES (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.NewMedia.NMH (M)
100.00%

The domain any-fileopener.com has been seen to resolve to the following 5 IP addresses.

52.4.0.73
ec2-52-4-0-73.compute-1.amazonaws.com
February 12, 2016

52.20.217.65
ec2-52-20-217-65.compute-1.amazonaws.com
February 11, 2016

52.0.211.253
ec2-52-0-211-253.compute-1.amazonaws.com
January 31, 2016

54.173.245.246
ec2-54-173-245-246.compute-1.amazonaws.com
July 7, 2015

54.236.148.128
ec2-54-236-148-128.compute-1.amazonaws.com
June 19, 2015

File downloads found at URLs served by any-fileopener.com.

1 / 68      (Adware)
http://any-fileopener.com/pdf-reader/gb/.../?dl=1  (pdfreadersetup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzi0NzazOZMFASDPDdlChV8zAjLwNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjcdAzcdAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&dr=cHaWck1w 32lcEsJIKF0UXDpDX2lcQD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOTCzNZA4AZCRvm5EIKiWXzA0OTgyNTgRNZa=&pd=2323Um2l2k11cdLu7dWt&campaignId=9jn0AjLRNTAdAZMq  (powerpoint_viewersetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXza0OTCyOZMFASDPDdlChV8ROZ70ATa4ATiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0Ajc1NTAwAZMq  (minecraft_setup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzMzATMzOZMFASDPDdlChV8RNzLyAja4ATiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjL4Aj74AZMq  (minecraft_setup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXz7zAzAzOZMFASDPDdlChV84OZgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajc1NTnyAZMq  (chromesetup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1CDSDj7z1nxSDj rcWDrLm7z0RvmiWAkDjIKiWXzi1AZ7yATn0ASDPDdlChV8dNjAdNznzAT7y&pd=2323Um2yDK50crNPcHszUmNJ i==&campaignId=9jn0AjL0NjgdAZMq  (javasetup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcyATLFNM==&osos=VdluDrW3cw==&dr=cHaWck1q7XDPvExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWLngm7dREhKVuvmAWASDChTMm7dlChV8RNzi0NjCwOTnm7K2pDZ1fNT7zATCyNzMyAw==&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0Ajc1AZC4AZMq  (javasetup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcyAZgzAw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1CDSDj7z1nxSDj rcWDrLm7z0RvmiWAkDjIKiWXzC1NTczOZMFASDPDdlChV8yNjizAzMFATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajc0AZAdAZMq  (chromesetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pipi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNzC4Nzg4AZCRvm5EIKiWXzaRAT70NjayNZa=&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0Aj71NZLwAZMq  (minecraftsetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pipi=Ajg4NzcRAzg0Aw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzcFAZMzOZMFASDPDdlChV84ATARAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjcyAzC4AZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1w 32lcEsJIKF0UXDpDX2lcQD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLvSvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOZCzNZA4AZCRvm5EIKiWXzc3OZM1NTgRNZa=&pd=2323Um2l2k11cdLu7dWt&campaignId=9jn0AjcdNzL0AZMq  (powerpointviewersetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pipi=Ajg4NzcyAjn3NM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1JcrVu dDmIKNlvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXz73NTcyOTMFASDPDdlChV80Nji4NzA0AZaz&pd=2323Um2JDdWEcmVP2kFj d0=&campaignId=9jn0Aj7FAjnyAZMq  (openofficesetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pipi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8FOZMwNZARNZnm7K2pDZ1fNzCyNz71NZnwAw==&pd=2323Uml0UXvP2rLu7dWt&campaignId=9jn0Aj7yAZg0AZMq  (openofficesetup.exe)

1 / 68      (Adware)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzM1AZMzOZMFASDPDdlChV81NTnFATa4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajc0NzA4AZMq  (chromesetup.exe)

1 / 68      (PUP)
http://any-fileopener.com/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1JcrVu dDmIKNlvmCWcyDEcmlChSDBDz1p2kDj7z1vVkDj rcWIXim7z0RvmiWAkDjIKiWXzg3AZLyATn0ASDPDdlChV83NzgwNjMzAT7y&pd=2323Uml0UXvP2rLu7dWt&campaignId=9jn0Ajc0NzCyAZMq  (open_office_setup.exe)

URL:
http://any-fileopener.com/

Title:
“Thank you page”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.