» www.presentfilestag.com
Overview
Analysis
IPs Addresses (8)
Downloads (35)
Network (6)

www.presentfilestag.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

presentfilestag.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Bitberry.BitberrySoftware.Installer (M), PUP.InstallCore.11 (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.EST (M), PUP.InstallCore.FC.Installer (M)

100.00%

ESET NOD32

Win32/InstallCore.ACY.gen potentially unwanted application

12.50%

avast!

Win32:Trojan-gen

6.25%

The domain www.presentfilestag.com has been seen to resolve to the following 8 IP addresses.

52.25.41.73

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

52.24.26.116

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

54.69.198.37

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 21, 2016

54.69.11.66

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 21, 2016

52.88.159.85

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 21, 2016

52.35.10.15

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 21, 2016

52.26.95.11

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 21, 2016

54.148.57.212

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 21, 2016

File downloads found at URLs served by www.presentfilestag.com.

1 / 68 (PUP)

http://www.presentfilestag.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 (finaltorrentsetup.exe)

1 / 68 (PUP)

http://www.presentfilestag.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 (7e382dec_stp.exe)

3 / 68 (PUP)

http://www.presentfilestag.com/WVl6OTRQVm94YmtJbE1rSnpObTF4ZFZKTVltbFdiWGcwUm1wQlRVNXNZV3RWVTJ3d1FuRm1PSGwyV1c4M1NXWkZSU1V6UkNaalBYVlFZMFl5WWtJd1lqUjJVVlJCYmlVeVFteFdOVkJvUTFaaFl6bElaa05ZWkRWUGQwVjBUWEF6YkVoWlltTldhelJTUVdWWWVHcEhjblY1U0ZGaGFXVjRjVTVUU0U1SFYxQllNSE5WV0dKbFREQTFhWEJHWWs1WlUxSXdiV0o1WmxoM1IycFZSbXRDYUhJNVEwYzBVREZFY1VocVVFaFpURVY1TWtwSVV6WklWSEUwZEdaRlN6WjRORFZUUnlVeVFrVkRVRmhpTldaNVNtY2xNMFFsTTBRbVpUMHdKbVJ2ZDI1c2IyRmtRWE05UmxaRU1qQXhOVk5sZEhWd0xtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1bWFXNWhiSFpwWkdWdlpHOTNibXh2WVdSbGNpNWpiMjBsTWtaa2IzZHViRzloWkhNbE1rWnVaWGRsYzNRdVpYaGw= (fvd2015setup.exe)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=K7pxpRAKLAbc8sn8uTDvyOm0tU3OmlBg1g2aFIV1Mew=&c=hjuNZ3OK0evSbKi4F5wNWvduBD1KwF7oDTdcrMHNsnKgJ6K6hL1skFU7EZqdl9ZGYsxtOXJdImFn9kFAf/MORBQz hmzzNxGUaGkp9MWt4fv6ss375Q7lwD3Y123i3XmwEcdkAc/PuG9d7Du29eUyc0ZcewImPNtsMnXh4lQHNjk3BwKmWqM4pTYy8hIFBwv&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (37cf196c25241d9feaa1249872a00598)

1 / 68 (PUP)

http://www.presentfilestag.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 (finaltorrentsetup.exe)

1 / 68 (PUP)

http://www.presentfilestag.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 (freefileviewersetup.exe)

1 / 68 (PUP)

http://www.presentfilestag.com/WVl6OTRQVUppYXlVeVJtbFFZekZCZDJSUlZtVnhWbEp0VkhOeU0yWlJUakpMYURaQmVrVnNUME5xVVhGeFR6Vm9ieVV6UkNaalBUWlFWRlZLVWxCaU5sbFVhMjVEUmlVeVFuQlpiMk16VW5KeWNXNVVjemhSZUROM1ZEQlFPR05yY1RnNGVHaEVaWFZwYjNvd1pUaFVaM05XWVZkblRUUTVVbXBEVVU1bFEyWktWSE01T0U1cmExUjBNbFZRVFhkSWF6bHBjemREZEZCUVNXOHlZWFYySlRKQ01VcGtjbXhqWXlVeVJsVlJkRlZzY1hWeFVrTnpWME4wZVhoRkptUnZkMjVzYjJGa1FYTTlRbWwwV21sd2NHVnlNakF4TlZObGRIVndMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5kM2R5NWlhWFI2YVhCd1pYSXVZMjl0SlRKR1pHOTNibXh2WVdSekpUSkdibVYzWlhOMExtVjRaUT09 (bitzipper2015setup.exe)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=9xrQ0wNJeenl32PAM4FgcXsOm1jDnCBhJ91ub99fccQ=&c=buNjWQzomZMcYCjCJEsVu9dg7QF5eQ2BZHIoBofyyLNyLlsPwK7GKhb7O2LfS0Hwjx8G7h1uk4c3fNwirf3ZzRlXQPLvDc6ooiZZkgsR1ZJtjBjByWZ1ejYErRz9gbV6&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (finalmediaplayer2014u1setup_2.exe)

1 / 68 (PUP)

http://www.presentfilestag.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 (freefileviewersetup.exe)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=l8NQ6tdD dThsqXY0uYKMTo63NHHV94eVkpqnF 4cK4=&c=PHI2PZhjDdK6lKuVsqloq4bmCtRTM1nICV6ToHd2jSQhmhnjfHA0ui5EcTx6M73rgIwle2 ChatvzkH6ll16Tn5WJqN9yguwwhMrFNl2WWQKqAITnEXTxX75jcZNDj5TTnxOJe7imI5bEdSaLtC2YsPPkkMcRBf2d1tQRzkM0woH6YPKVvGGvZNRTI2ToILl&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (6d6cd0b1_stp.exe)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=j1ScBacJp9QiprI ipDuS3WTCjYSH5rkRz9hEOMaajU=&c=2pV8e/gSJ9RA3ddVodbryTrHWc76xpGKaFbOxMrgK8pHQCIoLhsILRT39vLWtF/UjvlP37OyDtX4K/YbEqG2rhwYI8n2yk7umAB7615Y/BRMZQd QzIoigIJlvxY2qe1HALz IOBMWz7Kjh45GemwBwIkwLZ7oiRK41ik/nkZGw=&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (6956ff764e28c3d520f8f24527b8a0f3)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=twVXia3fMeQaACfWy5v84UBdAlIzxX0MEqMXHCLHweQ=&c=dWDPz7yKFpAGzq6s15gvJ9PtM0AVeVfmMNqMRtmm0ir1hA5V/lJXI9eCdVPtJAB8PNvUwNmNENvoE59POzEZLt7w/q/7nYEsEURJdjs49BIeQWDvy6dLrGlo2SXi5lxyR7FR4k558Bq06aYKJYxs5MysIuorwlssip8pOBWi3bI=&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (6956ff764e28c3d520f8f24527b8a0f3)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=vHJwkbMEzWIKNOXbHHkBdP/UYcKUy oUmZsVJGNJ WA=&c=6ehs9mE3MgqiUfYeI4kubkBYsw3xiBmQB8O4BqyOsEod/VLDUg4tbiXBwhm06 sZmsc69ScprOXQGnXOhXr51r3YFVmjdP7nH3f9DraUu4PwIvokzEj2RCt/jEPI3IjqTYBu5ZKuZVq2Ev/qyIHn4J3mXgM4VoO5r4tnqVI0YojzhQf7x1QVSKGvpTlzsCY4&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (6dc79c7a_stp.exe)

2 / 68 (PUP)

http://www.presentfilestag.com/c?x=B3HGXSDdeS72IICqJ6S5cPES9TMiP76cPUUccau7zWg=&c=N EicvYlzgdsOO3diPIvMJwzNd0YXw9lBPOulwFh69YuZh9Hjy iWIxQgaym/g5xQto4f qGK599OPVr/7tZM6k5DO23NkTnvKaDmCOhOYd 6upKX/CLv41HhlbLMZhvQ8zLWo41RzWAWEPaPyCd1WLXBQCU6EA 0zXbPVDK3 52qGNHcyAcAnq0kuCYHtwm&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (e3c508fece3ad55136ba9b8303eb1cf3)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=TEetzzVP4g6knCvFV9nL Ws6/Sno7LYvZWiNplPalA0=&c=1oM1VhOYtja0pM6RwWXB3kNcqulpykFtcl6SHEJ1NOF NXrAjrC3s22HEHbpNK5Wj2ykkgxPCu8UX1ToZvlv6xTtxj99X78B7PPSyuP3OmttJBTFuAZHl0eD752rSXY4&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (f1916be3523042763838636b09d27704)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=HBLiWOMb0XOY01TNhsGPMaOxV8N6m4tiiMnaGSY44R8=&c=Y8aHm3 rgAL6T4U9DVTWCv5eebS5gMeQyFsX0Q61C301kYoEJ62y2F1V/v3EEpMZfplPXtx2BLTyRLRIBbyhA/hG qNUeIk83ptMyy/aZsHyVuahPYotB0ALXueHXUGAon/vbMMGKiy/Fg/9ip ymWQXOH2KwA49pPkmLE1qt4Fg0LjU1jveX0r7F IqXZU0&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c0eb9a2398d6f33a69c394517268bd74)

1 / 68 (PUP)

http://www.presentfilestag.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 (freefileviewersetup.exe)

1 / 68 (Adware)

http://www.presentfilestag.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 (finalmediaplayer2014u1setup.exe)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=Yu4PeqrVXUYniACeXMKzRT 6XlaHKk6DRVicz9sIL9c=&c=2HHdZrICxofaAcPMLFAPfHaP A/ Y726 OdJWrKKmAR26LJxUb4PKU/FXMU064yJL0TH2GO8uLx3MvTrcOCHGsibowwOfKs zFzaLEieqBoszp1FbHNlg/OU6XjIgFYDF2FTcz cwhHa1elf6arG7f/TI0vAWQ/XY1R1JY0XeNR8YCzC5QXYeWsbAW0zaf1/&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c0eb9a2398d6f33a69c394517268bd74)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=rcJoTJycbFopEYbgL mHZgbHkLe/FI1b6R25FqNBEgE=&c=FQAmm7BxTAg4vUkq4eYoEk9Jb/rK/danOeCKLi nCbJbjVdv3dLGI KD8vVqIkjk5OoZQ6Ygqlvjqq3lAtq6t6SXUtPf68tvV 4Hi2iTGpuFJGnJBsoXcC2YnpgIYHMnvvlz830DmH60OiHlp7juYm5U9msKRY Py9OxOaed5llkT8ymxGYo0TklifJtZ9aU&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (37cf196c25241d9feaa1249872a00598)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=IDHGOLt/gPU/JJT7BrevCYqi4Lz3/K1tadDQm3ADSy4=&c=HMlkhoIAeOyIQpgV 5HbdY0x2erhFuW1buwrLZ9pZ6TJd5qJPO6942rbVK Y3uDobi9DdPgR2xquF66ni4 2A92a d8fSGxfMllimXNCmGSY/XVaiWKtSPBUSDRvvWjk&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (a7ef6d66825bfa994a42e15d1e57fc45)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=M0q7HF9/AEfSLD8a6S1mNSbmOgWv4mAXySp4frkz718=&c=dGCc8gHmXl7tH 7WSBXqXB/MNK8uyg8jvxD3NGwhP313KAz25MpK2/VDdjTI35j5SRCCf6zZGgBUUO0KUVsL9M6vMDdxghIDatcThjWVWUz8FZbaXMAHI F2hEJlHPBt9RqQKYrX1mVPlw QMWJg/5Eh4y9zgrix WX Nt68NskmGzvQ0TmEy7tAKAC mHx&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c0eb9a2398d6f33a69c394517268bd74)

1 / 68 (PUP)

http://www.presentfilestag.com/WVl6OTRQVVIxZFZsV2JtZENTWGgxVUc0M01HeFRVbU4zWVZWT1FWcHVOMHBXTVRnbE1rWktkVTBsTWtKa1oxSnJZMnhCSlRORUptTTlaSFZ2Y1VNMk9VWTJOa0p5VWtrNVVXNXRZVUZVVm10MlYxSnJVbGxVWkZVbE1rSTFKVEpDYUdkTFozUlBNM2wyZGpkQlEyUnRjbHBpY1dWT2JGWlViR2gzVW5GM1ZHYzVVMFV5YlZBbE1rSXdVbUpFYzNSbFdEbFZKVEpHVWtwNFVGZFpiemMwSlRKR1JqSXdTekZRYldkV1JVSlZiRGRQY1hRd1RXRkxWVTVtTnlVeVFtMW5Ta2Q2WVhBbVpHOTNibXh2WVdSQmN6MUdjbVZsUm1sc1pWWnBaWGRsY2xObGRIVndMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5kM2R5NW1jbVZsWm1sc1pYWnBaWGRsY2k1amIyMGxNa1prYjNkdWJHOWhaSE1sTWtadVpYZGxjM1F1WlhobA== (freefileviewersetup.exe)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=WpcZwWh a2hdpcdB0tyFMOT8JhuU5jo9tZj6XrZqjlk=&c=sB6l0MMgswBakV13DEjMIgWWfaPbgzSuKKK/2jDaW82n5ULmru NvqfcWQ 9jSwF iW7C8wja9icln03zp5F7Z2FLPcs2yhCnQ5aFzG3qf/yD62MEn9e171V85 xRUxLW4hoXYBvn185gOUhYzinnxUxXriZHLWqxU49fQNwdlmD4 PHjyd7Xvc/fVT/2ZoC&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (37cf196c25241d9feaa1249872a00598)

1 / 68 (PUP)

http://www.presentfilestag.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 (45dff6bd_stp.exe)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=9xOEXMN92UTaQz9sq /GknJ7IG qmAQN6gEKLVSLkZ4=&c=Gh5kMm9gAUGLcDL8apw70Hs/q50YBUy4iOt8anLc2l4XL8MsRqB9iTJmlZ5IzcSRE6IctMitWj 4OrztfMnch/xJK2Rlq9rh5gff Bx9wAI5lJyln1H3F/lCEoq8FqeG&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (92d73f7a81005a6ad339e1dac7060ddc)

1 / 68 (PUP)

http://www.presentfilestag.com/c?x=KbuRlETah48O6Ui1SwAMvw/At XHu7Q/Cq7SfErATfc=&c=9p0kDW5fqGpv s6ZFEk9iuVxbJ dnNY4rvitU4BSQlKv9OYCs3lW9sd7YD85d7DQtmhVhbiXdpW5w70TkYrc871WF6Yy4xLd AGKcAeE9EefxnEakBtZG6GW8 PPUMVfRav41CH/xJKFiCCu6FAbDX/UfT7INcQI2kNhroG5sTWloFWcEmk0KEVHoVlXwmNt&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c0eb9a2398d6f33a69c394517268bd74)

1 / 68 (Adware)

http://www.presentfilestag.com/c?x=Mav9ynlrQFlEvnkkTUOM8dIqRWUTR/Rp9fsVRhh3rPY=&c=JuA6E4NH6cj9 VqaX1cfMUlxXZ9sN4LV S28mGpoGi1UmRITFmAcYT0iiDYYLF6OmN0oHclmEXmzNRMiJA1b//D8kr7xpXJwZjVCyVDySQiIEOmVGWp1wTtwQT6JxWMP&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe (icreinstall_finaltorrentsetup.exe)

2 / 68 (PUP)

http://www.presentfilestag.com/c?x=NAegX uEMOzDspd5tsm4LD2r LoV/XUDDjulAE0QGrQ=&c=et7XBKQuVAaYVcqQICScE6BnpxKEpY5qdaKK6ut S4hquPx7xfIZv5/UQnNvXXIrkGEWWRGUUzyJRZFDZ9i0wSlxnuoNjVdDLyLx1WHFR7rSXAw w0Qjhop5WlWa4JMSJy/3R25uiUKgtuMCpWz95X/5g6r8zgPXZ7A1IRFbg5VYqY8jKe9MfkpOwCQs7wVu&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (e3c508fece3ad55136ba9b8303eb1cf3)

2 / 68 (PUP)

http://www.presentfilestag.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 (finalmediaplayer2014u1setup.exe)

Latest 30 of 35 download URLs

The following 6 files have been seen to comunicate with www.presentfilestag.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.