home

www.contentfuntower.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentfuntower.com

Scanner detections:
Detections  (82% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore.BeijingQingchuanglianxiangTechnologyCo.Installer (M)
100.00%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application
44.44%

K7 AntiVirus
Unwanted-Program
11.11%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted (variant)
11.11%

The domain www.contentfuntower.com has been seen to resolve to the following 16 IP addresses.

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
July 19, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 19, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 19, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 27, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 27, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 22, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 22, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 22, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 3, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 3, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 3, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 3, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 3, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 3, 2016

File downloads found at URLs served by www.contentfuntower.com.

1 / 68      (PUP)
http://www.contentfuntower.com/c?x=O1Sw27Hz/MzNVbPyhPkeYkKfpfh8akwujrO2arE1qhU=&c= VqXoU9Ijcy0O/ZCuz6PaigBuig24Na3WF3 A8 cCsziDn9sLYoNyanDD4nSiZQCNr29vTD2udSCAfxPHNrm5TbgsdU2oSLEy2NsTWl4OEQaHAbI 8yxyqyQi5XuRHY5&downloadAs=AllFreeSoundRecorder.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeSoundRecorder_IS.exe  (icreinstall_allfreesoundrecorder.exe)

0 / 68
http://www.contentfuntower.com/c?x=ma/DRqkS/NQeRFlOQzi1h92HTUAbGycUEm3Mgl9DZ5U=&c=1Dpq4MKb3BqDSLNsyIo84Ycz7zsIhPkQnAxCXllIZm1Y9aXEdaJ/uj2VuTStkeGKHa7VmSb 7x5PF8thMP7HRnvDg5aTSSLckwBVEusiBDc26wh7xRHvWytPw8a1Wqgn&downloadAs=AdvancedScantoPDFFree.exe&fallback_url=http://www.downloadonic.com/scantopdfconverter.com/.../AdvancedScantoPDFFree.exe  (f92502a24f7c96bc3de5f77f95de86e4)

0 / 68
http://www.contentfuntower.com/c?x=qWG81PSb5f30tDNu3NmlPG4T2Ajg8M rJO0iXVmrdXA=&c=RfhNKYQ20Hq55h7CYn qoc5zO1/UCZrsJD1X2WTM3MGkOJZ90XSxnj93/kIEwDxERNvS/ZHiaVzfkhgSkltTYalJPWw8DHE4 ORnK7rrIE5qhr1IFpjiHRzaeN20XYXm&downloadAs=AdvancedScantoPDFFree.exe&fallback_url=http://www.downloadonic.com/scantopdfconverter.com/.../AdvancedScantoPDFFree.exe  (54ff4950054b1742c9f327ffb79652c6)

1 / 68      (PUP)
http://www.contentfuntower.com/c?x=Qpb8e36vgjdgvOxy4jFh9qXnlsQYs8uJIRlfRv8ATAQ=&c=CYOqcB1pHK5CwoPnRYpTf5zkqT6b5Bo1mgxxzxj20EzjRQ1uVtin4gDTl45pBK5EqE VlJfXv2xlT2QCTIRWHOvN759d0JeYanG04jHIjQhw1Wb8Fx5oHE86R2Tq6/sH&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (147bc92a601c0479b519aa9251d7a2a3)

2 / 68      (PUP)
http://www.contentfuntower.com/c?x=0PLGLf08MplQLbcXoIeXQo zz6hMaxRvBCz8IDscxfY=&c=5xiAV2OfiOPqei6iLwVPqru9J8gitFY1eJToJeDV1Ik9zdCjMg6p/pG3SanordpVERa9S40rNXdLf2ikTTdlCtccFgS X7M9nM9ehUvEd7dgM9z4nYA/yWnXK1Flteyk&downloadAs=MP3CutterJoinerFree.exe&fallback_url=http://www.downloadonic.com/freemp3cutterjoiner.com/.../MP3CutterJoinerFree_IS.exe  (d91cf3bece15a317391d3360a0865ffb)

1 / 68      (PUP)
http://www.contentfuntower.com/c?x=CpTkTFz0sChUyf5eFFLpq0QHmBJ43601K41d3NRV8do=&c=/s xMGFoJGINl1/h a6w0xXEzSX6kpUR/OGD4wKdrFVI70xw10qZrKtVqhe1gZqMjqwTQO5AUl2bS1KzxJgoiKa/rpXRMYnYuqsMuumfMoxdHUJB8MWxx05zxuEOvmLe&downloadAs=FreeVideoToAudioConverter.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeVideoToAudioConverter_IS.exe  (9919b9f412c450efe5f6eac872acbb5f)

1 / 68      (PUP)
http://www.contentfuntower.com/c?x=n9Cd38365rCezxFxgwO5Zuwmn5gA3lgEdECaZjLDrEI=&c=CRoV7Zc5//DFVdC90BEZJgPr7/YqqBMiQAxP53WvyjEj7Ekxzo/TDSjeMGuzxRSf/fathzAUcYlxS3X kt/UnVqlXxUz11qqABusP4pMJ51emhEzrRIhMLZ67g0I69eS&downloadAs=PowerSoundEditorFree.exe&fallback_url=http://www.downloadonic.com/free-sound-editor.com/.../PowerSoundEditorFree_IS.exe  (6402a60f563c2dfb2fe94487ad3e9d94)

2 / 68      (PUP)
http://www.contentfuntower.com/c?x=CKsGgXRW3xAovJjHvVwVUCryBKMdSly99pfykKgTSc8=&c=WMk/Zay2XpUtGIxgfRtQPJ1591cS8GmtySd9TPMDD9L9HWaLIiJecc h/Qy/pFU DyAYaHmU12QjOdbd0KXdR0HZQtM aqCkONvhkQa3DqQQnGAKKzqczT29PtqItLqX&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (4f728a69959091be687a33976188800f)

1 / 68      (PUP)
http://www.contentfuntower.com/c?x=/E5L5VECMzTs0O0069bEJacDpdK5wNC48srE/4vPTJY=&c=0s 1/Q4AKBZnU6hVxJeBsO6Ah9LC6wIJ6iYczQGm7KlL7gsrNObrBrVEhMkE1n CpfGqvopDrPK6ZeD2o4GwvWxrs5Cq/5gWEycv/KzSaVF3fn2OjotB0ewYlTXDDyh&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (147bc92a601c0479b519aa9251d7a2a3)

2 / 68      (PUP)
http://www.contentfuntower.com/c?x=NEwRskroWBDUel9dk1fWONHVvVJpq/8lR9Pvqks5u/E=&c=UPx3xsfIuKdhsHmnZlRRUo35OIXx7pi awX5GTmg5HTvsVyN2RvdByxbp8D8yrJIOneEqzV Vj2yiHfgRMYu3gqgR EJBDP1z/5n u7Z5lLcZAfv6qF1kIiiZaXVz1EG&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (d56c88635ea3a11546fe34614c4e45c0)

3 / 68      (PUP)
http://www.contentfuntower.com/c?x=BUeUYh1iiuDDxZV7Gaqqu/xY1Erg2SF7Zk8Luz4x4GI=&c=bFm9dgXpeWwH6A8wNzRc5QWzyx1js2fsMleREi/IAnXg/zaHvo1XHqy0Wf4h33EfzPzqMdN8c gnBWbxMLTNG29E7gvB3efhymOjDVCcIxPENlJ1XHonAAAtRNNSbg4n&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (093b5274b8b4e1455ba4bb69d0063afb)

3 / 68      (PUP)
http://www.contentfuntower.com/c?x=KzThWvXanVZjJOJzILiMf2CiNRpXjG1WRlrm7LliDhU=&c=EbK6of6WzQHeQVi30goraCQG5VxuBNd0NQqIr7ppofRWLTZ5EZ3jVtPcfyu NLrTE1RmrOQgSKsnuoTcfQW7buYOpq1Oen19XQlrEO/3 qJt9WUcScA92iFe9KDKrzwY&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe  (093b5274b8b4e1455ba4bb69d0063afb)

2 / 68      (PUP)
http://www.contentfuntower.com/c?x=cae/mCsQUOpgL5ZA2e3RDKnA03NAR4ovAhg0xY3F/2I=&c=ntUfwZNN nuQtddgtKEQOLp KAWSljKrkGIywdLeUvZWmVU4u77ZIlhm0ATo8rD6xjt7pBZUpGK2W/Li3ggHbWsbk3cvcXPEK/KB0m81HQ6P83psWQd3KcdHG88JrdQ7&downloadAs=FreePhotoSlideshowMaker.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreePhotoSlideshowMaker_IS.exe  (8a98209a7bf358bb465de18f4772c5ea)

The following 36 files have been seen to comunicate with www.contentfuntower.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.