home

www.quickfunmeta.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
quickfunmeta.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bitberry.BitberrySoftware.Installer (M), PUP.InstallCore.Installer.Installer (M)
100.00%

The domain www.quickfunmeta.com has been seen to resolve to the following 11 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 20, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 22, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 22, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 22, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 5, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 5, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 5, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 5, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 5, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 5, 2016

File downloads found at URLs served by www.quickfunmeta.com.

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=IxW38eV/bIVLlFh4vALJnkc3Y04Gy4acSzqgi2mp6dQ=&c=VqiNXyjDMVD6GItMN22RW TovTIAaMAk0jdIWnj4HgiHib18r5JLdkmrYR8cMnTNNx1FbNElvBHHPfFUGNA8Db76cKduqUnD0ggoQD2HdAizwWg2XKriUX2as7 YbhQl&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=9lmGAk4DAd4Y1OuUnc8TtmmW3MvNEfrW/LXquYpf4bY=&c=uvpYgVxC /Wg2YEUUkKtghxmykLUy0oXfE6ciM5OStxe8OHGDQe 4xqwxhsmB0 msDAlUV31fYEq3UCg3f rhD0XzN4gqX4F0gufcNdAraWzV/SbD08eqREm2pLQmSTh&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (PUP)
http://www.quickfunmeta.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  (45dff6bd_stp.exe)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=swR/Z8 0vho0LhlclXHH4y/fp5PLbex uhtfldx9BAo=&c=ovWfah0sE7lnePxx3O11u2mEgdRWbCbnASZNc6W4/F9P84SZ gqDpyD1K2rNbA88nr4948s5jdTnbfJvn vsMIv1HLfTSbhcGfZoSaZEwcnvoVYL7ULF0Jx7I5Ik4kgl&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=EowbVImpOQKC/yMPNDKwfr5fuFVhOCYuG aJAc4RTgI=&c=/wvUHq6F2GV7oMwF9aCI/dphVkI37Kwt5/09J4ju7cJTWeR//Upbur livo5oNEUfaH9dZCi0Gb69e4Be9UWmkwvdLlD6/Ofz9B9g5P0l5rxZXRciegXLXMDHBu5 Er7&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=1LvvjMpalsi/QU6SdQG11s/Ushqags3aofTrhb9HaIM=&c=o28WRBw7 ByGCdTEy8eJfIfTsdmIgizeS2k8jVvX38KstUYnuBIpEO9HTb6G17IqL5Hjo0/Pu4Gscx1bsP2uC04u6F4ClKiF2wvI24843jQDfxx082DdTdUDJkDZy59Q&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=fqcC3DAXL81PBr0PGs9nRsocj8E3J XQOp1cuFCKvpk=&c=m2rAFqY2 4tXO lXsVs5kpheuCe5S9fG ndtDbr8PonnjECcFROyx86GJdLHC XxoMleOStzunxrdUNhmKhSkzxhHRjeGEbaioBgflv4fJpeAoe0jIFIsqoDUmXdFsmA&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=hGu/Jgg0g7YX3QbwttuYms06gU6z8Ts0xZV09DyQ2/0=&c=5La7XKIFCDydSgpjFiRGfIJXfsxEpi IKyiQoa6VVjOualevTU0/qrjWvhtqxXtn qVC4464Q5bv6 ZF5MtyJTLuc9AtCX5p4p8YpFnkWQldErJVMyRzw0vB4ihPd7Tb&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=ySyjxw2gen309qcBglnGhkmuhTtorQJy4NKyIM0PNR8=&c=tNmFh5rMUvLt9P8p9S10mjIirPVMZTPlZt7Yfna/qhSS4ZIYQzgDWRQw06mrL6jJJyzWRZsnQmZY IopWHr39gjJlJYxw3FiibHY3gxguGbRssll5trSmHZt2qdQ8VVz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=oo8FPhu2HZq8Wj1AcqlSUTnctavwc1IqlsUck8Co94g=&c=fsIWk1Rwuu5O4P0CnhmurjgpRXFqE17GhoJkpbM54ENMcUSOX9G00uIsYIiyRHXPxBTKLHTkbDBfYCw3/YtqJCe4pbdeeY9Ub4QAwwReWw1IIFvHQVd90NposvLTegIx&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=5R12VPLM7Tunm2wpu4wdzewdTXJmzCZpNgn580uLT5E=&c=1bX52HLcKBixSlfHCIKcQLH31FBP UJA9//cU0Kq6b7AmuWGNqVUl6uToi4oQmdS43XcbuO/kKYIfss2CrCTLRz55D2Z8gBou9NGKR9DpnkbIkn/liaNX6CWQnIurYFs&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (cd0e00612b527b30522b158b27ac9d49)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=Q0CpvkPpU8QkeXczmrAqLa5DxlHOa7cuOFlRulgFLPM=&c=EYmkHMemrqCc1sAkpWnDeZAfYxHgmcQyuIWLUYm25cI2V/hly9Zra RRfaOW7YePSTugYirflksllLFFrmoGQ62QK1cBAMcLAEe9RaG3hNfogrHP2jFG1bwqxBOLV2Tl&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.quickfunmeta.com/c?x=hoCuElZ2ARd4LlKl7uPokREFtL/SGo/pv GfGOCgJMU=&c=FEIzktaqeHf8D4fL3FBy3mcYXuOZO70dcEQpP1Vw9Z2lcRD4LRtiOgvpPMCC65KGJH3Y4Vyl0kZ T IVZpEjVhr2uU0pPGvled22SRpoJk33eSn0khEcP74O/BvW i2P&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (icreinstall_finalmediaplayer2014u1setup.exe)

The following 6 files have been seen to comunicate with www.quickfunmeta.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.