home

www.quicktowerslaboratory.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
quicktowerslaboratory.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Bundler (M), PUP.InstallCore.FC.Installer (M)
100.00%

avast!
Win32:Malware-gen
4.17%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
4.17%

ESET NOD32
Win32/InstallCore.ACH.gen potentially unwanted application
4.17%

The domain www.quicktowerslaboratory.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 10, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 10, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 10, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 10, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 10, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 10, 2016

File downloads found at URLs served by www.quicktowerslaboratory.com.

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=NBcuWbCID4Of/6BC5AvLwEVlRLR5eMCivGjaUfriOrk=&c=On5KD1IYeRN/fmdbCUF1iXqT/uRBGpK7ezSd8xSVGB pkqBAWAra1Gm6IJF9ILAp3J7iYXsvqT0HM5O088Nol8gZCgEFRVHVe4/knzHBkoL3eHxItbrlLJ3hzXC/be45jKHnrfwsQoMIF 5QFMtwg4UjJnf103hnBGp0gjYrMA0Vr52lMyW5Jbvy0N03jkPA&fallback_url=https://launcher.mojang.com/.../MinecraftInstaller.msi&downloadAs=Minecraft-41028-dp.exe  (73cb9f97ab4f9c6bb51f425f116418ab)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=GRsCwNwN38hoEH8mFT h8pmPi6JXvNKEbQdUOlV0l7A=&c=lGkYo4QkeE DPAYc7WHHVdDl8kOLUTcSU2fT2VtneWddQDDP/GZ1GLGfWdKI7k3qNxQePmfCVTS3e4UbOgy8iJSO/6iBCJfFgZj5WYGNRLWJfe9rznK5KNk7sVz7Aheaj6xmz1yXChf zgx oAtJjrorz6F3wXSm0zlrmnvY Tq8auX6Mak3fVuw1vA pCSW&fallback_url=http://students.sabanciuniv.edu/danialesm/.../APSetup2.exe&downloadAs=Academic-Presenter-63761-dp.exe  (46c4b4f033229af2feaeec904eae7aff)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=deDiTkvBPYQTdOpDCa8jrbWyWZOE uuZSrmXAnbyNqo=&c=3FcfG6yPkMhh64DFMhbPIy5K0ohJsVBm2iFSSuuKcQvrZ Ye5wHOqDotj2Bpk bb7uFxMZxV5Jt smigc3CYldor38wYrpHLS0i7qCo1rhRQZ4e0Ak q7qzSg0fTwkna8ktNkVnz2Bn2vQlnapsn1HTJzPy14zLpgxxaVTZC6Giclz u/59F2b36xNk/y10&fallback_url=http://download.microsoft.com/download/c/e/1/.../wordview_pl-pl.exe&downloadAs=Word-Viewer-12113-dp.exe  (570be32ceaf198802b861db13d85c5fa)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=nDgnraO2VatoKodqfa 59TkN2ygRMcsk3jsXcCBKwMo=&c=Axx4tEZli2eqfnY7p1tqhnIbvfe6h S656QMSsSvTPCz9NyV0Iimo0wSr7yashEgQPCn6EpQdwVfl/rBpxPpiVt LTnyjrCADD4i2fwxKL47pD/HPq7ED9gxNS785LO9VVklzO shdhwqHhMmqnlZLsq3CHDb0MuPlz1ZynlloCFMNUpC vT8WPZIK26s/Iw&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (icreinstall_clickoncesetup-1456345155.exe)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=FIzVY4tbrNSl5VAVfQukP01fnRovPG Set5BoDeWvvc=&c=AMYMZJy sThzrMsy49fOysxtqkuy5BU1lIfbXTXjXtSFhnA9NwPh/6AREa2siRcjICxRDZCUGfyRCqmuGr3RvuSaFAUnzbSkUC7WME/wsbrIeRxsS2HlJGrI03imUQzlNbETokhnYAT6LmHYxKiIgOb9GHQwFBDWhBihvMahf7gqNKOADzu7iRdp0LxE3vPh&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (916c70bdf8d63b1c84da82f335364684)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=eZvIxy bbNDKm1OJqzm9oCivFtXGb2V/h jXYrAu9Bc=&c=bmBhci6wCCd WzkglNYk//xFk3/nrH4q6wDAEQcA30UwA0 Ip3lKmKPOZUVGXhB93Q3JtJ9 eex/o3uS4J/mj2U9FLD2UZ5tIaY0kPnmFCbbPXGTy3/rTIOpzMi5Rq VjxQu9702ng6K5Zpw23kq6HMjxveGSXAXcrSKfdGNQTJWk3vlHAH2H9Jd8NY5GtlS&fallback_url=http://www.abiword.org/downloads/abiword/2.9.4/.../abiword-setup-2.9.4.exe&downloadAs=AbiWord-12889-dp.exe  (clickoncesetup-1456427075.exe)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=d BQiywB4K8eGbUvRQoIKLDIJayVxYyVCEdG0vlT1o4=&c=yjvTTCsBUbzLQq6BJhXAtE26tierxS6LulYl89ziVIhmqqHy8YJ5JHsR2VtcBSMIF5JTpfQhWQ3gIcaciNE7NrJBMsooCpfTGw25YgCG HfFXDdAMJEuGkZMVTTfFh iKwtwC0JmC9/kfqzsfq/aNY7LxkcxVvy hEr9FAJ9PxcmHUc7N1QL03ESQqIFDI7e&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (aecdc5084a1932e640e177d41269316a)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=UFZQqUntM1vCPrgb1FFVVvlg LIlrBmJ/TGqzCwr6tM=&c=jZvtFEd4j2/HneMjtkfyF6NXtLgr1BAXKZGnwf0WMcF6GCDSNnIj0jwp3ocPdAL9oNa6vNMX4FmlTCHLayC3OHDwQCCiguV707WZQX2B9Ig0cksnAvcA0CEGj8qhanSQqHRRC03L5xeeE/ZT4HO wdRMt1oXk/jjIEikA3wc4 Wb7I/iLxtaREb1duqjMR3H&fallback_url=http://netcologne.dl.sourceforge.net/project/avidemux/avidemux/.../avidemux_2.6.11_win64.exe&downloadAs=Avidemux-19122-dp.exe  (fcf22d28f0fe652e700c6364819b439b)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=2QACpkkgbqJMtH wUzah4p2UrlhQvqCNmFNU4s7pJfI=&c=yexLv 1uF2NwO1i Fzo/900dcSZgIzJs50jqX8kA5annHdwD2LR3QnrjX91AJFbl80LGvXgWgfbtifJ0Y3yyiOEiThavLiwokI0uFVvnbrb3atPB69vK1NvqS3hWwSvxIuYqJIzTZqTW/AO22bHKpBdciJosimpWzCeUlCOi9I53HbY3fCN374FsIkw7I6pB&fallback_url=http://.../any-video-recorder.exe&downloadAs=Any-Video-Recorder-36948-dp.exe  (b3b3e247cea97e83d083212642591a72)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=ppFKeAUGe5spVO1kJrZrCfXrfr3XdL2YiQh6g1HrhYw=&c=l5Z2p/JimXTmW8dFtpy60gl8yj7TcR5fwVA g8KeJtMCYaH5g4ZaY9HtPatmsS81f6uxwV4zY8m9RFd48Pg0LUDa4C7/o4Op60ZYqsCKTUU3qYPE5nlY0MAIzCkj6GjzZDnHv9lg2C/1F SkriYTiDcI/RWW7WRC7D0yJBFIE9BJsJvj5CbBbAZU/t6csvPJ&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice-12754-dp.exe  (clickoncesetup-1456354279.exe)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=u9 VTD3jgzarjWeOJC1NjtKyRwuT8c0j6iWVmhX9kjk=&c=Nd4qaaGD/FPbm26XywdoY42cgqz pbj UV2VazAoYlJFzQSJ/oHneqIpVyIFrEpFeh1X4/clkDrSPD3MEkDTGj77NJedBUGU0eF6beJPwg4XR1ja8XD612bpLdF1CPU &fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (a85505beb06d3313dc495ff7b776f5e7)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=N/AUJDJgOGLmceB10CjGqmHZe6RuJW ucjf3Z2f3YIc=&c=ntP4nWxnwqf1 JEOgxtrHa7C7Uswl/Jvgfj0yk6bRRMShPUwMs0RY/cK9tcOnTCxRb8kmgcjk6uY8QpvpBOQ8twXEoC8pDxg H1rqFmN3GLnkHO7lNjoMtnmuzahAFoI&fallback_url=http://storage.dobreprogramy.pl/.../Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=Apache-OpenOffice-12754-dp.exe  (icreinstall_clickoncesetup-1456343953.exe)

4 / 68      (PUP)
http://www.quicktowerslaboratory.com/c?x=6CMX0r0g20mow9Vvj4A44O8TXojIo HcB2MMz305KN8=&c=bb/p2/ L0k7aEmtxWcUxVgqqzSFm5qOE8 woQhgCPGc60H7pkqsTPU2EFuZSGtsVvvh0gJaYSPRk/ZTR36CYBQhNdd0pV/CS7xf15fDeUuZOchBkPervc8Abvp1QFcdr&fallback_url=http://www.rarlab.com/.../wrar531pl.exe&downloadAs=WinRAR-12398-dp.exe  (dca859d7d14570c009751b83f09e21b9)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=L7pPeVBaYdWHN2EcfLFqa 5nO6pux/MOHye1JXopgPQ=&c=Mgn4zfGGrvoPMRBseSbujPr3htcPzLj34efVYngFM5NG9wIGQkMABxyVU3od9n7Sy0aMTrdVLjF6ZPrM9vowLnrCetk7 ehXYvlyYvK8yziGCdrDaFoyPwj0z0HlfScL&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (571677c5d0799e9d5f20ae99943e2074)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=23q52NRnVQcdA0Rf56RizPd0s1DwvZMEhyzZn2mGPmU=&c=WDT30T5QYchWqIbt2vtmEqSlZlIe7icIGJaZjJW15UIQMCOUSZMelhGmBeGn2Y9qt2PcSphI3k HhgRr6zQd2yrDZ8N/62wxxsypdza1WBAiR p66hHOTM7hQoZkyvjF&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoEditor.exe&downloadAs=Free-Video-Editor-33621-dp.exe  (52d1bcd2407f3ef2b0260d0d60372a28)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=Unvoc5mOLbiVvQ4yRMyyK/dH3uThBTLj1df5EL4G2wg=&c=OIyQEpVzCRiZCkOhXFLDWlOR3a3FHDqefjjoKDgFU4978wF8JgzDIcs50Xx znVGXcP1DrUiWvFhyLrMis1Id2J8BJoV/TzC6glczzkm/vRsnwURp 63Ov/eh6RZmsmgV9wGMi1K/a8Uun/WvUV0l0s6jCQOTkf6spFal5kOvqjhAKfYLbv5Hd p4yJB/UPK&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (4a0dfae167dd863f1b05e75e82d13894)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=xK9s9iviN AFDSwNBJxZ7NRefu5ezVsoC7QwN8S6ewA=&c=LubroojKnhjB2eqpuJxdMqsb6HHOhjFtajZPtU7FHhanR nfML0YCsj2I5PxJO3kjOzP42UYPsS04KeVi5oDSpU83VeX/sWGGpxsUQPAARxS895l/p4f6S1i18rBLmF50y3t5Xye87GwO5BOhq5HnwYLnvSn0zilrLAy3ah50JEzTnfjixMuK8cXL8KYrsMM&fallback_url=http://download.freemake.net/.../FreemakeVideoConverterFull.exe&downloadAs=Freemake-Video-Converter-20113-dp.exe  (fdce4321901f9162baf568fd2a71c5ab)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=C8IXGlXDM5CTtLGezikWbddrQ4/qIWx6YuOhFXzqBA0=&c=sgDgo4baQQ5o27DWk12soPl8cutOlfjlW3cDjqZ itCFMOx8 SegS0ei4n7wYXLVcuffwApTs6eCAEsj8dfesfz Bpm9VLP/FiKE/n5D pobxZkTtpnH45f7DsVpTOR2u1HZMVBIZnayhp6OErSU2Ev3Wx7kcbqSMK2LtmgT3voAb2ZKGnJcEQtcQlqgZVQU&fallback_url=http://storage.dobreprogramy.pl/.../dfx12Setup.exe&downloadAs=DFX-Audio-Enhancer-33159-dp.exe  (fb033369b2fd3dbef36a45b6ea9bae32)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=JYNt1Suo2tF/rglH1f6sxE/VFZsixK8ihLODOZEtMOk=&c=mTKD0c0mKxIV9lIIp FGa74uhVzq1NT4ocw1wnBjm2jxqAgboOeALIqVlfS5jSbHFgO7QeStzZlBuFexY0pUPvTqRYjRT 5r8FFPLqsGg Et5JUv4ta5cPnZls1y7WKN&fallback_url=http://download2.manycam.com/.../ManyCamWebInstaller.exe&downloadAs=ManyCam-12740-dp.exe  (df4a34342d51c1c04981e6931f297738)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=yGmqqQyCO9D7aGGU7ZpoNplFmwLTZN6YasXGqxuXo7Q=&c=ozY6PE09esblAcyM/cum9oX4ixy5WpJwKD17tov9d7ecvz3tyZHR7hRfoU7ev565UmLHYfSLboPds3bw15cDg0H2fW7frbxWYikrY x86paf9zVrS4/NdmQZXH/iRkTp3w5zItu5H0cvhRsl Nz7zcM6Dmj8siu0bVxozAAuutUuPzETJfiQZ9JjAdZkAUio&fallback_url=http://dwnld.videostudiopro.com/VideoStudioX9/.../VideoStudioX9_Installer.exe&downloadAs=Corel-VideoStudio-Pro-16277-dp.exe  (5d2217649a146772c5e2ab16077c068a)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=EO7DL2KOmWqq4bSFYcMthKD3OfxZ38SzQMxVaHVRz8Q=&c=mgoz8iSW5ZMH8lOnZf3s5OI1fTjSJC34Q2nc RbJTLzxlXSoWJVo57aSJUg20tvovh0BGKnfBwyQkBx2txRAT9gzk0aGTy4p0Nhfa9nvz0gN9Ea2KdXq7DgTi1IQZAjA&fallback_url=https://cdn2.ashampoo.net/ashampoo/.../ashampoo_photo_recovery_e1.0.0_sm.exe&downloadAs=Ashampoo-Photo-Recovery-70033-dp.exe  (ff0c135803e18750165f7f38e8a763f2)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=0wkS NGO3TDyrqlBkAXsmejNEpp60zKp4N1CQUbIBq4=&c=9P1SkZ9/S9pWKnfuNB8sqxfPmSrRgVFwwn5wTBBQFUTvu/O izFY5T 5VzBDjATQ0OYFSCyjGmpOMuZLg7DfKfnrjzQ9i5wS2pXjOyx9p4XAt8lRqrh2 3e27 WfaSktrPG54bM6x70da6CC WsKRGiURSTEWto4UNx1UVpgry55YfhZ eUH0konV40jBaQa&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp-12928-dp.exe  (1e441d51ba8e0db93aba1f7a30bec4ff)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=N8VWB/91vjXcM2W9J/Dlu0axyIm4VbCCoSISkSUKAbU=&c=AbOXmM4mgK3509wbp9qP QOnJSu Th6iyOlsV0JDfhXkC7Mz7ZntaoEUfGJCQmQzP8cWPAZ3nznzDfLvFpPsXAadtKZ rDTSx5j6iePh2NZCMLtd5RMfV8aObVau57Sw&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (4aae8325de2a0863b6e1aa85b4f89e41)

1 / 68      (Adware)
http://www.quicktowerslaboratory.com/c?x=F9vADh7d5uMikrBrZ7emvP FxHJB4OUPP6HRmrBrLiE=&c=dNLgm8rR9pnETqRMQIMYw6T8/QsDkhZQFuXitGCTXupLMxNZFRO9/jU2leeNuxWTuUKy41owQb7TFe2iwfADVtCMXbpHZrLG1QRtbEDx0DzBHmyV2dNcVZXiE8Dr4CLu&fallback_url=http://.../tcmd852ax64.exe&downloadAs=Total-Commander-12316-dp.exe  (a3eb34fa316033b5df32da8ea493c987)

The following 6 files have been seen to comunicate with www.quicktowerslaboratory.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.