home

www.tourapplicationbundle.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourapplicationbundle.com

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M), PUP.installCore.MICROMAX.Installer (M)
100.00%

The domain www.tourapplicationbundle.com has been seen to resolve to the following 11 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 10, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 10, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 10, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 10, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 10, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 10, 2016

File downloads found at URLs served by www.tourapplicationbundle.com.

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=ZtLkHfppt emMncXq7I056PIsCYN8RKmFQYEeZttrzs=&c=ZhBFISn3FsAjz//gFz9n9makmECp7yE3KFZvbL060JfSk0j/a7/SRhRrukxcdcKRTERVNMnEh5R96W0mIXIm65hrBPvbJTfUkE9INV2K2fjgDgQTo99xrTcERbD9z9kfuLMUWtoDO5BYBG0H6/w1PjxXN8SuFIxPrSl7cI33EiGtrG2OgPiFNy/YX/eqe40O&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (33470fa49941257d395cc71f6edb4297)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=lf01EfR2kBWb SIaubIT0nTVi /zd01DRqqJCOlGbWE=&c=4PZvenVzCtVUu9a1FvhY6fXmrHzN 20b 1XE9fxaIevGph7FXnikNPLBtpnuOAbkDnDoa 3qEpuoLHNWigUPAogfwr8lpkDJwBXIC6lMYtec9/RwvVtvsRwIXAHSdqB6&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=gS8iSj9dx7VdZvQXgi5Zr7XNUPy8Vc9KoKfZBnzGQe8=&c=lvLa8iDu3 MfkCaq8SKeHkqj7C7M8XM/igHYe0VpeQLypBJc6c/JwnOPMAeAFZoCTH8HEEmDTnibGBKnGLeIoiBuNekOubvS2aOkz2wgPdjSnlqIXM52mJ2Yx2us2fOn&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (fd97125faaa6146aa795e9fa37971efb)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=Fh/hHy YO1EvOlACyg/qElHWAsfII8DfMooOG5xvljQ=&c=Yy40rHULOoXpatDoD9WpMSkQCkElYCSLnMjR6NxEWiCMPKjse/k/z4FmnWIwPuBqm4Lv9sDTCJbcX7n5lTyXOfXcQ21vnLtrIxCwStvMjaWQZnWQKKO3Fh luB85TH5Q&fallback_url=http://res.setauls.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (2a623a6607157e473923d2f3b03c94ab)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=iClxJQzih/ibjBWstESev9m0 YjUnH2k9RlBKmcffwU=&c=CZNJ4R4G1ji/3rCWXTG1XKW/wtwx3xCD3TaXOf49H1P5pk RY8w6neIlb3TnmcRWiz5L/Pv0QgX3pu GoiJwUpAxIB pplNWLu0vPWDBu8/Jr2mfes/5onDEwZhOhkOb&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=CXLIdybKc8yneVCG7jHzfTyetJylCc78jIDjyYvhOZo=&c=8WpPBSPsmqpnM599viVwBS3yt u/fZW8Ysi/WFgHAHPd1GZW/RZWP50HUR rvh8lgnNbtKAC6oJIM nIo6WZug8KB2 zfcNDGZdFXBp9C6TOgi773pwoJGbglpwUe9N&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=r3nl0E/d2S0VTh1BH8ejOhEM5A1/hJdk78zVeZbLy1g=&c=E3rUjGybqu8cZTX4Eay55Q2HY0cGmS9itQ aLWA8MxzW2gXL/ZxKSR/8kTx6Tf2NiPNZ/Dx uOnVvilt53UDHDYFAcGRLKHFcWtIzLBZ5qH6dmdxiv XLl7cLaD/jONKrFHTOe0eDMUE/loABVi7h2a6hnbjzvPYEtZNt8HXem52EqIXYRafQ/a76ePhKtwz&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (33470fa49941257d395cc71f6edb4297)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=V4KzfpNkxsSEQNyK425Mu1jqVAJBTpV6LgTziljSS60=&c=zoGNnBuYSMY3Ixb/Bzi2wEuMM5lF3V6Tt wKr9lmnoz8C6cf5k4UayiKl50lXEwOSBiEDpTxhjp3sU4QandqpsMhiPsFXtNSBU7Ij6IyZamcnfGCzYtqXObOyv8pDCGJ&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=2yv3zfeCtGKOwhk u D1W5/TiUL2jMKKublJPq4XKes=&c=Gjbhc/J3dCLQXeHNYh9sRSS89dH3hhz9OFALXM KMXoP5XahQXrGbPwhourn8j5RgSVEoM2Wlm8Kmx9APAuruO0k5nUwAx9TaG 5JeR5QmPRawJK2DpipSyubKLUWF&fallback_url=http://res.prograbay.com/.../PowerPointViewer_fr.exe  (5a30fd50143a4c833630e3985df677e2)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=AVTJ8LAHvyuu85lVjvBoMtQ uPGBnrqesnO1f3VEOy0=&c=38Hy244ufNwjO/M1Zl3rcYC6vrRE7ddVacaALwXbmbZSiqQ3i6xfOZNuyr8jD23Lfb1kKhsXx7ibrIKE1KOX7m86SY9QR5KxlXrLey4NaKT9iUZcYBgN65qVgQ6nxPRx&downloadAs=datafactory.exe&fallback_url=http://www.google.com  (f3606e0a6f64b53e15d64eec47c0c5aa)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=Lahds4om1Fxv8v74J7mSRmh u8OaybAQEqDmVZXhkrc=&c=5V/IJeOF/Xu2Dij0XRgb75gWg4BH84H1KEMn74A JFht1bbEoOIRO4wmQCVNp 2fYqhNw1O7e8lz0kBiQsasQsbSBBT26Vi5HMTQiAyBiW32rM4NjYFqjngtyrW5fvCQ&downloadAs=skype.exe&fallback_url=http://res.prograbay.com/.../SkypeSetupFull.msi  (eac0d7bf39be3ccade6e974252edc76b)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=ptgDWGHt5SbsbluDbaBJPq0S8GKPQ0nXkOA68YZNEos=&c=PcL0M9ZFNRsecEsPveId/nsgfC1EU9xELshBwea2ZDQWkvLVUOTXHNNGpTEAWNoF9OWHGudC10Z4HjfoorCVypqv4xiI/zOZRUz AI8XEcl3lYYYYXu8UYBHaRkQD0iu&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=1GDvvBdQTRPWa6LQQiDcWJIqAL2xJey2vrpOwOvCwzU=&c=ilcYmDpbuO/Cd/5gKaXRPy 8kyiyhDEDGwRFzTYku/Gb4Fyxnvxug1JQEybRxYpWAF8qQMRwlydjIhX BKbTBUNMzhffgcvgHvLjE XAQW7MFr5YbEq3uq5g7ixWc/9P&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (e74701fc87476d09ea29e6c787dfac94)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=xs7YspILICfri9c2Lb4Sa14u2jcjzgrewbr6j7Zj9g8=&c=7vDWz1/GcfaAx3do5ArS4MMt7hePrC9yrLD 4ygRFbrbyd2fIeE/wfFm17mVFVyPITQV0Ir5i1j47sJ Qm2jWCsaNwoOPBS1yxhdCHUEcrS/V3jWox8zD0d14fDn2AYL&fallback_url=http://res.mshist.com/.../CandyCrushSoda.exe  (ac44bf5c484e21beca3aec68fa026a8d)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=Ns5nCXaDf9cBENcP6dClwPOP1xFEbMDmCz/9yr4ZPK0=&c=MHNDdq86lqQhuhug 9SFd8qxcd4MmhP2gARwR4nIfNMyCNKxp9YMtXjoa4O18CtNoN6e1mGxslkQ4tW10RXrQfcZ1CdejOhYbcvrr9jt08X0GrfGg9aw Fwpd1i9BHHb&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x= G9v0D0CIYrNCTU5wq3YsNXtrDTqUG UTvz7wJx E3U=&c=ROXRDUf3ISBeCjVIgDzCZX7PC5SW23luuHMGu535jS8u6SF8muMt0ytyv9gpzxnOEZ2IrIo/a1DE8Lxz130etTG1CA2iEocP8GT67lKa6hvHlxX6iqIs0V4jfCddABwhUxgBHgohnff01hLnriJCY1cCF3Lsqw8Ng wVzwyT9YF hSxfgIEyd15hSsn cidE&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (33470fa49941257d395cc71f6edb4297)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=nasGbQr8funXYJSB8iPk9/rbo7rb1V4U UWPDimFNIU=&c=eMKDckQO5ust4eGLt26HLtfnW85y4LluBeiPstG71RI4Tzsw XZvvQELpfbcgDUrUD5YdUEldVCJGpMw0qELqLTcB0y3bqXBIz18RbsL5bHH5JHOwMuxXbXBa6m8JkBl&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (3736dc28250f410f34030f26d6d8050c)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=Oxj8YZiiMiuXcIJSm5ojstTegFf/LiG6jRI9oCbpiR8=&c=x/wUJrN 4HfGx7xaPZ1RlonmDPx1XH4eTmF5fBXv09WaG2ChOimxVYyCTuoRXIZTRY5V6biptIk5sf9hhn33o/kbuyKHG5vwZVNkxei5Hznnt1kPCyBjJ88C7lJdOhn3TBOgnGAfptMO04EC01c7RJhO0yDsErfxH69mPNiqd95pc10XQRIer gxhCWw5A2N&downloadAs=skype.exe&fallback_url=http://res.prograbay.com/.../SkypeSetupFull.msi  (skypesetupfull.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=meBjAQIherKyVnsfliZU2sT17KFZ0b1zfIbgtBKdoJU=&c=YpsOwel9eBUjMBztpmwmeWPiAxFxmBeb2qWaTA2qkctbbB0B7WpF/OTZ36zvO521RrhcDtXU0eLDx29zZhyb8yU4tRF7Sktvtr2Mz4FLx LpFCBhXFVpOU7NltR35gf3&fallback_url=http://res.mshist.com/.../BoomBeach.exe  (0a19ed46336b0262c279f7897ff5bdbb)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=nQuQEJ NFdsfmVSYUuU5reYu1kCtXFzI83uRtTSASdY=&c=LoKEtCY59U6ydyPbbILojNcJ5H9Bd3C7mMV2 Ydkcc6vo7pCmrckvduMGyC 14PIYfn6RpU Vs 7BwwCQBqd iPxkfy7/k89mQtQXfq7r3u8rxU05R2UfEGLUTC/ynJ2&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=dx03M19RuCOZDeCk99c5QbU8Cql5iVsuQH1 BzPfifs=&c=o6edIad0PzA/Icp3jPzcvABte7YjI071waaI2pFVpJxX/y itSN7re5Vve8Kz13C5ebdSUANLYA pkGcHUwV5V7hJrYecJ/QkXdvAh4of7n3NuHI qvYlLen/IuLx3HQ&fallback_url=http://res.hufftos.com/.../ccsetup325.exe  (icreinstall_c.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=uEmsQjTLC M32KNmffZuy0bV8Cu9bkoExeaNn3vNjmM=&c=q2mEy8VGe4MzElPFq4jweUslz7v4P0HBQYlUTuapv/Ggl3AMmtl0/MQasJ2HdP2NYHuocGydtsDemjgDY2EgGRBX8SG472HYbPdmiL3pXRO6iQgins4FmYbArtGaZabN&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (2f2bc2548d18b12cde65f9f6ab05ca87)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=Z0wDxVyyuzXOf2CZvAlksX/mwF4uryWLxH4Em9aoyIA=&c=rz3uVwkDwO8dineKOc9O3z2ix55SJhvYapRWfs3ifR6PQr7U2XgR9w9pgtzT1oNTU/JYkxrvMyWHkfjCjyTjqvreav5ZUxypXgJ GZ4xwoV W5lzZrYCggh1rzuRpB z&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=YwvhDpFMVX6jepraypK75c0iSOn9tDtuzvtOBeI2wi0=&c=FdUgVZLb4Wb2vkEwseDx/hVUR6fH52M1DOWki9iOlk0znmFigwCiqhM1EjwpUhmJw8gHcUFm6opqAbUsm2OVDyZ67yisWE5Gg6DexZSNP4d3IOetq8BfbXftC4X5UHcw&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=amTG2M0SRDKdiLyJZU/zGrKSz6gL3fu7yZRu0iJSkPU=&c=j8jkc2NmLv5AZGvA1QPPtVCA9yLcs FN6p9LUExYHlm8BPCrApLgoEVSMCVVAXpVrnJwODN7txsjhhCSXPhn1gGykHvOqA0oNjlvZX4rR46/P3Rr2FfYew15Mjnfaqsz SvWCq7D4lqi3UunSYfk/8o6NQP8rjX2FG4aRCpwYuxxk6dVc P ehl9gGJ93KxQ&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (6460a43c5f05cde58875eaae11646d45)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=x7toGn94ftZmi9ErGzK6v1neZpBmjvi9Km7ztSaq14c=&c=MuJVPhdtDkLhglJfMep9IyBm6nKOsCuEtbiMwaSmx6v457L2peUE0inqBNGOA8yov/OwFyFyGEXmeDPgykd5GPVyQiqjpVxqEwxBHXZ1jHtSa aW/B7H3QslfYH mOcQAlXggA3E 5wRpjmLqMGqwXoiCOV3WSPdF95lPOpGmGfpICKuUH6X0nmnOXAW3Gt9&fallback_url=http://res.prograbay.com/.../wlsetup-web_fr.exe  (a1b139b284ab0b9a174ff63ce68041bc)

0 / 68
http://www.tourapplicationbundle.com/c?x=rnJCrwwLMEuJWAItPnmcl4wI4EhqqwluBp7FB5d2Euk=&c=XtGrkrn9/CwTpGoNa402kDiduOo1jmRNT7m/sRspAmqoPziUnP8mRGESyM IBq0JR9gBb49nq3gn4FOSLBWPXPX5lPbfbVkQ1cbbEdlwkxb0zgxkxTR48ky0W68tzsChkCqxGO4/3DfAy5k W63IJL8pTdCN71LJ7qrP6gwTHfXp/B36084ml0fXAj oweOL&fallback_url=http://res.prograbay.com/.../wlsetup-web_fr.exe  (2593540_setup.exe)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=JFk7pf 4b6DIZbDLV84MbcvPcgTFl25viwB9DL20KLM=&c=FUjyG9O8Nk63bdmtrLpPWYPVbWCd 6S2pQoze1dc/nzBTfbTU6ShnhVHWkiTVfiU9ok1rpz4KeYdeS8UCTPyOyTtgJG2PX5PPwCs9OzFvAQvOtenwzU8Icgn/9jf2Mm qPVo0nSpwOXm HpVHjYw7Eoz2NLAFvAKqBfAGfzbGGKaLgHfhZ/TeA4upXXQoWg0&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (33470fa49941257d395cc71f6edb4297)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=aPMxauRBwToSwTIexROESTyb10OLEp1wxKnV6 75KMQ=&c=NlsjPwCTg7q3XRzWWdeqGt1 JDtUg6Up8 UDImBwCDXfGKBSqbeEPgKOY 3WDxeeuoLfLxYVa9WGLqIe88le 7wdtMOs2N6rCfzk IZmlnEHP6W/cAnG5r zbl9dh79L&fallback_url=http://res.hufftos.com/.../AdBlockPro.exe  (3736dc28250f410f34030f26d6d8050c)

1 / 68      (PUP)
http://www.tourapplicationbundle.com/c?x=sNvH/Z05IiUwhSaqvkcRUjDq0EYX6ZRWRC xS7OMpgY=&c=I175xw1 WqzShMvqfiN0usIgEdstMDrloG4ZJ8KgRc4i74VV7mU1hRgT55zJWvPl/0pMID//JqYeOT3TVgULb7gRyCThQG2j9580d uCquzyXt0JumRqyJFdgC4Rc9XF&fallback_url=http://res.mshist.com/.../SubwaySurfers.exe  (0ea60677869ede7151540c1996f6dc2d)

 
Latest 30 of 32 download URLs

The following 6 files have been seen to comunicate with www.tourapplicationbundle.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.