» www.tourfilesnew.com
Overview
Analysis
IPs Addresses (11)
Downloads (42)
Network (6)

www.tourfilesnew.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

tourfilesnew.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)

100.00%

The domain www.tourfilesnew.com has been seen to resolve to the following 11 IP addresses.

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 21, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 21, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 9, 2016

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

April 9, 2016

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

April 9, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

April 9, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 9, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 9, 2016

File downloads found at URLs served by www.tourfilesnew.com.

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=/BSLqrDctz1BktJSz4a77LyTcOB2N sqtU4pTTRZYC0=&c=21RfM1Hmtg4aevHxpHCPDV2uL3fmU0BJ lUYifm ORfRc2YjeygIxhQ2spjX5Hl7QM8ePaXZqS7WEvLTESYh6Hqz0EOnWD8t/N nSJH73pZMXRx9MLmD0bRMYSPmxIQJsnDYQLiThoba1bAwXUcPa/v5TfoO4zd6NfxImkbJrLOKDElyP 0r3nrHVUD2mHb&downloadAs=O-Patinho-Feio.pdf&fallback_url=http://files.ultradownloads.com.br/.../269228-o-patinho-feio.pdf (2ffqvv47.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=qt9xgPdp76uGD8172ATaLyVoCxtviLd9WR Oy/pOWdA=&c=Pdgv4i5YcQcECv9jlAklv/2dch7u8xcW28mJ/772eJnF6L/nMLaQcbCbKLIh5 xYtbA1AtV73Y4TMhZmXTXBPs3JdE8mmnrYySPX0hnukX119 OmSfdaDg7InjOmCIxExXHM27IFooh/qpuDr55IN7f6girdQ1I58arX1Rstcm7YcXbcZTI7GdY7R jEwDT5&downloadAs=Encore_504.exe&fallback_url=http://download.passportmusic.com/.../e504w_demo.exe (a90c7a7d5c33cec4034915ba354e7073)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=c5SEPMtj6ijDYc2HKbkbxDjk7rxjc42OM7r0G7PK7HU=&c=oAU/S51X0L EEBUOJqR3oeLolR6oxitJOVQwn5Nm1 3Q scHGKWXsE0q/y41CzhuqZ5WH4U 9EVcXCDOopxG/HijKgAWhWkyfKxbX4vv7Q8fHV70lWPz9OVWzdrx knw&downloadAs=Office-2013-Preview.exe&fallback_url=http://files.ultradownloads.com.br/.../280812-Office_2013_Preview-32-bit.exe (icreinstall_office-2013-preview.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=znUdoH89kMUnLZaEmYSdtCXar9GphXq4GBYvWLDvbOU=&c= ijmWuGYohkiZHRSmy0SqwOEDBwHdu2xzgsV4oPAYp6L CQRJO1hcg1NiUwLcGaanfZoNdg7jboKgzmjXUzdv3LmZI JREIUS5m4i nE4ORN6vhlb c10lQW0ccVKt xE 3j TxCJxf5XQJsZTXay2TbudiDQKHawFl9ezl0YQqMBZR4yyzXB5acNvpv6sOE&downloadAs=Mad-Truckers_10.exe&fallback_url=http://z.gametop.com/.../Mad_Truckers.exe (1c08b117a0b7d46765ce69a2ef5fdba5)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=ndS5q90le9FGZoct/6 ZVOJddn3x1dwrkXuLyoI4CQk=&c=DJ ue/M9SPINmzKcAyBzKuZTxSwcLJJweFOJB2CRYINzVDojG8iE/w9m6gfUEC8RRFGRFScCvuoGRVY76N/nyUjuoiZlsbB/0Z0Tzu4r5E9hGVZ/N So0zcyJ4wfxojudiGPLhor5r aVOVjjSXXMXMGlT1wkH/OQ GfvWbKnSufnyNnH5JKDyKKcO qDCfX&downloadAs=Ezvid_0853.exe&fallback_url=http://.../ezvid0853.exe (b235645a177f6f9d9523763e722f7b09)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=DmB8ZRZ7YLSLSe3hhT7ErFNlFaRmhr6N6FHC50VHWE0=&c=zAYxcmdlPCoUu lrZoXzFEAqZTGIJgtRjiq0Qlgti Ew2PPKQs3vf3hYzSDw4uKPVnNh0eN OY8WdCbfKIFLTYqKV55MKW prAs/xGs5r ILliyuj6vb250 7yfvc3qE&downloadAs=Walt-Disney-Script.zip&fallback_url=http://www.sofontes.com.br/files/.../Walt Disney Script.zip (walt-disney-script.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=tIQlDfRFO8gTFEwi7ykU3RRMlE0AlOqcmvL4qQW57Q0=&c=84An7C62/Q oSxvGAgTXRIxYMrB28Nn24EtMETgJdKbKFZlLdLUqCUlKMSXVp DW/vidE8soEJnQeWbtkCysVsLriZR5I5DrB5fuoN3t3pcO9Yo3F2rCdvlBTeYgFZ6hjskH1fsA/gUig0zhOFaGtdY1OsUod2L8K4Iswq3iffOP6ZPFRwdWefSMewVHwdMF&downloadAs=Mamae-Que-Nos-Faz.zip&fallback_url=http://www.sofontes.com.br/files/.../Mamae-Que-Nos-Faz.zip (setup.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=IspNAx2dJXlMwlteWyAbcJLM89Tat/FAmzHwHOX5ICg=&c=S7gA63poYwmidvywzZofA55kIE61GbbHjtN17BQ40T6NPEnpC5pQwjUxGliPlbGy6lFEgKUm9 eu2tUSjbQaHbFmLbgCttRch593lPT47peu6UcA5yxdJg5 aOsFKdQs5Izt5xuPPV6q0vjI/K3fIiUzlUrkGjkbgGStmpr4p4WmiHugsvGTBaF2gsJWs4UX&downloadAs=AutoClick_312.exe&fallback_url=http://files.ultradownloads.com.br/.../82199-GS-Auto-Clicker-3_1_2.exe (460ab28fbed9ce07d6f93dfb5e24b1de)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=YKn7b77C4T7BXxqwkINR2Ql/v0r3ZVK ikoyIxytqGM=&c=4dzgrEr1Zwu8BuHesiu2jLFjEWGu43J5fjbCRKQ ZBBjeogA9qbhYvvr5l7YBjmEDJnLk2nwdXSAK oNDMwjVSlOfbZH /bwhsQu3iQe2h6gs5pRx/fpW5Vz4ABmlRmkKfsEsaRMgoX6uefbgepHj7eEVq9ANyhmjPyLfTnL5B 6eYkco4GIgqEU9priWpm&downloadAs=HP-DeskJet-F4180.exe&fallback_url=http://ftp.hp.com/pub/softlib/software10/COL18547/.../DJ_AIO_NonNetwork_PTB_NB.exe (6465a161b536b80954198c5e42f07111)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=BDC3P0f9gi/KGz/g7q46WdGC2I1TTiBmHgHY41eo0N8=&c=ElxLlOZa87Y4kGrbuTBv156GfbaRzA8ZkYvHwoMfP4Uf2THRPd8jJW7cZ4EpHdvmdFwUsG7HMZ4 faijGdFYFUyaLQlhFOT 0al7GEFE7xoQ2672jQQfNVBbvmHpU6cZuJHLjqYmgaw3JkEn 0ACdhS5UqX/5dx0WafROuBeYmAAGCieI4/Lu05gN75Yl4vB&downloadAs=Microsoft-Office-2010-Starter.exe&fallback_url=http://files.ultradownloads.com.br/.../276384-Office-2010-Starter.exe (icreinstall_microsoft-office-2010-starter.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=vLKyq P6Vmq 7SKyYLRPniGNKQ2RAHUiBI/3ykp/OSQ=&c=olf4wfzTxxkeG8F34sKTr8hjvT59B2SDyEvEl/Q5o814GzzIAMCqhEGrWFx2OGr4SI6PDeKV0/WlOg12qz bbdN2MBfMy4SMJXyEtRkBW9RMPoXm6zhlmVbOle2WHiMlHH67Y1cGGks4xJqK0pQCNqQcE28vmAgDfxnRosK8ee64cos3PKTI/7FBDhlOIZhz&downloadAs=Brads-Tattoo.zip&fallback_url=http://www.sofontes.com.br/files/.../Brad's Tattoo.zip (brads-tattoo.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=p3Tctz4Emrimoavm9R0FEKkYtxJKFF/OhK7RXaGlQHs=&c=VXIldvGkYJ8Ho6zMVJc3pPp9i/74/JDqRzd7hQgjdQRNJk5j0qpZ7aamQPJC1kCIRVB8rz4vCitq3oV8B Ih8Xg1z/OR8yaJ/s7X8F9RkvxAsu6aVpqJrHFuRQ0h LWxJfHh5IZO8ZLNmSOkVa3c9oGhAjt2T1aIOLjhmzyD5W71712Cvxye2LXj 62eQNPx&downloadAs=AutoClick_312.exe&fallback_url=http://files.ultradownloads.com.br/.../82199-GS-Auto-Clicker-3_1_2.exe (460ab28fbed9ce07d6f93dfb5e24b1de)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=xIB5wd7bD0npnC ERBXItBgI1kQk1GeD3WnfBGMUQGo=&c=Hg78kc73bX/2HaOIwc3bfxmXuo1pjPfPZKt//yvUcWBn8zYxBspd86Ez34ulTC/MjuS/LT46eMgm90IvWgNUIOtmPNSrY1zS2GgRIrLCSsqpVEeDG YEvXCyrAhP4bgyra02Yi4WRq7XEm4Tahycx5Gcz lXitHLeQKk9WiikT8AFsJ1OgRCcZLLvYINX0I6&downloadAs=Raffle-Ticket_3.exe&fallback_url=http://raffleticketsoftware.com/.../RaffleTicketSetup30.exe (4b7d45de4427b7ef00d991e3454695dc)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=VzVeNIOpnCRKPINB76OVEEUX3ybzuO/djCAN ss 7do=&c=oXweqobNqyM/ecrpIut KwInixvdOYojRcgn1kpBxndiiuKtHtFPStHdjnuczN2g7HCFLYBP3 wnPTRi5NtAL0YC7Mfc32H3rIb8K4Cat2aTroHVrEMC9VveOjAp75UU&downloadAs=Windows-Repair_211.exe&fallback_url=http://www.tweaking.com/files/.../tweaking.com_windows_repair_aio_setup.exe (icreinstall_windows-repair_211.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=MCZyGE6iWoazmPrEQpfAWMrjrkLYeBORTndaYYCAOlg=&c=ZRY60egSj 9CyCrrtxdIrbqolOJ40obQsIAM4fpsdUSdgWWfLSCX5BQEOIpXapbfgJbZwqVhQ 5hB33rnbBIqg0lo 7E0xxS7z5CgIX1rDxFiTY fnm5rnRNbRwEE4nY8qIVfGbmABYGkoBe7Uk8zJbvyAdaiWi8Pog9mn8V/Wq0hWzcnfGMF2h3yvRyCt X&downloadAs=BPM-Studio-Pro_499.exe&fallback_url=http://files.ultradownloads.com.br/.../9841-BPM-Studio-Pro-4_9_9.exe (105b1a1e4a258f1fd2864b426d41b31a)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=nPE1yhVe56odCC4hONeCrziHc4dVXr9w8/1bg84Wm3M=&c=i vvhIVCSyA58KhPBiavRSMu x nLEUBkgy49F49gngepe73oN6ST9NiEptivNHDTy1QV1AG7noOJFlU38UXZDU9K/en0dJql5NztXGpfz3ui79Ij762dtyB6ZVhIPk4&downloadAs=Mamae-Que-Nos-Faz.zip&fallback_url=http://www.sofontes.com.br/files/.../Mamae-Que-Nos-Faz.zip (setup.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=VCmjz3LuPw0fRMuh3V/Ygz551XfMyv6U/qbIB4jh0aA=&c=blVotzUYCWV iAFQ5xO2LujwQeB4G8rl6wJyymy1brwBKrGgqth1RZlFbdFbnUscCI24hmDSp7OQK76B4eY74N0/wh8K9SEBfMZcq5/tFBerxZ15Z9Ef7eRKdidQ6LafV03Ox7HxM0muy3DSd2nZgLeINQ/pWyyeE9TwBzLxSF/jYiYuQtNC Gaw81KIO2E7&downloadAs=Sound-Forge_100-Build-507.exe&fallback_url=http://files.ultradownloads.com.br/.../5360-Sound-Forge-10_0-Build-507.exe (icreinstall_sound-forge_100-build-507.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=/bml0Dx5HI8EowAuaSFZwehd/hKc3fWlmpRqKy5PsBU=&c=umumtbDbXwUCjq2AFiYOcJ/55WJceV5JDGKjcncJcN/Y2NEzvvtxGWgOKV X0bRlfSXKNTrRd/xO4YcR7 Q5ZJ5g4/YTuo0WMSgcRvVwNUVBucGfLvrnWsz/a5piEGdW94/ZrqKdueFThqipXeM0sf/4TCZxB3vH/gPBjF3JF/WvppNoPGv4MyPQVun14kUC&downloadAs=Google-SketchUp-Pro_80.exe&fallback_url=http://files.ultradownloads.com.br/.../99269-Google-SketchUp-Pro-8_0.exe (icreinstall_google-sketchup-pro_80.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=zp/cXQ2mBCvVtZlOeYW0O2m6xOoTmnhLgA7DI CsrG4=&c=KMeVAjM du0LqvnSEof0g4XQkZuGZ8x vRH 9Xio7zu eRzp9VsAh7fvdMWrDq1S2VKtN8zSLT2SLOYdWgKMkuPXUAUuOGHJ16JJDYFtxaPxu2c6a4bGcrp omrsBT8Y UAmfcaK0X13cuIitt 0PXj4WPiy6BBgbcwBSFeb6OG0t8DzspQKBK1KIrrxqHeJ&downloadAs=Visualg_20012.exe&fallback_url=http://files.ultradownloads.com.br/.../92891-Visualg-2_0_0_12.exe (1dd84a3e2a8960b72d0ffd563d745edd)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=o1j25W03fz3lXmhgfhXGIAlFTxrk0ICAzXE/bvT7fE8=&c=7J2WyUQ Yi4oOFXJBJqgH/5l5BNihQAPgai4vIcbgfNuIDAfBMidMje9bsgqTYD3VUc/SKFaZmFDb9CqU8m/dxNiWXeBB6VcukBgQqajD9t48B65V8gS9BVyQWDvuN9j7s0cWvisIMj od2pPkTY7GDyC9NWFUGz58xTCsJf c994CpW4CQPhwTRBmfQjvHU&downloadAs=uTorrent_345-Build-41712.exe&fallback_url=http://files.ultradownloads.com.br/.../7889-uTorrent-3_4_5-Build-41712.exe (cc85b065ccd578cf4013d977bd7fcd36)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=HO/cVVne827kEgY Qns aSan85mVdbUL1VWqrtneBDk=&c=bz8pa0wkA697AKrj4rpOGoRwz8UXmyY rhYCEQzZHvAuqJR4N1Tr9Pv1fiBrXSqbP Xg3cgq9h6dVIHYoUU9hsUMq09vGT4P2OLG2Y0d/ch/XRaSJp UVdOzX7aqcsMjgIwRz2BF2pk5c4/nnIVe5QrmGUUlHU81nB3H7AXwP2zIjychSWp8Pk/OQtSnJVG/&downloadAs=Cursive.zip&fallback_url=http://www.sofontes.com.br/files/.../Cursive.zip (cursive.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=neJYpXMh1nI VLhRXCxNTQDmAJgKI92dBuaJMzmt2 4=&c=qoNyaFItB3dMugqdqXA pT9kzl8p2zmt6BAMQf1KdDwQrNKRomIKSTiXUbnUXX3ZU49x 6TGLKld7vp kIGgc7PI6kfu 0w0N6KXxMBNK xzAhdLBDZCOH kAbwU1E7LVrhbFx5rsnrm8afRQrwL7NCSqdhS7rKAeO2wxZazbmiVTEreIw/BDI0GQX79Zbcx&downloadAs=AutoClick_312.exe&fallback_url=http://files.ultradownloads.com.br/.../82199-GS-Auto-Clicker-3_1_2.exe (460ab28fbed9ce07d6f93dfb5e24b1de)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=A7S7DMKpldhP9HFiJi/hZFM2JSp 1jdO6nRCpsVbahw=&c=0KqL47DkjND2QiAn18MvD JQzErtI9RYev/1ooeotXqpxBrQLBY0B8T57TY3xjbiHQrxUVp/p2rPc5fSz2p1UhXfn7FBt9bCfNy9MwnnMWKK n/N79p0LOTZ3dAnLOU&downloadAs=BrOfficeorg_411.exe&fallback_url=http://files.ultradownloads.com.br/.../11297-Open_Office-4_1_1.exe (setup.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=qfYinH4zEoKBx6abqml79OnFD7qm9uAIkMA1tNKvNc4=&c=bL32Bpe9zK8zuebx1cYYLkFFfTpnKWwQ9kfLp 2412ZKRUbi4CYszbZln/j8Plp 1qPTzzJu6kZ7rO6s5jjfEQHd MuYvt0urAP9McaE2mN4imGhhGetppjeja6DzWJz&downloadAs=Broadcom-Wireless-LAN-Client-Adapter-Driver_41021561.zip&fallback_url=http://files.ultradownloads.com.br/.../88672-BroadcomWirelessLAN_802_11.zip (broadcom-wireless-lan-client-adapter-driver_41021561.exe)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=Q6eGL 2ROiF74J9WWkh0qxNTaik0sYZveT1KkYGJcfM=&c=XPuNpy6XM9Vk6ecFkTs JDkLNq6yT6uoRTs/4Lsf9WVcznyIZTfM3LpnDZvadzR 6tdFgBIaOywW9Aq3mBsfRLnIdoZxenRJsQOeYs8pS4GXr9u7PCdgMc6FHTkOTcVL1HBIqx8GWj3Lk2Gn18xKH5xF2Hqnev/31sLFJITbFvel rSq id10Tl z9Gdfpoe&downloadAs=MapCreator-Free-Edition_2.exe&fallback_url=http://www.primap.com/files/.../mapcreator2-setup.exe (da997024e2a2eae5355270715cf2a587)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=oSxDiGpVMVLeH7AtOt oFDFAHriMRXcWEaIlF6tXHqo=&c=mBH3vRLLnr0W10HN2G2mdLK1EkT7Gfoosvj1l/nSXmZ7QKaXk93crKgWmNGkg5Rz5l rEbTK/8f9cy0O5hL0Enc/c2JHHUTJmey0JtNPAzS7rKkWI3EDa/HYN03z4wPvJVNI8hu9luiHGSr3ooBY/hxuvmW5ZUxX5//WPAKo7/nFLDTLhx1OV5aZT5XTVXEW&downloadAs=Final-Drive-Nitro.exe&fallback_url=http://akamai.download.wildgames.com/wildgames/.../finaldrivenitro-setup.exe (ab87349475e027d2ebf0e4ff37730a86)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=jJkhieRYF3DVx1NgwIN5WQs0uqibZHlMHi2RG9XfC8A=&c=6a4z8ucMqqecuOQ jHM5ui1ljBQxlzP7yOiHgRYeXEo2UeYuXbegJ2SKbgUWx/glbOftuh1SRqpLOB5Gd G86eWUi1ZYBshPoHY1foaDUDgXGHGWpitu7j0lKODKh8qvIN4jUHrk/bEL/K71FPiAul4f00LGRwliOB02xhXEs/M0iWijs7hWLlF91ezvhSCi&downloadAs=Curso-Completo-de-Excel_XP.exe&fallback_url=http://www.tecknoware.com.br/download/.../demo_excel.exe (a98c71f339c07b483b655619ac29f298)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=dWkx7Fj589kMP1u8Rl IIU7MfHOgjZNaZAdMKA4CyCU=&c=0X5Tmf9w5gmIPDWEvVxQrj22FniUWkgErVNa3W4LHDAJ74H7joyc4g6hU3phA3KTTmsgvOorFac d1fE/5dtLQf1sXCkuPFe/HmN6YhpI3ChUj3aBuHm2I0TpylWgYSr&downloadAs=HP-DeskJet-5550-Driver.exe&fallback_url=http://files.ultradownloads.com.br/.../81214-HP-DeskJet_5550-ptb.exe (babe018d74fb29fe5bd7fdd922f97830)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=RcpstGRsHWLJT7teiCoZQVsBtnZLL6ZmQRQCc81fWXE=&c=ptVoWkd5K6UnUd5 t2IA9JitPe3tl3SqNkdBJoTC8JboL58IVHvsVA8jyxNxG5cn TIpJIwNeA0WXg2uLYl9R3rilfEoD7U1DJPjMrd7DCbZdTvYXz0PEGIFXAzwbydgv3ONMy HovW18OF1vLSZXcvwPmyZHTg42EMGDp Fg7pHkkfg3gfvtgBFojXxGedF&downloadAs=Serralheria-Industrial_20.exe&fallback_url=http://www.ast7.com.br/.../serralheriaFREE.exe (4024c7d639096188facb9acd214dc06a)

1 / 68 (Adware)

http://www.tourfilesnew.com/c?x=sRvwgo//0F7ktiurumHH26GZHcKYgFLDbJZBArxTUIU=&c=rKrZSfD1Aq6lWs2b1lxNNyNQq0CvCVlp94pTanhfTZZ 26TMTXLY4Zp0QPbMX/Tg83G56KBuTQ3tXpN/MEN6HrDJIMck13bTwrlhd8a7iUUhjLxO/G9vYPKKajwI0kgJupNJLq MguBc4p zIPaRDNF2IsZDSNMet46n/HpBQDqNPzN4rwMvlCSvg ASveBq&downloadAs=Brickshooter-Egypt.exe&fallback_url=http://files.myplaycity.com/.../brickshooter_setup.exe (f9ca7ba33a4a5ec95b7d3faf79df1222)

Latest 30 of 42 download URLs

The following 6 files have been seen to comunicate with www.tourfilesnew.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.