home

www.tourlaboratorytag.com

Communigal Communication Ltd

Domain Information

The domain www.tourlaboratorytag.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, February 2, 2016

Expires date:
Thursday, February 2, 2017

Updated date:
Tuesday, February 2, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourlaboratorytag.com

Whois:
1 tourlaboratorytag.com record

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

VIPRE Antivirus
InstallCore, Threat.4150696
87.50%

Reason Heuristics
PUP.installCore.GERYONADS.Installer (M)
75.00%

Dr.Web
Trojan.InstallCore.1027
75.00%

Sophos
Install Core Click run software (PUA), PUA 'Install Core Click run software'
75.00%

AVG
Generic
75.00%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
62.50%

Malwarebytes
PUP.Optional.InstallCore
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
PUA.InstallCore
50.00%

Avira AntiVirus
PUA/InstallCore.diur
50.00%

G Data
Win32.Application.InstallCore.EG
50.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
50.00%

Zillya! Antivirus
Dropper.Dinwod.Win32.1768
50.00%

Qihoo 360 Security
HEUR/QVM06.1.Malware.Gen
50.00%

ESET NOD32
Win32/InstallCore.ABK potentially unwanted (variant)
25.00%

The domain www.tourlaboratorytag.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 16, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 24, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 24, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 24, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 24, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 24, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 24, 2016

File downloads found at URLs served by www.tourlaboratorytag.com.

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=CSW3pcPdGQUqSHfNnaBGDULZqslLnTmB/LXaDnh/VXY=&c=jmqeYfwDXSJkoF7HXn73wd ur6QielXuVIG/SMaIoTbnbNdJiKU7FWggHDvIfYS6M7/o/cDi1nx2 qaU62d4xXv5a4W3COCcImAGk fUtPr Tl8bpYkyBRSG/3N//ret&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=GuGE7X5VHQQGfACVwvHkW7Iqr2EMZv4PQXii6/uMTvU=&c=rk 4QoYrKNp69obsB hhKSjC9ZALGNW64aanY1AMLi9NkEI zSgHq2ms4tuzD2u7/jFrq4QWZ3DXQ7t5espKsj17xmZVLMvpdsmZ13x2iNuzGutam Y/8oKPl8UM2hRQ&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=G/zu SrsOLF9QXTsDj3af6j63FR/U3iskdJbfsTN8nc=&c=61aM/gc60L30MmdSOM96a/Svyc8kO5HQX5JQtrjJ6E7m63ipe98qIqwsJvUhTobYIPrepYUR9wOfy60KWHOde0ykqsdZJWKHnzwc3iDBmGdejHcOKJ9nscAaNcluvRMC&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=GpvAn4uRP5iDQyIFFxY8Lem9 1t3orVbeHxV3rX5DZc=&c=zETvP0yLCD66BOL34D21aLvwGz5bbJsVTT8z2GBgtj5S3iu1fzSSUh49TUWfPTy/JP2X2HElsCec6qlbhmWtN1Fwr6hhYC7b5W0U9mPL6LLTfIL4nia8pe/D1k2QgV6s&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=iP4n OFeeGKHS73P5aCvjGSKsMicT7 HENQUw7q1syQ=&c=hU3xX RWXTltSdt0WkDI11M uMyGSwXMg3r 4iWzpiCIcAHobEAtR6lOnVo3lzLsjbe8EEUSNpOIbf UMbBMDnT2ImOud3KNJUv9PpDxU9jXuFxM /EAliFsOi7Fd73q&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=9ZgJT30fgODFT1pgW40vusrTJ1gpdswsovtvBC48jOg=&c=y6CfN1tN9gw5VkiU6xgagpjjK2r7d2yi55msoWNmJQKGWfvU1I2z9QaaZLlS93ROLFPwDkOe8xjCcv lH7kAbOKTFmUa yvKn4fFz5IOUGcim99VF/d9wATXepv7nJDL&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=Xk92IHHhmQB Og2JHL6ePyo23ueKlYb4ENmp1vxVxR4=&c=CJV4wmP3II1fu5vOWsqQWytiHp1xjwhGzuwLwkBsxTPHIXOFwi5DxunJf9EBIkx R s3 TaKDX4KeIK6N6R6/kLXxiWfRgcWIfMNaCWglVJyi6//e3uyNeeTiBZ7zf9v&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=4fFzbwg1SpiH/u1cLaXC3ubVxFRG4yFI2BjHnoWYAvs=&c=9CAhxhAWLDwS5liW3aU5WGOY1Q19cohZNqnbxgKWbuBu0wlqFi3whYShqJ7JaHm5CAbiHNr6mr5cikZBOSOxdVcDkONaopWDvUfwN99l822iPB7BhrSR1NDt7EruEy44&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (6551646da42d0cbb04c399dcff190010)

2 / 68      (false positives)
http://www.tourlaboratorytag.com/c?x=HlsOOlQRTmWj0QUs9BpbgUDoqBCn0Go9Cmrdz6NvDac=&c=wCodlJIWNBCIHMtI/S9uLEYvGdcq/Sbk0vVLZ3VV niCbxaW55YUZJdMbbhWlWHRI9hfy3AOWou0ZxZYVX qPNxNlWQwL0k0fOCg8PJ sHhdzPw4dU97o5MAqOn lON1&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (wrar420.exe)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=7vgP49PP6AS3qbNb7wfZinIRV5kMdqS3qOlRiHEHiCs=&c=WmF7Sf8KMlITBypmy8lfNVmfXrSnbbDUpAEr0XK48BOUhfvxJde4Sw3QkHd7yJo2W0ajStbu5PXMova6tSLvpnoATsDyDvRZ4AvIHUUOnQevav3Rj0kv GBJrQoVJRbU&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

6 / 68      (PUP)
http://www.tourlaboratorytag.com/c?x=OD Gus/Q/S9vNe1ZaH1S9a01prb7BDaHxxDG6Jl/3XE=&c=B94rWCcGqAFuQZ0pSTGrlfZHvKyXnVHFTR 7R2pc7OpyKLtF/9WUpxIC3V7 F9yoSzy0Y1uaLWwUo1 pjWfDTFh2FuhgciUiLT z FUUtwF17uyyX/6OS4wl xMPmDHR&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (c8f99b624b66794a1a9765687721dd68)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=LryJtXL4yn3XhpA4MT/mtSLavJpE5WZPBfLay/b2StA=&c=0Euc50zI7hIlfrdkt7ZV6mJKt2sG6SVlRbG cjqiNtPd0zgla6MN/AFou0gfj3 LzZiuctT83YfHUa40VBjFhJrMvPbYdU7bfED2zCvRCNAPt3FPTVLD9hiOzoe2LEwf&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=wvkEYtpwBhNl QAHb0DwAu73UlP7FAa YhM7UQG8Mnc=&c=meaBdOCEFzNVl5Dew5luOkRvJFt3H4nMLGd wSmBbZO7bv/QFJaYrXKaXgNrqS27Ssb2kzi5e9drRmaqE9f5H1ykBjsgbJlVPsV/egncbUk7cdCytZIcwnrG7Zj5hlvp&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=d1l48/UotmMCOtaQjYTc1R2BIi6L6l80lqfUlpvbruA=&c=hsg0ChhvcUU8dZEvx2pxNXD52EwQA7wK4152y6DR/bKvMLGIzc78T6Y4tMn7Vkhh/TmmatvpA9OZdQik4OjHrSNfLrGMjyaflQ6o0IzWPALoeODNSu82OtXmNue4aq6s&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=BIJ6IJazsBXbJqYVA6itNQp4/Bu2wdCjUiv4ETefktY=&c=OpEppd4s5gGXDCajgOVYW5sUzw7OfQSsW7hSw0b5Uy5TDXd8zscBg/rd1GKLiFjDhkk6ivFeopi2eC6gIFmmXDKh8l6gKMGGHti vAKGmJ01hbo6PyvLv5YIEoN1uy0s&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=kw0YyzuNz8KgJ1sUKHIGkDxGpPzsU7mOAMbZ2PqNyzI=&c=gg9qxgg8pdQT2ZzmGqL8kPBN763uf15SWoXiJHsBMx6TdL6vTZjGyX3ss8utmKrlMy7CO1a6HnqR0Dq6I/f/QF5RJXW3geIGG7vdOtZnOoDNzwmWneAc5qk50F//V83/&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=RYO msZfE0l2UfI1AuaD8b7/7ismM1rSa6Q1KRhGFlw=&c=7FdVogHuwB4Ny1t2iNGb3fnOjkNT2xWnKRy8EL4mRZJqHGI0ebhxG0Upb 6IyQVD4d3yMrdBKoacwgzJukyWugKtSBfENE8k32vZOGKP2 QjSXDbFoQFmKhbhbdO5QxA&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=DcQygQ7v57OU7vKlX OszKo/W95aaWWhlMaoejeOxMg=&c=PS1OfKVwoyuF2Kw5gIEIZx1TPqU3x/Lkx3Rf2x5FIknc4bnanmZ50mteBCL/rqmwIVLZbH9cRb4o84ISgUwNn6ZL6mAxrqolXFUYlm/StNz1woVF8TsgCgrTxbrieq3i&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (f49de29a7a80a2ccd4b9d916e159392e)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=H/YoVmCo jSbh 8A67tJu3JGKj/2nANdcNAGILD1Br8=&c=73sWmIPyrUFUzK9ldDSYAxYVedJetNeGpFUo dZZYkLNrCUijXCIE88Cn2x7QI5Krg/pIW66usnWgR8i25hyJQVVcopCngx2eTO1w/gwi7nnNHMRCaf5Z4Jtg5L1EfJf&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (e24ec87d1c6e4ac25c42613e8e83a6a5)

3 / 68      (PUP)
http://www.tourlaboratorytag.com/c?x=r0FykEn6AGKoZgLOTK/vfs8SrWkYuzlc0JUeTrrYZ1k=&c=FKS9QbyLLyzBSFJyg6/osJCM4CIk ZEmE5BS1gDltI0gF9bwdMtPRYpkFl5Ll4py6klqa/yuPR56BcCnZAF2/UivCLKUNkPiOKn/S5Ag8zXmfU32Qz3KkxwTLYWc0D5d&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (8e6641ef7750968b4044c5a6716760fc)

6 / 68      (PUP)
http://www.tourlaboratorytag.com/c?x=i8WzP5uhirvqz2JFX1d5l 6nSvmGUXsQKqWb 6WLO7I=&c=NUjdXXxc9Sxrq2w82QCKnQlhZ mCmgmDFhEL BK6imv7vl4 XM/mt3nlvLUtIuZhyNdMl/ALeacE4J2kDiHO4h0KFYmrCSUu85dakymzzGUZBR1rgeLX4EzveYq0cJ/p&downloadAs=Flash_Update.exe&fallback_url=http://download.macromedia.com/get/flashplayer/current/licensing/.../install_flash_player_18_plugin.exe  (17bd4b6908dbaf1b4280b1285baf29a4)

14 / 68    (PUP)
http://www.tourlaboratorytag.com/c?x=6H BdGtLb4NYOSpF 0BkU7FEl/D4VwwiKoUQfCQOqE0=&c=v7WstyBrvD5Ii1 hv7CWTq CQmTBd7Ju64kguaFmGJ4wpeCCFjAq2n3NDjTouwtalQDMDQiMsEKaMLRel6x3Zd/hydybQTFivr904iawkH40 KVFx eDAHTk5ytOn44n&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214  (d5125016eabba61f75489a42cc41c164)

The following 6 files have been seen to comunicate with www.tourlaboratorytag.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.