» www.tourstownnew.com
Overview
Analysis
IPs Addresses (11)
Downloads (295)
Network (6)

www.tourstownnew.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

tourstownnew.com

Scanner detections:

Detections (94% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallCore.RE11 (M), PUP.NewMedia.NMH.Bundler (M), PUP.installCore.Lafefeco.Installer.Meta (M), PUP.NewMedia.NMH (M)

97.06%

ESET NOD32

Detection.Undefined

2.94%

Avira AntiVirus

TR/Dropper.Gen

2.94%

The domain www.tourstownnew.com has been seen to resolve to the following 11 IP addresses.

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 15, 2016

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 15, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-52-34-170-106.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-52-25-23-136.us-west-2.compute.amazonaws.com

April 16, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com

April 16, 2016

File downloads found at URLs served by www.tourstownnew.com.

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=VRFEdfP7kfglhlH/dYYrSZzWxBCule22DN5J2c7Hv0A=&c=ZPTlLWPeQBN9oo4iVw08HGesPs0clL6FnzE/3g7h3Izw/7h BD97nPuF XsBYl0POURBdHXf2MrolzRJe xL/t4BD9VE2e5tFeCbYL55xqC PhXhBY3BEpbztV jLooh&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (a1b73d6cd0ff145ecee488f42bc20cb6)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=E1YMboQizm0W7dKvmwadBzLL9XKrTH0AqHMUOtrddbE=&c=rdEMuFlfPOAEZa//6KoSJMwVLyr/3uoNvghn/b3nG96c4OmYZNrzOF0tqmMPUyqpkmiEz6KkmTS1BfNdHBk/3gtVvd0/a2YZpf6Xu/yNWwvxKf6D35hN4lR5JQJwbT3C&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (8a44738eaf77f2c028d1178b3c8df3a2)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=Q7 Ka21KA4/bkjENoLquxmZ0byKAei0z3l6DlZjNrIk=&c=MPq4aFuXRw/0 yu60SIn ZoxncaTIKNZQOhOCe8SXTIEFvY8nmIhiqEaQY73 SmuOApBqKLIw 9zDcI5seWt2CTJRJZ7k69SVeSMMUzqzmIB0mUffVnRK B9YlXC/eMt&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c2afa7ca203973b4c0bee2ade463310e)

1 / 68 (PUP)

http://www.tourstownnew.com/c?x=LA6fhdLkNzVjrH1n7HvvkwyxuZLk842DztbNsICzmvw=&c=JgATeTr/awTi1nQC/RsApOVKCQEkEfLt216IFtAzJ86VRJ30N4EflfTrXHGLnWlHoFylZ/z3VnwzTqfE6da3MTBLEOcxA58Zx4U10vUXzcazVUGb0/QdBa/EgrwMLp7z&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_winrarsetup.exe)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=BOyWwdzgFnS3ryFMGHr8tqYTPne084FyZBeKLgbxKDw=&c=MbCsRVDWwl6DdwZav9Tx68N/ca3OskJfhu70S1swG52T5qgXn9RWn3IJLROpxmLc6AVVNSzsBX09zvuMbIOfOpUG8sJFuZzJLDDO/f7Jiq8Qa41HGnBB8xnB72 QL 3l&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (icreinstall_winrarsetup.exe)

0 / 68

http://www.tourstownnew.com/c?x=fuEKCG99mDHHHrx33iKDNwUx8Bx9TRUK3FljZLNks80=&c=c3tI4jgZiz1C7KW6LfvZBy5GOoq974xxGSpxprHeaYeHs7Q85vdag7B5w8YaIAqjQPqbBhj8L8enNG1JD/NlhlkcLKFm2ha jRyw/q0bVUrdGvdrcnN10p7sBYALhmA3&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (3176cbac72d276127eb4b45559315dcc)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=uU2 hhwCnZfQFxyIPH0KLe4DHiPtsJPvpphtlaSxOZM=&c=XeNEn8hzqernBVGkHgsrVx/fdyUL3N5q7Ivw8oUd2U58WEr1bq2CnotVBKd XcJ0ErOKlcnVZgH58ssjMOfT98L2r2MVSNI9CZyK3W7cSigz7Lp7dPze7bdOmvzEopAW&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (cc0cf16a7b018e19d8067e037d223e30)

1 / 68 (PUP)

http://www.tourstownnew.com/c?x=RybxYU9NR5X2SqTy/8HTLMd/idbPnb9/12l6S9gaOjM=&c=017j2EHzR1XjOUstoLIBXFjEPEvRL sq/nokngGJPkb2NSvpNGFW7ssm8okA5FrtWfMdz5RaNvny4ZOEgtIbWoEWbE/5YNVTZLWduAoxOnIPBkGtA8PdcWhfDZAaBVZG&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c823648f66bd37cb9b6c07db64a66c92)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=v8v8d509RraVA0H8/LXQNmHHY9DE2eERavSzB1AJG6I=&c=lct8JgH1dfrxwLLMbyyRDmsW b9lqmf9dsCtyOXySex57rdHkEpQZDKYLVZskdNBQCwyfcPFGSufYtmCF0/UO1h50oarOdHZjkaQSNtSKR6o2kyFjKDv8 8LQVEebqXA&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (a0ad8eda3604be712a233c26ffda1b34)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x= GZzcelh878Tk2Z0HEKWffbtd5ZDyOEGZzdNriItZ8=&c=XxxEaXxIVfARPiZyJ3CWy5Cp1d9mWS0XR3/c9Ojg1YqrW88ineHLgfIUKzHzQYONtfFLOpgQkQDHKkripmqClyk1pNrfL8h6QEGCV6pFzNW76bjq05IFDejCrTb29tNo&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (f45f8f1e64ec63f6a86667453af78432)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=EpKCRdkfUNWk6JaKpwjM61iz6XUD78kDhx6oirG9cgM=&c=9K0kZbzdTBsJd3f6nZBPIBLUpmZpQxjqFKIJytKrw5l7Id3JXoF3 jvtlQlJNbkgJN5F8S13RZyjtr Pm/bIosc6tgkOoDktbWFHiC1A26IGXj7ykWCGP1tRmd50IdOZ&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (2ed1c685203bb57b498b94ad5a835b1c)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=GRKwktm40FW92/d/dgHkU764hLsZX9/PQUM6zsMKPPA=&c=y Co1cbIrYowr6TeMumqwst1ULmW UlYXGIrPYGjWSs4UB M wxqFHGlhB791t2D4lPHXj4zv5y kEupbSb067htomxxhOnSXRCKLLBOL/Sjosc4JhQswIse1oLRUUSq&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (a0ad8eda3604be712a233c26ffda1b34)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=Dgir9PVwGBCj9zNUWBbkYUTQH1fRqMYD48hosfML7x0=&c=S8XdfzUV743nJ2qp PLf6itb35AAOxCt4vlOmfKco5OkeF7E1ylUslOleMq3TEdLUq7kP4zAdwS1UA6Wsl2VSCbqpCnr4oFtNzDLF0sitJHTlLimHUMgUh4ksmQTJdd4&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (5aaa42314fd695a0f8ff14186ccc0ec7)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=qx/bNJFR2 ZjfHJ C40FRn0Pdjj0RdIVLoZVxMmV5jQ=&c=veVp7WPUDME3mpOjVORvYaE8RGJ/z3TlbC sbglv13diFJ9YBn4wSiuCEaLDx6aaTbzBebEeJLol/4g83em/a4Vx8nTgTf1VEOlRGW30ue0M WcXMKD8dRWFAWjXqeqO&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (f45f8f1e64ec63f6a86667453af78432)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=A5A QYidHnnQxoXSs/mH/cYMg3L31dLqg9GN5eoT1VI=&c=jNmevtu9mg8SVoBnLuDrdq9/DZJgeW8kByqasazO1mebS9JdYi4kR8IWzDq3m6c Ywuk3tSL0y13SYq7Qo8/To6Y6tpRF6Ndt 9GfHoIaj rc1YvmZ044JnDooLF7kYh&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c440b33166e730a65554dfca58abe289)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=IJgBnAQ3yyaC2R88t/rYgPvWaTK gPXS0J9FtGoGZ8U=&c=SR4UnIeQM T6KTw8xaDIWifn5jeisS4gI6X0fDvLX6VAXCR3Tcakotwo a0jNJkrBbxO2a2a/nEjXbbmBwy2bazf7N5V2ueXEnT8Q6Hay9Uwwd1BiprPYWivzy3mEhNO&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c54c75bced882520c391021c4d8755b4)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=ZXVRKK97XzDLFMwktGweP/mF7F xMjevKWpQHz 7JFo=&c=KU5M FNVcHcB29ta6ZoYrj/dfwtf8J8THHJYeyCnHmFhGDADyyI3i4acOv6a0vAK2DC00j9hLUAIddnuNu6NUBIlMNHef KFxvf1 RuakpHx5iljiZMUir4FGXJaDV51&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c440b33166e730a65554dfca58abe289)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=utYZeIMBZQGbI5GA fRcF9H0LAe0CXiKPAjD7z20n8U=&c=7Eis3sxkAwh0FWoQMWVKi2eiagXqx/aUn/2UlgG5eDFMf6 FkuSv6tc6WzodCy8xNHujnPj44HlyFiCmAaz0VnEDe37YuGxKZdFlRuJx6uDDq5FdgfGp68yKB DPuPEZ&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (3d6378d70777a8fff1bfb3839e7781d4)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=1jL8OltlfbqiMZrty2wwzMrQDqZ eQHC9ijjdcsVNuU=&c=15xtcItr35QxQ2pqC0rzCS8JgVOxTYwHgrajw2RktBxV/meWPM1dy9LXztp/vnxm/PjbpmfxzxOn1b4kBGynqxBzZa9JGI8Lb5joZFJAiBnvQXHu8Tq72YGKZ6RPdvKH&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c54c75bced882520c391021c4d8755b4)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=Ju1lbwqgYJtRxM5PcuJew3LQd3s0mJ5Oz13YF69hGpE=&c=xlgl16VmFtChEYqdMfpAXLrcanAkJbz2QQ6S/je1GCK8d7Z6/1zV8bNDJgrrblNicMbGsRGCC7FvxLeUJApmU4lcWYPZCx7FmVEvHA2GnA283zHTeEEeG4iimjMMFVN1&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (677c263e9df91bbcf8afd24aafe93515)

1 / 68 (PUP)

http://www.tourstownnew.com/c?x=7pKs6qe0PsSuBvgwWS2HSHTeTkWWWS5ijrumkseZUe8=&c=FJFE93mi1OYvtiEIkGb2Ltsj0NQ5oxRMZlAKGr1AEHoFhaJbdVSQiCXCuIBZ7UctJ/tIcv0vZhF9b7aHn/V6ZKSgF35elLFQ4/KNMxGpN/EDgad/WzUeAzdefZwLBYEw&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (87bc1b4931fda9c84f78c7e6227158c9)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=82FbNlu27wggvSeruuwPqEFxIRRsHUzVfNUiEtIyekI=&c=ZoASZ2o2nM5uVxzE/QZMRuC28hfhvKRCoVqlNM/gbVY2UWzreZuRETWbJ4xj/vJwgurO6/2Qh5hP8xJFSuMg7HdzE9g1/HwMw4ZcwRTnQOs9ciRkt6e7i qcXEW11BoN&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (ae79c2e18f51c517ce88bfcc34a39c63)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=fY/G0B31 hyaOAwr15iL6rusB9w01vE2f04lHEf25ac=&c=o/0ISjdu23tXCRmgniOeM qlRngcRFn NdplOxlGosfUxLMUso0KJFYt7Pj8Ts3wRXpbclDsghw uXQjT3E6Ps9HSOJ6uCQ3BRHP52TJYDS6/0leOpZ9R2tZ6FEmpTZ4&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (78b0d1debf7c428bc84526f21d040cea)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=LAn/rwUGe27t0Rjv0ljKzBpBioXCPGpUvvBGScRf oA=&c=S76G0fzl5psAaU8lC9GlrTkTOXUAh211BRY6wSW2Ru/7XclTXLYMRRluDoMnMUzeS0exPdIdXpNCPvzeuZXdUzxKYDkXbDcyBnkofCiqfYlUwd5XTS8rvRNOeVQ7rHh2&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c919be65ea4817f4c9da5c8999c47cc2)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=SbuBW8IcGsKxw pTLP98SsI5NOmlW8HLQw0WdsbS/uM=&c=QiamrUDd6g6urqQxuyfictJ2BjlC3xrq9hDdz gxrhA 7mx 5OWDJJZJmI6eY3oxiYFZsTrxG uYzbwSkAXPgfNLf/oLOQJbmFOAqG5V7L7VCpu/qDBjHsQiSAqRyBn7&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (c4e7b00879fc53061b4ab98a3e830ddd)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=Z3O2pYaAsOFWC8clReH5eXC36JVd7GpfBhifX6kvZg4=&c=qN/jh6XkWgFJ7OprGQlcr5rFwAenTZBxofyE0b20V2bT3aYJ1reHXSAITAIOr1WParwSYYR0cyMuqbxvnSPEEGtOZxcTVV AS10KkNpJsEefyQQXWi9cYmgnksAfqrPc&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (5aaa42314fd695a0f8ff14186ccc0ec7)

1 / 68 (PUP)

http://www.tourstownnew.com/c?x=LywzO6GUrRTsuqpag9/HSIMZwy4zdwkFt9IYd0PwJzA=&c=1lgkRkvvfdyAi/w7ic16g9nrXj5SxpMmKb5el10EuU8cXxsP/YAn2sCtK4vW1IoayVTDUDbDtg1M6WhsPByi6wC880HGrr5EBVkDvlG8meEMZ/Jue/hnDfHfjTxUcmm9&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (5a207b863092dad2414b9390fa7341d6)

1 / 68 (PUP)

http://www.tourstownnew.com/c?x=jHFrntDEM0We3ldcQhmtKEeVms YVOPWtLZaXWn0JvQ=&c=iluxdqE9mjjbdF6CGIhl/l4kL4MQ0R0J4fvFR0QkbzUifEUQwDFENuV/tVyE5R6W63PS 4DkumuRxDvmAcTXhcBUnKhqV9 yZSsz7ci3SExuPlwwyEpabHPyVw5qN /L&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (5a207b863092dad2414b9390fa7341d6)

2 / 68

http://www.tourstownnew.com/c?x=BACVg229l7K5PHJaEvZoD6w5xUUWCfB6dOQVCB3kSik=&c=2v55VFwVpZXmtrlYgMWq1g5q24DZlRgLXazvP3TpZEvr5U7xMv3ZNiuVnsz9eiPPnZKbOMBPD2gnQmEpJK9dquwgvm5NRsffpNKeL3oZPqsEwARu21nWMIMIHfd4k5P0&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (wrar510.exe)

1 / 68 (Adware)

http://www.tourstownnew.com/c?x=rn24LYlj0NKyYbqowMPM8kvXA25btD0x6IAr MTjAXc=&c=y5IrUn7iU/wQ/F1IhiCl9FIBexPxq0 MLW9rq CC/qj gJDvZqqlkUFPHqCGvHPVx9i70V/4qSiKMDZtGDRx2kIea99gEF6fK4dOuf6vVttBA1Ki/uEbF06Hx9FdM2KK&downloadAs=WinRARSetup.exe&fallback_url=http://allmyapps.com/binary/1410/.../direct-download?token=90c4f1d505d730885cc98010575156fddefdb54b (f45f8f1e64ec63f6a86667453af78432)

Latest 30 of 295 download URLs

The following 6 files have been seen to comunicate with www.tourstownnew.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.