home

www.towersvaultbundles.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
towersvaultbundles.com

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Zona.Chetvert.Installer.Meta (M)
100.00%

The domain www.towersvaultbundles.com has been seen to resolve to the following 18 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 24, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 27, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 19, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 27, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 23, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 23, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 4, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 4, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 4, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 24, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 24, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 24, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 24, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 24, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 24, 2016

File downloads found at URLs served by www.towersvaultbundles.com.

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=gsUGjbDfvAh 1sTH0SXct9J9 NrJo2DP9a7vTLKAr0=&c=Bid4o7Cg09qXKskdsvwdtaWgikYIiNvmbMGiSXt6rXBWVs05cworACbfFT03278ORzTCWwCzcQItvTEw FZRilkBFO3KBjBv7/oDNH8MQWm9zJhwIlc2xxiyAVpjSyhB&fallback_url=https://dl.appzona.org/.../facerig_v0.69_build_271_beta_x86_29.08.2014_eng[wPD5].exe&downloadAs=facerig_v0.69_build_271_beta_x86_29.08.2014_eng[wPD5].exe  (lesnik[ds_j].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=L9wD0ZO2vUrzV TcmZa3WI4m1QF08KVwM44zCPwE1So=&c=EboFtgVqV2SxqXTzKXIKH3z/qvmiVEuykUvLnfS8QFLvHMp3tlbg2gLP7eSGCUxYN2XLo7R3j5hySu6mzLVnFE 2uKFA8X4HLGA2WNqI60dabqVVeCKz3p3oR9pIbv3v&fallback_url=https://.../ZonaSetup[O39G].exe&downloadAs=ZonaSetup[O39G].exe  (zon256.tmp.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=PuJIEnAw71sfX6dGDfXq1TA8uJ2Hc8 bXIuVfcFWm1c=&c=yoHI77/3dJpJ3pmx93Pzx8k aBM/citTNboGdY5AfdxDpaeQuvSBJqins54GAff/T61d1p7dms3JOwKuWAmZ5QzAQ4 344p4UX Y2Tzaa uUCjkMovfHwEZML9Igw0q&fallback_url=https://.../ZonaSetup[OVs9].exe&downloadAs=ZonaSetup[OVs9].exe  (zonasetup[ovcf].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/7F3GnYg zB1zPdlP890sR47h149c p35KbcteLtQD7ha0Lqb3dmcMjUCzO_DbUcT0X loyQc YnADgY1l_ELLH2IzEZ_171grdgP1mEOMUQwGl2hn8yrfbELTL4jwKPsCo5PhhjUxOMwwNq0y3PvrXzBYR9CTcFv_bXgQ1GYMwmrtSoNNMg=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbSF9vS10uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/vKc4q35rh_M8lFRD58hbaPUqdqS3ACtYqYJnqdf0rAVJQ_VU5z9ozj_ZBUCLmGJAJhvIHXMMR42ZZGpc7vWeE6FrhPPVaEgIU6Jdc_5goTboa7DX36h2327Eg9 MYYHcNYs1OUyroHAP8dDJJU9vTg1wn2xWu_YscZgSeF2Q6VlQXphB0Z0=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbcUo5RF0uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/cCcO7nFtkfpsBXCDtaLdusY_pnnvwLPUQiddKHBy1onWcXV3vpV6nKASvPvT9FBVmNjRuMM R3TkrxXr611ZGYpaunVu2s_CIzVy1BOMZltPg6OJYFXKrd2GynK2F4 VCC6uf37lu Jd4xpZpKtfTZIEbEaGaVQrqGkxx95YmPHAQ16T1oA=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbRDNoS10uZXhlAw==  (93007c72-87b0-251f-f34a-2e30c04d73e4_1d1d4a56efbedc3)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=ZkvTpOek8Fyokb7pYpeL66WWZOZgLhLUTZK66d9zsko=&c=81ztpEzPs6/Bpub3TFgc9k06qL44f3aHMRJiVRpN3akP8OxP5CNI1fyU26CQdCXASYaqzX3s5gsNLwSQmRAVOQpknoTS11VsO5drKydmhiBtlUDoD23A8pLR7ijo1nzG&fallback_url=https://.../ZonaSetup[5Rfh].exe&downloadAs=ZonaSetup[5Rfh].exe  (zonasetup[opin].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/Fw0rtV23nOldueriCnpzZNZoH3dqRMUEz9CTaspztG4GdPRcjVY_62WoeI_wUrHQcVkHQjY q2PEidvED2YCVA608aYU04PlDVVgTYHNQfLGBrEZieDcAKkeDENXLv19WEBii5mmxgYUDoLj7Xo KfRv7IpNrXOAD9J8vXlmmwvgyQjTlxs=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbcTIwSV0uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=DSjw/iRv 44ncBwywhdCmbWDCViV4oxHrR6g6SnSJYM=&c=RnSToAFy60SvSKN6BBxCQk4WdM5WkqiD2/LbWogvXfVYR1/tD4LANOmJfoaTQYhwb9k6Rz6ohYVNuWzdXDuvh10Rztg12MCznYw83LfpT/gZF07jMMae3isCAXXSMvEl&fallback_url=https://dl.appzona.org/.../vlastelin_kolets_voyna_na_severe_the_lord_of_the_rings_war_in_the_north_2011_pc[PTUl].exe&downloadAs=vlastelin_kolets_voyna_na_severe_the_lord_of_the_rings_war_in_the_north_2011_pc[PTUl].exe  (zonainstaller__6_.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/BeEtCPD2krBladUQQ7f2Xi2OhtEFWH8AV1bD3l3gZKQGpmY8vEOloyVm4_oCoerdPFP4ITpfsqF3vbhjU7RqW5C6kVJZQ0MiGDDsFOO7mt7IlhwQHaRnpaAwSsZewsGDj_ltX2x6B6ZxZhaxzx8Bv2V4k7iiYsLbFd7G2m JqA80ODEKUsA=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbNDMyaV0uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=0fdpgbuPp39M6DJ0ei/YWEJWYkthPxl7bJ8emqfb4eY=&c=GTDHKolVEon0ms7nna7eQxehf0tKQm qdZ0TRvHmukNZ8k4OJ5qH0Sdps6FAaRU1mPnBVtJAbUjKoRvbOUDkAsMfgU1DLP/7e 5aHpmWq90wscWSaIQAeGVqKGZ2EnvO&fallback_url=https://dl.appzona.org/.../stalker_zov_pripyati[CRz4].exe&downloadAs=stalker_zov_pripyati[CRz4].exe  (zonainstaller__6_.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=4dnECiYeBeD PcnlOeJepLTpEuMD1v3vYqUWgCkCbAY=&c=BcAhfL/c boNCuv2Abu3NAEkKIHfOxf2FBqYS H565sEbdYGduSW8Fre/EryoBHh5lFktMOyZ3LEL8xkQ5cZdE 98VnJ9SIL6M4n2qYC8cdZwDqjGfB2w/91E7zuA08f&fallback_url=https://dl.appzona.org/.../povelitel_zony_dlya_stalker_zov_pripyati[Lhzw].exe&downloadAs=povelitel_zony_dlya_stalker_zov_pripyati[Lhzw].exe  (lesnik[ds_j].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=hOO3r1dNm4SohIH DO0dDMr1qQlXXx2bHmOig2ptPQQ=&c=lqMRbuXhq6YcQaNBaNg6plKSvvYxgSJFt4JUrjRZg248vHKhM9MoEX2WeoJprij2iT9uABHHdpjkGHByji0tmorB9lE3mIV5chOhTbCFR3hh7SCrq18KXKPxqU8KXL3O&fallback_url=https://dl.appzona.org/.../sony_vegas_pro_11_x86_64bit_2011_rus[51OQ].exe&downloadAs=sony_vegas_pro_11_x86_64bit_2011_rus[51OQ].exe  (zonainstaller__6_.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=HglUqFOJIR9sLMZmBTSqB/MSMdYMpg0lRw1AV4xzJ10=&c=8NhvaLpq6Y/SD/wWZtOys8BZSSainEzbR0Im0jxBpeuLnCq70Lm5fiHPyECb0K5lbvfe/Fx8ViSD7/B5m /ufYfl8dn7p14N/Dt5585afaw HJLHoJMG1hm/nR0Ij QH&fallback_url=https://dl.appzona.org/.../ZonaWebSetup[CuJV].exe&downloadAs=ZonaWebSetup[CuJV].exe  (zonainstaller__6_.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=/ve/izG3xUc/59QMh1QhK1XHAkNdyjOpKJWUlmt75Tk=&c=ytv19s0M xA2sBqnAQN2XoqbY7eR9cl7uEG8Ks9m Oq4GhhWi1wBsj1XnA 8y oFihP9wz vLTnVokaErtmDzZMtodD8Gq91 WhU2kLb60jqWPK XtyNiR2GLOVKQOBo&fallback_url=https://.../ZonaSetup[Ccn5].exe&downloadAs=ZonaSetup[Ccn5].exe  (zonasetup[opin].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=wRKoOsIsqH/fx3dRWSfllr5PcRhxapjDZE3Y8IbZ FU=&c=xNI h/akacxR8Nk/iiGqdmroKR1Pr22rCYZBil1bV4/EPtpZNo4qSTOJ02oDuQXMOeR9fJBRSEJN15cfa3FXji6BvTEiO/GBaPQG UipIvYR6ERc18wh8e2Gc4gIpxQ/&fallback_url=https://.../ZonaSetup[n3Sw].exe&downloadAs=ZonaSetup[n3Sw].exe  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/f7F3uR2lRpsd2UkqiHN t TbwVvtjQjIiPf_ryAtR5MdXt3aIgcdhtJWd 0ERtvvLtCG_zLR6IM3kCIhT6Gy2LlssLbZOVcWAxvdbGoWcWUKxY5s2y8TNxM 5r3FHLPOME71e 6Ygvua7i6ocS5gh5eXce_rlyFvSciUE0_j 2USSCU25_U=-GykAAETdFttbsSmGwweGqQsT7EFEkUUixX0uWyVSjJTS4nr6Pdngp0HWnoEP  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=o1EJsOpa7mL/3jRHMzz8fjm7UdNeQDmkfJnH7pLrwb4=&c=rqsM2bjitYPJsOC6ic4YDm7yL1fetAyoJU76bbOyUjN7W3yS6y5dwhG8WF7zoPjiwFy5GPsT5hqI3ntme9zZauK2UdSRDcn0LVXA8QZ2pmRZoObyq4u4H9mkqxY2fy38&fallback_url=https://dl.appzona.org/.../rep_basta_aka_noggano_._sbornik_pesen_2006-2010_-_2010_mp3_vbr_192-320_kbps[OAw9].exe&downloadAs=rep_basta_aka_noggano_._sbornik_pesen_2006-2010_-_2010_mp3_vbr_192-320_kbps[OAw9].exe  (lesnik[ds_j].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/NRS8uhkGg XEroop_cMaw Z YIE6zKxH6Ua3aOzSA nb4Qq0TeHG_i4 5UaZSStUKKrBj5ndBhsrG4rSqi21Yb4QvlgaRTpPRBl9qSJIaf6kOqIvjimtlAxsqqPuCI4axw2WVZbUFuB2qxQMrchR MaxzITY XNBWuDttGZZlyE2edzl3Do=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbR2F3ZF0uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=REBByhmh4EJK6nOTAAWyIZKu1/k25X4AZHcy8sTbqRk=&c=85SfRY08nAXa dODvD9FqfjZUOJ6Sk3zxwv/ALzFfMxVlhwotKRHTm8M/1 4r/ RMl6rryDo2OuCqGXomyYf73Okwl0X i1Wqm7ehR1qM6xlNdRPKQaDqi/VKdYySXRX&fallback_url=https://dl.appzona.org/.../metallika_-_best_of_the_best[vjr7].exe&downloadAs=metallika_-_best_of_the_best[vjr7].exe  ({blocked}.exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/9P CExLBYui0gG bbzjVbiS8oTzDtKrBAdxT0CA7_XNG19Go0WVWlHCKtZ_UqpRi8gjBAqRRb7dBB3Cr5kDG5VspBgCB3nQ0ZpSdf9al n8XDH PVt fglXOZ9n3bcsLg5qtuQX2C61dExrkmgFv07og3wxODcI0lEXIjfmPoBrKtYsorfA=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBbbEJlUF0uZXhlAw==  (zonasetup[pnzz].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/C03CF5mD0VaZkK8db6msi EUNji9IkYXbnhiCfDkPtE8ZPPGCZ wH_3N2YukOJ I3Qdp5mnmae3tS3uJVv0CDqEJ6_KBAabfXgfGWkLFD8yGklMQsJpWhe0nLju0ZjoxyRvj226p_SNAC09akNJNuKhGtBosmGssea8WqF5cEN10BwDSq38=-ixSAaHR0cHM6Ly9kbC5hcHB6b25hLm9yZy9ab25hU2V0dXBba1pVTV0uZXhlAw==  (df387fcb-b0cb-696c-82c3-996d29dbc581_1d1c4bad5dd470c)

0 / 68
http://www.towersvaultbundles.com/c?x=92cdHFwe92w9RsqoEWFB9BJSJbTgXuSrGPgCO4j1QSs=&c=0TgGsuTgsXlC1hDMIZIeONtTEtuXRC6bR/acql4BoH6ZP8bVJ/9FvaDjeB0USABJymeCRL7qCR8tvPA04m MgrP6/cXvDweuUIf7QZfMPZ/n0AJjU1Lb7cAoWLbm0t/M&fallback_url=https://.../ZonaSetup[iZz0].exe&downloadAs=ZonaSetup[iZz0].exe  (863a654b-93e0-97ef-4a69-01de6127803a_1d1bb297cfb4da2)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=CS 5wYLg34s9WUOfgkOQvft1IRb40 MJlu6YEEmXCEA=&c=ewtCC2 UaeXxinhuU xnZ0jkc606RDT3x91pbNdUaVJ4tAG6DkfRCXaRElVKhwVz4YrLe8qS8ab5He8aSBz2HXqPW2b8AcmkxNH1hNB9YCD2krLmJXTPFMj225ppxTzb&fallback_url=https://.../ZonaSetup[SyJY].exe&downloadAs=ZonaSetup[SyJY].exe  (zonasetup[3_ms].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=cn2viHUy95YxAyHgU6vjzEwma8jyeCtTB97519LbdRg=&c=aOccrm/WN8FiUlHqreUXIxGESSEy/slolTA0LtmAmA9QEhjDDJ7iYW6DnrCyOTnMscfMISZ5H9AzmzOAhlRzyx8ROAOQxkLk2ww/4cD70oWUGaWbiaQN0XUk G2DUIxk&fallback_url=https://.../ZonaSetup[5MGH].exe&downloadAs=ZonaSetup[5MGH].exe  (zonasetup[opin].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=Tavhp3j4mdGdeXutEEhRWcO0zwX2rpF2BxjTau1xlpU=&c=ICzTpI3MPC64v1DMSM8a/ALP/aA7ikX3t8o1SfZlPe1yYm28fhvqJMZ1Xx10CFwqpm1FxR/qpJT tg02bmQF18LUr0Y2rLX2e7VBIpI/8VlqLjhjN3SAXbV50zy3gM0F&fallback_url=https://.../ZonaSetup[TdFr].exe&downloadAs=ZonaSetup[TdFr].exe  (zonasetup[3_ms].exe)

1 / 68      (PUP)
http://www.towersvaultbundles.com/c?x=IgsrigVoDnHwBUIDjIiLxRXNd OFyqJFUg60W7kC hI=&c=xvelAnGYiNu1l qmmfurXu/X9tThRLnFK/i7DVkiitjdJZVsU4tpJ3kd6Byk/9SaQIpLsZP8w7Pa18dytfwaJGQ/PPEmGgnmR8al8OFjY8yiy9MP0BAGojSdK0r7o7Yu&fallback_url=https://.../ZonaSetup[TARp].exe&downloadAs=ZonaSetup[TARp].exe  (zonasetup[3_ms].exe)

The following 36 files have been seen to comunicate with www.towersvaultbundles.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.