Domain > betterinstaller.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to betterinstaller.com

MD5	A/V
27b4bd18df716f0f8c24af912bbe7036
216cd49b238dee54cce3bf133d602479	[Artemis!216CD49B238D] [PUP.Optional.Somoto.A] [W32/SomotoBetterInstaller.A!Eldorado] [Win.Adware.Somoto] [PUA.Somoto!] [Application.Win32.Somoto.A] [Adware.Somoto.17] [Adware.Somoto/Variant] [NSIS.Application.Somoto.F] [Win32/Somoto.A] [AdInstaller.Somoto] [PUP/MultiToolbar.A]
bcbaa93970677b89922e0f3dc2c02224	[Application.Bundler.Somoto.A] [Artemis!BCBAA9397067] [PUP.Optional.Somoto.A] [Adware.Somoto/Variant] [PUA.Somoto!] [W32/SomotoBetterInstaller.A!Eldorado] [TROJ_SPNR.35CD14] [NSIS.Adware.Somoto-1] [Application.Win32.Somoto.A] [Application.Bundler.Somoto] [Adware.Somoto.17] [PUP/Win32.BetterInstaller] [PUP/MultiToolbar.A] [Win32/Somoto.A] [AdInstaller.Somoto] [Adware.Win32.Somoto.40] [Win32/Virus.Downloader.c73]
d76049549e96ec366cd1bd8a9575391b
718a7bdca8dac07af97a04463c911f80
9c129a294d7cc0fe9ed53d890dbde85f	[W32.Clodcc9.Trojan.5ad0] [Application.Bundler.Somoto.A] [Trojan.NSIS.r7] [PUP.Optional.Somoto.A] [Adware.Somoto/Variant] [PUA.Somoto!] [W32/SomotoBetterInstaller.A!Eldorado] [TROJ_SPNR.0CLC13] [NSIS.Adware.Somoto-1] [Application.Win32.Somoto.A] [Application.Bundler.Somoto] [Adware.Somoto.17] [APPL/Somoto.inh] [PUP/MultiToolbar.A] [Win32/Somoto.A] [Riskware/Somoto] [AdInstaller.Somoto]
df7c199544fcf6505e6c43bfabf70ad6
08a6cde1529b9cbc3a2781102b7d2ea8	[Application.Bundler.Somoto.I] [Downloader.NSIS.r7] [Artemis!08A6CDE1529B] [PUP.Optional.Somoto.A] [W32/SomotoBetterInstaller.A!Eldorado] [TROJ_SPNR.03C414] [NSIS.Adware.Somoto-1] [PUA.Somoto!] [Application.Win32.Somoto.A] [Application.Bundler.Somoto] [Adware.Somoto.17] [Adware.Somoto/Variant] [PUP/MultiToolbar.A] [Win32/Somoto.A] [AdInstaller.Somoto] [Adware.Win32.Somoto.bA] [Win32/Application.5d2]
f47565b9280771eaabee00c7cddf10f6
F624E7AD7DC70E82D147F8DD842A4F29
ec7d415737d1499bde3762b6c93a97a5	[Application.Bundler.Somoto.I] [Artemis!EC7D415737D1] [PUP.Optional.Somoto.A] [Trojan.Win32.Somoto.csrqje] [W32/SomotoBetterInstaller.A!Eldorado] [Trojan.ADH.2] [Win.Adware.Somoto] [Application.Bundler.Somoto.I] [PUA.Somoto!] [Adware.Somoto/Variant] [Application.Bundler.Somoto.I] [Application.Win32.Somoto.A] [Application.Bundler.Somoto] [Adware.Somoto.17] [Artemis!EC7D415737D1] [PUP/Win32.BetterInstaller] [Application.Bundler.Somoto.I] [Signed-AdWare.BetterInternet.SomotoLtd] [PUP/MultiToolbar.A] [Win32/Somoto.A] [AdInstaller.Somoto] [Hacktool.Win32.Downloader.Ao]
6c686b56afc8acb9c4f55d9126145dcb	[W32.Clod12f.Trojan.ea20] [PUP.Optional.Somoto] [W32/SomotoBetterInstaller.A!Eldorado] [HV_SOMOTOBETTERINSTALLER_CH1600A1.UVPA] [Win.Adware.Somoto] [PUA.Somoto!] [Application.Win32.Somoto.A] [Adware.Somoto.17] [Adware.Somoto] [PUP/MultiToolbar.A] [Riskware/Somoto]
9850e5f26f37c339424408a93e945c4a	[Unwanted-Program] [W32/SomotoBetterInstaller.A!Eldorado] [Adware.Somoto.4] [W32.Clodeac.Trojan.0b10] [Artemis!9850E5F26F37] [PUP.Optional.Somoto] [Adware.BetterInternet.Win32.1230] [Riskware.Win32.BetterInternet.dajrhs] [ADW_TOMOS] [PUA.Somoto!] [Artemis!PUP] [Win32.Application.Somoto.K] [Win-PUP/Somoto] [Signed-AdWare.BetterInternet.SomotoLtd] [Win32/Somoto.A] [Riskware/Somoto] [Adware.Win32.Somoto.45]
FA4E96517639830A7CE0DAEC5F9ED240
4d327f17d2bc227053fac3525d226105	[W32.Clod513.Trojan.2b4d] [Artemis!4D327F17D2BC] [PUP.Optional.Somoto] [W32/SomotoBetterInstaller.A!Eldorado] [NSIS.Adware.Somoto-1] [Application.Win32.Somoto.A] [Adware.Downware.1184] [Adware.Somoto/Variant] [Win32.Application.Somoto.C] [Win32/Somoto.A] [AdInstaller.Somoto]
301a61ca1afc73f7ac358e597f27b835	[PUP.Optional.Somoto] [Trojan.MulDrop4.11744] [PUP/MultiToolbar.A] [Win32/Somoto.N]
d05aec22d219cd05ba0b83fb1af8e54b	[Artemis!D05AEC22D219] [PUP.Optional.Somoto] [W32/SomotoBetterInstaller.A!Eldorado] [NSIS.Adware.Somoto-1] [Application.Win32.Somoto.A] [Adware.Downware.1184] [Adware.Somoto/Variant] [Win32.Application.Somoto.C] [HackTool.Win32.Downloader.AuC] [Win32/Somoto.A] [AdInstaller.Somoto] [Trj/OCJ.D] [ADW_TOMOS] [PUA.Somoto!] [PUP/Win32.BetterInstaller] [HackTool.Win32.Downloader.aqe] [Application.Bundler.Somoto.C] [Application.Bundler.Somoto] [Adware.Win32.Somoto.40]
d64045d3de2dcac733113825c67caeb4	[Trojan.MulDrop4.11744] [PUP/MultiToolbar.A] [Win32/Somoto.N]
87b2113245d34ee78a972b818db95d83	[PUP.Optional.Somoto] [Application.Win32.Somoto.DE] [Trojan.MulDrop4.11744] [Riskware[:not-a-virus]/Win32.Mazel.a] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW]
ee5de6da70f37f2539ce151781e9e126	[PUP.Optional.Somoto.A] [W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762] [Adware/MultiToolbar] [Win32/Somoto.H]

Whois

Property	Value
Email	BETTERINSTALLER.COM@domainsbyproxy.com
NameServer	NS-1626.AWSDNS-11.CO.UK
Created	2011-05-27 00:00:00
Changed	2013-05-10 00:00:00
Expires	2015-05-27 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2012-01-28	78.138.98.55 (ClassC)
2013-09-22	54.240.162.123 (ClassC)
2013-09-23	54.230.46.135 (ClassC)
2013-09-23	54.230.44.85 (ClassC)
2013-09-24	54.230.44.31 (ClassC)
2013-09-24	54.230.44.64 (ClassC)
2013-09-24	54.230.46.44 (ClassC)
2013-09-24	54.230.44.129 (ClassC)
2013-09-24	54.230.44.196 (ClassC)
2013-09-24	54.230.44.236 (ClassC)
2013-09-24	54.230.46.107 (ClassC)
2013-09-26	54.230.88.159 (ClassC)
2013-09-26	54.230.89.102 (ClassC)
2013-09-27	54.230.88.114 (ClassC)
2013-09-28	54.230.89.247 (ClassC)
2013-09-28	54.230.25.241 (ClassC)
2013-09-29	54.230.26.82 (ClassC)
2013-09-29	54.230.25.105 (ClassC)
2013-09-29	54.230.25.49 (ClassC)
2013-09-30	54.230.49.84 (ClassC)
2013-10-01	54.230.48.174 (ClassC)
2014-05-02	78.138.98.252 (ClassC)
2014-08-09	54.230.45.91 (ClassC)
2014-10-01	54.240.162.218 (ClassC)
2014-10-01	54.230.47.184 (ClassC)
2014-10-01	54.240.162.252 (ClassC)
2014-10-01	54.230.47.66 (ClassC)
2024-01-28	3.130.253.23 (ClassC)
2024-07-11	52.86.6.113 (ClassC)
2024-07-24	3.19.116.195 (ClassC)
2024-08-26	3.18.7.81 (ClassC)
2024-09-13	3.94.41.167 (ClassC)
2024-10-12	18.119.154.66 (ClassC)
2024-10-18	54.209.32.212 (ClassC)
2024-10-27	34.205.242.146 (ClassC)
2024-11-17	3.130.204.160 (ClassC)
2024-11-29	54.161.222.85 (ClassC)
2024-12-26	3.140.13.188 (ClassC)

Subdomains

Date	Domain	IP
download.betterinstaller.com	2024-06-22	3.19.116.195
downloadcdn.betterinstaller.com	2013-06-06	216.137.33.146

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]