Domain > installer.betterinstaller.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to installer.betterinstaller.com

MD5	A/V
0effc79c3c494867e021601b4776e236	[PUP.Optional.Somoto.A] [Trojan.Nsis.Mazel.cwhyud] [Trojan.MulDrop4.11744] [Riskware[:not-a-virus]/Win32.Mazel.a] [NSIS.Application.Somoto.F] [Win-AppCare/Somoto.236952.E] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW]
d34b38731f6ad23dfdbf5ea5d44fddc9	[PUP.Optional.Somoto.A] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Win-AppCare/Somoto.236952.E] [NSIS.Application.Somoto.F] [Win32/Somoto.N] [Downloader.ATW] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]
7342bd4fd72b49a0ba874cdbc999161f	[Artemis!7342BD4FD72B] [Trojan.MulDrop4.11744] [Adware.Win32.Somoto.N] [Win32/Somoto.N] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]
05a77174829f78243afa5ee232523d5d	[Artemis!05A77174829F] [PUP.Optional.Somoto] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Heuristic.BehavesLike.Win32.Suspicious.A] [Riskware[:not-a-virus]/Win32.Mazel.a] [Win-AppCare/Somoto.236928] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW]
301a61ca1afc73f7ac358e597f27b835	[PUP.Optional.Somoto] [Trojan.MulDrop4.11744] [PUP/MultiToolbar.A] [Win32/Somoto.N]
198e4f88e6918ec2f216e888d502c68d	[Win32/DownWare.W]
203c4e79f8c89afb481f3828bf946f78
d64045d3de2dcac733113825c67caeb4	[Trojan.MulDrop4.11744] [PUP/MultiToolbar.A] [Win32/Somoto.N]
87b2113245d34ee78a972b818db95d83	[PUP.Optional.Somoto] [Application.Win32.Somoto.DE] [Trojan.MulDrop4.11744] [Riskware[:not-a-virus]/Win32.Mazel.a] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW]
ee5de6da70f37f2539ce151781e9e126	[PUP.Optional.Somoto.A] [W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762] [Adware/MultiToolbar] [Win32/Somoto.H]
dc4f5a4de83d7533e3d67a7357528ef1	[PUP.Optional.Somoto.A] [W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762] [Win32/Somoto.H] [Adware/MultiToolbar]
1f6a6637d736b616d7b4c6afbc77e7f6	[PUP.Optional.Somoto.A] [Trojan.MulDrop4.11744] [Riskware[not-a-virus]/Win32.Mazel.a] [Win-AppCare/Somoto.236952.C] [NSIS.Application.Somoto.F] [Adware.Win32.Somoto.N] [Win32/Somoto.N] [Downloader.ATW] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]
809b60f681d6ace6c5ff2e6ee8d3ff44
4423378de6dedfd3b56b402af5bd4199	[Win32/DownWare.W]
0df194deacb53f7e06d162f98bfe90d2
ef2837fcd99aee1e31a2127781f9d95a	[Artemis!EF2837FCD99A] [PUP.Optional.Somoto] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Heuristic.BehavesLike.Win32.Suspicious.A] [Riskware[:not-a-virus]/Win32.Mazel.a] [Win-AppCare/Somoto.236952.D] [Win32/Somoto.N] [Downloader.ATW] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]
67d2213d5facc14d505e321cf68300ff	[Artemis!67D2213D5FAC] [PUP.Optional.Somoto] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Heuristic.BehavesLike.Win32.Suspicious.A] [Riskware[:not-a-virus]/Win32.Mazel.a] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW] [Win32/Virus.Downloader.394]
2ec401fe86a1b07ffa3a96f9b9bd0bc5	[PUP.Optional.Somoto.A] [Trojan.Nsis.Mazel.cwhyud] [Application.Win32.Somoto.DTL] [Trojan.MulDrop4.11744] [Win-AppCare/Somoto.236952.C] [NSIS.Application.Somoto.F] [PUP/MultiToolbar.A] [Win32/Somoto.N] [Downloader.ATW] [Adware.Win32.Somoto.N] [Win32/Virus.Downloader.394]
37881500e03c27d00d571a2c4d9301c1	[PUP.Optional.Somoto.A] [Trojan.Nsis.Mazel.cwhyud] [Trojan.MulDrop4.11744] [Riskware[:not-a-virus]/Win32.Mazel.a] [Win-AppCare/Somoto.236960.B] [Win32/Somoto.N] [Downloader.ATW] [Win32/Virus.Downloader.394]
522d9159d8a7aaf1a762b5d7c70b82db	[Artemis!522D9159D8A7] [PUP.Optional.Somoto.A] [Trojan.ADH.2] [Trojan.MulDrop4.11744] [Win-Adware/Somoto.237016] [Win32/Somoto.H] [PUP/MultiToolbar.A] [Win32/Virus.Downloader.394]

Whois

Property	Value
Email	BETTERINSTALLER.COM@domainsbyproxy.com
NameServer	NS-1626.AWSDNS-11.CO.UK
Created	2011-05-27 00:00:00
Changed	2013-05-10 00:00:00
Expires	2015-05-27 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2014-04-15	78.138.127.15 (ClassC)
2024-03-02	54.161.222.85 (ClassC)
2024-11-03	3.94.41.167 (ClassC)
2024-11-29	3.130.204.160 (ClassC)
2024-12-08	3.19.116.195 (ClassC)
2024-12-28	52.71.57.184 (ClassC)

Subdomains

Date	Domain	IP
download.betterinstaller.com	2024-06-22	3.19.116.195
downloadcdn.betterinstaller.com	2013-06-06	216.137.33.146

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]