home

manyfree.info

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain manyfree.info is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 manyfree.info records

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.NewMediaHoldings.Installer (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.installCore (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore (M), PUP.InstallCore.RES (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.GenericW.Installer.Meta (M), PUP.NewMedia.NMH (M)
92.59%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application, Win32/InstallCore.ACZ potentially unwanted application
7.41%

VIPRE Antivirus
Threat.5084491, Threat.4150696
7.41%

Comodo Security
Application.Win32.InstallCore.DVL, Application.Win32.InstallCore.DCS
7.41%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
7.41%

NANO AntiVirus
Riskware.Win32.InstallCore.dsmvxr
3.70%

Agnitum Outpost
Trojan.Badur
3.70%

G Data
Win32.Application.InstallCore.EG
3.70%

AVG
Adware InstallCore.ARF
3.70%

Malwarebytes
PUP.Optional.InstallCore
3.70%

Rising Antivirus
PE:Adware.InstallCore!1.A30C [F]
3.70%

The domain manyfree.info has been seen to resolve to the following 3 IP addresses.

54.88.203.136
ec2-54-88-203-136.compute-1.amazonaws.com
April 1, 2016

54.84.209.207
ec2-54-84-209-207.compute-1.amazonaws.com
December 17, 2015

54.88.93.196
ec2-54-88-93-196.compute-1.amazonaws.com
September 1, 2015

File downloads found at URLs served by manyfree.info.

0 / 68
http://manyfree.info/?dl=1&pi=ATA0AZLwAzM1Ag==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1E dWE rLtDK5y2rgm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKxlvmNjhLx5vmNBDz1CDSDjhTnmDZ0wvmNpDZ1fNZMyOZC4AZCRvm5EIKiWXzCyOTa3NzAyNZa=&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0AzARAZ7wAZMq  (googleearthsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=NZndNjA3OTAF&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1dIXv02K5BUKxqvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzcyNjcdOTMFASDPDdlChV8dATndOZg3AZaz&pd=2323UEsJck1P73xp2mLu7dWt&campaignId=9jn0AznFNzawAZMq  (virtualdjsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=NjA3AZc1ATcw&osos=VdluDrW3cw==&dr=cHaWck1JcmlEIK4m2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1iTkDj rcWDK4m7z0RvmiWAkDjIKiWXzcFNzA3OTMFASDPDdlChV8dNzgwATiFAZaz&pd=2323Um5j7dVw2rVC2dWy riu7dWt&campaignId=9jn0AzMyAzn0AZMq  (originsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATA3NjAdOZAzAw==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1GIKFC rLtDmWyUXsjvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChV8zAzL4OTCwOTnm7K2pDZ1fOZM4OTM1AznyAw==&pd=2323Um2P KLtIdl3ISFj d0=&campaignId=9jn0AzLwNzg4AZMq  (kindleforpcsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=AzL3Nzn3NTnyAi==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1C 32u rWPDk1t7KFPDdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXz73NTn3OTMFASDPDdlChV8ROZCFAj74AZaz&pd=2323Umluc3xP rwt mV3UmNJ i==&campaignId=9jn0Azi4AjLwAZMq  (downloadmanagersetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=AzA4OZCdNZLdNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1j 3Vu2rVyUXN0cmlGDS1J mRp mLm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sLQDj rcWDK4m7z0RvmiWAkDjIKiWXz7FNjnFOTMFASDPDdlChV80AzadNTiyATaz&pd=2323Um2yDK50UKtp miu7dWt&campaignId=9jn0Azi4ATa0AZMq  (counterstrikesetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=OTCFOZiyNT7y&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhL55vmNBDz1l QDjhTnmDZ0wvmNpDZ1fOZgzNjC4AZCRvm5EIKiWXzCRNZCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0Aza4AjLyAZMq  (popcorntimesetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATMyAz71AZCwNM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=c3aW7mcm2r0Wc32lDXimcHaWck10DK5t2mll2dVyvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzM1NziFOZMFASDPDdlChV8ROZcRNzazAjiy&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0Aza0NZMwAZMq  (teamviewersetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=AzA3NZAyAZC0Ng==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8dNjC4AZMROTnm7K2pDZ1fAzi4NZnzNTnyAw==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0Azi0OTc0AZMq  (firefoxsetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=ATizATM4ATg1Oi==&osos=VdluDrW3cw==&chnl=ab-b_sa_sign_win8_topbalance_2015_2_26-0&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1rSSDj rcWDK4m7z0RvmiWAkDjIKiWXzLyAzAzOZMFASDPDdlChV80NjgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzawOTgwAZMq  (googlechromesetup.exe)

0 / 68
http://manyfree.info/?dl=1&pi=AjCRNjcRNTLFOi==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzi1AZMzOZMFASDPDdlChV8yOTMwAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzL0AzndAZMq  (chromesetup.exe-setup.website)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck11 ml0eS13DKatcrRPeKVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzCFATi3Ajn0ASDPDdlChV81ATCzAja1NZgy&pd=2323UmDyDKVt 3xpUmNJ i==&campaignId=9jn0AjcdNzMwAZMq  (icreinstall_unitywebplayersetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=Ajg4NzcyNZgdNw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxyDj rcWDK4m7z0RvmiWAkDjIKiWXzCRAzAzOZMFASDPDdlChV8dNjgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjgzATi0AZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATAzOZizNTL0Nw==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1zcrW0IKDFvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1CDSDj7z1nxSDj rcWDrLm7z0RvmiWAkDjIKiWXziFOT7dOTMFASDPDdlChV8zNjAwNzc3AZaz&pd=2323UmxJ2dFB d5CDrW3 QFj d0=&campaignId=9jn0AzayAZ7wAZMq  (spotifysetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=Azn3OZi0NzL0AM==&osos=VdluDrW3cw==&dr=cHaWck10DK5t2mll2dVyvExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV80Nz7FOTgwOTnm7K2pDZ1fOTnzAj74Aza0Ag==&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0AzMyNZC0AZMq  (teamviewersetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=ATiRNTCwOTndNi==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8yNTnwAzgwOTnm7K2pDZ1fNTg1OZayOZn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AznwAZcyAZMq  (firefoxsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=OZL4NjcyNZL=&osos=VdluDrW3cw==&dr=cHaWck1o 3xzcrW0UXNoIKVBDkD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWiLLm7dREhKVuvmAWASDChTMm7dlChV8FATc3NjCwOTnm7K2pDZ1fOZnzNziFNzMyAw==&pd=2323Uml0UXsJckFj d0=&campaignId=9jn0AjC0NZi4AZMq  (hotspotshieldsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pipi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=7Kxu T1Y73vl7Xxp2mVWvmCWcyDEcmlChSDBDz1l QDj7z1vVkDj rcWDK4m7z0RvmiWAkDjIKiWXzi0AjLdNjAzAQDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvENyhXNy7yD0 T1uDHi1vEsyhXMt2dluemlwvm5EIKiWXziyOTM3NTA0ATgR&pd=DrW3 Q1p EN07KRBcyFJcmc=&campaignId=9jn0Aj7FAji4AZMq  (winzipsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=AT7FOZn3AZg4Ag==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck13IKF6IXMm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzARNTn3OTMFASDPDdlChV8yNzaRAj74AZaz&pd=2323UEsJcrluc3xP rwu7dWt&campaignId=9jn0AzAdNzg0AZMq  (winzipsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNzczNjC4AZCRvm5EIKiWXznRNZCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0AjgwAZ7dAZMq  (popcorntimesetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATAFNTC4Aj7yAw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=c3aW7mcm2r0Wc32lDXimcHaWck1zcrW0IKDFvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzidOT7dOTMFASDPDdlChV8yAjL0NZc3AZaz&pd=2323UmxJ2dFB d5CDrW3 QFj d0=&campaignId=9jn0AzAdNjcdAZMq  (spotifysetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=AzM1OZM0NTAdAM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzndAzidOTMFASDPDdlChV8FNTiROTa3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0Azi0NzayAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATg0Aza3OTL0Nw==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8FNZnwAzgwOTnm7K2pDZ1fNzn3AzayOZn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0Azi1AjadAZMq  (firefoxsetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=AznFOT74AZM3Ag==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sLQDj rcWDK4m7z0RvmiWAkDjIKiWXzazAzAzOZMFASDPDdlChV80OZgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzMdAZayAZMq  (googlechromesetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWIXim7dAWSVim7dREhKl0vmAWASDChTMm7dlChV83Njn4AzgwOTnm7K2pDZ1fNjLwAj7ROTn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AjCyOTcyAZMq  (firefoxsetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=ATC3NjMyNTMwAM==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzLyAzgFOZMFASDPDdlChV8wAzL0AZgzAjiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzLyOZC0AZMq  (googlechromesetup.exe)

1 / 68      (Adware)
http://manyfree.info/?dl=1&pi=Azn1AzL0ATM1Ng==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1NKkDj rcWDK4m7z0RvmiWAkDjIKiWXzndAzgFOZMFASDPDdlChV8dNZC0AZgzAjiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzAzOTayAZMq  (googlechromesetup.exe)

7 / 68      (PUP)
http://manyfree.info/?dl=1&pi=ATaROZCFNZAdAi==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8wOZn4AZMROTnm7K2pDZ1fAjLdAjAyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AzA0OZM0AZMq  (openofficesetup.exe)

7 / 68      (PUP)
http://manyfree.info/?dl=1&pi=OZiFAzL4NTA4&osos=VdluDrW3cw==&dr=cHaWck1mcmWz2H2pcmLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXz70Nzi4OTMFASDPDdlChV81AjA0NzARATaz&pd=2323Umluc3xP rwtDrW3 QFj d0=&campaignId=9jn0AzM3OZayAZMq  (frostwiresetup.exe)

URL:
http://manyfree.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.