home

multiinstall.com

UNILOGIC Informatica Ltda ME

Domain Information

The domain multiinstall.com registered by UNILOGIC Informatica Ltda ME was initially registered in February of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sao Paulo, Sao Paulo within Brazil which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Sao Paulo, Brazil (BR)

Create date:
Tuesday, February 19, 2013

Expires date:
Friday, February 19, 2016

Updated date:
Thursday, April 30, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
1 multiinstall.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.Installmatic, PUP.Installmatic.Unilogic (M), PUP.Installmatic.Unilogic.Installer (M), PUP.Installmatic (M)
100.00%

avast!
PUP-gen [PUP]
10.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
10.00%

ESET NOD32
Win32/UltraDownloads.E potentially unwanted application
10.00%

VIPRE Antivirus
Threat.5062944
10.00%

Norman
Gen:Variant.Graftor.156076
10.00%

Malwarebytes
PUP.Optional.MultiInstall.A
10.00%

Zillya! Antivirus
Downloader.Agent.Win32.238227
10.00%

K7 AntiVirus
Unwanted-Program
10.00%

Agnitum Outpost
PUA.Downloader
10.00%

NANO AntiVirus
Trojan.Win32.Agent.dnvmaz
10.00%

G Data
Win32.Application.MultiInstall
10.00%

AhnLab V3 Security
PUP/Win32.MultiInstall
10.00%

Vba32 AntiVirus
Downloader.Agent
10.00%

IKARUS anti.virus
PUA.UltraDownloads
10.00%

The domain multiinstall.com has been seen to resolve to the following 2 IP addresses.

204.11.56.48
May 16, 2016

54.207.221.204
ec2-54-207-221-204.sa-east-1.compute.amazonaws.com
March 30, 2015

File downloads found at URLs served by multiinstall.com.

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=Tradução Coreldraw X7 (64 Bits) INGLES.exe&description=Tradução Coreldraw X7 (64 Bits) INGLES.exe&version=1.0&url=http://.../dcg1?download_token=4931e6d19acde18b5d7fcf89b36a096d77c63870789dc66a0fb5d8331182df5e&bytes=27.40 MB&filename=Tradução Coreldraw X7 (64 Bits) INGLES.exe&content=8  (traduaao-coreldraw-x7-64-bits-inglesexe_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=TROY_V1.66.zip&description=TROY_V1.66.zip&version=1.0&url=http://.../4Ug0?download_token=788625984f4a2af436b5e6f828e17f50b7f1e48c33005bca8e9c65016340f438&bytes=4.17 MB&filename=TROY_V1.66.zip&content=8  (troyv166zip_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=revosetup.exe&description=revosetup.exe&version=1.0&url=http://.../90zO?download_token=c367cc870d09d2bef1c68b3537ca65c72b5f03778b187b2f6d18bdfc44c374bc&bytes=2.50 MB&filename=revosetup.exe&content=8  (revosetupexe_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=Henrique & Diego - Tempo Certo - Ao Vivo em Campo Grande - 2015 - MODAOMS.COM.rar&description=Henrique & Diego - Tempo Certo - Ao Vivo em Campo Grande - 2015 - MODAOMS.COM.rar&version=1.0&url=http://.../98J7?download_token=c8d08835298ef0ef28997f1bd27052e1ed72187c7122578a7babb20565d9a347&bytes=120.41 MB&filename=Henrique & Diego - Tempo Certo - Ao Vivo em Campo Grande - 2015 - MODAOMS.COM.rar  (henrique_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=CD Henrique e Diego 2015 (Audio do DVD) Tempo Certo - Ao Vivo Em Campo Grande.rar&description=CD Henrique e Diego 2015 (Audio do DVD) Tempo Certo - Ao Vivo Em Campo Grande.rar&version=1.0&url=http://.../4Wad?download_token=149e6421a9e66292cba37197c005f3220f375d252e5fc7003cab321d3c8821c0&bytes=136.27 MB&filename=CD Henrique e Diego 2015 (Audio do DVD) Tempo Certo - Ao Vivo Em Campo Grande.rar  (cd-henrique-e-diego-2015-audio-do-dvd-tempo-certo-ao-vivo-em-campo-granderar_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=Zé Felipe - Você Mente.mp3&description=Zé Felipe - Você Mente.mp3&version=1.0&url=http://.../dm7y?download_token=91c11c269ca749d21b9751a2b4d2cc35f4f3eb40d9aba94ef61e068b897d573b&bytes=4.23 MB&filename=Zé Felipe - Você Mente.mp3&content=8  (za-felipe-vocaa-mentemp3_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=Thiago Brava part. Henrique e Juliano - Maior Que o Oceano.mp3&description=Thiago Brava part. Henrique e Juliano - Maior Que o Oceano.mp3&version=1.0&url=http://.../dl7z?download_token=66696d1763bab13ccce3b039fd19a5c3e434eae4d4d0c6674825c7345b0c277c&bytes=4.34 MB&filename=Thiago Brava part. Henrique e Juliano - Maior Que o Oceano.mp3&content=8  (thiago-brava-part-henrique-e-juliano-maior-que-o-oceanomp3_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=Jorge e Mateus - 31 de dezembro.mp3&description=Jorge e Mateus - 31 de dezembro.mp3&version=1.0&url=http://.../96vS?download_token=73d6297ca6737b12adcac2c6a69a641cb1aaf1120b31c9712613b51b6a75c14b&bytes=4.91 MB&filename=Jorge e Mateus - 31 de dezembro.mp3&content=8  (jorge-e-mateus-31-de-dezembromp3_10.exe)

1 / 68      (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=FNAF3.torrent&description=FNAF3.torrent&version=1.0&url=http://.../4Zz4?download_token=55456991d4bd0e1fe390a61558b6816218d4c74cec362c3e3e0dd6e32b6e7ade&bytes=9.21 KB&filename=FNAF3.torrent&content=8  (fnaf3torrent_10.exe)

18 / 68    (Adware)
http://multiinstall.com/get?lc=d93acd7dad89bf3365e62802a814241a&name=CAWC - FDG.torrent&description=CAWC - FDG.torrent&version=1.0&url=http://.../4R0e?download_token=7fa62ef9ff0c405b9fcd997f00c2f0b1fceb0639c8769e5329aeae88407ab54f&bytes=113.77 KB&filename=CAWC - FDG.torrent&content=8  (cawc-fdgtorrent_10.exe)

The following 4 files have been seen to comunicate with multiinstall.com in live environments.

TCP » 204.11.56.48:80
chrome.crx

TCP » 204.11.56.48:80
chrome.crx

TCP » 54.207.221.204:80
corte-certo-plus_80221.exe (Instalador by Unilogic Informaticaa ME)

TCP » 54.207.221.204:80
songr_198.exe (Instalador by Unilogic Informaticaa ME)

May 16, 2016
ca.offers.multiinstall.com

May 18, 2016
cdn.offers.multiinstall.com

February 3, 2016
ny.offers.multiinstall.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.