home

Installmatic, LLC

Publisher Information

Installmatic, LLC is a software developer located in Miami, Florida in the United States*. The company is a primary distributor of unwanted software by bundling various potentially unwanted programs (PUPs) in a bundled installer. Thre are 6 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
7/22/2015 9:00:00 PM

Valid to:
7/22/2016 8:59:59 PM

Subject:
CN="Installmatic, LLC", O="Installmatic, LLC", STREET="80 SW 8th St #2000", L=Miami, S=FL, PostalCode=33130, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2d13291aee51b2226f83396fcd33c1f1

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installmatic.PopCom (M), PUP.Installmatic (M), PUP.Installmatic.MagnetDaily (M), PUP.Installmatic.BRDeals (M)
100.00%

Bkav FE
W32.HfsAdware
34.48%

Malwarebytes
PUP.Optional.PopDeals, PUP.Optional.Installmatic.A
27.59%

K7 AntiVirus
Adware , Riskware
27.59%

Sophos
Virus 'Mal/MSIL-LL', Generic PUA JC (PUA)
27.59%

Avira AntiVirus
ADWARE/PopDeals.76864, ADWARE/PopDeals.A.213, ADWARE/PopDeals.83008, ADWARE/PopDeals.A.218, ADWARE/PopDeals.A.217, ADWARE/PopDeals.84032.1
27.59%

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen, Win32/Virus.Adware.8b0
27.59%

ESET NOD32
MSIL/Adware.Popdeals (variant)
24.14%

IKARUS anti.virus
AdWare.MSIL.Popdeals, AdWare.DealApp
24.14%

Dr.Web
Adware.Shopper.930, Adware.Shopper.979
24.14%

1 / 68      (Adware)
popdeals.exe (BRDeals)  (02499c27ab5effd77766540dc44668f2)

1 / 68      (Adware)
popdeals4.exe (BRDeals)  (aa9594e883be4d099fe80946b495ab5a)

1 / 68      (Adware)
popservice.exe (PopService)  (4744c92f94deffbbe2cf4aef189754c9)

1 / 68      (Adware)
popcom4.exe (PopCom)  (cea0ddc14367b46d8c93d0e0340d74c1)

1 / 68      (Adware)
popcom3.exe (PopCom)  (b0d7d4afa2c3445a5f478bdf0ca426de)

1 / 68      (Adware)
popcom4.exe (PopCom)  (75cd3872e89ea72894d19223443625f9)

1 / 68      (Adware)
popservice.exe (PopService)  (bb315473e45ef1a0afbf76aa843b3ed3)

1 / 68      (Adware)
popservice3.exe (PopService)  (f5d3345e936f9fc47d30f737764d71af)

1 / 68      (Adware)
popdeals4.exe (BRDeals)  (d77e429e29911ccebdc8ee010c08b34d)

1 / 68      (Adware)
popservice3.exe (PopService)  (652abe8c12344cd8b87ff7180a447088)

1 / 68      (Adware)
popcom4.exe (PopCom)  (a6a6576f43367a5ed146d0e488b71511)

1 / 68      (Adware)
popcom4.exe (PopCom)  (f4febb01fa1f9ad4fa51adb9c692cae9)

1 / 68      (Adware)
popcom3.exe (PopCom)  (51fd3ce8a275c9a0011c386766408717)

1 / 68      (Adware)
popcom3.exe (PopCom)  (035adff777e978d3baa93936e86ca438)

1 / 68      (Adware)
popservice3.exe (PopService)  (5b2618053b6b7012e7cbf466af2c6dec)

1 / 68      (Adware)
popdeals3.exe (BRDeals)  (704022152ba7856a593eb7640acf1093)

27 / 68    (Adware)
popservice.exe (PopService)  (b734b3dee85420a73e6aee81884f5fbb)

14 / 68    (Adware)
popdeals4.exe (BRDeals)  (cfcca16364c5c2058a1556adcc223fd8)

1 / 68      (Adware)
popcom.exe (PopCom)  (82bc2eecb156be8556292ea419a8106d)

27 / 68    (Adware)
popservice.exe (PopService)  (4c5d4c21fe135ca2dbf5613ae9f27a92)

6 / 68      (Adware)
popcom4.exe (PopCom)  (d30157989ed033b7f7ec7849c15c3247)

6 / 68      (Adware)
popcom4.exe (PopCom)  (fa209a8f03d814a18a1391f5cc0f6aa8)

24 / 68    (Adware)
popservice.exe (PopService)  (be99108c0442a152390ca0134e36d0f9)

6 / 68      (Adware)
popcom4.exe (PopCom)  (045e7e68fc65faa1ce55bb3606e221b2)

10 / 68    (Adware)
popdeals4.exe (MagnetDaily)  (a07a91bf5bbd894cfa5d745d4283e72a)

24 / 68    (Adware)
popservice.exe (PopService)  (1a2bac393f734d86b5db43b2a896f7fb)

1 / 68      (Adware)
popdeals.exe (MagnetDaily)  (8798a89928f8c22269eef027d8df5150)

12 / 68    (Adware)
popservice.exe (PopService)  (1a1f0d4c79a74477361a51c9acef88d4)

1 / 68      (Adware)
popcom.exe (PopCom)  (9eaa7da2439770af9074b9cff4e2ec22)

Downloads URLs for files signed by Installmatic, LLC.

1 / 68      (Adware)
http://download.popcrew.info/popdeals3.exe  (704022152ba7856a593eb7640acf1093)

14 / 68    (Adware)
http://download.popcrew.info/popdeals4.exe  (cfcca16364c5c2058a1556adcc223fd8)

The following websites host and distribute files published by Installmatic, LLC.

download.popcrew.info

The certificates below are also signed by Installmatic, LLC.

64703231FACE31C6135630FC41D123C6  (Jun 15, 2015 to Jun 15, 2016)

1F644CD77FAE0CB138727CDF354F79F0  (Jan 25, 2015 to Jan 26, 2016)

574F435B169EC460893AD0187E44D858  (Sep 11, 2014 to Sep 12, 2015)

00DE50744A5F06D68B2C7A5999B51AAB42  (Aug 27, 2014 to Aug 28, 2015)

4E872743DAF52F  (Jun 05, 2014 to Jun 05, 2015)

0DE1E550770DAFFF4E6F15754AE29E8B  (May 26, 2014 to May 27, 2015)

The following publishers (by Authenticode signature organization name) are related.

Unilogic Informatica Ltda ME

* Note, the details and description above are based on the code signing digital signature issued to Installmatic, LLC by COMODO CA Limited on July 22, 2015 with the serial number '2d13291aee51b2226f83396fcd33c1f1'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.