» www.later-download.com
Overview
Analysis
IPs Addresses (1)
Downloads (42)
Network (1)
Website Detail

www.later-download.com

ziv dascalu

Domain Information

The domain www.later-download.com registered by ziv dascalu was initially registered in October of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

ziv dascalu

Registrar:

GANDI SAS

Server location:

Virginia, United States (US)

Create date:

Tuesday, October 28, 2014

Expires date:

Wednesday, October 28, 2015

Updated date:

Tuesday, October 28, 2014

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

later-download.com

Whois:

1 later-download.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ShetefSolutionsConsulting1998.o, PUP.Installer.ShetefSolutionsConsulting1998.?, PUP.Installer.ShetefSolutionsConsulting1998.R

100.00%

Avira AntiVirus

ADWARE/Adware.Gen4, ADWARE/Adware.Gen2, TR/Rogue.805376.8, Adware/Amonetize.593608

96.55%

Sophos

Generic PUA BI, Generic PUA AJ, Generic PUA KB, Generic PUA FM, Generic PUA LK, Generic PUA EL, Generic PUA NF, Generic PUA BD

93.10%

AhnLab V3 Security

PUP/Win32.Amonetiz

89.66%

ESET NOD32

Win32/Amonetize.BY (variant), Win32/Amonetize.BP (variant), Win32/Amonetize.CC (variant)

89.66%

McAfee

Artemis!BB315D987955, Artemis!4DF9934D4024, Artemis!75303E2A618E, Artemis!AEFB34E2811A, Artemis!E814D8B2D9BD, Artemis!36000A7E3390

79.31%

Fortinet FortiGate

Riskware/Amonetize, Adware/Amonetize

79.31%

Bitdefender

Gen:Variant.Application.Jaik.4831, Gen:Variant.Adware.Strictor.68509, Trojan.GenericKD.1995819, Application.Bundler.Amonetize.AK

75.86%

Lavasoft Ad-Aware

Gen:Variant.Application.Jaik.4831, Gen:Variant.Adware.Strictor.68509, Trojan.GenericKD.1995819, Application.Bundler.Amonetize.AK

75.86%

F-Secure

Gen:Variant.Application.Jaik, Gen:Variant.Adware.Strictor.68509, Trojan.GenericKD.1995819, Application.Bundler.Amonetize

75.86%

G Data

Gen:Variant.Application.Jaik.4831, Gen:Variant.Adware.Strictor.68509, Trojan.GenericKD.1995819, Application.Bundler.Amonetize.AK

75.86%

MicroWorld eScan

Gen:Variant.Application.Jaik.4831, Gen:Variant.Adware.Strictor.68509, Trojan.GenericKD.1995819, Application.Bundler.Amonetize.AK

72.41%

Trend Micro House Call

Suspicious_GEN.F47V1115, TROJ_GEN.R0C1H09KJ14, Suspicious_GEN.F47V1119, Suspicious_GEN.F47V1120, Suspicious_GEN.F47V1122

68.97%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4150696

68.97%

K7 AntiVirus

Unwanted-Program , Trojan

65.52%

The domain www.later-download.com has been seen to resolve to the following IP address.

54.243.123.240

ec2-54-243-123-240.compute-1.amazonaws.com

November 10, 2014

File downloads found at URLs served by www.later-download.com.

12 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=El Kit Tarot De Los Druidas Tarot Of The Druids K Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1329903616.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=El Kit Tarot De Los Druidas T Downloader&instid[interrupted]=http://.../?cancel&ti1=1329903616&instid[thankyoupage]=http://.../?success (setup__9581_il895.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Turisticki Agencii Prilep Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1646603261.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Turisticki Agencii Prilep Downloader&instid[interrupted]=http://.../?cancel&ti1=1646603261&instid[thankyoupage]=http://.../?success (kmspico 9.2.4__7628_il1066.exe)

3 / 68 (PUP)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Online Soccer Manager Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1893752852.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Online Soccer Manager Hack Downloader&instid[interrupted]=http://.../?cancel&ti1=1893752852&instid[thankyoupage]=http://.../?success (online soccer manager hack downloader__3687_i1410812424_il1503516.exe)

11 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Digital Watchdog VMAX Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1662474912.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Digital Watchdog VMAX Downloader&instid[interrupted]=http://.../?cancel&ti1=1662474912&instid[thankyoupage]=http://.../?success (kmspico 9.2.4__7628_il14.exe)

20 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=8497&instid[appname]=Adobe Flash Player&instid[appsetupurl]=http://fpdownload.macromedia.com/get/flashplayer/pdc/.../install_flash_player.exe&prefix=installflashplayer&ti1=13&ti2=263 (00000000)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Farming Simulator 2015 PC Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1780373202.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Farming Simulator 2015 PC Downloader&instid[interrupted]=http://.../?cancel&ti1=1780373202&instid[thankyoupage]=http://.../?success (winkmsactivation180dayfree2014__2827_il595529.exe)

12 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Book Downloader&instid[appsetupurl]=http://fastmediadownloads.com/.../Prompt-Downloader-1938114957.exe&instid[cmdline]=&instid[appimageurl]=http://promptdownloader.com/logo.png&prefix=Book Downloader&instid[interrupted]=http://promptdownloader.com/?cancel&ti1=1938114957&instid[thankyoupage]=http://depositfiles.com/.../some-movie (setup__9581_il895.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Bull Durham Flv Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1809550929.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Bull Durham Flv Downloader&instid[interrupted]=http://.../?cancel&ti1=1809550929&instid[thankyoupage]=http://.../?success (BIOS.Agent__2309_il98245.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Roblox Robux Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1604274053.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Roblox Robux Hack Downloader&instid[interrupted]=http://.../?cancel&ti1=1604274053&instid[thankyoupage]=http://.../?success (font__7226_il163.exe)

15 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Sympathy For Lady Vengeance P1 1 Avi Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1506797752.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Sympathy For Lady Vengeance P1 Downloader&instid[interrupted]=http://.../?cancel&ti1=1506797752&instid[thankyoupage]=http://.../?success (font__7226_il269.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Cry Baby P1 1 Avi Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1249761753.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Cry Baby P1 1 Avi Downloader&instid[interrupted]=http://.../?cancel&ti1=1249761753&instid[thankyoupage]=http://.../?success (setup__2309_il46528.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=6086&instid[appname]=ewdp crybaby.xvid.avi&prefix=ewdp crybaby.xvid.avi&instid[appsetupurl]=http://secure-fastfile.com/f/Prompt_Downloader_setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://secure-fastfile.com/f/logo150x150.png&instid[thankyoupage]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&instid[interrupted]=http://www.fhserve.com/www/.../apu.php?n=&zoneid=1991&popunder=1&direct=1&ti1=405404969.361860.99eda4825e.4974.1fd13f1117cab43b0bb7551d29f07365&ti2=&ti3= (setup__2309_il46528.exe)

23 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Happy Mondays Madchester Rave On 1989 Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1384734621.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Happy Mondays Madchester Rav Downloader&instid[interrupted]=http://.../?cancel&ti1=1384734621&instid[thankyoupage]=http://.../?success (systemmonitorii__2348_il21961.exe)

23 / 68 (Adware)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3819&instid[appname]=Jimi_Hendrix_-_Wild_Thing_(xMusic.me).mp3.mp3&instid[appsetupurl]=http://file.xmusic.me/listen/67914742/9252008/1047646324/b50c941662/Jimi_Hendrix_-_Wild_Thing_(xMusic.me).mp3&instid[appimageurl]=http://xmusic.me/.../he-logo.jpg&prefix=Jimi Hendrix Wild Thing (dnd 4th character builder full downloader__3687_i1408312073_il569884.exe)

24 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Harry Potter And The Goblet Of Fire Flv Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1278608364.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Harry Potter And The Goblet Of Downloader&instid[interrupted]=http://.../?cancel&ti1=1278608364&instid[thankyoupage]=http://.../?success (setup.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Dungeon Hunter 4 Hack 2014 Zip Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1742932858.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Dungeon Hunter 4 Hack 2014 Zip Downloader&instid[interrupted]=http://.../?cancel&ti1=1742932858&instid[thankyoupage]=http://.../?success (kmspico 9.2.4__7628_il1066.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Workouts In A Binder For Indoor Cycling Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1639751852.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Workouts In A Binder For Indoo Downloader&instid[interrupted]=http://.../?cancel&ti1=1639751852&instid[thankyoupage]=http://.../?success (file.downloader__9581_il87.exe)

12 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Keygen Update 2014 By KeygenIX Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1719661602.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Keygen Update 2014 By Keyg Downloader&instid[interrupted]=http://.../?cancel&ti1=1719661602&instid[thankyoupage]=http://.../?success (setup__9581_il895.exe)

20 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Law Order UK S 3 E 4 P1 1 Flv Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1548225011.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Law Order UK S 3 E 4 P1 1 F Downloader&instid[interrupted]=http://.../?cancel&ti1=1548225011&instid[thankyoupage]=http://.../?success (bitcomet__8497_i1408181410_il296.exe)

21 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Angry Birds Transformers Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1350653547.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Angry Birds Transformers Hack Downloader&instid[interrupted]=http://.../?cancel&ti1=1350653547&instid[thankyoupage]=http://.../?success (hackgenerator__5160_i1408553491_il2314.exe)

12 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Called To Account Fourteen Financial Frauds That Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1453769844.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Called To Account Fourteen Fi Downloader&instid[interrupted]=http://.../?cancel&ti1=1453769844&instid[thankyoupage]=http://.../?success (setup__9581_il895.exe)

14 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Anatomy And Physiology Coloring Workbook A Complet Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1379935161.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Anatomy And Physiology Colorin Downloader&instid[interrupted]=http://.../?cancel&ti1=1379935161&instid[thankyoupage]=http://.../?success (anatomy and physiology colorin downloader__3687_i1407008795_il48135.exe)

14 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Anatomy And Physiology Coloring Workbook A Complet Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1194780165.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Anatomy And Physiology Colorin Downloader&instid[interrupted]=http://.../?cancel&ti1=1194780165&instid[thankyoupage]=http://.../?success (anatomy and physiology colorin downloader__3687_i1407008795_il48135.exe)

14 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Anatomy And Physiology Coloring Workbook A Complet Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1265333243.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Anatomy And Physiology Colorin Downloader&instid[interrupted]=http://.../?cancel&ti1=1265333243&instid[thankyoupage]=http://.../?success (anatomy and physiology colorin downloader__3687_i1407008795_il48135.exe)

18 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Tomodachi Life 3DS Emulator ROM Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1758502411.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Tomodachi Life 3DS Emulator RO Downloader&instid[interrupted]=http://.../?cancel&ti1=1758502411&instid[thankyoupage]=http://.../?success (installflashplayer__8497_i1409098242_il30.exe)

24 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Codon Worksheets With Answer Key Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1813186169.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Codon Worksheets With Answer K Downloader&instid[interrupted]=http://.../?cancel&ti1=1813186169&instid[thankyoupage]=http://.../?success (kmspico 10.0.4__8154_il654.exe)

25 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.6.20&campid=6701&instid[appname]=DVMediaPlayer&instid[appsetupurl]=http://download.freesoftindex.com/software/DamnVid_Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.freesoftindex.com/img/150x150/damnvid.png&prefix=DVMediaPlayer&instid[thankyoupage]=http://.../finish.php&ti1=12139-0-damnvid-b:chrome (dvmediaplayer__6701_i1413039633_il22.exe)

20 / 68 (Adware)

http://www.later-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Evasion Jailbreak Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1923952948.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Evasion Jailbreak Downloader&instid[interrupted]=http://.../?cancel&ti1=1923952948&instid[thankyoupage]=http://.../?success (angry birds transformers hack downloader__3687_i1409889611_il1180126.exe)

Latest 30 of 42 download URLs

The following file have been seen to comunicate with www.later-download.com in live environments.

TCP » 54.243.123.240:80

new_chrome.exe (Google Chrome by Google)

URL:

http://www.later-download.com/

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

Apache/2.2.15 (Red Hat) (PHP/5.3.3)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.