» www.share-download.com
Overview
Analysis
IPs Addresses (1)
Downloads (16)
Network (1)
Website Detail

www.share-download.com

ziv dascalu

Domain Information

The domain www.share-download.com registered by ziv dascalu was initially registered in October of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

ziv dascalu

Registrar:

GANDI SAS

Server location:

Virginia, United States (US)

Create date:

Tuesday, October 21, 2014

Expires date:

Wednesday, October 21, 2015

Updated date:

Tuesday, October 21, 2014

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

share-download.com

Whois:

1 share-download.com record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

Threat.Win.Reputation.IMP, PUP.Installer.ShetefSolutionsConsulting1998.GG, PUP.Installer.SVANTRANS.?, PUP.Installer.SVANTRANS.W, PUP.Brightcircle.SVANTRAN.Installer (M)

100.00%

ESET NOD32

Win32/Amonetize.AW (variant), Win32/Amonetize.BR (variant), Win32/Amonetize.BP (variant), Win32/Amonetize.CH (variant)

92.86%

VIPRE Antivirus

Amonetize, Trojan.Win32.Generic

85.71%

Sophos

Amonetize, Generic PUA GD, Generic PUA PM, Generic PUA IB, Generic PUA OI, Generic PUA GM, Generic PUA HP, Generic PUA NF

85.71%

Avira AntiVirus

ADWARE/Adware.Gen2, ADWARE/Adware.Gen4

85.71%

AVG

BundleApp_r.R, Generic_r

85.71%

Trend Micro House Call

TROJ_GEN.R0CBH06FM14, Suspicious_GEN.F47V1202, Suspicious_GEN.F47V1130, Suspicious_GEN.F47V1203, TROJ_GEN.R0C1C0OL814, TROJ_GEN.R00GC0EL914

85.71%

Malwarebytes

PUP.Optional.Amonetize, PUP.Optional.SVBun, Trojan.Downloader.Agent

78.57%

avast!

Win32:Amonetize-BX [PUP], Win32:Amonetize-GN [PUP], Win32:Amonetize-GL [PUP], Win32:Vitro, Win32:Amonetize-GR [PUP]

78.57%

AhnLab V3 Security

PUP/Win32.Amonetiz

78.57%

NANO AntiVirus

Riskware.Win32.Amonetize.daymmq, Riskware.Win32.Amonetize.djmhrz, Riskware.Win32.Amonetize.djmfqq, Riskware.Win32.Amonetize.djsswg

71.43%

MicroWorld eScan

Application.Bundler.Amonetize.L, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Graftor.166062

64.29%

Bitdefender

Application.Bundler.Amonetize.L, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Graftor.166062

64.29%

Lavasoft Ad-Aware

Application.Bundler.Amonetize.L, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Graftor.166062

64.29%

F-Secure

Application.Bundler.Amonetize, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Graftor.166062

64.29%

The domain www.share-download.com has been seen to resolve to the following IP address.

54.243.123.240

ec2-54-243-123-240.compute-1.amazonaws.com

December 1, 2014

File downloads found at URLs served by www.share-download.com.

28 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Rage Break Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1025010087.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Rage Break Downloader&instid[interrupted]=http://.../?cancel&ti1=1025010087&instid[thankyoupage]=http://.../?success (selena gomez the heart wants what it wants__3819_il199.exe)

1 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Brazilian Tropical Orchestra The Beatles In Boss Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1127667552.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Brazilian Tropical Orchestra Downloader&instid[interrupted]=http://.../?cancel&ti1=1127667552&instid[thankyoupage]=http://.../?success ({blocked}.exe)

19 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Random House Websters Large Print Thesaurus Rando Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1019951785.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Random House Websters Large Pr Downloader&instid[interrupted]=http://.../?cancel&ti1=1019951785&instid[thankyoupage]=http://.../?success (adobe flash professional cs5 5 downloader__3687_i1416393780_il382757.exe)

17 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Free Ubisoft Game Launcher For Pc Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1973560291.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Free Ubisoft Game Launcher Fo Downloader&instid[interrupted]=http://.../?cancel&ti1=1973560291&instid[thankyoupage]=http://.../?success (h4bbzisz.exe)

29 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=The Bette Davis Club Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1248447219.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=The Bette Davis Club Downloader&instid[interrupted]=http://.../?cancel&ti1=1248447219&instid[thankyoupage]=http://.../?success (windows loader 2.2.2__8173_il9.exe)

15 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Sid Meiers Civilization Beyond Earth Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1634805825.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Sid Meiers Civilization Beyond Downloader&instid[interrupted]=http://.../?cancel&ti1=1634805825&instid[thankyoupage]=http://.../?success (office 2013 katilimsiz__6183_il4727.exe)

17 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Survey Bypass Tool Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1459332512.exe&instid[cmdline]=&instid[appimageurl]=http://promptdownloader.com/logo.png&prefix=Survey Bypass Tool Downloader&instid[interrupted]=http://promptdownloader.com/?cancel&ti1=1459332512&instid[thankyoupage]=http://fileam.com/.../0X99C2 (the sea hound 1947 15 part ser downloader__3687_i1414947408_il1425179.exe)

27 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=6629&instid[appname]=Download.Setup&instid[appsetupurl]=http://download.freesoftindex.com/software/GotClip_Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.freesoftindex.com/img/150x150/gotclip.png&prefix=Download.Setup&instid[thankyoupage]=http://.../finish.php&ti1=10451-0-gotclip-b:chrome (call of duty 4 modern warfare downloader__3687_i1415278779_il1542338.exe)

27 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=6629&instid[appname]=Download.Setup&instid[appsetupurl]=http://download.freesoftindex.com/software/SoundCloudDownloader_Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.freesoftindex.com/img/150x150/soundcloud.png&prefix=Download.Setup&instid[thankyoupage]=http://.../finish.php&ti1=10451-0-soundcloud-b:chrome (call of duty 4 modern warfare downloader__3687_i1415278779_il1542338.exe)

20 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Lupe Fiasco Lupe Fiasco S The Cool Deluxe Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1634824108.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Lupe Fiasco Lupe Fiasco S Th Downloader&instid[interrupted]=http://.../?cancel&ti1=1634824108&instid[thankyoupage]=http://.../?success (lupe fiasco lupe fiasco s th downloader__3687_i1417216759_il628393.exe)

14 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=http://vidnplayer.com/direct/2J&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=Brave Frontier Hack [2014] &instid[appname]=Brave Frontier Hack [2014] &instid[thankyoupage]=http://.../thank-you.html&ti1=4681898 (wifi password hack v2.1 2014__5160_i1416989113_il225.exe)

20 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Lupe Fiasco Lupe Fiasco S The Cool Deluxe Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1173151637.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Lupe Fiasco Lupe Fiasco S Th Downloader&instid[interrupted]=http://.../?cancel&ti1=1173151637&instid[thankyoupage]=http://.../?success (lupe fiasco lupe fiasco s th downloader__3687_i1417216759_il628393.exe)

17 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=GRE Biology Test Flashcard Study System GRE Subje Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1713462233.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=GRE Biology Test Flashcard Stu Downloader&instid[interrupted]=http://.../?cancel&ti1=1713462233&instid[thankyoupage]=http://.../?success (snapchat__6822_il13090.exe)

20 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Chairman Mao The Life And Legacy Of Mao Zedong Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1357810529.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Chairman Mao The Life And Lega Downloader&instid[interrupted]=http://.../?cancel&ti1=1357810529&instid[thankyoupage]=http://.../?success (chairman mao the life and lega downloader__3687_i1415990193_il239323.exe)

9 / 68 (Adware)

http://www.share-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=http://trichecode.com/wp-content/uploads/2014/05/hack.astucev2014.rar&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=Setup&instid[appname]=Setup&instid[thankyoupage]=http://.../thank-you.html&ti1=4648403 (book id56239985 pdf downloader__3687_i1342756092_il2114877.exe)

24 / 68 (PUP)

http://www.share-download.com/tdownload.php?s1=0d0272cc8110eaa66100a6758b189218aec11cad&t1=1417458381&myref=dm (gta 5 money hack__5160_i940183129_il3534.exe)

The following file have been seen to comunicate with www.share-download.com in live environments.

TCP » 54.243.123.240:80

new_chrome.exe (Google Chrome by Google)

URL:

http://www.share-download.com/

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

Apache/2.2.15 (Red Hat) (PHP/5.3.3)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.