» www.slow-download.com
Overview
Analysis
IPs Addresses (2)
Downloads (87)
Network (2)
Website Detail

www.slow-download.com

Corp New Ventures Services

Domain Information

The domain www.slow-download.com registered by Corp New Ventures Services was initially registered in January of 2016 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

Corp New Ventures Services

Registrar:

NAMESNAP LLC

Server location:

Virginia, United States (US)

Create date:

Saturday, January 16, 2016

Expires date:

Monday, January 16, 2017

Updated date:

Saturday, January 23, 2016

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

slow-download.com

Whois:

2 slow-download.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ShetefSolutionsConsulting1998.e, PUP.Installer.SVANTRANS.?, PUP.Installer.ITLGROUP.?, PUP.Installer.AMGRUP.h, PUP.Amonetize.EVROPLAST.Bundler (M), Threat.Win.Reputation.IMP

100.00%

AhnLab V3 Security

PUP/Win32.Amonetiz

87.88%

Avira AntiVirus

ADWARE/Adware.Gen2, ADWARE/Adware.Gen4, Adware/Amonetize.314368.1, TR/Crypt.ZPACK.Gen2, Adware/Amonetize.576192.2, Adware/Amonetize.576192.16

84.85%

McAfee

Artemis!2F47D2C56AD9, Artemis!8DD4F862B40E, Artemis!092124BC2924, Artemis!03267C6E2F9B, Artemis!AED5FBAC12A7, Artemis!52E6B97EA44C, Artemis!FC4183DA0CFD, Artemis!FF39F2C5F9C1, Artemis!EF3A20165C83, Artemis!F4C880259377, Artemis!F23EBE58EE48

78.79%

ESET NOD32

Win32/Amonetize.BP (variant), Win32/Amonetize.CH (variant), Win32/Amonetize.CK (variant), Win32/Amonetize.CS (variant), Win32/Amonetize.CH potentially unwanted

72.73%

AVG

Generic, Generic_r

69.70%

Qihoo 360 Security

HEUR/QVM10.1.Malware.Gen

66.67%

Trend Micro House Call

TROJ_GEN.R047H09KP14, Suspicious_GEN.F47V1211, Suspicious_GEN.F47V1210, Suspicious_GEN.F47V1214, TROJ_GEN.R0C1H09LG14, TROJ_GEN.R08NH09LM14, Suspicious_GEN.F47V1224, Suspicious_GEN.F47V1226

63.64%

G Data

Gen:Variant.Adware.Strictor.68509, Gen:Variant.Adware.Netfilter, Win32.Application.Agent.9PQAZE, Trojan.GenericKD.2043180

54.55%

avast!

Win32:Amonetize-GN [PUP], Win32:Dropper-gen [Drp], Win32:Trojan-gen, Win32:Adware-gen [Adw], Win32:Malware-gen, Win32:Amonetize-HQ [PUP]

54.55%

Sophos

Generic PUA FM, Generic PUA IF, Generic PUA CB, Generic PUA JB, Generic PUA MF, Generic PUA LJ, Generic PUA PE, Generic PUA JL

51.52%

MicroWorld eScan

Gen:Variant.Adware.Strictor.68509, Gen:Variant.Adware.Netfilter.2, Trojan.GenericKD.2043180, Application.Bundler.Amonetize.AO

48.48%

Bitdefender

Gen:Variant.Adware.Strictor.68509, Gen:Variant.Adware.Netfilter.2, Trojan.GenericKD.2043180, Application.Bundler.Amonetize.AO

48.48%

NANO AntiVirus

Riskware.Win32.Amonetize.djgllc, Riskware.Win32.Amonetize.djsswg, Riskware.Win32.Amonetize.dkinix, Riskware.Win32.Amonetize.dlgsuu

48.48%

Emsisoft Anti-Malware

Gen:Variant.Adware.Strictor.68509, Gen:Variant.Adware.Netfilter, Trojan.GenericKD.2043180, Trojan.GenericKD.2067331

45.45%

The domain www.slow-download.com has been seen to resolve to the following 2 IP addresses.

204.11.56.48

February 21, 2016

23.21.217.79

ec2-23-21-217-79.compute-1.amazonaws.com

December 28, 2014

File downloads found at URLs served by www.slow-download.com.

1 / 68 (Malware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Hungry Shark Evolution Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1861670454.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Hungry Shark Evolution Hack Downloader&instid[interrupted]=http://.../?cancel&ti1=1861670454&instid[thankyoupage]=http://.../?success (hungry shark evolution hack downloader__3687_i1420771166_il396854.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Free Full Version Marine Park Empire Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1307402996.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Free Full Version Marine Park Downloader&instid[interrupted]=http://.../?cancel&ti1=1307402996&instid[thankyoupage]=http://.../?success (_zuj4xfv.exe)

8 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Free Powerpoint 2007 Full Version Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1207535160.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Free Powerpoint 2007 Full Vers Downloader&instid[interrupted]=http://.../?cancel&ti1=1207535160&instid[thankyoupage]=http://.../?success (kmspico 10.0.4__8154_il420.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Swap Magic Exe Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1091820885.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Swap Magic Exe Downloader&instid[interrupted]=http://.../?cancel&ti1=1091820885&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=File381112 Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1525601232.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=File381112 Downloader&instid[interrupted]=http://.../?cancel&ti1=1525601232&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

1 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Fun Run 2 Hack Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1555541667.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Fun Run 2 Hack Downloader&instid[interrupted]=http://.../?cancel&ti1=1555541667&instid[thankyoupage]=http://.../?success ({blocked}.exe)

19 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Small Gland Big Problem A Guide To The Prostate Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1591628270.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Small Gland Big Problem A Gu Downloader&instid[interrupted]=http://.../?cancel&ti1=1591628270&instid[thankyoupage]=http://.../?success (kmspico 9.2.4__7628_il64.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Document Id 237614 Zip Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1028482516.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Document Id 237614 Zip Downloader&instid[interrupted]=http://.../?cancel&ti1=1028482516&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

3 / 68 (PUP)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Final Cut X For Windows Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1561370605.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Final Cut X For Windows Downloader&instid[interrupted]=http://.../?cancel&ti1=1561370605&instid[thankyoupage]=http://.../?success (final cut x for windows downloader__3687_i1428527922_il17443.exe)

20 / 68 (Adware)

http://www.slow-download.com/tdownload.php?s1=3b3994902ddacdedea8c67f6aa40befc4e44cbfe&t1=1416901933&myref=www.downloadthesefile.com&version=1.1.6.20&prefix=Free Download Microsoft Office Enterprise 2007 Full Version&campid=5203&instid[appname]=Free Download Microsoft Office Enterprise 2007 Full Version&instid[thankyoupage]=&instid[appsetupurl]=&instid[interrupted]=&instid[appimageurl]=http://s3.amazonaws.com/.../downloadall.png&AMt=1416901747473&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3 (dvmediaplayer__6701_i1411992025_il22.exe)

20 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Hmrc P85 Form Download Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1266350096.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Hmrc P85 Form Download Downloader&instid[interrupted]=http://.../?cancel&ti1=1266350096&instid[thankyoupage]=http://.../?success (setup.exe)

19 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Maggianos Sangria Recipe Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1537600372.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Maggianos Sangria Recipe Downloader&instid[interrupted]=http://.../?cancel&ti1=1537600372&instid[thankyoupage]=http://.../?success (sam__2268_il2428.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Nutty Bavarian Nut Roaster For Sale Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1088774356.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Nutty Bavarian Nut Roaster For Downloader&instid[interrupted]=http://.../?cancel&ti1=1088774356&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Despicable Me 2010 1080p BR 600MB ALL Single L Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1875309272.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Despicable Me 2010 1080p BR Downloader&instid[interrupted]=http://.../?cancel&ti1=1875309272&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

6 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Free Download Game Angry Birds 2 For Pc Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1765383612.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Free Download Game Angry Birds Downloader&instid[interrupted]=http://.../?cancel&ti1=1765383612&instid[thankyoupage]=http://.../?success (premiereproccckv104__5542_il557790.exe)

9 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Prompt Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1418794431.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Prompt Downloader&instid[interrupted]=http://.../?cancel&ti1=1418794431&instid[thankyoupage]=http://.../?success (painttool sai english pack 1.1.0 full__6923_il793.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=http://www.datafilehost.com/.../2bb57363&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=GTA V Key Generator&instid[appname]=GTA V Key Generator&instid[thankyoupage]=http://www.datafilehost.com/.../2bb57363&ti1=0 (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

23 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Short Syntax New Testament Greek Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1116099496.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Short Syntax New Testament Gre Downloader&instid[interrupted]=http://.../?cancel&ti1=1116099496&instid[thankyoupage]=http://.../?success (oyun indirici__9407_il7201.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=God Star Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1375030941.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=God Star Downloader&instid[interrupted]=http://.../?cancel&ti1=1375030941&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Adobe PhotoShop LightRoom 5 Keygen Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1869762348.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Adobe PhotoShop LightRoom 5 Ke Downloader&instid[interrupted]=http://.../?cancel&ti1=1869762348&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

17 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=How To Read A Paper The Basics Of Evidence Based M Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1471181393.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=How To Read A Paper The Basics Downloader&instid[interrupted]=http://.../?cancel&ti1=1471181393&instid[thankyoupage]=http://.../?success (photoshop cs5 türkçe yama__7249_il64429.exe)

13 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Dragon Age Inquisition Key Generator Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1472916142.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Dragon Age Inquisition Key Ge Downloader&instid[interrupted]=http://.../?cancel&ti1=1472916142&instid[thankyoupage]=http://.../?success (the night stalker the life an downloader__3687_i1414341288_il1189756.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Pride And Prejudice And Zombies Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1877590498.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Pride And Prejudice And Zombie Downloader&instid[interrupted]=http://.../?cancel&ti1=1877590498&instid[thankyoupage]=http://.../?success (لم يتم تأكيده 75791.crdownload)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Nokia Simlock Calculator V3 1 Fixed Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1520120444.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Nokia Simlock Calculator V3 1 Downloader&instid[interrupted]=http://.../?cancel&ti1=1520120444&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Nokia Simlock Calculator V3 1 Fixed Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1117302007.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Nokia Simlock Calculator V3 1 Downloader&instid[interrupted]=http://.../?cancel&ti1=1117302007&instid[thankyoupage]=http://.../?success (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

19 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Clandestine In Chile The Adventures Of Miguel Lit Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1752707745.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Clandestine In Chile The Adve Downloader&instid[interrupted]=http://.../?cancel&ti1=1752707745&instid[thankyoupage]=http://.../?success (mutants genetic gladiators hac downloader__3687_i1428355677_il1463652.exe)

14 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=The Western States Motel Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1345092437.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=The Western States Motel Downloader&instid[interrupted]=http://.../?cancel&ti1=1345092437&instid[thankyoupage]=http://.../?success (comptia a certification study downloader__3687_i1433240208_il1372438.exe)

26 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=http://www.mediafire.com/download/aeyh8pq7jsnorbv/DoulCi Bypass Server - [ OFFICIAL ].rar&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=Icloud remover&instid[appname]=Icloud remover&instid[thankyoupage]=http://.../thank-you.html&ti1=5544922 (microsoftoffice2013proplusx86x64fullserialkey,licensefreedownload__11057_il1437.exe)

10 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26 (heroes and generals hack october 2014 no survey no password__10967_i1436325746_il311680.exe)

25 / 68 (Adware)

http://www.slow-download.com/download.php?version=1.1.5.26&campid=5160&instid[appsetupurl]=https://www.dropbox.com/s/mo0q3hs2bdw1twf/GTA V Money Hack Tool.rar?dl=1&instid[cmdline]=/S&instid[appimageurl]=http://oi59.tinypic.com/2ew18b5.jpg&prefix=GTA Online Money Hack&instid[appname]=GTA Online Money Hack&instid[thankyoupage]=http://.../thank-you.html&ti1=5576365 (shibori the inventive art of downloader__3687_i1445361786_il2416219.exe)

Latest 30 of 87 download URLs

The following 2 files have been seen to comunicate with www.slow-download.com in live environments.

TCP » 204.11.56.48:80

chrome.crx

TCP » 204.11.56.48:80

chrome.crx

URL:

http://www.slow-download.com/

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.