home

delftship.joydownload.pl

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.pl

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.RICHMEDIASYSTEMS.Installer (M)
100.00%

The domain delftship.joydownload.pl has been seen to resolve to the following 2 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
June 7, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
June 7, 2016

File downloads found at URLs served by delftship.joydownload.pl.

1 / 68      (PUP)
http://delftship.joydownload.pl/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPD 1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm/ykYeazeeEKqtHb8lx79mwsSPDE b yXqWh r7Wm0yP/TrNPKxTYX99Fz2wwCSXO5Cjhrlcsv4H6yD3GSA7ZawtW0f3deKuwgJEEFMqvyUXl ec3HJRBhhqfuAHB6JNGnk/.../l D9G3c8i8LCgIzcrkF gllF4f7oLvzQGsfKE2nSmsEctb6c 7UXKquZOaiGhkdb0AT4U3K34xu6GtHBprnELplJ0YQmWkRFHhqNnuzgU3aieY7i5XhYCTInnl  (delftship-5.06.186.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.