» powerpoint1404.joydownload.pl
Overview
Analysis
IPs Addresses (2)
Downloads (11)

powerpoint1404.joydownload.pl

Domain Information

Server location:

Virginia, United States (US)

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

joydownload.pl

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.RICHMEDIASYSTEMS.Installer (M), PUP.OpenCandy.SoftwareAssociation.Installer (M), PUP.OpenCandy.Installer (L)

100.00%

ESET NOD32

Win32/OpenCandy.A potentially unsafe application

33.33%

Emsisoft Anti-Malware

Gen:Trojan.Heur.zu3@xOiXPEki

33.33%

Dr.Web

Adware.Downware.10304

33.33%

Norman

Gen:Trojan.Heur.zu3@xOiXPEki

33.33%

Kaspersky

not-a-virus:AdWare.Win32.OpenCandy

33.33%

The domain powerpoint1404.joydownload.pl has been seen to resolve to the following 2 IP addresses.

54.225.168.223

ec2-54-225-168-223.compute-1.amazonaws.com

April 12, 2016

50.19.96.56

ec2-50-19-96-56.compute-1.amazonaws.com

April 12, 2016

File downloads found at URLs served by powerpoint1404.joydownload.pl.

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVY9fDKkEgqyOYjBvqA862/so2tzzt4HP0ykYrn2LTf40l8bOGKGCei1E/Y9xbNykpnBU1nT7SS7BkT9qnq/mf6SpN/.../SmUnl8JsHv0OkrDne tVzPgv5sBJKjJYr7fXof1cK3D699yw8eroL7h0r5batwkim0CIxX78exUS2w8NHMy2VlJepRTsc3OHspoqL4Wk8jzknpiZlFFyzlFAawqZnu1VZ8amDP 2AW18vQN2CjBkvfguggKhD7livQDhhyMCQLSNbq0AID (microsoft-powerpoint-14.0.4760.1000.exe)

6 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXEwj /.../NXK8ykYMayDMR7juXfdr0bIjzseZDR7RoGitTgao4SX7ivHRqsvT0mlIq4dp2gFQXzWtCDRnl8Q79WjwWWmLAOUI2syiPTENergxLh0KOr38FXB8ctyIf08wh LuFCw3eYbz1OgwHGL5uF7Fjqk1WMeve4GkbHhWzZzkTqt73EJDqZW90h tLOoqznLiHs5Z8MelR37vs4 RmiwgeeMLEJY2enUhuvDjWQhqzRyx3c9FASeiDAv5scy7m1twfGDP 2AW18vSMGCjBkvfguggKhD7livQDhhyMCQLSNbq0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv U8/zC24jEwnskFdE3mbL76P3a7yVZcOSCGHeO1Tuprl wi1s3eDQ6b7S74Hk20sni1mbaI svTyGlKoJ5ziVFIRiD Vmtnn4Aj/SLwSD7AE/4Di5i3cypHN/5nbVhQavGzS3t7Zs7QIhwkjL/.../9Gk2UrzLaB3nT6lBN1Wrc25SWut94Ob2SYhbaRCV49 M34juvDzRFkh0kf5kp8YASeiDAz3qYikmEhwfDKb4TRQ3N3TNGCjBkvegug5MFbi3mLdAgAnaHleEpSs0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4coWK4fE9rm/8qHpxzMkFbk3kYqm6ZieuyxdSNGmeGuqmHbAy0bIjzsedDR7Fpmy4UBe /Tnjmf6SpNjcm3EL/tJlwRUdDSjjCzp1kNEivSH5UHHZGehOw4TrMT0VabozKh0GIaS0XHl1ao2Xcgkp1avlEy1mcof4w7J2HGL5uF3Fjrg1WsbiN4G8ZDJW28uvS7B4yg8eroL hFLqM/Mm1XPlXJkZ84fkBCyr887JxGg9ZrJdRZo5PnkjruOnHRp/.../86xhR0ufXjGsngV3cvYc3iuT1OIwLomK1fi3njdBQ4wYHNYH5mgxQID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnl0kPjumHR37cteQv c8/zOn/j1gwJgELk7teualbDHjgwsOdn7MRK7yWvVomuck2ceZGQyP yj DFj2uHu/laCZ 8vT0mlIq4dp2gFQXzWtCDRnl8I79WjwWWmLBuUI2syiPTENergxLh0KNr38FXB5ctyYeUd22eP2GWUveo/.../44JDnzR1mZybWszMe3NjYc3iuT1OIwLomK1fi3njdBQ42aX5WFpKtxwID (2b2e.tmp)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1GRjga5/Zs kkuC2 yon2dBXJ0bjbbL/OXK0xlZTcWmPEfvkQeElyOBqxceWRAaS9T2 VRLlszi1jf/Dr9rZlGZOs55ziVZIRjb Xix 18kv9Dn7WWKcRbVOw4TrNT0VLP0gJFsFMqXlV2h0O8TNLAl71fX2GWUveo/.../zQehMO50kyyiEcQe5MOxUS w78SCkW8qZL9JV9lkaj18873xWQch0VHllZ0bSnKlGwz3vZr6wwgjPmzFuGoUw4ybZWCjBkvfguggKhD7livQDhhyMCQLSNbq0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklQ/NSr6QUuwP5 M46crrTq59yoylIJQaVrmbKX8IXe7xlRGM2OMG/fyUOAlyPpqxsyPQ0iD9GzyDUzluWm0yP/SpMuByDdZqtY6gV9QV3G1AX1/l8k7vXKuSGjASr1dw4TrNT0VN/ogJFsFNKXlESMhLJGJZQkpz6vnGDRjIdHg2q4/CGOos1nOmfppFpn esSkfScDg5XoX/.../MFbi3mLdAgAnaHleEpSg0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjyiHxH7Z93Wteh152b0sCgrn8kFbk3hYqn9PHK5xV1KOSCGH O1Tuxrlqtrh8yeDgaDonarThm05y37lrWO6Yya0TwS/9EtglFcVGijDTh1isIp/ivkDyvMUrcfwsTrJW5ePKs5bBINOb30UWh0O8TNLAlk1fX2GWUvfo/.../oFGMlvxmFtHkJNClNntd3sr F gklQ9BtMu90QmxK gphSflCc5Z5NX7HD688dHPw3JkZrJDQZY2enUhuvDjWQhqzRyx3c9FASeiDAv5scy7m1twfGDP 2AW18vSMGCjBkvfguggKhD7livQDhhyMCQLSNbq0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//o2MxwdoOJ1WzMfi8YyL1hRYEIGjPEeijEqd3nP41hobCXlLV/iv4CFT8 3G8geeI943KmiBBo58igFJQXzWtDDRnwYtpp2mvSGjASr1YzcLkMjMHab05bBIJOb2hCSYrLYzcLVgojqv2EyY3c8b40 cnUSqouRnFm/V Q8vjJJ3pLGNXnMu5F/tyxkFA/4O h1vxZLgozn/kXIwCuIOmAyau5tPQxXV I6tCQZo9J3sktuK5HBphjgjln4hWGG/.../MFbi3mLdAgAnaHleEpSg0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklQ/NSr6QUuwP5 M46crrTq59yoylIJQaVrmbKX8IXe7xlRGM2OMG/fyUOAlyPpqxsyPQ0iD9GzyDUzluWm0yP/.../D22woBqQ26ouRM3kLoava3FYzcr F oujVtMuZr2zlL ZLh0lC2jBspP5YSxQHP78MjEiCd5bbdCTsc3P3Ux5r37SU8jnB3z3d9OAS3hFAawqZnu1VZ8amDP 2AW18vQN2CjBkvfguggKhD7livQDhhyMCQLSNbq0AID (microsoft-powerpoint-14.0.4760.1000.exe)

1 / 68 (PUP)

http://powerpoint1404.joydownload.pl/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//o2MxwdoOJ1WzMfi8YyL1hRYEIGjPEeijEqd3nP41hobCXlLV/iv4CFT8 3G8geeR943KmiBBp58iglZDUXOuGDU2nsUj7H6yGjrbFa5Xkc3gMzIBaLE1KhwNOOz9UHBtLpGSck5gnqqnGCQvaoTyw Z2BGqwoAOWyO1nR5i/etCtaGNXnMu/F/t73A8eroL6h0q/.../QhyGvlEcQe5MOxUS w78SCkW8qZL9JV9lkaj18873xWQch0VHllZ0bSnKlGwz3vZr6wwgjPmzFuGoUw4ybZWCjBkvegug5MFbi3mLdAgAnaHleEpSs0AID (microsoft-powerpoint-14.0.4760.1000.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.