home

greenshot.joydownload.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InnovativeSystems
100.00%

The domain greenshot.joydownload.com has been seen to resolve to the following 2 IP addresses.

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
April 4, 2015

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
April 4, 2015

File downloads found at URLs served by greenshot.joydownload.com.

1 / 68      (Adware)
http://greenshot.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPj21E1v4YtbB8ack5ib0o2JgyskFbk3jYqmqZi/.../SHoWGKfUrcfwsHrJWFYNO1nbQoEcKX0XGh9es7cLVgoiqv2R25lIcenw ZsBGi slPHnv1rA5q2M8ivb3tOi5j XbV11lhXsZr2zlLxZLgi1XnzXYwFsYOpSDrjsZuCxW8ybPVJQo4vfiZ95L3gXghqzRyz3c8CSnjzDU75pZD2xgcsNnLMqmFX19rZIjHxEVPW0fB Yk8=  ({blocked}.exe)

The following file have been seen to comunicate with greenshot.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.