home

hamachi.es.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain hamachi.es.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
50.00%

K7 AntiVirus
Trojan
50.00%

Trend Micro House Call
TROJ_GEN.R02SH05C615
50.00%

avast!
Win32:PUP-gen [PUP]
50.00%

Dr.Web
Adware.Downware.9759
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

G Data
Win32.Adware.OpenCandy
50.00%

McAfee
Artemis!84E005154625
50.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
50.00%

AVG
OpenCandy
50.00%

Reason Heuristics
PUP.RICHMEDIASYSTEMS.Installer (M)
50.00%

The domain hamachi.es.joydownload.com has been seen to resolve to the following 4 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
February 16, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
February 16, 2016

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
April 7, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
April 7, 2015

File downloads found at URLs served by hamachi.es.joydownload.com.

1 / 68      (PUP)
http://hamachi.es.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL1as6L5L5nvj2nsGMxwdgEPx6 PKn3fHm ykZbNXGHWOOlEqdzh6trh8ycDR6Q7SS7BkX9qj3m3 fa7dPem3FJo5Ayh1dQXzWtCDRny4A79WjwXWmLB UCnJimdCUMK7M2JQpZavOiRHE8cszPLAl63fy1QX58ZYfs0/M1EGq6sUSa1Kp D9G3dsi8OS4Ai5T/D JnlR8f/4z n1O7ZKl/.../V91Wrc24SWvoupmCkW8qYbxREMx9YD12oun FxtlixKw1dhNEirqRQfwqYinnls3NSvOuWFZ  (hamachi-2.2.0.303.exe)

10 / 68    (PUP)
http://hamachi.es.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiGhzwcteQv A8/yan9np5ktEPJgTtbrHuajv8mRYNIGjVEeijGrI x79ow8CWRAaT9T2nT1T8 3G4geeW94eMziQIs55ziVZIRjb Xix 18kq9Dn7U2uLS/9Wys3zc3MVY/.../9Cs0AmrNvNolTKkHc9D7ce4XSyh5oOb2SYjbaQaHNAvMjwpsui1HhtzhVW60ddWRXO9UlixsZGnzQ0vLHbHqmFZ  (hamachi-2.2.0.303.exe)

10 / 68    (PUP)
http://hamachi.es.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv c8/zOn/j1gwJgEL0bteuOtYiLvmA1FMH2OBem5G7U03ewokdSWRAaQ/yXqWB 0 CfuwrCT8svT0mlMq4do0ggTBy7 GDU2nsEj7G SGjaSr1W2sbzPHQNa7MgbEFbIaSuXHt0O8TNLAlk1fX2GWUvfo/g0 8wDG24oFGMlvlmFsTiLJb7LWNXnMu/F/.../5nnG sAMVP786zUXKquZeaiHloJ 8BEJY2YHUitOChGhlkjhKz3J5OECbzX1SnsZGnzQ0vLHHFqmFZ  (hamachi-2.2.0.303.exe)

The following file have been seen to comunicate with hamachi.es.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://hamachi.es.joydownload.com/

Title:
“Hamachi - Descarga Hamachi 2.2 en Español en el sitio JoyDownload”

Description:
“LogMeIn Hamachi es un programa útil que te puede ayudar a conectar dos ordenadores utilizando la conexión a Internet - Descarga la ultima versión de Hamachi aquí.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.6 (PHP/5.3.10-1ubuntu3.8)

Facebook:
Shares:  10

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.