home

cdn.wholefolderboard.com

Domain Information

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
wholefolderboard.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DarwenMarketing.Installer (M), PUP.installCore.DarwenMa.Installer (M)
100.00%

The domain cdn.wholefolderboard.com has been seen to resolve to the following IP address.

52.18.157.175
ec2-52-18-157-175.eu-west-1.compute.amazonaws.com
May 25, 2016

File downloads found at URLs served by cdn.wholefolderboard.com.

1 / 68      (Adware)
http://cdn.wholefolderboard.com/c?x=0AAPTdav8md/CR8mX2oi/PFUpiVdaZvriH5fSpyQX Q=&c=VNLJMUeKz VKMxSByY6HccQzNiq0yztXkxqZxTNL5plWZq7HcRkrvXXSskg5E8uNxL9oUPy5Wtt2XSGSBg0I3A==&downloadAs=BitTorrent Setup.exe&fallback_url=http://www.downtoad.com/landing/bing2/.../download.php  (bedcf1f86c2e8dc25cecf1bc09b07046)

1 / 68      (Adware)
http://cdn.wholefolderboard.com/c?x=OBR1Smz2UklbHCNVhEqZScAtdHCr8vll87hjDVxf/fc=&c=eNBS7U6T0WKPueFDU9zHfKbkExDSKjRlYVKuVlY2RgFZU/yyQRv2irkaU6PnIWSd6O gkF3t5os3RZzhTtoc A==&downloadAs=7-Zip Setup.exe&fallback_url=http://.../download.php  (195d54beeca90c90cb5893e5fa8c8b0a)

The following 3 files have been seen to comunicate with cdn.wholefolderboard.com in live environments.

TCP » 52.18.157.175:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.18.157.175:80
UCBrowser.exe (by UCWeb)

TCP » 52.18.157.175:80
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.