home

cdn.wholefolderscenter.com

Communigal Communication Ltd

Domain Information

The domain cdn.wholefolderscenter.com registered by Communigal Communication Ltd was initially registered in May of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Muenchen, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Bayern, Germany (DE)

Create date:
Monday, May 4, 2015

Expires date:
Wednesday, May 4, 2016

Updated date:
Saturday, June 13, 2015

ASN:
AS61969 TEAMINTERNET-AS Team Internet AG,DE

Root domain:
wholefolderscenter.com

Whois:
1 wholefolderscenter.com record

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Meta, PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore (M)
83.33%

Dr.Web
Trojan.InstallCore.827
33.33%

VIPRE Antivirus
Threat.4150696
33.33%

ESET NOD32
Win32/InstallCore.ZD potentially unwanted application
33.33%

Malwarebytes
PUP.Optional.InstallCore.A
33.33%

K7 AntiVirus
Adware
33.33%

Agnitum Outpost
PUA.InstallCore
33.33%

NANO AntiVirus
Riskware.Win32.InstallCore.dsgvqy
33.33%

Comodo Security
Application.Win32.InstallCore.DAH
33.33%

Avira AntiVirus
PUA/InstallCore.746172
33.33%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
8.33%

herdProtect (fuzzy)
a variant of 7fb6b57cd51ce647bce57a6922b0ab793a9eee8f
8.33%

The domain cdn.wholefolderscenter.com has been seen to resolve to the following IP address.

185.53.177.8
May 18, 2016

File downloads found at URLs served by cdn.wholefolderscenter.com.

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=dKKVGEBWpHNXuyDhwCIbYCLNV8m4Dr0DM7K/hCe6/.../5w4HdRHzCDJZqEg==&downloadAs=FileZilla_3.11.0.1_win64-setup.exe  (8460bfe6edb90239b9d0cae54f629f30)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=OGu/.../lVR1pUU4qQfrrz7sE4G8w83QBthSo=&c=D98nb3dKXGLR1IaE0YX5kbnm3Eum368NFD41cvOlo15qijj1rn7Oz1ngdW3oMStuaQFk dBtjgdAPko4eswyKA==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (d83a8f061b6caf541799f2a329ab87fb)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=UiW8HGQH9 rr7h2gZs3r28FnjiLc5LPzXH1rmkXpvzo=&c=PRzzAAum0VUZb155TVwtjQ4l/4Dxs03m/.../4DebEXULg==&downloadAs=FileZilla_3.11.0.2_win32-setup.exe  (8d54daab041b95485a8d4bd2e0f3e856)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=iTgoJz4dZ1IEj8zlqvZHpo2m7cqItB63U84fDTJ95cA=&c=vkY3ZKOyJa /.../EHjZyavdVMp4mqeLdBpOrlB7rE6A==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (90254ecf86a0929b5f780d6ceb935db1)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/.../Xcoav5kbidjntI2lcQvWIbiia37XD679elfa5uDM6gCosTVZbwNU3w==&downloadAs=FileZilla_3.11.0.2_win32-setup.exe  (3f94ea365eea477f83f013f961495e94)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=QqvXGCJjeL 8HgXgN1cqeTQrFa1zQRG80blW1q5PlD0=&c=9k0YuMvCYuz1B0YnKDnno1wSkX7ZQ4aA2LJKWhXVMXBUVf3BMcVuJlxkOeviilyVSWAgThoPdapIKWnOWcU2tQ==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (a25caa8912a3512e469764b73e38f9e4)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=F9zFJUNCNh0Lja6dsTtv1rJ5dK6f1OBOuKWrismr3Dc=&c=pkSvv19dSJFAtCENqT/.../fUSE IDNGqEg==&downloadAs=FileZilla_3.11.0.2_win32-setup.exe  (6574c36c7fb704d4e6d5095205021295)

1 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=f9UGbXgaC7BYI6Gf5b1leSRDuw10pwWQHrU1hGFMu30=&c=pY1XdcJ8J0ci2LnQL76sj7qi/69Bmub/gakgyqlFOYSJIaYxw /.../DKCeUs jRQovsoJSUjzFwqg==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (81773b10091157c9a39b616e8b6b5a0c)

11 / 68    (PUP)
http://cdn.wholefolderscenter.com/c?x=f54sYoFrKlQ9HsqN7aLEuDDfBfexq4MBPoRWFlL2t3o=&c=N MM0MDfYBwmCq7N5 zpVEQxCX0Xt/oDQu0AwAIaU0XpjIU77naAy rQve LsSGccI0x7WikEuNy/.../FrRqvA==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (86b80e1e8c2f34afb463bf7468544193)

0 / 68
http://cdn.wholefolderscenter.com/c?x=kVV1BymTSN1ApfzC52dzwYm8kqqCLEIlWu4wyZyISl8=&c=SB 5o9gfGjvRrP/N4gQDtb5HJXoCL9sZKDWgYDUTk/.../LwBeDcDJp8H7IZXu9iiES0v56Y0n41w==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (d6c13666cef82b564d248361c41b27f0)

11 / 68    (PUP)
http://cdn.wholefolderscenter.com/c?x=GACIbCXsWAhrXSS4UHh/FyDf4/h5YDtIqeC1Dx6 K6A=&c=DKe/.../J9jYELw==&downloadAs=FileZilla_3.11.0.2_win32-setup.exe  (12c6cc664c7caa88b04ee4300eddd5e1)

9 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=UEkyrwwvuFTJ5x69Oc/XhIaQrSp/MMqQB5/.../uY9Uirlis6qslt168lWM9ZWaB1SEiokL6LIcgvpUVlAgFsHb WCzcjuLneAFZRm3qIMqdM4X4ry65LcbnRwCQ==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (8f5aa917ca6ed0887c660440368ff3ba)

9 / 68      (PUP)
http://cdn.wholefolderscenter.com/c?x=pgDFvmOKQoIgqWPMnEnHXjJ0R8s8BBeCg8MbJ4G33NA=&c=UEYbiE6eVfwoXyiJK2tdVAjLmq2svo1OjdQ8cp jsS1A/.../dAIPn75seSNJ6iLOKBxgw==&downloadAs=FileZilla_3.11.0.2_win64-setup.exe  (d3dd62301825c18f633b070370850114)

The following 3 files have been seen to comunicate with cdn.wholefolderscenter.com in live environments.

TCP » 185.53.177.8:80
securedocumentsviewer.crx

TCP » 185.53.177.8:80
securedocumentsviewer.crx

TCP » 185.53.177.8:80
securedocumentsviewer.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.