» www.slunecnice.cz
Overview
Analysis
IPs Addresses (1)
Downloads (2,641)
Network (2)

www.slunecnice.cz

Domain Information

Server location:

Hlavni Mesto Praha, Czech Republic (CZ)

ASN:

AS24971 MASTER-AS Master Internet s.r.o

Root domain:

Scanner detections:

Malware distribution (76% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP (M), PUP.YTD.Installer (M), PUP.Internet.Installer (M)

100.00%

The domain www.slunecnice.cz has been seen to resolve to the following IP address.

www.slunecnice.cz

January 6, 2014

File downloads found at URLs served by www.slunecnice.cz.

1 / 68 (Malware)

http://www.slunecnice.cz/sw/ls-image-converter/stahnout/23851/.../?md5=eDUphv8k3DjmBpZ5Xn_erQ&expires=1458040550 (ic_setup.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/fake-voice/stahnout/27937/.../?md5=fDzfFM7cTl-Rj_qJVbtCvw&expires=1467892757 (fvoicesetup.exe)

0 / 68

http://www.slunecnice.cz/sw/moorhuhn-2/stahnout/781/.../?md5=SUS4Dz3S7NeJ47W4AmsBIw&expires=1460739274 (cc_mh2v11.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/moorhuhn-pinball-xs/stahnout/12736/.../?md5=RjU2-5kq9l9-HwAQ-G0AZQ&expires=1460740714 (setup_moorhuhn-pinball-xs.exe)

0 / 68

http://www.slunecnice.cz/sw/xnview/stahnout/29/.../?md5=1_PH0Xx2i8PdAzIVn3BdJQ&expires=1470585381 (xnview-win-small.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/burn4free/stahnout/7444/.../?md5=wKD-91jVKN3_qWPONAF9hw&expires=1470769602 (burn4freedvdcopy.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/program-autoservis-admwinde/stahnout/35247/.../?md5=Q35ntgNHmmMr0KXQg3WecA&expires=1458839324 (setup_admwindeserv.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/corel-videostudio-pro/stahnout/424/.../?md5=b9EI1A0iVf6qZRmUk3C4-Q&expires=1470563004 (videostudiox9_installer.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/magix-video-easy-hd/stahnout/35120/.../?md5=epv_Ke5ZaUDGk2q90dFzng&expires=1470543424 (trial_videoeasy5_dlm.exe)

0 / 68

http://www.slunecnice.cz/sw/winx-dvd-copy/stahnout/23893/.../ (winxdvdc.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/accent-office-password-recovery/stahnout/34643/.../?md5=Zr7jImB_YwTVRPdsy6yTfg&expires=1463924538 (accentopr_x64_800.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/esfsoft-soundcloud-downloader/stahnout/35996/.../?md5=YlsPxKiTKi3Mrylb2-mYMA&expires=1452884531 (esfsoft-soundcloud-downloader.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/iso-workshop/stahnout/33014/.../?md5=EN-eNDO33NCfa1JqyR8XVw&expires=1469277836 (isoworkshop_7.1.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/windows-phone-recovery-tool/stahnout/38209/.../?md5=FEcPDQPJwNO5W4Q8YBaJdg&expires=1468221590 (windowsphonerecoverytoolinstaller.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/bitcomet/stahnout/37785/.../?md5=f85VQFq1DMGcqQz_4N_sGA&expires=1453232506 (bitcomet_1.40_x64_setup.exe)

1 / 68 (PUP)

http://www.slunecnice.cz/sw/prekladac-britanik/stahnout/10356/.../?md5=fuNaR-Dv7uG_tumqQ8JmkQ&expires=1457528433 (britanik-setup-200.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/switch-plus/stahnout/30480/.../?md5=CGEYb2gJskP2PJQg-5hHig&expires=1469696150 (switchsetup.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/nero-soundtrax/stahnout/37135/.../?md5=kNHq6iYJM4GEJJfBRLDqZA&expires=1470139914 (nero_soundtrax.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/28-kviz/stahnout/24519/.../?md5=d3il5RN8nOE-s8FOwbtMHw&expires=1440980122 (28kviz.exe)

0 / 68

http://www.slunecnice.cz/sw/faktura/stahnout/27754/.../?md5=sTRptCe9jRAXjF-Ei_iy_w&expires=1469296724 (setupf.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/okdo-split-and-merge-pdf/stahnout/39114/.../?md5=FlBTN0NhLt9V16nAm2MFJA&expires=1469611197 (okdo-split-and-merge-pdf.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/virtualdvd/stahnout/39037/.../?md5=ZtcLk3mqP7OVXDrqUE6L7g&expires=1469993132 (virtualdvd_v7.2.0.0.exe)

0 / 68

http://www.slunecnice.cz/sw/any-video-converter/stahnout/20453/.../?md5=VFwRk8h6THd4GrMbYVuHRg&expires=1465738204 (avc-free.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/generic-game-trainer/stahnout/2576/.../?md5=p4Ey4Mgzq13vdRl7LyVWYw&expires=1468263273 (gentrain.exe)

0 / 68

http://www.slunecnice.cz/sw/pdf-xchange-viewer/stahnout/23491/.../?md5=BYVlURjZWtwHfFouATICDA&expires=1470311573 (pdfxve6_trg.exe)

1 / 68 (PUP)

http://www.slunecnice.cz/sw/brisk-express-recorder/stahnout/24117/.../?md5=ygVfXK1XKIth4jQYWzfrtA&expires=1458543223 (briskexpressrecordersetup.exe)

1 / 68 (PUP)

http://www.slunecnice.cz/sw/youtube-downloader/stahnout/21450/.../?md5=JIUekpzrVKmVLIYSRzmzJQ&expires=1433090995 (ytdsetup.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/putty/stahnout/2187/.../?md5=Os_6KJPlX0XCgzTBHL15WA&expires=1464856610 (putty.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/magix-music-maker-mx/stahnout/33289/.../?md5=JZ7malSnH3rr3PcnLX86Lg&expires=1456526876 (musicmaker_mx_productionsuite_dlm.exe)

1 / 68 (Malware)

http://www.slunecnice.cz/sw/advanced-pdf-to-image-converter/stahnout/14823/.../?md5=J1bW7IT4TeZoXm4QqY0Xdg&expires=1450899484 (intrapdf_pdf2jpeg_setup.exe)

Latest 30 of 2,641 download URLs

The following 2 files have been seen to comunicate with www.slunecnice.cz in live environments.

TCP » 91.213.160.125:443

TCP » 91.213.160.125:443

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.