home

downloader-ams2.disk.yandex.com

Tatiana Bakharevskaya

Domain Information

The domain downloader-ams2.disk.yandex.com registered by Tatiana Bakharevskaya was initially registered in September of 1998 through SAFENAMES LTD. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
SAFENAMES LTD

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, September 24, 1998

Expires date:
Wednesday, September 23, 2015

Updated date:
Thursday, November 13, 2014

Root domain:
yandex.com

Whois:
1 yandex.com record

The domain downloader-ams2.disk.yandex.com has been seen to resolve to the following IP address.

178.154.255.242
downloader-ams2.disk.yandex.ru
December 6, 2014

File downloads found at URLs served by downloader-ams2.disk.yandex.com.

0 / 68
https://downloader-ams2.disk.yandex.com/rdisk/f05aae99c8c6188e41c0b7d5680cb194/54866cfc/.../x-msdownload&fsize=812856933&hid=9282f46444657b1733a4cff2e0a5d1fb&media_type=executable&rtoken=bac76dfb826d97f1589fa205f0679345&rtimestamp=548634bd&force_default=no  (0e77d2d965fdbb16bf2b19947e0351eb)

0 / 68
https://downloader-ams2.disk.yandex.com/rdisk/06d56aa07a992b461db2f88f33afe2fc/54252026/d5WgQOCZqOdPYoB66-yd7oGjvMcAZDZsNmKFfXj-KyqCKCNKenwDYsQbCJXvuFqGd8S0fVmx30RQDWAGP4-FDg==?uid=0&filename=aimp_3.60.1425_beta_2.exe&disposition=attachment&hash=Cl40VLZPw TcbMtropEtjEIRToYAAi6jhJ4A/.../x-msdownload&fsize=9336736&hid=07aea4d534de94fb202e04fd46329867&media_type=executable&rtoken=8d703b32edc7ea150024b55f27e49169&rtimestamp=5424e7e8&force_default=no  (updateinstaller.exe)

The following 2 files have been seen to comunicate with downloader-ams2.disk.yandex.com in live environments.

TCP » 178.154.255.242:443
YandexDisk.exe (Yandex.Disk by Yandex)

TCP » 178.154.255.242:443
ekrn.exe (ESET Smart Security by ESET)

com.tr

yandex.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.