home

downloader-default2j.disk.yandex.ru

YANDEX, LLC.

Domain Information

The domain downloader-default2j.disk.yandex.ru registered by YANDEX, LLC. was initially registered in September of 1997 through RU-CENTER-REG-RIPN. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Tuesday, September 23, 1997

Expires date:
Saturday, October 1, 2016

ASN:
AS13238 YANDEX Yandex LLC,RU

Root domain:
yandex.ru

Whois:
3 yandex.ru records

The domain downloader-default2j.disk.yandex.ru has been seen to resolve to the following IP address.

141.8.159.146
downloader-default2j.disk.yandex.ru
May 30, 2014

File downloads found at URLs served by downloader-default2j.disk.yandex.ru.

0 / 68
https://downloader-default2j.disk.yandex.ru/rdisk/dc91e8c3f3137aa2d7f780c871e515de/512881a2/.../x-msdownload&disposition=attachment&hash=hxSyyDoVCbJlId RAUxzNWmYNzHEl3kaH5ld1WmUGmM=&limit=0&rtoken=7f1407a7fddb3df003a06527a3de939b&rtimestamp=512881a2  (updateinstaller.exe)

0 / 68
https://downloader-default2j.disk.yandex.ru/rdisk/488a39274f0c88f6c03ebe16d264b1ce/50f12a05/.../x-msdownload&disposition=attachment&hash=&limit=0&rtoken=9ba4a95265b1696f08d8f3135a93f4ab&rtimestamp=50f12a05  (41d5efbbae1ed63d78493d83c29f7e6c)

0 / 68
https://downloader-default2j.disk.yandex.ru/rshare/4c56c12d155af7581a095f4b7f54e6ad/537f4d05/.../x-msdownload&fsize=1002272&hid=0a355dc4ffd98c48b6fd5325db8c7f0c&media_type=executable&rtoken=209432aac161623cb3600cf6aad01417&rtimestamp=537f4d06&force_default=no  (485a98cad5384c7b296dc64a04bbf36d)

0 / 68
https://downloader-default2j.disk.yandex.ru/rshare/5a6ba8900f8ee6871e338e5a899c3c53/536456b9/.../x-msdownload&fsize=999544&hid=9459967aaef71715a0e5358bd8626ef4&media_type=executable&rtoken=a07eeb1d8f0b921a52797da74a03404f&rtimestamp=536456ba&force_default=no  (f27299a2114f77e9dfe2afc9aaa581ad)

The following file have been seen to comunicate with downloader-default2j.disk.yandex.ru in live environments.

TCP » 141.8.159.146:443
YandexDisk.exe

yandex.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.