home

downloader.disk.yandex.ru

YANDEX, LLC.

Domain Information

The domain downloader.disk.yandex.ru registered by YANDEX, LLC. was initially registered in September of 1997 through RU-CENTER-REG-RIPN. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dubna, Moskva within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moskva, Russia (RU)

Create date:
Tuesday, September 23, 1997

Expires date:
Saturday, October 1, 2016

ASN:
AS13238 YANDEX Yandex LLC

Root domain:
yandex.ru

Whois:
4 yandex.ru records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FileTour (M), PUP (M), PUP.Yandex (L), PUP.FileTour.Amulet (M), PUP.InstallCube (M), PUP.FileTour.INTIS (M)
100.00%

The domain downloader.disk.yandex.ru has been seen to resolve to the following IP address.

77.88.21.127
downloader.disk.yandex.ru
December 25, 2013

File downloads found at URLs served by downloader.disk.yandex.ru.

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/27b06d5f3b60af03f95a03c67682f50bfebb230c40a606b8a3c663a56d70b519/5762a395/.../x-msdownload&fsize=2252744&hid=693c9a41315360d0b69aa42084031f23&media_type=executable&tknv=v2&etag=1b6a7d11eb1debbefb6f795dad0e272b  (1b6a7d11eb1debbefb6f795dad0e272b)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/b798b835ce428b098b68cd395cdfbdd81618325529ff17acd92cd210000b550a/57ab7312/.../x-msdownload&fsize=2838448&hid=6aad8c9eec6a7baa439478a50bcda970&media_type=executable&tknv=v2&etag=c4a86bc8b0f809d7494e4f6834109d84  (c4a86bc8b0f809d7494e4f6834109d84)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/b315f0ee5efee79c13fb1d98c8bf13ef7ed7d6cdd53e76b51e428923832dfe3a/57683651/.../x-msdownload&fsize=2425800&hid=95ba5d7a12447325df2f1ab32f297db3&media_type=executable&tknv=v2&etag=ee68801eb7f2e07482fe301808944ba3  (ee68801eb7f2e07482fe301808944ba3)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/fe18cfd8eebf848645f77ec1f380881d71f842c7f73396694074a18e92488d50/57683881/.../x-msdownload&fsize=2425800&hid=b599ad03b05556435eb344b4c6891ed7&media_type=executable&tknv=v2&etag=d9ca6af0339903a38626235c5e4e205b  (d9ca6af0339903a38626235c5e4e205b)

0 / 68
https://downloader.disk.yandex.ru/disk/d9165e465bf87e2c71fcad4721c7a69799cbc02ba46d54ad1d12b36c6933560b/57aa0ed9/6nirTJqVxrY_wZ97IqAOon_YH-pPKNZVwilmh_pvcHu9Os0WHU0bQj74M4gewIlUR2NItbH0vHLBqP7sHsIarw==?uid=0&filename=18333_Ur9.w3x&disposition=attachment&hash=t8dK0vRLOudQd1ZofVPNRc2bQWy0bY6wpIvCO/.../octet-stream&fsize=164830&hid=0d0155b9998b48caa60be4367d1cf2af&media_type=data&tknv=v2  (755cc262ddf389d09d299b9e1a71ee8c)

0 / 68
https://downloader.disk.yandex.ru/disk/3c726dd07ce451c6009090b0691f66809e59f7c9f1ecc1bf20bed2c0a51ccaa0/57896acf/.../x-zip-compressed&fsize=216605&hid=ea1c64e753172d1898b431de9531bbf3&media_type=compressed&tknv=v2  (скин пак.zip)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/cb89a5edd9bae6140c684fd4dc04ab95a7f6f20e71cfe54682d1ecbd3736945f/57a8ac68/.../x-msdownload&fsize=2953648&hid=037a5f668db004094330a7e554409d77&media_type=executable&tknv=v2&etag=4f54801e151a1b28f22bc4b36d4c3d06  (4f54801e151a1b28f22bc4b36d4c3d06)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/5f7da0a8a7dacf97ced79550717c80314ec2add81295cc33e4f5d2843b85caf3/57a8ac7d/.../x-msdownload&fsize=2953648&hid=1fa1556e7882440d5d79a68c8d5b4b85&media_type=executable&tknv=v2&etag=d1c33b55178a301a1400531ac89ce82f  (d1c33b55178a301a1400531ac89ce82f)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/4187e7b25bb7672583196092f087a621180c2b8f1dc0ba6758a6f5cc6458fa7d/56fdc061/.../x-msdownload&fsize=2359704&hid=d94b5440dad23c87f9b5058dd62a434b&media_type=executable&tknv=v2&etag=3ce15feae4e7e368d72c41cf5da38092  (3ce15feae4e7e368d72c41cf5da38092)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/bc4c22ae89131cdc403a938505f2deb65bf5b22aad43e4147cdf6b7229848a39/56fdc073/.../x-msdownload&fsize=2359704&hid=f4dc39eb67ac0eff2562de17f82c513f&media_type=executable&tknv=v2&etag=ea0ece1350d4267e79f1162b34b6d787  (ea0ece1350d4267e79f1162b34b6d787)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/6591ff9a33be2e4a4af6c4b514b0d6fa8e124d166355013452a8d93e3ed8f88d/56ca0c8f/.../x-msdownload&fsize=3600152&hid=6634fe604c3aab65a71c90a2776dbf16&media_type=executable&tknv=v2  (11daef60067ca20d460a9f09d3ea2cbb)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/73a60c0605fe657cbab3d0e51fb446905fafc8470578d65ba4b5972d1f23e951/57ab7e92/.../x-msdownload&fsize=2838448&hid=a05217d0842f669eb0e0839377ba8924&media_type=executable&tknv=v2&etag=b62d085b54c04d30cc49a7e5aee8076e  (b62d085b54c04d30cc49a7e5aee8076e)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/fcd739901bdcb1212c3f61fe0405c91da7579de8d571951c1ffc04e9c1783a3f/57ab8eef/.../x-msdownload&fsize=2783152&hid=26e998fb0761989d28854170259823d6&media_type=executable&tknv=v2&etag=67607f55c179a341a0efb10a30e73990  (67607f55c179a341a0efb10a30e73990)

1 / 68      (Malware)
https://downloader.disk.yandex.ru/disk/ce9b5e31fb93b4badd449dc9fb7d33041a5d1d8e61ec84585cdee6e4bd2d5318/56e5546a/.../x-msdownload&fsize=2210512&hid=92cea53d2fce5e42aa324bfd58dce168&media_type=executable&tknv=v2&etag=120c0c89b0929cef9064b78da2635de4  (120c0c89b0929cef9064b78da2635de4)

1 / 68      (Malware)
https://downloader.disk.yandex.ru/disk/4868725cb5d20f27385290a9d59fa80eb13b61e8a44eaf97b0f2d7e4fe9d00ac/56e5548e/.../x-msdownload&fsize=2210512&hid=2b714a11af15d0aedd6dab3816f84223&media_type=executable&tknv=v2&etag=1074c1fbb202bda4e524f7128649dc3c  (1074c1fbb202bda4e524f7128649dc3c)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/82da1f170c03e0f219425877456ac52e151f9267232190907f6f6fd4ded0e395/56d45293/.../x-msdownload&fsize=3593432&hid=decc959b8e23d2901ee9f96a2d6dd718&media_type=executable&tknv=v2  (257ddfc1509fc9c2805052cf32268c4a)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/2df92618d2a5ed5278dbbdeac784891d20b47b87467133b8f13cbf385c53fa2f/57ab6adb/.../x-msdownload&fsize=2838448&hid=c2944029328eabb085e18a0b972f2dbf&media_type=executable&tknv=v2&etag=dd15772319accc17bb755d343a8b8e59  (dd15772319accc17bb755d343a8b8e59)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/735764275b35c15e655fd6f6d90a6685fa04caaa23c75e253421b76469c4bf56/578e00bf/.../x-msdownload&fsize=3071984&hid=520abd919dfdff6dd3e73fc666d02736&media_type=executable&tknv=v2&etag=7365ecbd0331c0c000b308780555f09f  (7365ecbd0331c0c000b308780555f09f)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/ed1abf5f36ee756a4d5c0469b7901a11904f38d554f54b62fd55f92af7e4529c/575208c2/.../x-msdownload&fsize=2004992&hid=1968a8ce6247f6147d2b0c64afe988e9&media_type=executable&tknv=v2&etag=ceabe18209c02734dfc905c9dcff15f2  (ceabe18209c02734dfc905c9dcff15f2)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/2a4a59413bea5bf96746d44f2841233bbf966dca6247caa0d78fe6516243aac2/57ab78f8/.../x-msdownload&fsize=2838448&hid=b8568bef0cc5f12d7192748eb9f2b634&media_type=executable&tknv=v2&etag=0e844455c692c6bf79fdd559b33cb5ff  (0e844455c692c6bf79fdd559b33cb5ff)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/e2637d9d59c5ca0deccdcb133c6caad8a099936bca32d129c74a1a93b4143b73/57a863a4/.../x-msdownload&fsize=2958688&hid=74b2cbccd4144b7f43a11620920672ed&media_type=executable&tknv=v2&etag=937e589ed7a0b9cbed65f58c9dc21cfb  (937e589ed7a0b9cbed65f58c9dc21cfb)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/580ea7a2f850ab63fa5c2ec11736470eb3fd1d881b022b944698772c048839b5/57a863d0/.../x-msdownload&fsize=2958688&hid=03efffb0d815b548ab238f662d3192c9&media_type=executable&tknv=v2&etag=c2ad224130a0c21ec59d6cf589b06dba  (c2ad224130a0c21ec59d6cf589b06dba)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/1e530f8f1c6167a6a9aba09cc5818f93cbb8ba98e53539837157c5c90c2afb45/57a5d032/.../x-msdownload&fsize=2903984&hid=5b3f2e2800e76e111d00fc075bfd70a7&media_type=executable&tknv=v2&etag=3840143010ddd0c83589ea12ada6a8dd  (3840143010ddd0c83589ea12ada6a8dd)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/e901506f1b0cb7cd1cbbe4cb9ff885b327497706cf4b5daeda5ec21a46883881/57a734ef/.../x-msdownload&fsize=2953648&hid=2bec53cf665a0f377b5dce1ec931db1f&media_type=executable&tknv=v2&etag=3ba75aedcd57b1c6c975789428912d0b  (3ba75aedcd57b1c6c975789428912d0b)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/9b8a88bee46e92c4d887a010da47a788875363aa913454bed1e2945a24fd9eec/57ab5ccc/.../x-msdownload&fsize=2838448&hid=946de0a8e3521ff7dcafc3c8528e5654&media_type=executable&tknv=v2&etag=3560a09590ef96d50edf40a7b84432d2  (3560a09590ef96d50edf40a7b84432d2)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/a4e7592272608281f60c0daa76450c9233c9d9c89e1e287595c866b68a33b112/57ab5cd8/.../x-msdownload&fsize=2838448&hid=3f1c7e009766133b622c056bc4f28576&media_type=executable&tknv=v2&etag=ab02939515d7726710f1e6338858a5e3  (ab02939515d7726710f1e6338858a5e3)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/share/810286dd45f3e908a37c0523afab632c205efc797c8bac6b3f5ce1fc6eafca3c/57a331b6/.../x-msdownload&media_type=executable&hid=f9636edc6dd91d09244d925bd5c9eae2  (d37c1819d55db940d5daa2f592acadc3)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/a9a4ce51375d67de392a24bda9d1de82ae3dee3e88796d9cc58b332d1433d66f/57aa18d4/.../x-msdownload&fsize=2838448&hid=12475a0a689fa9d5227dd033b156bf8c&media_type=executable&tknv=v2&etag=28119f34a477dd61df7ebcda3f6fa1be  (28119f34a477dd61df7ebcda3f6fa1be)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/281bbd4040aaa24ca021df232f0f2214a9270b78e32d61caf63c9a7d92ec1220/57964d4f/.../x-msdownload&fsize=2402736&hid=b33af488467f5f969aae7fd129c5b574&media_type=executable&tknv=v2&etag=126d6705d9b4fc68bae44c7512fc309d  (126d6705d9b4fc68bae44c7512fc309d)

1 / 68      (PUP)
https://downloader.disk.yandex.ru/disk/84ac992dbca3fb97c8cec0381ae01e1182513886eccc99b983d337f0c7c9b542/57a787fb/.../x-msdownload&fsize=2953648&hid=6374358c7bd173a26334ab4cd4240530&media_type=executable&tknv=v2&etag=85f75746528f11165c400fe83ae27b0f  (85f75746528f11165c400fe83ae27b0f)

 
Latest 30 of 12,489 download URLs

The following 19 files have been seen to comunicate with downloader.disk.yandex.ru in live environments.

TCP » 77.88.21.127:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 77.88.21.127:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 77.88.21.127:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 77.88.21.127:443
UCBrowser.exe (by UCWeb)

TCP » 77.88.21.127:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 77.88.21.127:443
kometa.exe (Kometa (1.0.0.0) by Kometa Authors)

TCP » 77.88.21.127:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 77.88.21.127:443
UCBrowser.exe (by UCWeb)

TCP » 77.88.21.127:443
YandexDisk.exe

TCP » 77.88.21.127:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 77.88.21.127:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 77.88.21.127:443
yandexdisksetupru.exe

TCP » 77.88.21.127:443
yandexdisksetupen.exe (Yandex.Disk by Yandex)

TCP » 77.88.21.127:443
vosteran.exe

TCP » 77.88.21.127:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 77.88.21.127:443
mybrowser.exe (MyBrowser)

TCP » 77.88.21.127:443
kometa.exe (Kometa by Kometa Authors)

TCP » 77.88.21.127:443
ed7cf6a31e4b9a4e5984c09ab44f4de8.exe

TCP » 77.88.21.127:443
run_csgo.exe

URL:
http://downloader.disk.yandex.ru/

Title:
“Сервис временно недоступен”

SSL certificate subject:
CN=*.disk.yandex.ru, S=Russian Federation, L=Moscow, OU=ITO, O=Yandex LLC, C=RU

SSL certificate issuer:
CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU

Web server:
nginx

com.tr

yandex.com

yandex.ua

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.