home

browser.yandex.ua

Domain Information

Server location:
Moscow City, Russia (RU)

ASN:
AS13238 YANDEX Yandex LLC,RU

Root domain:
yandex.ua

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yandex (L), PUP.Yandex.Installer.Meta (L)
100.00%

The domain browser.yandex.ua has been seen to resolve to the following 2 IP addresses.

213.180.204.206
onepage.msup.yandex.net
February 8, 2016

87.250.250.85
https.nodejs.spec.yandex.net
December 27, 2013

File downloads found at URLs served by browser.yandex.ua.

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__turbo_ru|&banerid=0802000725:eyJpZHMiOlsiMjE0Njc3ODUiXSwicmVmIjoiaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS51YS8iLCJ1YSI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDYuMSkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUwLjAuMjY2MS4xMDIgU2FmYXJpLzUzNy4zNiIsImlwIjoiOTMuNzQuMjA3LjI2IiwidXJsIjoiL2Rlc2t0b3AvdHVyYm8vP2xhbmc9cnUmaW50bD0xJm5ldD15ZXMmZnJvbT1hZHdvcmRzX3NlcnBfX3R1cmJvX3J1JTdDJmJhbmVyaWQ9MDgwMjAwMDcyNSZnY2xpZD1DTUdBbDVIZGhzMENGVVNWR3dvZG9vVUQ0USZuY3JuZD0zNTUiLCJob3N0IjoiYnJvd3Nlci55YW5kZXgudWEifQ==&gclid=CMGAl5Hdhs0CFUSVGwodooUD4Q&ncrnd=355&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&_rdr=safe&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&ncrnd=4640&download_date=1443177892&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725:57a3262eff152d0017812148&utm_source=google&utm_medium=gdn&utm_campaign=Banners_soft_gdn&utm_term=hd ??????&utm_content=www.youtube.com&gclid=CKKBrKjTp84CFdcK0wod5XgJmA&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&from=teaser_main_neyb_red-button_|&banner_id=1345082344&reqid=1467747018609-107669-imgs28-121-ATOMS-distr_portal&banerid=020109301467747018609107669281:577c0aeb9bdf7417006e3c5c&host=teaser&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__secure_ru|&banerid=0802000724:eyJpZHMiOlsiMjE0Njc3ODUiXSwidXJsIjoiL2Rlc2t0b3Avc2VjdXJlLz9sYW5nPXJ1JmludGw9MSZuZXQ9eWVzJmZyb209YWR3b3Jkc19zZXJwX19zZWN1cmVfcnUlN0MmYmFuZXJpZD0wODAyMDAwNzI0JmdjbGlkPUNPVEozcWUtc3MwQ0ZlY3VjZ29kaENrS2RBJm5jcm5kPTYxMTUiLCJ5dWlkIjoiMzgyMTY2MzE0NjUwNzE0MzgifQ==&gclid=COTJ3qe-ss0CFecucgodhCkKdA&ncrnd=6115&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?from=strip_main_win_green-yellow-button-60_turbo2-8&banerid=0101000333&lang=ru&download_date=1429526156&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?from=distr-wizard_serp___&banner_id=ua_browser_6&reqid=1470472734132-178702-sas1-1523-ATOMS-distr_serp&banerid=220209301470472734132178702115:57a5a2295d11ac0016b53b4e&host=default_search&utm_referrer=https://yandex.ua/.../?lr=21609&clid=2275357-219&win=238&msid=1470472708.98307.22885.26775&text=гигапон кременчуг&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__secure_ru|&banerid=0802000724:578231285f25ec1600b0d9b7&utm_source=google&utm_medium=search&utm_campaign=Brand_search&utm_term= ??????? ??????&utm_content=&gclid=Cj0KEQjw5Ie8BRCJ9fHlr_bH24cBEiQAkoDQcacu8CvfIUN2upE7sGlzFbrOygUU-3qS1XGdyvNwdzIaAm3L8P8HAQ&ncrnd=1673&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&userchoice=1&banerid=6302000000:57a860bda2fcfd00171549d1&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?banerid=6300000000:577f970541602216002f168f&utm_referrer=http://.../search?gp=812209&fr=chxtn12.0.10&q=скачать яндекс&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&from=teaser_main_neyb_red-button_|&banerid=0201000088&download_date=1438859654&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?lang=ru&intl=1&utm_referrer=https://.../&_rdr=com&banerid=6302000000&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__turbo_ru|&banerid=0802000725:57a6d9b95d11ac0016b65add&utm_source=google&utm_medium=search&utm_campaign=Non-brand_search&utm_term=??????? ?????&utm_content=&gclid=CjwKEAjwlZa9BRCw7cS66eTxlCkSJAC-ddmwDTVk-QZkyIa1jxwfgD78bzv8YakGKspHU9ieM2FKBRoCp8_w_wcB&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?from=popup_main_neyb_1_&banner_id=8737345&reqid=1467312632042-406701-vsearch24-44-ATOMS-distr_portal&banerid=610109301467312632042406701244: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&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?_rdr=com&banerid=6400000000:57944c0d8124fc00166e9533&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?from=popup_main_neyb_1_&banner_id=6128637&reqid=1469912222924-799468-sas1-0543-ATOMS-distr_portal&banerid=610109301469912222924799468105:579d14a743b28b001707270d&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?banerid=6302000000:5796f1cb07378c001647e93c&utm_referrer=https://.../&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725:579606b73c8888001650edc5&utm_source=google&utm_medium=gdn&utm_campaign=Banners_soft_gdn&utm_term=?????????&utm_content=www.softrew.ru&gclid=CPn6v7_Pjs4CFcIK0wodU78K4g&ncrnd=2661&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?banerid=6300000000:5785f777d91f330017e7bc73&utm_referrer=http://.../search?q=crfxfnb zyltrc&gp=821563&frc=821563&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&pane=video&from=banner_portal__sekundomer-pages_ua|&banerid=03000000360&download_date=1440322024&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?lang=ru&intl=1&_rdr=safe&from=wizard___one_|&banerid=0500000134&utm_referrer=https://yandex.ua/.../?lr=966&msid=1462520650.07276.22884.31649&text=скачать яндекс браузер&suggest_reqid=114289761144285061207141894291459&csg=10356,15533,10,11,2,0,0&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/.../bGFuZz1ydSZpbnRsPTEmbmV0PXllcyZmcm9tPWFkd29yZHNfc2VycF9fc2VjdXJlX3J1fCZiYW5lcmlkPTA4MDIwMDA3MjQmZ2NsaWQ9Q1BqaWlPZXNwYzBDRllrTWN3b2RBaXdDMnciLCJob3N0IjoiYnJvd3Nlci55YW5kZXgudWEiLCJ5dWlkIjoiOTg5OTMxNDcyMTQ2NTgyMzY1MiJ9&gclid=CPjiiOespc0CFYkMcwodAiwC2w&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__secure_ru|&banerid=0802000724:579f4e1843b28b0017098e9b&utm_source=google&utm_medium=search&utm_campaign=Brand_search&utm_term= ??????? ??????&utm_content=&gclid=CPXfhOuooM4CFegGcwodLxsOdA&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?lang=uk&intl=1&_rdr=safe&from=wizard___one_|&banerid=0500000134&utm_referrer=https://.../yandsearch?rdrnd=740211&text=скачать яндекс браузер&clid=1782908&lr=10347&redircnt=1462307230.2&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_serp__turbo_ru|&banerid=0802000725:57a28fadff152d0017805342&utm_source=google&utm_medium=search&utm_campaign=Non-brand_search&utm_term=????? ???????&utm_content=&gclid=CImF3ubDps4CFULGGwod6BII2Q&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?lang=ru&intl=1&utm_referrer=https://browser.yandex.ua/ru/desktop/.../&banerid=6400000000&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/download/?lang=uk&intl=1&_rdr=safe&utm_referrer=http://yandex.ua/.../jsredir?from=yandex.ua;search/;web;;&text=&etext=1002.XPpUNJy7k_pVwErLKuNypCIoyTSx6gDC9-YJLYQhw2I5Aw_Oa95iBAG6dZA8qTxeVrLhPykC4oGTI79XFOhOonZyepHl1V90JGTNz_JwHIDX9fResVloJa9377B_xXKLYU-f0aGPMO7S77zR9cdoiA.d4a0bfe29cb4fcbbc1f174c22837aee7a544b600&uuid=&state=PEtFfuTeVD5kpHnK9lio9WCnKp0DidhEnJgmlcOG45r7zHa-Y_zfflp_QvvbgduOw5UH9sqjnOw&data=UlNrNmk5WktYejY4cHFySjRXSWhXSll2d0VCWEpBd1FHSWJfc1Ixemt1bGVvd1JLdlByZ2FqYXJzeGo4MC1aa3RHb0lUSUZSMnp0aXlsbkhLbmo4LTVUZGNLQWYtNllvY0Jzc1QyMlZJZDQ&b64e=2&sign=4a1717e79d402fba78ec21a5c316c52b&keyno=0&cst=AiuY0DBWFJ5Hyx_fyvalFD5iBXWoV4B7z6ihAHoUEPXoasDf7f_M3MaexzOHaORXFqevaKsOinmbDnlKoLNYPl1hMTZOJ4q59QQm8DIsMkgLM35mDEZXiEC8S7-SKtpjvm-FDh7JMuInH9r8ONkzHA-eYHdaherSwzWixdzhjMwdFyz9MzUVOenMsPriIcgso-VUDavHRjTW4lavBpyY0KP76pDuaFI_Sa2RQS5Ok9J7GGazsTCT7BzvTREXZMzorrBEiCi9j4eu4jaJQKHfhrST36Csabgw6SMMIj  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725:57a720bab549e40016de866d&utm_source=google&utm_medium=gdn&utm_campaign=Banners_soft_gdn&utm_term=chrome&utm_content=szoftverhotel.hu&gclid=CP6g5dier84CFWQq0wodih4OaQ&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.ua/.../?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725:5794583c3c888800164ef8e1&utm_source=google&utm_medium=gdn&utm_campaign=Banners_soft_gdn&utm_term=chrome&utm_content=www.gtavicecity.ru&gclid=CIqYwfq0i84CFYLFcgodR1gOMw&ncrnd=5196&zih=1&lite=1  (yandex.exe)

 
Latest 30 of 2,461 download URLs

The following 21 files have been seen to comunicate with browser.yandex.ua in live environments.

TCP » 213.180.204.206:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 213.180.204.206:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 213.180.204.206:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
crossbrowse.exe (Crossbrowse)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 213.180.204.206:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.180.204.206:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.180.204.206:443
client.exe (ClientWrapper)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
browser.exe (Yandex by YANDEX)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:443
browser.exe (Yandex by YANDEX)

 
Latest 20 of 32 files

com.tr

yandex.by

yandex.com

yandex.kz

yandex.net

yandex.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.