home

downloader-default2d.disk.yandex.net

Tatiana Bakharevskaya

Domain Information

The domain downloader-default2d.disk.yandex.net registered by Tatiana Bakharevskaya was initially registered in November of 2000 through SAFENAMES LTD. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
SAFENAMES LTD

Server location:
Moscow City, Russia (RU)

Create date:
Tuesday, November 14, 2000

Expires date:
Tuesday, November 14, 2017

Updated date:
Tuesday, December 1, 2015

ASN:
AS13238 YANDEX Yandex LLC,RU

Root domain:
yandex.net

Whois:
1 yandex.net record

The domain downloader-default2d.disk.yandex.net has been seen to resolve to the following IP address.

5.45.195.140
downloader-default2d.disk.yandex.net
April 2, 2016

File downloads found at URLs served by downloader-default2d.disk.yandex.net.

0 / 68
https://downloader-default2d.disk.yandex.net/rzip/d0eb177b7071378dbd25a9c91221ab19e577f9d93eb607a3d7b08c65918749e6/.../RzJ2MUhNeWUxQkZscmdldlVhTzNpNFJtWlI5dVVhUFN6Z3dLU3F4VmpzRT0=?uid=0&filename=FAR.CRY.4.V1.4.0.NODVD.zip&disposition=attachment&hash=G2v1HMye1BFlrgevUaO3i4RmZR9uUaPSzgwKSqxVjsE=&limit=0&tknv=v2&rtoken=liL7pJB5G7U2&force_default=no&ycrid=na-2bcc27a2cfc9cc95cd6a1d3136486b0f-downloader6e  (2a240a61718ca923dda3dff66eb23191)

0 / 68
https://downloader-default2d.disk.yandex.net/rdisk/47c83fb60bdf1044e7c0dfd07d0b538fed0f6ae175bb88c5dc5986cceefe9427/576e904e/.../x-rar&fsize=6693944&hid=4ce123b33c993f34c9eeb673f29d9b69&media_type=compressed&tknv=v2&rtoken=fHSOSmAx3WpT&force_default=no&ycrid=na-42d54c19372680c956e1f34a0647ab66-downloader2d  (7e357f49-4634-b1b6-6cba-cd9b17faf362_1d1cf92a94c5863)

0 / 68
https://downloader-default2d.disk.yandex.net/rzip/150b57f6156c090ad201d3135a0b86bab22724b3575c60cd62f4d8d75c59685f/575e0000/QVRyWi9zYlVRNTNUNktaY0h1aWtINnBNZVovNjNEQ3h0aFp2ZHlMMmRuVT0=?uid=0&filename=?????????????.zip&disposition=attachment&hash=ATrZ/.../63DCxthZvdyL2dnU=&limit=1&tknv=v2&rtoken=Jtxdh77IfLM9&force_default=no&ycrid=na-f4fdd121171d304ab511a6af25ae8fb1-downloader1d  (дополнительно.zip)

0 / 68
https://downloader-default2d.disk.yandex.net/rzip/1841a6af365935aead850a5ea3b0662b628c31b8baad0ff361f7803e93f1bb67/.../ajlBcks1YTN6MlBkdEhRd2d4K1dzSFd2UEoxR0Y1YklDTHZNM21uNDB4QT0=?uid=0&filename=??? ?? ?????.zip&disposition=attachment&hash=j9ArK5a3z2PdtHQwgx WsHWvPJ1GF5bICLvM3mn40xA=&limit=0&tknv=v2&rtoken=vhMY7CiB4rPQ&force_default=no&ycrid=na-621a7069517e9ac2432e492e6afa4b22-downloader2h  (бот на шахту.zip)

0 / 68
https://downloader-default2d.disk.yandex.net/rshare/9c126b1a07dadcf402debff01cb52db55cd5d91f6cef9841b6d5fdf4639b9e11/56f13369/.../x-msdownload&fsize=1540008&hid=8beb6e0aae41c9f74a5a8a7c585ebf85&media_type=executable&tknv=v2&etag=a9b1246c2797913feca49adcc5f8078c&rtoken=to2wf1L7t0FS&force_default=no&ycrid=na-1e2e959da6f59ee230a1478144716035-downloader8d  (hzxrrwjh.exe)

0 / 68
https://downloader-default2d.disk.yandex.net/rshare/fb9dd07682ca234e3f0d961973bdc321f41b8ef4674085f628ae3ed8c9bcbfa4/56a0d79b/.../x-msdownload&fsize=1364904&hid=aaca51723a0e42f6c33f171361a6c61b&media_type=executable&tknv=v2&etag=f49e905cb3654301889a98a8924d5022&rtoken=876553fcd08c3e4d9acc94b407c85688&force_default=no&ycrid=na-df68e457a5ae755402fd75431cfc3564-downloader9d  (f49e905cb3654301889a98a8924d5022)

0 / 68
https://downloader-default2d.disk.yandex.net/rshare/14547952006ab4862280545e01b53cb41392cb3793f3bdea9fcc8b5a97f5e6ce/56d311c2/.../x-msdownload&fsize=1540008&hid=8beb6e0aae41c9f74a5a8a7c585ebf85&media_type=executable&tknv=v2&etag=a9b1246c2797913feca49adcc5f8078c&rtoken=oWi7SypyNLhU&force_default=no&ycrid=na-87945688f974e7271efa4281328e4bc5-downloader5d  (hzxrrwjh.exe)

0 / 68
https://downloader-default2d.disk.yandex.net/rshare/805ca88a8638239a28425092484e0f3e1dbe1c81f0a630c979bd01ebca716ef5/56bfc06e/.../x-msdownload&fsize=1546664&hid=f42650a90ad2c4aa8e9e1dd70a657bbd&media_type=executable&tknv=v2&etag=fab98cc5a0391ca385963d1ecafc1228&rtoken=PxJcZvPWV9By&force_default=no&ycrid=na-7053949c96fabbd028238b3259b6e626-downloader1g  (fab98cc5a0391ca385963d1ecafc1228)

0 / 68
https://downloader-default2d.disk.yandex.net/rzip/505b132fa8ab394b3116724fd71c8135c976914c34d68bac1addf8badf17c759/.../YWJkYVFrYUNXWWlRbFU4RVBPNkpKMWg5N25nMG0wOE1CWVA1UEdvNmtlWT0=?uid=0&filename=????????? Steam ??????.zip&disposition=attachment&hash=abdaQkaCWYiQlU8EPO6JJ1h97ng0m08MBYP5PGo6keY=&limit=0&tknv=v2&rtoken=lwEKHrI3fUcm&force_default=no&ycrid=na-19475a6bf211f4b486788e5446624222-downloader13e  (генератор steam ключей.zip)

The following file have been seen to comunicate with downloader-default2d.disk.yandex.net in live environments.

TCP » 5.45.195.140:443
yandexdisksetupru.exe

URL:
http://downloader-default2d.disk.yandex.net/

Title:
“Сервис временно недоступен”

SSL certificate subject:
CN=*.disk.yandex.ru, S=Russian Federation, L=Moscow, OU=ITO, O=Yandex LLC, C=RU

SSL certificate issuer:
CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.