home

yandexdisksetupen.exe

Yandex.Disk

YANDEX LLC

This is a setup and installation application. The file has been seen being downloaded from downloader.disk.yandex.com and multiple other hosts.
Publisher:
Yandex  (signed by YANDEX LLC)

Product:
Yandex.Disk

Description:
YandexDiskSetup

Version:
1.4.9.4724

MD5:
b6c5da0ad373fb60209d88922304ec80

SHA-1:
252c45e4d17032d636d879aa2990e9c7cba1a5f6

SHA-256:
35acafd40332cf198830ec8020610d7b83cce99eac5a2e7807fb3f229a16be4d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/9/2025 2:42:42 PM UTC  (today)

File size:
1.6 MB (1,659,784 bytes)

Product version:
1.4.9.5195

Copyright:
© 2012-2016 YANDEX

Original file name:
YandexDiskSetup.dll

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\yandexdisksetupen.exe

Digital Signature
Signed by:
YANDEX LLC

Authority:
GlobalSign nv-sa

Valid from:
9/25/2015 7:44:52 AM

Valid to:
9/25/2017 7:44:52 AM

Subject:
E=pki@yandex-team.ru, CN=YANDEX LLC, O=YANDEX LLC, L=Moscow, S=Moscow, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210FF6462B63D55AFBAA81F9C734A7AA94

File PE Metadata
Compilation timestamp:
7/10/2016 7:28:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:gRx33kx3ztbWOvx5RJcDZ2HK3quCkvjoK5diTrcXpeCWxjA:2abZPcDdqudvjoyiTgXpeC0jA

Entry address:
0x90619

Entry point:
E8, 4F, D7, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, 80, 15, 57, 00, 00, 74, 05, E9, FE, D7, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7...
 
[+]

Code size:
810 KB (829,440 bytes)

The file yandexdisksetupen.exe has been seen being distributed by the following 11 URLs.

https://downloader.disk.yandex.com/share/bdfae6776f4e0c836460d392ba2e14d7e72ddef090bac17ad1fd31f464c841b1/57891839/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/5e99429ffc1642a5f3c8228a492d149e9a095ca88e6b91399894fbcd68334d92/5794e46c/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/e79b361b2889a7f469900d8eb63d7d894456519ba681b6b158f33b75fce37321/57888f72/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/17ffdedbb77ccf52b5f34bb29a45df3267eb571a11aaee914a1fdb62e8b2f182/578e80b7/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/623f81d63a3be62ade90bd6d458b89454f89ab9b7b3342123fa4fa290509cc5f/579255bb/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/0f219dfe4e84fb03e62ca271ad54f3e6706bb157b4c6b41ad331be969a454cdf/578eae88/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/16dd47ef36eac16d424feb3aa8234899c7113d988166d4519a908823ff50aa34/578fd5c3/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader.disk.yandex.com/share/b4098ed95247333dfbe870a0ee5e3d58825786baa9ad5b92a188ab8e3a90365e/578bfc43/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader-default9e.disk.yandex.net/rshare/52e80cf9ec5b24267905be892ca62e1c16190529926693c461980a9a7eb57db0/5794e772/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80&rtoken=7L3bUVaDckxT&force_default=no&ycrid=na-60cbbd908ff6fb012f2bc1ffc0bbe8de-downloader3e

https://downloader.disk.yandex.com/share/ceea321f6ab196e5f4f4934c1e19b39c9819012f628521f05cc9e653eba4b383/578934aa/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80

https://downloader-default1h.disk.yandex.net/rshare/e16aae3f2f742b54f143c950a7b5c119091947d70c94071b995fedcdb9df1744/578ee6e2/.../x-msdownload&fsize=1659784&hid=9fe3513e2e6646b0212ce0efbfe9756e&media_type=executable&tknv=v2&etag=b6c5da0ad373fb60209d88922304ec80&rtoken=LOlYjeEpN7Eq&force_default=no&ycrid=na-a3d33c0386260ef0df24aa3351c653f6-downloader10d

Scan yandexdisksetupen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.