hxxps://github[.]com/Da2dalus/The-MALWARE-Repo

Resubmissions

17/03/2025, 11:12

250317-naszaa1qt4 4

17/03/2025, 11:05

250317-m62evs1pw2 10

17/03/2025, 11:00

250317-m3yvka1ny6 8

Analysis

max time kernel
285s
max time network
290s
platform
windows11-21h2_x64
resource
win11-20250314-en
resource tags

arch:x64arch:x86image:win11-20250314-enlocale:en-usos:windows11-21h2-x64system
submitted
17/03/2025, 11:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Da2dalus/The-MALWARE-Repo

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
250	3868	yadl.exe
243	5852	KLSetup.exe

Executes dropped EXE 5 IoCs

pid	Process
5852	KLSetup.exe
3868	yadl.exe
3040	tbp.exe
2116	tbp.exe
1984	tbp.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
16656	GameBarPresenceWriter.exe

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_999242296\manifest.fingerprint	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_999242296\typosquatting_list.pb	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\manifest.fingerprint	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_999242296\manifest.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\KLSetup.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	KLSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	yadl.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
8536	setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133866828145456298"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Explorer.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1678082226-3994841222-899489560-1000\{0F48B267-7E01-40DD-A47D-97C953502929}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1678082226-3994841222-899489560-1000_Classes\Local Settings	msedge.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\The-MALWARE-Repo-master.zip:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\KLSetup.exe:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1296	msedge.exe
1296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3308	Explorer.EXE
Token: SeCreatePagefilePrivilege	3308	Explorer.EXE
Token: SeShutdownPrivilege	3308	Explorer.EXE
Token: SeCreatePagefilePrivilege	3308	Explorer.EXE
Token: SeShutdownPrivilege	3308	Explorer.EXE
Token: SeCreatePagefilePrivilege	3308	Explorer.EXE

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
5172	msedge.exe
3308	Explorer.EXE
3308	Explorer.EXE
3308	Explorer.EXE
3308	Explorer.EXE
3308	Explorer.EXE
3308	Explorer.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5172 wrote to memory of 5836	5172	msedge.exe	78
PID 5172 wrote to memory of 5836	5172	msedge.exe	78
PID 5172 wrote to memory of 5536	5172	msedge.exe	79
PID 5172 wrote to memory of 5536	5172	msedge.exe	79
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 5744	5172	msedge.exe	80
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81
PID 5172 wrote to memory of 3712	5172	msedge.exe	81

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://github.com/Da2dalus/The-MALWARE-Repo
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:5172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x240,0x244,0x248,0x23c,0x28c,0x7fff29baf208,0x7fff29baf214,0x7fff29baf220
    3⤵
    PID:5836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1704,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:11
    3⤵
    PID:5536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2620,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
    3⤵
    PID:5744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=1824,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
    3⤵
    PID:3712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3444,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3452,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:1
    3⤵
    PID:4788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4752,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:14
    3⤵
    PID:4212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5168,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
    3⤵
    PID:3876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5104,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5840,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
    3⤵
    PID:3860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6004,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
    3⤵
    PID:2652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1128
      4⤵
      PID:1976
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6064,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
    3⤵
    PID:5240
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6064,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
    3⤵
    PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6480,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
    3⤵
    PID:5412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --field-trial-handle=6420,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1
    3⤵
    PID:3320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7104,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:14
    3⤵
    PID:5116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7112,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:14
    3⤵
    PID:3696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7120,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:14
    3⤵
    PID:3260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6520,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
    3⤵
    PID:2788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5160,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --field-trial-handle=5732,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --field-trial-handle=5172,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
    3⤵
    PID:3232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6392,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:14
    3⤵
    - NTFS ADS
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --instant-process --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --field-trial-handle=7060,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:1
    3⤵
    PID:492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7212,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:14
    3⤵
    PID:6096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=7872,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:1
    3⤵
    PID:5808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --field-trial-handle=8104,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8124 /prefetch:1
    3⤵
    PID:5736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --field-trial-handle=8248,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
    3⤵
    PID:4124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --field-trial-handle=6932,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
    3⤵
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --field-trial-handle=8488,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:1
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --field-trial-handle=3568,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
    3⤵
    PID:3560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --field-trial-handle=8036,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8068 /prefetch:1
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --field-trial-handle=7884,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
    3⤵
    PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --field-trial-handle=8688,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
    3⤵
    PID:5348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8768,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:14
    3⤵
    PID:3144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --field-trial-handle=8016,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
    3⤵
    PID:3008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --field-trial-handle=8532,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:1
    3⤵
    PID:4192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=7888,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:1
    3⤵
    PID:5456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=8452,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8508,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=8784 /prefetch:14
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:5308
- - C:\Users\Admin\Downloads\KLSetup.exe
    "C:\Users\Admin\Downloads\KLSetup.exe"
    3⤵
    - Downloads MZ/PE file
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:5852
  - - C:\Users\Admin\AppData\Local\Temp\yadl.exe
      "C:\Users\Admin\AppData\Local\Temp\yadl.exe" --partner 418804 --distr /quiet /msicl "YABROWSER=y YAQSEARCH=y YAHOMEPAGE=y VID=354"
      4⤵
      Downloads MZ/PE file
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:3868
    - - C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe" /quiet /msicl "YABROWSER=y YAQSEARCH=y YAHOMEPAGE=y VID=354"
        5⤵
        
        PID:5904
    - - C:\Users\Admin\AppData\Local\Temp\yadl.exe
        
        C:\Users\Admin\AppData\Local\Temp\yadl.exe --stat dwnldr/p=418804/cnt=0/dt=2/ct=2/rt=0 --dh 2472 --st 1742209359
        5⤵
        
        PID:1480
  - - C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe" "C:\Users\Admin\AppData\Roaming\.minecraft\Яндекс.Игры.lnk" 5386
      4⤵
      Executes dropped EXE
      PID:3040
  - - C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe" "C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\Мир Танков.lnk" 5386
      4⤵
      Executes dropped EXE
      PID:2116
  - - C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe" "C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\War Thunder.lnk" 5386
      4⤵
      Executes dropped EXE
      PID:1984
  - - C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe" "C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\Майнкрафт.lnk" 5386
      4⤵
      PID:1588
  - - C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
      4⤵
      PID:15824
    - - C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
        
        "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -version
        5⤵
        
        PID:15844
    - - C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
        
        "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -XX:+UseG1GC -Dfile.encoding=UTF-8 -jar "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
        5⤵
        
        PID:16008
      - C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\java.exe
        
        java.exe -version
        6⤵
        
        PID:17392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8440,i,7523041539713913002,16228722144222141321,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:14
    3⤵
    PID:21016
- C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe
  "C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe" --job-name=yBrowserDownloader-{25879BCE-4798-4237-981B-248ED9680B66} --send-statistics --local-path=C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe --YABROWSER --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=6035461-354&ui=d1994c12-B641-4D43-A187-74162CC35758 --use-user-default-locale
  2⤵
  PID:16332
- - C:\Users\Admin\AppData\Local\Temp\yb262E.tmp
    "C:\Users\Admin\AppData\Local\Temp\yb262E.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\563edb58-8ea0-43f8-bdda-948c0245a070.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=967522903 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{25879BCE-4798-4237-981B-248ED9680B66} --local-path="C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=6035461-354&ui=d1994c12-B641-4D43-A187-74162CC35758 --send-statistics --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\4e4bd6b8-f67b-4927-8233-3fc2a2590cec.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
    3⤵
    PID:26212
  - - C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\563edb58-8ea0-43f8-bdda-948c0245a070.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=967522903 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{25879BCE-4798-4237-981B-248ED9680B66} --local-path="C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=6035461-354&ui=d1994c12-B641-4D43-A187-74162CC35758 --send-statistics --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\4e4bd6b8-f67b-4927-8233-3fc2a2590cec.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
      4⤵
      PID:8260
    - - C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe
        
        "C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\563edb58-8ea0-43f8-bdda-948c0245a070.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=967522903 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{25879BCE-4798-4237-981B-248ED9680B66} --local-path="C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=6035461-354&ui=d1994c12-B641-4D43-A187-74162CC35758 --send-statistics --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\4e4bd6b8-f67b-4927-8233-3fc2a2590cec.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=991522559
        5⤵
        System Time Discovery
        
        PID:8536
      - C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe
        
        C:\Users\Admin\AppData\Local\Temp\YB_19655.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=8536 --annotation=plat=Win32 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=25.2.3.808 --initial-client-data=0x358,0x338,0x35c,0x354,0x360,0x12340a4,0x12340b0,0x12340bc
        6⤵
        
        PID:8604
      - C:\Windows\TEMP\sdwra_8536_888399671\service_update.exe
        
        "C:\Windows\TEMP\sdwra_8536_888399671\service_update.exe" --setup
        6⤵
        
        PID:31720
        
        C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe
        
        "C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe" --install
        7⤵
        
        PID:9820
      - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
        
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
        6⤵
        
        PID:33108
      - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
        
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source8536_575674102\Browser-bin\clids_yandex_second.xml"
        6⤵
        
        PID:33528

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:4752

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1596

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2912

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
PID:5500
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding ACF7C639759FE62C6D85C2E6FD295209
  2⤵
  PID:6052
- - C:\Users\Admin\AppData\Local\Temp\1024892E-BC4C-46E9-A272-089C29A97626\lite_installer.exe
    "C:\Users\Admin\AppData\Local\Temp\1024892E-BC4C-46E9-A272-089C29A97626\lite_installer.exe" --use-user-default-locale --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --YABROWSER
    3⤵
    PID:5688
- - C:\Users\Admin\AppData\Local\Temp\C72991FB-34FA-475E-9C25-8B537217EF6C\seederexe.exe
    "C:\Users\Admin\AppData\Local\Temp\C72991FB-34FA-475E-9C25-8B537217EF6C\seederexe.exe" "--yqs=y" "--yhp=y" "--ilight=" "--oem=" "--nopin=n" "--pin_custom=n" "--pin_desktop=n" "--pin_taskbar=y" "--locale=us" "--browser=y" "--browser_default=" "--loglevel=trace" "--ess=" "--clids=C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml" "--sender=C:\Users\Admin\AppData\Local\Temp\C229C6E3-785C-472D-95FE-04D45CB64EB7\sender.exe" "--is_elevated=yes" "--ui_level=2" "--good_token=x" "--no_opera=n"
    3⤵
    PID:4820
  - - C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
      C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n
      4⤵
      PID:34684
    - - C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
        
        C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
        5⤵
        
        PID:34772
  - - C:\Users\Admin\AppData\Local\Temp\C229C6E3-785C-472D-95FE-04D45CB64EB7\sender.exe
      C:\Users\Admin\AppData\Local\Temp\C229C6E3-785C-472D-95FE-04D45CB64EB7\sender.exe --send "/status.xml?clid=6035492-354&uuid=d1994c12-B641-4D43-A187-74162CC35758&vnt=Windows 11x64&file-no=8%0A10%0A11%0A12%0A13%0A15%0A17%0A18%0A20%0A21%0A22%0A25%0A36%0A40%0A42%0A45%0A57%0A61%0A89%0A103%0A111%0A123%0A124%0A125%0A"
      4⤵
      PID:11920

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:16656

C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe
"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca
1⤵
PID:16744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
PID:16972

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7176

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:19272

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:19280

C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe
"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca
1⤵
PID:20936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7796

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:26296

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:26332

C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe
"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca
1⤵
PID:8836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9152
- C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=967522903
  2⤵
  PID:11396
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=11396 --annotation=metrics_client_id=ee909cc8512245c7ba744dbe94ba3d36 --annotation=plat=Win32 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=25.2.3.808 --initial-client-data=0x18c,0x190,0x194,0x168,0x198,0x7270fd98,0x7270fda4,0x7270fdb0
    3⤵
    PID:11424
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --gpu-process-kind=sandboxed --field-trial-handle=2768,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2
    3⤵
    PID:13012
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --gpu-process-kind=trampoline --field-trial-handle=2104,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:6
    3⤵
    PID:13252
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Network Service" --field-trial-handle=2260,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=3636 --brver=25.2.3.808 /prefetch:11
    3⤵
    PID:13292
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Storage Service" --field-trial-handle=2368,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4164 --brver=25.2.3.808 /prefetch:13
    3⤵
    PID:13620
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Audio Service" --field-trial-handle=2604,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4300 --brver=25.2.3.808 /prefetch:12
    3⤵
    PID:13632
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Video Capture" --field-trial-handle=2612,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4416 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:13644
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Data Decoder Service" --field-trial-handle=3236,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4800 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:13788
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Импорт профилей" --field-trial-handle=4436,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4996 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:13964
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --allow-prefetch --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4468,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:1
    3⤵
    PID:14252
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --field-trial-handle=3240,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=5456 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:14592
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --allow-prefetch --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5668,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:1
    3⤵
    PID:15096
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5720,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:1
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Data Decoder Service" --field-trial-handle=6188,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4768 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:4140
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Data Decoder Service" --field-trial-handle=6200,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=6124 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:18640
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6384,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
    3⤵
    PID:18724
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4812,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
    3⤵
    PID:18944
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3652,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
    3⤵
    PID:20428
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6324,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
    3⤵
    PID:20624
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4984,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
    3⤵
    PID:7556
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Утилиты Windows" --field-trial-handle=1192,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=6680 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:21548
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Утилиты Windows" --field-trial-handle=5388,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=4816 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:21560
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Утилиты Windows" --field-trial-handle=6668,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=6720 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:21572
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Утилиты Windows" --field-trial-handle=7144,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=7172 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:21996
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="Распаковщик файлов" --field-trial-handle=6712,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=7252 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:22080
- - C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=deep_links_provider.mojom.DeepLinksProvider --lang=ru --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-id=d1994c12-B641-4D43-A187-74162CC35758 --brand-id=yandex --partner-id=pseudoportal-ru --string-annotations --process-name="DeepLinks service" --field-trial-handle=7436,i,16116603495245608016,13558062187204459080,262144 --variations-seed-version --mojo-platform-channel-handle=5820 --brver=25.2.3.808 /prefetch:14
    3⤵
    PID:22388

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:28160

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:28312

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:29944

C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe
"C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe" --run-as-service
1⤵
PID:31796
- C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe
  "C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=31796 --annotation=plat=Win32 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=25.2.3.808 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0xf6bb3c,0xf6bb48,0xf6bb54
  2⤵
  PID:31808
- C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe
  "C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe" --update-scheduler
  2⤵
  PID:31900
- - C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe
    "C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe" --update-background-scheduler
    3⤵
    PID:31992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e5ee9e4.rbs

Filesize
912B

MD5
b226381c720b1e7972fbc75bd59fea43

SHA1
1315e0cdfaf388906d9f232e53da9db3b751e818

SHA256
11c1b3d274172044ff1e81294a8c8eedaaadada4bdb2f6afcb130e63eb1c242e

SHA512
5e989a93ab90890ab3d205922188512cac79243bde310b9fb3c7fb3113029ea87ac20a50c445f492ac9e85b62afa5e58dfa5a40d5ae9d1dcd7ae21d134c8e894

Download Submit
C:\Program Files (x86)\Yandex\YandexBrowser\25.2.3.808\service_update.exe

Filesize
3.1MB

MD5
e7bff0dd17bb226cf8c05845d33b794b

SHA1
4aecf575b06537d8a72368a4e94500d6b933908c

SHA256
d49009e9bf319b46b30bcdd8f9ae7b118603a9526cea10404eedf9ed44c9c06c

SHA512
8edcda2e4a42ff81bd96f4739cf622fe317f87f4f5de9cdf8bd711af1aba698d2fc4398e078c0b9d43c69fe543316dc404471ba889287ce44013910919e808a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
19a88bad99bffbae6102e191cfedd75b

SHA1
df476b325df883b73eda1b2349bab45aa22e808d

SHA256
0d576dfbde1712b7288e4561e3eea75ffdad84dc50a77ceb57a6e9c37d60465a

SHA512
9ec5eb487d8c8fc8e283a94bd43afd740edc4df6a4509d83629416d040586bd42330eb0da6dd41ec1e5550bce9a6643319ff8584f8638a9cde9042fa406825fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
0c50ce16613279c25234514480e6955f

SHA1
3e90ff4b8302324908e697d450a5de611607f41c

SHA256
d963226925c329c0820806dbcf25d72a9e03afd82eeee0e3509275a0265def21

SHA512
a4ea1565f28beed9fe8b2beba4a51f6fb243d9ebab1ca3ee78e66a6acc128582a3a69ed544919144456cd4646046bda05083d4b1566aef9f61af5e81842b077f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
6aca55972d7637145ed9690160e23808

SHA1
4dee0d64f3d171297ab58862ce6ddd66cae00760

SHA256
b6e362f42888341d92d04d6b86e41dfb2f83999d164d0753f8c38c09fc68eba7

SHA512
6a7202b423eef2292326d98f4760e38e149b580ba1ee273cc4c774d88e3467466e89326e1460049bd370fd7a10450cf312130955abec21931f51a67dacc8f33a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
e7ba2f6bdb5a9dff38ba83df54da522d

SHA1
c116cd93619403793a58f0eccb17cd738ce67160

SHA256
8a654d4f099c8ea1ea16d7ac29498726ae3db55f0b7e2f46139d24b1871dcc9c

SHA512
89ce238c1b07905c4328599c032cb5993e680d5c2702b51c8efc727256d65848a8ce0aa0fcc79a3fd86dccaa9f3973f6f1519c3019ba9ee30fa6f0019b66303f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5cf719.TMP

Filesize
3KB

MD5
82e351a1aed2bedb40927f921279e708

SHA1
349848b9203db6c1c524ad6d4d0f78739469b252

SHA256
05a17002cf84c17b93469e835b172e95bdd9c6c46b9dff52db01f7fce2d81df3

SHA512
79331c0cf78771867b2d84cf2030c08f9f760dac559ea026a9f2e71ec43995c768f6e98e8772a6b6e98bc984313d57062dc8f54558656f430467ec6c7d0b6281

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log

Filesize
47KB

MD5
8529288f5ddaf586249f94a3ea3e3b09

SHA1
61862aef57c11edde00a651e7ab21883340ace90

SHA256
319b6ba35a36880fa812ced45913620db0b08517eef11d518160d5e97884e92d

SHA512
18d6082e68ec60c6f13e66028f1ed4d197b8ef086dd2f2eadbb79b9792cb04e40f3b8795103079c3058577792a1e9fc07e9d3d4d2f4647cdd88140d58f70c30f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG

Filesize
345B

MD5
7d9c6916fb48b5593af1375d28c97101

SHA1
a1b32bf63a47ea69dfca5a3b8bd6980b377fcdd5

SHA256
88d811f7df769415658e3d9be7d54a68f17609a75eae39cb9bf1e9dfc2e00dc9

SHA512
4cb0b1fde42cf1a51f2e922dda329d893689185a19195cee1b61982e6a8ac02e906f8be0bc22edc684c791d659c9c4c12be5ef7a04042ffdb1b37082413c3311

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5a064ad7-b02a-4dee-b6ed-fda8d1f882d0.tmp

Filesize
8KB

MD5
d0b1050a70b572adc989a20fc24190fe

SHA1
7eac6c43b42225dc2d8a847f5823eab431c43a2c

SHA256
35136a85356c1efcaea0d5f589ddcc55b67f0d0e27c3f1b8c0378dfeaddc7d61

SHA512
480cd7555e76842c394dbd4046dbe4db65fe45685d2902934811f6827f63b3c01b685503310e41161a368fc55adb3d40a56650aca222c58bf28788385afe753c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
7KB

MD5
0b288fbff58064b0bc06693239075769

SHA1
45b56c540c832850d36e767e1928d4f8551a6754

SHA256
929bd85665964683927b7502000b4808080e62642b97054d33f9afbbe6fb3809

SHA512
ac6e147713eecd3e67bf18c9c4a401563bbbaf26f190ec4ee92e687a33e2c8ea63f09c78fd1fa8b72d1b2bc597f74709f4f1dc0c82fac3815551306bbd238d40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
dc8ab0850e870a0037d85f7b7f3ae183

SHA1
00df0c42d5d67fa1d867783c2c30a7d8051182d1

SHA256
95b1edadb55fb5acb77b646b6095a0228f694dbbe9232c7422a44ec0810261d6

SHA512
4b4eb0344f282d2187861619a5da76a7ec5463f86a25adaee8d795cbddf065d82017421007f92bb73e01aed865b429f792611bb8019afdbee9adaba6f91fb893

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
211B

MD5
9e2a39cd98deea309770e41f2ceb9cb0

SHA1
60959531dde55531ae1e41f6477722dad51d671f

SHA256
5525b9bf9fce2235ca0fe35a970950dda5289428e30138241ef56e2af337b7b2

SHA512
85460276ab272deb60d238ee411b781cdad4e6d7e6e31fa2c6dfad3c427794e97037cf10258d7250f59cc05cf04f324b047344dd14f816b38b1796b76b0b0e2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
414KB

MD5
55a6e9c29652d222cf26d449b859cd85

SHA1
83aa0b293fc596fe92964eed70a1c86bb038f654

SHA256
8ee4ce9ef618f7c6e37a962398d939a8c00ebf3baa7549fa37fafebf60097b73

SHA512
a665fccbe2598becef9ff3b378a933a057fe0aca6ab906a0533b670b6a74f16d888ea6f995fe7924dd783cddcba0e2085b036cf764e747fe471ab0877b83fcee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
415KB

MD5
f0af12cc0fab772ec09a05c52f8aa546

SHA1
693b4f62c1b57c4e7b6e99e54066338c779c1e4b

SHA256
98f9a4562fddf0924657c510b8b9615eb1398df42101cb873988f9174f062382

SHA512
175abe18eeaa303a69f06bb1f8fa980918598801a2db801537a5bbfff57e34a2262438f1ce139eeed4c676b0f67b25d0449487e8fcdbbe8336b8457eba77710a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
415KB

MD5
ee0855dd12366a2a0824d9a074aa9f08

SHA1
292b2a9f2e99683a445b631d26afca4e8b53be46

SHA256
b510d45b304730a169074c5dbcc6da2130424e08484d6c12ad54f49c25b5d078

SHA512
a354c2af364b54645de3217447cb6e7e909346d7521e439887afa7c7ee4f4a195998d9ce30e27cc6cfba30c1571642d110d48578b16077708250bfeb34efa3fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
411KB

MD5
1ddfce59e729c6c25a21dc0bcb874c08

SHA1
7e00d863487fd6604b3b8da09def910b2ea2b02b

SHA256
197661531aff5e52068442ecd1ccbde53af51926ae2428491c23a14e8839e953

SHA512
6459720cc730815cf1edb2fc955d2aac2b968cb88efd406dc4db232e9ca2ee1f672faee587384f8a26f562c45035d6b4f5e2ca271e13bc6b7e584ef64594ea05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
413KB

MD5
422d17a30ccd18cfe7f4c11801b52456

SHA1
e4a17a4e64ced0cc499e4f7d1624eca3af9c7683

SHA256
ae930a49f1ba5de88f4b847be9da9f5737f73098023101b99d1f740136a1a830

SHA512
d543129f7038fe5826b0e902a205f41b1b4bc0606cf2c32bafd14da261e45f48242dc8a20d23a65cddb5f00ac93e80504674e624a94904450956d13c1b700f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
37KB

MD5
8f8c4ddb821279a0597ecc1c9c065212

SHA1
63767bcca4302aa9b2f97ee141f036228c86b47d

SHA256
15d8df9c80faf92ae731ddc0f88dfba5f790d484dbba637a34f2b81c71c6c796

SHA512
ae31e56a63a075724b6dcf2c796f9bb218c099e3dffdff531dc210ffd83d9e5fda599845c4213cfc05161a9c988922c421db47a2b13ecbf62a4a27b10d5a0abc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13bf7cd5-3f0a-4967-869d-004c84656018\170ce29fd1bcbf73_0

Filesize
58KB

MD5
c2b24e68dfd0c97cdbafa874fd8b482d

SHA1
68501157bb72f41dcaf030ee4c2e839790a33300

SHA256
e64b4dba356a6275885355a5f5f3baf7624023c47353aa6e076ba21903296f99

SHA512
ff7c2699bbf5b16a481d896922340671a6450801e276be8068a28bb29493703085c8a434025457ab1d5eb1778839c0e2d122ac9840d2ca9bef045002cc596551

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13bf7cd5-3f0a-4967-869d-004c84656018\index-dir\the-real-index

Filesize
72B

MD5
f4b4aaa432e731d26b24cbb5e73db8d8

SHA1
3e6c89b00fb7aca3cf5a8f740a356e4f6d6a905f

SHA256
f47caea350f200c0e71af36edce4c42d771f46bd78452740bf78d58e226b1095

SHA512
a0c3a7c357396c2c9ffc8f5af50f45e332ac2a17bf88db0fd0095a3646d36d5c03baae1e8c702a5607343e0cff338321dd4ec06fc7ee8caf62416adcc3a2927f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d98696e-73aa-42eb-a664-57c47bbf37f3\index-dir\the-real-index

Filesize
120B

MD5
c63a41f3518b493b58bdef40129e7b19

SHA1
01428a057a406a0488b44e19a42bd1e574b7b7cd

SHA256
90f548c957cd4328d47b834c726b023c5b0d03dbb69a3009724679368aad430e

SHA512
b6c95ece1304136ab1b21aab6c6194783f4e0dedf5cbd27e66f7278744164371464257a6d6b97c96e730d41ae83abbe4dad0b3b379902934550e5cbfd90e9f0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d98696e-73aa-42eb-a664-57c47bbf37f3\index-dir\the-real-index~RFe5e7a8d.TMP

Filesize
48B

MD5
7b0a85c494430da49a11806073db0c0b

SHA1
0eecf361c0ca34a61e5d01d5597336b9c03c8158

SHA256
cdf54231596cc0f5eb22c4d0078406ddc9df6f4bc079ba3d2b805e2a7c24efbf

SHA512
8d4ac48447fb956782c3113d3e04db935b07b98b8c75629869811facebb00ad088508f56307f49388fe7b1b19ccf598dbce041894a95705ea4cdb3cf22fe677f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6de81848-5b24-4103-b044-7a04b1ce3981\index-dir\the-real-index

Filesize
2KB

MD5
3d2718e381480dcfb10c12dc9888897b

SHA1
edce751c822a30ac2515a0a5a511bead3be3814a

SHA256
58ddf8457bc3b004090bfc6168ec23fad9e566da4aaff4dda6ed0887f73d88ac

SHA512
cd0651af307b21d2a755e7c13f79d2e8a041d32efb562f38fc68dc0db6b76794a78c29472f07d9aeb46801ab5e4fe337c5644b1e6867b0a36692098fa3def821

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6de81848-5b24-4103-b044-7a04b1ce3981\index-dir\the-real-index~RFe5e8933.TMP

Filesize
2KB

MD5
a6e47971a361834f9e9223da72e8b516

SHA1
edaa0ba1da34c5d666e90113ed165746f44471c8

SHA256
3dd82aab28c5aa74762ac13e8af2255dfb1fc0573dcc146dcb65f5991502a279

SHA512
469cc5dd99b860f560be73e2475ad341e3b6e332f45f1706c7f073dfe490ab709f8874366cc509d64ef8cc7ebd21764845b6fd2e15f3d5ce48f8b295135e6227

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc7ad1e6-2a51-4dc0-9579-f8bf6674ff51\index-dir\the-real-index

Filesize
72B

MD5
f74a7d709a3094e86ab8b368a4e9210d

SHA1
79824c32cfce8053cd35f20c093bb8067e845263

SHA256
1e6cb6cdb9b9a6a4e45ebb45849aff6d84d9aecc19808674ece49ab3b7278fb7

SHA512
414b68b668279e08c1aea8d3d59a4ad4b5af7b5c9c7008072a8425497d90877a24902d0e2b9ad1653e2e9da6b2d2b66073e94997840139fa579f7bd6d91497af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc7ad1e6-2a51-4dc0-9579-f8bf6674ff51\index-dir\the-real-index~RFe5e730b.TMP

Filesize
72B

MD5
9b4489f474736d1e6b82f6fe58fae175

SHA1
679ace2b983186bba2cc72696f880a18f421e54a

SHA256
afb74081c0c007edf65acc424b6dd8bf9e8ff21b682d600b27e620f6af0de54b

SHA512
49d60561304e3521c67ade4417c7644e8e1eb69126721daf16bd88ec532c3ac1c460a0dbe78d0b38a202ef81e1437d55ec800364c1029d2dda4117b9cd7ecec5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
327B

MD5
42b26bfe0e2012c8845913ae93c83ed8

SHA1
9201844aa48a95de78ebff61203952d9fcb6a56f

SHA256
3dc38cdf2683c0a1ee12dc6118a1021f2ae218551dffcb6ad33ae71c12419656

SHA512
c1819b7b267672d42446958448e6c614a7416db556407d7cd1b305523837507a6645b9f9515be7cf1608328e2cffcb917844f966ef12ea325f5eb4b83edfd2f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
322B

MD5
2535281f372659dc4a8487d16a7097d1

SHA1
8d8b30dfd497603a6c666ecc7e39bc5a10768c13

SHA256
aa68136f80fb41f2767946997a33839d906943aba341575b8034f26390031b3d

SHA512
d329cbdf07aa5c7f1eed547dcb0fd3498b1899fa47c96a57259ff7abf09d6600c62a0e6457e11ccaac388b77a62f95600bf2430ecb4c46b01cce03911a051871

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
6b39762f818dea55f8806192616e0d33

SHA1
0450c154ccf86fcf8371c513024a477d2091f85d

SHA256
c9e3dbce9d4522abad9f066696c1f24c9c5e9853611794084ad841e2158c8606

SHA512
af560add19fd72d1ae745ec9fff2324d7820416a356a59556400b719e29b73bf6e6bae401bc83fa264e2791c208d9ab40e1389dc198b82e2d0f5854109243db4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e852c.TMP

Filesize
72B

MD5
3d5e72a70987ccec5e43c933f0e75905

SHA1
6a6e0315ed6addc215c5d180745e681a8a9f523b

SHA256
4c7f10e870b1abbf71961c9462fe88fba4eeb94ce22dbb8794ece983963bd285

SHA512
397607f74429ee0572586f03f9ec6d7938f3b6163cfdb2897be63fbfdd1a9e7a5eb0974896f1e5d358bd47e88dbf2442557ee12434f3c7e8ec217bcd24e8a72c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
9505f5be7826dd7ecd6bc356036be213

SHA1
7d79709ec88a6aab9caa659ddcc1da94e81d6e1c

SHA256
3f731c9b1a956ac78303b3e63bfe9a0887c054bea601f5528dc31dfb112e2808

SHA512
1090a6bd8b825a793c155302960dcdba77af426e18e6303d98adf576a7db3a052b105d88867d98444e299eca0b1753b1bda701dc07879bd3ce2be0aaeeb78e00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
460B

MD5
81f83a312d90c12a0a8738bbea20a20f

SHA1
08bcf55e5c345a635546df7816393cb7124dc641

SHA256
2e390d432672c9cac18dacbeda22b083cbf3eb3c45d2eeacc9ece2e8271b3f0d

SHA512
30c8d47e852589e9b2816b5a9df99d42577359da96fc81725c2839385849d9e7607d638693cb306d1ffbf8629d0bada499c27b29f116202faeca5a94233b2ba0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
56KB

MD5
537b1e9ac813d476bf0d2f910f07f7af

SHA1
3e4fbb13c55c2e44d0a7399e151cc9d69c900aeb

SHA256
528e7b7445077bda7e2cd3eb3c9bd044956bb79185c5844a8225373e18d8f6c2

SHA512
c5b8ee7e2b4cd82af32520c3ca18796fe1545d8e37cb198bd3312317399c25356622cb287df61ce39c5515c81d329a7d9a89eec6d3668ed835aa9723c9db28de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
56KB

MD5
19a6ea1665d359503ba3313a57e4328e

SHA1
cf7c9cdb43d8380446547dca22662d9a26b3cfe1

SHA256
365f73bba06ab313d34fc28dc62b6091b587ffeb44bfe6a81cd42586dc8d72b4

SHA512
8ff096eb656bc40eb1e7b3e111fb3d8f63650d5da75d9070639cc933893a91d6a194f99bf7be98f926ef6c8ee2da89cf194bcf017b1cd5fe87242405f0902530

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
50KB

MD5
d95396235d5e91472e1e23a545de4a0d

SHA1
aa6adecabadf654e43804a01ee4e91addf1921a7

SHA256
7723297979da7561ed5e17dfbb1423610c424b7d063def4ee35b8aa073b9ea8e

SHA512
192dbee5a3df0564573d8511f5cc69fe8d457eb5ee8c619dac809352a944ebf36567ebd5535b792cf68519e82bd5f7ac581714fcbcc0d31d4da0b42da44b6c20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
ba787a4c065de410f0bc338dd4aef7e4

SHA1
2e7d9a33d411dfaeb7f4031ed13dde9debc0c2df

SHA256
17271a7bbe228f3c7a62c8525ce6676aeebb17480e34a03ad1d727a9e9ab1ad8

SHA512
40d7e881514a753e5dd346cf5b9e58c9d93d3e44f313c549ba049bc19fdd02dabdd4eeec7b325593d13a086bacb0581beab4ad2313015219b05696b94cdabffd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
2dede5e4be0aa262ac6d6f6d4f1fa1bc

SHA1
091f7212051c883120a12398046c1e48aca229b9

SHA256
37ff643bc077fb3732204a8ce83a4fc94d55b3c788dd6d6b3eff673147432eea

SHA512
e8b808acf12502c72227feb5f57d295e4df0dbfbebdfefd48be5d081fed9a63fe278b019265126af528b22f8eadb65ba5ac88904d80403a7f8b2e650c4184ad0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
41KB

MD5
248c3bc54c1971807345a9d28cea00dd

SHA1
dcb00932c860e2216090726cef2091ad71a0df52

SHA256
a3afe74d2f5cae8464850489a347c3b3bccc8a2a291c399ce2ccdc4422fefeb7

SHA512
b080603782b2bf884daf450bd755758fc7b32903c633ecb8bca331972ceb99a8630946a6effaebf935b109c1853fd46881b9453f963303a4ca520ecb6c084bb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
9a14bcd650a3886b5f7221fc3f8edf99

SHA1
6f8affd29d2fc1c4a0e3c589bfd3d09637f6cdba

SHA256
5241953f839cd652a5d7ae7fbc6252647fb1e47d53b44b9a8788db1bf58f1f22

SHA512
91d096127d1bcf2f0772cfd04d6236ca9500f3f481232f1ce6bdc8b9ada3dde85bf984d723d1031fac964a46beabee3fbf6a3b6f0320b740ebb89478fa2fcb7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5e4dd0.TMP

Filesize
392B

MD5
2e9888b8be7ce0e76b458027cd105ad4

SHA1
aab8f2c347af9ae11641bb853c162a14f62e13d9

SHA256
17db2a9b6ffeca638909bb7a493742ed9549da6da8d023a6cc0e2270da266d76

SHA512
2fdf001f37888f6fddbb58f1900e6920c9eaa604ef547f16487e1a5578860e13287877b15951825cb5fcc8f88014f480574f7cf284eaf08e8b2e96aefb9975ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2025.3.17.1\typosquatting_list.pb

Filesize
631KB

MD5
094ca661fb20ae7e5c26df780e0f7ecd

SHA1
0cc79e2fdf43962d9597b7eec7b34c8983c3562c

SHA256
76f100a3d96cddfbad67460eb0db1a8877a53c8a1881888b208011cd3a9d5726

SHA512
088ca8996eb3bd02f5561b026a9e36755c915d19eb9ae768ee3949491059b1c7e34117b72828d843131df50456c6a162eb2cffe74fd38c273708cd4ac6fda53e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Services\www.ya.ru.ico

Filesize
17KB

MD5
ea6ee9ae02402932201de0f23615e815

SHA1
17629127d63b37da0a2a2b2b196110d85372707d

SHA256
f7383af8817bac1d59207a2080afc6b0dcb61a091cb1190d25fe18363838f8fb

SHA512
918fe91a99e0e99e9cc6d17fdd5c2c9b3cb03ae8037681c1875faafc73c05d74fb29b612ea5de867ba96c158dc35fb28cf3f39487bf56f8bf4c6f3e6aaa2cf8f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\90bkg1w0.default-release\thumbnails\50563c090dae45964d0e051fae37428b

Filesize
6KB

MD5
e05d28ab78d61968a7132eafe61f54b4

SHA1
dcf260ab7cdea7b6fc934e54765c964c1a20bd36

SHA256
cbd302b0ea2218f495b9f0a814f34733f2c5f13a6634d74c6e85a5c0863b5621

SHA512
ebea612bf803692fa3c7b2573c58f2e43fba0f7039e01b57203978cf69b6f8ca538b563791a760a7e901bb5e392879bd57bdbdb69b6a3781a3886fc0c01eddc0

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\90bkg1w0.default-release\thumbnails\69ce4158c96a30edbba837aaa27b1d74

Filesize
15KB

MD5
af80a936c10e18de168538a0722d6319

SHA1
9b1c84a1cf7330a698c89b9d7f33b17b4ba35536

SHA256
2435c0376fca765b21d43e897f4baa52daa0958a7015d04103488c606c99d1d3

SHA512
9a1325c8ce05806e5c161a4cf47239f62baad8f79650fbd713e74928fce8171ced10ba7f24fac46c548e1dbf3f64106270cb25ca88c836c870107f5dc1f97879

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\55NZQU9U\www.bing[1].xml

Filesize
11KB

MD5
590223ea6832db474dcb7844b7ab7a77

SHA1
ecc7cbe9c393390331402086275a25fd1ec0df3f

SHA256
ad1cd1c8222a8f6041a151f05b22e5fcc4a4293d68db9bbdef7f2251d73f8749

SHA512
a7e0358a150c9ec33f8d88908fbfe2a594857050194f097e70642c1c9bd31253f8079c74fd9efcf4963d21d40f319e07c40e0a331337172fb426f5bfbd1cb752

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\55NZQU9U\www.bing[1].xml

Filesize
11KB

MD5
42b8b3bf407deaf9abb362b0f9bc610c

SHA1
2d05c77c886a86e05c83c5bfaefcf9f47ec55f9e

SHA256
61895e47d26b429d220936408a7b03c2cf02bb12f2572ec089ef4649640fc355

SHA512
c22028ab5e58b1291b1ffd898700ab6d893563200161f5ecae99e7b83e94046f311975825a3f48f22f95cd0338e1c7ab373d9d9c5216cfaaf3c4b6cc7bdce650

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\55NZQU9U\www.bing[1].xml

Filesize
17KB

MD5
05dead2896ab1ecb4a0ac115333990d6

SHA1
23462beb7fbf8a2a6d3347be97773436c27fc1b2

SHA256
33bf0123fb3aeadcd99ffb5737814015cdb6deb7eb889a557bb90f27903a91f1

SHA512
9eff32ee0e0917348e66f60caefbbfc7ff8497f0aae741d9e5886584490e664592411ef352533e1bed521940196e0f1a9ee6a4581c6bf71bdb5a7ddbb03117ca

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\55NZQU9U\www.bing[1].xml

Filesize
2KB

MD5
64b0fc64721b7a2d1e683801df84b9ee

SHA1
1e85aeb8f1b2b969d55e790241fb967e843bb545

SHA256
9decc68b72401d2ce19522fa2e8fdfbb33ba985d3c917737d85b5655cdb07901

SHA512
9d770bb49d79e5f48450a1676b7ae6114e79a5aa31c8be819b006605ff11477d7b86ae2d7bff9a269f8ccb7d7393589eed5efa4e5ccb91279323c9a46646feec

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\55NZQU9U\www.bing[1].xml

Filesize
17KB

MD5
a3057436d8c6d42fc12baa52e65c1637

SHA1
f7318c5e78b5caf3a4e802111e80380d0649f9c6

SHA256
292343859f75d3acfc446a292c7bb5df9a69fbfc7fe0ac1fcedf22a1254ea3be

SHA512
6c5794f6ee56709325e89dfe2b867d2dc19096b9afe0361c0a6b2e35cb2795330040221c059ae6a86ed10b1151cfe0ac25a4c6b55031770b6292f04befa51a9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF5615387230920684046.tmp

Filesize
67KB

MD5
945426f5363c482553695c661ebc75a0

SHA1
feb3a62b783c6cba5175e957c6a4d1564e6de534

SHA256
b04761b165a8b32e5ac989a3cee07f27658634e7796f708b3e17ff5ccbe23622

SHA512
12658f86b8c3744329c2a4c4552ce25c5756e29aa984e0c7fd3fdee13abaa51b221d8ff78a9c406b084d3c08fffc3cdcb2b58f9cfb6af707ab9e3bc8fcee9e98

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF5729757725693093644.tmp

Filesize
138KB

MD5
a3de2170e4e9df77161ea5d3f31b2668

SHA1
6484f1af6b485d5096b71b344e67f4164c33dd1f

SHA256
7b5a4320fba0d4c8f79327645b4b9cc875a2ec617a557e849b813918eb733499

SHA512
94a693ab2ce3c59f7a1d35b4bcc0fd08322dad24ce84203060ceceaf3dac44c4c28413c28dcdab35d289f30f8e28223a43c11cb7d5e9a56d851eb697ff9b9b6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF8118369043740829128.tmp

Filesize
66KB

MD5
794162f5ab873e624c2e8adaef34aa73

SHA1
5e631244b866752f9232e170ed81ab94d252ac42

SHA256
b272fda2af48d26da480cd02d76059416539612615d38b9145b3f156d677ef7c

SHA512
d14a8abf8a3a4279652132ec145c5fad024001241e6c81d1e07c74ad3d438d61ea6f2e2a3d01812621763afbda99486ebe47f858a8dbd440c82448b1619a2426

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF8468207130716001355.tmp

Filesize
66KB

MD5
99c471b10eb25b8f0f1fe76a04926b0f

SHA1
807f89e70ccf186bde048c8a51a5c2d668190797

SHA256
9042ee73964614ed6b3eb4aa30df23c4ac5d3372deffb201ab9287540a34079c

SHA512
cbc263c2fbf1325c56adb312be8026ec25766a172bfd8d742a2e86292692c18fb185f595eb8b6fa2898e66ff95404ae52d9e52c393271e9f1fbbfd6c5bb9707d

Download Submit
C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe

Filesize
10.1MB

MD5
3fb846d3691f3d98a34e669e1b9b5bf6

SHA1
4c90c2912aae3b8da4c44a4faa0b8df20525285f

SHA256
ead7a779cabae642d09be07283cc99e53c84ecf90349444e0d0ac4bf9901fe47

SHA512
e904ecfa7b1c9ba066272bf91b8341bf3877310613370defabee7db58ea825c52582353e97f9398d706d3f3890b3701a1c05fe202e8a87499fb9600f87176b3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna112453448564971654.dll

Filesize
248KB

MD5
a57eb3837a7aa2b6f87cf3373c072712

SHA1
943cf0cf176a96c11b773d78a6e761be15ac08b0

SHA256
2475272f129a0b36bd9bf5ed732aef70d9d9ca726ae2518588cebe298561dce8

SHA512
57465c188bac732ab27c283e7469af82ca5393a5c0e144e1e4bf8823ccfa812d3528b31e3362b670ab97f31421ea7addfbc6589d4a997e0855d61a98ed385834

Download Submit
C:\Users\Admin\AppData\Local\Temp\lite_installer.log

Filesize
14KB

MD5
fd639f6c42a45e354b1a1739012e41d6

SHA1
f09c13bf4ee13680f3c59517688d8cc69c82b544

SHA256
beb0562f0620e051abc1f94ba051a9810b4f06781ee3c6595abbafef302891ba

SHA512
45e075cf448fb45a959a648b7bf1f538f3bc548417228d86f379434ce29e1f044b81a6eea7a8e7321ddd5c74b0dde038e726fa1064fb3ea7d96d9428acd5cdb1

Download Submit
C:\Users\Admin\AppData\Local\Temp\master_preferences

Filesize
358B

MD5
b163cd7cc5f0d605de12ea07c48a2c34

SHA1
8d7a84d03f6374cfe127edc9e2b380116147f8a8

SHA256
7c583b6cf11cdbbd3c2c127322af6a27e638619f15237f0582145458ca995a85

SHA512
38cc07bb5455eb264bebf83bf098ee2ac8c21b1614b80ed02700945a352d0823aa968d5ed8053790e0348f8d130fda8960f6d0faf865c3328c488999e7d00a3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\omnija-20250217.zip

Filesize
45.1MB

MD5
e90fbef1ee0ca14a0e36139114dfdb03

SHA1
eb9ea0e98fd72b7b049b193fb94ee8d864101305

SHA256
7d5072b7fa0880c245cb54a627474b67df7b4f3f33a7ae828b39417f9621eef0

SHA512
eec962d4fdf6bdf8a236ef2bebc579e7815469b22e02d4362da865ce20c81b231e41d5d43b10c4f52f7d3d4651293f508d2babc6fea967cdee5dc5004fd27fa3

Download Submit
C:\Users\Admin\AppData\Local\Temp\vendor00000.xml

Filesize
510B

MD5
a96e6071a17b74bbd309bf696496b8f7

SHA1
63c1ecf860504d390b6f3a32982ddd8946b042c5

SHA256
1a855972dc308e47d30d567e1b37fdad349bf555b971bc14ead76e17a8accccc

SHA512
2c906e2f11d62d1336be482cc5ff784bf372cc7afb3263754e7810a1ae27e253aa9e22463456b62a25049d33ba1e69f129ed7e0a0273fe928dcaa216b7876449

Download Submit
C:\Users\Admin\AppData\Local\Temp\yadl.exe

Filesize
203KB

MD5
b9314504e592d42cb36534415a62b3af

SHA1
059d2776f68bcc4d074619a3614a163d37df8b62

SHA256
c60c3a7d20b575fdeeb723e12a11c2602e73329dc413fc6d88f72e6f87e38b49

SHA512
e50adb690e2f6767001031e83f40cc067c9351d466051e45a40a9e7ff49049e35609f1e70dd7bb4a4721a112479f79090decca6896deac2680e7d107e3355dae

Download Submit
C:\Users\Admin\AppData\Local\Temp\{0FC3A2CE-8FDD-4068-86F4-BC89DDBB54EF}.exe

Filesize
10.1MB

MD5
cdacf180762ff35f334004507971229f

SHA1
5f5f3bb1fa5027cff13bd60611ceb5f45e5bec81

SHA256
eeb14d00a2732a9f3b196f8681b13478ed266ec7db2ffb6bb596702ba3b0d325

SHA512
7daec355901f801913a1081bd04aa62ed8c2af2435a84dff8054932c55de0d7955838e78b9d8ddae5ca40a39acaaef8ba1dbcdf36997df3b012b5e7fbc5b445d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk

Filesize
2KB

MD5
5a95af5bb1edc54317a157879b48a43b

SHA1
d4fec1efd96b213b9ffc67bbc499e077585c78c0

SHA256
93bf058fdea11a47678f1c5185a1e7279cc95c6d084c3b7752d35cc969c9fbd9

SHA512
423bbecbbf0c3b4424549fc0f1cf557618e49342ae17f8e782bcff3ac0bdfe0a174ac3802fd269d01f9cd4488279bcc3d8c13a366c1d8067a26c60f9fa63db61

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YaPin\YandexWorking.exe

Filesize
397KB

MD5
95828ee007d3586792d53ace50b2357e

SHA1
3501ccad7573fd467911f207155318db3a1a1554

SHA256
8c4be5f1bc4e2f73d4396af48a31bf10362006472e9b28f40aa91f73a3815f12

SHA512
9896eccb178fd772fc92e5793340bdbc1bd6169465d9a739df06c1154edbce16f6db5dd50df426ccbc40d8410d4ef170c3fb0bc700e7778149ff2168409638e7

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YaPin\Яндекс.website

Filesize
515B

MD5
71a67bdb0f664569825d0e45dc5e4309

SHA1
a2eef51b5f60054206274cc36fa63ff4c216c423

SHA256
c16d725bf1124fc935eb9c37d2a1848a2a3ef005e8fd85c3d18b4c6b5dd243d5

SHA512
ad8369572261f6af094fd28f1006e0a06ca89dc5f014fdd98707a84b266343515b089c81e4d984ec1fe116b6d9ffbdd7f4f754adc972befae32adbeae864d852

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\25.2.3.808\brand_config

Filesize
7KB

MD5
faaf6a722888bb8af833433510c3d4ea

SHA1
fd85037299c68711fea52c7f160279954da4b485

SHA256
cbfcfe87669ecd0c98cb7b566c0f07f17fa6114094070d052af130a5e7018e26

SHA512
ffe05136c526d79d2116b86bef4a2cf50d75a8c00201916a523b54c0815f7eb749b8502113a4473071e25fdc16074815cc1267bb9cd6e89c8932596280ed5aa6

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\25.2.3.808\partner_config

Filesize
341B

MD5
977bc7b2384ef1b3e78df8fbc3eeb16b

SHA1
7ee6110ca253005d738929b7ba0cc54ed2ed0a2e

SHA256
82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6

SHA512
4d154832ef3ac05abb1499a5bc8235d72f64cdaa3e6870206a6363c1d85d821604ae8a96850c2c8bd540d479b8dd5f3ce032472ed96bbf7eddb168ea3d2d1cf6

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\install_state.json

Filesize
1KB

MD5
70cfd4c1596df4faf4d4a597e6ed25d3

SHA1
eb431356a5d3c01e1e8cb6bf2251f18996cc4fd7

SHA256
37ba39288acbb2fc7155ceb81270843fe8d78fcb171d1729dcf632b1232b8b25

SHA512
882845a264e588513f7ef56a2bd6571cf6c3d5dfda9df0a4ba0d3b55be648cce897d660ed7a35d2ba47e99153c7c36641e2603bbf3e3e4d7581dae877f8f36a1

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\Extensions\ghjgbemlcjioaaejhnnmgfpiplgalgcl.json

Filesize
119B

MD5
2ec6275318f8bfcab1e2e36a03fd9ffa

SHA1
063008acf0df2415f5bd28392d05b265427aac5c

SHA256
20832de8163d5af0a0c8bda863bcd6083df4f92175d856ce527de1dae1f7c433

SHA512
5eee4555be05d07bce49c9d89a1a64bb526b83e3ca6f06e2f9ef2094ad04c892110d43c25183da336989a00d05dad6ff5898ff59e2f0a69dcaaf0aa28f89a508

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\about_logo_en.png

Filesize
1KB

MD5
1376f5abbe56c563deead63daf51e4e9

SHA1
0c838e0bd129d83e56e072243c796470a6a1088d

SHA256
c56ae312020aef1916a8a01d5a1fc67ed3b41e5da539c0f26632c904a5e49c62

SHA512
a0bab3bae1307ea8c7ccbd558b86c9f40e748cdd6fd8067bb33eeef863191534af367a0058111553a2c3a24e666a99009176a8636c0a5db3bf1aa6226130498f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\about_logo_en_2x.png

Filesize
3KB

MD5
900fdf32c590f77d11ad28bf322e3e60

SHA1
310932b2b11f94e0249772d14d74871a1924b19f

SHA256
fe20d86fd62a4d1ab51531b78231749bd5990c9221eab1e7958be6d6aef292d9

SHA512
64ebc4c6a52440b4f9f05de8ffb343c2024c4690fe5c9f336e78cd1dd01ae8225e8bc446f386feb442e76136b20d6b04ee293467b21f5b294ce25e500922f453

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\about_logo_ru.png

Filesize
1KB

MD5
ff321ebfe13e569bc61aee173257b3d7

SHA1
93c5951e26d4c0060f618cf57f19d6af67901151

SHA256
1039ea2d254d536410588d30f302e6ab727d633cf08cb409caa5d22718af5e64

SHA512
e98fbfb4ed40c5ac804b9f4d9f0c163508c319ec91f5d1e9deb6a5d3eada9338980f1b5fe11c49e6e88935ecd50119d321ce55ca5bdd0723a6e8c414e1e68e16

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\about_logo_ru_2x.png

Filesize
3KB

MD5
a6911c85bb22e4e33a66532b0ed1a26c

SHA1
cbd2b98c55315ac6e44fb0352580174ed418db0a

SHA256
5bb0977553ded973c818d43a178e5d9874b24539dacbd7904cd1871e0ba82b23

SHA512
279fb0c1f2871ce41b250e9a4662046bc13c6678a79866eaf317cc93c997a683114122092214ce24f8e7f8a40520fe4ca03f54930148f4f794df0df3ecf74e9d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\configs\all_zip

Filesize
698KB

MD5
a91c5db1d49189efe2387e612ba41774

SHA1
cdc2f9f83a9aba1096c0b833cd9a913c4568911c

SHA256
a08086ba49f3f82398d2b1ca0e2dd48a3efa87b2e8528983e7cad75e24d4ab94

SHA512
11adc67358a3d4d828b2f43d7a7445166b8fde4fb0a671e3e6f0a12d07f0c159e397d4c5cc0c15738cf0f74191414ca920fef5598fce187e908df4bd8e60df70

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\easylist\easylist.txt

Filesize
620KB

MD5
8e4bcad511334a0d363fc9f0ece75993

SHA1
62d4b56e340464e1dc4344ae6cb596d258b8b5de

SHA256
2f317fee439877eaadb1264bd3d1e153c963ef98596a4ccf227592aea12ae76f

SHA512
65077bd249c51be198234ff927040ef849cd79adcd611ed2afae511bc2a257a21f13171bf01cb06fce788c1cff88c8ad39cf768c5900d77cd15453a35e7f0721

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\easylist\manifest.json

Filesize
68B

MD5
15bcd6d3b8895b8e1934ef224c947df8

SHA1
e4a7499779a256475d8748f6a00fb4580ac5d80d

SHA256
77334f6256abddcc254f31854d1b00aa6743e20aadbb9e69187144847099a66b

SHA512
c2d3778a99af8d8598e653593d5e2d1d0b3b2ace11addd2d3eeb2bf3b57d51bf938ddaf2d2743322e0ce02e291b81f61c319daf34c1cd604ffce1f6407a30b34

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json

Filesize
379B

MD5
f70c4b106fa9bb31bc107314c40c8507

SHA1
2a39695d79294ce96ec33b36c03e843878397814

SHA256
4940847c9b4787e466266f1bb921097abb4269d6d10c0d2f7327fde9f1b032b7

SHA512
494dce5543e6dacc77d546015f4ea75fd2588625e13450dba7ba0bd4c2f548b28c746a0d42c7f9b20d37f92af6710927d4bccb2fee4faa17d3ec2c07ff547e70

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json

Filesize
316B

MD5
a3779768809574f70dc2cba07517da14

SHA1
ffd2343ed344718fa397bac5065f6133008159b8

SHA256
de0fbb08708d4be7b9af181ec26f45fccd424e437bc0cfb5cf38f2604f01f7b2

SHA512
62570be7ea7adee14b765d2af46fcd4dc8eec9d6274d9e00c5f361ff9b0cdb150305edad65a52b557c17dd9682e371004a471fa8958b0bd9cfbe42bb04ca5240

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json

Filesize
246B

MD5
30fdb583023f550b0f42fd4e547fea07

SHA1
fcd6a87cfb7f719a401398a975957039e3fbb877

SHA256
114fd03aa5ef1320f6cc586e920031cf5595a0d055218ce30571ff33417806d3

SHA512
bae328e1be15c368f75396d031364bef170cfcf95dbdf4d78be98cff2b37a174d3f7ebb85b6e9eb915bb6269898cbcecd8a8415dc005c4444175fe0447126395

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\import-bg.png

Filesize
9KB

MD5
85756c1b6811c5c527b16c9868d3b777

SHA1
b473844783d4b5a694b71f44ffb6f66a43f49a45

SHA256
7573af31ed2bfcfff97ed2132237db65f05aff36637cd4bdeccdf8ca02cd9038

SHA512
1709222e696c392ca7bcd360f9a2b301896898eb83ddfb6a9db0d0c226a03f50671633b8bed4d060d8f70df7282ffc2cd7ab1d1449acf2e07a7b6c251aa3a19e

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\morphology\dictionary-ru-RU.mrf

Filesize
1.1MB

MD5
0be7417225caaa3c7c3fe03c6e9c2447

SHA1
ff3a8156e955c96cce6f87c89a282034787ef812

SHA256
1585b1599418d790da830ef11e8eeceee0cbb038876fe3959cc41858bd501dbc

SHA512
dfc0de77b717029a8c365146522580ab9d94e4b2327cef24db8f6535479790505c337852d0e924fbfa26e756b3aec911f27f5f17eba824496365c9a526464072

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\morphology\dictionary-ru-RU.mrf.sig

Filesize
256B

MD5
d704b5744ddc826c0429dc7f39bc6208

SHA1
92a7ace56fb726bf7ea06232debe10e0f022bd57

SHA256
151739137bbbdf5f9608a82ec648bdf5d7454a81b86631b53dfc5ad602b207d6

SHA512
1c01217e3480872a6d0f595ceb1b2242ffe3e1ff8b3fdd76eea13a7541606b94d3ccd69492a88220e0e40c17da5d785e4dba1d7501e6be749b9c46f72572ef6f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\morphology\stop-words-ru-RU.list

Filesize
52B

MD5
24281b7d32717473e29ffab5d5f25247

SHA1
aa1ae9c235504706891fd34bd172763d4ab122f6

SHA256
cbeec72666668a12ab6579ae0f45ccbdbe3d29ee9a862916f8c9793e2cf55552

SHA512
2f81c87358795640c5724cfabcabe3a4c19e5188cedeab1bd993c8ccfc91c9c63a63e77ac51b257496016027d8bccb779bd766174fa7ea2d744bd2e2c109cb8b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\safebrowsing\download.png

Filesize
437B

MD5
528381b1f5230703b612b68402c1b587

SHA1
c29228966880e1a06df466d437ec90d1cac5bf2e

SHA256
3129d9eaba1c5f31302c2563ebfa85747eda7a6d3f95602de6b01b34e4369f04

SHA512
9eb45b0d4e3480a2d51a27ac5a6f20b9ef4e12bf8ac608043a5f01a372db5ea41a628458f7a0b02aaba94cd6bb8355a583d17666f87c3f29e82a0b899e9700bd

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\sxs.ico

Filesize
43KB

MD5
592b848cb2b777f2acd889d5e1aae9a1

SHA1
2753e9021579d24b4228f0697ae4cc326aeb1812

SHA256
ad566a3e6f8524c705844e95a402cdeb4d6eed36c241c183147409a44e97ebcd

SHA512
c9552f4db4b6c02707d72b6f67c2a11f1cf110b2c4ac5a1b7ac78291a14bf6eb35a9b4a05bc51ac80135504cd9dcad2d7a883249ee2e20a256cb9e9ceeb0032f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\tablo

Filesize
617KB

MD5
58697e15ca12a7906e62fc750e4d6484

SHA1
c5213072c79a2d3ffe5e24793c725268232f83ab

SHA256
1313aa26cc9f7bd0f2759cfaff9052159975551618cba0a90f29f15c5387cad4

SHA512
196b20d37509ea535889ec13c486f7ee131d6559fb91b95de7fdd739d380c130298d059148c49bf5808d8528d56234c589c9d420d63264f487f283f67a70c9a6

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\1-1x.png

Filesize
18KB

MD5
80121a47bf1bb2f76c9011e28c4f8952

SHA1
a5a814bafe586bc32b7d5d4634cd2e581351f15c

SHA256
a62f9fdf3de1172988e01a989bf7a2344550f2f05a3ac0e6dc0ccd39ed1a697e

SHA512
a04df34e61fd30764cf344b339ba2636b9280a358863f298690f6a8533c5e5dfa9773a14f8d16a5bb709ea17cf75e1da6302335aa9120009892e529bfad30df9

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\abstract\light.jpg

Filesize
536KB

MD5
3bf3da7f6d26223edf5567ee9343cd57

SHA1
50b8deaf89c88e23ef59edbb972c233df53498a2

SHA256
2e6f376222299f8142ff330e457867bad3300b21d96daec53579bf011629b896

SHA512
fef8e951c6cf5cec82dbeafd306de3ad46fd0d90e3f41dcea2a6046c95ab1ae39bf8a6e4a696580246c11330d712d4e6e8757ba24bbf180eec1e98a4aec1583b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\abstract\light_preview.jpg

Filesize
5KB

MD5
9f6a43a5a7a5c4c7c7f9768249cbcb63

SHA1
36043c3244d9f76f27d2ff2d4c91c20b35e4452a

SHA256
add61971c87104187ae89e50cec62a196d6f8908315e85e76e16983539fba04b

SHA512
56d7bd72c8a380099309c36912513bcafbe1970830b000a1b89256aae20137c88e1e281f2455bb381ab120d682d6853d1ef05d8c57dd68a81a24b7a2a8d61387

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\custogray\custogray_full.png

Filesize
313B

MD5
55841c472563c3030e78fcf241df7138

SHA1
69f9a73b0a6aaafa41cecff40b775a50e36adc90

SHA256
a7cd964345c3d15840b88fd9bc88f0d0c34a18edbf1ce39359af4582d1d7da45

SHA512
f7433d17937342d9d44aa86bcc30db9ae90450b84aa745d2c7390ff430449e195b693a8ae6df35d05fee2d97149a58a7d881737d57902d9885c6c55393d25d6f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\custogray\preview.png

Filesize
136B

MD5
0474a1a6ea2aac549523f5b309f62bff

SHA1
cc4acf26a804706abe5500dc8565d8dfda237c91

SHA256
55a236ad63d00d665b86ff7f91f2076226d5ed62b9d9e8f835f7cb998556545f

SHA512
d8e3de4fea62b29fd719376d33a65367a3a2a2a22ed175cc1eeff3e38dfbaac448c97a6fbea55bc6159351d11a6aad97e09cb12548cf297e01bd23bf6074de08

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\custogray\wallpaper.json

Filesize
233B

MD5
662f166f95f39486f7400fdc16625caa

SHA1
6b6081a0d3aa322163034c1d99f1db0566bfc838

SHA256
4cd690fb8ed5cd733a9c84d80d20d173496617e8dde6fca19e8a430517349ed5

SHA512
360a175c5e72ff8d2a01ee4e0f365237bbd725b695139ea54afc905e9e57686c5db8864b5abf31373a9cb475adcbdb3db292daf0a53c6eb643a5d61b868ad39b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\fir_tree\fir_tree_preview.png

Filesize
8KB

MD5
d6305ea5eb41ef548aa560e7c2c5c854

SHA1
4d7d24befe83f892fb28a00cf2c4121aeb2d9c5d

SHA256
4c2b561cf301d9e98383d084a200deb7555ec47a92772a94453d3d8d1de04080

SHA512
9330009997d62c1804f1e4cf575345016cda8d6a1dd6cb7d2501df65ea2021df6b8a5bc26809ddfc84e6ff9450f1e404c135561b1b00b9e4915c69e84f89cfec

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\fir_tree\wallpaper.json

Filesize
384B

MD5
8a2f19a330d46083231ef031eb5a3749

SHA1
81114f2e7bf2e9b13e177f5159129c3303571938

SHA256
2cc83bc391587b7fe5ddd387506c3f51840b806f547d203ccd90487753b782f1

SHA512
635828e7b6044eeede08e3d2bb2e68bc0dbbe9e14691a9fb6e2bc9a2ac96526d8b39c8e22918ff2d944fb07b2531077f8febd43028be8213aa2fad858b6ee116

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\flowers\flowers_preview.png

Filesize
9KB

MD5
ba6e7c6e6cf1d89231ec7ace18e32661

SHA1
b8cba24211f2e3f280e841398ef4dcc48230af66

SHA256
70a7a65aa6e8279a1a45d93750088965b65ea8e900c5b155089ca119425df003

SHA512
1a532c232dd151474fbc25e1b435a5e0d9d3f61372036d97bcaab3c352e7037f1c424b54a8904ef52cf34c13a77b7ab295fb4fd006c3ab86289577f469a6cd4c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\flowers\wallpaper.json

Filesize
387B

MD5
a0ef93341ffbe93762fd707ef00c841c

SHA1
7b7452fd8f80ddd8fa40fc4dcb7b4c69e4de71a0

SHA256
70c8d348f7f3385ac638956a23ef467da2769cb48e28df105d10a0561a8acb9e

SHA512
a40b5f7bd4c2f5e97434d965ef79eed1f496274278f7caf72374989ac795c9b87ead49896a7c9cbcac2346d91a50a9e273669296da78ee1d96d119b87a7ae66a

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\huangshan\huangshan.jpg

Filesize
211KB

MD5
c51eed480a92977f001a459aa554595a

SHA1
0862f95662cff73b8b57738dfaca7c61de579125

SHA256
713c9e03aac760a11e51b833d7e1c9013759990b9b458363a856fd29ea108eec

SHA512
6f896c5f7f05524d05f90dc45914478a2f7509ea79114f240396791f658e2f7070e783fab6ac284327361dc2a48c5918b9f1c969b90795ceacce2c5c5bfa56ca

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\huangshan\huangshan.webm

Filesize
9.6MB

MD5
b78f2fd03c421aa82b630e86e4619321

SHA1
0d07bfbaa80b9555e6eaa9f301395c5db99dde25

SHA256
05e7170852a344e2f3288fc3b74c84012c3d51fb7ad7d25a15e71b2b574bfd56

SHA512
404fb2b76e5b549cbcba0a8cf744b750068cbd8d0f9f6959c4f883b35bcaa92d46b0df454719ca1cef22f5924d1243ba2a677b2f86a239d20bfad5365dc08650

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\huangshan\huangshan_preview.jpg

Filesize
26KB

MD5
1edab3f1f952372eb1e3b8b1ea5fd0cf

SHA1
aeb7edc3503585512c9843481362dca079ac7e4a

SHA256
649c55ccc096cc37dfe534f992b1c7bda68da589258611924d3f6172d0680212

SHA512
ecd9609fbf821239ddcbdc18ef69dade6e32efd10c383d79e0db39389fa890a5c2c6db430a01b49a44d5fa185f8197dbbde2e1e946f12a1f97a8c118634c0c34

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\meadow\preview.png

Filesize
5KB

MD5
d10bda5b0d078308c50190f4f7a7f457

SHA1
3f51aae42778b8280cd9d5aa12275b9386003665

SHA256
0499c4cc77a64cc89055b3c65d7af8387f5d42399ff2c0a2622eccbd6d481238

SHA512
668e1a70a50a0decf633167ac23cba6916d0e05d0894daae1f7e3d487519f0a126abd4298430b38f52746a5c3b83ccd520b3d9b0ae1a79f893e36821a0458566

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\meadow\wallpaper.json

Filesize
439B

MD5
f3673bcc0e12e88f500ed9a94b61c88c

SHA1
e96e2b2b5c9de451d76742f04cc8a74b5d9a11c0

SHA256
c6581e9f59646e0a51a3194798ec994c7c5c99f28897108838aaf4a4e2bda04a

SHA512
83fb3fe4a3562449a53c13d1c38d5fe9ef1fa55c3006f59b65eace9a6ad4963e768088bc500dbe5266b5979c6ace77874ef11a15a7bd9fabae00ff137e70ecb5

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\misty_forest\preview.png

Filesize
5KB

MD5
77aa87c90d28fbbd0a5cd358bd673204

SHA1
5813d5759e4010cc21464fcba232d1ba0285da12

SHA256
ea340a389af6d7ad760dff2016cf4e79488bda1a45d0a415b3cd02a4430c9711

SHA512
759519b8822a6a4b88fc9ba47fa9d5d898b2f5a0f359acfbefc04809e6d7f5df86fb130f191eb6f63322792a18c0e7170aedf3ce7060fd9ad7e1bec2e686c3b2

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\misty_forest\wallpaper.json

Filesize
423B

MD5
2b65eb8cc132df37c4e673ff119fb520

SHA1
a59f9abf3db2880593962a3064e61660944fa2de

SHA256
ebe9cadad41bd573f4b5d20e3e251410300b1695dfdf8b1f1f1276d0f0f8fa6d

SHA512
c85fe6895453d0c38a1b393307b52d828bad8fa60d1d65bb83ffa3c5e17b71aa13cab60955489198503839ce5a4a6c1bb353752ab107f5e5b97908116c987e52

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\mountains_preview.jpg

Filesize
35KB

MD5
a3272b575aa5f7c1af8eea19074665d1

SHA1
d4e3def9a37e9408c3a348867169fe573050f943

SHA256
55074794869b59cd5c693dfa6f6615aea068c2cd50cdae6dd69bd0410661ded8

SHA512
c69bf39362658dd6cbd827cf6db0f188a9c4410b3c6b7b532595fd5907974e2141d857942ffb2497282e31eaa33c71240c2c2bd8721046df55e3358e8b76c061

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\neuro_dark\neuro_dark_preview.jpg

Filesize
24KB

MD5
29c69a5650cab81375e6a64e3197a1ea

SHA1
5a9d17bd18180ef9145e2f7d4b9a2188262417d1

SHA256
462614d8d683691842bdfb437f50bfdea3c8e05ad0d5dac05b1012462d8b4f66

SHA512
6d287be30edcb553657e68aef0abc7932dc636306afed3d24354f054382852f0064c96bebb7ae12315e84aab1f0fd176672f07b0a6b8901f60141b1042b8d0be

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\neuro_dark\neuro_dark_static.jpg

Filesize
2.4MB

MD5
e6f09f71de38ed2262fd859445c97c21

SHA1
486d44dae3e9623273c6aca5777891c2b977406f

SHA256
a274d201df6c2e612b7fa5622327fd1c7ad6363f69a4e5ca376081b8e1346b86

SHA512
f6060b78c02e4028ac6903b820054db784b4e63c255bfbdc2c0db0d5a6abc17ff0cb50c82e589746491e8a0ea34fd076628bbcf0e75fa98b4647335417f6c1b7

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\neuro_light\neuro_light_preview.jpg

Filesize
13KB

MD5
d72d6a270b910e1e983aa29609a18a21

SHA1
f1f8c4a01d0125fea1030e0cf3366e99a3868184

SHA256
031f129cb5bab4909e156202f195a95fa571949faa33e64fe5ff7a6f3ee3c6b3

SHA512
96151c80aac20dbad5021386e23132b5c91159355b49b0235a82ca7d3f75312cfea9a2158479ebc99878728598b7316b413b517b681486105538bbeb7490b9c2

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\neuro_light\neuro_light_static.jpg

Filesize
726KB

MD5
9c71dbde6af8a753ba1d0d238b2b9185

SHA1
4d3491fa6b0e26b1924b3c49090f03bdb225d915

SHA256
111f666d5d5c3ffbcb774403df5267d2fd816bdf197212af3ac7981c54721d2e

SHA512
9529a573013038614cd016a885af09a5a06f4d201205258a87a5008676746c4082d1c4a52341d73f7c32c47135763de6d8f86760a3d904336f4661e65934077e

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\peak\preview.png

Filesize
5KB

MD5
1d62921f4efbcaecd5de492534863828

SHA1
06e10e044e0d46cd6dccbcd4bae6fb9a77f8be45

SHA256
f72ea12f6c972edfe3d5a203e1e42cbbaf4985633de419342c2af31363f33dab

SHA512
eec8171bd3bea92e24066e36801f334ac93905b7e8e50935f360e09fa8c9b9f848c4c62b687299e8297c0693d6dbaf9c6035b471e6345d626510b73e3606ee4d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\peak\wallpaper.json

Filesize
440B

MD5
f0ac84f70f003c4e4aff7cccb902e7c6

SHA1
2d3267ff12a1a823664203ed766d0a833f25ad93

SHA256
e491962b42c3f97649afec56ad4ea78fd49845ceb15f36edddd08d9e43698658

SHA512
75e048c1d1db6618ead9b1285846922c16a46ee138a511e21235342a5a6452c467b906578bdd4a56e7b9e0a26535df6fb6319ae1cae238055887b48963fa6ed6

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\raindrops\raindrops_preview.png

Filesize
7KB

MD5
28b10d683479dcbf08f30b63e2269510

SHA1
61f35e43425b7411d3fbb93938407365efbd1790

SHA256
1e70fc9965939f6011488f81cd325223f17b07ee158a93c32c124602b506aa6b

SHA512
05e5b5e9c5ef61f33a883b0286c2239cb2a464581d6e8a86d7b179b1887b4cb2cd7304e0821cdd3208501421c44c63c248a5166c790792717a90f8ac528fbf2f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\raindrops\wallpaper.json

Filesize
385B

MD5
5f18d6878646091047fec1e62c4708b7

SHA1
3f906f68b22a291a3b9f7528517d664a65c85cda

SHA256
bcfea0bebf30ee9744821a61fcce6df0222c1a266e0995b9a8cfbb9156eeeefd

SHA512
893b2077a4abaa2fe89676c89f5e428ccd2420177268159395b5568824dd3fe08bea8a8b2f828c6c9297b19e0f8e3a1b7899315c0b07f4b61fc86ce94301518b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\sea.webm

Filesize
12.5MB

MD5
00756df0dfaa14e2f246493bd87cb251

SHA1
39ce8b45f484a5e3aa997b8c8f3ad174e482b1b9

SHA256
fa8d0ae53ebdbec47b533239709b7e1514ecb71278907621ca2d288241eb0b13

SHA512
967670863f3c77af26fa1d44cd7b4fe78148d2ba6ea930b7b29b9f35d606554d664c0577068e0c26fa125d54627d7e7543360bce4acee0af17783b07450b5f52

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\sea\sea_preview.png

Filesize
3KB

MD5
3c0d06da1b5db81ea2f1871e33730204

SHA1
33a17623183376735d04337857fae74bcb772167

SHA256
02d8e450f03129936a08b67f3a50ea5d2e79f32c4e8f24d34b464f2cb5e0b086

SHA512
ff0e60c94fc3c0c61d356a26667c5170256e1143b29adf23d4e7d27012da72ed8865ef59dc2046314c7335b8d3d331e5fd78f38b9b92f6af48729dae80f85b15

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\sea\wallpaper.json

Filesize
379B

MD5
92e86315b9949404698d81b2c21c0c96

SHA1
4e3fb8ecf2a5c15141bb324ada92c5c004fb5c93

SHA256
c2bb1e5d842c7e5b1b318f6eb7fe1ce24a8209661ddd5a83ab051217ca7c3f65

SHA512
2834b1ef7bb70b2d24c4fedef87cd32c6e8f401d8ee5f3852808f6a557724ce036c31a71298cd0ed601cde4be59ec4042542351c63c4e0ac3d31419f79240956

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\sea_preview.jpg

Filesize
59KB

MD5
53ba159f3391558f90f88816c34eacc3

SHA1
0669f66168a43f35c2c6a686ce1415508318574d

SHA256
f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e

SHA512
94c82f78df95061bcfa5a3c7b6b7bf0b9fb90e33ea3e034f4620836309fb915186da929b0c38aa3d835e60ea632fafd683623f44c41e72a879baf19de9561179

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\sea_static.jpg

Filesize
300KB

MD5
5e1d673daa7286af82eb4946047fe465

SHA1
02370e69f2a43562f367aa543e23c2750df3f001

SHA256
1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a

SHA512
03f4abc1eb45a66ff3dcbb5618307867a85f7c5d941444c2c1e83163752d4863c5fc06a92831b88c66435e689cdfccdc226472be3fdef6d9cb921871156a0828

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\stars\preview.png

Filesize
6KB

MD5
ed9839039b42c2bf8ac33c09f941d698

SHA1
822e8df6bfee8df670b9094f47603cf878b4b3ed

SHA256
4fa185f67eaf3a65b991cea723d11f78de15a6a9a5235848a6456b98a9d7f689

SHA512
85119055ddfc6bc4cca05de034b941b1743cbb787607c053e8c10309572d2ef223786fc454d962fbb5e3cde5320117f9efe99041116db48916bc3d2fcd4ffa25

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\stars\wallpaper.json

Filesize
537B

MD5
9660de31cea1128f4e85a0131b7a2729

SHA1
a09727acb85585a1573db16fa8e056e97264362f

SHA256
d1bef520c71c7222956d25335e3ba2ea367d19e6c821fb96c8112e5871576294

SHA512
4cb80766c8e3c77dfb5ca7af515939e745280aa695eca36e1f0a83fb795b2b3ef406472f990a82c727cea42d1b4ef44a0d34a7f4f23e362f2992dbff2527798b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\web\wallpaper.json

Filesize
379B

MD5
e4bd3916c45272db9b4a67a61c10b7c0

SHA1
8bafa0f39ace9da47c59b705de0edb5bca56730c

SHA256
7fdddc908bd2f95411dcc4781b615d5da3b5ab68e8e5a0e2b3d2d25d713f0e01

SHA512
4045e262a0808225c37711b361837070d0aeb5d65a32b5d514cc6f3c86962ba68f7d108bf4d81aa3bf645789d0753029a72c1ce34688a6d7af15f3e854c73f07

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\25.2.3.808\resources\wallpapers\web\web_preview.png

Filesize
8KB

MD5
3f7b54e2363f49defe33016bbd863cc7

SHA1
5d62fbfa06a49647a758511dfcca68d74606232c

SHA256
0bbf72a3c021393192134893777ecb305717ccef81b232961ca97ae4991d9ba8

SHA512
b3b458860701f3bc163b4d437066a58b5d441d8a427a8b03772c9c519c01983e3d3fdb8da20f6a53ad95c88dcdd0298f72822f39bc3672cb6f1d77fcc3f025a9

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\2fecca29-0610-403f-93f2-6367bde3e89d.tmp

Filesize
160KB

MD5
54497ce2271deb0e673ec048b44da343

SHA1
5f886314234b7aa6a4da5efc937a9d63ed007727

SHA256
3dcf052bb8050fa32f28873bb665f63f457799cb9a92549fb2dbea94014f929b

SHA512
d0d77d763b1b12c1b9d7a9a3f2aee4640ed5fb10d828b7c3c2cb051504c2b7b6438309124b934b346a4152c0aca009883d6bda42dc997188b8ca2736ac3419c9

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
9babfcf4f2c42f325797b43ba1a69598

SHA1
3a3a750ba3852fd01e47ca0d7c226db2ec343926

SHA256
36a659893b9c6dd295a15e609a3f434eadf122c9f8ad6b5f430a958f628ee241

SHA512
4c05c03e74c33f6f4162ead8abd1ae65870ab67ea5ad0ddb64ef2f6bedd1d1c96c3025f3184c8deb78c94019ccca7435b805f29e9674a8cee40573bd11228f50

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe60a2eb.TMP

Filesize
48B

MD5
c1c2056b900833bf7c2d305dace62679

SHA1
2be908a4805386d3592a683d26aafe81c5d20580

SHA256
00d5a2f7e506941f71607b0fde9376611bbdbf346fb6c0097a19599518db0452

SHA512
986e05151dd7ac548a654ba5281b2cc3f7c1ab38fb2bae093b5789087f6d8c0c7fb0b0e7d86e064dd289a778f4a71eceef2ac060041170e3a0a29e6e1a680901

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
e28a3d839e5a0969d2999c66eee56a33

SHA1
8650829dc352f8a84a73ad416e7b62cce79d3892

SHA256
86025e0257e1ddc9ccbad77dfc702c7cc68da61c22f206b85ad9d9cc8a9b19b2

SHA512
6da9189eef41b6f86552118c0d89a4b3d9489fa29dcc1b220d0a801783be42ba3fad4f8f534ffed9748283de94f6c7d7526084372d42011033d1c6a68fab29a4

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
19ba77219b6ccd354d916b27c0519ac0

SHA1
b65f6774836b199b6361157998e3ec7ef1046f60

SHA256
e638d0d285c087708addf607ca290cebe957b5c5044411e5052bb129de7a486b

SHA512
763c3b27e1fd272e6262e27bfa50249097558d0fc7cf22b658faa34176a16e00fcb7e5be505fc8b3eba29d2c6914f2164a1f46b03bcfac8c6a0d40d8bdd404db

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c682030dc9f763e76e7c855b3408078a

SHA1
69022a50f26d2b214536ab9e7e42580f1a5f3f06

SHA256
02cb9e49eda3c4abc368e6e3e19a1eb86ce749b537acb48a78762fbf525bf0de

SHA512
378ac3850720a25391507f84d783988ba5019d89905cc697bf8f594fb7c298e85c36c50bfce12d2a2820205663040a011745a371e355090ca53ba0ce4f47a9f0

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
026e23176560a4927f8985602909d2de

SHA1
9037d64e8665781b249a8017d8e3ea7149d4c396

SHA256
78f1407be46e44e132c72ac7af2e8336d853f635b67b439d8049547d36c56e5e

SHA512
4fe51c2c3c407fb761e40919db77fc29ee1270029e1e62317dea04a2015407f7929ed213c9d51df2446c4486c76b26a06bd510892f6346e631fc2f2319157e61

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity~RFe604700.TMP

Filesize
1KB

MD5
2b6057caa471341d66b5063510445680

SHA1
e649b0b44d62a06cb788021a4607c6692f5f9a02

SHA256
57f580b080c21ec746e2f969cd61c3bbb255ed7c5aa5d24f100e856ccf7edba5

SHA512
abf0a7e738ad23182c0a1cef5f561598bab7ddf4088070a22bc0d8f37908b3a1f299df7672352729a32a02b16bc6778f20e028f4a112e9a231a72d308d927d0a

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences

Filesize
15KB

MD5
0ac765b15e7210f9047e95346d97822f

SHA1
f9e9746b67c8527b24c1e155629188a4e805f814

SHA256
ded37e60f23c6c741a5a7b39e2be6c1993a6f94adca4621fd38c54da56356272

SHA512
d60aa59127e8759413ccaa67f80ec478a3098fb99de328d1feec28d1c6a04b9e3de7b5f975ca406f3dd0697352ff860b00a10bf88a47af5f1939221a760aae47

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences

Filesize
16KB

MD5
5b9119e33ccbb856ed859d98e22bc98c

SHA1
58a00d0c1b24ef8afaafa12f823e2777860d8f11

SHA256
791551976ad53e9c459139a5ae758c85c012aec87bb7d5a4df694da9b79fdcb1

SHA512
30b8c45b2920fba675a66b3bf2847388ee4aa6697eb161d0c4b378f227b6a6a9b6cc8b92489a5f34ef6a744b89e61b26399e3507e487c127400fd890066ded7a

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences

Filesize
7KB

MD5
4a5ed8f36d7781eb3edbf05085f3ec13

SHA1
3ae5b4dd15f5b04e9b40c36400bad9578329c92e

SHA256
f04b617cd526754177da32675f495c1b4bef89d79e2b905f273d47e20e61d080

SHA512
30bc64d91b631edb4354dde29ae663c659fbcc6c12c40aa3cb228a92643dfbcf96130dc352ec50a18f4bb4dfdf60b711612645046ba27b910efbb71986cf0dc3

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences

Filesize
15KB

MD5
59abc4dc42ab371acfdd18bd8fe71ed0

SHA1
f549f5dba0eeb87ae1e24deab31455570c32acc2

SHA256
fdf89b4d3b33375c9832561dbc422a72e45bc263cced95cb4754c124841d7d6f

SHA512
4587d4d5ff26cdd1f333b74a015789c849a556b0a4c39e4832c167f83d820dac9c2966a7c5e3d85f9f068b7d997a709986dfa244213e4a7a45b16ed7c4197799

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences

Filesize
11KB

MD5
fd8fbd17cd4c1ed42b9742383a9fb2db

SHA1
b8166c910670f6f207a1448945935e18415a6f94

SHA256
da2d8e3ee8ac8062746ed1f2dd6fb5203c3cd5e91c0f106c61b186a453f758f4

SHA512
d76daade1d82f3e004eb15e17e2434e52dcf96c222e67612f61cc9f17e60b37fd82fb20928872d318b0dcee07204e38674a2acb503cc3db660597ff20df7fdc5

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe5fdc30.TMP

Filesize
3KB

MD5
e14888679bc9956bbc1885892c65c06e

SHA1
408b6446494b0e9f1f8fd76b8ad4239c0f66e384

SHA256
0bfd470106df37f0152757036ab828d2af0ccda630ef95930a1342fc652cabd5

SHA512
1acd1c3d39f62a2ebfc0c78cfb1843c178caf1f6f75ddc5a93003cb72ef428416cc20f70539c7a59d4b19c14dc7e29df2c5e06252a61bcd64c4b2e1b694a46a6

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences

Filesize
9KB

MD5
e872c193df695c60bd4fd83e78085816

SHA1
99a2711b333ff3e574d2cc87bf85ffd0626b9e0b

SHA256
1f3aca26158fc709823a81a2776a9d6ca115bae51a20bc0aadb3f8ba2db86f2d

SHA512
be6016dbdf5191128def612d42fa071a71f3e5b73f49708d83ab8e2313e1d6ea774b374d977c9f6ef5e1d25b7332f26d33ba49c8182c1ca5bbc0d5560ea74287

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe5fde53.TMP

Filesize
2KB

MD5
c3ff1d35b6d7bb11b9687a12daf24c95

SHA1
ff5d8f3224353d27de1a5717af0ea8473e83cfef

SHA256
0e32c869aff472e56890e7787cfd2a232dad83f3da60383d490338206a013d3f

SHA512
5090a0d963d0735f0d0f6ccbab6f9735e522712141fb33cb9b4aedc0f3af2a400dd4e0a3e75937fe36144eb8ebabac4b151ce4f141f805b6eee0320cf5a48ecb

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\1c230261-a149-483f-a6e1-049e856af66b\index-dir\the-real-index

Filesize
144B

MD5
5c9080257982b297f8488c01c26f887f

SHA1
e4951d3eb70ad92a3ec64f0f18d7f142dac00268

SHA256
b454f1df9cf7db2c873499dddb9ff4f892d10b4a6628f7fc21fa7bede365d8f3

SHA512
c23cf43ba660f8437b0310d6976c94575768ce37735d2446646a3565615442886fe3317727b6c0161319710686475c2aa7e3088a6617dbe15edf105e9c4cea29

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\1c230261-a149-483f-a6e1-049e856af66b\index-dir\the-real-index

Filesize
120B

MD5
560ab434f1d205652490f8cdeacabf17

SHA1
0740c9e55dea67bc3c2f3c1f33d38f6f4f0a0881

SHA256
c1c709dd2d5682c03062092f6a1fa5143a44c171e783c50e816ed2ceb7d5dbb9

SHA512
3d73323ec20a13a79e8177f6e5b53a2c62a0ee441b9ae5e8a35e7d569ad46fbf6509e59aec7ca88c1d78312b23d4ee6cc218e27e0a59cdd40c3b21cc2c863ba9

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\1c230261-a149-483f-a6e1-049e856af66b\index-dir\the-real-index~RFe6046f0.TMP

Filesize
48B

MD5
b70d425517d7e0b58f41d01905b9e077

SHA1
e1b43c3b6c45a44ead2cd4a97285b4ce17cd4c17

SHA256
63e53dc0f54342a2afe833076cb0f70f845999626026592aad4e1b2a8adcbb33

SHA512
7433ab028e259e757dbf8b65575bb4a8685f809c2cde3c7789b708d2beddbca941440733d87acb3955544ce6639d96213390be043b45b9ad4b96a1c1e6a68fd2

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\a0a71595-df21-40b8-900b-1b365b5836f6\index-dir\the-real-index

Filesize
264B

MD5
231cb1829d05e10d1bba9326dc5d56ec

SHA1
64ef204dd447594b1a27e811a979dd91e6139451

SHA256
332fc66c90a27e719ae0c4d0a56cdd969c5515807fb73013c3d580f9cebc6727

SHA512
897746d9479b268e1427c19a0963a3368e88216a0cadc73f14fde7890bf4012203552412f6914bbf8f99ecc8feb7c39e2ba3a5665e1845e8cf4e81b98d3f5b24

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\a0a71595-df21-40b8-900b-1b365b5836f6\index-dir\the-real-index~RFe604606.TMP

Filesize
48B

MD5
b67ee9ba6a041098f7bfc1585889e0cf

SHA1
0b51307d2d95270aafce9bb87ef8b56264b0208b

SHA256
99041d7526433b9fd12aecdd070195556f776a99afbcacd5a31e178927501b2a

SHA512
d7101c8d17f6e155c24d0ab2111797c0806cb3e94be59e396fc5e6cdb32eabdfa5d56104d5b3083c80e13ce90953616b437eea262745f92722801a3ba8754ea3

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\d8134480-2abd-4761-a1d3-39d90f1d8728\index-dir\the-real-index

Filesize
72B

MD5
e65d2bda8779854d22e70639c3301a48

SHA1
09e5672cbfb3be95defa592924408854f517d64e

SHA256
c7abc61d59ec814b422440f98ce03dab0ddc12460018775aaaf3b1e3751a943d

SHA512
b9e32d28604a73c0a447f9065dbafa7fcf7da4140beaa12d9f6e31f69e48c398dcb5e2a83b7ff38a4a60f8ba5e352a0c1443b6b4c73a2bfd8733ef264796cb85

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\d8134480-2abd-4761-a1d3-39d90f1d8728\index-dir\the-real-index~RFe6043d3.TMP

Filesize
48B

MD5
df2321869335e097030a8b3a10b2ef66

SHA1
b3c73a235719c652b34f6f0101e5be09122dba8f

SHA256
d796e52c5d8fa277e38ac91b4f42e832d93b899fdb70518a2a0d280dd5b9d4bf

SHA512
baabf6a65b6e3db6ba9cd3ea6b01804b6bc353fcc62e7f6a1820cd5d23d7a8f3ab571f8282cadc82d10bb76218084613fbbe519852999e431b481c90332597c2

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt

Filesize
272B

MD5
47ab27cbc34065aeabe69a9cedb53843

SHA1
6d7891a87c593b1ab243dc09a56a71e893f7bb29

SHA256
38234cd7c42cd6371e8b441c6f17e5f6a258dc071679814885df8e3da0ae75bc

SHA512
5bb063193bc54150c4dc0e9f3843f7bfa359e09fbfb1229ef5557d95a214c93ca3b26593c13b3f3f645c4a7d37cc7a8b657bdab4c7756d38e854eb0066344c04

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt

Filesize
324B

MD5
970fb146f5006d5612baa8765b406cd4

SHA1
c067a6106a0ac17051af155a6caff67ecda2c46b

SHA256
2eb2498efc2a315bea86577e939cd4fcf87f2aa41e5af890708317bbc61496b9

SHA512
d0fdac7e1f0d32dcdc436cdfb407dc99fcb8a016548d37a0d0f84f3acffc6206c7a710d8f70a5711fb1d14e6d3e5c5e16cd0f794b8a429926686e701609fc923

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt

Filesize
323B

MD5
de91425607067d40300c1d6e8eb3303f

SHA1
ae50d9ee5e24ed86638dfb5f9ea064edb150d07f

SHA256
c8152ba973becbdab6fe8dcbf1f48c5016133dd8fd7de7f47bec8cecf1a3a703

SHA512
3a6df086f8ba919dee672c651633bebe78c76f2e1a03f4cd549e63936a72a08c85ce4e5a492dee73ff694445587a19872b9450f2fd7e0abebc5751c35d1b07e5

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt.tmp

Filesize
324B

MD5
e8b87e10607dfbb3251ad2dfeb1f08e8

SHA1
0c804ca7e31e54a858c9e6af9f15623e4b822962

SHA256
c4c9942e2a2b2b015e600d977f745a769d502238607c96645a4f22177e36f17c

SHA512
5a0e3dc02d0902210b5641f0418cef92817f4c5d46d2c19633c1e30887ad02fea0ec4f20bc12005ea82b5a867f576ee8b36823507db40f55f4b392cdb0e1c6db

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt~RFe5ff594.TMP

Filesize
147B

MD5
b4f2299ed960d48a0be34bc28289d4e9

SHA1
ea24260f706aecd6e052a770aa7720078b205979

SHA256
7de783c7664b3a4d87c03984fab237fa74d08197a865a443e16e3967f66d00e7

SHA512
6ef6fb29f38e7f7343252de46506cc20c3c96794bc221b6d5c791dd8fd7220ebfd9b1e867a35a2c4347cf30cb7a7fbfa6e0737fe2c1c4dd203a5806078721f1c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\index.txt

Filesize
104B

MD5
4e90d7fc0a816066de8788945acd9a94

SHA1
8c7a36a15fd480e721921afde8618bda65822746

SHA256
3d5d2f662de82c0457c9773b5d81deb2c43f7c99f8852dc17be83819bbb6f0e2

SHA512
8701c1050e0290443951d0ca72f911aecebbb5c66c86fbc4827d8e75b90c8154435f975ad7cb3f993e91508a3dc70c64316ba4aa077a5374471e602ccf6d1851

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\index.txt~RFe60426c.TMP

Filesize
111B

MD5
d1d02e1b767f18ef6e6e79aa179d0909

SHA1
3b617c23fdd9683a32cda5e6d55b7575a62cf2c0

SHA256
f76f357bca02f8f0ba632cad42db8e3764daa2e2c6e266b00482bf444abed49c

SHA512
7bf2a25e0037fba9b19573684fae608bb270a84289cadebb3f0611a39f907153f4452695e18de9ce3c175ab3350bd61c9a2c0b383ea2ef9c84abd2fb1659ebc8

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
8c1e7ac3503954ed0f87a27aeb0f4946

SHA1
3e86fd5b95b281966753ecf09ab1c8125662b301

SHA256
655e09234023c3164923ba2417a99c7fd52e3288715ae237abb3a2a4b6fe1810

SHA512
ed1b15e0e79f5bebc0e98dac67097542652f892b60b0c7f72c8c0bc071fd06fe12a445a12f023c191e397737b3aacfcf0ae24a424921e4ed62ffb490c39b1218

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe60422d.TMP

Filesize
48B

MD5
55653307013f7848b12359c6e18f878a

SHA1
2e3baa42102897d57590396341930eb495f2a318

SHA256
0ef501f937e3c746d115e3afbcfe48b2fad193700b5ca8051268438db127b458

SHA512
27c7a1d589f6a9155feddeaf3c51874d6e415e493cdda13f47b57b63c1f676160c29a36f79a051d1d4b7cb272b42d789bc5bfdcd54d6a19b7ead8b25dc40ff27

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Shared Dictionary\cache\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\058060ba448ded6b_0

Filesize
11KB

MD5
ab85a11dda080990fd4e3f31c973724c

SHA1
6d0441fc03e8c8a4bc9abb874eb6e9daede90906

SHA256
5d0390d764a9121e33bfb2540458def0125a0e4e95199b51f109ac9383dcd6f5

SHA512
2f9bfce03ffff24446de6104e8e5485dbf80748f68e1a51595e30b0c6203f9dfc2070491825278e3c23682f35a115f8d23f66a3c553b34ac74951fbc9b0ef323

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\1ad10c4bb9e37138_0

Filesize
44KB

MD5
5b7dee00a82c64c9dbae0255da970aea

SHA1
c8d3f7840844000c64ea7e00cdc33d3643114137

SHA256
386916d207ff118ecedb093786ec7da73ce4a51d41a1ee7ddb59e38da21e78ac

SHA512
db461035d8b5de47e7b2f8b02d732a067c661906b4e3a0fda5fa1adfa745cdff227c5f8941e7347d7c2b935280fb2b5a263445dcde07995f6c1a3b153e13f83b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\24af4dfebb5df1a7_0

Filesize
4KB

MD5
f26cff47d94bd6ae86eb4259c98a3516

SHA1
586afaeb9d0d850c1828f5aaf51908fa32b30484

SHA256
287d7b9ae41509931c3118fe00d8657ee1b078bf4b4cecc95a9c0000ab7a557c

SHA512
6b74512818e0ff73bacd1febede3e9e1134f741c51855410619b389554ab909c30fa626a3fc45887c847bd6c975b33206e683552fe8761ff631bee7048038c17

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\261779a6811bbe41_0

Filesize
612B

MD5
2124bad97e384daa0d50af6286ad203e

SHA1
448d28a4ce87c3619a53dbdb000c1b8263340b11

SHA256
1e42752580880f6824af07bddd9cb41a5948f983520b51c15bcacba045a9d9d8

SHA512
b51cf680d4af919ff1e2e11c3844e67c737c9abcfe372ab2dc04664fce86d46d450e9821b51128ceaa0fa7d6f56fce7590b7b21ee6590c3acd96cac993c11a3b

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\2a9877b782e7616c_0

Filesize
42KB

MD5
3ebc2b163bd503a8259ab509bf494feb

SHA1
0c2ef5faced31f929af217fc45dc9bfe5563fb4b

SHA256
8ecb36458a994d193899a31a18b4fc73eed3dadc3f1ad04d7391d559b308311b

SHA512
3550676ac4b5e2023aa63217fbc58a3a40444757a967f82a9fcd8f62d531b275e7b9dcc6070bd4bb577691db19addd5195f6b2a2d8df1749af64453baa2dff0f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\4055ad33116fc165_0

Filesize
2KB

MD5
4d6764765bd0f10a99992da746f1219e

SHA1
ce9ac4d0aad0cb9b6a6d6f4b6f1976a7395e22cc

SHA256
5c2151c212b281b844ee57ceef536edc60f2e7ced832414815ff3239b5e898dc

SHA512
9d3275295f4bdb65c8edb0299d796a0cb8af32f79c41d99cd20b199dcf1b5fe27647904f1455a3c996f31935b1f56ca97d67b3f75b23dbc5f6306a2ba82f42fc

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\455e7d9b9d1d83f4_0

Filesize
755KB

MD5
b178f0bddab050346d7c3fe88f611002

SHA1
5cabcf99e86336230e9c358257fd2c4ea2e99d0a

SHA256
ace865c78954f678e2346651a522be6015fed16d0a0e63ac3dda0b9e86cbc364

SHA512
b6065481580377973b506df0de5f7235dba94f574fdce8d3d56bdc38a9ab9f0af668c0d346b7e585af98f6133978f132d4f3d4bea8e2cc49d04b6f5ab5967b9d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\711927847e880c97_0

Filesize
31KB

MD5
d401bc5a77278e36c8243f170450bda4

SHA1
1d3949f7cacf88a8a1ceb5de55df309392cf7a1c

SHA256
84ac8212f0f8506cbd262321d25423dcc447fbcde09e300a677132cd5a813a7d

SHA512
2d4ac16571056fe5a6975b7ad4ee9a4524c38720cd5110034cec6769fc46e333e0013d99b8b1fd76bfa77e7adc6397e0a27edb4a3d9046742ab7857306fe6647

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\72c2e20ca5d250b9_0

Filesize
13KB

MD5
d75dc882e902093586d67d24fed814c3

SHA1
d6f3b4b5af8fc2c8cfa54f943e613dec65be6d41

SHA256
4fc05b6e92f1eb0baf462d6efeb3090df68931dba01fe6156196e2d0b7f85a8b

SHA512
295e3ff37c45b2c843d8f0dedbf43c86ff0807d43eda5ae7875bb2f008ae423ba1a03d672093fafb1d21a4a640c813b248151450be809389392c2899162104b0

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\780716c60bb8931c_0

Filesize
4KB

MD5
ddaa30cc8877acdc2726152e14c80a69

SHA1
7dfe0289e85cbb54bd60db554200af2e44e25204

SHA256
2d4198c4504e58a36c923740503305fadd7d622ed589c7b9c32c526a1113a020

SHA512
5c19e4a6e39053fcda9e463cc3fc40d01e816827b8823636ad997d50ae0b6808d55da142de5a2bb6e2a56844ca36aa99bbf0c1cdeaeb898f459e681f811e1443

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\7f25d9c5e3e7ea32_0

Filesize
3KB

MD5
2f765ff08960fe87aa8c381570b7d0b0

SHA1
fba3b537226795bc71701d6a8af65e2aa9e9aa52

SHA256
f51e061f14cf485dc4a2d19bbc586308da4c141755966f784eacb1aac53a30d4

SHA512
ac6a2406394fbf9c7bfd2b3afbcd127d07f6aebc4351fe650c28efb3d352a3588ae0f85056cde006156f607a2e80531cd355050743f2a8bcc450dbf9531e6081

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\ae662e046f7b3fd9_0

Filesize
3KB

MD5
86ec98a5d03f01371c7723b1ad71de1c

SHA1
cc0fc1950d7daf2ff635e0e285896ccdafdffb6c

SHA256
69df88c7a30908fce6cb9bdd79bf396ce43e8d33623c22f7da2f6caf3ec1a44d

SHA512
983ce73633d95a01c319d660e8341f6224eb3a697c44d927c588c27bcccaf5e0146c616191cb4118fd7ae428f507d5370580d3fdf33eca5b595a6300d0553544

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\b3f0dc54e2b61fc9_0

Filesize
1KB

MD5
dd25712aad62a42b453a346dcd03ac28

SHA1
7ee5a5da73104e317bef1ba289fcb8f488502cbd

SHA256
2eee36d4dec20880da393c7a204a8961a184abaef7caf6128621577bc3687509

SHA512
1f8411de0621302def67ec814cfbe69014962a56838cc26bfb91a62308146ed610298157be2c7ec711776617ee331f1bea1b553f63e70c19a8ff5717e6fb5b76

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\bacba500485a7fa6_0

Filesize
1KB

MD5
a433fc3c8aaf8e505c838eb8814297de

SHA1
89e46c2e4a3d5f74854b12a6ab1b9842d3c4927d

SHA256
22a0a8c6a2a0c92bb5640c9df73c3f0b5f096fc0432a30333c7b6027e736fee6

SHA512
55ed106c71db5bcd1d797605584b5a6303b6af986504dff4e863cb868ad3e881a17d431723fc9f0b1f6f62e57e09098ebdf13dbb27afbff974481b10d528d6c7

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\c0bda676d50722ea_0

Filesize
552B

MD5
68730d4e2472c73c04a074b706a1a005

SHA1
d0cd601b37485f87807ce397d277562829592896

SHA256
db5ebed51703cd18e8255ed5d7c170a55b6007777277ded704fe72cc3873c780

SHA512
15a9451eb9817e5fe3916d6f10dc43229053f8fb6b441027b6c11ddb135cf4b9e3565650c87ff186a440b87d124e107f65be29b686e5c26a43c89807950ca40c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\cd4004d6793712fa_0

Filesize
295KB

MD5
a9c53457c34ff3200d7d5f7b0391d0b4

SHA1
57e89b61f1bcf6f5c6b0361f1adf95924cd213fb

SHA256
46ee0f5fc69c47237e91f5607b267afa8e60ec3a7038234a23597315ee2af57a

SHA512
23109046d1a01b19b323bd5fb829c792618b27f474faf6fa8d45bf232e7a7e063242c8cffdb227d38002d10af9ae2b4de4bf2937573dae6041f5851a46e61dbb

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\cecac326172b974f_0

Filesize
22KB

MD5
254d1f9e4cd21e867d4538bb7dc96355

SHA1
365d7244076423d1d65a42d0e76f041bf1120e7b

SHA256
265075ad98c7dbfa112c6591efe40e41f4d21f171da53cda128e6e60aa53c4d5

SHA512
515cdb37c8ad202d64136310047e0dfc58df9909750d89cb33d1ab59df810f9f5a53e56f041415578f2f7eed5b4f6e19ba1e86dda96c57802b81898db3427ac8

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\d157804e9b4e4832_0

Filesize
25KB

MD5
f09717b99a1262c3642e58368e4f7122

SHA1
f67a6bc644bc12560af367b1579b083a1a5335b8

SHA256
4c2fcf94340827f5fba3c3d4819e23e5e957e418730dad9b25cf5ef4588cfb1e

SHA512
576adb142b35944d5e67453759107a61a620a8de1d8ad761155bb11885cb4ac07fdf288a8a87b0dd7de4c7bcc4df6b93412428603b2e5222e533bedbb77b1243

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\d2dd050c76f77fec_0

Filesize
14KB

MD5
73775f0b247b3996718a19c60f7af0c4

SHA1
517e6fea086007ab0bf7c2b1ce3e6f2277ad6385

SHA256
c4f1f204ab031fbbd5329e06685f089ccb81a0fedfadbae3993ab4d48804568a

SHA512
8f25a906e06d17ea8ac917c3441c7dd8279e0e55511719db46823ac899990aaa34ad3cfcc37f0d8f8a39224521eeb620477768579704985a915ed2c883a8cfcb

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\dfb65ba14f23e3c6_0

Filesize
1KB

MD5
8218f2c3e37302279116a53bd089eacb

SHA1
3b5cadaf52a104f6a7a212acf77980c9a18da3a5

SHA256
4ae740c1c44eb61bcb4f20c429c974e66e63ef00b9d5ce54ce1c0311b13683d1

SHA512
74dbbc87a0312d5bb3de539dfdcb5aa6f244043aef49b740b6b091bb5ed98ea5bd3aace44868f4be651d5c2edacb15e81621e92637d4f47d7668961dc9121e32

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\e268339246b29adc_0

Filesize
4KB

MD5
b66a4781bfe5ac7dffe51cfea91aede0

SHA1
301dd3788f6e024dc8889efcf2a4027c55ff4ebd

SHA256
947dd8ce337d968e7379f9b72bb49f5f6460ed988ac7a1250400148abf5f06fe

SHA512
56c8df0f0444854692255c7603e6a0c00fd8102271984960ca98cdcebf7655c85d1b661127105b6d635cf341407575284daa0e7b2971bbac953739fe7bac351a

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\e7d083353a620397_0

Filesize
789B

MD5
68152e5a78da4d03c9d896e06e114139

SHA1
e2ab5c97cdff4196cbf214787ea555097d742d47

SHA256
bd138ef40dbd88a356a7b79dd1e686d0067913e05fbf9d48777c5189baca635c

SHA512
6cac021a6ff0877ee8e74ff4d2daaac05a800b37eba53490572661641d45db44ccabfe9cb26527fad1fd8df50a71af814e601515edeba1bd828fb69f23c18a7d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\f51d5af08878d17b_0

Filesize
6KB

MD5
c3f7cd1d08730c9c6cfda16497f70b84

SHA1
a1a75863fe24d67cb9a36fd0a2c535b158be8527

SHA256
e3663ded0f751ac4cfab959b18b9cd836b57a794654fa3f6bd9aada6619650f9

SHA512
04718022233a33decaa08d95c8fdfd707528abb38bc40d12d1a60a77a0739541790860e42a557ec73cc454e635574fb2cc71bba16a263f665caad4d89f481963

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\f55f00a9a3efca75_0

Filesize
556B

MD5
de0ac65cfb7eee6a7b6f7858a064cafe

SHA1
f5a8299880cfdee5d67882b6afaf58dc4d7b884e

SHA256
8dd9d1c17540fe1224d8a8285d9b403c5c5bf9cd74bcd78754477e4c87b710a3

SHA512
cfd42d043eb5820126887a15ed3c4d35d53eacb6884f39d0ca6774e60de45592519ee177e11d264cd6c45037509319ed57da34b7adfac02e4920ed8607cd5d53

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\fd41ca2a883063a6_0

Filesize
9KB

MD5
9e0a46e1e2e7821b54cbd0e7a6ccb660

SHA1
fe306a9655e003e28dc3e3da23c63990e665c2ca

SHA256
f09611362166620081e1bd35663959ddf65d8bdb8204fe9247e9e1473efacde5

SHA512
2b44da94e1f21a3720c4386bf3497b753e6a26d3586c1350ffa2b876c0d360046b1124b99220b43988cdf19dc3f2bec4668b350abb0f9b149303ac89a31f5520

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\fef132170d47887d_0

Filesize
5KB

MD5
175d5e6cc774709c3bd1c984d4d8ba26

SHA1
feebe8f26f6042fcc64039310719291f268a9ee4

SHA256
aeb2880dec6dd877d400553c35526bed57c6a3d8abcfcd6d3bff3c5b5bf773c4

SHA512
3d37b6d747942f545ddbbe3d8c7e6f5e69b8befabf897b04552de45a4d9294093f016bc659821905de24422d1d799b0f4b0d185ac2002059e170a12ea770f53d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\index-dir\the-real-index

Filesize
4KB

MD5
45f6a7a7332edb1138d5cd8394bd507c

SHA1
8c46d641ebee92869cae4653a1b17a06f9590554

SHA256
da61dedb5d66a8009d7f90409873ef44678d14d3fa51f0fe7a75db7f531adc00

SHA512
fba00b6cc132a67f149701465b52aba0239cf32eee0241c9cc56b1ea523e27b77f5fcf578aa6cb6527d60363827638d293488bb2b275d3c222c268a61803ba00

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\index-dir\the-real-index

Filesize
4KB

MD5
556b0583f73ba8b17c3f2baed816c0f7

SHA1
b86c788d4f0a86f4b3c9d0eaa6e23e0ed0e50003

SHA256
93b0d04b8325c1d4354590af973f5f1b326bd5528036ee88c5405159b1dd7b74

SHA512
edaf24d7436581092734bf6cc68d133e3e850051255fc57b52841f96d673fdf316224c857fdb2c2e0cfb6e5cc6aeec952efc414d40a67aa10cc636a1ee4aaa2f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\e1751a6b-2e08-4f93-9aac-4c966ec991b0\index-dir\the-real-index

Filesize
4KB

MD5
0ba5a2a6d86605ec0e7fc3c4a6bd890a

SHA1
4d22d6eaa1778e00c28318aa66da0605ca53ad80

SHA256
07cd65f1bdf356e35fa45687090b84d2b658c4797cee3cb6a790db9a8d96f234

SHA512
dde287df6f9a15d89e9d36b8227c6b62023fdc9e30f39e94280a72ac670712a42e88c49a69c05f63a70dba96936c636621819a214ce2ebf28b833f4874eda041

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\128.png

Filesize
11KB

MD5
363bbbffe31e45e3945aa0ff3b8cdd1d

SHA1
f223255a82218ddd45bdf54a0cf1e8b438a67edc

SHA256
39b835c3dcf4261025de83d49ab151f5af0bc1ed8845932065aa1a333f026684

SHA512
7bbfb3810a2bed3d2a8a899afa95412cca95fa6916b1684ae3182bd0ad28faa7076fdf328281d106a53c10385667729b4089b0050610e87eadef2f3ff54e80be

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\16.png

Filesize
699B

MD5
238b0e7dc06028db4b6aba8078740ffb

SHA1
5fd2309587993b371beabb7a9d039e0dba3006ba

SHA256
d159e510392f6da58c4d15cc098171d45c7b02a1362cbf7be7a2d47a1a10e7fc

SHA512
1dda4de21be647067c04dfc47174df39d0c6c1eeee3e9005211f908351b69d6a27ed268b5ec7480285fb203a95136a3a205f7bafb7eb5223a3dcbab0dadc0e5d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\256.png

Filesize
24KB

MD5
a363094ba5e40a4760a9bf566e5defd3

SHA1
1e74e20f48ec878bd0b76448c722168879c5b387

SHA256
05ae2d6161a3acd83798ec56dbc45087e6aeb0a1376401f55aa46539b1d95559

SHA512
ce30f312cc08366aa588e75b229c178a83cf6d464a1051bd1118b81e5166085a2b1bcfbff97804f3e8662366b59f43a659e4b0e315dabad125f16ec9ad9ac379

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\32.png

Filesize
1KB

MD5
d2e7ab79b45eda7c4421f296abf37c52

SHA1
8490f4e098d50ec161e64db912f8430826daf2bc

SHA256
ded3490683fcf3c5b87803bb1835759df2b65831a6257a326709a708a1dd45ac

SHA512
094c2150f872e727980f84b6c011f13210d43cbfd9437825b3b014211c69d7bd3f6367e9913370b624ddad270cfe91c190ebf2c5f5fd4e082b5d6c85199cb6b1

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\48.png

Filesize
2KB

MD5
7cf35c8c1a7bd815f6beea2ef9a5a258

SHA1
758f98bfed64e09e0cc52192827836f9e1252fd1

SHA256
67c320fa485a8094fc91cd3fcd59a7c75d2474e3046a7eb274b01863257fbe01

SHA512
0bbebde654c9f44cf56b74fc1a9525b62c88724ec80658efede3cbb370c3a6d4f3e78df459bbd0559a51838f4a172bdfcd370bd5477038309024b77cd69f2a15

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\64.png

Filesize
4KB

MD5
6f5486bcca8c4ce582982a196d89ece5

SHA1
4648ae13d71b2ff681cabc5d0b5b4bb242cb78a2

SHA256
c870819a5c73e2ea5f94312bdf10fc56668d3311ef2eab6509b659efb456bb8d

SHA512
9a36d519a9cadf5b464a98082511906cc5f24c4218f6bc2ae323f6b38bf5fd413614807ef0d442801bfbc3b2ce2a0527b0f7be24fd51f49cbde6b5dfe2cafd7c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\96.png

Filesize
7KB

MD5
115decbc3eb53574b2582f15a0996e83

SHA1
598a1d495135f767be6d03cf50418615b22146b6

SHA256
07fbfbda84eb5467b120fb3f9b4e028077303098bac8c2934635b14bbda847e0

SHA512
af237ddb585ad38fd0fc3d0f0b75c60d0117e965a548bda055b2625f86ee7d91fedc840e1afa2fe80814f152732371255133faa21c3d774ca9691446541cf46c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json

Filesize
38KB

MD5
3f6e8b8c9136df8ce5e86293bcb51c0c

SHA1
a479cb02684da8cf9775ce2669b1014053f7ffc5

SHA256
967df6f6184b5545bfe8ee41a2b205ead37aede1c60c3d35117b9c5d350aa461

SHA512
6ee83e5199734d94c27ad69b5b2c97e9b238e172ac627c0064d77501cdd045a03efbc9ea91b5176c8f600e2c4776c3542a4f19a85acd621da5ad474d5283ee9c

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json

Filesize
38KB

MD5
ea0a38d1773b76a811c1ad5e59a1520a

SHA1
615156621dff0607521e7bda3f73db9215ca54fd

SHA256
b70d096f5e7d9deaad32a97c85444d2a69e3ae46274a1c1890c6ee0db344d53e

SHA512
42d0c7e83d4019ea88d3826164538ca225451e0aff886801ea98fff39cb9c937b924aa3279e9422682a34a04885d57c49d319ee7795edcda87b85922f26012f2

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json~RFe5fec2e.TMP

Filesize
23KB

MD5
e0c08519962eb400fac1e9539e56ec18

SHA1
3c2cda84dcfc8635f3f8ce2e4202f5e8dedc37e1

SHA256
b56fa667f78297e26271b6f26017570783f6b69dc10c32a542d5930dc2586827

SHA512
71e5670bb820c894765d1776810d2c563ff478e27a33b35e42e8c5c3301de92f32645da6d7a3a9e7032d874e8a35cdca3c7debdf2d3d03a8ef98d25b31e8702d

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State

Filesize
229KB

MD5
7418bc576f3c1cca011a469c3bac4c7f

SHA1
bb4e3e88358c81cfb401409224a181eb1141c3a8

SHA256
ab54b78e649bfbe4b419581c462b1268f9039fd286adbd0d50940911538c5867

SHA512
1c9b0717e20b13a6c3532a67e3d7af8704f5cb4fd180b939c48b2fad4b17195086a582b963a3ce52aa8bc37ed7a3cdaf20d81adb95f882880f43abbd020c973f

Download Submit
C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\a31cb526-7b9c-4ec8-9b2a-d974576ec297.tmp

Filesize
209KB

MD5
ba22be05d7fcf46b01e072ebbfc3c33a

SHA1
495fd9a8d8e2a05799acd8034cf46a0a65631e3d

SHA256
a1dd12d048fd88f5a10f86e82b7dc519434d846e336ff55694bcfce9d8cdad1c

SHA512
89f77c48ea6169662e043d63600f5bcce20c647e714cad8aed0c0c76346de8e44cfa571ed10710c000cd730e567bc4b31e5ecf46d20aa0163c59027a1a8ef617

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\War Thunder.lnk

Filesize
1KB

MD5
266c10e6e8cb0cd9625ffb7287f3ed2b

SHA1
137414e9cc79073d0dce36a099ad59b26522d862

SHA256
67e43431b8d6edd3d5d5bfbb14d4bd64841bc5da423f7a584da13c5b371fcfb0

SHA512
c55f8d2e86d71e3e9c18cdf3af45b1f28e8efaa10d4c05959820609f4defe7e155f47b8ac5d2270fbd7b1e4a3c928db29e37021e421526ce975220ac95030332

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\game1.ico

Filesize
138KB

MD5
0d177cd1058d658fc220f8c1886b32cf

SHA1
3030df57f8fcda4849ddd1c63345f4c55f3bf1ec

SHA256
e66152ea8ab6ae4c4b2cf0bfd8ef5d764da11d090e14076a7a7c7a4fc4f9297b

SHA512
abb10feaef6e99d2e7e7a1e5cf44068f483be3c54e85758ba25c6e0dd4468e185bda96c6d41c6d01f918635d9ef36737a32ec799c1dc1f3ee14c5e190981da0f

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\game2.ico

Filesize
201KB

MD5
2c6e2008acdd52d7786d4b29ec0f36ab

SHA1
e69a022f94740a3441b19061319cb9f6507eaaa5

SHA256
226fc445b68137b43f47440e6b3288778923f559f8a7499eb6f9ae73d353760a

SHA512
c7f1e8fdd298f983cbd4d7665e4ddeaeefc43a79d12b0c9fd6616e925d8c5cb48d1f0b4b01c7e7cf12a4d9c6969473d70a9d833b88d764e0819c8c6da6b1a437

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\game3.ico

Filesize
29KB

MD5
3c10c82cb7bedfaca17f521b52d82926

SHA1
652764877af44d55b997a989bf7b00130025d6fc

SHA256
9f121d7af357bc02b5667806d35b71b5fa7f82e661f888a8adc07c8e24570e94

SHA512
3f592285df8c5357aad18e58a32361075391bbb72361957ec8e0cd43924b774c804ea4442d147d316f8acd4bca7d260c462a30452ca715c83085bd6158c51789

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\game4.ico

Filesize
102KB

MD5
1716ea325b5a0426a9d0d3b8f46e9ebb

SHA1
7be6a62db7e76971f95899e1a61bbd1b30390de5

SHA256
0a56962379cfab01a4492d4ccbb45d7257e493a2f778d0f1a00a050789546a6f

SHA512
26f4aa571469a5bd0fddd122af43d05faddeb65537b93ce68397b2a0edc87d7d18ac9e0a9ac1372113777c3173da5cfd65032e16306f88432d3faddaa4c7e761

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\game5.ico

Filesize
172KB

MD5
789145c717ba38b5224868d95bac41b5

SHA1
b011c718f7ccfdd3cac15e50792e2cca58616767

SHA256
ca92e3fcc37f510acb4e64f2e277397d0d53a050090590ac8b3c82fd2a3acb5b

SHA512
76d4677a5191c8b54227ee1b25eac09a6c57c1d5ba1c0a038c7e9b9f011d56594661c659303c47550f6ac172a3a131782a07b6a8170a642957508b5862c5b947

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\yag.ico

Filesize
5KB

MD5
a66197aec5037809dea58d3c762c93fb

SHA1
2dc16627a1c50f1723d0cad5ecf49239bfb454e5

SHA256
ea5407ae90ee73e20897ec2cbfef8f0a1b65ed9fdbaf092d9b40c7cdedbb11ac

SHA512
cfb0f6243539e3d039687540d7ff72ea291d74a101d98c6e23b539dede16e2edbd81ea9fed2c90f520f9a0ddda7d95a73d32425556dc9d41cbfcc9c9dd641dab

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\Майнкрафт.lnk

Filesize
1KB

MD5
3df40f86b2d6de06c9721b090a47443a

SHA1
bbc3ca0b72702fccc1936eead049d47e920f7c27

SHA256
3a968cfdd1fa3313b99133c82d1efc1447bacdb5236318f14b085404c66eb07c

SHA512
9a21984be3f33e2d37160966d7160ba95f7e2f98b970d05eff4b1c593d51a5e274406790c9a362f504bff99b219b036d916ec59f34227b3c6eb321e54a0b2a9f

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\gameicons\Мир Танков.lnk

Filesize
1KB

MD5
bdce1c027a2876db0778f502fd7190f5

SHA1
9db2a12625c06fc1402b426f456eba9f7d2700ea

SHA256
0162dcf5ca822a7cd245ed05a2a3863046adbb5749ad2290ec180303706f9f93

SHA512
cb2e34b2c595125f26164a38bf239689add39ff3fe0fe4017ba316a04c89176bda4edb613aa39362fbfbf9c899e6d7e61c49f35453e23db3c705cdea526fcaa2

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\java.exe

Filesize
285KB

MD5
1562e15220d8771fcb11b9a5b234a970

SHA1
50ec8e4e7125bda147a1b2ccc2b2827db2dc3479

SHA256
366199821c1efede3f7112d21da045fd6bf38b56fb3da1ae9d6493c4ddc1861f

SHA512
a07873f0a5381d202a6439a3245dd51f405cdcec4a9d40ff6ffdd4670a3b218008f7288a89e2a7455782c677d4c661bda96e62f813ce7d8c1f20a6c4c7c2b31f

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe

Filesize
285KB

MD5
122e34bfa3146ef9ae5a51fdc744353f

SHA1
f0cc2294fe150a4cceca8a3da8615edcc4eb20e4

SHA256
dd2169db3358ccdf4a4a185e4a22955c989eaa3b9d3e0e6025599b8fa173c968

SHA512
306341e00598f02a70d3edc6ef666cb64982f1e31e5c0a1304977a1700c95395c1c7f0857ae8056853370eced0bd2aeafc72da804a65f98c1422929b7c431700

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\plugin2\msvcp140.dll

Filesize
558KB

MD5
bf78c15068d6671693dfcdfa5770d705

SHA1
4418c03c3161706a4349dfe3f97278e7a5d8962a

SHA256
a88b8c1c8f27bf90fe960e0e8bd56984ad48167071af92d96ec1051f89f827fb

SHA512
5b6b0ab4e82cc979eaa619d387c6995198fd19aa0c455bef44bd37a765685575d57448b3b4accd70d3bd20a6cd408b1f518eda0f6dae5aa106f225bee8291372

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\vcruntime140.dll

Filesize
95KB

MD5
7415c1cc63a0c46983e2a32581daefee

SHA1
5f8534d79c84ac45ad09b5a702c8c5c288eae240

SHA256
475ab98b7722e965bd38c8fa6ed23502309582ccf294ff1061cb290c7988f0d1

SHA512
3d4b24061f72c0e957c7b04a0c4098c94c8f1afb4a7e159850b9939c7210d73398be6f27b5ab85073b4e8c999816e7804fef0f6115c39cd061f4aaeb4dcda8cf

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\vcruntime140_1.dll

Filesize
36KB

MD5
fcda37abd3d9e9d8170cd1cd15bf9d3f

SHA1
b23ff3e9aa2287b9c1249a008c0ae06dc8b6fdf2

SHA256
0579d460ea1f7e8a815fa55a8821a5ff489c8097f051765e9beaf25d8d0f27d6

SHA512
de8be61499aaa1504dde8c19666844550c2ea7ef774ecbe26900834b252887da31d4cf4fb51338b16b6a4416de733e519ebf8c375eb03eb425232a6349da2257

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\deploy\messages_zh_TW.properties

Filesize
3KB

MD5
880baacb176553deab39edbe4b74380d

SHA1
37a57aad121c14c25e149206179728fa62203bf0

SHA256
ff4a3a92bc92cb08d2c32c435810440fd264edd63e56efa39430e0240c835620

SHA512
3039315bb283198af9090bd3d31cfae68ee73bc2b118bbae0b32812d4e3fd0f11ce962068d4a17b065dab9a66ef651b9cb8404c0a2defce74bb6b2d1d93646d5

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\images\cursors\win32_CopyNoDrop32x32.gif

Filesize
153B

MD5
1e9d8f133a442da6b0c74d49bc84a341

SHA1
259edc45b4569427e8319895a444f4295d54348f

SHA256
1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

SHA512
63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\security\policy\unlimited\US_export_policy.jar

Filesize
7KB

MD5
12f971b6e65cbc7184701235469f0339

SHA1
06cb165157c5e0078b872c48707a1328b1dcba19

SHA256
84e035372ca8979bb4a387428a74942ffc7248a0e61988b7033b5b266cd187c8

SHA512
58646fc81de2e4750a3259d79a207a8cff2dc6692f178a63d92a453fc408c8d1088007ef4e93157d1017be706565716a0236039dbac848c40745a0ad89c4d0de

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\klauncher.json

Filesize
863B

MD5
266445cb7c13f2bc78ed826322955693

SHA1
668827f4a0fde1abec924574bd50d6b29d7cd984

SHA256
6f630c5ff5c6bb7c66278bc7bca146aba32296e63f09fcb81a6bc307b32c256a

SHA512
31ffcc5041fe1d24bdc571c6de7524b71375c53941b420c3902e4975fd6157eea62a951f3a5ed9bd82637b2e25dadd796312c6b43a2fcc55e1e4449d5706e126

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\tbp.exe

Filesize
19KB

MD5
44b878919f79e365120f1c960434870b

SHA1
c8131976421b07782a1c913eb5996581a277e047

SHA256
a6967e7a3c2251812dd6b3fa0265fb7b61aadc568f562a98c50c345908c6e827

SHA512
e9fd65eb9e01ec40d67b558e3a4be4ae24766436ed8f60b62e75cef07f2f983b3df4d7963f23d23007acee12f151359d7d3861663348ef2b360e14a84bf3d2ee

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\Яндекс.Игры.lnk

Filesize
1KB

MD5
0bbf4af305e6c28a36e0278de8855dba

SHA1
d56b339ec00cde1c1619f3c701b43b91fc9dd239

SHA256
0b3a6b1e5faa79c00c6b48aae3666a5338e036dc61615461b425a824cad3fb70

SHA512
01827068b5ffe152ab2b6eb60c6ed3812d632115daf5d8e2e79f612dad940eb68852705e9aff8886d8ba54e648424b5cdb7ada00654e983e935d9eae5bdc4624

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms

Filesize
10KB

MD5
b9d2d519445afa07d0e48b94783843db

SHA1
32a20f0802f9d9140e02d0ae95ca5009326878c2

SHA256
a8cf899d648df23b8edb81bfe76c9fd483ea93708158b21119eef78b4a1e89f7

SHA512
7684038961d3367ed32cedc7e432d0fb21b8b7ea7ac50b93af44022c6aa98e548b301ccd69d4a6fd43a0a18a2844b7e95fdc8d8dd51af5a8065e2771853f853c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5nbcyygb.Admin\places.sqlite-20250317110244.231486.backup

Filesize
68KB

MD5
314cb7ffb31e3cc676847e03108378ba

SHA1
3667d2ade77624e79d9efa08a2f1d33104ac6343

SHA256
b6d278384a3684409a2a86f03e4f52869818ce7dd8b5779876960353f7d35dc1

SHA512
dc795fa35ea214843a781ee2b2ef551b91b6841a799bef2c6fb1907d90f6c114071a951ebb7b2b30e81d52b594d447a26ab12ddb57c331e854577d11e5febef5

Download Submit
C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Bookmarks-20250317110244.918990.backup

Filesize
1KB

MD5
3adec702d4472e3252ca8b58af62247c

SHA1
35d1d2f90b80dca80ad398f411c93fe8aef07435

SHA256
2b167248e8136c4d45c2c46e2bff6fb5e5137dd4dfdccde998599be2df2e9335

SHA512
7562e093d16ee6305c1bb143a3f5d60dafe8b5de74952709abc68a0c353b65416bf78b1fa1a6720331615898848c1464a7758c5dfe78f8098f77fbfa924784c0

Download Submit
C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\BookmarksExtras

Filesize
18KB

MD5
8a089e53176e721a6d75ddbae47d2c00

SHA1
f3b3f833f6919d7782ccc1251648996878de8edd

SHA256
14b33225d6e5049acce41e6e00b308820b98dd5fdafc0a3eef23b031dfd7bf8e

SHA512
beb8403c332ae5b10fe95c7ea611ce59983ea9daa3583ec8a82fafc48ed5124eac14ef8f488cf06ce0d5afe39e756797f09460c4b7382d4ce72b6a74a78ecffa

Download Submit
C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Preferences

Filesize
318B

MD5
b2d092f401d8c4aab549046ad908ad22

SHA1
bc332d29bda7e3a2d75dd374962f0e281686c07c

SHA256
1eedced35db804923d66475801bc04df2621a1b8f87a93c73275d8b4ab00dbad

SHA512
03529f2dde0e5204c63b9b220489add8139676988d917a6c872388e96487855b409a943ccb7e04282b18778d7bcd9e1694a1afe7126c402a435336270e39e90b

Download Submit
C:\Users\Admin\Desktop\Crossout.lnk

Filesize
1KB

MD5
fd92e276f03f156149d333cee3e3cdcc

SHA1
687c5d0aa7a33702f05f72daed75d5363b31c922

SHA256
42734609d923cef88c96bc42fb08e6146d919697b190280b539d005e42c0edea

SHA512
606351fe00999afef37ccbc38753afd859fc6ba55776ac93e95b5094508b10bdd0c4220e0d95965d223cfebc9f579a230cce12dbc29836d8d4158c8e62219862

Download Submit
C:\Users\Admin\Desktop\War Thunder.lnk

Filesize
1KB

MD5
31623fc315b8a26d24ffaa9a3f90919a

SHA1
ad42bb901b214f2e6e5d6e021b573a9c400e392c

SHA256
20e9370f986e914eb101096474f868497bd3b14476b236379475f0375c77fdcc

SHA512
5855da203d1336bf70e19193cdbdbeee056047d7503bd89f4edb94c4fd498a7865511e50d11b6ef04bde93d04453f7578f5b4b23c9bdd828486ea80b61de4f42

Download Submit
C:\Users\Admin\Desktop\Warface.lnk

Filesize
1KB

MD5
86b4a1faa410da4416a8359d5adf9110

SHA1
867cafff537e69e59c3363f0088befeacef489a6

SHA256
15f378281263a3c4c70f4330fb3703b68405547183a3c6a52ff5edc744101f50

SHA512
edff3222dd17cce98c6eafab7dbd3f82bf943eafd3d28179827dfe9698593d7974f076f0b953c038e76c20658f7466aa15d5d6d94af8f4ab1c45c2b09c1d5b53

Download Submit
C:\Users\Admin\Desktop\Мир Кораблей.lnk

Filesize
1KB

MD5
9f2dae38947dc3edb5a1dc1df87d7125

SHA1
b97960f17cec5850ef82a87ce3711c9130d541f2

SHA256
a5f82a0dae2077981d56940d654faae91476bceb9291cc84215c12aced8b2de1

SHA512
d68a3cd076d5dacbc6f4a51d7ecd691972ddf65ca32fccfabcb06aeb23b62650d690aae63af07e09816cf98ecad39d7cbaf3c4bc37c8c185341dda412cc1c7e2

Download Submit
C:\Users\Admin\Desktop\Мир Танков.lnk

Filesize
1KB

MD5
82267a8c6837d746d75b849c0bc58eac

SHA1
22c9c5fa3ef9ab6380f51ee53c457eb0ac4d2210

SHA256
2d3781929e7730a8cb7f23d389d48eba67cc3182534429671ce987be2f5b871a

SHA512
d3db0c3d42c8082164dbd0ff28074c6affdbf3522b866d287ddb0f58ed4af5905114a08856e42019ae84e55ac8ce5423dd307ef71c9130aecc524cf817afe893

Download Submit
C:\Users\Admin\Desktop\Яндекс.Игры.lnk

Filesize
1KB

MD5
f0901bc076dd7491fcdb3945f03dc780

SHA1
3d1e97b203274276e63c1cf3c2281d683b3e4a7f

SHA256
9c77cd7ec7cc41d16504eb93ac494bc8e42cdbb4d480aa850f76c83ab20e8900

SHA512
e04d8de0e36aa54f74ede67bb909fd38e9f998a35da02732451abd322c3ba0f07f5c2d8669e4fad71d49b1d52dc33ca514c325689fe158b31f1ca114dea29d45

Download Submit
C:\Users\Admin\Downloads\KLSetup.exe.crdownload

Filesize
8.2MB

MD5
1e798ee8b106dbc474492077f5d0c98e

SHA1
6efa6d6f7d8c4ab22190cbbea0d4f7d7af4c9691

SHA256
fecf896fe9607f71010009444a28830690ea9507dbe630c2233651832c4fe640

SHA512
d012885b262495912171018cc2ca8549aff35f67db270627789bf4605b87a1857837cacb340f676e05f1797ffb6de8690b643de5ea103045c20b37bd5f072f8f

Download Submit
C:\Users\Admin\Downloads\The-MALWARE-Repo-master.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Banking-Malware\Emotet.zip:Zone.Identifier

Filesize
92B

MD5
c6c7806bab4e3c932bb5acb3280b793e

SHA1
a2a90b8008e5b27bdc53a15dc345be1d8bd5386b

SHA256
5ba37b532dbb714d29f33e79dacb5740096fd1e89da0a07b9b8e6b803931c61a

SHA512
c648be984413fdbaeb34808c8164c48b5441a8f3f35533b189f420230e5e90605c15fde2ce0d9fe42e9755c594dd1ef32de71a24016277ad2cef2f9afcf0ad93

Download Submit
C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Worm\Blaster\8676210e6246948201aa014db471de90

Filesize
6KB

MD5
8676210e6246948201aa014db471de90

SHA1
86b30d1a8b7515dcab6c8d2781b85c6983709dbf

SHA256
2e481059b9bc9686c676d69a80202eed5022c9a53ecd8cac215e70c601dd7fdc

SHA512
5130e6ea6c5e1924af7d630a7b1c6e614b1482edcad3117a8dc56371269260b97793a7ccdbf3249054815b7c3b9c364b30e73e0f8e4cc230502b01d0d2f70bda

Download Submit
C:\Users\Admin\Videos\Captures\desktop.ini

Filesize
190B

MD5
b0d27eaec71f1cd73b015f5ceeb15f9d

SHA1
62264f8b5c2f5034a1e4143df6e8c787165fbc2f

SHA256
86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

SHA512
7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

Download Submit
C:\Windows\Installer\MSIEE0B.tmp

Filesize
181KB

MD5
0c80a997d37d930e7317d6dac8bb7ae1

SHA1
018f13dfa43e103801a69a20b1fab0d609ace8a5

SHA256
a5dd2f97c6787c335b7807ff9b6966877e9dd811f9e26326837a7d2bd224de86

SHA512
fe1caef6d727344c60df52380a6e4ab90ae1a8eb5f96d6054eced1b7734357ce080d944fa518cf1366e14c4c0bd9a41db679738a860800430034a75bb90e51a5

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_1349311497\manifest.json

Filesize
85B

MD5
c3419069a1c30140b77045aba38f12cf

SHA1
11920f0c1e55cadc7d2893d1eebb268b3459762a

SHA256
db9a702209807ba039871e542e8356219f342a8d9c9ca34bcd9a86727f4a3a0f

SHA512
c5e95a4e9f5919cb14f4127539c4353a55c5f68062bf6f95e1843b6690cebed3c93170badb2412b7fb9f109a620385b0ae74783227d6813f26ff8c29074758a1

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5172_999242296\manifest.json

Filesize
118B

MD5
acb8ebb43624ece8dd7964092455d2b7

SHA1
7c61f04b419f927f98120afa18d8553513e2a0f6

SHA256
55b2b1fd2a563b240179fde6335370f5e22068ada77b5dc5af50bbc379c72953

SHA512
8e6c135aa19d6d21b32c6e9c0727ccf3df7e8dfcaf49e3f0ce55af9b53748188949746d69d17cdafd9d77511b1550d970289912a33b3d9c4daed8837762d91c3

Download Submit
C:\Windows\SystemTemp\yandex_browser_service_update.log

Filesize
3KB

MD5
d23de22f7a0cd8ebd0bb4571c6388747

SHA1
ee81ca3cc8cd41e7355e0e3f6bd2bac2ce3935f5

SHA256
638fe64d87eae534dbe532e600233fdafbed52cd9fa794101601615cd362fe46

SHA512
1817a90c529082ea90ed3b8e04041cfe8068ac775657ec2f30d04f161c2ed23d627ad40e489290fafc68bcff2b348b8fdbd9eeccc06a4eedbefec42aaf02b7b6

Download Submit
C:\Windows\SystemTemp\yandex_browser_service_update.log

Filesize
4KB

MD5
d0574f603b18507586d35db5480c4e78

SHA1
b0feadeac5873efd82dbdffc5694c08f5192ba6c

SHA256
0ac7a107baa44434418dd51466ca0253a9d144fd5907cecb83a1e3b72ae270e8

SHA512
6fa2607acce5b7f9b60105258221c84c354b841b480ef382b21c1b14ebb3dcf7857bc2d660d64a2b510889d81535b4ca9b7e79fb5d4b4a74f57b9fd8ecca84af

Download Submit
memory/3308-1420-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/3308-1429-0x0000000004120000-0x000000000412A000-memory.dmp

Filesize
40KB

Download
memory/3308-1439-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/3308-1455-0x0000000004120000-0x000000000412A000-memory.dmp

Filesize
40KB

Download
memory/3308-1463-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/3308-1488-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/3308-1497-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/3308-1509-0x0000000002920000-0x000000000292A000-memory.dmp

Filesize
40KB

Download
memory/5852-10667-0x0000000000BE0000-0x0000000001428000-memory.dmp

Filesize
8.3MB

Download
memory/5852-11833-0x0000000000BE0000-0x0000000001428000-memory.dmp

Filesize
8.3MB

Download
memory/5852-1388-0x0000000000BE0000-0x0000000001428000-memory.dmp

Filesize
8.3MB

Download
memory/5852-1510-0x0000000000BE0000-0x0000000001428000-memory.dmp

Filesize
8.3MB

Download
memory/15824-11852-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/15844-11851-0x000001EF9ECD0000-0x000001EF9ECD1000-memory.dmp

Filesize
4KB

Download
memory/16008-12075-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12123-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-11870-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-11909-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12193-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12157-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12055-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12199-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12072-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12071-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-11865-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12153-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12120-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-11868-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12140-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12166-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/16008-12145-0x000001E71D9F0000-0x000001E71D9F1000-memory.dmp

Filesize
4KB

Download
memory/17392-12196-0x00000210C9400000-0x00000210C9401000-memory.dmp

Filesize
4KB

Download