Overview

overview

8

Static

static

3

tsetup-x64.6.7.8.exe

windows10-2004-x64

8

tsetup-x64.6.7.8.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/05/2026, 12:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tsetup-x64.6.7.8.exe
  • Size 49.3MB
  • Sample260504-ph9sfaaz8w
  • SHA256 00cef9aacfe4281e3bc25aa65522a845d5fb0b782d9d9c9cb6f2c4853ad90d91
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryinstallerpersistencespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 13 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Drops file in System32 directory 11 IoCs
  • Drops file in Program Files directory 14 IoCs
  • Drops file in Windows directory 4 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 8 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 4 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Kills process with taskkill 2 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 45 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\tsetup-x64.6.7.8.exe
    "C:\Users\Admin\AppData\Local\Temp\tsetup-x64.6.7.8.exe"
    1⤵
    • Downloads MZ/PE file
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4784
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM Telegram.exe
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:5140
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM Updater.exe
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:4716
    • C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe
      "C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4740
      • C:\Users\Admin\AppData\Local\Temp\is-GEQCN.tmp\tsetup-x64.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-GEQCN.tmp\tsetup-x64.tmp" /SL5="$E0252,50396918,826880,C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:5132
        • C:\Users\Admin\AppData\Roaming\Telegram Desktop\Telegram.exe
          "C:\Users\Admin\AppData\Roaming\Telegram Desktop\Telegram.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops desktop.ini file(s)
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:1444
    • C:\Users\Admin\AppData\Local\Downloads\YandexFull.exe
      "C:\Users\Admin\AppData\Local\Downloads\YandexFull.exe" -silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of WriteProcessMemory
      PID:1040
      • C:\Users\Admin\AppData\Local\Temp\yb400D.tmp
        "C:\Users\Admin\AppData\Local\Temp\yb400D.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8648d7a4-6704-45db-ad42-7e672ca9e539.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=585081122 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\0e9a113b-b5b2-4db5-ae6d-fb6328445bdd.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2416
        • C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8648d7a4-6704-45db-ad42-7e672ca9e539.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=585081122 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\0e9a113b-b5b2-4db5-ae6d-fb6328445bdd.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Suspicious use of WriteProcessMemory
          PID:2996
          • C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8648d7a4-6704-45db-ad42-7e672ca9e539.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=585081122 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\0e9a113b-b5b2-4db5-ae6d-fb6328445bdd.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=588065474
            5⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • Modifies registry class
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:4588
            • C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe
              C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4588 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff73d18f970,0x7ff73d18f97c,0x7ff73d18f988
              6⤵
              • Executes dropped EXE
              PID:3436
            • C:\Program Files\sdwra_4588_1108674831\service_update.exe
              "C:\Program Files\sdwra_4588_1108674831\service_update.exe" --setup
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Drops file in Program Files directory
              • Suspicious use of WriteProcessMemory
              PID:3364
              • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
                "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --install
                7⤵
                • Executes dropped EXE
                • Drops file in Program Files directory
                PID:5440
            • C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\Temp\scoped_dir4588_674603633\explorer.exe
              "C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\Temp\scoped_dir4588_674603633\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Drops file in Program Files directory
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of WriteProcessMemory
              PID:4428
              • C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\Temp\scoped_dir4588_674603633\explorer.exe
                C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\Temp\scoped_dir4588_674603633\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4428 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff76229f970,0x7ff76229f97c,0x7ff76229f988
                7⤵
                • Executes dropped EXE
                PID:2912
            • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
              C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:5604
              • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
                C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                PID:1520
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml" --vid=162
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5920
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source4588_1740849786\Browser-bin\clids_yandex.xml"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:176
  • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
    "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --run-as-service
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:5608
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=5608 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x210,0x214,0x218,0x1ec,0x21c,0x7ff77de5e250,0x7ff77de5e25c,0x7ff77de5e268
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      PID:2404
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --update-scheduler
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Suspicious use of WriteProcessMemory
      PID:532
      • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
        "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --update-background-scheduler
        3⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Drops file in Windows directory
        PID:5168
  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=585081122
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Adds Run key to start application
    • Drops file in Windows directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4520
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=4520 --annotation=metrics_client_id=1db955549c6d4d60b600fe8df0bb30dd --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x13c,0x140,0x144,0x118,0x148,0x7ffabc18bbf8,0x7ffabc18bc04,0x7ffabc18bc10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5068
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --gpu-process-kind=sandboxed --metrics-shmem-handle=2064,i,8149228169468257766,1816314944972794405,262144 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2256 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1512
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=2124,i,12839072567733866591,9965273923868353399,262144 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2308 /prefetch:6
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4996
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2652,i,6260871698974118756,1612434468758749637,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2184 --brver=26.4.0.2141 /prefetch:3
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:1604
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2892,i,9285096358423206720,2765636360808151976,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3004 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3004
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3536,i,18305703927320378231,2711510713246323634,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3572 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2628
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=3436,i,1618430926488926732,15249867547661837735,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3460 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5760
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4380,i,13418701837420775116,10290806331824135851,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4388 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:5028
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=5144,i,13327792592454277384,17419275684072328936,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5108 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4028
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=4992,i,638198421701980708,15869994944335393108,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5236 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:9212
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5444,i,5280193383686950460,4589639146457144755,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5456 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:7992
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5592,i,18312725020295625063,5548258281322183237,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5612 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7956
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5616,i,14981201835480187042,8195540278658699013,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5716 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:7648
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5696,i,12741797733184471392,4839084655044828133,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5884 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:7388
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6084,i,8064832793316646064,18409225230847910056,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=6132 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:7180
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7076,i,370832972761701026,12213501947499857829,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=7072 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7048
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7240,i,8644677643756084290,13520624891042279541,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7196 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6508
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7364,i,13396891352349734703,3701598577536059451,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7376 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6540
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7500,i,11951156217360168509,7485895663369620585,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7512 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6516
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7676,i,13455681795715708117,13762481687921929327,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7688 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6500
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7648,i,16557785833546037019,6301535103066297716,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7824 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6448
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7668,i,9855297831461088346,7985152271764686177,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7964 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6440
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8144,i,342671664959487557,2885493475137674595,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8156 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6416
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8104,i,13047569511609933511,8187257339434291337,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7660 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6400
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8132,i,18424994432910099208,17954815325470228902,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8116 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6380
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8128,i,11561872959074868610,6316808946720872182,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8436 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6368
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8700,i,4208338587770298488,14655901754330189029,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8696 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6340
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8864,i,3299463680220670156,1493056891409129863,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8884 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6324
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8860,i,13852252297671926092,17104529994959774076,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8840 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:6304
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8872,i,7330205269062016470,13143699252477881572,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9156 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:6276
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8712,i,15904763210493832865,17306322031964757919,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9176 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:6264
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9440,i,6439624790159634062,7544037922929351398,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9452 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:6112
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9460,i,5867454763918927934,15208604144919944431,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9592 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:5136
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9732,i,15836492714040796587,6034496141064812423,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9744 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:4904
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9948,i,11562995870909352482,1549007513289698170,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9968 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:5780
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10104,i,170903320744389641,6064124206037155199,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10112 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:556
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10120,i,8302437365760356902,133606139373977974,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10260 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:4724
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10432,i,13788314672467851994,13586605311411143887,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10452 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:3764
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10428,i,6399971739079317644,15438270031372353649,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10472 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:5024
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10724,i,155497523054804517,12951697665077389466,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10744 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:4376
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10732,i,6110665904993992403,3815743224865765360,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10764 --brver=26.4.0.2141 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:1160
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=5684,i,2450679818044337570,5909341373352421521,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11044 --brver=26.4.0.2141 /prefetch:8
      2⤵
        PID:8196
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=10440,i,7719631041657381744,6204555056082623443,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11196 --brver=26.4.0.2141 /prefetch:8
        2⤵
          PID:8504
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7076,i,3037640472525823059,11093807425398465819,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=7036 /prefetch:1
          2⤵
          • Checks computer location settings
          • System Time Discovery
          PID:8872
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10948,i,9464145847059409362,2807254616884355149,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10472 --brver=26.4.0.2141 /prefetch:8
          2⤵
            PID:6172
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=11276,i,7819763305040165492,10257529266332633307,2097152 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10444 /prefetch:1
            2⤵
            • Checks computer location settings
            • System Time Discovery
            PID:6372
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7072,i,12797047855740783980,4999216454986642430,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7080 --brver=26.4.0.2141 /prefetch:8
            2⤵
              PID:7052
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=5192,i,905563076912072951,1673672912192448935,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10908 --brver=26.4.0.2141 /prefetch:8
              2⤵
                PID:7892
              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=FA272519-FB2A-488A-9A08-747DB93346D9 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7040,i,1361373219547401727,16920891044546054697,524288 --field-trial-handle=2268,i,17947794300511840,17355650626195997759,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,1465750357000506067,11256563639334868136,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9588 --brver=26.4.0.2141 /prefetch:8
                2⤵
                  PID:8744
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                1⤵
                  PID:5980
                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                  1⤵
                    PID:5832
                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                    1⤵
                      PID:8176
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --shutdown-if-not-closed-by-system-restart
                      1⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of WriteProcessMemory
                      PID:7792
                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                        C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1777897425 --annotation=last_update_date=1777897425 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=7792 --annotation=metrics_client_id=1db955549c6d4d60b600fe8df0bb30dd --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffabc18bbf8,0x7ffabc18bc04,0x7ffabc18bc10
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:7768
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={0CD5D925-5B2D-49BE-AE62-7484879732E6}
                      1⤵
                      • Enumerates system info in registry
                      PID:3244
                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                        C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1777897425 --annotation=last_update_date=1777897425 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=3244 --annotation=metrics_client_id=1db955549c6d4d60b600fe8df0bb30dd --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffabc18bbf8,0x7ffabc18bc04,0x7ffabc18bc10
                        2⤵
                          PID:3992

                      Network

                            MITRE ATT&CK Enterprise v16

                            Reconnaissance

                            Resource Development

                            Initial Access

                            Execution

                            Persistence

                            Boot or Logon Autostart Execution

                            1
                            T1547

                            Registry Run Keys / Startup Folder

                            1
                            T1547.001

                            Privilege Escalation

                            Boot or Logon Autostart Execution

                            1
                            T1547

                            Registry Run Keys / Startup Folder

                            1
                            T1547.001

                            Defense Evasion

                            Modify Registry

                            2
                            T1112

                            Subvert Trust Controls

                            1
                            T1553

                            Install Root Certificate

                            1
                            T1553.004

                            Credential Access

                            Credentials from Password Stores

                            1
                            T1555

                            Credentials from Web Browsers

                            1
                            T1555.003

                            Unsecured Credentials

                            1
                            T1552

                            Credentials In Files

                            1
                            T1552.001

                            Discovery

                            Browser Information Discovery

                            1
                            T1217

                            Query Registry

                            5
                            T1012

                            System Information Discovery

                            4
                            T1082

                            System Location Discovery

                            1
                            T1614

                            System Language Discovery

                            1
                            T1614.001

                            System Time Discovery

                            1
                            T1124

                            Lateral Movement

                            Collection

                            Data from Local System

                            1
                            T1005

                            Command and Control

                            Exfiltration

                            Impact

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            service_update.exe
                            • Path C:\Program Files\sdwra_4588_1108674831\service_update.exe
                            • Size 4.7MB
                            • SHA256 05bacd4e46a8261594dc3b81a452748d9065c1d0bf21611f1c2b09a51bbec49b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_installer.log
                            • Path C:\Program Files\yandex_browser_installer.log
                            • Size 5KB
                            • SHA256 b32630f8eaf701e55ce83c810a279a4063ff50ec802d959bcaf0e1c8ba9b917e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_installer.log
                            • Path C:\Program Files\yandex_browser_installer.log
                            • Size 25KB
                            • SHA256 e7528e8951b6a99eb1ae3fb28c0732d28b4d023d3a4a8d0f38430915f76261bf
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 581B
                            • SHA256 feafa9efe69a2047f282b3b17e9923205a6c618aeb8f5b3896029c9416f9241d
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 1KB
                            • SHA256 57327f2d92a9ffd0024492974627e3d95127d4675e03181d23afeee0f8c99bed
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 2KB
                            • SHA256 66534199ad0d5c02d72297d7397e98fca35ba39338c5c666d12a5575d1592b93
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 3KB
                            • SHA256 15b07309b653922b71471d3b4e563d9fd060e41b43f2a1ef6db9c6ebfea43091
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 3KB
                            • SHA256 96eee151a2ea6b02bf18b9f2a11b6ff3d575efde3726b59313b4860051e1d6a7
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 4KB
                            • SHA256 0d86e8bde6cf7f7758a2eddd995d880b565f918c4a5822222ee179cdfa614da2
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 5KB
                            • SHA256 982faa163f444b4024ceab2193a8071643012172d7d9e008024ae6b3ca333fad
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_service_update.log
                            • Path C:\Program Files\yandex_browser_service_update.log
                            • Size 5KB
                            • SHA256 39b97a7de6052267b9a606b418b5df56a0832dfa4bc97b89c26a31d22926fb83
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                            • Size 1KB
                            • SHA256 7732af42a301acd26ca45aee189c913508422213831bbba2c5cb459d546bfaad
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                            • Size 1KB
                            • SHA256 9e6c5bbeed0933f9b6de27d240f3aaa5cff2f9bc4db718d1ba3fa3242a9412ab
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                            • Size 1KB
                            • SHA256 2b83a7c825e5a021dc53403952c70360ad798fc629c87c669eb2c3452bb7beca
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                            • Size 1KB
                            • SHA256 9b6eba64af583fdfe86b9fff87bfb0ef9e710a88ecdca19e62fc607938cc586e
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                            • Size 1KB
                            • SHA256 743eb708ad46c7520236d159da97a0e3ea010aaba38801cca567199f251bc0ba
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                            • Size 1KB
                            • SHA256 672180955e68b10be3468dfb5425f86743fcad9f7705e5de10ff8ce9884f0336
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                            • Size 508B
                            • SHA256 abe86148d622f1f168d76e3d236a2ea86079987988ec97226667d705137441a5
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                            • Size 536B
                            • SHA256 af4e9ad70bfa77541654e2f0ac691305eef025c3a587e6e10a6d500451903f55
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                            • Size 536B
                            • SHA256 6dcca157581cf2b41081a2ecb181a9572146e146b0d68e22d2c3add2e2d60c0d
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                            • Size 524B
                            • SHA256 78cb113829a8a265e664294c887bf075b429aa1017396b62a52dcaa5baeb1542
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                            • Size 510B
                            • SHA256 c0c1947bc212dfd16184c748ed556464b8d75e4541ad290fe37c92c4379d7487
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                            • Size 536B
                            • SHA256 1a499c1758006226f81509cd1f1bd26c54071ce418206b727d2791e55fe2537a
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                            • Size 506B
                            • SHA256 9dcda7dc5059f6a0d01f2498a844b89a2ee3aab8feaacaedc812fd84cd20533f
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            PartnerFile
                            • Path C:\Users\Admin\AppData\Local\Temp\PartnerFile
                            • Size 1.1MB
                            • SHA256 105833fb1cfb6b7a0586a2c3f909d5104147d887caa416152ed97b8ba468e950
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            BRAND_COMMON
                            • Path C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\BRAND_COMMON
                            • Size 25.4MB
                            • SHA256 165d8b7ebf86081d8a28cc19d66549802a6843096b05e5714df84ac57c408fb8
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            brand_yandex
                            • Path C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\brand_yandex
                            • Size 2.3MB
                            • SHA256 14b921443e032a8224028205a3e7add463e2fe8cddaa02e0eaaceb4bd05d8b7f
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            setup.exe
                            • Path C:\Users\Admin\AppData\Local\Temp\YB_62AD5.tmp\setup.exe
                            • Size 7.2MB
                            • SHA256 e545aac4d3c5e75395ff12bbd0916f7478bd0b5009c9d6959f12f3f21f41cf8a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            distrib_info
                            • Path C:\Users\Admin\AppData\Local\Temp\distrib_info
                            • Size 325B
                            • SHA256 47480341b46292c002d096c7ca8506790da527400e6118f78a2e659505857ae5
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            tsetup-x64.tmp
                            • Path C:\Users\Admin\AppData\Local\Temp\is-GEQCN.tmp\tsetup-x64.tmp
                            • Size 3.3MB
                            • SHA256 8c2147fb7d2aacc4012148516dc1680783c7f6d7b3c00dc839dfcd5d4f3afc6b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            lite_installer.log
                            • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                            • Size 8KB
                            • SHA256 447b4f28bdbae295e7c0cc5c420fbde74f83ad4ab5e19f34d0a98b2b2200de6b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            master_preferences
                            • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                            • Size 542B
                            • SHA256 0325fd8be2634b3b8fd40c2d7900b7816bc4cc456ed1b708d9b1f0ca1af4853b
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            INetC.dll
                            • Path C:\Users\Admin\AppData\Local\Temp\nsb1615.tmp\INetC.dll
                            • Size 25KB
                            • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            nsExec.dll
                            • Path C:\Users\Admin\AppData\Local\Temp\nsb1615.tmp\nsExec.dll
                            • Size 7KB
                            • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            tsetup-x64.exe
                            • Path C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe
                            • Size 49.1MB
                            • SHA256 e8a45876b171a070606d82c2c0893a00aad25930a4c285abb9e5d40b8f9d0eb9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex_browser_updater.log
                            • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                            • Size 6KB
                            • SHA256 50a447238b7d95afbef528c8e2d987f6cafe3324a422cf40feda1d72b5438552
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Yandex.lnk
                            • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                            • Size 2KB
                            • SHA256 45df6e1f7e5e2f71b0b5946c909129d7beb79276bf7180eef2c39a5901695549
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            YandexWorking.exe
                            • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\YandexWorking.exe
                            • Size 666KB
                            • SHA256 094b652b4d85d6b43865fe78a07dc97f96bd73fc7e7b95bae4161ff368510187
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            yandex.website
                            • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\yandex.website
                            • Size 489B
                            • SHA256 e61300e7f5b3b1806a9bb12dc424b675204c1ec27cfa294596f47f0923320724
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            brand_config
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.4.0.2141\brand_config
                            • Size 6KB
                            • SHA256 e201c78b7a8579acffd4c0bcc2b806219d4cdbaa581d8e7c8608334f64c9602b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            partner_config
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.4.0.2141\partner_config
                            • Size 208B
                            • SHA256 c570726cf24ed488c1990849d9a7a3a6ca9b68cbf8395e0900e664ced7c4bfb4
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\Temp\chromium_chrome_Unpacker_BeginUnzipping4520_105368887\manifest.json
                            • Size 1001B
                            • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\Temp\chromium_chrome_Unpacker_BeginUnzipping4520_52327260\manifest.json
                            • Size 159B
                            • SHA256 4a8c3b43a7ff3147ac5b305770ac0ac90ab4150a5e5132c896ae90f34fea51e2
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            ru.bdic
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                            • Size 4.5MB
                            • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            browser.exe
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                            • Size 5.6MB
                            • SHA256 ada6c0771aa471bb51029172ad31d4ef33ced44f64f0311578d3518c7861f528
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            install_state.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\install_state.json
                            • Size 1KB
                            • SHA256 861c58a261db4a240f10244ade3fd229f95c5bdb53028daad701e3f29ca62959
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\Extensions\ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                            • Size 119B
                            • SHA256 20832de8163d5af0a0c8bda863bcd6083df4f92175d856ce527de1dae1f7c433
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            about_logo_en.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_en.png
                            • Size 1KB
                            • SHA256 c56ae312020aef1916a8a01d5a1fc67ed3b41e5da539c0f26632c904a5e49c62
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            about_logo_en_2x.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_en_2x.png
                            • Size 3KB
                            • SHA256 fe20d86fd62a4d1ab51531b78231749bd5990c9221eab1e7958be6d6aef292d9
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            about_logo_ru.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_ru.png
                            • Size 1KB
                            • SHA256 1039ea2d254d536410588d30f302e6ab727d633cf08cb409caa5d22718af5e64
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            about_logo_ru_2x.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_ru_2x.png
                            • Size 3KB
                            • SHA256 5bb0977553ded973c818d43a178e5d9874b24539dacbd7904cd1871e0ba82b23
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            all_zip
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\configs\all_zip
                            • Size 1.2MB
                            • SHA256 d3000076b4f96944dab6fb5f88c71d712ae019093d77e2f27b0ce871b7bdd7f1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            easylist.txt
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\easylist\easylist.txt
                            • Size 620KB
                            • SHA256 2f317fee439877eaadb1264bd3d1e153c963ef98596a4ccf227592aea12ae76f
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            manifest.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\easylist\manifest.json
                            • Size 68B
                            • SHA256 77334f6256abddcc254f31854d1b00aa6743e20aadbb9e69187144847099a66b
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            brand_settings.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json
                            • Size 379B
                            • SHA256 4940847c9b4787e466266f1bb921097abb4269d6d10c0d2f7327fde9f1b032b7
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            brand_settings.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json
                            • Size 316B
                            • SHA256 de0fbb08708d4be7b9af181ec26f45fccd424e437bc0cfb5cf38f2604f01f7b2
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            brand_settings.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json
                            • Size 246B
                            • SHA256 114fd03aa5ef1320f6cc586e920031cf5595a0d055218ce30571ff33417806d3
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            import-bg.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\import-bg.png
                            • Size 9KB
                            • SHA256 7573af31ed2bfcfff97ed2132237db65f05aff36637cd4bdeccdf8ca02cd9038
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            dictionary-ru-RU.mrf
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\dictionary-ru-RU.mrf
                            • Size 1.1MB
                            • SHA256 1585b1599418d790da830ef11e8eeceee0cbb038876fe3959cc41858bd501dbc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            dictionary-ru-RU.mrf.sig
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\dictionary-ru-RU.mrf.sig
                            • Size 256B
                            • SHA256 151739137bbbdf5f9608a82ec648bdf5d7454a81b86631b53dfc5ad602b207d6
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            stop-words-ru-RU.list
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\stop-words-ru-RU.list
                            • Size 52B
                            • SHA256 cbeec72666668a12ab6579ae0f45ccbdbe3d29ee9a862916f8c9793e2cf55552
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            download.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\safebrowsing\download.png
                            • Size 437B
                            • SHA256 3129d9eaba1c5f31302c2563ebfa85747eda7a6d3f95602de6b01b34e4369f04
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            sxs.ico
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\sxs.ico
                            • Size 43KB
                            • SHA256 ad566a3e6f8524c705844e95a402cdeb4d6eed36c241c183147409a44e97ebcd
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            tablo
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\tablo
                            • Size 1.1MB
                            • SHA256 41b0aa9debcf032e30969ce674b336e86237848fc94a950b7084a9c51cd33f2c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            1-1x.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\1-1x.png
                            • Size 18KB
                            • SHA256 a62f9fdf3de1172988e01a989bf7a2344550f2f05a3ac0e6dc0ccd39ed1a697e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            custogray_full.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\custogray_full.png
                            • Size 313B
                            • SHA256 a7cd964345c3d15840b88fd9bc88f0d0c34a18edbf1ce39359af4582d1d7da45
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\preview.png
                            • Size 136B
                            • SHA256 55a236ad63d00d665b86ff7f91f2076226d5ed62b9d9e8f835f7cb998556545f
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\wallpaper.json
                            • Size 233B
                            • SHA256 4cd690fb8ed5cd733a9c84d80d20d173496617e8dde6fca19e8a430517349ed5
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            dark_preview.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\dark.title\dark_preview.jpg
                            • Size 1KB
                            • SHA256 4373e988c7f36efe867c89745469f502ba549ccd68b73d3000cb7231413c4169
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            dark_static.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\dark.title\dark_static.jpg
                            • Size 1.8MB
                            • SHA256 632435cf4acd1463f0fa2ea2d170347050e154b2a53e35d33ed6c0f0a29ef7e0
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            fir_tree_preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\fir_tree\fir_tree_preview.png
                            • Size 8KB
                            • SHA256 4c2b561cf301d9e98383d084a200deb7555ec47a92772a94453d3d8d1de04080
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\fir_tree\wallpaper.json
                            • Size 384B
                            • SHA256 2cc83bc391587b7fe5ddd387506c3f51840b806f547d203ccd90487753b782f1
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            flowers_preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\flowers\flowers_preview.png
                            • Size 9KB
                            • SHA256 70a7a65aa6e8279a1a45d93750088965b65ea8e900c5b155089ca119425df003
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\flowers\wallpaper.json
                            • Size 387B
                            • SHA256 70c8d348f7f3385ac638956a23ef467da2769cb48e28df105d10a0561a8acb9e
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            huangshan.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan.jpg
                            • Size 211KB
                            • SHA256 713c9e03aac760a11e51b833d7e1c9013759990b9b458363a856fd29ea108eec
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            huangshan.webm
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan.webm
                            • Size 9.6MB
                            • SHA256 05e7170852a344e2f3288fc3b74c84012c3d51fb7ad7d25a15e71b2b574bfd56
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            huangshan_preview.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan_preview.jpg
                            • Size 26KB
                            • SHA256 649c55ccc096cc37dfe534f992b1c7bda68da589258611924d3f6172d0680212
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            light_preview.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\light.title\light_preview.jpg
                            • Size 1KB
                            • SHA256 4fe8b8d7919840d2692b29e80f1c7e9fde7796bfab2c7e90aa480bdad960df76
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            light_static.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\light.title\light_static.jpg
                            • Size 674KB
                            • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\meadow\preview.png
                            • Size 5KB
                            • SHA256 0499c4cc77a64cc89055b3c65d7af8387f5d42399ff2c0a2622eccbd6d481238
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\meadow\wallpaper.json
                            • Size 439B
                            • SHA256 c6581e9f59646e0a51a3194798ec994c7c5c99f28897108838aaf4a4e2bda04a
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\misty_forest\preview.png
                            • Size 5KB
                            • SHA256 ea340a389af6d7ad760dff2016cf4e79488bda1a45d0a415b3cd02a4430c9711
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\misty_forest\wallpaper.json
                            • Size 423B
                            • SHA256 ebe9cadad41bd573f4b5d20e3e251410300b1695dfdf8b1f1f1276d0f0f8fa6d
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            mountains_preview.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\mountains_preview.jpg
                            • Size 35KB
                            • SHA256 55074794869b59cd5c693dfa6f6615aea068c2cd50cdae6dd69bd0410661ded8
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\peak\preview.png
                            • Size 5KB
                            • SHA256 f72ea12f6c972edfe3d5a203e1e42cbbaf4985633de419342c2af31363f33dab
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\peak\wallpaper.json
                            • Size 440B
                            • SHA256 e491962b42c3f97649afec56ad4ea78fd49845ceb15f36edddd08d9e43698658
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            raindrops_preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\raindrops\raindrops_preview.png
                            • Size 7KB
                            • SHA256 1e70fc9965939f6011488f81cd325223f17b07ee158a93c32c124602b506aa6b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\raindrops\wallpaper.json
                            • Size 385B
                            • SHA256 bcfea0bebf30ee9744821a61fcce6df0222c1a266e0995b9a8cfbb9156eeeefd
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            sea.webm
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea.webm
                            • Size 12.5MB
                            • SHA256 fa8d0ae53ebdbec47b533239709b7e1514ecb71278907621ca2d288241eb0b13
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            sea_preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea\sea_preview.png
                            • Size 3KB
                            • SHA256 02d8e450f03129936a08b67f3a50ea5d2e79f32c4e8f24d34b464f2cb5e0b086
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea\wallpaper.json
                            • Size 379B
                            • SHA256 c2bb1e5d842c7e5b1b318f6eb7fe1ce24a8209661ddd5a83ab051217ca7c3f65
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            sea_preview.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea_preview.jpg
                            • Size 59KB
                            • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            sea_static.jpg
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea_static.jpg
                            • Size 300KB
                            • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\stars\preview.png
                            • Size 6KB
                            • SHA256 4fa185f67eaf3a65b991cea723d11f78de15a6a9a5235848a6456b98a9d7f689
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\stars\wallpaper.json
                            • Size 537B
                            • SHA256 d1bef520c71c7222956d25335e3ba2ea367d19e6c821fb96c8112e5871576294
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            wallpaper.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\web\wallpaper.json
                            • Size 379B
                            • SHA256 7fdddc908bd2f95411dcc4781b615d5da3b5ab68e8e5a0e2b3d2d25d713f0e01
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            web_preview.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\web\web_preview.png
                            • Size 8KB
                            • SHA256 0bbf72a3c021393192134893777ecb305717ccef81b232961ca97ae4991d9ba8
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad\settings.dat
                            • Size 48B
                            • SHA256 86b4635c97fe338226ecef80febf28969a51f4700cbcc71f82fdfb5aee9164e2
                            • MD5 SHA1 SHA512
                            Submit Download

                            f_000005
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000005
                            • Size 40KB
                            • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000007
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000007
                            • Size 48KB
                            • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                            • Size 48B
                            • SHA256 dd665a8487e7742386c5aaa81a574e591bb65d6e19eee8eff9033c3f0fc153eb
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                            • Size 792B
                            • SHA256 3f0dad04d4ce260a7df87cb25f4913bcfe58c9de97a43b2c0106813e7e9a9259
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            SCT Auditing Pending Reports
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                            • Size 13KB
                            • SHA256 bbbd5a120c76112057d904b423a00a3b3353df9b0c5907b6fb3a04b4e30da3da
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                            • Size 9KB
                            • SHA256 8c82c440d80f2e7501fb3fb873b2e186df5474ae1ada80e64366368382061608
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                            • Size 17KB
                            • SHA256 87eeef754f82c03ebc5924b0dc65ef1c83735a8b1c3a5f317760528ec95edb6a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                            • Size 14KB
                            • SHA256 193916b2c2ca30b5c3315b744c9760fd2b70b9f986f70f7e1568e28d88fef284
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences~RFe59ab69.TMP
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe59ab69.TMP
                            • Size 5KB
                            • SHA256 15314fb98f78320703fe69b5d65967174a0146fb518fc50ec795ad6c9f8313d3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Secure Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                            • Size 15KB
                            • SHA256 1d7061383e4c183b00feada6cff51010f92684eff61b883ce64712c548345331
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Secure Preferences
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                            • Size 15KB
                            • SHA256 b4430beeb6ea0c2b427a269fde1de43385f5921579cbf5d245be22e16906e4fd
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Secure Preferences~RFe59ac92.TMP
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe59ac92.TMP
                            • Size 8KB
                            • SHA256 2b39b31b8fa09690e0a9f24857c9fa24c18130b60dd5ea92e4d7e4c4f1f52118
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Site Characteristics Database\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            058060ba448ded6b_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\058060ba448ded6b_0
                            • Size 11KB
                            • SHA256 b5ea6a007a70063849fe77fe1bed1d6a8f6ecc8b72fdb4e60eed882273aa65d5
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            08e93dfa8f5f29ce_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\08e93dfa8f5f29ce_0
                            • Size 2KB
                            • SHA256 32d92699637360e0e25634604f0027516d369fae8b00e0802e64b6b2e70e93e7
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            0e66ae940b1388e9_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\0e66ae940b1388e9_0
                            • Size 2KB
                            • SHA256 f12a9b06aa3a4c6cdadf1aa41d0f233bd49343c870f52fa49c2bd70269bea8ad
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            2a9877b782e7616c_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\2a9877b782e7616c_0
                            • Size 42KB
                            • SHA256 2386e27ef6cc2a0dfe26433c28d200a018bece90d6ec8ac5c60016f72ade8fc5
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            326b3dfe88d978d3_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\326b3dfe88d978d3_0
                            • Size 3KB
                            • SHA256 25e12c686a61b0a5bf6fed8ad572c34655d6adb4e27e844363664f246d3d36d6
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            328f28cfa3c26dcd_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\328f28cfa3c26dcd_0
                            • Size 594B
                            • SHA256 ac0a4780f0b9921dce6d34fd78f013d03839548154455597a969cacfb76b03da
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            3cc6acf275cc5ece_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\3cc6acf275cc5ece_0
                            • Size 2KB
                            • SHA256 be4ac3e3d47dd91e4e709c828957d61b6b4abd11ce656e48a90b7935476d5977
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            45d20d0e83ad425b_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\45d20d0e83ad425b_0
                            • Size 20KB
                            • SHA256 34b891a82784ee04b6e04277d06c8ada9c3a26606bb6ddd2c195c4367c375b37
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            8974b9206743c9a5_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\8974b9206743c9a5_0
                            • Size 1KB
                            • SHA256 03380bae4d34e82401e8b7e276504b76f102abce60867ab1c0279ebd5838beef
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            8cd89c4f91987d97_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\8cd89c4f91987d97_0
                            • Size 737B
                            • SHA256 bf1c9b75c496925a5a294c2517db5c66233b06d9100a74198d95159dbf6de380
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            ae930e26c0201391_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\ae930e26c0201391_0
                            • Size 31KB
                            • SHA256 1ecc6b7aa251191e233532f7d3d2aa15069e88fe4429a868fc3806f1d6fe0e5d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            b1bd6b6b078bc035_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\b1bd6b6b078bc035_0
                            • Size 27KB
                            • SHA256 f3c4289e37ac526c62192b518d41c0e4cbb3126ea17c80ad39f7fefe98662c6d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            b3f0dc54e2b61fc9_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\b3f0dc54e2b61fc9_0
                            • Size 1KB
                            • SHA256 2f3def8a2e06a6f245aecef2ea9616a6f95439abc86d09b1d500d9230a997c5c
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            b94b5ea4b30ac588_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\b94b5ea4b30ac588_0
                            • Size 29KB
                            • SHA256 a0b9a8ecbb4da5307df5f27a25dc293e9747b6c520c0c5adb357005e11d537eb
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            bd94c4a078cc79b8_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\bd94c4a078cc79b8_0
                            • Size 1KB
                            • SHA256 a3b54a9f766c881934f1eff5e1ad34fec018ba323b2c8224ae33d71ffdc9baec
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            c8a82016ba4aa56d_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\c8a82016ba4aa56d_0
                            • Size 640B
                            • SHA256 7288bea1b112e34f11d905f496aa8a79395c9752a0363459998d96053bf1fd74
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            cd4004d6793712fa_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\cd4004d6793712fa_0
                            • Size 295KB
                            • SHA256 e6e27edffbd4839b7de87517f17a70ce0c51b1d06a962264db96778a259cff0a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            e55ea6df8a5572d9_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\e55ea6df8a5572d9_0
                            • Size 1.0MB
                            • SHA256 a7f49f75c5faa02a49721d61da871be383584428d62dd541e6fd474c0e24264b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            e7d083353a620397_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\e7d083353a620397_0
                            • Size 789B
                            • SHA256 2d94b8125c2438115453503528d258e10d9e3353fef49bf4595683e3f09bd957
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            e9c2d8ed4b6db546_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\e9c2d8ed4b6db546_0
                            • Size 619B
                            • SHA256 658bedb6c575580ea48847a4a5d0ee418825a7d8c5c96ba4c62f6d00a2183236
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            f26868f0d4afa00a_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\f26868f0d4afa00a_0
                            • Size 1KB
                            • SHA256 a6a411ef31bc0406d4eb2f110ca7229e73667548820e4efed0051bb449254c27
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            f51d5af08878d17b_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\f51d5af08878d17b_0
                            • Size 6KB
                            • SHA256 af9e2d2288543e6a658513996ca44003d6a726dcf5a73364f8a1336b2a387343
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f55f00a9a3efca75_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\f55f00a9a3efca75_0
                            • Size 556B
                            • SHA256 9a173f80102eebcf872d207cf9469192d76dba471bb3a854380f6c5ea81a2a2e
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            f7184e118a2705af_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\f7184e118a2705af_0
                            • Size 30KB
                            • SHA256 4c9b53f471c44bc628e10b47b1144029581e71d3fc8b9e4034a9905154e894c6
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            fd41ca2a883063a6_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\fd41ca2a883063a6_0
                            • Size 9KB
                            • SHA256 10173664abb0e0b6a578200f4ed9aa89d32ce8293e2fa0df379f23f27c29b1d7
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            fd7f6b854deb6dae_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\fd7f6b854deb6dae_0
                            • Size 1KB
                            • SHA256 c27d48840b2a12a5e9fb54350e8993b7a6a7bcc0b6b2953cbbf17aa8ce8a4183
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            fef132170d47887d_0
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\fef132170d47887d_0
                            • Size 10KB
                            • SHA256 52f34f2c0820f300dacdacb3724f1a7943cb1acfc60878831cf9c21eb841f5b1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\index-dir\the-real-index
                            • Size 5KB
                            • SHA256 fc6cb946b610d5ba1fe349a7226fbde821e56d4527be3d16d67d62087b8bd068
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\index-dir\the-real-index
                            • Size 5KB
                            • SHA256 1e9c801fd915ea3e4aaee08b67a02524990c7a7c50b87770b87c5acf8e99857f
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index~RFe5a1186.TMP
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\d1f54169-493a-4e97-86f2-f3f09a5b33eb\index-dir\the-real-index~RFe5a1186.TMP
                            • Size 5KB
                            • SHA256 c7e9a80904db4e210f9fdf7783c39b352a6abdc2381763dad16c687a8f50582d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\web_ntp_cache\index
                            • Size 24B
                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                            • MD5 SHA1 SHA512
                            Submit Download

                            32.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\32.png
                            • Size 945B
                            • SHA256 e5a96d5629ea34804a4a32831e8bc009ace619ec2212f39e8a9016e8d46828cf
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            48.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\48.png
                            • Size 1KB
                            • SHA256 eb059e050755973503570f847a1919b4fb6943c5ed2b697c82f9feca5c5b8085
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            32.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\32.png
                            • Size 1KB
                            • SHA256 1bde2abef411c44e842a39bae58279b17167d6082202831f18aaf5f0150c7994
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            48.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\48.png
                            • Size 2KB
                            • SHA256 fcc94342dd2083912720efb31d568b8247e2a7e73432c8984be2e54739e25006
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            128.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4520_1219854733\Trusted Icons\Icons\128.png
                            • Size 9KB
                            • SHA256 371fd6e312b931971cb05dfc65a77f692a3537003d839354f6cea63dc5c7007b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            256.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4520_1219854733\Trusted Icons\Icons\256.png
                            • Size 7KB
                            • SHA256 ff068f5b44c89bdf2b33d3d2f70617fded8a7bbf898aa17afdfd7bc3c11c7b98
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            64.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4520_1219854733\Trusted Icons\Icons\64.png
                            • Size 4KB
                            • SHA256 62b1ad1311a5f5983f1e21547dd29ff7a2a33bbeb0b55a69c3d950f214810c45
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            96.png
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4520_1219854733\Trusted Icons\Icons\96.png
                            • Size 6KB
                            • SHA256 bf8699aa97e9f37e8302b25324cc2868f63809f7fecde663fe8bc5e8c33a0ce4
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            turboapp_db.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                            • Size 55KB
                            • SHA256 041f455fd20aef8528da6c73480c078297e5bd7526d0c30bb56703063337691e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            turboapp_db.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                            • Size 55KB
                            • SHA256 e182a7e6ea2d0cf3d180e892fa9a017ebdeba84cff17fbbfa734a6d9068945ed
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            turboapp_db.json~RFe59ae76.TMP
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json~RFe59ae76.TMP
                            • Size 34KB
                            • SHA256 29a51d2eecae2b70c2f94777b7fca0a7bf8b572ce94fa694158fd010f86ccc86
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                            • Size 253KB
                            • SHA256 fdc94dc594a0c39ab7fc6237232c9a1e9e3736ea7ddd6d579bde2c15270f7f11
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                            • Size 6KB
                            • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                            • Size 18.9MB
                            • SHA256 92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            metadata.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                            • Size 13B
                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                            • MD5 SHA1 SHA512
                            Submit Download

                            metadata.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                            • Size 236B
                            • SHA256 6bacb626526a3b5291d1717b242729d47d1e8646cd2947d09ce3b9e72c73dfa6
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            e0208381-65fb-474a-a7ea-a91b6a3c2ff2.tmp
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\e0208381-65fb-474a-a7ea-a91b6a3c2ff2.tmp
                            • Size 235KB
                            • SHA256 283cae17efccacae9fcb0ef6b8fe329d7ba6204d9b564764ef5b096beb1e73f4
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            verified_contents.json
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\_metadata\yandex\verified_contents.json
                            • Size 990B
                            • SHA256 128ee9930635d572ac94cef6a2b3b6ae65fdfef5ddc54c6c100e2dac13c7d0dc
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            script
                            • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\script
                            • Size 4KB
                            • SHA256 8b44c53ea53b3ff1465263dec2380c68e88e4964984dbdc1497ff2aeedb010d6
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Яндекс Браузер с Алисой AI.lnk
                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс Браузер с Алисой AI.lnk
                            • Size 2KB
                            • SHA256 f107e2a16a8fe5797e463e338ac66e918c4f431b0fa2fbc4a35cefbdb9318a83
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            d3dcompiler_47.dll
                            • Path C:\Users\Admin\AppData\Roaming\Telegram Desktop\modules\x64\d3d\d3dcompiler_47.dll
                            • Size 4.7MB
                            • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            ui
                            • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                            • Size 38B
                            • SHA256 ac78392d35cb06e2f35837840ce4e7b121dcb8080297090fd2cd61cfdcc4dfd4
                            • MD5 SHA1 SHA512
                            Submit Download

                            Telegram.lnk
                            • Path C:\Users\Admin\Desktop\Telegram.lnk
                            • Size 1KB
                            • SHA256 d4cce75f00803a52a16bca66a70bf23bb80e9d58841c395d0d4dc763f235caf1
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            memory/1040-991-0x00000000104B0000-0x00000000104BA000-memory.dmp
                            Download

                            memory/1040-990-0x0000000010160000-0x00000000101C3000-memory.dmp
                            Download

                            memory/1040-363-0x00000000104B0000-0x00000000104BA000-memory.dmp
                            Download

                            memory/1040-362-0x0000000010160000-0x00000000101C3000-memory.dmp
                            Download

                            memory/1444-123-0x000002015D470000-0x000002015D53D000-memory.dmp
                            Download

                            memory/1512-1006-0x00007FFAD9F70000-0x00007FFAD9F71000-memory.dmp
                            Download

                            memory/1512-2600-0x00000290AC230000-0x00000290AC2FD000-memory.dmp
                            Download

                            memory/2628-2463-0x0000027526B40000-0x0000027526C0D000-memory.dmp
                            Download

                            memory/2912-1416-0x0000021344570000-0x000002134463D000-memory.dmp
                            Download

                            memory/2996-954-0x000001C6EE850000-0x000001C6EE91D000-memory.dmp
                            Download

                            memory/2996-468-0x000001C6EE850000-0x000001C6EE91D000-memory.dmp
                            Download

                            memory/3004-1067-0x00007FFADA140000-0x00007FFADA141000-memory.dmp
                            Download

                            memory/3004-1068-0x00007FFADAB90000-0x00007FFADAB91000-memory.dmp
                            Download

                            memory/3244-2796-0x00000264C1CF0000-0x00000264C1DBD000-memory.dmp
                            Download

                            memory/3364-584-0x000002973AC70000-0x000002973AD3D000-memory.dmp
                            Download

                            memory/3436-482-0x000001FD752D0000-0x000001FD7539D000-memory.dmp
                            Download

                            memory/3992-2848-0x0000028FFA750000-0x0000028FFA81D000-memory.dmp
                            Download

                            memory/4028-2331-0x00000248855F0000-0x00000248856BD000-memory.dmp
                            Download

                            memory/4428-792-0x000001D3959B0000-0x000001D395A7D000-memory.dmp
                            Download

                            memory/4520-2539-0x0000027E04190000-0x0000027E0425D000-memory.dmp
                            Download

                            memory/4588-475-0x00000259F6B80000-0x00000259F6C4D000-memory.dmp
                            Download

                            memory/4588-952-0x00000259F6B80000-0x00000259F6C4D000-memory.dmp
                            Download

                            memory/4716-9-0x0000000000B40000-0x0000000000BA3000-memory.dmp
                            Download

                            memory/4740-20-0x0000000000140000-0x0000000000218000-memory.dmp
                            Download

                            memory/4740-54-0x0000000000140000-0x0000000000218000-memory.dmp
                            Download

                            memory/4740-12-0x0000000000140000-0x0000000000218000-memory.dmp
                            Download

                            memory/4784-122-0x0000000003410000-0x0000000003473000-memory.dmp
                            Download

                            memory/4784-279-0x0000000003410000-0x0000000003473000-memory.dmp
                            Download

                            memory/4784-995-0x0000000003410000-0x0000000003473000-memory.dmp
                            Download

                            memory/4784-138-0x0000000003410000-0x0000000003473000-memory.dmp
                            Download

                            memory/5028-2289-0x000001C971070000-0x000001C97107C000-memory.dmp
                            Download

                            memory/5068-2540-0x000001CF4EE10000-0x000001CF4EEDD000-memory.dmp
                            Download

                            memory/5132-22-0x0000000003730000-0x0000000003793000-memory.dmp
                            Download

                            memory/5132-25-0x0000000000FE0000-0x000000000133F000-memory.dmp
                            Download

                            memory/5132-52-0x0000000000FE0000-0x000000000133F000-memory.dmp
                            Download

                            memory/5132-53-0x0000000003730000-0x0000000003793000-memory.dmp
                            Download

                            memory/5132-23-0x0000000001500000-0x0000000001501000-memory.dmp
                            Download

                            memory/5132-28-0x0000000000FE0000-0x000000000133F000-memory.dmp
                            Download

                            memory/5132-21-0x0000000000FE0000-0x000000000133F000-memory.dmp
                            Download

                            memory/5132-18-0x0000000001500000-0x0000000001501000-memory.dmp
                            Download

                            memory/5140-5-0x0000000000990000-0x00000000009F3000-memory.dmp
                            Download

                            memory/5168-572-0x00000230CB3F0000-0x00000230CB4BD000-memory.dmp
                            Download

                            memory/5440-550-0x0000025891CE0000-0x0000025891DAD000-memory.dmp
                            Download

                            memory/5608-2479-0x00000201151D0000-0x00000201151DC000-memory.dmp
                            Download

                            memory/6372-2840-0x0000023C8E500000-0x0000023C8E50C000-memory.dmp
                            Download

                            memory/7048-2683-0x0000012E855E0000-0x0000012E856AD000-memory.dmp
                            Download

                            memory/7180-2713-0x0000023326930000-0x000002332693C000-memory.dmp
                            Download

                            memory/7388-2695-0x000002C6BD610000-0x000002C6BD61C000-memory.dmp
                            Download

                            memory/7648-2694-0x000001A183FB0000-0x000001A183FBC000-memory.dmp
                            Download

                            memory/7768-2692-0x0000019F77B70000-0x0000019F77C3D000-memory.dmp
                            Download

                            memory/7992-2684-0x000002CD22F90000-0x000002CD22F9C000-memory.dmp
                            Download

                            memory/8872-2770-0x00000225B5E40000-0x00000225B5E4C000-memory.dmp
                            Download