Overview

overview

8

Static

static

3

tsetup-x64.6.7.8.exe

windows10-2004-x64

8

tsetup-x64.6.7.8.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/05/2026, 12:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tsetup-x64.6.7.8.exe
  • Size 49.3MB
  • Sample260504-ph9sfaaz8w
  • SHA256 00cef9aacfe4281e3bc25aa65522a845d5fb0b782d9d9c9cb6f2c4853ad90d91
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryinstallerpersistencespywarestealertrojan

Malware Config

Signatures

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Drops file in System32 directory 13 IoCs
  • Drops file in Program Files directory 3 IoCs
  • Drops file in Windows directory 42 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 8 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 4 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Kills process with taskkill 2 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 45 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\tsetup-x64.6.7.8.exe
    "C:\Users\Admin\AppData\Local\Temp\tsetup-x64.6.7.8.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:6024
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM Telegram.exe
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:956
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM Updater.exe
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:4804
    • C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe
      "C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1208
      • C:\Users\Admin\AppData\Local\Temp\is-GML55.tmp\tsetup-x64.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-GML55.tmp\tsetup-x64.tmp" /SL5="$B02FA,50396918,826880,C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3020
        • C:\Users\Admin\AppData\Roaming\Telegram Desktop\Telegram.exe
          "C:\Users\Admin\AppData\Roaming\Telegram Desktop\Telegram.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops desktop.ini file(s)
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:2032
    • C:\Users\Admin\AppData\Local\Downloads\YandexFull.exe
      "C:\Users\Admin\AppData\Local\Downloads\YandexFull.exe" -silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of WriteProcessMemory
      PID:5848
      • C:\Users\Admin\AppData\Local\Temp\yb42BC.tmp
        "C:\Users\Admin\AppData\Local\Temp\yb42BC.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6e9ca863-a501-4994-9595-1f42c7faad71.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=574763039 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\107e97ca-14a7-48a2-8a28-639399160e65.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:5468
        • C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6e9ca863-a501-4994-9595-1f42c7faad71.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=574763039 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\107e97ca-14a7-48a2-8a28-639399160e65.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
          4⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          • Suspicious use of WriteProcessMemory
          PID:2700
          • C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\6e9ca863-a501-4994-9595-1f42c7faad71.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=574763039 --installer-brand-id=yandex --installer-partner-id=723633 --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=full --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\107e97ca-14a7-48a2-8a28-639399160e65.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=577419258
            5⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Modifies registry class
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:4604
            • C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe
              C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4604 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff71bccf970,0x7ff71bccf97c,0x7ff71bccf988
              6⤵
              • Executes dropped EXE
              PID:4000
            • C:\Windows\SystemTemp\sdwra_4604_377412435\service_update.exe
              "C:\Windows\SystemTemp\sdwra_4604_377412435\service_update.exe" --setup
              6⤵
              • Executes dropped EXE
              • Drops file in Program Files directory
              • Drops file in Windows directory
              • Suspicious use of WriteProcessMemory
              PID:5384
              • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
                "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --install
                7⤵
                • Executes dropped EXE
                • Drops file in Windows directory
                PID:440
            • C:\Windows\SystemTemp\scoped_dir4604_412258903\explorer.exe
              "C:\Windows\SystemTemp\scoped_dir4604_412258903\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
              6⤵
              • Executes dropped EXE
              • Drops file in Windows directory
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of WriteProcessMemory
              PID:4368
              • C:\Windows\SystemTemp\scoped_dir4604_412258903\explorer.exe
                C:\Windows\SystemTemp\scoped_dir4604_412258903\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4368 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff7fd9bf970,0x7ff7fd9bf97c,0x7ff7fd9bf988
                7⤵
                • Executes dropped EXE
                PID:328
            • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
              C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:5776
              • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
                C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
                7⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                PID:2100
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml" --vid=162
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4660
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source4604_1539437962\Browser-bin\clids_yandex.xml"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4500
  • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
    "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --run-as-service
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:4116
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4116 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff7e615e250,0x7ff7e615e25c,0x7ff7e615e268
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      PID:5616
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --update-scheduler
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      • Suspicious use of WriteProcessMemory
      PID:1348
      • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe
        "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.0.2141\service_update.exe" --update-background-scheduler
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:3300
  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=574763039
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Adds Run key to start application
    • Drops file in Windows directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4984
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=4984 --annotation=metrics_client_id=572aeb9bec31422f8a002bc98a64ef91 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7fff62f5bbf8,0x7fff62f5bc04,0x7fff62f5bc10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3940
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2256,i,43003068929507099,465194353464403370,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2328 --brver=26.4.0.2141 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:5560
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=2080,i,1411855680322921556,9420306866592559833,262144 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2308 /prefetch:6
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2404
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --gpu-process-kind=sandboxed --metrics-shmem-handle=2016,i,1799095247802714489,16627930930914510815,262144 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2264 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5792
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2892,i,16073037132572368881,9917997692756816263,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2804 --brver=26.4.0.2141 /prefetch:13
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5332
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3408,i,14157975677671237108,1992536367489048290,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3432 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4412
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=3304,i,3065445668497114042,4379564152793468717,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3412 --brver=26.4.0.2141 /prefetch:12
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5576
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --may-use-trampoline-gpu --metrics-shmem-handle=4076,i,7617283359517544088,3586077555268941087,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4104 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:3460
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=4564,i,5449144554999889454,15833503364891219979,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4072 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Windows directory
      PID:3172
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=4820,i,13584872670373137705,9252323582100480107,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4628 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:8832
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=2392,i,5650790649952469646,16722151100539484555,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4396 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:7252
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=4984,i,6406261951834795538,5094877927042449712,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4988 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2236
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4940,i,9077443330148525821,15895693885076174943,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5524 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:8256
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5472,i,14392249592322017810,8323203289890538296,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5724 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:4048
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5848,i,11999679099862515267,14814720315553695376,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5764 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:3024
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=6896,i,5232076386406179053,2575917384315135813,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6900 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1796
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6800,i,1987279351474795824,8333767442029306793,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6084 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5440
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=6980,i,972823570718050861,10818828086524414137,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6388 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1212
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7064,i,8339047665722491591,7022125734823785175,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7104 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6188
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7028,i,14687365614016860295,18068734955646072378,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7324 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6200
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7460,i,3060883579292186849,10492856203546549440,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7484 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6212
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7472,i,17088700650349708886,16904559354316112744,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7504 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6220
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7800,i,7965046367367869230,11362002513821530406,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7812 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6236
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7488,i,6574864520370139083,4302897498625152651,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7748 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6248
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8068,i,4546838115490042809,9227472466383811545,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8080 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6264
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7768,i,2262453720859478998,15352732356266483143,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8244 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6284
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8252,i,11855853733360621371,10682965568907572053,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8260 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6304
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7792,i,18381944148924784467,16989485955836366346,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8220 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6332
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8640,i,5932002855187301902,11821729591262191155,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8652 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6316
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8788,i,15747044186717619678,2787059296396952168,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8800 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6380
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8228,i,17544192500057179990,14803836638545284881,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8940 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6440
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8808,i,3340972712784311373,1248105144103926133,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9096 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6468
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9220,i,11357583622950674085,14752486535460500339,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9232 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6420
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9368,i,4730424906930449290,8320120538693951268,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9380 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6536
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9388,i,14978363696890259928,8532184410312545525,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9544 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:3324
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9564,i,15282620583421640252,18334878125187287257,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9628 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:3264
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9576,i,15285792766845663257,6356186443758942942,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9648 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:4640
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9588,i,13769581676645486801,18293946629853558291,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9668 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:3804
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9552,i,18111850717884045706,4302181146084379879,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9608 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:4788
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9672,i,12856333479780935592,6392481926525431100,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10360 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:880
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10348,i,2764713335564261010,669041850098284288,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10380 --brver=26.4.0.2141 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:7176
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10660,i,8746839313555780453,13622830846008025103,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10668 --brver=26.4.0.2141 /prefetch:14
      2⤵
        PID:7468
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6824,i,11875816571591657069,14673744300140175463,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10828 /prefetch:1
        2⤵
        • System Time Discovery
        PID:7488
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=6060,i,6317788932048369308,5275748300511160042,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=6976 --brver=26.4.0.2141 /prefetch:14
        2⤵
          PID:8020
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11112,i,17150607205655281183,9311968346150756512,2097152 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10944 /prefetch:1
          2⤵
          • System Time Discovery
          PID:2088
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=10844,i,5796383582736877224,2427652833142207541,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10796 --brver=26.4.0.2141 /prefetch:14
          2⤵
            PID:8764
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=10660,i,9489934902485593151,8883979840374927410,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9832 --brver=26.4.0.2141 /prefetch:14
            2⤵
              PID:3460
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=4490F992-5F52-4BD9-AD83-B39FDC4A6556 --brand-id=yandex --partner-id=723633 --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=10776,i,15870102825007011348,16429099492261062906,524288 --field-trial-handle=2272,i,1899886616922230430,14332998618013261645,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2276,i,16625877509848136767,570343592944259849,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=9772 --brver=26.4.0.2141 /prefetch:14
              2⤵
                PID:9176
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
              1⤵
                PID:8224
              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                1⤵
                  PID:6596
                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                  1⤵
                    PID:6852
                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --shutdown-if-not-closed-by-system-restart
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of WriteProcessMemory
                    PID:7976
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1777897395 --annotation=last_update_date=1777897395 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=7976 --annotation=metrics_client_id=572aeb9bec31422f8a002bc98a64ef91 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fff62f5bbf8,0x7fff62f5bc04,0x7fff62f5bc10
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:7988
                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={559C2019-48E4-4582-84FE-238BE651B932}
                    1⤵
                    • Drops file in Windows directory
                    • Enumerates system info in registry
                    PID:8952
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1777897395 --annotation=last_update_date=1777897395 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=8952 --annotation=metrics_client_id=572aeb9bec31422f8a002bc98a64ef91 --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.0.2141 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fff62f5bbf8,0x7fff62f5bc04,0x7fff62f5bc10
                      2⤵
                        PID:8964

                    Network

                          MITRE ATT&CK Enterprise v16

                          Reconnaissance

                          Resource Development

                          Initial Access

                          Execution

                          Persistence

                          Boot or Logon Autostart Execution

                          1
                          T1547

                          Registry Run Keys / Startup Folder

                          1
                          T1547.001

                          Privilege Escalation

                          Boot or Logon Autostart Execution

                          1
                          T1547

                          Registry Run Keys / Startup Folder

                          1
                          T1547.001

                          Defense Evasion

                          Modify Registry

                          2
                          T1112

                          Subvert Trust Controls

                          1
                          T1553

                          Install Root Certificate

                          1
                          T1553.004

                          Credential Access

                          Credentials from Password Stores

                          1
                          T1555

                          Credentials from Web Browsers

                          1
                          T1555.003

                          Unsecured Credentials

                          1
                          T1552

                          Credentials In Files

                          1
                          T1552.001

                          Discovery

                          Browser Information Discovery

                          1
                          T1217

                          Query Registry

                          4
                          T1012

                          System Information Discovery

                          3
                          T1082

                          System Location Discovery

                          1
                          T1614

                          System Language Discovery

                          1
                          T1614.001

                          System Time Discovery

                          1
                          T1124

                          Lateral Movement

                          Collection

                          Data from Local System

                          1
                          T1005

                          Command and Control

                          Exfiltration

                          Impact

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                          • Size 1KB
                          • SHA256 7732af42a301acd26ca45aee189c913508422213831bbba2c5cb459d546bfaad
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                          • Size 1KB
                          • SHA256 2b83a7c825e5a021dc53403952c70360ad798fc629c87c669eb2c3452bb7beca
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                          • Size 1KB
                          • SHA256 c6aa8db41200072b27e100bb44a1f43eca7f6432fdf30477ff05530cb12806c0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                          • Size 1KB
                          • SHA256 4a9857d954986bf0accab4e2338e79e20874eac0eefa19987e62658253bc53b1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          61A1C5C63BEAA1EA2A7E6CD3BE62EA26_892A9C841DD128677076CA4EDA2B76E2
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\61A1C5C63BEAA1EA2A7E6CD3BE62EA26_892A9C841DD128677076CA4EDA2B76E2
                          • Size 1KB
                          • SHA256 473a1e7f9f4d231511efbd436a8133198b94fdc3bea4c00ed27011483ec99754
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                          • Size 1KB
                          • SHA256 743eb708ad46c7520236d159da97a0e3ea010aaba38801cca567199f251bc0ba
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                          • Size 1KB
                          • SHA256 672180955e68b10be3468dfb5425f86743fcad9f7705e5de10ff8ce9884f0336
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                          • Size 508B
                          • SHA256 60dbdbcadb0e30c3e346e53e65856e6d100bd6537e41e89b32019441cbaaf588
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                          • Size 536B
                          • SHA256 c9a4189cc04edfc9ae4a4adb9043775f8483a7f9ed5c237a4028092d64a6dd4e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B9DF3EA7CFCFDED92A8B4356F4D6C86_199B3EB75A5B6EBC4E82359B529314CB
                          • Size 524B
                          • SHA256 2e97b41fa505df0e1801fd86fd031239f227fb122c14e8ea4feece08518c5e1b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\439F613B3D55693954E1B080DE3085B4_C14B486881EE76829D3D6096AF53D23B
                          • Size 510B
                          • SHA256 e1d29d26090118d307753ae14081c6f5beb4e80eea27cfb766de2ba23058f649
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          61A1C5C63BEAA1EA2A7E6CD3BE62EA26_892A9C841DD128677076CA4EDA2B76E2
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\61A1C5C63BEAA1EA2A7E6CD3BE62EA26_892A9C841DD128677076CA4EDA2B76E2
                          • Size 554B
                          • SHA256 0d7252ebe13fdfa962578af80062b3467bee31da05b5c17810d437d762520925
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                          • Size 536B
                          • SHA256 9dc1ab4a65d926bc2199340b696ae7a5fc4bf043e6e6767c944eaaff2a7ff23b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                          • Size 506B
                          • SHA256 01101d47ef51a7f6d99d1266c04df17149a7b3ae371060b808290bb58d645583
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          PartnerFile
                          • Path C:\Users\Admin\AppData\Local\Temp\PartnerFile
                          • Size 1.1MB
                          • SHA256 105833fb1cfb6b7a0586a2c3f909d5104147d887caa416152ed97b8ba468e950
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          BRAND_COMMON
                          • Path C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\BRAND_COMMON
                          • Size 25.4MB
                          • SHA256 165d8b7ebf86081d8a28cc19d66549802a6843096b05e5714df84ac57c408fb8
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          brand_yandex
                          • Path C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\brand_yandex
                          • Size 2.3MB
                          • SHA256 14b921443e032a8224028205a3e7add463e2fe8cddaa02e0eaaceb4bd05d8b7f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          setup.exe
                          • Path C:\Users\Admin\AppData\Local\Temp\YB_45AC5.tmp\setup.exe
                          • Size 7.2MB
                          • SHA256 e545aac4d3c5e75395ff12bbd0916f7478bd0b5009c9d6959f12f3f21f41cf8a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          distrib_info
                          • Path C:\Users\Admin\AppData\Local\Temp\distrib_info
                          • Size 327B
                          • SHA256 ec25b7638ae0421311e6311289028eb17835f801338c8c49286d2aeecaccb8ff
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          tsetup-x64.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\is-GML55.tmp\tsetup-x64.tmp
                          • Size 3.3MB
                          • SHA256 8c2147fb7d2aacc4012148516dc1680783c7f6d7b3c00dc839dfcd5d4f3afc6b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          lite_installer.log
                          • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                          • Size 12KB
                          • SHA256 3b15d176c8efc6c153bea5d75709e397ffcd49bedbfaae35079f30c657f5b665
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          master_preferences
                          • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                          • Size 542B
                          • SHA256 0325fd8be2634b3b8fd40c2d7900b7816bc4cc456ed1b708d9b1f0ca1af4853b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          INetC.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\nsxFF03.tmp\INetC.dll
                          • Size 25KB
                          • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          nsExec.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\nsxFF03.tmp\nsExec.dll
                          • Size 7KB
                          • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          tsetup-x64.exe
                          • Path C:\Users\Admin\AppData\Local\Temp\tsetup-x64.exe
                          • Size 49.1MB
                          • SHA256 e8a45876b171a070606d82c2c0893a00aad25930a4c285abb9e5d40b8f9d0eb9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex_browser_updater.log
                          • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                          • Size 6KB
                          • SHA256 27b30be46cd630cd975f72d2c5ddbfb4e38c6a5ce7a5baff20a5fc7b17cd53f9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Yandex.lnk
                          • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                          • Size 2KB
                          • SHA256 a342eb046544a466ce6aa51a388ff472a645f0e1b3c00493fe28b2cdbd3729ff
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          YandexWorking.exe
                          • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\YandexWorking.exe
                          • Size 666KB
                          • SHA256 094b652b4d85d6b43865fe78a07dc97f96bd73fc7e7b95bae4161ff368510187
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex.website
                          • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\yandex.website
                          • Size 489B
                          • SHA256 e61300e7f5b3b1806a9bb12dc424b675204c1ec27cfa294596f47f0923320724
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          partner_config
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.4.0.2141\partner_config
                          • Size 208B
                          • SHA256 c570726cf24ed488c1990849d9a7a3a6ca9b68cbf8395e0900e664ced7c4bfb4
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ru.bdic
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                          • Size 4.5MB
                          • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          browser.exe
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                          • Size 5.6MB
                          • SHA256 ada6c0771aa471bb51029172ad31d4ef33ced44f64f0311578d3518c7861f528
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          install_state.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\install_state.json
                          • Size 1KB
                          • SHA256 09e49e11ff04d373122abb93ca2848ae9eb98002f8df0b44519f7d7b289604aa
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\Extensions\ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                          • Size 119B
                          • SHA256 20832de8163d5af0a0c8bda863bcd6083df4f92175d856ce527de1dae1f7c433
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          brand_config
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\brand_config
                          • Size 6KB
                          • SHA256 e201c78b7a8579acffd4c0bcc2b806219d4cdbaa581d8e7c8608334f64c9602b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          about_logo_en.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_en.png
                          • Size 1KB
                          • SHA256 c56ae312020aef1916a8a01d5a1fc67ed3b41e5da539c0f26632c904a5e49c62
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          about_logo_en_2x.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_en_2x.png
                          • Size 3KB
                          • SHA256 fe20d86fd62a4d1ab51531b78231749bd5990c9221eab1e7958be6d6aef292d9
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          about_logo_ru.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_ru.png
                          • Size 1KB
                          • SHA256 1039ea2d254d536410588d30f302e6ab727d633cf08cb409caa5d22718af5e64
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          about_logo_ru_2x.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\about_logo_ru_2x.png
                          • Size 3KB
                          • SHA256 5bb0977553ded973c818d43a178e5d9874b24539dacbd7904cd1871e0ba82b23
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          all_zip
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\configs\all_zip
                          • Size 1.2MB
                          • SHA256 d3000076b4f96944dab6fb5f88c71d712ae019093d77e2f27b0ce871b7bdd7f1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          easylist.txt
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\easylist\easylist.txt
                          • Size 620KB
                          • SHA256 2f317fee439877eaadb1264bd3d1e153c963ef98596a4ccf227592aea12ae76f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\easylist\manifest.json
                          • Size 68B
                          • SHA256 77334f6256abddcc254f31854d1b00aa6743e20aadbb9e69187144847099a66b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          brand_settings.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json
                          • Size 379B
                          • SHA256 4940847c9b4787e466266f1bb921097abb4269d6d10c0d2f7327fde9f1b032b7
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          brand_settings.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json
                          • Size 316B
                          • SHA256 de0fbb08708d4be7b9af181ec26f45fccd424e437bc0cfb5cf38f2604f01f7b2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          brand_settings.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json
                          • Size 246B
                          • SHA256 114fd03aa5ef1320f6cc586e920031cf5595a0d055218ce30571ff33417806d3
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          import-bg.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\import-bg.png
                          • Size 9KB
                          • SHA256 7573af31ed2bfcfff97ed2132237db65f05aff36637cd4bdeccdf8ca02cd9038
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dictionary-ru-RU.mrf
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\dictionary-ru-RU.mrf
                          • Size 1.1MB
                          • SHA256 1585b1599418d790da830ef11e8eeceee0cbb038876fe3959cc41858bd501dbc
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dictionary-ru-RU.mrf.sig
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\dictionary-ru-RU.mrf.sig
                          • Size 256B
                          • SHA256 151739137bbbdf5f9608a82ec648bdf5d7454a81b86631b53dfc5ad602b207d6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          stop-words-ru-RU.list
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\morphology\stop-words-ru-RU.list
                          • Size 52B
                          • SHA256 cbeec72666668a12ab6579ae0f45ccbdbe3d29ee9a862916f8c9793e2cf55552
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          download.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\safebrowsing\download.png
                          • Size 437B
                          • SHA256 3129d9eaba1c5f31302c2563ebfa85747eda7a6d3f95602de6b01b34e4369f04
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          sxs.ico
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\sxs.ico
                          • Size 43KB
                          • SHA256 ad566a3e6f8524c705844e95a402cdeb4d6eed36c241c183147409a44e97ebcd
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          tablo
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\tablo
                          • Size 1.1MB
                          • SHA256 41b0aa9debcf032e30969ce674b336e86237848fc94a950b7084a9c51cd33f2c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          1-1x.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\1-1x.png
                          • Size 18KB
                          • SHA256 a62f9fdf3de1172988e01a989bf7a2344550f2f05a3ac0e6dc0ccd39ed1a697e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          custogray_full.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\custogray_full.png
                          • Size 313B
                          • SHA256 a7cd964345c3d15840b88fd9bc88f0d0c34a18edbf1ce39359af4582d1d7da45
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\preview.png
                          • Size 136B
                          • SHA256 55a236ad63d00d665b86ff7f91f2076226d5ed62b9d9e8f835f7cb998556545f
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\custogray\wallpaper.json
                          • Size 233B
                          • SHA256 4cd690fb8ed5cd733a9c84d80d20d173496617e8dde6fca19e8a430517349ed5
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          dark_preview.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\dark.title\dark_preview.jpg
                          • Size 1KB
                          • SHA256 4373e988c7f36efe867c89745469f502ba549ccd68b73d3000cb7231413c4169
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          dark_static.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\dark.title\dark_static.jpg
                          • Size 1.8MB
                          • SHA256 632435cf4acd1463f0fa2ea2d170347050e154b2a53e35d33ed6c0f0a29ef7e0
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          fir_tree_preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\fir_tree\fir_tree_preview.png
                          • Size 8KB
                          • SHA256 4c2b561cf301d9e98383d084a200deb7555ec47a92772a94453d3d8d1de04080
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\fir_tree\wallpaper.json
                          • Size 384B
                          • SHA256 2cc83bc391587b7fe5ddd387506c3f51840b806f547d203ccd90487753b782f1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          flowers_preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\flowers\flowers_preview.png
                          • Size 9KB
                          • SHA256 70a7a65aa6e8279a1a45d93750088965b65ea8e900c5b155089ca119425df003
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\flowers\wallpaper.json
                          • Size 387B
                          • SHA256 70c8d348f7f3385ac638956a23ef467da2769cb48e28df105d10a0561a8acb9e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          huangshan.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan.jpg
                          • Size 211KB
                          • SHA256 713c9e03aac760a11e51b833d7e1c9013759990b9b458363a856fd29ea108eec
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          huangshan.webm
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan.webm
                          • Size 9.6MB
                          • SHA256 05e7170852a344e2f3288fc3b74c84012c3d51fb7ad7d25a15e71b2b574bfd56
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          huangshan_preview.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\huangshan\huangshan_preview.jpg
                          • Size 26KB
                          • SHA256 649c55ccc096cc37dfe534f992b1c7bda68da589258611924d3f6172d0680212
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          light_preview.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\light.title\light_preview.jpg
                          • Size 1KB
                          • SHA256 4fe8b8d7919840d2692b29e80f1c7e9fde7796bfab2c7e90aa480bdad960df76
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          light_static.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\light.title\light_static.jpg
                          • Size 674KB
                          • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\meadow\preview.png
                          • Size 5KB
                          • SHA256 0499c4cc77a64cc89055b3c65d7af8387f5d42399ff2c0a2622eccbd6d481238
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\meadow\wallpaper.json
                          • Size 439B
                          • SHA256 c6581e9f59646e0a51a3194798ec994c7c5c99f28897108838aaf4a4e2bda04a
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\misty_forest\preview.png
                          • Size 5KB
                          • SHA256 ea340a389af6d7ad760dff2016cf4e79488bda1a45d0a415b3cd02a4430c9711
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\misty_forest\wallpaper.json
                          • Size 423B
                          • SHA256 ebe9cadad41bd573f4b5d20e3e251410300b1695dfdf8b1f1f1276d0f0f8fa6d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          mountains_preview.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\mountains_preview.jpg
                          • Size 35KB
                          • SHA256 55074794869b59cd5c693dfa6f6615aea068c2cd50cdae6dd69bd0410661ded8
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\peak\preview.png
                          • Size 5KB
                          • SHA256 f72ea12f6c972edfe3d5a203e1e42cbbaf4985633de419342c2af31363f33dab
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\peak\wallpaper.json
                          • Size 440B
                          • SHA256 e491962b42c3f97649afec56ad4ea78fd49845ceb15f36edddd08d9e43698658
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          raindrops_preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\raindrops\raindrops_preview.png
                          • Size 7KB
                          • SHA256 1e70fc9965939f6011488f81cd325223f17b07ee158a93c32c124602b506aa6b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\raindrops\wallpaper.json
                          • Size 385B
                          • SHA256 bcfea0bebf30ee9744821a61fcce6df0222c1a266e0995b9a8cfbb9156eeeefd
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          sea.webm
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea.webm
                          • Size 12.5MB
                          • SHA256 fa8d0ae53ebdbec47b533239709b7e1514ecb71278907621ca2d288241eb0b13
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          sea_preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea\sea_preview.png
                          • Size 3KB
                          • SHA256 02d8e450f03129936a08b67f3a50ea5d2e79f32c4e8f24d34b464f2cb5e0b086
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea\wallpaper.json
                          • Size 379B
                          • SHA256 c2bb1e5d842c7e5b1b318f6eb7fe1ce24a8209661ddd5a83ab051217ca7c3f65
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          sea_preview.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea_preview.jpg
                          • Size 59KB
                          • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          sea_static.jpg
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\sea_static.jpg
                          • Size 300KB
                          • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\stars\preview.png
                          • Size 6KB
                          • SHA256 4fa185f67eaf3a65b991cea723d11f78de15a6a9a5235848a6456b98a9d7f689
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\stars\wallpaper.json
                          • Size 537B
                          • SHA256 d1bef520c71c7222956d25335e3ba2ea367d19e6c821fb96c8112e5871576294
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          wallpaper.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\web\wallpaper.json
                          • Size 379B
                          • SHA256 7fdddc908bd2f95411dcc4781b615d5da3b5ab68e8e5a0e2b3d2d25d713f0e01
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          web_preview.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.0.2141\resources\wallpapers\web\web_preview.png
                          • Size 8KB
                          • SHA256 0bbf72a3c021393192134893777ecb305717ccef81b232961ca97ae4991d9ba8
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          599cbc12-5cce-46f7-95da-b32e0d9f861f.tmp
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\599cbc12-5cce-46f7-95da-b32e0d9f861f.tmp
                          • Size 235KB
                          • SHA256 67dad4317e1a30bcb919b21d618738e7436b649a7d0663f4beb58226a11e3b2f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          settings.dat
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad\settings.dat
                          • Size 48B
                          • SHA256 72c58fc50502130d5146fe698d10861145bcdb54ce3ffc8031646110018a9c94
                          • MD5 SHA1 SHA512
                          Submit Download

                          f_000006
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000006
                          • Size 40KB
                          • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          f_000007
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000007
                          • Size 48KB
                          • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          SCT Auditing Pending Reports
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\SCT Auditing Pending Reports
                          • Size 2B
                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                          • MD5 SHA1 SHA512
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                          • Size 13KB
                          • SHA256 57ebf7c62ad8925ff038a7a544f2c5d4ac86845059c106473abd01e97e2bb725
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                          • Size 17KB
                          • SHA256 f0b334c29a539e4193c2c8b029dd21e43ed21209b973e9e11432369d5c2dc948
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                          • Size 14KB
                          • SHA256 86652681bd572e51d8d2f38d657ca91256199eb42e7c6d425ff28ebc8d416dc5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                          • Size 9KB
                          • SHA256 ed9aa422761499d1380d8649aedc8f700a6ad08cca78f5abbb02f84bc2de310f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences~RFe59a7df.TMP
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe59a7df.TMP
                          • Size 5KB
                          • SHA256 23ef0d4d2cf740a2537911a82ba41edca39397b3a1bc66181f46b568d972f010
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Secure Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                          • Size 15KB
                          • SHA256 7cece38b58c3ffd09cdf5ef11888c6a3052e48fe531b48cff1a482cce9fb0cc9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Secure Preferences
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                          • Size 15KB
                          • SHA256 eaf3cdeaf3b26dd30527c472a54a15937602164db428130dc3c5e53d5a358cda
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Secure Preferences~RFe59a8f8.TMP
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe59a8f8.TMP
                          • Size 8KB
                          • SHA256 6aa5b0405d05101caa0169b10728e64f550977695f8b38abcac7f8168dcc65dc
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          CURRENT
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Site Characteristics Database\CURRENT
                          • Size 16B
                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                          • MD5 SHA1 SHA512
                          Submit Download

                          058060ba448ded6b_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\058060ba448ded6b_0
                          • Size 11KB
                          • SHA256 b5ea6a007a70063849fe77fe1bed1d6a8f6ecc8b72fdb4e60eed882273aa65d5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          08e93dfa8f5f29ce_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\08e93dfa8f5f29ce_0
                          • Size 2KB
                          • SHA256 32d92699637360e0e25634604f0027516d369fae8b00e0802e64b6b2e70e93e7
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          0e66ae940b1388e9_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\0e66ae940b1388e9_0
                          • Size 2KB
                          • SHA256 f12a9b06aa3a4c6cdadf1aa41d0f233bd49343c870f52fa49c2bd70269bea8ad
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          2a9877b782e7616c_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\2a9877b782e7616c_0
                          • Size 42KB
                          • SHA256 2386e27ef6cc2a0dfe26433c28d200a018bece90d6ec8ac5c60016f72ade8fc5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          326b3dfe88d978d3_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\326b3dfe88d978d3_0
                          • Size 3KB
                          • SHA256 25e12c686a61b0a5bf6fed8ad572c34655d6adb4e27e844363664f246d3d36d6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          328f28cfa3c26dcd_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\328f28cfa3c26dcd_0
                          • Size 594B
                          • SHA256 ac0a4780f0b9921dce6d34fd78f013d03839548154455597a969cacfb76b03da
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          3cc6acf275cc5ece_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\3cc6acf275cc5ece_0
                          • Size 2KB
                          • SHA256 be4ac3e3d47dd91e4e709c828957d61b6b4abd11ce656e48a90b7935476d5977
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          45d20d0e83ad425b_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\45d20d0e83ad425b_0
                          • Size 20KB
                          • SHA256 34b891a82784ee04b6e04277d06c8ada9c3a26606bb6ddd2c195c4367c375b37
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          8974b9206743c9a5_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\8974b9206743c9a5_0
                          • Size 1KB
                          • SHA256 03380bae4d34e82401e8b7e276504b76f102abce60867ab1c0279ebd5838beef
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          8cd89c4f91987d97_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\8cd89c4f91987d97_0
                          • Size 737B
                          • SHA256 bf1c9b75c496925a5a294c2517db5c66233b06d9100a74198d95159dbf6de380
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ae930e26c0201391_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\ae930e26c0201391_0
                          • Size 31KB
                          • SHA256 1ecc6b7aa251191e233532f7d3d2aa15069e88fe4429a868fc3806f1d6fe0e5d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          b1bd6b6b078bc035_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\b1bd6b6b078bc035_0
                          • Size 27KB
                          • SHA256 f3c4289e37ac526c62192b518d41c0e4cbb3126ea17c80ad39f7fefe98662c6d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          b3f0dc54e2b61fc9_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\b3f0dc54e2b61fc9_0
                          • Size 1KB
                          • SHA256 2f3def8a2e06a6f245aecef2ea9616a6f95439abc86d09b1d500d9230a997c5c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          b94b5ea4b30ac588_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\b94b5ea4b30ac588_0
                          • Size 29KB
                          • SHA256 a0b9a8ecbb4da5307df5f27a25dc293e9747b6c520c0c5adb357005e11d537eb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          bd94c4a078cc79b8_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\bd94c4a078cc79b8_0
                          • Size 1KB
                          • SHA256 a3b54a9f766c881934f1eff5e1ad34fec018ba323b2c8224ae33d71ffdc9baec
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          c8a82016ba4aa56d_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\c8a82016ba4aa56d_0
                          • Size 640B
                          • SHA256 7288bea1b112e34f11d905f496aa8a79395c9752a0363459998d96053bf1fd74
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          cd4004d6793712fa_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\cd4004d6793712fa_0
                          • Size 295KB
                          • SHA256 e6e27edffbd4839b7de87517f17a70ce0c51b1d06a962264db96778a259cff0a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          e55ea6df8a5572d9_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\e55ea6df8a5572d9_0
                          • Size 1.0MB
                          • SHA256 a7f49f75c5faa02a49721d61da871be383584428d62dd541e6fd474c0e24264b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          e7d083353a620397_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\e7d083353a620397_0
                          • Size 789B
                          • SHA256 2d94b8125c2438115453503528d258e10d9e3353fef49bf4595683e3f09bd957
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          e9c2d8ed4b6db546_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\e9c2d8ed4b6db546_0
                          • Size 619B
                          • SHA256 658bedb6c575580ea48847a4a5d0ee418825a7d8c5c96ba4c62f6d00a2183236
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          f26868f0d4afa00a_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\f26868f0d4afa00a_0
                          • Size 1KB
                          • SHA256 a6a411ef31bc0406d4eb2f110ca7229e73667548820e4efed0051bb449254c27
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          f51d5af08878d17b_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\f51d5af08878d17b_0
                          • Size 6KB
                          • SHA256 af9e2d2288543e6a658513996ca44003d6a726dcf5a73364f8a1336b2a387343
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          f55f00a9a3efca75_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\f55f00a9a3efca75_0
                          • Size 556B
                          • SHA256 9a173f80102eebcf872d207cf9469192d76dba471bb3a854380f6c5ea81a2a2e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          f7184e118a2705af_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\f7184e118a2705af_0
                          • Size 30KB
                          • SHA256 4c9b53f471c44bc628e10b47b1144029581e71d3fc8b9e4034a9905154e894c6
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          fd41ca2a883063a6_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\fd41ca2a883063a6_0
                          • Size 9KB
                          • SHA256 10173664abb0e0b6a578200f4ed9aa89d32ce8293e2fa0df379f23f27c29b1d7
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          fd7f6b854deb6dae_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\fd7f6b854deb6dae_0
                          • Size 1KB
                          • SHA256 c27d48840b2a12a5e9fb54350e8993b7a6a7bcc0b6b2953cbbf17aa8ce8a4183
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          fef132170d47887d_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\fef132170d47887d_0
                          • Size 10KB
                          • SHA256 52f34f2c0820f300dacdacb3724f1a7943cb1acfc60878831cf9c21eb841f5b1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          index
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\index
                          • Size 24B
                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                          • MD5 SHA1 SHA512
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\index-dir\the-real-index
                          • Size 5KB
                          • SHA256 ecf954a3b423f0e55948a5fda59ab4d2ccab6a95a8abaf1a1742bf9e2d7792da
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\index-dir\the-real-index
                          • Size 5KB
                          • SHA256 fc6cb946b610d5ba1fe349a7226fbde821e56d4527be3d16d67d62087b8bd068
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          the-real-index~RFe5a321d.TMP
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\bf7d16ff-236d-4704-baf3-715aafdcd0ae\index-dir\the-real-index~RFe5a321d.TMP
                          • Size 5KB
                          • SHA256 594ae101e21815d8c3d72f2d9f203c3160b399b39279f42c32a8e93eb711fceb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          32.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\32.png
                          • Size 945B
                          • SHA256 e5a96d5629ea34804a4a32831e8bc009ace619ec2212f39e8a9016e8d46828cf
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          48.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Icons\48.png
                          • Size 1KB
                          • SHA256 eb059e050755973503570f847a1919b4fb6943c5ed2b697c82f9feca5c5b8085
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          32.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\32.png
                          • Size 1KB
                          • SHA256 1bde2abef411c44e842a39bae58279b17167d6082202831f18aaf5f0150c7994
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          48.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\48.png
                          • Size 2KB
                          • SHA256 fcc94342dd2083912720efb31d568b8247e2a7e73432c8984be2e54739e25006
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          128.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4984_1912948077\Trusted Icons\Icons\128.png
                          • Size 9KB
                          • SHA256 371fd6e312b931971cb05dfc65a77f692a3537003d839354f6cea63dc5c7007b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          256.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4984_1912948077\Trusted Icons\Icons\256.png
                          • Size 7KB
                          • SHA256 ff068f5b44c89bdf2b33d3d2f70617fded8a7bbf898aa17afdfd7bc3c11c7b98
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          64.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4984_1912948077\Trusted Icons\Icons\64.png
                          • Size 4KB
                          • SHA256 62b1ad1311a5f5983f1e21547dd29ff7a2a33bbeb0b55a69c3d950f214810c45
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          96.png
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir4984_1912948077\Trusted Icons\Icons\96.png
                          • Size 6KB
                          • SHA256 bf8699aa97e9f37e8302b25324cc2868f63809f7fecde663fe8bc5e8c33a0ce4
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          MANIFEST-000001
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
                          • Size 41B
                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                          • MD5 SHA1 SHA512
                          Submit Download

                          turboapp_db.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                          • Size 55KB
                          • SHA256 c8dec861521286e9b55778192b1123b79d111009a60d17a6143332133abca352
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          turboapp_db.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                          • Size 55KB
                          • SHA256 eea979d9074829b4ed6a912ffa475b45cdab340e9478a2f96f50b3b755fe9a45
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          turboapp_db.json~RFe59aa6f.TMP
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json~RFe59aa6f.TMP
                          • Size 34KB
                          • SHA256 291b8052452db82601ec32b753853ebdc966f7c6fbf6e847d44568b18818c714
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          data_0
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\GrShaderCache\data_0
                          • Size 8KB
                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_1
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\GrShaderCache\data_1
                          • Size 264KB
                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_2
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\GrShaderCache\data_2
                          • Size 8KB
                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_3
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\GrShaderCache\data_3
                          • Size 8KB
                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          Local State
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                          • Size 453KB
                          • SHA256 8e23bb8a86e8ab36798aa18aa76c6e68cbc21d665c997dec31792ffd8e0a765d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                          • Size 6KB
                          • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                          • Size 18.9MB
                          • SHA256 92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          metadata.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                          • Size 236B
                          • SHA256 6bacb626526a3b5291d1717b242729d47d1e8646cd2947d09ce3b9e72c73dfa6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          metadata.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                          • Size 13B
                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                          • MD5 SHA1 SHA512
                          Submit Download

                          verified_contents.json
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\_metadata\yandex\verified_contents.json
                          • Size 990B
                          • SHA256 128ee9930635d572ac94cef6a2b3b6ae65fdfef5ddc54c6c100e2dac13c7d0dc
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          script
                          • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\script
                          • Size 4KB
                          • SHA256 8b44c53ea53b3ff1465263dec2380c68e88e4964984dbdc1497ff2aeedb010d6
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Яндекс Браузер с Алисой AI.lnk
                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk
                          • Size 2KB
                          • SHA256 2636d08281f6a302b7cbc8eea9266276ed12107782a7f42626bf9fe7404fa370
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          d3dcompiler_47.dll
                          • Path C:\Users\Admin\AppData\Roaming\Telegram Desktop\modules\x64\d3d\d3dcompiler_47.dll
                          • Size 4.7MB
                          • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          ui
                          • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                          • Size 38B
                          • SHA256 b41cd847b585d47df1a1a17c9b9a14d19fce6d767ba9a54ce665af4026500ff8
                          • MD5 SHA1 SHA512
                          Submit Download

                          Telegram.lnk
                          • Path C:\Users\Admin\Desktop\Telegram.lnk
                          • Size 1KB
                          • SHA256 37283f4d0cffd47a34fa926158d887db1aa24b8eb0c8cdcdf48b2faa3c6c0ca6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4984_1377820819\manifest.json
                          • Size 1001B
                          • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4984_1452922395\manifest.json
                          • Size 159B
                          • SHA256 4a8c3b43a7ff3147ac5b305770ac0ac90ab4150a5e5132c896ae90f34fea51e2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          service_update.exe
                          • Path C:\Windows\SystemTemp\sdwra_4604_377412435\service_update.exe
                          • Size 4.7MB
                          • SHA256 05bacd4e46a8261594dc3b81a452748d9065c1d0bf21611f1c2b09a51bbec49b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex_browser_installer.log
                          • Path C:\Windows\SystemTemp\yandex_browser_installer.log
                          • Size 5KB
                          • SHA256 2ed06ea0f2ebc5ff751aa2da51ef0b33722af8d81dfd83a7ca9d498b6faa0211
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex_browser_installer.log
                          • Path C:\Windows\SystemTemp\yandex_browser_installer.log
                          • Size 25KB
                          • SHA256 6b2d647b464c6f8d010f02e6fdd6d48350734fbce1085724e58d23c7fd78f8a9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex_browser_service_update.log
                          • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                          • Size 711B
                          • SHA256 a974f5b2cecb143596a50c444944284d696e3550d7700db0070a43c06a977f8f
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          yandex_browser_service_update.log
                          • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                          • Size 2KB
                          • SHA256 f019c36dece30cb689c57aaf2b2e27a653aa86bd8e6f488d133102379733332b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          yandex_browser_service_update.log
                          • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                          • Size 3KB
                          • SHA256 d0869b8c2a600f1f24c6a16c0f99fefdd888780a9c8efe837ff79b8b998f65d4
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          yandex_browser_service_update.log
                          • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                          • Size 4KB
                          • SHA256 ae245829ccb669f5d883b0a4bba26695cc2ad728ca098ca716ee6c1174e3e01a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          yandex_browser_service_update.log
                          • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                          • Size 6KB
                          • SHA256 f791b122ffa9354406abc0b2f099023ebbbe96b5640e554613509e9db59b3a43
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          memory/328-1005-0x0000024E94F00000-0x0000024E94F31000-memory.dmp
                          Download

                          memory/440-538-0x0000024345260000-0x0000024345291000-memory.dmp
                          Download

                          memory/1208-10-0x0000000000360000-0x0000000000438000-memory.dmp
                          Download

                          memory/1208-18-0x0000000000360000-0x0000000000438000-memory.dmp
                          Download

                          memory/1208-50-0x0000000000360000-0x0000000000438000-memory.dmp
                          Download

                          memory/1796-2681-0x0000021EC83C0000-0x0000021EC83F1000-memory.dmp
                          Download

                          memory/2032-138-0x0000026B51A10000-0x0000026B51A22000-memory.dmp
                          Download

                          memory/2032-137-0x0000026B4F730000-0x0000026B4F761000-memory.dmp
                          Download

                          memory/2088-2818-0x0000015C17A90000-0x0000015C17AC1000-memory.dmp
                          Download

                          memory/2404-2346-0x0000023F4C9D0000-0x0000023F4CA01000-memory.dmp
                          Download

                          memory/2404-1021-0x00007FFF81660000-0x00007FFF81661000-memory.dmp
                          Download

                          memory/2700-962-0x00000263080A0000-0x00000263080D1000-memory.dmp
                          Download

                          memory/2700-504-0x00000263080A0000-0x00000263080D1000-memory.dmp
                          Download

                          memory/3020-22-0x0000000000710000-0x0000000000A6F000-memory.dmp
                          Download

                          memory/3020-24-0x0000000000710000-0x0000000000A6F000-memory.dmp
                          Download

                          memory/3020-48-0x0000000000710000-0x0000000000A6F000-memory.dmp
                          Download

                          memory/3020-49-0x0000000000710000-0x0000000000A6F000-memory.dmp
                          Download

                          memory/3020-20-0x0000000003150000-0x0000000003151000-memory.dmp
                          Download

                          memory/3020-19-0x0000000000710000-0x0000000000A6F000-memory.dmp
                          Download

                          memory/3020-16-0x0000000003150000-0x0000000003151000-memory.dmp
                          Download

                          memory/3024-2730-0x0000024A09B00000-0x0000024A09B31000-memory.dmp
                          Download

                          memory/3172-2350-0x000001AFDFC90000-0x000001AFDFCC1000-memory.dmp
                          Download

                          memory/3300-562-0x0000013597470000-0x00000135974A1000-memory.dmp
                          Download

                          memory/3460-2793-0x000001B2A9550000-0x000001B2A9581000-memory.dmp
                          Download

                          memory/3460-2286-0x000001EE146B0000-0x000001EE146E1000-memory.dmp
                          Download

                          memory/3460-2162-0x00007FFF83320000-0x00007FFF83321000-memory.dmp
                          Download

                          memory/3460-2161-0x00007FFF83090000-0x00007FFF83091000-memory.dmp
                          Download

                          memory/3940-2331-0x000001EC0AA10000-0x000001EC0AA41000-memory.dmp
                          Download

                          memory/4000-506-0x000002F375E80000-0x000002F375EB1000-memory.dmp
                          Download

                          memory/4048-2719-0x000001FC041D0000-0x000001FC04201000-memory.dmp
                          Download

                          memory/4116-2327-0x000002351C4A0000-0x000002351C4AC000-memory.dmp
                          Download

                          memory/4116-2328-0x000002351CA20000-0x000002351CA32000-memory.dmp
                          Download

                          memory/4368-790-0x000002DFD4B50000-0x000002DFD4B81000-memory.dmp
                          Download

                          memory/4412-2325-0x000001AD42360000-0x000001AD42391000-memory.dmp
                          Download

                          memory/4604-505-0x0000015D613C0000-0x0000015D613F1000-memory.dmp
                          Download

                          memory/4604-960-0x0000015D613C0000-0x0000015D613F1000-memory.dmp
                          Download

                          memory/4984-2330-0x0000024304B20000-0x0000024304B30000-memory.dmp
                          Download

                          memory/4984-2329-0x00000243708C0000-0x00000243708F1000-memory.dmp
                          Download

                          memory/5384-574-0x000001DFF5640000-0x000001DFF5671000-memory.dmp
                          Download

                          memory/5560-2345-0x0000017E8E0A0000-0x0000017E8E0D1000-memory.dmp
                          Download

                          memory/5576-2348-0x000001FF9B150000-0x000001FF9B181000-memory.dmp
                          Download

                          memory/5792-2347-0x000001BB1E3E0000-0x000001BB1E411000-memory.dmp
                          Download

                          memory/5848-352-0x0000000010E20000-0x0000000010E39000-memory.dmp
                          Download

                          memory/5848-998-0x00000000111E0000-0x0000000011202000-memory.dmp
                          Download

                          memory/5848-999-0x0000000011210000-0x0000000011230000-memory.dmp
                          Download

                          memory/5848-996-0x0000000010C70000-0x0000000010CC1000-memory.dmp
                          Download

                          memory/5848-351-0x0000000010C70000-0x0000000010CC1000-memory.dmp
                          Download

                          memory/5848-847-0x0000000010E20000-0x0000000010E39000-memory.dmp
                          Download

                          memory/5848-997-0x0000000010E20000-0x0000000010E39000-memory.dmp
                          Download

                          memory/5848-848-0x00000000111E0000-0x0000000011202000-memory.dmp
                          Download

                          memory/5848-849-0x0000000011210000-0x0000000011230000-memory.dmp
                          Download

                          memory/6024-136-0x00000000036B0000-0x0000000003701000-memory.dmp
                          Download

                          memory/6024-1003-0x00000000036B0000-0x0000000003701000-memory.dmp
                          Download

                          memory/7252-2705-0x000002AF62FD0000-0x000002AF63001000-memory.dmp
                          Download

                          memory/7488-2691-0x000002B53A920000-0x000002B53A951000-memory.dmp
                          Download

                          memory/7976-2413-0x000001B195620000-0x000001B195651000-memory.dmp
                          Download

                          memory/7988-2706-0x000001BB7A960000-0x000001BB7A991000-memory.dmp
                          Download

                          memory/8256-2707-0x0000019D841D0000-0x0000019D84201000-memory.dmp
                          Download

                          memory/8764-2791-0x0000024A83F20000-0x0000024A83F51000-memory.dmp
                          Download

                          memory/8832-2363-0x000001DB55C20000-0x000001DB55C51000-memory.dmp
                          Download

                          memory/8952-2779-0x0000028680CF0000-0x0000028680D21000-memory.dmp
                          Download

                          memory/9176-2792-0x000002D75BF50000-0x000002D75BF81000-memory.dmp
                          Download