Overview

overview

8

Static

static

3

2026-05-11...er.exe

windows10-2004-x64

8

2026-05-11...er.exe

windows11-21h2-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    11/05/2026, 11:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-05-11_9a03f8fcb0899d2aa138aa038be67e1b_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
  • Size 225KB
  • Sample260511-m98cksbv7p
  • SHA256 2bece3faa5438344e64ace5c1221c2daebf38a9fcba925b9d327d3b82943dbfe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistencespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 3 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 11 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Modifies data under HKEY_USERS 4 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 32 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-11_9a03f8fcb0899d2aa138aa038be67e1b_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-11_9a03f8fcb0899d2aa138aa038be67e1b_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe"
    1⤵
    • Downloads MZ/PE file
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:4412
    • C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe" /passive /msicl "VID=347 YABROWSER=y YAHOMEPAGE=y YAQSEARCH=y "
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3392
    • C:\Users\Admin\AppData\Local\Temp\2026-05-11_9a03f8fcb0899d2aa138aa038be67e1b_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
      C:\Users\Admin\AppData\Local\Temp\2026-05-11_9a03f8fcb0899d2aa138aa038be67e1b_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe --stat dwnldr/p=1095461/cnt=0/dt=1/ct=1/rt=0 --dh 2372 --st 1778497865
      2⤵
      • System Location Discovery: System Language Discovery
      PID:384
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4328
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding F83B250FD7BCCF521B38584009DCD2B7
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2444
      • C:\Users\Admin\AppData\Local\Temp\1E10762F-ED47-418E-AC23-2489A791A3EC\lite_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\1E10762F-ED47-418E-AC23-2489A791A3EC\lite_installer.exe" --use-user-default-locale --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --YABROWSER
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        PID:1904
      • C:\Users\Admin\AppData\Local\Temp\B444CFB7-4B06-4BA6-8261-2E5EB6F4D290\seederexe.exe
        "C:\Users\Admin\AppData\Local\Temp\B444CFB7-4B06-4BA6-8261-2E5EB6F4D290\seederexe.exe" "--yqs=y" "--yhp=y" "--ilight=" "--oem=" "--nopin=n" "--pin_custom=n" "--pin_desktop=n" "--pin_taskbar=y" "--locale=us" "--browser=y" "--browser_default=" "--loglevel=trace" "--ess=" "--clids=C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml" "--sender=C:\Users\Admin\AppData\Local\Temp\5970CC00-6C5F-4027-A254-411DB81B7A60\sender.exe" "--is_elevated=yes" "--ui_level=2" "--good_token=x" "--no_opera=n"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:3956
        • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
          C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:9100
          • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
            C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO" /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            PID:8780
        • C:\Users\Admin\AppData\Local\Temp\5970CC00-6C5F-4027-A254-411DB81B7A60\sender.exe
          C:\Users\Admin\AppData\Local\Temp\5970CC00-6C5F-4027-A254-411DB81B7A60\sender.exe --send "/status.xml?clid=14237117-347&uuid=53f6fec4-39f7-478f-bedd-e8b0a8570875&vnt=Windows 11x64&file-no=8%0A10%0A11%0A12%0A13%0A15%0A36%0A40%0A42%0A45%0A57%0A61%0A102%0A103%0A111%0A123%0A124%0A125%0A"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:8880
  • C:\Users\Admin\AppData\Local\Temp\yb1EED.exe
    "C:\Users\Admin\AppData\Local\Temp\yb1EED.exe" --job-name=yBrowserDownloader-07282475-3FE6-4440-96B7-10453CE4CC82 --send-statistics --local-path=C:\Users\Admin\AppData\Local\Temp\yb1EED.exe --YABROWSER --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-347&ui={53f6fec4-39f7-478f-bedd-e8b0a8570875} --use-user-default-locale
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:9068
    • C:\Users\Admin\AppData\Local\Temp\yb29DA.tmp
      "C:\Users\Admin\AppData\Local\Temp\yb29DA.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\e5ffcb8b-dec2-4c7d-96b9-7328dfa2604f.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=507186858 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-07282475-3FE6-4440-96B7-10453CE4CC82 --local-path="C:\Users\Admin\AppData\Local\Temp\yb1EED.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-347&ui={53f6fec4-39f7-478f-bedd-e8b0a8570875} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\60873bc2-0cbb-473c-9fba-f971610f0c91.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:5364
      • C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\e5ffcb8b-dec2-4c7d-96b9-7328dfa2604f.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=507186858 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-07282475-3FE6-4440-96B7-10453CE4CC82 --local-path="C:\Users\Admin\AppData\Local\Temp\yb1EED.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-347&ui={53f6fec4-39f7-478f-bedd-e8b0a8570875} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\60873bc2-0cbb-473c-9fba-f971610f0c91.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        • Suspicious use of WriteProcessMemory
        PID:10288
        • C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\e5ffcb8b-dec2-4c7d-96b9-7328dfa2604f.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=507186858 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-07282475-3FE6-4440-96B7-10453CE4CC82 --local-path="C:\Users\Admin\AppData\Local\Temp\yb1EED.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-347&ui={53f6fec4-39f7-478f-bedd-e8b0a8570875} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\60873bc2-0cbb-473c-9fba-f971610f0c91.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=522858735
          4⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          • System Time Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:10488
          • C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe
            C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=10488 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff63213f970,0x7ff63213f97c,0x7ff63213f988
            5⤵
            • Executes dropped EXE
            PID:10448
          • C:\Windows\SystemTemp\sdwra_10488_2144496257\service_update.exe
            "C:\Windows\SystemTemp\sdwra_10488_2144496257\service_update.exe" --setup
            5⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • Drops file in Windows directory
            • Suspicious use of WriteProcessMemory
            PID:10804
            • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
              "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe" --install
              6⤵
              • Executes dropped EXE
              • Drops file in Windows directory
              PID:10876
          • C:\Windows\SystemTemp\scoped_dir10488_1218088840\explorer.exe
            "C:\Windows\SystemTemp\scoped_dir10488_1218088840\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
            5⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:2304
            • C:\Windows\SystemTemp\scoped_dir10488_1218088840\explorer.exe
              C:\Windows\SystemTemp\scoped_dir10488_1218088840\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=2304 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff6a481f970,0x7ff6a481f97c,0x7ff6a481f988
              6⤵
              • Executes dropped EXE
              PID:1948
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1404
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source10488_196798341\Browser-bin\clids_yandex_second.xml"
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:6864
  • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
    "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe" --run-as-service
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:10832
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=10832 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff771cef250,0x7ff771cef25c,0x7ff771cef268
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      PID:10952
    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe" --update-scheduler
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      • Suspicious use of WriteProcessMemory
      PID:11032
      • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
        "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe" --update-background-scheduler
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:11108
  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=507186858
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Adds Run key to start application
    • Drops file in Windows directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6836
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=6836 --annotation=metrics_client_id=5a50ae2bcd6544c2b5515d00fb12adb5 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffe7d58bbf8,0x7ffe7d58bc04,0x7ffe7d58bc10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6764
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --gpu-process-kind=sandboxed --metrics-shmem-handle=1960,i,11229225965042580266,14847586586070031098,262144 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2188 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7256
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=2000,i,8077528885689292017,3119335220840692509,262144 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2232 /prefetch:6
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7264
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2580,i,7543938414202752478,4398810852903793659,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2568 --brver=26.4.1.1026 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:5620
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3156,i,8469429622852558900,13091505776025357358,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3280 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7188
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=3108,i,12981928153614295069,5905335500401427398,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3260 --brver=26.4.1.1026 /prefetch:12
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7176
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2760,i,6223982176739264957,9997664496258597448,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3240 --brver=26.4.1.1026 /prefetch:13
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:7448
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4480,i,12934208144023120304,9208742685999490460,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4500 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:3912
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=5028,i,12840110887805543469,13724437972763545085,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4896 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Windows directory
      PID:8400
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5208,i,10219666967502450278,4006114850183023670,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5224 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:8488
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5088,i,11994578202729281688,17485762606262617030,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5384 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3736
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=5572,i,12304554943648460837,11569751975447445742,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5544 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:9108
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4520,i,2469619776032048184,16241393050451997751,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4644 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:8880
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5860,i,14363818109424434480,13784511990734982729,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5492 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:9380
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5984,i,12335426057611269794,5587241679875241210,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5996 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Time Discovery
      PID:10032
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7100,i,4356532678292729527,4665538501722706233,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=7104 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:9804
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7212,i,8527774050277331032,10973970681852781309,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7224 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:10144
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7384,i,6731211184838433126,4686964941741602366,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7400 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10184
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7232,i,2310825718623688353,9059811191016563996,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7368 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:10200
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7376,i,4726718555800856853,13195447451737552827,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7180 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:10232
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7360,i,6846245316665301778,9979774478257880686,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7692 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:10236
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7944,i,2893864984201038303,16425935767139790004,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7956 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5340
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8104,i,8253867782320016127,2189218216421416749,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8116 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5360
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7676,i,9858146899973655031,2514164927800698529,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=8260 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:5372
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8124,i,11255342600455371192,11610737537436122778,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8404 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10264
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8412,i,12565929779101735067,5353951222378853921,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8544 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10256
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8692,i,1757311843866516069,8524371303084874198,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8704 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10276
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8868,i,16352477009218387637,5978344485880320306,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8688 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10280
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8856,i,6511313109870406507,5639520632196668691,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8840 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6748
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7092,i,1509884155397026732,15470460242587726192,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9056 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:996
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9044,i,12719630852473512708,9660144902695343204,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9284 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10712
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9088,i,2115155154018583159,11322738076318194711,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9324 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:4008
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9128,i,14685051388444017047,606741331632665254,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9384 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:936
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9116,i,6085107440547618631,5382764845017785347,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9364 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:6788
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9104,i,18121171588196648600,14492463204362971162,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9344 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:2056
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9024,i,14987187779999375042,11549894180289331338,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9304 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:4012
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10232,i,9790441299715507095,3155908514362726307,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10244 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10728
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10252,i,10132859777644073869,6713196841233539183,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10388 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:4852
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10396,i,1572860875736281502,8268177073288520621,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10532 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:5908
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10556,i,17148010128969535953,16393449854848649439,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10684 --brver=26.4.1.1026 /prefetch:14
      2⤵
      • Executes dropped EXE
      PID:10752
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10856,i,10149126575550558602,17408304062799573474,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10868 --brver=26.4.1.1026 /prefetch:14
      2⤵
        PID:11184
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=11004,i,10428200025416221158,6862039940224912565,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11024 --brver=26.4.1.1026 /prefetch:14
        2⤵
          PID:11204
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=11172,i,902881676434728211,15349984765033297810,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11184 --brver=26.4.1.1026 /prefetch:14
          2⤵
            PID:4500
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=11160,i,1063862649330870946,2309113310516771870,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11332 --brver=26.4.1.1026 /prefetch:14
            2⤵
              PID:1296
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=7044,i,1862747496926095590,12855679161434113683,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11488 --brver=26.4.1.1026 /prefetch:14
              2⤵
                PID:2100
              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7812,i,10946135954518543129,6174632092053447834,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=7804 /prefetch:1
                2⤵
                • System Time Discovery
                PID:2484
              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7264,i,8933205432385896289,828302720488380390,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7328 --brver=26.4.1.1026 /prefetch:14
                2⤵
                  PID:6508
                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://brontp-pre.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7288,i,14015566044833303957,1291123673167645318,2097152 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7824 /prefetch:1
                  2⤵
                  • System Time Discovery
                  PID:6448
                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7272,i,9914014381815431382,11435966857526678075,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=7760 --brver=26.4.1.1026 /prefetch:14
                  2⤵
                    PID:5596
                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=11268,i,13007956079244825042,4433187699504981920,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11240 --brver=26.4.1.1026 /prefetch:14
                    2⤵
                      PID:7244
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7724,i,7831741755581864091,3030943099625263691,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11256 --brver=26.4.1.1026 /prefetch:14
                      2⤵
                        PID:5312
                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=1124,i,6372778412398367037,675547029271870430,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=1088 --brver=26.4.1.1026 /prefetch:14
                        2⤵
                          PID:8560
                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=1092,i,1521902515416334624,5514840017983347214,524288 --field-trial-handle=2192,i,14276073975760824045,5598400579308301704,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2208,i,13311493653382689880,10527634839915576989,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11240 --brver=26.4.1.1026 /prefetch:14
                          2⤵
                            PID:8964
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                          1⤵
                            PID:7668
                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --shutdown-if-not-closed-by-system-restart
                            1⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of WriteProcessMemory
                            PID:8520
                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                              C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1778497910 --annotation=last_update_date=1778497910 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=8520 --annotation=metrics_client_id=5a50ae2bcd6544c2b5515d00fb12adb5 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x124,0x128,0x12c,0xa4,0x130,0x7ffe7d58bbf8,0x7ffe7d58bc04,0x7ffe7d58bc10
                              2⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              PID:8504
                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={28895088-85C4-4651-8608-61FCC2C4D476}
                            1⤵
                            • Drops file in Windows directory
                            • Enumerates system info in registry
                            PID:6168
                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                              C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1778497910 --annotation=last_update_date=1778497910 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=6168 --annotation=metrics_client_id=5a50ae2bcd6544c2b5515d00fb12adb5 --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe7d58bbf8,0x7ffe7d58bc04,0x7ffe7d58bc10
                              2⤵
                                PID:6336
                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=install --bits_job_guid={A66BB298-FD7E-48DD-8090-90B35BFFAF8D}
                              1⤵
                              • Checks processor information in registry
                              • Enumerates system info in registry
                              PID:4772
                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1778497910 --annotation=last_update_date=1778497910 --annotation=launches_after_update=2 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4772 --annotation=metrics_client_id=5a50ae2bcd6544c2b5515d00fb12adb5 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe7d58bbf8,0x7ffe7d58bc04,0x7ffe7d58bc10
                                2⤵
                                  PID:4808
                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2132,i,5427780989198609782,5152295416717991191,524288 --field-trial-handle=2332,i,7112184101225708106,11816913553483209562,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2336,i,11440240740722347539,15464489042254697949,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2364 --brver=26.4.1.1026 /prefetch:11
                                  2⤵
                                  • System Time Discovery
                                  PID:4956
                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=d3d11-warp-webgl --gpu-process-kind=sandboxed --metrics-shmem-handle=1956,i,9339827970661963140,8109304177312570037,262144 --field-trial-handle=2332,i,7112184101225708106,11816913553483209562,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2336,i,11440240740722347539,15464489042254697949,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2328 /prefetch:2
                                  2⤵
                                  • Network Service Discovery
                                  PID:7136
                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=dayuse --bits_job_guid={18536DC1-B5B5-489B-A96F-BDAA595D0903}
                                1⤵
                                • Checks processor information in registry
                                • Enumerates system info in registry
                                PID:5928
                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                  C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1778497910 --annotation=last_update_date=1778497910 --annotation=launches_after_update=2 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=5928 --annotation=metrics_client_id=5a50ae2bcd6544c2b5515d00fb12adb5 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.1.1026 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe7d58bbf8,0x7ffe7d58bc04,0x7ffe7d58bc10
                                  2⤵
                                    PID:5724
                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2132,i,15119561894376402904,10168231463637602722,524288 --field-trial-handle=2296,i,6523198478991637710,5664406170664306524,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2300,i,8528999126971124703,10382074677028805106,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2328 --brver=26.4.1.1026 /prefetch:11
                                    2⤵
                                    • System Time Discovery
                                    PID:5888
                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=53f6fec4-39f7-478f-bedd-e8b0a8570875 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=d3d11-warp-webgl --gpu-process-kind=sandboxed --metrics-shmem-handle=1952,i,10022946456264865169,4096397805124241762,262144 --field-trial-handle=2296,i,6523198478991637710,5664406170664306524,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2300,i,8528999126971124703,10382074677028805106,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2292 /prefetch:2
                                    2⤵
                                    • Network Service Discovery
                                    PID:228

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Reconnaissance

                                      Resource Development

                                      Initial Access

                                      Execution

                                      Persistence

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Privilege Escalation

                                      Boot or Logon Autostart Execution

                                      1
                                      T1547

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Defense Evasion

                                      Modify Registry

                                      2
                                      T1112

                                      Subvert Trust Controls

                                      1
                                      T1553

                                      Install Root Certificate

                                      1
                                      T1553.004

                                      Credential Access

                                      Credentials from Password Stores

                                      1
                                      T1555

                                      Credentials from Web Browsers

                                      1
                                      T1555.003

                                      Unsecured Credentials

                                      1
                                      T1552

                                      Credentials In Files

                                      1
                                      T1552.001

                                      Discovery

                                      Browser Information Discovery

                                      1
                                      T1217

                                      Network Service Discovery

                                      1
                                      T1046

                                      Peripheral Device Discovery

                                      1
                                      T1120

                                      Query Registry

                                      5
                                      T1012

                                      System Information Discovery

                                      4
                                      T1082

                                      System Location Discovery

                                      1
                                      T1614

                                      System Language Discovery

                                      1
                                      T1614.001

                                      System Time Discovery

                                      1
                                      T1124

                                      Lateral Movement

                                      Collection

                                      Data from Local System

                                      1
                                      T1005

                                      Command and Control

                                      Exfiltration

                                      Impact

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      e580916.rbs
                                      • Path C:\Config.Msi\e580916.rbs
                                      • Size 912B
                                      • SHA256 4d1ccc1d3773c610e58e01d7933849ad2718f3d23da59e7bed6039bce4564dca
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      service_update.exe
                                      • Path C:\Program Files (x86)\Yandex\YandexBrowser\26.4.1.1026\service_update.exe
                                      • Size 4.7MB
                                      • SHA256 f3a324247971c389c57096d026260b18894ae16a15678a6952732d2bfaae3a93
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Size 1KB
                                      • SHA256 52f00032a92438b31757bf587f9e0e538702d1be53219882771440da889f3857
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                      • Size 1KB
                                      • SHA256 7b24b7dbc242c0d51a6795f7a3f5cb0e165890d1ccbc921c59e1b6a2e4229d1f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                      • Size 1KB
                                      • SHA256 8e634314a231ea9b9e23d56713ab86ac6d0460f27af7ff58d5d2c46c270b521a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                      • Size 1KB
                                      • SHA256 7ebaebed36cad7494c05376db68e77e0a8f28d6219dd3323e1db37ecba680b6d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                      • Size 1KB
                                      • SHA256 5c772287ad50182b844f68ca199ae5801a06d38ddd9b368e901d2332e639a4bf
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Size 1KB
                                      • SHA256 cf310fd1a833187010f8a27c72ef96876bf0cb5beb8b0cd546960ac4822def8d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Size 508B
                                      • SHA256 16ad2ba3a6b1421ba2001c838d5b9193355c2aecf886952c25f22bb220c9d48e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                      • Size 536B
                                      • SHA256 3e394afbea089397d1a91e7700836962a0f779e089f49eac743459edc86d6633
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                      • Size 536B
                                      • SHA256 786ada4bf89107094fac8c40a22fe2cc2be4ad195ee4981edbcc28cbc0968de0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                      • Size 536B
                                      • SHA256 210a04bcda9c4395692edb0761059d4f7ead02748d30a09165d9540ec0b7cb84
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                      • Size 536B
                                      • SHA256 1a4ab2b1f4dc875b4f6b0fa18d033a9ad3669322a9d514f04995be0fdebb1ae6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Size 506B
                                      • SHA256 a185e344a602d614eaa0467fcc44ae84c5f284c3d0b450f15ebcae7de7a3fdeb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      08f8d28f19a72466649e16d41ef4ec37
                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\96276qki.default-release\thumbnails\08f8d28f19a72466649e16d41ef4ec37
                                      • Size 15KB
                                      • SHA256 2435c0376fca765b21d43e897f4baa52daa0958a7015d04103488c606c99d1d3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      lite_installer.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\1E10762F-ED47-418E-AC23-2489A791A3EC\lite_installer.exe
                                      • Size 420KB
                                      • SHA256 985d3c2eb69a9f681c876d7a3d28b53f177ebcde90af9ca9d1d8d8be79b03a31
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      sender.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\5970CC00-6C5F-4027-A254-411DB81B7A60\sender.exe
                                      • Size 260KB
                                      • SHA256 e249d09956aa2ef44db6a3cdab525abb73d01e7ad46bd83984e0d22d71c9dcc6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      YandexPackSetup.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
                                      • Size 10.1MB
                                      • SHA256 dd52062569fba53f9bf8de2bb6fad0eccd6bd997a359827458da46432abec9ae
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      seederexe.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\B444CFB7-4B06-4BA6-8261-2E5EB6F4D290\seederexe.exe
                                      • Size 8.5MB
                                      • SHA256 a2f5780c9d334c42323ae2cf3328227e7d04a5f6983ff862dc73627f1e970431
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      PartnerFile
                                      • Path C:\Users\Admin\AppData\Local\Temp\PartnerFile
                                      • Size 1.2MB
                                      • SHA256 c5ce865e25f6cb35d507505d66cc3dbd8b9780463f6a2b4e3241af3d2edbade1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      BRAND_COMMON
                                      • Path C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\BRAND_COMMON
                                      • Size 25.4MB
                                      • SHA256 8fb1e4b9a4da01aef68983c043464ab18e9446858f6dc6bbfdb94823bceb917c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      brand_yandex
                                      • Path C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\brand_yandex
                                      • Size 2.3MB
                                      • SHA256 6dbdaf1094b6e97370da446fb582bcd38f861783d9d8b83f3bc62901631e6c91
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      setup.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\YB_2B875.tmp\setup.exe
                                      • Size 7.2MB
                                      • SHA256 853a62e80fdab3c408cba7c017f8117ce50245cddc96e8bbb4bf2748f545388a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      YandexSearch00000.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\YandexSearch00000.log
                                      • Size 3KB
                                      • SHA256 651d6d4f5f4e6454c0385f1290f15ea4bc8d038b94007849bc0fb5475102916a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      clids-yasearch.xml
                                      • Path C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml
                                      • Size 730B
                                      • SHA256 7a17aa2f7cf95374a93ceadce4ecb7ca2de2dff3a2249b8a60b5d4dc6a3b6afa
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      lite_installer.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                      • Size 3KB
                                      • SHA256 29226ee24a1634cd4beb1c7ce8bdd3dcb7ad5df550781420d431dc55d100815c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      lite_installer.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                      • Size 5KB
                                      • SHA256 3a91d5f169c363bf515cba8a64d9a72b379a8ee86a8b1a9a656712431cf2bbd6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      master_preferences
                                      • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                                      • Size 542B
                                      • SHA256 0325fd8be2634b3b8fd40c2d7900b7816bc4cc456ed1b708d9b1f0ca1af4853b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      omnija-20261111.zip
                                      • Path C:\Users\Admin\AppData\Local\Temp\omnija-20261111.zip
                                      • Size 45.1MB
                                      • SHA256 7d5072b7fa0880c245cb54a627474b67df7b4f3f33a7ae828b39417f9621eef0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      tmp3956aaaaaa
                                      • Path C:\Users\Admin\AppData\Local\Temp\tmp3956aaaaaa
                                      • Size 2.5MB
                                      • SHA256 287e975633a2af64016f89a81bb264f4cdd3a4cac9017c72d3a5ef0c8e6b7204
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      vendor00000.xml
                                      • Path C:\Users\Admin\AppData\Local\Temp\vendor00000.xml
                                      • Size 529B
                                      • SHA256 682b5e8ff1efc8ca0ce00b921c1e582fc9d9afe962cb818c7d9ae367474e99cd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      yandex_browser_updater.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                                      • Size 5KB
                                      • SHA256 5e2f42cde988b662f009e59c93f81b0448d23034f4a5edd5afe61281fc827b37
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      yb1EED.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\yb1EED.exe
                                      • Size 11.8MB
                                      • SHA256 5911e3bc7705de5f49166b4060c0660f7771541ad30c618cb6a9bd57ff30dd09
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      YandexSearch.msi
                                      • Path C:\Users\Admin\AppData\Local\Temp\{5B964E0E-B9A3-4276-9ED9-4D5A5720747A}\YandexSearch.msi
                                      • Size 9.7MB
                                      • SHA256 edaacbba08d08a0bc897a4c6912dc1750dc120416c3145dd38ec97d6c31291d8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Yandex.exe
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
                                      • Size 395KB
                                      • SHA256 50d73db5c8098789f182bc6fff3d9308c3ad7957286389b5fa3c1438210f3d76
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Yandex.lnk
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                                      • Size 2KB
                                      • SHA256 4b6b2534fab5df42d720672faafc82a0b3b21ba0218406705e116e0065d64914
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      brand_config
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.4.1.1026\brand_config
                                      • Size 6KB
                                      • SHA256 7f0f2883f85acff7355cb1774ce9828a2ec027b87f5b8056f1c4d69ce63e889f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      partner_config
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\26.4.1.1026\partner_config
                                      • Size 341B
                                      • SHA256 82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ru.bdic
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                                      • Size 4.5MB
                                      • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      browser.exe
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                      • Size 5.6MB
                                      • SHA256 07e412c46f47af33c5789431cebdca4d801032646960b45fd55b6800b1cdc218
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      install_state.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\install_state.json
                                      • Size 1KB
                                      • SHA256 2bdb9b5301d5fbdb280d4f410c650d97e8a08c1383679eca5ad5f50c175b3fcb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\Extensions\ghjgbemlcjioaaejhnnmgfpiplgalgcl.json
                                      • Size 119B
                                      • SHA256 20832de8163d5af0a0c8bda863bcd6083df4f92175d856ce527de1dae1f7c433
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      about_logo_en.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\about_logo_en.png
                                      • Size 1KB
                                      • SHA256 c56ae312020aef1916a8a01d5a1fc67ed3b41e5da539c0f26632c904a5e49c62
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      about_logo_en_2x.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\about_logo_en_2x.png
                                      • Size 3KB
                                      • SHA256 fe20d86fd62a4d1ab51531b78231749bd5990c9221eab1e7958be6d6aef292d9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      about_logo_ru.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\about_logo_ru.png
                                      • Size 1KB
                                      • SHA256 1039ea2d254d536410588d30f302e6ab727d633cf08cb409caa5d22718af5e64
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      about_logo_ru_2x.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\about_logo_ru_2x.png
                                      • Size 3KB
                                      • SHA256 5bb0977553ded973c818d43a178e5d9874b24539dacbd7904cd1871e0ba82b23
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      all_zip
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\configs\all_zip
                                      • Size 1.2MB
                                      • SHA256 0ae39789b943636e08abd01243cdd5283784d96e4aff3e861d1d6483bd1fbda9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      easylist.txt
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\easylist\easylist.txt
                                      • Size 620KB
                                      • SHA256 2f317fee439877eaadb1264bd3d1e153c963ef98596a4ccf227592aea12ae76f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\easylist\manifest.json
                                      • Size 68B
                                      • SHA256 77334f6256abddcc254f31854d1b00aa6743e20aadbb9e69187144847099a66b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      brand_settings.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json
                                      • Size 379B
                                      • SHA256 4940847c9b4787e466266f1bb921097abb4269d6d10c0d2f7327fde9f1b032b7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      brand_settings.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json
                                      • Size 316B
                                      • SHA256 de0fbb08708d4be7b9af181ec26f45fccd424e437bc0cfb5cf38f2604f01f7b2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      brand_settings.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json
                                      • Size 246B
                                      • SHA256 114fd03aa5ef1320f6cc586e920031cf5595a0d055218ce30571ff33417806d3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      import-bg.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\import-bg.png
                                      • Size 9KB
                                      • SHA256 7573af31ed2bfcfff97ed2132237db65f05aff36637cd4bdeccdf8ca02cd9038
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dictionary-ru-RU.mrf
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\morphology\dictionary-ru-RU.mrf
                                      • Size 1.1MB
                                      • SHA256 1585b1599418d790da830ef11e8eeceee0cbb038876fe3959cc41858bd501dbc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dictionary-ru-RU.mrf.sig
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\morphology\dictionary-ru-RU.mrf.sig
                                      • Size 256B
                                      • SHA256 151739137bbbdf5f9608a82ec648bdf5d7454a81b86631b53dfc5ad602b207d6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      stop-words-ru-RU.list
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\morphology\stop-words-ru-RU.list
                                      • Size 52B
                                      • SHA256 cbeec72666668a12ab6579ae0f45ccbdbe3d29ee9a862916f8c9793e2cf55552
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      download.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\safebrowsing\download.png
                                      • Size 437B
                                      • SHA256 3129d9eaba1c5f31302c2563ebfa85747eda7a6d3f95602de6b01b34e4369f04
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      sxs.ico
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\sxs.ico
                                      • Size 43KB
                                      • SHA256 ad566a3e6f8524c705844e95a402cdeb4d6eed36c241c183147409a44e97ebcd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      tablo
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\tablo
                                      • Size 617KB
                                      • SHA256 1313aa26cc9f7bd0f2759cfaff9052159975551618cba0a90f29f15c5387cad4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      1-1x.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\1-1x.png
                                      • Size 18KB
                                      • SHA256 a62f9fdf3de1172988e01a989bf7a2344550f2f05a3ac0e6dc0ccd39ed1a697e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      custogray_full.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\custogray\custogray_full.png
                                      • Size 313B
                                      • SHA256 a7cd964345c3d15840b88fd9bc88f0d0c34a18edbf1ce39359af4582d1d7da45
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\custogray\preview.png
                                      • Size 136B
                                      • SHA256 55a236ad63d00d665b86ff7f91f2076226d5ed62b9d9e8f835f7cb998556545f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\custogray\wallpaper.json
                                      • Size 233B
                                      • SHA256 4cd690fb8ed5cd733a9c84d80d20d173496617e8dde6fca19e8a430517349ed5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      dark_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\dark.title\dark_preview.jpg
                                      • Size 1KB
                                      • SHA256 4373e988c7f36efe867c89745469f502ba549ccd68b73d3000cb7231413c4169
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      dark_static.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\dark.title\dark_static.jpg
                                      • Size 1.8MB
                                      • SHA256 632435cf4acd1463f0fa2ea2d170347050e154b2a53e35d33ed6c0f0a29ef7e0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      fir_tree_preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\fir_tree\fir_tree_preview.png
                                      • Size 8KB
                                      • SHA256 4c2b561cf301d9e98383d084a200deb7555ec47a92772a94453d3d8d1de04080
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\fir_tree\wallpaper.json
                                      • Size 384B
                                      • SHA256 2cc83bc391587b7fe5ddd387506c3f51840b806f547d203ccd90487753b782f1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      flowers_preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\flowers\flowers_preview.png
                                      • Size 9KB
                                      • SHA256 70a7a65aa6e8279a1a45d93750088965b65ea8e900c5b155089ca119425df003
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\flowers\wallpaper.json
                                      • Size 387B
                                      • SHA256 70c8d348f7f3385ac638956a23ef467da2769cb48e28df105d10a0561a8acb9e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      huangshan.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\huangshan\huangshan.jpg
                                      • Size 211KB
                                      • SHA256 713c9e03aac760a11e51b833d7e1c9013759990b9b458363a856fd29ea108eec
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      huangshan.webm
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\huangshan\huangshan.webm
                                      • Size 9.6MB
                                      • SHA256 05e7170852a344e2f3288fc3b74c84012c3d51fb7ad7d25a15e71b2b574bfd56
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      huangshan_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\huangshan\huangshan_preview.jpg
                                      • Size 26KB
                                      • SHA256 649c55ccc096cc37dfe534f992b1c7bda68da589258611924d3f6172d0680212
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      light_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\light.title\light_preview.jpg
                                      • Size 1KB
                                      • SHA256 4fe8b8d7919840d2692b29e80f1c7e9fde7796bfab2c7e90aa480bdad960df76
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      light_static.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\light.title\light_static.jpg
                                      • Size 674KB
                                      • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\meadow\preview.png
                                      • Size 5KB
                                      • SHA256 0499c4cc77a64cc89055b3c65d7af8387f5d42399ff2c0a2622eccbd6d481238
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\meadow\wallpaper.json
                                      • Size 439B
                                      • SHA256 c6581e9f59646e0a51a3194798ec994c7c5c99f28897108838aaf4a4e2bda04a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\misty_forest\preview.png
                                      • Size 5KB
                                      • SHA256 ea340a389af6d7ad760dff2016cf4e79488bda1a45d0a415b3cd02a4430c9711
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\misty_forest\wallpaper.json
                                      • Size 423B
                                      • SHA256 ebe9cadad41bd573f4b5d20e3e251410300b1695dfdf8b1f1f1276d0f0f8fa6d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      mountains_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\mountains_preview.jpg
                                      • Size 35KB
                                      • SHA256 55074794869b59cd5c693dfa6f6615aea068c2cd50cdae6dd69bd0410661ded8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\peak\preview.png
                                      • Size 5KB
                                      • SHA256 f72ea12f6c972edfe3d5a203e1e42cbbaf4985633de419342c2af31363f33dab
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\peak\wallpaper.json
                                      • Size 440B
                                      • SHA256 e491962b42c3f97649afec56ad4ea78fd49845ceb15f36edddd08d9e43698658
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      raindrops_preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\raindrops\raindrops_preview.png
                                      • Size 7KB
                                      • SHA256 1e70fc9965939f6011488f81cd325223f17b07ee158a93c32c124602b506aa6b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\raindrops\wallpaper.json
                                      • Size 385B
                                      • SHA256 bcfea0bebf30ee9744821a61fcce6df0222c1a266e0995b9a8cfbb9156eeeefd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      sea_preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\sea\sea_preview.png
                                      • Size 3KB
                                      • SHA256 02d8e450f03129936a08b67f3a50ea5d2e79f32c4e8f24d34b464f2cb5e0b086
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\sea\wallpaper.json
                                      • Size 379B
                                      • SHA256 c2bb1e5d842c7e5b1b318f6eb7fe1ce24a8209661ddd5a83ab051217ca7c3f65
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      sea_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\sea_preview.jpg
                                      • Size 59KB
                                      • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      sea_static.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\sea_static.jpg
                                      • Size 300KB
                                      • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\stars\preview.png
                                      • Size 6KB
                                      • SHA256 4fa185f67eaf3a65b991cea723d11f78de15a6a9a5235848a6456b98a9d7f689
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\stars\wallpaper.json
                                      • Size 537B
                                      • SHA256 d1bef520c71c7222956d25335e3ba2ea367d19e6c821fb96c8112e5871576294
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      wallpaper.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\web\wallpaper.json
                                      • Size 379B
                                      • SHA256 7fdddc908bd2f95411dcc4781b615d5da3b5ab68e8e5a0e2b3d2d25d713f0e01
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      web_preview.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.1.1026\resources\wallpapers\web\web_preview.png
                                      • Size 8KB
                                      • SHA256 0bbf72a3c021393192134893777ecb305717ccef81b232961ca97ae4991d9ba8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad\settings.dat
                                      • Size 48B
                                      • SHA256 41c86173a11a3c0c0e5533946e5f8f99080fc83dfbfa26891e7b2b503721d03e
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      04725ed0-622a-416b-884d-d47a0e878da1.tmp
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\04725ed0-622a-416b-884d-d47a0e878da1.tmp
                                      • Size 147KB
                                      • SHA256 498f795b7c4cf6ac052073514e85626b6fcad000674ac11d17b5b600edecd37a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_000005
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000005
                                      • Size 40KB
                                      • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_000006
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000006
                                      • Size 48KB
                                      • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_000014
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000014
                                      • Size 49KB
                                      • SHA256 71749109108dcaf2c654d92602d94eb6bba92fa59f5d533007254863d5c4ed60
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_00002b
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_00002b
                                      • Size 48KB
                                      • SHA256 18539e5632dbeb12467c472ed06bae43a3f893eae4db6daf11d0485585655e44
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 792B
                                      • SHA256 ee544a6b9aae3af4ec3500e2cc2c44143bde1b3203d9740a3d5530c5364879db
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe593b59.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593b59.TMP
                                      • Size 48B
                                      • SHA256 cc07a1166c4739b4830e63f3f541fea683bb18232b9efeb6cc21048095c32de3
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_0
                                      • Size 8KB
                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_1
                                      • Size 264KB
                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_3
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\DawnWebGPUCache\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\Network Persistent State
                                      • Size 2KB
                                      • SHA256 97085cec3a30cbc708f0c7c248486eb6b5fa0c199a0ac8216420a8743e65c36f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State~RFe59cfc9.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\Network Persistent State~RFe59cfc9.TMP
                                      • Size 59B
                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      SCT Auditing Pending Reports
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\SCT Auditing Pending Reports
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 18KB
                                      • SHA256 e0c32110ffa3b3cd0cbc33a469dffc363d65862fdd71b8929c5b71109edb8094
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 18KB
                                      • SHA256 1289a66234944efa79b83ec8d07b7c380c7303a33380c477a99dc0df00ae886c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 18KB
                                      • SHA256 6aed472aca52b25a86985cf1a2953b7f65951525b296dc352280fbce8f3f0ebc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 13KB
                                      • SHA256 735501d6afca97049d7932d5c27209cb313c78637737c3dfdf49cdf794057ce3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 9KB
                                      • SHA256 42e253a53a0825780c69b2e026d63a5c94afd0beac9228e883a7e4ac2924229e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences~RFe58b9b6.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe58b9b6.TMP
                                      • Size 5KB
                                      • SHA256 7a2f278f6cfdfcdd35744016fe2a8b8af7227e07ae06206cce42ecfdc309d9a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                      • Size 15KB
                                      • SHA256 10e08a1994683414d34cbfe4f0eee5a977002b7a655e0c47e90cbbf512f83e59
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                      • Size 15KB
                                      • SHA256 9575fbf535d532838373ec533eec22c886deee59eebb17bebc2ce1b4ee720f1f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences~RFe58bab0.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe58bab0.TMP
                                      • Size 8KB
                                      • SHA256 61479c215217e94fec177ed0f607c55f1c44cbf76c51c856f536757e6cbbe254
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      CURRENT
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Site Characteristics Database\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\a3d8f132-c100-4f39-a06e-0f768b672d1c\index
                                      • Size 24B
                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\a3d8f132-c100-4f39-a06e-0f768b672d1c\index-dir\the-real-index
                                      • Size 5KB
                                      • SHA256 c87bf46c84b2826012295397129a1702b5d9346a6914a6d67daa0d953c29cf1e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index~RFe5919b8.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\a3d8f132-c100-4f39-a06e-0f768b672d1c\index-dir\the-real-index~RFe5919b8.TMP
                                      • Size 5KB
                                      • SHA256 34881a9ea3c9a20c0d396aa5ad1fe399591ad9e647b897fddb4748e62990eb70
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      32.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\32.png
                                      • Size 1KB
                                      • SHA256 1bde2abef411c44e842a39bae58279b17167d6082202831f18aaf5f0150c7994
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      48.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\48.png
                                      • Size 2KB
                                      • SHA256 fcc94342dd2083912720efb31d568b8247e2a7e73432c8984be2e54739e25006
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      128.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir6836_1347330423\Trusted Icons\Icons\128.png
                                      • Size 9KB
                                      • SHA256 371fd6e312b931971cb05dfc65a77f692a3537003d839354f6cea63dc5c7007b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      256.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir6836_1347330423\Trusted Icons\Icons\256.png
                                      • Size 7KB
                                      • SHA256 ff068f5b44c89bdf2b33d3d2f70617fded8a7bbf898aa17afdfd7bc3c11c7b98
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      64.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir6836_1347330423\Trusted Icons\Icons\64.png
                                      • Size 4KB
                                      • SHA256 62b1ad1311a5f5983f1e21547dd29ff7a2a33bbeb0b55a69c3d950f214810c45
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      96.png
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir6836_1347330423\Trusted Icons\Icons\96.png
                                      • Size 6KB
                                      • SHA256 bf8699aa97e9f37e8302b25324cc2868f63809f7fecde663fe8bc5e8c33a0ce4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      turboapp_db.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                                      • Size 57KB
                                      • SHA256 fa38b6cbe1fdd4408cd681731e64acaa81e636ea1244bee89948d448f6a70f5f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      turboapp_db.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                                      • Size 57KB
                                      • SHA256 e4da1022e0c6cff574c262a0c06e58748f8c3f3884dcb67e2cc442d2ed6f2571
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      turboapp_db.json~RFe58bc08.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json~RFe58bc08.TMP
                                      • Size 35KB
                                      • SHA256 c74fea42ee36daf0fb783fa815fc4a3845786a98e5c38f97e36c355d7bc4a2e4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      verified_contents.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\InternalPromo\24.12.12.0\_metadata\yandex\verified_contents.json
                                      • Size 1KB
                                      • SHA256 7eece2da79c1c6d7333717238b8953a7eb554a891c1a7fae6a001773b3bd2b2a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      master-password.svg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\InternalPromo\24.12.12.0\images\master-password.svg
                                      • Size 8KB
                                      • SHA256 a98b3b44346adf4c2f943fd2494f31cc0b9ade91c7576040826b98d5834652ef
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      passman.svg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\InternalPromo\24.12.12.0\images\passman.svg
                                      • Size 5KB
                                      • SHA256 aff48837d10f9910c4b31d78f451fe1aeb8ceee7f815dd276713b6fd714e358f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      promo_config.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\InternalPromo\24.12.12.0\promo_config.json
                                      • Size 4KB
                                      • SHA256 f374349ccfc79914a71c06a8476c04b22a6793580c4abf92a594dc194195f282
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                      • Size 254KB
                                      • SHA256 77d5ead38becb806eb7e67d88d0e3b45bd27292c084dada4161e5be6e98a4738
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                      • Size 253KB
                                      • SHA256 4500c48c30635b94a3940c01ac5e3e89bb942eb20443ab5a33a99c053c626c9a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Filtering Rules
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Subresource Filter\Unindexed Rules\26.3.18.0\Filtering Rules
                                      • Size 551KB
                                      • SHA256 c4fa39cca738be39593d42cf9d6d7e422de01040652868869ba132b7882b7a6e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • Size 6KB
                                      • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                                      • Size 18.9MB
                                      • SHA256 92ac4503d850d61341c2b89b0ca25ae45a875f85e7ab7018354cef9a0b37bba7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      metadata.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                      • Size 460B
                                      • SHA256 1202727a2fdba118d2c2a91898bce5d29afdae3b1a9b8c3c5740cded379e887c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      metadata.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                      • Size 348B
                                      • SHA256 0cb57516b64b9999d823e11a14ec09b8c1f5759133d70eec63d04abcfc53c8d2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      metadata.json~RFe59fb7d.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json~RFe59fb7d.TMP
                                      • Size 236B
                                      • SHA256 6bacb626526a3b5291d1717b242729d47d1e8646cd2947d09ce3b9e72c73dfa6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      d20cd3d6-6011-441d-8080-e112952e8dec.tmp
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\d20cd3d6-6011-441d-8080-e112952e8dec.tmp
                                      • Size 235KB
                                      • SHA256 e08da6d3f32456a96196aafe5e6e7b535c5cd1b603472d079bca46793c1e85e7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      verified_contents.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\_metadata\yandex\verified_contents.json
                                      • Size 990B
                                      • SHA256 128ee9930635d572ac94cef6a2b3b6ae65fdfef5ddc54c6c100e2dac13c7d0dc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      script
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\google_import_script\25.12.3.0\script
                                      • Size 4KB
                                      • SHA256 8b44c53ea53b3ff1465263dec2380c68e88e4964984dbdc1497ff2aeedb010d6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Яндекс Браузер с Алисой AI.lnk
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс Браузер с Алисой AI.lnk
                                      • Size 2KB
                                      • SHA256 64c8691cabe3988f321859d03026cb9f0205f97aad96f0172fd9593978916709
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Яндекс.website
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс.website
                                      • Size 516B
                                      • SHA256 82d1d25f3fb06c61d658b2e4d5c9d3f302b9d044a77fe968a2c2b2aeb8bc9f3a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      places.sqlite-20260511111111.073434.backup
                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5m20on4l.Admin\places.sqlite-20260511111111.073434.backup
                                      • Size 68KB
                                      • SHA256 b6d278384a3684409a2a86f03e4f52869818ce7dd8b5779876960353f7d35dc1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      clids-yabrowser.xml
                                      • Path C:\Users\Admin\AppData\Roaming\Yandex\clids-yabrowser.xml
                                      • Size 756B
                                      • SHA256 11638129a06f912d41ad71367775a7c6cb268e647f33e4544a3170b955aafa34
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ui
                                      • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                                      • Size 38B
                                      • SHA256 fc147eefee4dceb1115099128c5d5cf194a1fc5bd77210300ac96eb97fe9a302
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      MSIB17.tmp
                                      • Path C:\Windows\Installer\MSIB17.tmp
                                      • Size 181KB
                                      • SHA256 1ad18330acc4f254d8a37ffdf6d14283e1617b1e163ee8d05c876bb41ac6f316
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      MSIB76.tmp
                                      • Path C:\Windows\Installer\MSIB76.tmp
                                      • Size 197KB
                                      • SHA256 c149276c0b4427c1149fc5a85dc42b4c71c027c2b5fcbc73e6e659f7b3a75562
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping6836_2056126783\manifest.json
                                      • Size 1001B
                                      • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping6836_2083483593\manifest.json
                                      • Size 69B
                                      • SHA256 99bc027590d4030f2797abe84a6e44817c83569f320202b52710efffe287f9c7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping6836_27184167\manifest.json
                                      • Size 159B
                                      • SHA256 4a8c3b43a7ff3147ac5b305770ac0ac90ab4150a5e5132c896ae90f34fea51e2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      manifest.json
                                      • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping6836_637290889\manifest.json
                                      • Size 130B
                                      • SHA256 68dc0e38e6f10c3b2d7c2a56fa05621980ad75362f1c03fcc7ff01ccd9c1868d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      yandex_browser_installer.log
                                      • Path C:\Windows\SystemTemp\yandex_browser_installer.log
                                      • Size 6KB
                                      • SHA256 30b1daa5c96e59169acb5dc0be4bb73d0b51dc0083fd475fe4f4c77e88a50f4c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      yandex_browser_service_update.log
                                      • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                      • Size 3KB
                                      • SHA256 37f0dda81e6225e8a5fcf41bae1c501bd7ffbe708006de9083f00740aacad8f9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      yandex_browser_service_update.log
                                      • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                      • Size 4KB
                                      • SHA256 6c9919d41d73ca57c77ef01992d7882fad22235c0a4d352dbf41f264f94d5d9e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      memory/384-1391-0x0000000001490000-0x0000000001552000-memory.dmp
                                      Download

                                      memory/1404-9952-0x0000000000EC0000-0x0000000000F82000-memory.dmp
                                      Download

                                      memory/1904-9168-0x0000000003330000-0x0000000003394000-memory.dmp
                                      Download

                                      memory/2304-9838-0x000002146D680000-0x000002146D689000-memory.dmp
                                      Download

                                      memory/3392-345-0x00000000014F0000-0x00000000015B2000-memory.dmp
                                      Download

                                      memory/3912-10349-0x00007FFE9D9C0000-0x00007FFE9D9C1000-memory.dmp
                                      Download

                                      memory/3912-10346-0x00007FFE9D1F0000-0x00007FFE9D1F1000-memory.dmp
                                      Download

                                      memory/3956-9143-0x00000000015D0000-0x0000000001634000-memory.dmp
                                      Download

                                      memory/3956-9144-0x0000000001700000-0x0000000001718000-memory.dmp
                                      Download

                                      memory/3956-9146-0x0000000001180000-0x0000000001188000-memory.dmp
                                      Download

                                      memory/3956-9145-0x0000000001730000-0x0000000001759000-memory.dmp
                                      Download

                                      memory/4328-9324-0x00000270D1250000-0x00000270D1259000-memory.dmp
                                      Download

                                      memory/4328-9322-0x00000270D0430000-0x00000270D04AB000-memory.dmp
                                      Download

                                      memory/4328-9323-0x00000270D0E80000-0x00000270D0E8C000-memory.dmp
                                      Download

                                      memory/4412-33-0x0000000000D30000-0x0000000000DF2000-memory.dmp
                                      Download

                                      memory/4772-10910-0x000002585B3C0000-0x000002585B3C9000-memory.dmp
                                      Download

                                      memory/4956-10909-0x000001CF77610000-0x000001CF77619000-memory.dmp
                                      Download

                                      memory/5620-10824-0x0000024D69080000-0x0000024D69089000-memory.dmp
                                      Download

                                      memory/5888-11025-0x000001D369340000-0x000001D369349000-memory.dmp
                                      Download

                                      memory/5928-11026-0x0000016580E90000-0x0000016580E99000-memory.dmp
                                      Download

                                      memory/6168-10873-0x0000023ACCE80000-0x0000023ACCE89000-memory.dmp
                                      Download

                                      memory/6836-10790-0x000002CBA9E30000-0x000002CBA9E39000-memory.dmp
                                      Download

                                      memory/6864-9954-0x0000000001470000-0x0000000001532000-memory.dmp
                                      Download

                                      memory/7256-10023-0x00007FFE9BFD0000-0x00007FFE9BFD1000-memory.dmp
                                      Download

                                      memory/8780-9128-0x0000000001810000-0x00000000018D2000-memory.dmp
                                      Download

                                      memory/8880-9148-0x0000000002DA0000-0x0000000002E04000-memory.dmp
                                      Download

                                      memory/9068-10007-0x0000000004310000-0x000000000431B000-memory.dmp
                                      Download

                                      memory/9068-9326-0x0000000004310000-0x000000000431B000-memory.dmp
                                      Download

                                      memory/9068-9325-0x0000000003D40000-0x0000000003DA4000-memory.dmp
                                      Download

                                      memory/9068-10006-0x0000000003D40000-0x0000000003DA4000-memory.dmp
                                      Download

                                      memory/9100-9134-0x0000000000CE0000-0x0000000000DA2000-memory.dmp
                                      Download

                                      memory/10488-9969-0x00000279EF7E0000-0x00000279EF7E9000-memory.dmp
                                      Download

                                      memory/10488-9600-0x00000279EF7E0000-0x00000279EF7E9000-memory.dmp
                                      Download

                                      memory/10804-9645-0x0000015589D70000-0x0000015589E13000-memory.dmp
                                      Download

                                      memory/10832-10008-0x000001EAA1D40000-0x000001EAA1DE3000-memory.dmp
                                      Download

                                      memory/10832-10912-0x000001EAA1D40000-0x000001EAA1DE3000-memory.dmp
                                      Download

                                      memory/10876-9615-0x00000210DAE30000-0x00000210DAED3000-memory.dmp
                                      Download

                                      memory/10952-11055-0x000001C9B9600000-0x000001C9B96A3000-memory.dmp
                                      Download

                                      memory/10952-10009-0x000001C9B9600000-0x000001C9B96A3000-memory.dmp
                                      Download

                                      memory/11032-9642-0x000001B639330000-0x000001B6393D3000-memory.dmp
                                      Download

                                      memory/11108-9635-0x000002577F950000-0x000002577F9F3000-memory.dmp
                                      Download