Overview

overview

8

Static

static

3

2026-07-08...er.exe

windows10-2004-x64

8

2026-07-08...er.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    69s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 04:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-08_1bcaed04b7040bae3a3a84272bd92c8f_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
  • Size 225KB
  • Sample260708-flea9sbs9w
  • SHA256 d70e4af878ed83b85b1424b101e94db1502c8ca5c8bbf5acc3552567baa52178
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistencespywarestealertrojan

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 10 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 25 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in Windows directory 21 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 10 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 42 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 28 IoCs
  • Modifies system certificate store 2 TTPs 7 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 22 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_1bcaed04b7040bae3a3a84272bd92c8f_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-08_1bcaed04b7040bae3a3a84272bd92c8f_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe"
    1⤵
    • Downloads MZ/PE file
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:3004
    • C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe" /passive /msicl "VID=194 YABROWSER=y YAHOMEPAGE=y YAQSEARCH=y "
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3596
    • C:\Users\Admin\AppData\Local\Temp\2026-07-08_1bcaed04b7040bae3a3a84272bd92c8f_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
      C:\Users\Admin\AppData\Local\Temp\2026-07-08_1bcaed04b7040bae3a3a84272bd92c8f_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe --stat dwnldr/p=1095461/cnt=1/dt=2/ct=2/rt=0 --dh 2508 --st 1783486672
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2804
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5704
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 787617185C1F32F1ED950F575A16D4AD
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5732
      • C:\Users\Admin\AppData\Local\Temp\F8FD5C77-9D0B-48E6-B860-BE2374CA4B9D\lite_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\F8FD5C77-9D0B-48E6-B860-BE2374CA4B9D\lite_installer.exe" --use-user-default-locale --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --YABROWSER
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        PID:3940
      • C:\Users\Admin\AppData\Local\Temp\BE612CEC-7B8A-480C-8736-E61669FD02A1\seederexe.exe
        "C:\Users\Admin\AppData\Local\Temp\BE612CEC-7B8A-480C-8736-E61669FD02A1\seederexe.exe" "--yqs=y" "--yhp=y" "--ilight=" "--oem=" "--nopin=n" "--pin_custom=n" "--pin_desktop=n" "--pin_taskbar=y" "--locale=us" "--browser=y" "--browser_default=" "--loglevel=trace" "--ess=" "--clids=C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml" "--sender=C:\Users\Admin\AppData\Local\Temp\4B69EBA8-B991-4F7B-9E6F-10B78227DBB0\sender.exe" "--is_elevated=yes" "--ui_level=2" "--good_token=x" "--no_opera=n"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1040
        • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
          C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1628
          • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
            C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO" /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1884
        • C:\Users\Admin\AppData\Local\Temp\4B69EBA8-B991-4F7B-9E6F-10B78227DBB0\sender.exe
          C:\Users\Admin\AppData\Local\Temp\4B69EBA8-B991-4F7B-9E6F-10B78227DBB0\sender.exe --send "/status.xml?clid=14237117-194&uuid=41379ad3-2b7a-4207-9f3f-1c7998966445&vnt=Windows 11x64&file-no=8%0A10%0A11%0A12%0A13%0A15%0A36%0A40%0A42%0A45%0A57%0A61%0A102%0A103%0A111%0A123%0A124%0A125%0A"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:2772
  • C:\Users\Admin\AppData\Local\Temp\yb67F7.exe
    "C:\Users\Admin\AppData\Local\Temp\yb67F7.exe" --job-name=yBrowserDownloader-71016246-1E63-4366-8B71-DBB9789727CC --send-statistics --local-path=C:\Users\Admin\AppData\Local\Temp\yb67F7.exe --YABROWSER --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-194&ui={41379ad3-2b7a-4207-9f3f-1c7998966445} --use-user-default-locale
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    PID:3132
    • C:\Users\Admin\AppData\Local\Temp\yb7620.tmp
      "C:\Users\Admin\AppData\Local\Temp\yb7620.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8174d3ee-639d-417d-bb3b-5cec04c6faea.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=585697835 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-71016246-1E63-4366-8B71-DBB9789727CC --local-path="C:\Users\Admin\AppData\Local\Temp\yb67F7.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-194&ui={41379ad3-2b7a-4207-9f3f-1c7998966445} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\25a6a4df-67bd-4267-9189-f60b445d0120.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
      2⤵
        PID:2268
        • C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8174d3ee-639d-417d-bb3b-5cec04c6faea.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=585697835 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-71016246-1E63-4366-8B71-DBB9789727CC --local-path="C:\Users\Admin\AppData\Local\Temp\yb67F7.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-194&ui={41379ad3-2b7a-4207-9f3f-1c7998966445} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\25a6a4df-67bd-4267-9189-f60b445d0120.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
          3⤵
            PID:4448
            • C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe
              "C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\8174d3ee-639d-417d-bb3b-5cec04c6faea.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=585697835 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-71016246-1E63-4366-8B71-DBB9789727CC --local-path="C:\Users\Admin\AppData\Local\Temp\yb67F7.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=14237100-194&ui={41379ad3-2b7a-4207-9f3f-1c7998966445} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\25a6a4df-67bd-4267-9189-f60b445d0120.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=618689650
              4⤵
              • System Time Discovery
              PID:1904
              • C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe
                C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=1904 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff61ce2a2a0,0x7ff61ce2a2ac,0x7ff61ce2a2b8
                5⤵
                  PID:1860
                • C:\Windows\SystemTemp\sdwra_1904_1053832048\service_update.exe
                  "C:\Windows\SystemTemp\sdwra_1904_1053832048\service_update.exe" --setup
                  5⤵
                    PID:1652
                    • C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe
                      "C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe" --install
                      6⤵
                        PID:4236
                    • C:\Windows\SystemTemp\scoped_dir1904_1710508093\explorer.exe
                      "C:\Windows\SystemTemp\scoped_dir1904_1710508093\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
                      5⤵
                        PID:3288
                        • C:\Windows\SystemTemp\scoped_dir1904_1710508093\explorer.exe
                          C:\Windows\SystemTemp\scoped_dir1904_1710508093\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=3288 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff7359fa2a0,0x7ff7359fa2ac,0x7ff7359fa2b8
                          6⤵
                            PID:4904
                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
                          5⤵
                            PID:3480
                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source1904_2118767159\Browser-bin\clids_yandex_second.xml"
                            5⤵
                              PID:4844
                    • C:\Windows\system32\sihost.exe
                      sihost.exe
                      1⤵
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of WriteProcessMemory
                      PID:2524
                      • C:\Windows\explorer.exe
                        explorer.exe /LOADSAVEDWINDOWS
                        2⤵
                        • Boot or Logon Autostart Execution: Active Setup
                        • Enumerates connected drives
                        • Checks SCSI registry key(s)
                        • Modifies Internet Explorer settings
                        • Modifies registry class
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        PID:3228
                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=585697835
                          3⤵
                            PID:1224
                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                              C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=1224 --annotation=metrics_client_id=cde3260da2c14f1d982db8cff648170d --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x150,0x154,0x158,0x12c,0x15c,0x7ff93f3057f8,0x7ff93f305804,0x7ff93f305810
                              4⤵
                                PID:4476
                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2284,i,10532891885388746738,6799076659441587669,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2352 --brver=26.6.0.1831 /prefetch:11
                                4⤵
                                • System Time Discovery
                                PID:2520
                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --gpu-process-kind=sandboxed --metrics-shmem-handle=1980,i,14094655393832559568,17402316521914156693,262144 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2288 /prefetch:2
                                4⤵
                                  PID:3900
                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=2052,i,5248419953681596898,17456177564277725422,262144 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2328 /prefetch:6
                                  4⤵
                                    PID:3912
                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2908,i,11693333426421198679,4397195220147326052,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2920 --brver=26.6.0.1831 /prefetch:13
                                    4⤵
                                      PID:5884
                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=3508,i,5191462334303647658,431668354740933960,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3552 --brver=26.6.0.1831 /prefetch:12
                                      4⤵
                                        PID:3120
                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3744,i,7717714704100805696,16532908188102704132,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3768 --brver=26.6.0.1831 /prefetch:14
                                        4⤵
                                          PID:1596
                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=4336,i,8932927057481062785,12836855271637030264,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4340 --brver=26.6.0.1831 /prefetch:14
                                          4⤵
                                            PID:4536
                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --may-use-trampoline-gpu --metrics-shmem-handle=4620,i,4413715773053543353,11014589581413414656,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4636 /prefetch:1
                                            4⤵
                                            • System Time Discovery
                                            PID:1460
                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --may-use-trampoline-gpu --metrics-shmem-handle=5260,i,8521362860505604488,10448251590919126930,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5268 /prefetch:1
                                            4⤵
                                            • System Time Discovery
                                            PID:2704
                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=5344,i,14770860541534666630,16272946478851297521,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5408 --brver=26.6.0.1831 /prefetch:14
                                            4⤵
                                              PID:592
                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5364,i,10728821106093073518,9472323316011947999,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5428 --brver=26.6.0.1831 /prefetch:14
                                              4⤵
                                                PID:5692
                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4732,i,9149658696455583200,339481622716863373,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4624 /prefetch:1
                                                4⤵
                                                • System Time Discovery
                                                PID:832
                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5236,i,17831152281122697277,9531413446748704955,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6064 /prefetch:1
                                                4⤵
                                                • System Time Discovery
                                                PID:2760
                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6252,i,14801160330587136026,5841158120557494872,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=6244 /prefetch:1
                                                4⤵
                                                • System Time Discovery
                                                PID:6000
                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=7236,i,7904296689326738791,12825408540720663697,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=7216 --brver=26.6.0.1831 /prefetch:14
                                                4⤵
                                                  PID:1456
                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7352,i,9775263293339092354,18120694793921731145,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7376 --brver=26.6.0.1831 /prefetch:14
                                                  4⤵
                                                    PID:5692
                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7316,i,13812161068223261379,4170358741342794275,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7508 --brver=26.6.0.1831 /prefetch:14
                                                    4⤵
                                                      PID:1460
                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7644,i,5047075535081828253,12159025485475330822,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7656 --brver=26.6.0.1831 /prefetch:14
                                                      4⤵
                                                        PID:4888
                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7832,i,13090851529078859619,8604907742280422212,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7844 --brver=26.6.0.1831 /prefetch:14
                                                        4⤵
                                                          PID:4140
                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7852,i,4252621917564317928,17617754071868677911,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7984 --brver=26.6.0.1831 /prefetch:14
                                                          4⤵
                                                            PID:3868
                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7640,i,8359109768600444390,15296354677340249843,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=8148 --brver=26.6.0.1831 /prefetch:14
                                                            4⤵
                                                              PID:3652
                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7664,i,7578261907754356759,9178789432447340580,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8284 --brver=26.6.0.1831 /prefetch:14
                                                              4⤵
                                                                PID:4180
                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8292,i,17910870528314599940,13053733545360430193,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=8424 --brver=26.6.0.1831 /prefetch:14
                                                                4⤵
                                                                  PID:2252
                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7800,i,6077571155390441392,2211844530408423782,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8560 --brver=26.6.0.1831 /prefetch:14
                                                                  4⤵
                                                                    PID:3176
                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=7992,i,9289149084869414639,7739482682178522652,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7820 --brver=26.6.0.1831 /prefetch:14
                                                                    4⤵
                                                                      PID:3304
                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8128,i,17677553455473786589,3971377502848221353,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7808 --brver=26.6.0.1831 /prefetch:14
                                                                      4⤵
                                                                        PID:6156
                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=8136,i,15510255446577557031,910580389230425997,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8936 --brver=26.6.0.1831 /prefetch:14
                                                                        4⤵
                                                                          PID:6168
                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9104,i,7333025820323983491,13925946186562252302,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=9116 --brver=26.6.0.1831 /prefetch:14
                                                                          4⤵
                                                                            PID:6244
                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9276,i,3758758604926882819,16899566487396384943,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9316 --brver=26.6.0.1831 /prefetch:14
                                                                            4⤵
                                                                              PID:6388
                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9304,i,1650267856662247029,13557801199659612508,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9336 --brver=26.6.0.1831 /prefetch:14
                                                                              4⤵
                                                                                PID:6396
                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9096,i,10467769992322725380,11120246888922719489,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9084 --brver=26.6.0.1831 /prefetch:14
                                                                                4⤵
                                                                                  PID:6412
                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9720,i,15411097864287143170,1585061352118753245,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9732 --brver=26.6.0.1831 /prefetch:14
                                                                                  4⤵
                                                                                    PID:6596
                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5556,i,15459974702192159851,3630870831106300702,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9264 --brver=26.6.0.1831 /prefetch:14
                                                                                    4⤵
                                                                                      PID:6608
                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9696,i,12410613361279161264,13912620980435906190,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9268 --brver=26.6.0.1831 /prefetch:14
                                                                                      4⤵
                                                                                        PID:6620
                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=9708,i,16654278007344002483,5626734441538809230,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10112 --brver=26.6.0.1831 /prefetch:14
                                                                                        4⤵
                                                                                          PID:6632
                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10120,i,3091744153799880551,8212362622748842352,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10252 --brver=26.6.0.1831 /prefetch:14
                                                                                          4⤵
                                                                                            PID:6644
                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10396,i,13376766817529146313,12791356222801708514,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10408 --brver=26.6.0.1831 /prefetch:14
                                                                                            4⤵
                                                                                              PID:6696
                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10552,i,10873374090737904850,8860394009529811579,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10564 --brver=26.6.0.1831 /prefetch:14
                                                                                              4⤵
                                                                                                PID:6752
                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10716,i,3371273295806096314,16510072931194566577,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10728 --brver=26.6.0.1831 /prefetch:14
                                                                                                4⤵
                                                                                                  PID:6876
                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=10876,i,11502804963527685535,13122697013439243068,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10888 --brver=26.6.0.1831 /prefetch:14
                                                                                                  4⤵
                                                                                                    PID:7004
                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=11060,i,4641219747950351032,11408500533595766421,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11072 --brver=26.6.0.1831 /prefetch:14
                                                                                                    4⤵
                                                                                                      PID:7100
                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=11208,i,2525787772302696607,8253387492330763170,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11224 --brver=26.6.0.1831 /prefetch:14
                                                                                                      4⤵
                                                                                                        PID:5380
                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=11360,i,8514483968929804917,588091821311435825,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11372 --brver=26.6.0.1831 /prefetch:14
                                                                                                        4⤵
                                                                                                          PID:5912
                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Распаковщик файлов" --metrics-shmem-handle=2516,i,5058438526154510217,8967428874194797289,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11080 --brver=26.6.0.1831 /prefetch:14
                                                                                                          4⤵
                                                                                                            PID:6148
                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=2572,i,12750850487178651295,17358241771968197079,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=2544 /prefetch:1
                                                                                                            4⤵
                                                                                                            • System Time Discovery
                                                                                                            PID:6884
                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=3768,i,6532554832006187128,17408214552794066344,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11388 --brver=26.6.0.1831 /prefetch:14
                                                                                                            4⤵
                                                                                                              PID:3292
                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7256,i,6278899781875859893,10311974853156853404,2097152 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=5056 /prefetch:1
                                                                                                              4⤵
                                                                                                              • System Time Discovery
                                                                                                              PID:4920
                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=2416,i,6822039271397471312,11972210483112645783,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=4436 --brver=26.6.0.1831 /prefetch:14
                                                                                                              4⤵
                                                                                                                PID:7060
                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=2056,i,15526970531712076432,6681025656106085085,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11400 --brver=26.6.0.1831 /prefetch:14
                                                                                                                4⤵
                                                                                                                  PID:6348
                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --message-loop-type-ui --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Утилиты Windows" --metrics-shmem-handle=11212,i,11054945960581454989,16562906845991276460,524288 --field-trial-handle=2292,i,6561757746887976540,17230151503683817151,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2296,i,13102011523325464720,16762932247885598200,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11444 --brver=26.6.0.1831 /prefetch:14
                                                                                                                  4⤵
                                                                                                                    PID:7064
                                                                                                            • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                              "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                              1⤵
                                                                                                              • Modifies registry class
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:3544
                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                              1⤵
                                                                                                              • Modifies registry class
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:1172
                                                                                                            • C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe
                                                                                                              "C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe" --run-as-service
                                                                                                              1⤵
                                                                                                                PID:4440
                                                                                                                • C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe
                                                                                                                  "C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=4440 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff767473b20,0x7ff767473b2c,0x7ff767473b38
                                                                                                                  2⤵
                                                                                                                    PID:4988
                                                                                                                  • C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe
                                                                                                                    "C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe" --update-scheduler
                                                                                                                    2⤵
                                                                                                                      PID:4188
                                                                                                                      • C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe
                                                                                                                        "C:\Program Files (x86)\Yandex\YandexBrowser\26.6.0.1831\service_update.exe" --update-background-scheduler
                                                                                                                        3⤵
                                                                                                                          PID:3772
                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                      1⤵
                                                                                                                        PID:3940
                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                        1⤵
                                                                                                                          PID:1084
                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                          1⤵
                                                                                                                            PID:2200
                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={50465201-1AF1-42E9-8478-0F81AC2A298F}
                                                                                                                            1⤵
                                                                                                                              PID:6316
                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1783486744 --annotation=last_update_date=1783486744 --annotation=launches_after_update=1 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=6316 --annotation=metrics_client_id=cde3260da2c14f1d982db8cff648170d --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x154,0x158,0x15c,0x130,0x160,0x7ff93f3057f8,0x7ff93f305804,0x7ff93f305810
                                                                                                                                2⤵
                                                                                                                                  PID:1268
                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=install --bits_job_guid={11BFD29C-4B4E-4ACE-94AD-0B98C3BCC411}
                                                                                                                                1⤵
                                                                                                                                  PID:6892
                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1783486744 --annotation=last_update_date=1783486744 --annotation=launches_after_update=2 --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=6892 --annotation=metrics_client_id=cde3260da2c14f1d982db8cff648170d --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.6.0.1831 --initial-client-data=0x154,0x158,0x15c,0x130,0x160,0x7ff93f3057f8,0x7ff93f305804,0x7ff93f305810
                                                                                                                                    2⤵
                                                                                                                                      PID:6968
                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2164,i,2870714447431243421,8062210196463280305,524288 --field-trial-handle=2304,i,8499061195937432425,9577598959547346797,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2308,i,2283887483934160608,12898073038079442173,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2336 --brver=26.6.0.1831 /prefetch:11
                                                                                                                                      2⤵
                                                                                                                                      • System Time Discovery
                                                                                                                                      PID:6400
                                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=41379ad3-2b7a-4207-9f3f-1c7998966445 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=d3d11-warp-webgl --gpu-process-kind=sandboxed --metrics-shmem-handle=1960,i,3539237368427659768,6721541055721069608,262144 --field-trial-handle=2304,i,8499061195937432425,9577598959547346797,262144 --enable-features=ShortcutNameWithAlice --disable-features=Fledge,InterestGroupStorage,PrivateAggregationApi,PrivateAggregationApiProtectedAudienceAdditionalExtensions --variations-seed-version --pseudonymization-salt-handle=2308,i,2283887483934160608,12898073038079442173,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2300 /prefetch:2
                                                                                                                                      2⤵
                                                                                                                                      • Network Service Discovery
                                                                                                                                      PID:6828

                                                                                                                                  Network

                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                        Reconnaissance

                                                                                                                                        Resource Development

                                                                                                                                        Initial Access

                                                                                                                                        Execution

                                                                                                                                        Persistence

                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                        1
                                                                                                                                        T1547

                                                                                                                                        Active Setup

                                                                                                                                        1
                                                                                                                                        T1547.014

                                                                                                                                        Privilege Escalation

                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                        1
                                                                                                                                        T1547

                                                                                                                                        Active Setup

                                                                                                                                        1
                                                                                                                                        T1547.014

                                                                                                                                        Defense Evasion

                                                                                                                                        Modify Registry

                                                                                                                                        3
                                                                                                                                        T1112

                                                                                                                                        Subvert Trust Controls

                                                                                                                                        1
                                                                                                                                        T1553

                                                                                                                                        Install Root Certificate

                                                                                                                                        1
                                                                                                                                        T1553.004

                                                                                                                                        Credential Access

                                                                                                                                        Credentials from Password Stores

                                                                                                                                        1
                                                                                                                                        T1555

                                                                                                                                        Credentials from Web Browsers

                                                                                                                                        1
                                                                                                                                        T1555.003

                                                                                                                                        Unsecured Credentials

                                                                                                                                        1
                                                                                                                                        T1552

                                                                                                                                        Credentials In Files

                                                                                                                                        1
                                                                                                                                        T1552.001

                                                                                                                                        Discovery

                                                                                                                                        Browser Information Discovery

                                                                                                                                        1
                                                                                                                                        T1217

                                                                                                                                        Network Service Discovery

                                                                                                                                        1
                                                                                                                                        T1046

                                                                                                                                        Peripheral Device Discovery

                                                                                                                                        2
                                                                                                                                        T1120

                                                                                                                                        Query Registry

                                                                                                                                        3
                                                                                                                                        T1012

                                                                                                                                        System Information Discovery

                                                                                                                                        3
                                                                                                                                        T1082

                                                                                                                                        System Location Discovery

                                                                                                                                        1
                                                                                                                                        T1614

                                                                                                                                        System Language Discovery

                                                                                                                                        1
                                                                                                                                        T1614.001

                                                                                                                                        System Time Discovery

                                                                                                                                        1
                                                                                                                                        T1124

                                                                                                                                        Lateral Movement

                                                                                                                                        Collection

                                                                                                                                        Data from Local System

                                                                                                                                        1
                                                                                                                                        T1005

                                                                                                                                        Command and Control

                                                                                                                                        Exfiltration

                                                                                                                                        Impact

                                                                                                                                        Replay Monitor

                                                                                                                                        Loading Replay Monitor...

                                                                                                                                        Downloads

                                                                                                                                        e594f81.rbs
                                                                                                                                        • Path C:\Config.Msi\e594f81.rbs
                                                                                                                                        • Size 912B
                                                                                                                                        • SHA256 46a5a48519f88d677de58f7a91786ca82a41b0e3c06fc646a441b50686c0ba4c
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 5f3724cf7136d9de8750684949956fb605e1a51633727f82a2b6c8ddef4d0aea
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 135d579d33080c6fa172a65fcb94e876d67fa1101988d4650f86b810bec8b66d
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 a3ad05c81de3789e15d27fa44bfa33ec0a30930418ee4d7f880c6edd959592dd
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 e65ffc6ae24d0cfb58feb98d3d7203e117107029f9f4d4426650402bc2e2bc68
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 805c914740cb6760f2774402b2101775ce2e14c0c6735bbfd6a236079da49f7e
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 2f9884249f1d5c892a59bd5554f244b21ddce94227ca25e5d44e925d6238a5bb
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                                                                                                                        • Size 508B
                                                                                                                                        • SHA256 2fa5e3ff124d0891d762a33c4e91becf0e50f97b027c2841dfb5499cad852ffc
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\349D186F1CB5682FA0194D4F3754EF36_1311B204CE641FD9C7F93B623858890F
                                                                                                                                        • Size 536B
                                                                                                                                        • SHA256 34dd07a1156dc51de433c9b92696acee0b670dc905a48ac7a13e2be43f8fe7d2
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_7A6F6CCB2247ED9DD8BDF7A00E0525CD
                                                                                                                                        • Size 536B
                                                                                                                                        • SHA256 1ea6344bf7a97001cf0a5dbb425f0daa1e1824ceb1d209d49c0412b40e2f5838
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                        • Size 536B
                                                                                                                                        • SHA256 a0a68f7f2570ec7b8628af6107c437920404a263356f3606026f1b424c307a73
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                        • Size 536B
                                                                                                                                        • SHA256 a6790b26fc373cf96f7d38369dbec5c3b741bcaa18a922264dc935f206545d54
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                                                                                                                        • Size 506B
                                                                                                                                        • SHA256 833ffdaf81310379bdbd3352c20c58a302ac5595b8da71cf674371627191c679
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        d59694c0d2a7da0e55044a1d6740dcfd
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\olzhxhpe.default-release\thumbnails\d59694c0d2a7da0e55044a1d6740dcfd
                                                                                                                                        • Size 15KB
                                                                                                                                        • SHA256 2435c0376fca765b21d43e897f4baa52daa0958a7015d04103488c606c99d1d3
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        prep_Activatable Class_Hermes_perf.cache
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                                        • Size 599B
                                                                                                                                        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        sender.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\4B69EBA8-B991-4F7B-9E6F-10B78227DBB0\sender.exe
                                                                                                                                        • Size 260KB
                                                                                                                                        • SHA256 e249d09956aa2ef44db6a3cdab525abb73d01e7ad46bd83984e0d22d71c9dcc6
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        YandexPackSetup.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
                                                                                                                                        • Size 10.1MB
                                                                                                                                        • SHA256 dd52062569fba53f9bf8de2bb6fad0eccd6bd997a359827458da46432abec9ae
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        seederexe.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\BE612CEC-7B8A-480C-8736-E61669FD02A1\seederexe.exe
                                                                                                                                        • Size 8.5MB
                                                                                                                                        • SHA256 a2f5780c9d334c42323ae2cf3328227e7d04a5f6983ff862dc73627f1e970431
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        lite_installer.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\F8FD5C77-9D0B-48E6-B860-BE2374CA4B9D\lite_installer.exe
                                                                                                                                        • Size 420KB
                                                                                                                                        • SHA256 985d3c2eb69a9f681c876d7a3d28b53f177ebcde90af9ca9d1d8d8be79b03a31
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        PartnerFile
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\PartnerFile
                                                                                                                                        • Size 1.4MB
                                                                                                                                        • SHA256 b6d4f1619e5976acb485374ec35959f975de9c0dc2f69a2eddc98ab8383005a5
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        BRAND_COMMON
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\BRAND_COMMON
                                                                                                                                        • Size 25.6MB
                                                                                                                                        • SHA256 79a756a6076f144000823ab815fddb4ebcae4b7e885218457b61409f6e8300df
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        brand_yandex
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\brand_yandex
                                                                                                                                        • Size 2.5MB
                                                                                                                                        • SHA256 cd74f5b6afb55dd6140bb93a2467421db2ea13dc5c091c8ed69ed1967c476d8e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        setup.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\YB_FD105.tmp\setup.exe
                                                                                                                                        • Size 7.5MB
                                                                                                                                        • SHA256 978e5ca279cf3bbf66abbd562486a7ddc8aa624881018c01fdee1e199c6432b5
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        YandexSearch00000.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\YandexSearch00000.log
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 42d91f4ac8a15564d23a51bbb9e76a3e657fb01a22966ed616631ed0d97898a2
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        clids-yasearch.xml
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml
                                                                                                                                        • Size 730B
                                                                                                                                        • SHA256 b46743344d5881a31cfbbcb9f75b09b30d6b5e2f1588a1f7f7fe2c7456c352f4
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        lite_installer.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                                                                                                                        • Size 11KB
                                                                                                                                        • SHA256 c0504ecf53d69274a6645a0888bf93ffa5bc6a466dfa40d13a34cd7ac4fb12bd
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        master_preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                                                                                                                                        • Size 542B
                                                                                                                                        • SHA256 0325fd8be2634b3b8fd40c2d7900b7816bc4cc456ed1b708d9b1f0ca1af4853b
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vendor00000.xml
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\vendor00000.xml
                                                                                                                                        • Size 529B
                                                                                                                                        • SHA256 682b5e8ff1efc8ca0ce00b921c1e582fc9d9afe962cb818c7d9ae367474e99cd
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        yandex_browser_updater.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 7169627c52dba76a0aef88ebf0bb74b87ab36ec3c79290ded76f0b8ddd19b908
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        yb67F7.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\yb67F7.exe
                                                                                                                                        • Size 12.0MB
                                                                                                                                        • SHA256 dcad7380898f693208db1018b4863c6fe1c7909e92f91e21152f12d80fe5d92b
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        YandexSearch.msi
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{5B964E0E-B9A3-4276-9ED9-4D5A5720747A}\YandexSearch.msi
                                                                                                                                        • Size 9.7MB
                                                                                                                                        • SHA256 edaacbba08d08a0bc897a4c6912dc1750dc120416c3145dd38ec97d6c31291d8
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Yandex.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
                                                                                                                                        • Size 395KB
                                                                                                                                        • SHA256 50d73db5c8098789f182bc6fff3d9308c3ad7957286389b5fa3c1438210f3d76
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Yandex.lnk
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 6b198269c0d4386f762909c2edd736c52bce5c70f25ff47bfc8fe4e7462013cd
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        ru.bdic
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                                                                                                                                        • Size 4.5MB
                                                                                                                                        • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        brand_config
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\brand_config
                                                                                                                                        • Size 6KB
                                                                                                                                        • SHA256 799f57c84cd988d1fb653b950548bf2891e1539a10419339ca34b294689e7be0
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        partner_config
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\partner_config
                                                                                                                                        • Size 341B
                                                                                                                                        • SHA256 82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        all_zip
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\resources\configs\all_zip
                                                                                                                                        • Size 1.3MB
                                                                                                                                        • SHA256 89a48f91ee799d6a571cf9355809abb631848aaae86f60e3a8e7811b830a5509
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        light_static.jpg
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\resources\wallpapers\light.title\light_static.jpg
                                                                                                                                        • Size 674KB
                                                                                                                                        • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        sea_preview.jpg
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\resources\wallpapers\sea_preview.jpg
                                                                                                                                        • Size 59KB
                                                                                                                                        • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        sea_static.jpg
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.6.0.1831\resources\wallpapers\sea_static.jpg
                                                                                                                                        • Size 300KB
                                                                                                                                        • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        3d3d67d5-e8f6-470c-a808-a0dc88be9b81.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\3d3d67d5-e8f6-470c-a808-a0dc88be9b81.tmp
                                                                                                                                        • Size 218KB
                                                                                                                                        • SHA256 40a69003cf4490535c321521b6add96d573147dfc8d8fcb013b354035cc20c23
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        82e9bdd3-c3ef-443c-83d1-1664bf484558.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\82e9bdd3-c3ef-443c-83d1-1664bf484558.tmp
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 378714ba8bb171dd43fbae133235168db6c90ee95ca6cb005428a0ff1572a004
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        data_0
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_0
                                                                                                                                        • Size 44KB
                                                                                                                                        • SHA256 b220f588b91b1923876cb13522f79c810f8c84d2b0e62d83202b99210934e628
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        data_2
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_2
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                        Submit Download

                                                                                                                                        data_3
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_3
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                        Submit Download

                                                                                                                                        f_000004
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000004
                                                                                                                                        • Size 40KB
                                                                                                                                        • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000006
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000006
                                                                                                                                        • Size 48KB
                                                                                                                                        • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                        • Size 864B
                                                                                                                                        • SHA256 c448ca41548441db504aa704d5c12eb252d9dbd47ab1058049426728c79ed7be
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                        • Size 48B
                                                                                                                                        • SHA256 fb0781bee5f130f07c6c78089f81e4d17026dca6e8e4fff7307989d8e9f1620b
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        MANIFEST-000001
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\MANIFEST-000001
                                                                                                                                        • Size 41B
                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                        • Size 18KB
                                                                                                                                        • SHA256 cbbb305bf78148f055565ef1005197e43d99ca626d024171740e34ecc1d05ca9
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                        • Size 13KB
                                                                                                                                        • SHA256 e57633f4d55b407dc885f50b906ffe2e5e5a1d7cec10e7b1347efa1d49abddd9
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                        • Size 15KB
                                                                                                                                        • SHA256 ab270ed553ceeffef8b7e4df375c3022dc378120109a3d6468a58eb1d3cd3501
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                        • Size 17KB
                                                                                                                                        • SHA256 b00af3fcd46f3a15fe92a52528d6be980e33db989012328813c811c15ad75dac
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                        • Size 9KB
                                                                                                                                        • SHA256 af4b1dfca9d65de7b401621e9bf4912ef5eb697c912058b9cd875f54101d2aec
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Secure Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                                                                                                                        • Size 15KB
                                                                                                                                        • SHA256 48e76c388514b46121fe8cb43c46fb3011091f824a551dad1eacdcc35f529aa7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Secure Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                                                                                                                        • Size 15KB
                                                                                                                                        • SHA256 3b8886cd6093907363613b7dc4364e25885e47f03ccc06245e3205024f48ebdf
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        CURRENT
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                        • Size 16B
                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        128.png
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\128.png
                                                                                                                                        • Size 6KB
                                                                                                                                        • SHA256 6f6240bda239efc7969736dcb36212b55e0c026b6e191069a59b0319a871902e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        256.png
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\256.png
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 4c8ab9772a662445717504802cf06755896080fb8cec679172acae975c98f67b
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        64.png
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\64.png
                                                                                                                                        • Size 3KB
                                                                                                                                        • SHA256 9c844d058a7125bb5e87b880dd6d73ad91473498d2840e109c8d01aca1d5905c
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        96.png
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Manifest Resources\bcadigmkecmhhknameopgaidphameinh\Trusted Icons\Icons\96.png
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 feba94135d0ae26db2694c294c124c30b5f7a385b6a64441d4ecadebe680ac93
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        d1a4a840-92a0-4bbe-bcd1-61480e808588.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\d1a4a840-92a0-4bbe-bcd1-61480e808588.tmp
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 f423bcd933d9ddba011fae0ce229c025cfafa8ddfbab27ec82ca3a80ebf8a1e4
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dc870e07-ab31-4751-82cb-2d9bce55c66c.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\dc870e07-ab31-4751-82cb-2d9bce55c66c.tmp
                                                                                                                                        • Size 149KB
                                                                                                                                        • SHA256 0e114b0b335dd1b919cd8cb09b1cb0adcf4ac4fdfe73ef988617b1f338da2ae6
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        data_1
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\GrShaderCache\data_1
                                                                                                                                        • Size 264KB
                                                                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                                                                                                                        • Size 226KB
                                                                                                                                        • SHA256 0912a7e78017b26a255896a4ecac9c68d631c0a9c4cfe682db7c9ee8b449b955
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                        • Size 6KB
                                                                                                                                        • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                        • Size 21.6MB
                                                                                                                                        • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        metadata.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                        • Size 236B
                                                                                                                                        • SHA256 df671539241fbc96e33ab6dbce06498e6dd1a0927a6f4c394b8f86ce27b541db
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        metadata.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                        • Size 13B
                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        Яндекс.website
                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс.website
                                                                                                                                        • Size 516B
                                                                                                                                        • SHA256 e12fc64bce8e188d83bb718e3a697913f24b178a9bf29578e170922ba2aceb85
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        places.sqlite
                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\l9rafe8h.Admin\places.sqlite
                                                                                                                                        • Size 68KB
                                                                                                                                        • SHA256 b6d278384a3684409a2a86f03e4f52869818ce7dd8b5779876960353f7d35dc1
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        clids-yabrowser.xml
                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Yandex\clids-yabrowser.xml
                                                                                                                                        • Size 756B
                                                                                                                                        • SHA256 d29928656b437679d2833ae60f9f5761e420076cb7de76ebe02d8cd6c1ed6b53
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        ui
                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                                                                                                                                        • Size 38B
                                                                                                                                        • SHA256 b2e5d80b2ff6e42fcc596fec892072ad52f536205ad48f3b7cabebe64e995676
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        MSI52BA.tmp
                                                                                                                                        • Path C:\Windows\Installer\MSI52BA.tmp
                                                                                                                                        • Size 181KB
                                                                                                                                        • SHA256 1ad18330acc4f254d8a37ffdf6d14283e1617b1e163ee8d05c876bb41ac6f316
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        MSI5338.tmp
                                                                                                                                        • Path C:\Windows\Installer\MSI5338.tmp
                                                                                                                                        • Size 197KB
                                                                                                                                        • SHA256 c149276c0b4427c1149fc5a85dc42b4c71c027c2b5fcbc73e6e659f7b3a75562
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        yandex_browser_installer.log
                                                                                                                                        • Path C:\Windows\SystemTemp\yandex_browser_installer.log
                                                                                                                                        • Size 6KB
                                                                                                                                        • SHA256 eee9922d5727d24b9291bc55de66cde93c8456feb758beb0f35fc50f39496bf1
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        yandex_browser_service_update.log
                                                                                                                                        • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                        • Size 3KB
                                                                                                                                        • SHA256 799373d533e5b3a83f9756ffe20e3c7b02ed0b00c6c04f6e694d4454a807ff1b
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        yandex_browser_service_update.log
                                                                                                                                        • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                        • Size 4KB
                                                                                                                                        • SHA256 fce1c9cd37076a4d67049ab66255ef9b648bad70fb5f446d39b4efdd953a097a
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        memory/1460-1260-0x00007FF963330000-0x00007FF963331000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/1460-1261-0x00007FF961EF0000-0x00007FF961EF1000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3228-744-0x000000000AA80000-0x000000000AAE2000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-517-0x000002D484D30000-0x000002D484E30000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-547-0x000002D488830000-0x000002D488850000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-522-0x000002D498890000-0x000002D498990000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-521-0x000002D488470000-0x000002D488490000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-515-0x000002D484D30000-0x000002D484E30000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-561-0x000002D498E20000-0x000002D498E40000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3544-516-0x000002D484D30000-0x000002D484E30000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3900-1521-0x0000021CBAE60000-0x0000021CBAF09000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3900-1735-0x0000021CBAE60000-0x0000021CBAF09000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3912-1116-0x00007FF962E80000-0x00007FF962E81000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3912-1524-0x000001E7BB440000-0x000001E7BB4E9000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/6828-1749-0x0000021E01BB0000-0x0000021E01C59000-memory.dmp
                                                                                                                                        Download