Overview

overview

6

Static

static

3

ChromeSetu...ws.exe

windows10-2004-x64

6

ChromeSetu...ws.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    303s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 12:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ChromeSetupWindows.exe
  • Size 7.6MB
  • Sample260810-pzenmahn4y
  • SHA256 53ec7db0631adc87e6cd114fd2845c1802c8d3049631a4eede74a614727724da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 2 IoCs
  • Drops file in System32 directory 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 32 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Checks whether UAC is enabled 1 TTPs 4 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Enumerates system info in registry 2 TTPs 7 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 36 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\ChromeSetupWindows.exe
    "C:\Users\Admin\AppData\Local\Temp\ChromeSetupWindows.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Chrome\ChromeSetupOriginal.exe
      "C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Chrome\ChromeSetupOriginal.exe" /silent /install
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4700
      • C:\Windows\SystemTemp\Google4700_1007178543\bin\updater.exe
        "C:\Windows\SystemTemp\Google4700_1007178543\bin\updater.exe" --silent --install --install=appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={F4FF1498-0CEA-108B-2BE5-117F9D551288}&lang=ru&browser=4&usagestats=0&appname=Google%20Chrome&needsadmin=prefers&ap=-arch_x64-statsdef_1&installdataindex=empty --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Checks whether UAC is enabled
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4220
        • C:\Windows\SystemTemp\Google4700_1007178543\bin\updater.exe
          C:\Windows\SystemTemp\Google4700_1007178543\bin\updater.exe --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=150.0.7863.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x7402b8,0x7402c4,0x7402d0
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4164
    • C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Yandex\YandexBrowserSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Yandex\YandexBrowserSetup.exe" -silent
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of WriteProcessMemory
      PID:4132
      • C:\Users\Admin\AppData\Local\Temp\yb8401.tmp
        "C:\Users\Admin\AppData\Local\Temp\yb8401.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\d2707039-1ec0-481f-9125-f58d74c916f9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=720073078 --installer-brand-id=yandex --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --progress-window=0 --send-statistics --silent --source=lite --variations-update-path="C:\Users\Admin\AppData\Local\Temp\1775ed7c-8930-48d9-88b8-9fb2faf5bf3d.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:712
        • C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\d2707039-1ec0-481f-9125-f58d74c916f9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=720073078 --installer-brand-id=yandex --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --progress-window=0 --send-statistics --silent --source=lite --variations-update-path="C:\Users\Admin\AppData\Local\Temp\1775ed7c-8930-48d9-88b8-9fb2faf5bf3d.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3164
          • C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\d2707039-1ec0-481f-9125-f58d74c916f9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --install-start-time-no-uac=720073078 --installer-brand-id=yandex --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --progress-window=0 --send-statistics --silent --source=lite --variations-update-path="C:\Users\Admin\AppData\Local\Temp\1775ed7c-8930-48d9-88b8-9fb2faf5bf3d.tmp" --verbose-logging --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=754648223
            5⤵
            • Drops file in Windows directory
            • Executes dropped EXE
            • Modifies registry class
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:3260
            • C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe
              C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=3260 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff6e44d34a8,0x7ff6e44d34b4,0x7ff6e44d34c0
              6⤵
              • Executes dropped EXE
              PID:4064
            • C:\Windows\TEMP\sdwra_3260_1585861187\service_update.exe
              "C:\Windows\TEMP\sdwra_3260_1585861187\service_update.exe" --setup
              6⤵
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Suspicious use of WriteProcessMemory
              PID:3112
              • C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe
                "C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe" --install
                7⤵
                • Executes dropped EXE
                PID:2628
            • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
              C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:2520
              • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
                C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
                7⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4080
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml" --vid=11
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4016
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source3260_478047282\Browser-bin\clids_yandex.xml"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5056
  • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
    "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --system --windows-service --service=update-internal
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:352
    • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=150.0.7863.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x12802b8,0x12802c4,0x12802d0
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:260
  • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
    "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --system --windows-service --service=update
    1⤵
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1316
    • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=150.0.7863.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x12802b8,0x12802c4,0x12802d0
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:808
    • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --unzip-worker --system --mojo-platform-channel-handle=1872
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4408
      • C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe
        "C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=150.0.7863.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2b0,0x2b4,0x2b8,0x2ac,0x2bc,0x12802b8,0x12802c4,0x12802d0
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5000
    • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\151.0.7922.109_chrome_installer_uncompressed.exe
      "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\151.0.7922.109_chrome_installer_uncompressed.exe" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\db5aeffc-2704-4ab2-b5af-4acae5df2df3.tmp"
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2444
      • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe
        "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe" --uncompressed-archive="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\CHROME.7Z" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\db5aeffc-2704-4ab2-b5af-4acae5df2df3.tmp"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • System Network Configuration Discovery: Internet Connection Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2020
        • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe
          C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=151.0.7922.109 --attachment=C:\Windows\SystemTemp\chrome_installer.log "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff7c85a4708,0x7ff7c85a4718,0x7ff7c85a4728
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          PID:1848
        • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe
          "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe" --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
          4⤵
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Executes dropped EXE
          • Modifies data under HKEY_USERS
          • Suspicious use of WriteProcessMemory
          PID:2092
          • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe
            C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=151.0.7922.109 --attachment=C:\Windows\SystemTemp\chrome_installer.log "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff7c85a4708,0x7ff7c85a4718,0x7ff7c85a4728
            5⤵
            • Drops file in Windows directory
            • Executes dropped EXE
            PID:5264
  • C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe
    "C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe" --run-as-service
    1⤵
    • Drops file in System32 directory
    • Executes dropped EXE
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=2848 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff71c0edaf0,0x7ff71c0edafc,0x7ff71c0edb08
      2⤵
      • Executes dropped EXE
      PID:5516
    • C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe
      "C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe" --update-scheduler
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4112
      • C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe
        "C:\Program Files (x86)\Yandex\YandexBrowser\24.10.4.931\service_update.exe" --update-background-scheduler
        3⤵
        • Drops file in Windows directory
        • Executes dropped EXE
        PID:2808
  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=720073078
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Executes dropped EXE
    • Loads dropped DLL
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2800
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=2800 --annotation=metrics_client_id=8adf59f158ef41a59916cb3acacb86af --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x150,0x154,0x158,0x12c,0x15c,0x7ffb174fff70,0x7ffb174fff7c,0x7ffb174fff88
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4900
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --gpu-process-kind=sandboxed --field-trial-handle=2208,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1100
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --gpu-process-kind=trampoline --field-trial-handle=2100,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:6
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1136
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Network Service" --field-trial-handle=2292,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2440 --brver=24.10.4.931 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3200
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Storage Service" --field-trial-handle=2856,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2928 --brver=24.10.4.931 /prefetch:13
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3452
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Audio Service" --field-trial-handle=3252,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=3300 --brver=24.10.4.931 /prefetch:12
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1240
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Video Capture" --field-trial-handle=3324,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=3464 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5284
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=4100,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=4120 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2168
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Импорт профилей" --field-trial-handle=4404,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=4400 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2140
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --allow-prefetch --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4536,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2964
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --allow-prefetch --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5048,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1260
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=4988,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=5508 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3952
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5540,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:756
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --field-trial-handle=5820,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=5948 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3304
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=6336,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=4440 --brver=24.10.4.931 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2384
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5560,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4300
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4120,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
      2⤵
      • Executes dropped EXE
      PID:1488
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6548,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
      2⤵
        PID:1588
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Утилиты Windows" --field-trial-handle=6792,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=6964 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3720
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Распаковщик файлов" --field-trial-handle=6784,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=6764 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:968
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7256,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7264 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4528
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7244,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7412 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3368
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7552,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7208 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3688
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7556,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7668 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2352
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7820,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7816 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1744
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7828,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7984 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1712
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8120,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8152 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4612
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8128,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8292 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4992
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8136,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8440 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        PID:5916
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8132,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8584 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        PID:1180
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7808,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8124 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        PID:4664
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8432,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8860 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        PID:5640
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8140,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=9008 --brver=24.10.4.931 /prefetch:14
        2⤵
        • Executes dropped EXE
        PID:5220
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=8592,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=9164 --brver=24.10.4.931 /prefetch:14
        2⤵
          PID:1812
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=9308,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7660 --brver=24.10.4.931 /prefetch:14
          2⤵
            PID:900
          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=9304,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=9456 --brver=24.10.4.931 /prefetch:14
            2⤵
              PID:3624
            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=8000,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
              2⤵
                PID:2964
              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=https://webntp.yandex.ru/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8100,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7568 /prefetch:1
                2⤵
                  PID:940
                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Data Decoder Service" --field-trial-handle=7128,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7120 --brver=24.10.4.931 /prefetch:14
                  2⤵
                    PID:4240
                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Утилиты Windows" --field-trial-handle=1120,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7572 --brver=24.10.4.931 /prefetch:14
                    2⤵
                      PID:5436
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Утилиты Windows" --field-trial-handle=7104,i,15600367650517706686,2242667685000802787,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=7208 --brver=24.10.4.931 /prefetch:14
                      2⤵
                        PID:4612
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --shutdown-if-not-closed-by-system-restart
                      1⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of WriteProcessMemory
                      PID:1328
                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                        C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1786366192 --annotation=last_update_date=1786366192 --annotation=launches_after_update=1 --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=1328 --annotation=metrics_client_id=8adf59f158ef41a59916cb3acacb86af --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x154,0x158,0x15c,0x130,0x160,0x7ffb174fff70,0x7ffb174fff7c,0x7ffb174fff88
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:2164
                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater --broupdater-origin=auto --bits_job_guid={7174733C-A8D3-4C99-AFE4-0AB0B6FC4437}
                      1⤵
                      • Enumerates system info in registry
                      PID:5780
                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                        C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1786366192 --annotation=last_update_date=1786366192 --annotation=launches_after_update=1 --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=5780 --annotation=metrics_client_id=8adf59f158ef41a59916cb3acacb86af --annotation=micromode=broupdater --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x154,0x158,0x15c,0x130,0x160,0x7ffb174fff70,0x7ffb174fff7c,0x7ffb174fff88
                        2⤵
                          PID:3492
                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --use-angle=swiftshader-webgl --gpu-process-kind=sandboxed --field-trial-handle=2316,i,10741444896830170339,15452199134105825577,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
                          2⤵
                            PID:2656
                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Network Service" --field-trial-handle=2204,i,10741444896830170339,15452199134105825577,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2416 --brver=24.10.4.931 /prefetch:11
                            2⤵
                              PID:5824
                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --broupdater-stat-bits --broupdater-stat-name=install --bits_job_guid={86587D4F-21E9-4A6F-A3F6-86E19806F95A}
                            1⤵
                            • Enumerates system info in registry
                            PID:2836
                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                              C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" --url=https://crash-reports.browser.yandex.net/submit --annotation=install_date=1786366192 --annotation=last_update_date=1786366192 --annotation=launches_after_update=2 --annotation=machine_id=488dca4c15f9a1d330ad312b391a804e --annotation=main_process_pid=2836 --annotation=metrics_client_id=8adf59f158ef41a59916cb3acacb86af --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=24.10.4.931 --initial-client-data=0x154,0x158,0x15c,0x130,0x160,0x7ffb174fff70,0x7ffb174fff7c,0x7ffb174fff88
                              2⤵
                                PID:4020
                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --use-angle=swiftshader-webgl --gpu-process-kind=sandboxed --field-trial-handle=2304,i,454856310753054458,7596293627002408660,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
                                2⤵
                                  PID:568
                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=BDA46D0F-CB76-41F8-B18D-FE82DB733DD6 --brand-id=yandex --process-name="Network Service" --field-trial-handle=2036,i,454856310753054458,7596293627002408660,262144 --enable-features=InstallerNewIdentity2024 --variations-seed-version --mojo-platform-channel-handle=2424 --brver=24.10.4.931 /prefetch:11
                                  2⤵
                                    PID:4612

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Reconnaissance

                                      Resource Development

                                      Initial Access

                                      Execution

                                      Persistence

                                      Boot or Logon Autostart Execution

                                      2
                                      T1547

                                      Active Setup

                                      1
                                      T1547.014

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Privilege Escalation

                                      Boot or Logon Autostart Execution

                                      2
                                      T1547

                                      Active Setup

                                      1
                                      T1547.014

                                      Registry Run Keys / Startup Folder

                                      1
                                      T1547.001

                                      Event Triggered Execution

                                      1
                                      T1546

                                      Component Object Model Hijacking

                                      1
                                      T1546.015

                                      Defense Evasion

                                      Modify Registry

                                      3
                                      T1112

                                      Subvert Trust Controls

                                      1
                                      T1553

                                      Install Root Certificate

                                      1
                                      T1553.004

                                      Credential Access

                                      Credentials from Password Stores

                                      1
                                      T1555

                                      Credentials from Web Browsers

                                      1
                                      T1555.003

                                      Unsecured Credentials

                                      1
                                      T1552

                                      Credentials In Files

                                      1
                                      T1552.001

                                      Discovery

                                      Browser Information Discovery

                                      1
                                      T1217

                                      Query Registry

                                      3
                                      T1012

                                      System Information Discovery

                                      3
                                      T1082

                                      System Location Discovery

                                      1
                                      T1614

                                      System Language Discovery

                                      1
                                      T1614.001

                                      System Network Configuration Discovery

                                      1
                                      T1016

                                      Internet Connection Discovery

                                      1
                                      T1016.001

                                      Lateral Movement

                                      Collection

                                      Data from Local System

                                      1
                                      T1005

                                      Command and Control

                                      Exfiltration

                                      Impact

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      settings.dat
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\Crashpad\settings.dat
                                      • Size 40B
                                      • SHA256 3ffcf546faaf528f104b50a4dbf75fb6bcb4423aa21b8d330f6adfe7681050e8
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      metadata.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\crx_cache\metadata.json
                                      • Size 130B
                                      • SHA256 26065da71517b115298b8840915e7528534d61d01654e3a770340491aad476a1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      prefs.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
                                      • Size 421B
                                      • SHA256 c544cd3ee283becc97d0dae4092aded572b5b287fe767fd10328cc7d2413c4f1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      prefs.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
                                      • Size 607B
                                      • SHA256 3282f36347e6ca622fbfd634ce096a0ce4b543997336cfb6097f244e63077958
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      prefs.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
                                      • Size 559B
                                      • SHA256 af4720d75b2fa6cf506cea79aa666ce34f69a343a4775b1d16e7b3ae4cfa9250
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      prefs.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
                                      • Size 420B
                                      • SHA256 4f733f8229a8755d3ca77a8e5ab11d21300244eecc85aa23792f9e765fb4a857
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      prefs.json
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
                                      • Size 525B
                                      • SHA256 90db13baadf8744c4f11b5946868e35b9ac493d867d1aca416ae8372bfe8b94a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 28KB
                                      • SHA256 3e274426d9707dc52bae419e70bb7426f71abec4f377520c72335603d0425fa3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 34KB
                                      • SHA256 9476ba91adc24cb17ad9bcfd406b49851887b8e091881eb91fb0a2c6e04eb0ab
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 37KB
                                      • SHA256 03a77f6a013094b27091c57d3670dad4a99ce744b8ebb2f929e426f8d3b266a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 44KB
                                      • SHA256 6d2019c0e435200f836aa877b09d94886d53f59705baca3fd6172d1cda8eca27
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 45KB
                                      • SHA256 e115e4021013e0f1de01a1cf95351b46c24b2bfd74995da954b6cfa3dfaddb1c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 465KB
                                      • SHA256 31d22189d861f43dac07b176b68dd74a143a29180ad7a50cab7f95d62508503b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater.log
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                      • Size 467KB
                                      • SHA256 6056bfa73b9815c8acdd904830489969d931530bfb8765612705049f47465562
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 783B
                                      • SHA256 a3742c640ed886d76cc3ed457340e1fe94bafc5bb64b0f7eecd04b918b03129b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 2KB
                                      • SHA256 5d85a6521845440233d65624461749676f857093d7ec928805c028feaa553cba
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 3KB
                                      • SHA256 bb8a96f28ae82362cb74b1a3f2eef454fa1d57f44b81167aece87754cad92013
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 4KB
                                      • SHA256 fe180b6e35745a9bcc5b29c78c128262976f3b7918612ee7cb7d163ba5c546b5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 5KB
                                      • SHA256 56b1d7c877505e6c7949460d2e03382189daae8a7e1385eeaf049fedbecd10c0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 547KB
                                      • SHA256 d7921773eb5a31b4fdb646f9d7a9412db9404dab0ec854948e3724bf98a65107
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      updater_history.jsonl
                                      • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                      • Size 548KB
                                      • SHA256 2b90f84f3738d430a799e2c671ddbf335ba9ef5a9a1a46aaffa3563f7544fa41
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      chrome.exe
                                      • Path C:\Program Files\Google\Chrome\Application\chrome.exe
                                      • Size 3.9MB
                                      • SHA256 b24f7c774a5485e65dae2c88eb0014c3482795bf8a8a37fc6a637b40d23cbc13
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      am_MASCULINE.pak
                                      • Path C:\Program Files\Google\Chrome\Temp\source2020_622739949\Chrome-bin\151.0.7922.109\Locales\am_MASCULINE.pak
                                      • Size 18B
                                      • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      service_update.log
                                      • Path C:\ProgramData\Yandex\YandexBrowser\service_update.log
                                      • Size 3KB
                                      • SHA256 5e679a3d859a541df591163a1e559aa77bf5b3a7102ac8dc8f8ef52b27d7101f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      service_update.log
                                      • Path C:\ProgramData\Yandex\YandexBrowser\service_update.log
                                      • Size 4KB
                                      • SHA256 eb9ba8717f6f0b8e8d40cd671577cdf8ed063bac5e3ae9b0158855a0c62273be
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Size 1KB
                                      • SHA256 17245c313684992c182655920b71cedd08a7a86f147447892196cc9365991037
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      349D186F1CB5682FA0194D4F3754EF36_39FA54E89881FB5CCD5CD9DF5E849801
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_39FA54E89881FB5CCD5CD9DF5E849801
                                      • Size 1KB
                                      • SHA256 cebbd84459514c31ede894265b97eaca8560c36b8e09411fcf3095dc56affbd6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Size 1KB
                                      • SHA256 b5eed15bc387d498dd4266bd04916eb2515afd89d6e6378b794acd06b6b823dc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
                                      • Size 508B
                                      • SHA256 989617c1515257a8a2a4c5dd427254a1273d4b5377e193741edd037aac17db02
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      349D186F1CB5682FA0194D4F3754EF36_39FA54E89881FB5CCD5CD9DF5E849801
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\349D186F1CB5682FA0194D4F3754EF36_39FA54E89881FB5CCD5CD9DF5E849801
                                      • Size 532B
                                      • SHA256 c6a3249e8c2334637812dff9453f4c02f50e24dc69d6d2955dc47ba6b0794f34
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
                                      • Size 506B
                                      • SHA256 cb00006eb19698745578573b28057fa8e4db427df8fbb066bbcca3844dabbe3f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      BRAND_COMMON
                                      • Path C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\BRAND_COMMON
                                      • Size 26.5MB
                                      • SHA256 9a98a026d08afcee44e1beb2a490b3f20811b43e8967c311f13a15afab484507
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      setup.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\YB_F9EF5.tmp\setup.exe
                                      • Size 4.9MB
                                      • SHA256 5190a0c089089d3859899494fedf4956b7969aae5d44b7ec6549a2240f3dd509
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      distrib_info
                                      • Path C:\Users\Admin\AppData\Local\Temp\distrib_info
                                      • Size 300B
                                      • SHA256 ad87c64b3b406f366bd9961bd642b63281272c4b76eff3fcd1af684d7a13d6cc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      lite_installer.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                      • Size 13KB
                                      • SHA256 e37180d59ac8d793da5b1199a9f92f80c5eac1ab8bdaa955fe775e1db2118f90
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      master_preferences
                                      • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                                      • Size 193KB
                                      • SHA256 bc7e94c3230cc430ec13f0c167d2962dbaa04350168944fd63a5ca4b10baa111
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ChromeSetupOriginal.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Chrome\ChromeSetupOriginal.exe
                                      • Size 11.2MB
                                      • SHA256 6a0ce100203931ed6c66a4396153d92c7b7918c925472fac33cdf4aba0abfc9a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      System.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\System.dll
                                      • Size 12KB
                                      • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      YandexBrowserSetup.exe
                                      • Path C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\Yandex\YandexBrowserSetup.exe
                                      • Size 8.1MB
                                      • SHA256 fd60ed2d79b43c88a5427f52d5c9f1253f3ca8cdab3183767916c8a396b0485d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      nsDialogs.dll
                                      • Path C:\Users\Admin\AppData\Local\Temp\nss4A2F.tmp\nsDialogs.dll
                                      • Size 9KB
                                      • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      yandex_browser_updater.log
                                      • Path C:\Users\Admin\AppData\Local\Temp\yandex_browser_updater.log
                                      • Size 5KB
                                      • SHA256 8af8d77263ec22517ec4cd5041d7d0c1ffcaed6f822dc6c98dd830aaba0627f1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Yandex.lnk
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                                      • Size 2KB
                                      • SHA256 757625fce04ebdeec57810316cca29b3938f0cc1a6a87d1f62d4f7f021253356
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ru.bdic
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\YandexDictionaries\ru.bdic
                                      • Size 4.5MB
                                      • SHA256 af2bcc135f974aad505a8f55296117dbf4cbc095931e22f424698b181d273656
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      brand_config
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\24.10.4.931\brand_config
                                      • Size 8KB
                                      • SHA256 13dec2f26c9cb1daf781d5d851166a8a1e927ba8b23d3a096f2ddc05f9dfb4f9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      all_zip
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\24.10.4.931\resources\configs\all_zip
                                      • Size 715KB
                                      • SHA256 efc0fb80e13dc0a880c12cbfe7d73e6d56a65b0127a80edcf21ef25a999c8dc6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      sea_preview.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\24.10.4.931\resources\wallpapers\sea_preview.jpg
                                      • Size 59KB
                                      • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      sea_static.jpg
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\24.10.4.931\resources\wallpapers\sea_static.jpg
                                      • Size 300KB
                                      • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      29a02bdf-5f93-4543-83e0-e3f669c72b06.tmp
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\29a02bdf-5f93-4543-83e0-e3f669c72b06.tmp
                                      • Size 204KB
                                      • SHA256 81a1180bffb808209ba376b90c9323f7080fae6e9bd8fd3604292cc56fd12f3b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad\settings.dat
                                      • Size 48B
                                      • SHA256 8d1a14d91a657ffe8eb46334b8dbf1cb318e57410ab87b0ae169ad3d0ef3bd6b
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      37c379cb-b91c-4b4a-8a1b-d3d8946a8a52.tmp
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\37c379cb-b91c-4b4a-8a1b-d3d8946a8a52.tmp
                                      • Size 160KB
                                      • SHA256 3dcf052bb8050fa32f28873bb665f63f457799cb9a92549fb2dbea94014f929b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_0
                                      • Size 44KB
                                      • SHA256 b7d9212bba6e410ade9ce70fc6fab7e720bd6f62ddcc43a466d78ec3d1f629ad
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_3
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      f_000004
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000004
                                      • Size 40KB
                                      • SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      f_000007
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\Cache_Data\f_000007
                                      • Size 48KB
                                      • SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 48B
                                      • SHA256 2e24602d7c84640606da6b6daf80501cb2d50f199a5f345dbdce98d0dca6a68a
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 648B
                                      • SHA256 4c8a84e02d818709b7fd9719a713d9638728d96d18b14895d6556519be0060e7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      CURRENT
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extension Rules\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      SCT Auditing Pending Reports
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\SCT Auditing Pending Reports
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 f21d690f2d221b50a97e5cc5023f5cc85578a15804470ab5cc274d644b41113a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 b22d547ef1b5c19980840cc09b6ab0c148c5e6f676fc006ff9cd2ca489c1eea2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 343e08b26105d76ecaa0a95c790537848235c832d73b1f51ae9422f86d0e849e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 fe09eb9c3117e4568772793d358e312cc8d4f5a93cc14b4b7f7e5a15610a0fea
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 bfb4096590f028dd90697138efa306ea3693c728e62ccb8fd9d81fbb3e2c926e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity~RFe5cb936.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Network\TransportSecurity~RFe5cb936.TMP
                                      • Size 1KB
                                      • SHA256 7a6f98edd987169346d83dc84a8a1ec128888ad7e69216067f5a03cb2eb0bf72
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 15KB
                                      • SHA256 181ea06283defcdbf8b1ccae37c0964df48731a8a7e6422d78a1881dd91ede3c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 16KB
                                      • SHA256 ac5d0f20c232a5a2cc17df3d30c6e064c870186a5d875c5194a13b9faa588e44
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 16KB
                                      • SHA256 740c5397aa2d39a11807d46835b26b634382f7f354f3123df5f6b52d4e958062
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 11KB
                                      • SHA256 e5c9a22913a0b112c89eca827756fea4b5e57c9e9e9a69504d3bc707b2be46b9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                      • Size 7KB
                                      • SHA256 10e40e593fb45e8ef1436d807bcd8dafb3e329fae2435092767430ba394bad46
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences~RFe5c5ed1.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe5c5ed1.TMP
                                      • Size 3KB
                                      • SHA256 5b0295a3b510fa7233619b564f5539a644840431ea79cd8e5f4a2473e51857fb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                      • Size 9KB
                                      • SHA256 0ee8713414658e8e2d7151f26e3a0c0929f67878e3c7c1d38cce40c01cddbec8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences~RFe5c5ffa.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe5c5ffa.TMP
                                      • Size 2KB
                                      • SHA256 b2260d783cb04461cfde9076743cc6ed749a1925577f5da588f09ffca164fdab
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\2d797c1b-f956-4cf4-a5f2-731ba6fc379b\index-dir\the-real-index
                                      • Size 72B
                                      • SHA256 cca8a3589a40b0b14d255d6dfc8658feaffff9ed3d327ad9f3336fba9c1c9e63
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe5cbc14.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\2d797c1b-f956-4cf4-a5f2-731ba6fc379b\index-dir\the-real-index~RFe5cbc14.TMP
                                      • Size 48B
                                      • SHA256 8b58767010393b9d2df7b4cd05a46215b108039410a7bb842bdf567dd1dd3c15
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\437a92a0-d75f-4b2e-9145-f3477271e7fb\index
                                      • Size 24B
                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\437a92a0-d75f-4b2e-9145-f3477271e7fb\index-dir\the-real-index
                                      • Size 144B
                                      • SHA256 656fb0d25b0d237ab32e74b11cc2e71dde01c17e3399ee99e210418573dd0e00
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe5cc01b.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\437a92a0-d75f-4b2e-9145-f3477271e7fb\index-dir\the-real-index~RFe5cc01b.TMP
                                      • Size 48B
                                      • SHA256 614f97407dd0a3412c9ea54656a1a0720d2e206bca9dbc3a9052222b917ee248
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\9000fe3b-1f4a-45a7-b0ae-767e81f22ec8\index-dir\the-real-index
                                      • Size 264B
                                      • SHA256 5ef90a7ac8c1e37bc8f47cfe801178ceb9f8c71677d6dbd44437e5472065c3cd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe5cbd3d.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\9000fe3b-1f4a-45a7-b0ae-767e81f22ec8\index-dir\the-real-index~RFe5cbd3d.TMP
                                      • Size 48B
                                      • SHA256 8af211c907c458cd97d47856916e1caa8fa8e9afddfbb003117a2ced74709ecc
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      index.txt
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt
                                      • Size 326B
                                      • SHA256 d59be01b7bfe8049bdad651591cd2ce569aa64239426a54ade6fb2b9f85bba4a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index.txt
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt
                                      • Size 324B
                                      • SHA256 0f427b343ee185af198b22d16dae4f09c76de20c1f07fb51bbc898096e1d5183
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index.txt
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt
                                      • Size 262B
                                      • SHA256 d28e1f88579ea85c320d3e79fa769afc3991b3cf217e72da227ef4a48bcf73ce
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index.txt~RFe5c6d77.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\a401a5c3e5a6e316d830c597aeb6f7a2ff00e988\index.txt~RFe5c6d77.TMP
                                      • Size 208B
                                      • SHA256 c7ed9a764fcdf62c2ea3e80eaa28c4cf0084615d08da612ce28cf4a62f305af6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\a3230e77-2af1-41b6-b924-a9301a3bcd27\index-dir\the-real-index
                                      • Size 2KB
                                      • SHA256 ee2d9c4d26746e5a980810e4faace07927bae4292885e46baa643276dd594afc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe5cfc69.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\a3230e77-2af1-41b6-b924-a9301a3bcd27\index-dir\the-real-index~RFe5cfc69.TMP
                                      • Size 48B
                                      • SHA256 df843dfb749c6a0ab1f23577428658a898acb103566c0db6a5039ff13ac25cac
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      index.txt
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\index.txt
                                      • Size 106B
                                      • SHA256 c205d80a9febc9db90b11d31dc847ef40451940859e5808b786d757d94aec0cd
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index.txt~RFe5cfca7.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\CacheStorage\f0a1ef1ab533153702e0a7f73b8d66e0b7e01d1d\index.txt~RFe5cfca7.TMP
                                      • Size 111B
                                      • SHA256 931eb6d6ebbf56ec2ddaaff59579a1de81a9983f4670cc9814d8968d18fc5335
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 96B
                                      • SHA256 a92572e5abb26c809192d2e44362d354d5dfb2422d59228f68fbf0b12b8bffb0
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index~RFe5cbdd9.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cbdd9.TMP
                                      • Size 48B
                                      • SHA256 fe45f37a33f02672207f0b784f61f9403d57897bcb9312955f9e75b76547b4f5
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Site Characteristics Database\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Tablo Cache\data_1
                                      • Size 264KB
                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\699bcaf2-2d9a-4479-a2e9-335c19d30891\index-dir\the-real-index
                                      • Size 4KB
                                      • SHA256 c790915d08f696a5b5a0fd5b59bdd87bf5629049117e5430c3507efc207e1b6f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index~RFe5cdf8a.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\TurboAppCache\Nativecache\699bcaf2-2d9a-4479-a2e9-335c19d30891\index-dir\the-real-index~RFe5cdf8a.TMP
                                      • Size 4KB
                                      • SHA256 b5bd0d7c793a63f90e33a6820b4764a5df3df383ecb3b26473c02af70662d86f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      turboapp_db.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                                      • Size 40KB
                                      • SHA256 77af162b99ad72a77dedf4b184f77f31272b4460b2f8c4786dca4d437d2e8cb6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      turboapp_db.json
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json
                                      • Size 40KB
                                      • SHA256 a2a90b8719720f2470bc4e6bf4f8418595f74c1a2713d9ee3f26b4df8a597c3c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      turboapp_db.json~RFe5c6384.TMP
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\turboapp_db.json~RFe5c6384.TMP
                                      • Size 24KB
                                      • SHA256 c78e665053db415b13cd2f7f1435d82ac703d33765f045f11ef3e135e81c0791
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                      • Size 224KB
                                      • SHA256 a8fee4aca1b4cea5633fcd022a4faaa177d531f553dd9119227d29bd56b68c24
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                      • Size 223KB
                                      • SHA256 c4fe5d9fc62a3e5d601b6ba8c6bc9724106e6de759247225f94c76f079044fbd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      jeackiehcknahnkgbcajjemlnfndgdfo_1.2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\component_crx_cache\jeackiehcknahnkgbcajjemlnfndgdfo_1.2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • Size 6KB
                                      • SHA256 2e0d2c7021c2c896947b6ad8f9a077c34173af1f8036c1962f78c256c2b74e02
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      ui
                                      • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                                      • Size 38B
                                      • SHA256 bb563ab4c5c6cc6ec715d45b02604b4c14e8e2a0c6c617d5e7a7d922c97f73b7
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      settings.dat
                                      • Path C:\Windows\SystemTemp\Crashpad\settings.dat
                                      • Size 40B
                                      • SHA256 7aba77e72509d6ae15d540768c9c7597bc97b34dfbe9f0382574e247c4bf0b65
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      uninstall.cmd
                                      • Path C:\Windows\SystemTemp\Google4700_1007178543\bin\uninstall.cmd
                                      • Size 653B
                                      • SHA256 a38e49c0e87a9dd81682346392d45c965783c25d5ec6aaa373cb9799c2a602e2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      updater.exe
                                      • Path C:\Windows\SystemTemp\Google4700_1007178543\bin\updater.exe
                                      • Size 6.4MB
                                      • SHA256 bc8bb3c31073ec8e5af0e90cd5d36c8fc815f9ac841f7bac48e3076acd0b06ad
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      setup.exe
                                      • Path C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\CR_14B21.tmp\setup.exe
                                      • Size 7.2MB
                                      • SHA256 8c4865c2d7fbada052793ec312d43e704bd26ccfcd47a40688cb9aca4c839f7e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      db5aeffc-2704-4ab2-b5af-4acae5df2df3.tmp
                                      • Path C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping1316_1251570311\db5aeffc-2704-4ab2-b5af-4acae5df2df3.tmp
                                      • Size 394KB
                                      • SHA256 74bcbc91a73768f324ccbccd287346b922c6331d777b91812f082126754a166e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      chrome_installer.log
                                      • Path C:\Windows\SystemTemp\chrome_installer.log
                                      • Size 31KB
                                      • SHA256 2373114d10f4c4c0c14ea80e260483cd0a0aed2b313836cb4c2527f2e4a9d63f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      yandex_browser_installer.log
                                      • Path C:\Windows\SystemTemp\yandex_browser_installer.log
                                      • Size 4KB
                                      • SHA256 a1621128a0acd0abed841bef9e8ac518910362b7ee7f164171570548f14c885f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      memory/1100-1860-0x000001FF05D00000-0x000001FF05D01000-memory.dmp
                                      Download

                                      memory/1100-1862-0x000001FF05D10000-0x000001FF060DD000-memory.dmp
                                      Download

                                      memory/1100-1863-0x000001FF05D10000-0x000001FF060DD000-memory.dmp
                                      Download

                                      memory/1100-1864-0x000001FF060E0000-0x000001FF060E1000-memory.dmp
                                      Download

                                      memory/1100-1861-0x000001FF05D10000-0x000001FF060DD000-memory.dmp
                                      Download

                                      memory/1100-1328-0x00007FFB3B210000-0x00007FFB3B211000-memory.dmp
                                      Download

                                      memory/2964-1477-0x00007FFB3A4F0000-0x00007FFB3A4F1000-memory.dmp
                                      Download

                                      memory/2964-1478-0x00007FFB39DB0000-0x00007FFB39DB1000-memory.dmp
                                      Download