Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 22:23

General

  • Target
    2026-09-29_33519bf6f3bd47f2761fd8059e7b8664_bkransomware_elex_glassworm_hawkeye_maze_remcos_rhadamanthys.exe
  • Size 59.8MB
  • Sample260930-2azzgsbf99
  • SHA256 7f66f321830de4fa0c37301f003bd2cddeabcdd70c2b5f21e0d8281074ce5579
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 10 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-29_33519bf6f3bd47f2761fd8059e7b8664_bkransomware_elex_glassworm_hawkeye_maze_remcos_rhadamanthys.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-29_33519bf6f3bd47f2761fd8059e7b8664_bkransomware_elex_glassworm_hawkeye_maze_remcos_rhadamanthys.exe"
    1⤵
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Users\Admin\AppData\Local\Temp\ybF41F.tmp
      "C:\Users\Admin\AppData\Local\Temp\ybF41F.tmp" --brand-name=int --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --do-not-install-flash --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --progress-window=524756 --send-statistics --verbose-logging
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3692
      • C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\BROWSER.PACKED.7Z" --brand-name=int --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --distr-info-file="C:\Users\Admin\AppData\Local\Temp\distrib_info" --do-not-install-flash --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --progress-window=524756 --send-statistics --verbose-logging
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:3936
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:400
        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source3936_22742\Browser-bin\clids_yandex.xml"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:2872
  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=524756
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4152
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\crash_service.exe
      crash_service.exe --max-reports=10
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:1388
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\suspend_api_check.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\suspend_api_check.exe" --check-suspend
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1472
      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\suspend_api_check.exe
        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\suspend_api_check.exe" --wait-for-event=444
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2708
    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --channel="4152.0.1610552950\445425072" --lang=en-US --user-id=BBA84455-FB90-4816-9E73-0E7FF5C1D4D8 --ignored=" --type=renderer " /prefetch:-645351001
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4720

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
        • Size 1KB
        • SHA256 da6209009b4c183d54090cb30abc567739b2cffdb14da9c499afb3a6fc468f9c
        • MD5 SHA1 SHA512 TLSH

        349D186F1CB5682FA0194D4F3754EF36_DF0B2551FABCC3747862FC5C701C4B5E

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_DF0B2551FABCC3747862FC5C701C4B5E
        • Size 1KB
        • SHA256 fc28763e56078ec9fb3227fb1c51a98781af171496071b661d454114c176a1f3
        • MD5 SHA1 SHA512 TLSH

        B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
        • Size 1KB
        • SHA256 5bce4ec1635cd5112bc508a1b451f0d0d9fd71a9ab6fec0ca0214a80170f9653
        • MD5 SHA1 SHA512 TLSH

        0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_4136D3715888E22D65EBE484B233D81B
        • Size 508B
        • SHA256 ca8fff1c19e812dcb4da929548661bc3e2769f5b5033476177652d8c8b09bd87
        • MD5 SHA1 SHA512 TLSH

        349D186F1CB5682FA0194D4F3754EF36_DF0B2551FABCC3747862FC5C701C4B5E

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\349D186F1CB5682FA0194D4F3754EF36_DF0B2551FABCC3747862FC5C701C4B5E
        • Size 532B
        • SHA256 9804d6e6bb4c646683b1417848d870b2d0e80be1b10d87ff4e96151af5afec9c
        • MD5 SHA1 SHA512 TLSH

        B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B039FEA45CB4CC4BBACFC013C7C55604_50D7940D5D3FEDD8634D83074C7A46A3
        • Size 506B
        • SHA256 6a8d4aeb67795ce0d905f5b4dacf17585316559a19721d9c6ca4fe71e4815bd6
        • MD5 SHA1 SHA512 TLSH

        BRAND_COMMON

        • Path C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\BRAND_COMMON
        • Size 4.7MB
        • SHA256 b8720e61906035eee9b9996ea3a5365a5ec870da333ace3655fc459808d0b9a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BROWSER.PACKED.7Z

        • Path C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\BROWSER.PACKED.7Z
        • Size 49.3MB
        • SHA256 917742a7bf2bc7057d76a5869b97d13d2b6326a56172a80e6925ba38e2cb312e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brand_int

        • Path C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\brand_int
        • Size 781KB
        • SHA256 676a2222843f39926d74385aea5f0207fa240df0ee7c8ac040974924593c27a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Users\Admin\AppData\Local\Temp\YB_70FF5.tmp\setup.exe
        • Size 912KB
        • SHA256 3a195f0c027d97b2491af28a04278893afee712e8ca46afc04e0bcd8cbb378d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clids.xml

        • Path C:\Users\Admin\AppData\Local\Temp\clids.xml
        • Size 318B
        • SHA256 45ae59bdfb876444ecf5f1b66fb54d12fab4cfcdae69e1b35e498041ceb10c5a
        • MD5 SHA1 SHA512 TLSH

        distrib_info

        • Path C:\Users\Admin\AppData\Local\Temp\distrib_info
        • Size 67B
        • SHA256 2dffce1f9e51ea7dd1f3e16c2b68b60fbda27dbdaf0a3bcce2ea9f9b90fad34e
        • MD5 SHA1 SHA512 TLSH

        lite_installer.log

        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 9KB
        • SHA256 9e9731a26a53db075c37bd8d0b4e5eb86d4c71c913c94a11985c082e17ef97e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        master_preferences

        • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
        • Size 9KB
        • SHA256 2b09fc2b141e80be6708ce1fb34c3a094ca555746b7258e60e293b1edb171830
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brand_config

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\brand_config
        • Size 5KB
        • SHA256 307441770dcffbf78588acefb3815275d92676fbce28eec2089ad192908a821e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.dll

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\browser.dll
        • Size 33.7MB
        • SHA256 ce1996a83158d7982ec9d96d4a0cd192901e9fe14e287315bcba72a9c14c49cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\browser_100_percent.pak
        • Size 1.9MB
        • SHA256 f44b06f5042d336b9ae3d5eff4c62ef804a12f17e81e5ac30d61fcadcc25c655
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser_elf.dll

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\browser_elf.dll
        • Size 135KB
        • SHA256 3e3cc74119f9b8c2f0ed9533cf15df51031bf395dcc3cc26f53b71ec50bb13a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crash_service.exe

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\crash_service.exe
        • Size 401KB
        • SHA256 a69ecc32be76a2e3803e0e9dd2a45a56ab8e9f458aec3b7d5f26cdfd72401b03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dllyupdate.dll

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\dllyupdate.dll
        • Size 377KB
        • SHA256 dc761e633640a4b8dbc6bb1eec26031a3e82dcadcb649c04d5e0c1ff99c86c0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\icudtl.dat
        • Size 9.7MB
        • SHA256 18977bd65e2b2ceb2821db501dfd2bdd920762972e612dd1d8ec45f4a313296f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\locales\en-US.pak
        • Size 216KB
        • SHA256 74cf0221b3ea16a5914da68a9354b0d49e185dff0ac6f5e9118e5ed5d1aaa66b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        natives_blob.bin

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\natives_blob.bin
        • Size 429KB
        • SHA256 bb6a54a7414519312130fc364128d9464c3d0763e42b018ed29db22a2e389dd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NPSWF32_20_0_0_306.dll

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\plugins\NPSWF32_20_0_0_306.dll
        • Size 17.1MB
        • SHA256 6de45339570e3c034d999786d3a47043258534a531b934375b491a1bc11f61f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\resources.pak
        • Size 21.9MB
        • SHA256 e23dc1979debb0a2ea998dfe69bb0923085a14e9745cdf2611f4044f1a26cbc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_US_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\resources\tablo_US_
        • Size 27KB
        • SHA256 ae45378ebd574d2014ed304f42358f3319c33b33de4935ceaacfe61a5c4570dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\snapshot_blob.bin
        • Size 502KB
        • SHA256 e995590702872c495bb1ee334fc1c35cb0559d46bb60e0bbd4109747d4d3dc7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        suspend_api_check.exe

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\47.0.2526.6739\suspend_api_check.exe
        • Size 235KB
        • SHA256 270a5c758aaaf5c62e67c42bc0f17d9c1d7ca7078a28112e9231403cee9d223d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clidmgr.exe

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
        • Size 148KB
        • SHA256 63fb878677b09b5f7285037e7ad80c11eee316bd6bcbe6ccb115142cea34ccd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about_logo_en.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\about_logo_en.png
        • Size 21KB
        • SHA256 979bf1fc4608fb8cbc1fce4940f1e178fcb63db1749721539533a05e28630724
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about_logo_en_2x.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\about_logo_en_2x.png
        • Size 10KB
        • SHA256 8949a0493067c787e3d289624ca874cb1206c6369be548bec93395ea11294e26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about_logo_ru.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\about_logo_ru.png
        • Size 21KB
        • SHA256 4a7e14c6252cd9ce8307564a596b13c5606fabe14bb2f6b4b734b79091674961
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about_logo_ru_2x.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\about_logo_ru_2x.png
        • Size 9KB
        • SHA256 ba9f3b69fa3d1f8abce9868bd477b704d28892c4d85b4ecab4a1e93887df6470
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api_allowed_hosts

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\api_allowed_hosts
        • Size 1KB
        • SHA256 e3c14844385d2f85fe79319c1d890bcd6801d72d9511f326d99fad3910897e0c
        • MD5 SHA1 SHA512 TLSH

        banks_urls

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\banks_urls
        • Size 40KB
        • SHA256 caef2a91a33006a39f5aed76d5845c30a0b2215cfcdb4e0100e7159a00eb8049
        • MD5 SHA1 SHA512 SSDEEP TLSH

        check_whitelist

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\check_whitelist
        • Size 2KB
        • SHA256 77888e4f45a8cde6e3f4cec812fecc91a87dcfb621e4ad16e81867a75da6a9f5
        • MD5 SHA1 SHA512 TLSH

        chua_list

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\chua_list
        • Size 1KB
        • SHA256 fe4de4a14580b44d2e825cfc66ab1b9ff442c23e40f9456ae775ef6b0c23c487
        • MD5 SHA1 SHA512 TLSH

        hips

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\hips
        • Size 592B
        • SHA256 28afff68d65a8f896a42dc5c2eccdf0e5f2e19a6a88b86ea9679c45caded31fc
        • MD5 SHA1 SHA512 TLSH

        important_urls

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\important_urls
        • Size 13KB
        • SHA256 a93ad032e77e9c45014f432a323be9e067a798f15c7ae9ff97fd4e891c2c2088
        • MD5 SHA1 SHA512 SSDEEP TLSH

        inline_verified_servers

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\inline_verified_servers
        • Size 1KB
        • SHA256 787f9ce733db7fc2847eed47c52dbbacfff3bc2758fa0cf67a7778188e51249d
        • MD5 SHA1 SHA512 TLSH

        minwhite

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\minwhite
        • Size 2KB
        • SHA256 8db49f4aebbba0a4d9d43128b4fe4387d7f50290183bbb214c5c4a7f27137553
        • MD5 SHA1 SHA512 TLSH

        p2c-phone-schemes

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\p2c-phone-schemes
        • Size 14KB
        • SHA256 c4915156bdc260e974e5a24beb06359ba848d4577a4dbd06273f48b4b25da501
        • MD5 SHA1 SHA512 SSDEEP TLSH

        registry

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\registry
        • Size 2KB
        • SHA256 732729aeef5b21e718cde523cce2c2fc0f58b10acbd21cc2093c4e659ee0e1f7
        • MD5 SHA1 SHA512 TLSH

        replace

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\replace
        • Size 4KB
        • SHA256 b46df6b56cfa082a66c734f61d2c335aec8c064880d6f2d062b561aeb2447527
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rewrite_list

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\rewrite_list
        • Size 1KB
        • SHA256 43f3f09bd75643e2242f532113dad80ba503b17c9751aa4d29acbeeb6e62f1a4
        • MD5 SHA1 SHA512 TLSH

        smartback

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\smartback
        • Size 2KB
        • SHA256 a29e514a55ff486a2fa1afdb3aeb1143ef7e2d6716f8c17de7f90fec6bae6ed1
        • MD5 SHA1 SHA512 TLSH

        sovetnik

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\sovetnik
        • Size 624B
        • SHA256 94530122ea9567045607237cd23e6b50efbed4cd4d53ec2bbe89dbd19004ff18
        • MD5 SHA1 SHA512 TLSH

        spa

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\spa
        • Size 816B
        • SHA256 f13b60e38695d6c9d59c5245f81bdf3619e6fbd4b4797af6eb18b70fbcd73e03
        • MD5 SHA1 SHA512 TLSH

        stat_bl

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\stat_bl
        • Size 2KB
        • SHA256 1c7f3a8ba0a9e9cadfde361df55d0f218b27d78f5336d56c177eb00e4051a96f
        • MD5 SHA1 SHA512 TLSH

        togglecalipso

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\togglecalipso
        • Size 912B
        • SHA256 dce821a8ab41546408e74a16eb998dee714e4b88f3473a718d445a5eb1085b0f
        • MD5 SHA1 SHA512 TLSH

        translator

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\translator
        • Size 1KB
        • SHA256 2dd5ac553117f38304c28f63d49af7133c0ddb5f49c774b09cb17697015cfc42
        • MD5 SHA1 SHA512 TLSH

        trusted_extensions

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\trusted_extensions
        • Size 1KB
        • SHA256 24f277afb90be20bcfac767ca84e7db1896f370a3971b0767eeccf828ca89cee
        • MD5 SHA1 SHA512 TLSH

        ua_change

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\configs\ua_change
        • Size 1KB
        • SHA256 f864e9a3ef3ee3ebe77be06dc900d6f3392824422fbe9a7efcae521722512753
        • MD5 SHA1 SHA512 TLSH

        brand_settings.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\extension\elokbjeafkcggjfjkakpchmcmhkhaofn\brand_settings.json
        • Size 292B
        • SHA256 d9db99e2996d4b9fea2244f206fd01efb297859edaf2e94f03fcc2b1a7bdc762
        • MD5 SHA1 SHA512 TLSH

        brand_settings.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\extension\fcgfaidpicddcilhjhafmmcgfodijhjd\brand_settings.json
        • Size 228B
        • SHA256 fa6d4db7bae4d07039053003b4121a8bfc149096e166d41e4295ac18a6c47888
        • MD5 SHA1 SHA512 TLSH

        brand_settings.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\extension\gopnelejddjjkamjfblkcijjikkinnec\brand_settings.json
        • Size 157B
        • SHA256 f17672564d695146e5e9669e0ae0e2b5298e1531513bebbc7480a99e100f5ef1
        • MD5 SHA1 SHA512 TLSH

        import-bg.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\import-bg.png
        • Size 13KB
        • SHA256 d1f78371b8d86ecd9a1e6c5878ff5da756f8c9ebb6b1a6d5d24ed017ad64c010
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dictionary-en-US.mrf

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\morphology\dictionary-en-US.mrf
        • Size 372KB
        • SHA256 fbd6c8f911927a994db26eac21e4c028d75ea9de593eaa525f331e5c9a911ce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dictionary-en-US.mrf.sig

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\morphology\dictionary-en-US.mrf.sig
        • Size 256B
        • SHA256 d5e3a63301977129113a9c0bdc0dd14173768c6f9f5ce2f2036c0cc6a53d706c
        • MD5 SHA1 SHA512 TLSH

        stop-words-en-US.list

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\morphology\stop-words-en-US.list
        • Size 10B
        • SHA256 ae6606ea473ca9a9f8913cb2bd2b1ae2e45905d7ddc9638074656d0ed1c08b42
        • MD5 SHA1 SHA512

        download.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\safebrowsing\download.png
        • Size 437B
        • SHA256 3129d9eaba1c5f31302c2563ebfa85747eda7a6d3f95602de6b01b34e4369f04
        • MD5 SHA1 SHA512 TLSH

        sxs.ico

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\sxs.ico
        • Size 43KB
        • SHA256 ad566a3e6f8524c705844e95a402cdeb4d6eed36c241c183147409a44e97ebcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo
        • Size 82KB
        • SHA256 742f4e8e5d1d2f8e13d163ba3d9a9bfab096c6d412bd4a866daa2f548da25b74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_BR_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_BR_
        • Size 34KB
        • SHA256 ebdff612d6418d78c78fbe723cbbbed5bebd56d4b5c042f5fbdd5a92d5238d68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_CN_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_CN_
        • Size 84KB
        • SHA256 aef15703de57ef5fcab278505e5a3dfe5808c1161f86e8f395fb77c245d9dc95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_ID_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_ID_
        • Size 31KB
        • SHA256 622ba2dae46081736cd2a8d8675a47f38398adac58240691ccc781e6f6f6dcb8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_IT_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_IT_
        • Size 31KB
        • SHA256 88d8e30e8b10988b7ebd1572715add83a1e5ceef49075a6c8149c981a97f62ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_JP_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_JP_
        • Size 33KB
        • SHA256 b011323d9a10ac4e8fec0a2aa0017376c71a0da148667d53d086cfacf49e859d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_KZ_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_KZ_
        • Size 45KB
        • SHA256 8ff8e9258597b0a19f4a952fa60b40ffca8b9952c85d0fbb7d0eebeda6450916
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_PT_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_PT_
        • Size 33KB
        • SHA256 aee46216e8ab8f96461a7b32a34b59e64720f5e596fb80a61228bf385bfa2a4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_RU_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_RU_
        • Size 34KB
        • SHA256 b3919977ccc7fae85da3fd16b13690122a1da0bbb5b41e115ea5ce0c169a045e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_TR_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_TR_
        • Size 36KB
        • SHA256 9de93fc86581ea644d0322c929658298cf1918f10e5557857db41de9bc192191
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tablo_UA_

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\tablo_UA_
        • Size 41KB
        • SHA256 6c0116bb0b8a816978aa667eb13c8b79fab792f99da76a3fd2b4ce7901fc03cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        transparent.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\0\transparent.png
        • Size 110B
        • SHA256 6f064b11007507ecebb88b25c6b21a41e51189b079c5a30342c8dc8950019c0c
        • MD5 SHA1 SHA512 TLSH

        transparent_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\0\transparent_preview.png
        • Size 294B
        • SHA256 bb1bfba53c040d7d666b082a5cf0800c853d175e70cad14fbeae39a913a27562
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\0\wallpaper.json
        • Size 192B
        • SHA256 82b023e23c9a15b74815609eede8e958e1fa381f4d27f68abd2ea7fa9afca9ec
        • MD5 SHA1 SHA512 TLSH

        10.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\10\10.jpg
        • Size 2KB
        • SHA256 4550b5abe15b901af9b21595601be74d242174283aed1fba615b2eff1783385d
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\10\wallpaper.json
        • Size 250B
        • SHA256 25c0ff5e04547c94d3c12432664689f2ecddc4f75240fbd75d61d70a4caeec52
        • MD5 SHA1 SHA512 TLSH

        11.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\11\11.jpg
        • Size 5KB
        • SHA256 a19e75c787f70a911ec85d17bc55e51eb3c2c7e794e32169b313c669d51e518e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\11\wallpaper.json
        • Size 223B
        • SHA256 e51d3d4da7445dba9cd596763b015c0dbde09c62fae57f11f6bf5020c9a6a152
        • MD5 SHA1 SHA512 TLSH

        15.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\15\15.jpg
        • Size 4KB
        • SHA256 7cbec86f723eb355decea53dd5cfcb82e40d727d54d7ce0ba06f4d8416a292f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\15\wallpaper.json
        • Size 250B
        • SHA256 781369ea2401d0ddc1c4f00ede6fd15a7ab045c904150421f254a087351dc071
        • MD5 SHA1 SHA512 TLSH

        16.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\16\16.jpg
        • Size 2KB
        • SHA256 64ef75bfac54654eae5aa7063a465029db29e8e856eac9db3f724dbb5692b372
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\16\wallpaper.json
        • Size 249B
        • SHA256 4f920363c5d60b4ae23ede70ac8384dec998d618801d6e1af9ceb2129660805f
        • MD5 SHA1 SHA512 TLSH

        18.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\18\18.jpg
        • Size 4KB
        • SHA256 bfe307e2d65d272dd586872d8068103ca62824cf7fc4b9d50fb7f12b932ea8d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\18\wallpaper.json
        • Size 250B
        • SHA256 01cb2d370b1ac0639f77b8e95f0731eab2ecd459aba74247b6a63c61ab84c340
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\1\wallpaper.json
        • Size 180B
        • SHA256 a8a397cb0972689c694cf37ae70688570ee770f0d911e806866e04d8f08ea297
        • MD5 SHA1 SHA512 TLSH

        white.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\1\white.jpg
        • Size 735B
        • SHA256 01bca2704119bdc75e7d45cc76c2e398f85b1cc9d392534b271897fd2d7198bf
        • MD5 SHA1 SHA512 TLSH

        white_preview.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\1\white_preview.jpg
        • Size 795B
        • SHA256 3512eec14b01cafcf3ee5dfc3b8293f3f6640b0edc62751ef8f08a16ce61cbed
        • MD5 SHA1 SHA512 TLSH

        2.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\2\2.jpg
        • Size 3KB
        • SHA256 fce4e22134cf9a027486d16dea1be727cea700f97819c0d0f21412051c9fb258
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\2\wallpaper.json
        • Size 248B
        • SHA256 5fc9c3520737940579c8279129310530b801267d9a298557f058f87179fd189d
        • MD5 SHA1 SHA512 TLSH

        31.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\31\31.jpg
        • Size 5KB
        • SHA256 798539651ff4afcc9773233b3239f14725046434eee4286378df29dd22463f6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\31\wallpaper.json
        • Size 249B
        • SHA256 94debb9a3230b093f8ed32de3ad592184b9eb08fe6b0c366f227823d5fb636aa
        • MD5 SHA1 SHA512 TLSH

        32.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\32\32.jpg
        • Size 5KB
        • SHA256 1e59d37cb3777f7f9e6e411cf377f93972427e41350721b3b756460ef07ca213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\32\wallpaper.json
        • Size 250B
        • SHA256 11f03669479b7d7a738a804b0983851c6cc50b0e00d997cd1aa88e32131251ec
        • MD5 SHA1 SHA512 TLSH

        33.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\33\33.jpg
        • Size 5KB
        • SHA256 f9757a9dfabb41705a9ea3feaf7543e001d25bd9fe335ed71ad1ced575296028
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\33\wallpaper.json
        • Size 249B
        • SHA256 abc80ccd0a2243f15d6c6842ca0b69bfe23b515d8da35e7ee52253de009a7352
        • MD5 SHA1 SHA512 TLSH

        34.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\34\34.jpg
        • Size 12KB
        • SHA256 941168d98a02e51594be3c4da040cb382471c322f8095c3247738aa8dfe09689
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\34\wallpaper.json
        • Size 250B
        • SHA256 81bc91636d4d4ce552a4257d2e4db8c7a5d26c51ff66d751e05d82660963b37d
        • MD5 SHA1 SHA512 TLSH

        3.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\3\3.jpg
        • Size 2KB
        • SHA256 e963c5a42476ae8de85329129f964eee27230e7af28be5388ead1e0945b6f8fd
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\3\wallpaper.json
        • Size 248B
        • SHA256 26b8fff3b68ff53d0118ef1fa6cc4b69af0e7eb838287f02a08760db93135469
        • MD5 SHA1 SHA512 TLSH

        4.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\4\4.jpg
        • Size 3KB
        • SHA256 cdb0a38a7cb9302d45f6c9b72722d30e3a6913cea533490484ea37d6b2f5c179
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\4\wallpaper.json
        • Size 248B
        • SHA256 14254078c0d42298ab764ec1cd903eaa2126efa24919e90234fa8066338ce163
        • MD5 SHA1 SHA512 TLSH

        5.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\5\5.jpg
        • Size 4KB
        • SHA256 ee401217df0d1384e4592a0190bb7e52bf5631a2f6c53a95a1a89c7e3804e5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\5\wallpaper.json
        • Size 248B
        • SHA256 1d237baea59fd58c4b391088901aa2f8430f10dc5c88aaaafa5c503694fe8290
        • MD5 SHA1 SHA512 TLSH

        6.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\6\6.jpg
        • Size 3KB
        • SHA256 a15b78e7d07b3bc186245a1d2d93cc9b7537152fc17f3514127d46755b1c0e40
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\6\wallpaper.json
        • Size 248B
        • SHA256 9c334bd61b8d8666a11e494b4a1d4060b445fb75c0bcd66ce1c4b96066fb9d4d
        • MD5 SHA1 SHA512 TLSH

        9.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\9\9.jpg
        • Size 3KB
        • SHA256 2905677438da0c17d542bd7ca8c7f278dafa7a772969cfdd2b16db464ffde2df
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\9\wallpaper.json
        • Size 248B
        • SHA256 60bdd90b3894a02c03ce5d29d238f9247f39c5974cf4c4f3f955686d204f72a8
        • MD5 SHA1 SHA512 TLSH

        preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\custowhite\preview.png
        • Size 168B
        • SHA256 a144c784a38663a033202d9b9e3c7fe8278e321af81cb4d6eb02c8832c3efa5a
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\custowhite\wallpaper.json
        • Size 287B
        • SHA256 88010d213b3519d34f16dfa44602b3d96f0290c9625d700478cef180deff3bae
        • MD5 SHA1 SHA512 TLSH

        fir_tree_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\fir_tree\fir_tree_preview.png
        • Size 8KB
        • SHA256 9e22ae23bf590fe50866a4e929d901431fc86ef859291f9d45821c3e7eaf8a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\fir_tree\wallpaper.json
        • Size 371B
        • SHA256 7b8f2456b6517922f50edf00c6beee6c77a8cfb81d44d7270a2cc3dfbc3aaf88
        • MD5 SHA1 SHA512 TLSH

        flowers_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\flowers\flowers_preview.png
        • Size 9KB
        • SHA256 70a7a65aa6e8279a1a45d93750088965b65ea8e900c5b155089ca119425df003
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\flowers\wallpaper.json
        • Size 370B
        • SHA256 face1c7f9049d15861f636fa1e2103f008fe90b7819228c1405338501ee19a2d
        • MD5 SHA1 SHA512 TLSH

        preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\meadow\preview.png
        • Size 5KB
        • SHA256 b0d9fd9455674cd89a9897a800f899cca054a64f774149a9ded73d4fc7a9b328
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\meadow\wallpaper.json
        • Size 423B
        • SHA256 871f4ddc18040c2b1524a3ec4783c28c3fd32ce6a91ddee233978650775b184b
        • MD5 SHA1 SHA512 TLSH

        preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\misty_forest\preview.png
        • Size 5KB
        • SHA256 f5c9baaa4abb6b8335970b9af6584dbdd3ae104b9775bb8c919c6601d12d518d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\misty_forest\wallpaper.json
        • Size 410B
        • SHA256 76dbfc144e816ca9876987ae013b15cd2c661ab7e90bfe665059808438645089
        • MD5 SHA1 SHA512 TLSH

        mountains.webm

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\mountains\mountains.webm
        • Size 4.1MB
        • SHA256 4e61ce68548a0e3ae0fcaf5f01b01fb1bc930a68a7ad1b757843c205013de7b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mountains_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\mountains\mountains_preview.png
        • Size 5KB
        • SHA256 2263126bac6f3018499cff7d2d9ca7f5b8669e7d97db26a20208315f1bad3940
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mountains_static.jpg

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\mountains\mountains_static.jpg
        • Size 438KB
        • SHA256 b6445abf7932a8627a6fce236957a09f2aa150ebf872e4f4974b8ae11c87414a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\mountains\wallpaper.json
        • Size 225B
        • SHA256 8086dc442221f2eda98ad850bd7c3b2b36d699a4983eca6b6ed4074c9375db61
        • MD5 SHA1 SHA512 TLSH

        preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\peak\preview.png
        • Size 5KB
        • SHA256 b5c9d61d6a937b373304b2e65b25317b7aa15f7a7cdc2df385738df45035d584
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\peak\wallpaper.json
        • Size 422B
        • SHA256 d6c6219662bf5c46a4e480bc37a1a6dbcd7e8ada78c7131c52116eda12833ca0
        • MD5 SHA1 SHA512 TLSH

        raindrops_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\raindrops\raindrops_preview.png
        • Size 7KB
        • SHA256 e6093a9ac5be174884238ae36eaa9bb00f2bb527d90767fcf81c53b926cc4a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\raindrops\wallpaper.json
        • Size 372B
        • SHA256 7d2cb00c8c9eda78b08d9354e7f18b464399fc1c8175913b09d760e90f40d552
        • MD5 SHA1 SHA512 TLSH

        sea_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\sea\sea_preview.png
        • Size 3KB
        • SHA256 05cb91ccb28f3cdcbb6b70672ebc295112c2bad571609ecf6c1ceece95f74903
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\sea\wallpaper.json
        • Size 364B
        • SHA256 844621be526f4785731440b8e13b30d81b49bb9135bf4769433bfab6a4588d0a
        • MD5 SHA1 SHA512 TLSH

        preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\stars\preview.png
        • Size 6KB
        • SHA256 be79d0fc290b157d34e4f6a20a1ce01874e7cffe30862633775d7ade4984dadb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\stars\wallpaper.json
        • Size 408B
        • SHA256 5017dbae9264994554ff1284be97eb7e6945f0d5451e51e5b06afd087d51b2c1
        • MD5 SHA1 SHA512 TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\web\wallpaper.json
        • Size 366B
        • SHA256 3ab87b8c0a092e9f5a19eaaf6091293ba6bef51e35a9a1930a1efa087908ce61
        • MD5 SHA1 SHA512 TLSH

        web_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\web\web_preview.png
        • Size 8KB
        • SHA256 f1ee74a01b8ee7533b3696e0d2c671dac383258940241b2961ecdde3f8120dad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper.json

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\yellow_forest\wallpaper.json
        • Size 348B
        • SHA256 0c738125d470ea020d47fe47d38110e8eae33519b5d8b8544bd844cab6b08752
        • MD5 SHA1 SHA512 TLSH

        yellow_forest_preview.png

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\47.0.2526.6739\resources\wallpapers\yellow_forest\yellow_forest_preview.png
        • Size 8KB
        • SHA256 7285528e938b61befb95b4101c90fedfb30d7f92783dfbd9be9f4c48cb16e1af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        browser.exe

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source3936_22742\Browser-bin\browser.exe
        • Size 2.0MB
        • SHA256 4456b529f220a33b9d978d29c0f3036e5bdf3f987eaa45caf27dd026bb0480d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clids_yandex.xml

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source3936_22742\Browser-bin\clids_yandex.xml
        • Size 279B
        • SHA256 09cfbe2aadbade7ed656e5c14c24223b6ff599685330aa538d77bc05ad0a17cf
        • MD5 SHA1 SHA512 TLSH

        621A.tmp

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\621A.tmp
        • Size 10KB
        • SHA256 79e3a3e11dae9943358f0ad226d27b54f7fd3fa8c950d26f84e131fbc36c031d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        A31C.tmp

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\A31C.tmp
        • Size 10KB
        • SHA256 5ea0582065c21dd05d01b19ae944872b48fc574bea974979e4591e43fb744fda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7807.tmp

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\7807.tmp
        • Size 13KB
        • SHA256 e933cf163e358f2de6b984536782efbd09bd69a1082dc75c897aea89d550a4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Preferences~RFe597805.TMP

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe597805.TMP
        • Size 11KB
        • SHA256 edd0a3bb44ae3a4ca5a62d9f1940d2538a16ca9a0f21f0fd444d80e4fdb2f04b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FEE9.tmp

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\FEE9.tmp
        • Size 10KB
        • SHA256 a3fefa014d89a2842751d7877a2cb8a36b07950e6142cabd15042dace31aa02e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Local State~RFe5a6217.TMP

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State~RFe5a6217.TMP
        • Size 9KB
        • SHA256 bb991d85c0cd4d5121e611914db3d8754d6f58f7958b6ff5da1c3feb50cdc53e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Permanent State

        • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Permanent State
        • Size 4KB
        • SHA256 ca72b9aac4345b206a143a4c987aa75537218aa02367a80e274a5127f1e0b025
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Yandex.lnk

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex\Yandex.lnk
        • Size 2KB
        • SHA256 d6e7badb3e5819ccdf5e36927fe71c77789307c03e805cda90360320ba9b4533
        • MD5 SHA1 SHA512 TLSH

        clids-yabrowser.xml

        • Path C:\Users\Admin\AppData\Roaming\Yandex\clids-yabrowser.xml
        • Size 313B
        • SHA256 47e1d5b9f7966965be4de7673200dae90eef02eb3ea3f506c9f9ea67a48a78e2
        • MD5 SHA1 SHA512 TLSH

        memory/4260-45-0x00000000043F0000-0x00000000043F1000-memory.dmp

        memory/4260-67-0x00000000043F0000-0x00000000043F1000-memory.dmp

        memory/4720-1039-0x00000000011A0000-0x00000000011A1000-memory.dmp