Gridinsoft Logo
File Icon

The browser.exe (Yandex with voice assistant Alice) File Analysis

Updated 2 months ago
Checked by Malaware Check
browser.exe

Technical Analysis

File Name browser.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-04-04 16:00:46 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
5,322,928
File Size (bytes)
2025-04-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
a1663f6697003a33acdb30b594075f76
SHA1
c47de2c93c3ee4a653b8f453e8ef36064703a30d
SHA256
66e95997fb0610182181e138e995b27334e6294c27bd547940fc680f3e08b1f8
SHA512
1ffd0f7e8e96265eb2f1af9ee664aa468cf781ed17f5d1256386507d52340ed6b5353190115b8b77f00bb24c2088cbf2207dcc22cbc8ac53864d8b4448568dc0
ImpHash
12687c9472a7a918f8d7f96d7ddd74ab

PE Analysis

Basic Information

▼
Icon
Hash: 08600f039a86ef8e5995a95d831cd82d
Fuzzy: 31fd2d4002c2a4807f6144bd57cb3911
dHash: f0e8b2164d8ecce8
Image Base 0x140000000
Entry Point 0x140262060
Compilation Time 2025-03-26 17:34:58
Checksum 0x0051a01d (Actual: 0x0051a01d)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path browser.exe.pdb
Digital Signature OK
Imports 4 libraries
browser_elf, KERNEL32, VERSION, ntdll
Exports 5 functions
Resources 301 Resources
Sections 14 Sections

Version Information

▼
CompanyName YANDEX LLC
FileDescription Yandex with voice assistant Alice
FileVersion 25.2.4.955
InternalName yandexbrowser_exe
LegalCopyright Copyright (c) 2012-2025 YANDEX LLC. All Rights Reserved.
OriginalFilename browser.exe
ProductName Yandex
ProductVersion 25.2.4.955
ProductChromiumVersion 132.0.6834.210
ProductYandexVersion 25.2.4.955
CompanyShortName YANDEX LLC
ProductShortName Yandex
LastChange ff102d7073a0b4af5e2b046265a6da8ef562a423
Official Build 1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,357,596 bytes 3,357,696 bytes 6.57 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0E24429D2EF080FBF7AE62B9A0AE19F1
.rdata 0x00335000 320,856 bytes 321,024 bytes 5.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CF5A5EE37F6AA40A581E1825125EF320
.data 0x00384000 120,940 bytes 61,952 bytes 1.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F61BDE66926D9338E5920BFD7DD40FE4
.pdata 0x003a2000 65,172 bytes 65,536 bytes 6.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC1065673CEF166DCC360E7A26651EE9
.gxfg 0x003b2000 11,584 bytes 11,776 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CD031665B0F8802A066622D3762776AC
.retplne 0x003b5000 184 bytes 512 bytes 1.57 (Normal) 0x00000000 DF7262276313976D96C67575A19A5AB3
.rodata 0x003b6000 2,528 bytes 2,560 bytes 4.32 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 956C856939278D142083BEF02B9DE040
.tls 0x003b7000 593 bytes 1,024 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B94595D8B983553EA35EAD14FDD1037D
CPADinfo 0x003b8000 56 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60D3EA61D541C9BE2E845D2787FB9574
LZMADEC 0x003b9000 4,593 bytes 4,608 bytes 6.06 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 05E9EAB8428A551A281AB278073669FA
_RDATA 0x003bb000 500 bytes 512 bytes 4.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 43DAD7218BA7D2E388EA213B52F569EB
malloc_h 0x003bc000 1,451 bytes 1,536 bytes 6.08 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 891F5D466E11222B06DAEBC66C20E249
.rsrc 0x003bd000 1,469,128 bytes 1,469,440 bytes 4.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6E27E69A75FE06BC0397BA259C939F08
.reloc 0x00524000 9,960 bytes 10,240 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E7A086DFAB284FE870A63E95533BB4CA
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 301 (1,453,907 bytes)
Resource Type Count Total Size Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS 1 4 bytes
0%
SIGNATURE_DAT 1 130 bytes
0%
TRUSTED_JSON 1 2,483 bytes
0.2%
RT_CURSOR 23 56,516 bytes
3.9%
RT_ICON 220 1,388,668 bytes
95.5%
RT_GROUP_CURSOR 21 448 bytes
0%
RT_GROUP_ICON 32 3,272 bytes
0.2%
RT_VERSION 1 1,260 bytes
0.1%
RT_MANIFEST 1 1,126 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product Yandex
Description Yandex with voice assistant Alice
File Version 25.2.4.955
Original Name browser.exe
Signing Date 10:48 PM 03/26/2025 (72 days ago)
Verification Status Signed
Signers YANDEX LLC; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45
Counter Signers Sectigo Public Time Stamping Signer R35; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name yandexbrowser_exe
Copyright Copyright (c) 2012-2025 YANDEX LLC. All Rights Reserved.
Certificate Chain Summary
YANDEX LLC #1 Primary
Validity Period: 2024-03-20 14:23:35 → 2026-03-21 14:23:35
Signature Algorithm: sha256RSA
Serial Number: 6F 12 6C 9C C2 87 DE 45 8C E8 90 F6
GlobalSign GCC R45 EV CodeSigning CA 2020 #2 Chain
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
GlobalSign Code Signing Root R45 #3 Chain
Validity Period: 2020-03-18 00:00:00 → 2045-03-18 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 76 53 FE AC 75 46 48 93 F5 E5 D7 4A 48 3A 4E F8
Sectigo Public Time Stamping Signer R35 #4 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping CA R36 #5 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #6 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware