Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

28.0.1500.8765 20.00%
25.0.1364.22076 20.00%
25.0.1364.21027 20.00%
25.0.1364.17262 20.00%
25.0.1364.15751 20.00%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegCreateKeyExW, RegQueryValueExW, RegQueryInfoKeyW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, OpenProcessToken, GetTokenInformation, CreateProcessAsUserW, GetTraceEnableFlags, GetTraceLoggerHandle, TraceEvent, UnregisterTraceGuids, GetTraceEnableLevel, RegisterTraceGuidsW, RegDisablePredefinedCache, RevertToSelf, SetTokenInformation, GetLengthSid, ConvertStringSidToSidW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetEntriesInAclW, GetSecurityInfo, CreateWellKnownSid, CopySid, LookupPrivilegeValueW, EqualSid, DuplicateToken, DuplicateTokenEx, CreateRestrictedToken, SetThreadToken
kernel32.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFileExistsW
user32.dll
CreateDesktopW, SetProcessWindowStation, GetThreadDesktop, GetUserObjectInformationW, GetProcessWindowStation, CharUpperW, CreateWindowStationW, CloseDesktop, CloseWindowStation, MessageBoxW
userenv.dll
GetProfileType
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winmm.dll
timeGetTime
Export table
CrashForException
DumpProcess
DumpProcessWithoutCrash
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
SetActiveURL
SetClientId
SetCommandLine2
SetExperimentList3
SetExtensionID
SetGpuInfo
SetNumberOfExtensions
SetNumberOfViews
SetPrinterInfo
SetUserId

browser.exe

Yandex by YANDEX LLC (Signed)

Remove browser.exe
Version:   25.0.1364.17262
MD5:   678a1578077b014bb44f858e03189731
SHA1:   b476add48ed627fa0f0999510eb04dc71661b40c
SHA256:   23d285eca81d144d1a6c47f6cc8be82271953f24285ee62e36a168a672949773

Overview

browser.exe executes as a process with the local user's privileges. It adds run once key to the current user's profile so that the file will execute the next time the user logs into Windows (it will delete the entry after it runs once). It is installed with a couple of know programs including Yandex published by Yandex, Yandex from Yandex and Yandex by Yandex. The file is digitally signed by YANDEX LLC which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:browser.exe
Publisher:YANDEX LLC
Product name:Yandex
Typical file path:C:\users\user\appdata\local\yandex\yandexbrowser\application\browser.exe
File version:25.0.1364.17262
Size:1.27 MB (1,333,040 bytes)
Build date:7/3/2013 1:55 PM
Certificate
Issued to:YANDEX LLC
Authority (CA):VeriSign
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Yandex
 Yandex
1% remove
The software is typically bundled with third party installers such as Open Candy. "Offer your users Yandex Elements for fast access to Yandex search, visual bookmarks, and much more. Note: Sets homepage, search default, and new tab to Yandex search."

BehaviorsBehaviors

Shell open commands
  • ftp
  • mailto
  • https
Startup files (user) run once
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
  • 'Application Restart #0' → C:\users\user\appdata\Local\Yandex\YandexBrowser\Application\browser.exe --flag-switches-begin --flag-switches-end --flag-switches-begin --flag-switches-end --disable-ssl-false-start --disable-client-s

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 60.00%
Windows 7 Professional 20.00%
Microsoft Windows XP 20.00%

Distribution by countryDistribution by country

Turkey installs about 40.00% of Yandex.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE