270d2df9a211f139fcf76d9b43d3dec7b8b3b2ac0cc31aa27eae1f187f4ae9d1

Analysis

max time kernel
37s
max time network
72s
platform
windows10_x64
resource
win10v20201028
submitted
30-11-2020 18:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

BraveBrowserSetup.exe
Size

1.2MB
MD5

8346fa8e92a7a9bf34a7f823614d2893
SHA1

081f9a7b804f1d3275f1d9e91e88f4e3b4281da7
SHA256

270d2df9a211f139fcf76d9b43d3dec7b8b3b2ac0cc31aa27eae1f187f4ae9d1
SHA512

85f41ad1369797ffa6371fe1f279d3d41e45c28aad67d910373490bbabf10ea080d365f6354d21c1f3aa6f0fe85638387184783f7f5fc0e30929ebb9f0551c26

Score

10^/10

discovery persistence

Malware Config

Signatures

Registers COM server for autorun 1 TTPs
persistence

Registry Run Keys / Startup Folder
T1060

Executes dropped EXE 13 IoCs

Processes:

BraveUpdate.exeBraveUpdate.exeBraveUpdate.exeBraveUpdateComRegisterShell64.exeBraveUpdateComRegisterShell64.exeBraveUpdateComRegisterShell64.exeBraveUpdate.exeBraveUpdate.exeBraveUpdate.exebrave_installer-x64.exesetup.exesetup.exeBraveUpdateOnDemand.exe

pid	process
3760	BraveUpdate.exe
2248	BraveUpdate.exe
648	BraveUpdate.exe
2148	BraveUpdateComRegisterShell64.exe
2276	BraveUpdateComRegisterShell64.exe
4092	BraveUpdateComRegisterShell64.exe
3304	BraveUpdate.exe
208	BraveUpdate.exe
2368	BraveUpdate.exe
2208	brave_installer-x64.exe
3872	setup.exe
2148	setup.exe
4084	BraveUpdateOnDemand.exe

Modifies Installed Components in the registry 2 TTPs
persistence

Registry Run Keys / Startup Folder
T1060

Modify Registry
T1112
Sets file execution options in registry 2 TTPs
persistence

Registry Run Keys / Startup Folder
T1060

Modify Registry
T1112

Loads dropped DLL 14 IoCs

Processes:

BraveUpdate.exeBraveUpdate.exeBraveUpdate.exeBraveUpdateComRegisterShell64.exeBraveUpdateComRegisterShell64.exeBraveUpdateComRegisterShell64.exeBraveUpdate.exeBraveUpdate.exeBraveUpdate.exe

pid	process
3760	BraveUpdate.exe
2248	BraveUpdate.exe
648	BraveUpdate.exe
2148	BraveUpdateComRegisterShell64.exe
648	BraveUpdate.exe
2276	BraveUpdateComRegisterShell64.exe
648	BraveUpdate.exe
4092	BraveUpdateComRegisterShell64.exe
648	BraveUpdate.exe
3304	BraveUpdate.exe
208	BraveUpdate.exe
2368	BraveUpdate.exe
2368	BraveUpdate.exe
208	BraveUpdate.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

JavaScript code in executable 8 IoCs

Processes:

resource	yara_rule
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe	js
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe	js
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe	js
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	js
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	js
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	js
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	js
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	js

Drops file in Program Files directory 345 IoCs

Processes:

setup.exeBraveUpdate.exeBraveBrowserSetup.exebrave_installer-x64.exe

description	ioc	process
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_am.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\ar\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\pl\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\swiftshader\libEGL.dll	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_tr.dll	BraveBrowserSetup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\ar.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\pt_PT\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\sv\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\835d5950-afbc-47ad-bdef-5cf0f18d3e79.tmp	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_bg.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_gu.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\bg.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\kn\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateBroker.exe	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_en-GB.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\hi.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\pt_BR\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_iw.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateOnDemand.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\et.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\ko\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\ru\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\VisualElements\Logo.png	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ca.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_es-419.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_it.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\ms.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\sr.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\en_US\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\fa\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\vi\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_de.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_te.dll	BraveBrowserSetup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\fa.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\he.pak	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateBroker.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\hu\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\gu\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\Installer\setup.exe	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_el.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_lt.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_sl.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateSetup.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\cs.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\brave.exe	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_vi.dll	BraveBrowserSetup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\87.1.17.73.manifest	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\chrome_pwa_launcher.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\zh_CN\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe	brave_installer-x64.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\chrome_elf.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_rewards\_locales\ru\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_is.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ur.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_es-419.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_pt-BR.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\Locales\ko.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\gu\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\hi\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3872_40918267\Chrome-bin\87.1.17.73\resources\brave_extension\_locales\uk\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_lv.dll	BraveBrowserSetup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateCore.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_ru.dll	BraveUpdate.exe

Modifies data under HKEY_USERS 1 IoCs

Processes:

BraveUpdate.exe

description ioc process

Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache BraveUpdate.exe

description	ioc	process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache	BraveUpdate.exe

Modifies registry class 1050 IoCs

Processes:

BraveUpdateComRegisterShell64.exeBraveUpdateComRegisterShell64.exeBraveUpdate.exeBraveUpdate.exeBraveUpdateComRegisterShell64.exesetup.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D4EDC936-F675-4459-81FC-538612DB3E72}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3AD2D487-D166-4160-8E36-1AE505233A55}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B1F584FA-0566-45C7-8673-54A4F1D6203B}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ = "IAppBundle"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8504FB26-FC3E-4C1C-9C94-46EC93E6BA63}\NumMethods\ = "9"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3COMClassService	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebSvc\CLSID\ = "{3A9D7221-2278-41DD-930B-C2356B7D3725}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{70E5ECF5-2CA7-4019-9B23-916789A13C2C}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A9D7221-2278-41DD-930B-C2356B7D3725}\ = "BraveUpdate Update3Web"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\VersionIndependentProgID\ = "BraveSoftwareUpdate.CoreMachineClass"	BraveUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\Elevation\Enabled = "1"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8504FB26-FC3E-4C1C-9C94-46EC93E6BA63}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\ = "ICredentialDialog"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\ = "IAppWeb"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\ = "IGoogleUpdateCore"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F6D9FE5-6ED3-43A3-80D2-EA8766D65352}\LocalServer32\ = "\"C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.101.0\\BraveUpdateBroker.exe\""	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}\ServiceParameters = "/comsvc"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\ProgID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.htm	setup.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.pdf	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachine\CurVer\ = "BraveSoftwareUpdate.OnDemandCOMClassMachine.1.0"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebMachine\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoCreateAsync.1.0\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xhtml	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ = "IAppBundle"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{91B050A9-5A49-4249-A8C8-B4390961A912}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoCreateAsync	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ = "IAppBundle"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{70E5ECF5-2CA7-4019-9B23-916789A13C2C}\ = "IProcessLauncher"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xht\OpenWithProgids	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachineFallback.1.0\CLSID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ = "IGoogleUpdate3WebSecurity"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\NumMethods\ = "7"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8504FB26-FC3E-4C1C-9C94-46EC93E6BA63}\ProxyStubClsid32\ = "{D4EDC936-F675-4459-81FC-538612DB3E72}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebSvc	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\ = "ICredentialDialog"	BraveUpdateComRegisterShell64.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes:

BraveUpdate.exeBraveUpdate.exe

pid	process
3760	BraveUpdate.exe
3760	BraveUpdate.exe
3760	BraveUpdate.exe
3760	BraveUpdate.exe
3760	BraveUpdate.exe
3760	BraveUpdate.exe
208	BraveUpdate.exe
208	BraveUpdate.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

Processes:

BraveUpdate.exebrave_installer-x64.exeBraveUpdate.exe

description	pid	process
Token: SeDebugPrivilege	3760	BraveUpdate.exe
Token: SeDebugPrivilege	3760	BraveUpdate.exe
Token: SeDebugPrivilege	3760	BraveUpdate.exe
Token: 33	2208	brave_installer-x64.exe
Token: SeIncBasePriorityPrivilege	2208	brave_installer-x64.exe
Token: SeDebugPrivilege	208	BraveUpdate.exe

Suspicious use of WriteProcessMemory 30 IoCs

Processes:

BraveBrowserSetup.exeBraveUpdate.exeBraveUpdate.exeBraveUpdate.exebrave_installer-x64.exesetup.exeBraveUpdateOnDemand.exe

description	pid	process	target process
PID 592 wrote to memory of 3760	592	BraveBrowserSetup.exe	BraveUpdate.exe
PID 592 wrote to memory of 3760	592	BraveBrowserSetup.exe	BraveUpdate.exe
PID 592 wrote to memory of 3760	592	BraveBrowserSetup.exe	BraveUpdate.exe
PID 3760 wrote to memory of 2248	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 2248	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 2248	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 648	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 648	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 648	3760	BraveUpdate.exe	BraveUpdate.exe
PID 648 wrote to memory of 2148	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 648 wrote to memory of 2148	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 648 wrote to memory of 2276	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 648 wrote to memory of 2276	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 648 wrote to memory of 4092	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 648 wrote to memory of 4092	648	BraveUpdate.exe	BraveUpdateComRegisterShell64.exe
PID 3760 wrote to memory of 3304	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 3304	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 3304	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 208	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 208	3760	BraveUpdate.exe	BraveUpdate.exe
PID 3760 wrote to memory of 208	3760	BraveUpdate.exe	BraveUpdate.exe
PID 2368 wrote to memory of 2208	2368	BraveUpdate.exe	brave_installer-x64.exe
PID 2368 wrote to memory of 2208	2368	BraveUpdate.exe	brave_installer-x64.exe
PID 2208 wrote to memory of 3872	2208	brave_installer-x64.exe	setup.exe
PID 2208 wrote to memory of 3872	2208	brave_installer-x64.exe	setup.exe
PID 3872 wrote to memory of 2148	3872	setup.exe	setup.exe
PID 3872 wrote to memory of 2148	3872	setup.exe	setup.exe
PID 4084 wrote to memory of 1220	4084	BraveUpdateOnDemand.exe	BraveUpdate.exe
PID 4084 wrote to memory of 1220	4084	BraveUpdateOnDemand.exe	BraveUpdate.exe
PID 4084 wrote to memory of 1220	4084	BraveUpdateOnDemand.exe	BraveUpdate.exe

C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup.exe
"C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup.exe"
1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:592

C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=x64-rel&referral=none"
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3760

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:2248

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:648

C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe"
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:2148

C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe"
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:2276

C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe"
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4092

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xMDEuMCIgc2hlbGxfdmVyc2lvbj0iMS4zLjEwMS4wIiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0iezUzMzFFODE3LTEzNUMtNEYxQS04QTFGLUY1MjU2OEY0QzRBQn0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiB0ZXN0c291cmNlPSJhdXRvIiByZXF1ZXN0aWQ9InsyQzlGRjlBOS0zMDk2LTRCREQtQjc3OC04QjIwMzIwMDc3N0N9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IHBoeXNtZW1vcnk9IjQiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjAiIHNzZTQxPSIwIiBzc2U0Mj0iMCIgYXZ4PSIwIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTUwNjMuMCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0IxMzFDOTM1LTlCRTYtNDFEQS05NTk5LTFGNzc2QkVCODAxOX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4xMDEuMCIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSIyMTg3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3304

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=x64-rel&referral=none" /installsource taggedmi /sessionid "{5331E817-135C-4F1A-8A1F-F52568F4C4AB}"
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:208

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:2368

C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\brave_installer-x64.exe
"C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\brave_installer-x64.exe"
2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2208

C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe
"C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\CHROME.PACKED.7Z"
3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3872

C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe
"C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=87.1.17.73 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6b49bbc50,0x7ff6b49bbc60,0x7ff6b49bbc70
4⤵
- Executes dropped EXE
PID:2148

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xMDEuMCIgc2hlbGxfdmVyc2lvbj0iMS4zLjEwMS4wIiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0iezUzMzFFODE3LTEzNUMtNEYxQS04QTFGLUY1MjU2OEY0QzRBQn0iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiB0ZXN0c291cmNlPSJhdXRvIiByZXF1ZXN0aWQ9Ins4NkRCMjM0OC02MENDLTQwRTgtQTY2Ri0yRTBEMjM4M0U1Rjd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IHBoeXNtZW1vcnk9IjQiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjAiIHNzZTQxPSIwIiBzc2U0Mj0iMCIgYXZ4PSIwIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTUwNjMuMCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0FGRTZBNDYyLUM1NzQtNEI4QS1BRjQzLTRDQzYwREY0NTYzQn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249Ijg3LjEuMTcuNzMiIGFwPSJ4NjQtcmVsIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIyMDMiIGRvd25sb2FkX3RpbWVfbXM9IjYyMzUiIGRvd25sb2FkZWQ9IjczMDA0MjAwIiB0b3RhbD0iNzMwMDQyMDAiIGluc3RhbGxfdGltZV9tcz0iMTc5MjEiLz48L2FwcD48L3JlcXVlc3Q-
2⤵
PID:3024

C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateOnDemand.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateOnDemand.exe" -Embedding
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4084

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
2⤵
PID:1220

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"
3⤵
PID:744

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=87.1.17.73 --initial-client-data=0xe0,0xe4,0xe8,0xbc,0xec,0x7ff92cc4eec0,0x7ff92cc4eed0,0x7ff92cc4eee0
4⤵
PID:1012

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --field-trial-handle=1672,13264454509514894378,9667821421951327335,131072 --enable-features=AutoupgradeMixedContent,LegacyTLSEnforced,PasswordImport,PrefetchPrivacyChanges,ReducedReferrerGranularity,WebUIDarkMode,WinrtGeolocationImplementation --disable-features=AllowPopupsDuringPageUnload,AutofillEnableAccountWalletStorage,AutofillServerCommunication,IdleDetection,NotificationTriggers,PasswordCheck,PrivacySettingsRedesign,SafeBrowsingEnhancedProtection,SignedExchangeSubresourcePrefetch,SmsReceiver,TabHoverCards,TextFragmentAnchor,VideoPlaybackQuality --start-stack-profiler --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1688 /prefetch:2
4⤵
PID:3940

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1672,13264454509514894378,9667821421951327335,131072 --enable-features=AutoupgradeMixedContent,LegacyTLSEnforced,PasswordImport,PrefetchPrivacyChanges,ReducedReferrerGranularity,WebUIDarkMode,WinrtGeolocationImplementation --disable-features=AllowPopupsDuringPageUnload,AutofillEnableAccountWalletStorage,AutofillServerCommunication,IdleDetection,NotificationTriggers,PasswordCheck,PrivacySettingsRedesign,SafeBrowsingEnhancedProtection,SignedExchangeSubresourcePrefetch,SmsReceiver,TabHoverCards,TextFragmentAnchor,VideoPlaybackQuality --lang=en-US --service-sandbox-type=network --start-stack-profiler --mojo-platform-channel-handle=1756 /prefetch:8
4⤵
PID:3952

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --field-trial-handle=1672,13264454509514894378,9667821421951327335,131072 --enable-features=AutoupgradeMixedContent,LegacyTLSEnforced,PasswordImport,PrefetchPrivacyChanges,ReducedReferrerGranularity,WebUIDarkMode,WinrtGeolocationImplementation --disable-features=AllowPopupsDuringPageUnload,AutofillEnableAccountWalletStorage,AutofillServerCommunication,IdleDetection,NotificationTriggers,PasswordCheck,PrivacySettingsRedesign,SafeBrowsingEnhancedProtection,SignedExchangeSubresourcePrefetch,SmsReceiver,TabHoverCards,TextFragmentAnchor,VideoPlaybackQuality --lang=en-US --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=14443907419627855569 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2468 /prefetch:1
4⤵
PID:2736

C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --field-trial-handle=1672,13264454509514894378,9667821421951327335,131072 --enable-features=AutoupgradeMixedContent,LegacyTLSEnforced,PasswordImport,PrefetchPrivacyChanges,ReducedReferrerGranularity,WebUIDarkMode,WinrtGeolocationImplementation --disable-features=AllowPopupsDuringPageUnload,AutofillEnableAccountWalletStorage,AutofillServerCommunication,IdleDetection,NotificationTriggers,PasswordCheck,PrivacySettingsRedesign,SafeBrowsingEnhancedProtection,SignedExchangeSubresourcePrefetch,SmsReceiver,TabHoverCards,TextFragmentAnchor,VideoPlaybackQuality --lang=en-US --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --start-stack-profiler --brave_session_token=14443907419627855569 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1
4⤵
PID:3184

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveCrashHandler.exe
MD5
8a9032b3bf454f6d50894c6ff70c2fab

SHA1
8b45e568e53de6f881d3c438f20e988d0383d5b1

SHA256
b2c04b62c941d1d4318246d2f1b87ad5fcc9293c08afd44af173b6befa8124c1

SHA512
72a95ab7ed62f5ed301b7eea7576efa755e2fa2a9da19e5f34c3f90d47cca70654cddb55f3dc7cd1a1261dc118d237d041347e26fdea832dc1d5a4ef2eb7847b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveCrashHandler64.exe
MD5
4c9886b9e9dfe3003cda92cf9a5bead3

SHA1
cfe243a1aac1dbda13f7ce0635a6f5a45196cca6

SHA256
8538eab8cbdfb191553949cc21030037856225674db4bff31d5b5357940aba0d

SHA512
c438646b843970479256789168de8d05e97b12a684b211ec961e58d4f09679da7c9b9803feeb6ee65088cb4b060fe4492a63297a8df0471cec72f20b0a434bdc

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateBroker.exe
MD5
b8e5aeaa0f4871a1626ff520405d38ac

SHA1
09f11aa5e0052540f2cbbd514c235377c5236678

SHA256
98869c4df623f1ba4a4db102d4a057ab861c2f79fc3db7ab07e232cabec147f1

SHA512
5d1a7e0181efc9227f3b6f87986c302a06ec5828ac5a34a4f820fa07042e89288d9e33dfe2fa7348f6600504c136cd60a8131e99bf23ee22d2783e0cd6780fb1

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateComRegisterShell64.exe
MD5
5b878a8e67761a7be19ac7ca4486dd2a

SHA1
f595370092221c42bc43fbd423a88315771dce7d

SHA256
c95d41834532294ca22e09b5df1ceaab319cf7ca39a728db371ae0aebafa6783

SHA512
c5bf7e2e0643f7f166ce4d857f0dc9c0a4698717eb9c54aec74b0d081c7c37cc70f04dff98c86a11f9c1e50e904a5f52ca32559ef43798a518b2c12a7106eb42

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateCore.exe
MD5
f2139a6b3ef0f4543eb45bd391eca1c5

SHA1
9aa1b655aa5894520d84157816bb1ae8bc22964f

SHA256
1f7df6f0fbd18f357ab8c60305ca85e073de300fae2846710afd6326803b0c49

SHA512
06505997f2dd14eca99dbdb01635a753108ef333a7cd14f9b6c2db0d10690fc804a05d59b217b2d325b61b48d4b745b7802c87076ca6fdd3b17b8b642c6f5b2d

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateHelper.msi
MD5
d29c16276784cfa052e651d5986e35d1

SHA1
3fad5eedc6821e62eaab75d839e0bf70af445a27

SHA256
563ab61518ae7ad3a537c9e97e167c51630298aec76c7a5301c30463d022105b

SHA512
509477c2dcbe3777071031e7ddb5498905a8f5ddcd6b44b9567ad27dbfe6bf848eae37d56423f2c499085959e55f49c2ef65ca20c74e1eb82d5f0f99287bd0f9

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateOnDemand.exe
MD5
811287e00f8e7ff2d9eaea31a37fbfe5

SHA1
ee6e7baa8f7e5fdb76596a98eb4c43a08b67146d

SHA256
1d9dac3c1e9811e6a120467d55f512ba9fa3962eae4d4b8e65adfaed0e4d79c1

SHA512
4c5e5485aa08109e8171deacc3c74f61ce7cfd92e322ff5096aeb187b4ef3446d5ae2899e82ef9fbdef20fd7733376d3fb195a32e552c9045c97df1a75314b21

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\BraveUpdateSetup.exe
MD5
8346fa8e92a7a9bf34a7f823614d2893

SHA1
081f9a7b804f1d3275f1d9e91e88f4e3b4281da7

SHA256
270d2df9a211f139fcf76d9b43d3dec7b8b3b2ac0cc31aa27eae1f187f4ae9d1

SHA512
85f41ad1369797ffa6371fe1f279d3d41e45c28aad67d910373490bbabf10ea080d365f6354d21c1f3aa6f0fe85638387184783f7f5fc0e30929ebb9f0551c26

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_am.dll
MD5
2de80b95d842fd2ed27a787c258cf03a

SHA1
190914c64f58ea2304c17cc95226d2c30a9fa3df

SHA256
21b00012cf5ece7c31e64bd81ee91f84a13525ef68ea6fd2335fe49b088ca101

SHA512
a55bf868dec70713d8ccb7312ce3252e61818d826c9f908ad765df64f822a0ca9fe5e1d65b6fc1101ca9300c9e9c1f8a1c3f5f0de80c8f5d966d7f4d5ee63e58

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ar.dll
MD5
7fb3df92e8022ad7eab8d2a1b2ad7ac3

SHA1
b5f5e4af918e2f4577e77eb0e506797e81d05b02

SHA256
be592ebc208f83bc14d151070f13c6fed8aef809de8d11de92b25b5fef9e5a48

SHA512
f855c52f8d0d0c29c583043bc19b863b224801a20dffeb0a03da147c7cbcf41c171b2426ad58e5dd3001945511ecff50fe6a14f2900cb62ab885cc0facc3853c

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_bg.dll
MD5
e62b711734f6d0968e81769d1e73bcc0

SHA1
69d905284d765b370eebffd84f926252abf6b424

SHA256
db34c7dab32aa49b16a70d95320ca26958c1aabe1741ad3e1b6c4f61c69ad628

SHA512
597d035beb893742ed05393ef6ef90c3efe451c8c57eca8e470f8ca5cabfdd9b0c487b24ce8ef11d10e1e6a2a3fe0710721405ae516ed085eaa94505b156a271

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_bn.dll
MD5
06a8b74dfaa80c9f39452ed32f056586

SHA1
30767565e431c56f2cb3be3a797bac184a62c86c

SHA256
1adcae881bebf22edd8c4fabb3cf3438fee3b6f2dc080c1d7adb8ca5a04a1de5

SHA512
d163b8a79ade8676132719df4b087d212a2384fccb9badf52c66ed6ccf54484dc9cabddc26ba17b6602b3d6aa416c9f790d5afa35dc5cfd4d41d92ba2b9775dd

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ca.dll
MD5
0d8dcb238ab53b1313727001d111c6ca

SHA1
21bb552034099a124517c49b412f049dd15cf2b1

SHA256
97efc72e5d8a252358109b670dba0020ed65f88bf3bb4ded4518dc2878d10115

SHA512
a5a2b92c01fdf9272e7622677e3419e858dfaef3b99a8a7e72d1bbfb03af94a90208c51584566682480bdafe61624898d0818e319fd832bcedcea4a321b8216a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_cs.dll
MD5
523c4a963b0c8d440caa0f9c54527481

SHA1
eaad8ea0159b4f82f578ae9aab3dec420fca9ff8

SHA256
195f36f79b7bd7a465a6b4227bebef8a8f10bc84730ca639142288e30b176bf1

SHA512
49290b489566cca9ea2a4bc99f934935f602ac3b565e7e02acb83283ed03ebf1e67ebb7d59a818aff40ac6f0e54fcd07af361b5b14b5ebe6260f09f94e5d1ce8

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_da.dll
MD5
ed03a1abe2ba27ec833f4bd0c39c91b3

SHA1
b88a72c6b9ddb752bf31ec8bacdd974ef7e7c11a

SHA256
f72f980921c8ac89ec9883fcbc4d449f4fb20d941622f885c0b6b5152a8f3baa

SHA512
7f2a2a1b46f45b9f9101a6898ab574132aa46a1d506dd2cf7cbc3a8e31d9cb3116e2af1363240635f413a70d6fc407b34c4634dfc23c8cd85725552a5b9e03b2

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_de.dll
MD5
fef464496daedac1e1871ca0fa51bb10

SHA1
64d9caf8a60a476818febb65b3d438994f4f2de6

SHA256
81ad46fc312cbd943b89a68951f6f62227b988ad73d68a75697af9eb593f5eb1

SHA512
ee7370f8f1f8e314f77a5927e0eb3810582536f7f6b226ed65da99823ba136d647b3034e6a2c7cb373e63d52cfa0fdd7c55ed71d579ebe593271006c0ac39b99

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_el.dll
MD5
25315cf2b0a410f1c0a0d3e36e873d71

SHA1
9869d9555f65467f8e4ed66babf1843f682fc85e

SHA256
df1568a35cf582a823fc0e48efe31acd9b16c15690c207bf84df07f79315c4a6

SHA512
df76149371374bf02a935b1e3c0b5b82afb73830c1172ae337d5bba19d67b041bd7b7b4fbb7488ccd76c7b1d0e8c06f0cc810af3d09acbdefeea197cd692d55a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_en-GB.dll
MD5
65021090d7c521d08d5c758d89d63371

SHA1
3eae5822433dc891d48f81dfc163666bbaf7b5a5

SHA256
85a0db939eca43e563d455333c0ac930e1ea67eea0d72b9cf484beb4605c55c4

SHA512
ab63fa6b197e8a364bed30032b754e36138965861bd8004411fda5fcbfbf262c9cc8b11aef9002c319ed0b9f47fddcfd0636cf1c324a88a7bb4a018c32b97b89

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_en.dll
MD5
6cbee91a0f87562c1730600a60393f6e

SHA1
905d4a79228e8881307e8b73f36aa67ce0b2a926

SHA256
7cbe6db61b3d942f59fc08c447e052bf2fa15f852662478b318a558fdcd0a76b

SHA512
89db4cb254be5b68b18e20c4ce5176d92e4379a09a85930cd6fb5c97eb366fc1c1b23c7d99f45741162ce23e3638d6b045987860403d0232deecd0212784c2be

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_es-419.dll
MD5
7abb5acb227185a4014cb3f3b96c0874

SHA1
ff2cbb3c8410fdef167e7176c043c824192db598

SHA256
bc7af81c2755c4acda4896a8d13bb245e0e64004a98e3287d729d7cca9da923c

SHA512
7ee659b635ccafbe6b4504a743bb358ec02680d1cc60ebb35669db29d05abdb0690ec93b35ba740e6379634dbcd668855c1d76eaab2bfa1e512bffc18779981c

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_es.dll
MD5
b7022d62b6eceedfe93a2f4f0f3b77ae

SHA1
b73b47db5e90d85f234f45c16564f8b1eca1e5e0

SHA256
38745cf35e47cd8255442a7518a94c607f557d2d6d59102c2645165dfccbb3b0

SHA512
ecd918df4b1d8295e7ae4d81dc543af202bf9876b125f893ee1e3e88738fce18b63cffdac36f9ffa7418d4a973e8e7d0b6e9cc5151e5a053f6d26aa124dbcf67

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_et.dll
MD5
e4d5f678f5f408e65b3ad372823adaf3

SHA1
d83072b66bf1bb193794ff904135a4d1d647697b

SHA256
5b5c3c8cd28fae539fd8303600fdfca750d57294b4604d76673de985ff3e996a

SHA512
fe763f35d2f1b768c1d25051756baa2d982b0148f373621d560255b2a2b21398f6660ecf672266830de12f841fda701c6871c907b531ec0d5af7a6f8d86e08df

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_fa.dll
MD5
4bbea57c4489f62468bfbded7bb71ca8

SHA1
725636b9121918ab32e4bc2d15e215c0a4bc906e

SHA256
c3b7a1a714c0c7d93095d0aadc73edf78f82f575cabcedfd66ebb75a08e181d7

SHA512
ae8c9747dfc9e2a9522818098ed1c8c76b7773070db79c696ffe5a9bb3491d1a0026dbfacf67394b9aa59b565bdbb90381fbca3c8200883b5cfd519d522f5a0a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_fi.dll
MD5
1b9402e48689cf9f2722469a738c1b22

SHA1
d75a6dd8bacce27a20560905949338aa7b09a447

SHA256
74b19ab76b18284167cfbb2525f0e95a5276d935a82a2d26ed504399ad1fa616

SHA512
bc568a4618cdadc76188cda08d8db4e4124dce81a92046712454b8c36f4aecc517b382c9c312031ff61ef219a3379d9fcbb674ed6cc3efad5c7fbd50594b4eb2

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_fil.dll
MD5
eb09c96610617f6018d92092de7de761

SHA1
0091dece9e7cf9dfc6c5a7f1277c68a36ecffa54

SHA256
998e226833f6bd9fc3fb553d11b0c4da86ef43f7f10145098cccb74fd213114c

SHA512
349bb43805cd002478f2a7a49e8de2f246e5bbb5c95077a17342ab3f83ee68492290fcc78b876e72e9243bbb5347ce898a053dcc0959836b7c8be922cbc1c5cf

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_fr.dll
MD5
bc0c844c505e2a5f89eb462f23642d6f

SHA1
98544765c7ee3021885230c09e4701c865348783

SHA256
869c23fdc83b9ea894baa75e5b7427081b8d3fd3242582be32bdf4d68d58bc6a

SHA512
529c819234c479a344498b1287cb025d5249ffafcc7ce5fc81800c11a3b6d669dd837f62071fba7b2133c79352af37e0a00ad6a199cbf36030d1e8336742b8e4

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_gu.dll
MD5
e589b40d751731a60185bf4ff7bb0800

SHA1
05764a44ce9bd5ce65fe06a7d22a206f9990b789

SHA256
7a3543df7010b1878d31c9a3e6a0e02eff3c3352287a45960832861cfc16ca4f

SHA512
297f68b29a1dfca76711ce19b2d0ddf20f7da14dbf68bef2ee40f1fac41a2dea9113131c6997b1067e1bce5659086654ba4b43713fe0b9c8bff0d9367e42d206

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_hi.dll
MD5
36e0d4a68ec9a3a64910bd880448203e

SHA1
a25484a62e550aef3d10d2f0a58ebb23abf9f3b1

SHA256
6b6503eab58c7aed60fb5907e3a011cfc9e3e6d53f5ae69dd1800f75f8bc5a40

SHA512
3846c22b1a9049b19b56049bc5a54229895c8452e268026d29c327d680ba5343290ceb3b5bcb38662cd8db053f87b879df5c05916fb761f08b485c3672076c9b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_hr.dll
MD5
1a1a915352e035ae30c9e8fe0472178a

SHA1
c6e58163de47afc64f9386a7931f5f902f425c24

SHA256
77f7eb36ebf3c897a5e2463fd649c852207918cc0d98b84bad4bfc93e1951d73

SHA512
1e538834323076e24b147e293befc68c4716d481aa839b7cdde84ab3ecb8e8f00593dc426aa56f8bfb7c2cc01057c33b712b4ec5eaab378e3f60b66f353180d0

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_hu.dll
MD5
196da331239149d62b3c20202eba663d

SHA1
f1731984707e8634626fcc9966a39937fb76a5fc

SHA256
dd051c3292a041c8d07463c77d7a757dc6427665d51b08e1b37455b5d98078f8

SHA512
28122f54bfcb7f336a9d92a25376bb04d72ec74c6544b65a92fa0ee9fa550c5f00e3a9c521bfbd36c7e380b6c6f45552be60f82f9bf559c1d14268dfd2bdafff

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_id.dll
MD5
95839f6684b3ea0fdf71ea3bc53034c3

SHA1
b378630fb5635c5e87a47f96b8049502ca3c4413

SHA256
a9daeb0ff796ab859985cc367e893f9e3edf7961bf036ee022fd63dcec6196cb

SHA512
26d6fe1813e1b37a8a300b583db95639d2aa5e003e2855ae26e5de6e811b4c3905a5cf7247afa09de7eb1c9fd2e03ced1ef76dba9bfa55036e4b7ee6f2c03e0d

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_is.dll
MD5
a79d287fb140dc21f895f8467c09793e

SHA1
f411afd135981c043d452190fe4e35457c2c88d1

SHA256
768ac4d79a487a80ef9641661dc6c503185ecc57fe70efa6d4c252c540290fe0

SHA512
158b93ca227ebe8f1139b0ad67c34982cf0a86f9c539648ef9c4705e82d216eaf5a3af4bd17558122bb92f6b896a0afada730c9bb034d8fdf5557ed44221229b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_it.dll
MD5
c85f6a6a521f22a5e6215bacaa76b5ba

SHA1
e6494108095cc83ab9a6587af89e1674a7944506

SHA256
8e487bf7b013dda13c65c01a58f1455c294e16faa568cb93b00c65c04763f7a3

SHA512
fd13ac8ef29d66c03ed7d3d8567d6407af5d4b832108800db0f7799e6270321fd34ba7aae889babc04e1e92c3b247dff9c09c9c97674fbceb128b70421ae29bd

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_iw.dll
MD5
18aa1bb8be190a3e5b38ef83b5834bc5

SHA1
7a3bf4a9be9c44e01e42a6bb483180c27de13cc3

SHA256
471b82677078eac57104f538f228d2610ef7d09abb384d699c16b202b034fdab

SHA512
3e6e96662866cc5d33fca540653184dc0c16bb0f742fef1ab121bb0a87560061e565aebab31677be3fbedccad93c62faa6b6c88e22ba1142dda6ab646f09ed8f

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ja.dll
MD5
c2165a7fe0cbc6be13ae36188d12d6da

SHA1
851d75e550b48a60b42a6db9bf0590a2eec3d028

SHA256
b06b1597a17bf682092ecd1f7062c3e6560497de7a943e3e00a74db522710a6a

SHA512
b7639157cfe1ba01c0db91eabf4949b949f46f9521df37a44e06ccbed42fae09e5b53d7f6e289adabbb29ac6105e6e77b71261de004d5bed67d4225fe413fd29

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_kn.dll
MD5
827b10b1f510201c309a2e4bebe802d1

SHA1
b0e95b39cf2f98493a892537d35b6dbeacde7b79

SHA256
5edf2d0c894951923e755738919d8946ea07973711f2b77786318169610bdb9a

SHA512
58909ecbdac362252fd0ebb880df1a669b6545d253848b2eb57a81430c1b532f5cf093d5b9da038d8093906c8e462a91a899fcc4f7bda592ff83077c824afceb

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ko.dll
MD5
979e4fc936c4ce63df7760b71ace50ab

SHA1
5548f8071696a848458afe42a8e87c02f844c1f8

SHA256
cd620527a7f4d2a873333b230e4c43249ed251f0694a5bfad1bd869122daf1f4

SHA512
792256eee6173cc7ef57837c700f6df517f4bc0595a6ff0c20e7fd48906c448336dd38551b14bde91e9c69dfa73bf344e10f36b71d1cf4d1806f0dab1ff051be

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_lt.dll
MD5
0cbbed8d7ac4ff0da762c0ae633a62d1

SHA1
e96c4603d279ccce2f3b49f05a67b8370677ebd9

SHA256
2c51a7376c681a0e9700b4f8fc8fcfbf148281bdcf2a4b7f9c7da3348f00aa6c

SHA512
fe5784fcf699dfe2239989dcbf6072cf5f21440dc366b082afb5469a620491cc679b412c0bdf9bc5bd3f72e417c2e263cc5a3c2620d9cd6368bbe04c6ac3256e

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_lv.dll
MD5
e424188f2f65db1bbc3a8f49fbeacc11

SHA1
ca1c0da09419712e52b21b918ac12965067fd8a4

SHA256
570f01e34903f32f33c58ffa7d471e231ed3e46ecba5339c4e98436dd6652c4a

SHA512
a9da7b53929613723046e5ec87b3812ec16488e05cae365139c98846af1c55ca9f637ee182f1b41cba74e1582ab5acab72d13f2cfd1adeb29b7d063e71817e97

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ml.dll
MD5
719b84b6aad6fbb6a997c5db0452edbf

SHA1
4a98d298f1a34ac9e4263818c241e1f3339bf3fc

SHA256
057f31ed23da4daca8534a37c22f2b8669465792a00b747a2465e66d846b4abb

SHA512
9dc99e7ed31301f96c646f100a971c2f7839ddc97156bc03cfecea4cf361a763bdb57ef218e5023ef8698109dcf867e4eb8b3fefff0b4f7325ebf968b5fb371e

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_mr.dll
MD5
6f2266cf642e8e65d22117c5718a0f89

SHA1
715d3a0f6876ce0c4ab704d4800c22ba99cd5816

SHA256
f9481daee4fb5218cf43d2dc8995b86e94fb85a82f218ccb9603f72e5f21592d

SHA512
32ea9b4cfd74e7e0c84d5804ce2c6845bfd2fbd54c75ecf2625cbe458127a09ab889d03aeda791910c3e241915b947dc4d17295867d0b373c02a07c0997f50ca

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ms.dll
MD5
710f2e05cccddba8e0847526616bd870

SHA1
e3d33af80cf0d49b00988f823d2218392c9fcbe9

SHA256
8595319d6642588d0fa3e7b05b486beb188a6f0a56af853718188a0c15af6a2d

SHA512
aa7435b80a38a10f0c8de286860a0a25cb6ab0e36948020db4e54287158055f9bcb2f1af1b07942f35722423e76e278c09f8b22cec31a7595f687447d99ddaf8

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_nl.dll
MD5
dbb9eaf89b67813846574c18e4e6a91d

SHA1
1b55a82a18738d0e32f6d8332eb26c718436d0bd

SHA256
e4c36d1827ff7a67e0304939bccae929975fc107519cba77e54aca04edd9a53a

SHA512
55d44bf41db69ecfeae1b9a0c82fc929fc54856901e4fe8213f8fa960a44f435031f540e8f699cc31cc2e3ca326ac5565d104039633338a1ec7f7a26e7750b85

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_no.dll
MD5
d5c2db33a15c8898a4f09fc12de8a70a

SHA1
500c2a144cff8ba5622287c61de798ba38ec444a

SHA256
5a94656b8b3db132c807a5ff7e5c92c16ff6f74a27432a91a29fa295f912ac77

SHA512
b968f47ffc05de25c4242c9bbc6e4c445eed44c91f8e67ad74011cf19f62f4f0b807aca5655ffd5ec7c26553e3c3a00a7889efcc53871e1d31763ab91efb668b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_pl.dll
MD5
043628c5a717ee2eb0ce92b5ef7cbe2c

SHA1
e3931f7a5c4287eb4c7cf33180bf7abfaf421174

SHA256
d219a7e52d73cba9065dfe803080690e56f6c8b6d3ca54bb30f87134ea860ea9

SHA512
9bc3602b4f4770354bdb22751914793009fa6de9247c3a4d6aafaa767fc02b6588a6e6eb441eb19913fb3dea04b73cf05b733d0633317c2c4eab186025628a93

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_pt-BR.dll
MD5
c783b9d60197cdf63bfca005f587625b

SHA1
dea6f726466c8ffb71e0ba6fc8d994b8c94d60aa

SHA256
8702a3cdc7c16a204aa7702ad50808d3e387ab5271fc4626933da702b91809cf

SHA512
f54dcf61179657d8b018a93cca1ab7a01dbedeb7e19a982e8bd04189744a914c367b48a667aad72d7abbb86b04cad1a5ec39f25f8c5355560443edd7a7afdf87

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_pt-PT.dll
MD5
e9310871c2b8f7eb25cf4069af311869

SHA1
3f9e949f5af42a61a951b44356c16a2ac07001c6

SHA256
e6a4639c3d34756e906f5cd39869e668c78a29b10aabdaea250c6f402a1609c1

SHA512
64ad4a25f1c6a0bfdc8472e91792c5a310ea699a7a82daa72397262dbc42800328d9e202709f852deefb0825976a5681e096b12672488a41df2fbce16454e3bb

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ro.dll
MD5
22b6eb24f51abef2818fd82c89648b4e

SHA1
191374701cc9dfffaa0672dfb134450e222d037a

SHA256
309e50e914881b32fb59e7e3202b002fd41a4d07da4bda2bd35e377376cd4c01

SHA512
da29f138509dcb0734fb0a9b85b242ba6196390b56cf92648ffb66c0702b7f7764577093dd2350b11af2409c9ead8c445524b107a05573c0df80dc44b2651052

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ru.dll
MD5
0dc4707892d9f0890e70959771d715d8

SHA1
17ec12db1d59bd114af48cd552e38f8d01a1648f

SHA256
4e51b3aeedb6a99d772b28c637bbee5558994764c7e6f9df101eb288d090b1d3

SHA512
2f09128510305a9b982050d08e0b31380df680ff7e334271bdc540a4f4c7d9a3134e85ba5ce50097757b14c88393cd3c5aa4fb93204a7340d59bace8cde948bf

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_sk.dll
MD5
0e1a76005ab94a4dd30833e78d6fe0c6

SHA1
e823e5bb054f0efe1c3f60b88e9ff25d41c2559c

SHA256
59ad0cbc9727e1934b861e44b69c0a333e21549ae26b2b75f2f718ff265d4e2f

SHA512
954a5f4d5da9b28812c44f0f24f1303058c5e2970df25a0854a84d948a6b7b9256339409e05168470d9d01803595670c7902e81be8d0f3df70ddcb4d9e9d7f89

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_sl.dll
MD5
042ef67851ebf82657d3fe6fd934aa3e

SHA1
50b1c67d64885775bb2901699034b46d932fe671

SHA256
7c438e0a6a155c8d11a39e6fd89b76a07180fea6e6c1b2b77a238f8ed19de434

SHA512
500f2c879fe66dc80fba374997a9e3990c26220c58282da3f2f5275c90e2e94b76ccbe85304f6c0238b3f4b2e69c15c216fa885d5bcdf64c6ab109459557ad68

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_sr.dll
MD5
8de896a00190d66aa7dfebf9c1b4b40b

SHA1
8f46722033859013d62a631c250873d574cc661a

SHA256
0e5bd2c486102d1c072bb646f30894b735acc36c48d25d9026743542a3d1daed

SHA512
6b80b3d07b41295b11a3501ba0dd1cd1e493dfa1941317677d95dec7cb1003aed32b3719b5dce3fe584f362e28d7ffff1a68be5a429946adb3746386dd227b51

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_sv.dll
MD5
eb1c367fa542fe3e3df48d3549f363fa

SHA1
886f01388fc2b596f5385cd6f112dc28c29aba3e

SHA256
d9ecd6cbea8c0a33d7601eb71b19edf662ff74af054f5c87c7de42acf4a1f768

SHA512
c2618de04d92fb47388367f2b538222efbe5caaa3927980a35350fe67461a150ddc44445658d54483ba78b16afdced212c842a713ecafc48e78c1a7d27aad989

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_sw.dll
MD5
a0092fdc5752b4744e5f34af496497a6

SHA1
7de5bf98a8b2d0678541379d7a5017865e7a3cce

SHA256
15eae6a98d79a73f17c833d9036309460105de9c1a71ee8ec6461645811eaaf5

SHA512
4d50b9e53717121bb98b80bd0c60f0c1699b4f7bf72c4ef44894dc597c50481f8fe098959f3cec21e78073139d208f492ffc452af6ee8c30a20f9606e7d14222

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ta.dll
MD5
82a9cb318c68841d372fd64c71d77074

SHA1
c53b6db9c6f3a37de6a60fb2b034edaa0f6b79a3

SHA256
8696442d26dc54de994ac9a6332ea29f0b930dd047c90d0da57f7e9d7a334ec4

SHA512
ad562f96cdf9be135fa76611de99a33e89d030e6cae4344d2287d37946a77cb24ec9b9600be202728ee8e97608583cfa74659e5069455000d3616ed2d093c725

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_te.dll
MD5
89b10cbeb1aee2953d7f1b29a72b588a

SHA1
e6bdf382d98a7999ab0235c20ddfed58d8320a69

SHA256
dcc9b660a0d7c5b85f3c31bcfe4a5dd0e9b611ae40ea2b911c935f3e8af04ba6

SHA512
3e3588d989a9abf03ba73c2abc1ca9c0d56256350c3e2413189da03679bc5f6d4348a47892e100a25827aad2b8ca451530ad362d2dd8457c31bcaf877d9d2c9f

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_th.dll
MD5
d7c3800198b7f14c73c898b5ec2b683d

SHA1
e22165c74106d9474aafbf2b947f5bfda7540fdb

SHA256
55ca3ab3c78d3780fdf5008f560911ccf6785dc5036541b5c619144c054c61ff

SHA512
a053bc23458569564f550a2efb1515a74d86b9cdcbd016234ad0b05e223b39953d425cd7787eb5c077ba8f7900b69126e11b5f23253883ecac24a3689d25995a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_tr.dll
MD5
a57544374e14e989b8cdaeb2f260f905

SHA1
48cf876c3ac501e3af955bf08e31c410cd50530b

SHA256
37b69cbcfc982c61f37bf65d539717dacc030e09b99cc3bbeaf63057402f7547

SHA512
3aadf65fb721b8d005f03598cd24c9c650f05868ef1b5518c993c985ff946e1247c0af221448cd520759ac45f69b1e95aca70a68c91572eab0bcfe1a65c4080b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_uk.dll
MD5
4b2856c8249d780ea7936853edbde6af

SHA1
86d34a59c5ed381b943e958d7130c06af081be42

SHA256
2df91c26d3322db0d0d8cfb25c05e5ea5aad404b217963a94fe9b9f3fad008e9

SHA512
59fa090a538483f3cdcea73bf2c314f94bd4027cd71f7b73e01dbfb77525ad8ea94d4e7dfd51f50340d9528a847f560e2ce83fce91e7589bdcb91f6554b1c753

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_ur.dll
MD5
0b4bfc358f6e33c02862ab5566ef90b1

SHA1
131e3f402e3cfe81526ab92eaf3ec1d5968e99ef

SHA256
00e37b843f9c1b7e3c1301a989110d089a78bf8f255b8090d35c72d7a2c682bc

SHA512
6cae15f5df957162d5ec1034de451e5cbf330c3908dc6a362aa3a39cb5bd36ecccc5dfb853118cd9b821f2ee9eb8fa2923d338f4f06229d9dddc9628c8f7eed1

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_vi.dll
MD5
0911debd517073fa2b1cbd64adfda9d7

SHA1
8b7903abe4e8fb8b200ef2ed7aebc6b19b4fc3f6

SHA256
04cb9c06e26da8b02d20a8eb4b6f32e477f858d74b30c4ec0d1b83fe2b32ff60

SHA512
0407dd4c4398f3563870d527d0b480c2cd7f5a987f3a2789d08490a2160148601edd9035a80ca6e0299a617046aff5c308f225241e3e68007a3c7f49806cd4be

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_zh-CN.dll
MD5
d05d61daadfaec1af6f6b35516811d23

SHA1
524b6ab2717dff178ee6e7c0d76f6c38be807792

SHA256
4208b818f471a5485f0ead398c6e31827e4caf33f657d4807125429898a81d10

SHA512
e61e58e9e5dc8dbdba9cf109756e51de1ca44688eb3896c02cb0645560285b839359126a5974490c7c80e9259878000f2add825b33a077c3576eac5fb15e8a7c

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdateres_zh-TW.dll
MD5
117a2013de594a999f6cf63f6e44ce05

SHA1
7cd800477a3ac31abba038db5635ab5ac4185207

SHA256
f7a7c6835abf43e0d85c1569647fb4225edd30a98ac2e107eb890b7355021a7b

SHA512
b553176dee56403ac65566850cd23af6110cd4ac54c8b646729a47035761c56ef38db1b2e86d7e1e761a8aa3fe1842a12cd8ed228247965d5cc83c0fd2584335

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\psmachine_64.dll
MD5
b37c6e18e16ea88c02e83f41e189eecd

SHA1
42fc1363768bd61514993fe10850aff3ad5692fd

SHA256
8b9b2203aa64fe4d69f017de45fb88968c9f19f9d750a17dc970af7d97c43f03

SHA512
a546968b6563fbf81341a829d5ba0e7937d8bde00559a60fee4989bbfa20d8400c011203e0c4a5e25a234227e85e2d9d1a514fcd688ee112bb6e76f5e3aacccf

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\psuser.dll
MD5
bccf682059b160b4e95c709564265654

SHA1
9a3b1dc7a2cf3c5c793b65fa8f4ac4961561b417

SHA256
fa7595890494a1c13b92cc3aef18e430e5cc10051625bc932374078cd7328e5f

SHA512
1e64a936d35956ad4c6b9a8a1961805a6c3e4cb7701b05865df637fb0e6b9236841c53bc2efa5aef63656238e454167be68cb7d8ccd0af03aaebdbb211fc1d83

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\psuser_64.dll
MD5
07406e5486d714659f5657e92a55ddbc

SHA1
434ae8453b76dd30cacc828a45e9211aef0238e8

SHA256
53cf5856e6b070637333c10249501437c03feb9d7ba3b9ad9e5f3b3387996038

SHA512
d5888df089fc839ddea226fb97615624bbf94d7cf1e7627f2f599d2246a64ab862cd005caf24b637ed28fda20c89a418a3b6211ef71c577b49c448a48c976d23

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
MD5
5b878a8e67761a7be19ac7ca4486dd2a

SHA1
f595370092221c42bc43fbd423a88315771dce7d

SHA256
c95d41834532294ca22e09b5df1ceaab319cf7ca39a728db371ae0aebafa6783

SHA512
c5bf7e2e0643f7f166ce4d857f0dc9c0a4698717eb9c54aec74b0d081c7c37cc70f04dff98c86a11f9c1e50e904a5f52ca32559ef43798a518b2c12a7106eb42

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
MD5
5b878a8e67761a7be19ac7ca4486dd2a

SHA1
f595370092221c42bc43fbd423a88315771dce7d

SHA256
c95d41834532294ca22e09b5df1ceaab319cf7ca39a728db371ae0aebafa6783

SHA512
c5bf7e2e0643f7f166ce4d857f0dc9c0a4698717eb9c54aec74b0d081c7c37cc70f04dff98c86a11f9c1e50e904a5f52ca32559ef43798a518b2c12a7106eb42

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
MD5
5b878a8e67761a7be19ac7ca4486dd2a

SHA1
f595370092221c42bc43fbd423a88315771dce7d

SHA256
c95d41834532294ca22e09b5df1ceaab319cf7ca39a728db371ae0aebafa6783

SHA512
c5bf7e2e0643f7f166ce4d857f0dc9c0a4698717eb9c54aec74b0d081c7c37cc70f04dff98c86a11f9c1e50e904a5f52ca32559ef43798a518b2c12a7106eb42

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateComRegisterShell64.exe
MD5
5b878a8e67761a7be19ac7ca4486dd2a

SHA1
f595370092221c42bc43fbd423a88315771dce7d

SHA256
c95d41834532294ca22e09b5df1ceaab319cf7ca39a728db371ae0aebafa6783

SHA512
c5bf7e2e0643f7f166ce4d857f0dc9c0a4698717eb9c54aec74b0d081c7c37cc70f04dff98c86a11f9c1e50e904a5f52ca32559ef43798a518b2c12a7106eb42

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveUpdateOnDemand.exe
MD5
811287e00f8e7ff2d9eaea31a37fbfe5

SHA1
ee6e7baa8f7e5fdb76596a98eb4c43a08b67146d

SHA256
1d9dac3c1e9811e6a120467d55f512ba9fa3962eae4d4b8e65adfaed0e4d79c1

SHA512
4c5e5485aa08109e8171deacc3c74f61ce7cfd92e322ff5096aeb187b4ef3446d5ae2899e82ef9fbdef20fd7733376d3fb195a32e552c9045c97df1a75314b21

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdateres_en.dll
MD5
6cbee91a0f87562c1730600a60393f6e

SHA1
905d4a79228e8881307e8b73f36aa67ce0b2a926

SHA256
7cbe6db61b3d942f59fc08c447e052bf2fa15f852662478b318a558fdcd0a76b

SHA512
89db4cb254be5b68b18e20c4ce5176d92e4379a09a85930cd6fb5c97eb366fc1c1b23c7d99f45741162ce23e3638d6b045987860403d0232deecd0212784c2be

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine_64.dll
MD5
b37c6e18e16ea88c02e83f41e189eecd

SHA1
42fc1363768bd61514993fe10850aff3ad5692fd

SHA256
8b9b2203aa64fe4d69f017de45fb88968c9f19f9d750a17dc970af7d97c43f03

SHA512
a546968b6563fbf81341a829d5ba0e7937d8bde00559a60fee4989bbfa20d8400c011203e0c4a5e25a234227e85e2d9d1a514fcd688ee112bb6e76f5e3aacccf

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
MD5
e95461acf4838771c18eed08305888dc

SHA1
8aaf7157a24217eb6657d8fb1500d7f0f6b06788

SHA256
c5fc6adf82102bfcccc12d91b46238fabbf904b7977f099d027a056470b79460

SHA512
f29b1a1575d79262f59929030e4a923a12069fced1d573cda513caa9a361f504ef3630f954c1a003ca380abd913cf9e10168fb71632d4f064be50b6425cfa048

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\CHROME.PACKED.7Z
MD5
8c54857bebc4c077a0d54312bd0a196c

SHA1
7fc8dabca008852a3fabbac52574aeb9eecb70b5

SHA256
9254263d35823d7c37837d07619961dc5862c40e5dc4be3deb48512a9e79d9d2

SHA512
c9d005e8e9a5a45d4e0f983dedb4b41509b82cbc4e96f2a9fa13d878594b609513042b38f05ce2ed4db93f3ca09c7fbd342d18a913159ee380327dd7c6c91074

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe
MD5
1eace95afb48990e569f5ddbe71d19f1

SHA1
12c4bd6fab00532010cba5955285fd06283f99a7

SHA256
ccf78297eec1c22fec5123f4dd7d157c68dee78269444e860832b9e5195d5588

SHA512
4fc01fd949257f18ed484bc0ceb6193e7482b12ce8393eea1d6c097a933ed2f8b3ffe674d14d88f54770eca5b21c78c7db11dbb410a9723013ddcc2230b392ce

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe
MD5
1eace95afb48990e569f5ddbe71d19f1

SHA1
12c4bd6fab00532010cba5955285fd06283f99a7

SHA256
ccf78297eec1c22fec5123f4dd7d157c68dee78269444e860832b9e5195d5588

SHA512
4fc01fd949257f18ed484bc0ceb6193e7482b12ce8393eea1d6c097a933ed2f8b3ffe674d14d88f54770eca5b21c78c7db11dbb410a9723013ddcc2230b392ce

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\CR_28B04.tmp\setup.exe
MD5
1eace95afb48990e569f5ddbe71d19f1

SHA1
12c4bd6fab00532010cba5955285fd06283f99a7

SHA256
ccf78297eec1c22fec5123f4dd7d157c68dee78269444e860832b9e5195d5588

SHA512
4fc01fd949257f18ed484bc0ceb6193e7482b12ce8393eea1d6c097a933ed2f8b3ffe674d14d88f54770eca5b21c78c7db11dbb410a9723013ddcc2230b392ce

Download Submit
C:\Program Files (x86)\BraveSoftware\Update\Install\{D23E6C1B-58CD-4228-A83C-C37F9B898D8F}\brave_installer-x64.exe
MD5
05bf57e19de1d62a1a2ae3d3caa6de94

SHA1
8a5adbd98b8560dd3b0175f14ff4154e69a1977b

SHA256
3c6fcbc921f068642e30ef4f58121553d8e185e899f7df847837f03c9fe27b6b

SHA512
b40487956e94d02ee852707d7f9cc79da2fe089f5a9cecb59b735c0c93ca231e2cb45940ae28394b8fae27243f1f34ecc3082604bcd89aba867b578374bb08f4

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
26764224df56f2d5d555df759b52dd20

SHA1
f4f0aa5ad79ce3252de6439b8b2c00ed8c3e7552

SHA256
b3e9107a5b8812879323923fd66e7301494119539e3fd23eea6a66875b52cffc

SHA512
a059df9ed38a7fc3669c712b4559a0a3610e045bcf7bfa28d2f488253359483cfbae87bfae4128f83e8d78b0cee7bb7929328f4a1fabe0fee5637a4c4b84505e

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
26764224df56f2d5d555df759b52dd20

SHA1
f4f0aa5ad79ce3252de6439b8b2c00ed8c3e7552

SHA256
b3e9107a5b8812879323923fd66e7301494119539e3fd23eea6a66875b52cffc

SHA512
a059df9ed38a7fc3669c712b4559a0a3610e045bcf7bfa28d2f488253359483cfbae87bfae4128f83e8d78b0cee7bb7929328f4a1fabe0fee5637a4c4b84505e

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
26764224df56f2d5d555df759b52dd20

SHA1
f4f0aa5ad79ce3252de6439b8b2c00ed8c3e7552

SHA256
b3e9107a5b8812879323923fd66e7301494119539e3fd23eea6a66875b52cffc

SHA512
a059df9ed38a7fc3669c712b4559a0a3610e045bcf7bfa28d2f488253359483cfbae87bfae4128f83e8d78b0cee7bb7929328f4a1fabe0fee5637a4c4b84505e

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
26764224df56f2d5d555df759b52dd20

SHA1
f4f0aa5ad79ce3252de6439b8b2c00ed8c3e7552

SHA256
b3e9107a5b8812879323923fd66e7301494119539e3fd23eea6a66875b52cffc

SHA512
a059df9ed38a7fc3669c712b4559a0a3610e045bcf7bfa28d2f488253359483cfbae87bfae4128f83e8d78b0cee7bb7929328f4a1fabe0fee5637a4c4b84505e

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
7d5c2f30d010e548fc17dc5ae0ed3a01

SHA1
df3fac4eb0e764ed4c126057d0a4bf44adb254ab

SHA256
5a2ce8e4e02e9f21d68f8234f6cdfd476fd6fe3baf31356c5b67cbbe319ab6dd

SHA512
8ae7e3be30644d9c07f2b403328628c1bca493f26ab46f2251ef4834dbd38b705c5b0afeee63c5ec680625a1b28844f353b7e5725117697d33f7c96179bf5894

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
35dfc22467ee62a389c5f69d70b0e311

SHA1
c1fef5431b1e3b8be8f7097d3c0200bdcd17f0eb

SHA256
f5bdd86fe054d45330b41e66ad48222a4ebc6c9f754d5e1ca04306e6de9ed4db

SHA512
7cc77ab15467e8af87836ece3cd0bbd2e0851b5db91d2694e55680c057b13752c6e9260acf47f806c0165bd60a55e974a33951ac783dab9d5c11702e12133e7f

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
MD5
73e04e862e4250bcbdc997b5fbf1b8aa

SHA1
ffdddaed14ae4779333001bef15e7939c2570191

SHA256
c1aa8182bd33c1ac37cc11d3c658273dbc9b290829755b69939b6633bc1f41e6

SHA512
2f67620041b5576b488441403e0bffa9adcf1288b5f78e5a8203abdcad7961f4fe6c16ec3ea4cceac1a52eabe6622d64f7b44a757fca5ff6aa01bd1bef6be547

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad\settings.dat
MD5
346c7b7d3579bd0bcb19ef24716ccd31

SHA1
1a85296161b14a74dae468506c267625520e719a

SHA256
8c27f4e4bdb72e3be03c466b0c74fde22612ce55284445c19d4edafe270cfc15

SHA512
96fbe0cb0ec3f9a426716c88fde11466237cdc39fe276e74be728afeaee8787f260db4ccfb7ea3e1279ecc6c8013f108c9af7e1b56b3d1ebefa564f059e49ec6

Download Submit
\??\pipe\crashpad_744_AQFIADANFEEGYZCW
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
\Program Files (x86)\BraveSoftware\Temp\GUM89C7.tmp\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\goopdate.dll
MD5
47237c288feebf30be4d245aa2e5e5f1

SHA1
807eab2c9ddc4796bd62d2f00cd0c7e7226326ec

SHA256
2aa97297bbecfd8a15faf1a39b3b0851923289011a13cf867b629b895e37686e

SHA512
6c23d83d1d5cc04a8f6d680b6c69b9ccb95137d7b91acf83ccb1c1543a3935f542602814534afb0eb017452ad16dda7d427275c52e8b7f5a7362846cabe44a67

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine.dll
MD5
5f4550c75031e9902a7cdeed3b9ce68c

SHA1
3969279207e56d5c4b889a4ea7e80f07390f058b

SHA256
9e8ade2ff014d68e651e5eaec192a15bf2983fdffd1690a76fe0a6b344116bc8

SHA512
98a7e8c6bc4b044c7d70acdd2844a05671c43ce2804b490fdb68a921ac22015fe7c21d2cde33fff8eff5dad22c6d00fa79fd046b9288d36ac1f2ecc5a8e2b5f1

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine_64.dll
MD5
b37c6e18e16ea88c02e83f41e189eecd

SHA1
42fc1363768bd61514993fe10850aff3ad5692fd

SHA256
8b9b2203aa64fe4d69f017de45fb88968c9f19f9d750a17dc970af7d97c43f03

SHA512
a546968b6563fbf81341a829d5ba0e7937d8bde00559a60fee4989bbfa20d8400c011203e0c4a5e25a234227e85e2d9d1a514fcd688ee112bb6e76f5e3aacccf

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine_64.dll
MD5
b37c6e18e16ea88c02e83f41e189eecd

SHA1
42fc1363768bd61514993fe10850aff3ad5692fd

SHA256
8b9b2203aa64fe4d69f017de45fb88968c9f19f9d750a17dc970af7d97c43f03

SHA512
a546968b6563fbf81341a829d5ba0e7937d8bde00559a60fee4989bbfa20d8400c011203e0c4a5e25a234227e85e2d9d1a514fcd688ee112bb6e76f5e3aacccf

Download Submit
\Program Files (x86)\BraveSoftware\Update\1.3.101.0\psmachine_64.dll
MD5
b37c6e18e16ea88c02e83f41e189eecd

SHA1
42fc1363768bd61514993fe10850aff3ad5692fd

SHA256
8b9b2203aa64fe4d69f017de45fb88968c9f19f9d750a17dc970af7d97c43f03

SHA512
a546968b6563fbf81341a829d5ba0e7937d8bde00559a60fee4989bbfa20d8400c011203e0c4a5e25a234227e85e2d9d1a514fcd688ee112bb6e76f5e3aacccf

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome.dll
MD5
7a76df426c933b98ffa1c809ba21edb1

SHA1
8a9eb6ac67db6d42b207b68568b75150d0a8de26

SHA256
ecc5db4438689836a4d4fbb1264381e13447add914feca5aded812a2bb75c3b6

SHA512
07e0b6b7bae17be468706d1589f9f1b506ae03e5634ceba4116e875b544bda4c903c4db6d23177595a1a229d9d2437b5cb6bab948b21ab439262332f19196f7d

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome.dll
MD5
f9e4a442e01585983ccb6b5803288924

SHA1
37937bcaebf4c18534668c95e57f8d48194e378b

SHA256
84951df65cd6ff47a55afc6b5f53a66e50842522109d26968b1ce8ef68f79063

SHA512
04b2fceb806005986e12ad2276156a696fe7f8d088c66f1edf09a0e747daa479d65f5e1ee2011ad4a50595f24e699ba383e10a72ebc303f96cae529008af32ee

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome.dll
MD5
86503b25906d0c0638a1d060f7cface2

SHA1
65b2034616264fb1297c2cf66f08b19414cc9a12

SHA256
c5561525d8b20bf6aa37c1b14e5e4b85e7c05ac242d2c6284c6ee7f066b31733

SHA512
d05d93d3f5b320302475e2d9bf43127559bbd5348b3f95b4e054e99e4e08ec58eeca675e56980d294654928b491f2f6d99387a4c54f26d287071b6549695786d

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome_elf.dll
MD5
308cf4a48b39a49ad66240315acd0381

SHA1
840322114d76ed95914a24bf0ebbc7bdf931a285

SHA256
5aa0eeca58de92147a370ad21dccb5c93393700b0d19da8cf3c5622233b2a6cf

SHA512
8c854e121b1f0c689f580e61c6869c802e0b1aa3334b8aac460d4f594935869486c9082fbb05e2105c1e2d8cba1cb04063afdeb9e4b61705114a442db7e9a24b

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome_elf.dll
MD5
308cf4a48b39a49ad66240315acd0381

SHA1
840322114d76ed95914a24bf0ebbc7bdf931a285

SHA256
5aa0eeca58de92147a370ad21dccb5c93393700b0d19da8cf3c5622233b2a6cf

SHA512
8c854e121b1f0c689f580e61c6869c802e0b1aa3334b8aac460d4f594935869486c9082fbb05e2105c1e2d8cba1cb04063afdeb9e4b61705114a442db7e9a24b

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome_elf.dll
MD5
308cf4a48b39a49ad66240315acd0381

SHA1
840322114d76ed95914a24bf0ebbc7bdf931a285

SHA256
5aa0eeca58de92147a370ad21dccb5c93393700b0d19da8cf3c5622233b2a6cf

SHA512
8c854e121b1f0c689f580e61c6869c802e0b1aa3334b8aac460d4f594935869486c9082fbb05e2105c1e2d8cba1cb04063afdeb9e4b61705114a442db7e9a24b

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\chrome_elf.dll
MD5
308cf4a48b39a49ad66240315acd0381

SHA1
840322114d76ed95914a24bf0ebbc7bdf931a285

SHA256
5aa0eeca58de92147a370ad21dccb5c93393700b0d19da8cf3c5622233b2a6cf

SHA512
8c854e121b1f0c689f580e61c6869c802e0b1aa3334b8aac460d4f594935869486c9082fbb05e2105c1e2d8cba1cb04063afdeb9e4b61705114a442db7e9a24b

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\swiftshader\libEGL.dll
MD5
f77d07f08a346672668c1ed0ff964fab

SHA1
38f286671424407f23ffe7d5c6efb76b531d18ab

SHA256
12f70bd8740dcfa9c3cfe1ea2101ce7dba7a015a4446946c335dc309f136af54

SHA512
1f513e797733702cccbc3336354b8645802d3b8ff25c1e1771d19fb942a2490d3181d673ba169d3d981642e498544152849fdb4584cc70c65c7c20661267f6b1

Download Submit
\Program Files\BraveSoftware\Brave-Browser\Application\87.1.17.73\swiftshader\libGLESv2.dll
MD5
6cadf6c2d485bd6ebd92a2220aa2a713

SHA1
416092bc5626ba886ec943161686bf5f6a5cb673

SHA256
a24f9244e5939d4544fed7799fdcc8ac7c5a7875c008524a4a92297a7cdd27ed

SHA512
2bbe6b8a563c71dc942cc0991fcb0b654a1b5a2a8f386305ff06d9c9d3ef6069d82f6bd31c74eae519cdd2f04c72ffc4195568068009702eaf72ca86fe409911

Download Submit
memory/208-100-0x0000000000000000-mapping.dmp

Download
memory/648-79-0x0000000000000000-mapping.dmp

Download
memory/744-123-0x0000000000000000-mapping.dmp

Download
memory/1012-126-0x0000000000000000-mapping.dmp

Download
memory/1220-116-0x0000000000000000-mapping.dmp

Download
memory/2148-82-0x0000000000000000-mapping.dmp

Download
memory/2148-111-0x0000000000000000-mapping.dmp

Download
memory/2208-107-0x0000000000000000-mapping.dmp

Download
memory/2248-74-0x0000000000000000-mapping.dmp

Download
memory/2276-89-0x0000000000000000-mapping.dmp

Download
memory/2736-144-0x0000000000000000-mapping.dmp

Download
memory/3024-119-0x0000000000000000-mapping.dmp

Download
memory/3184-145-0x0000000000000000-mapping.dmp

Download
memory/3304-97-0x0000000000000000-mapping.dmp

Download
memory/3760-2-0x0000000000000000-mapping.dmp

Download
memory/3872-109-0x0000000000000000-mapping.dmp

Download
memory/3940-134-0x00007FF9387B0000-0x00007FF9387B1000-memory.dmp

Filesize
4KB

Download
memory/3940-131-0x0000000000000000-mapping.dmp

Download
memory/3952-132-0x0000000000000000-mapping.dmp

Download
memory/4092-93-0x0000000000000000-mapping.dmp

Download