Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
24/04/2024, 01:28
Static task
static1
Behavioral task
behavioral1
Sample
BraveBrowserSetup-BRV011.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
BraveBrowserSetup-BRV011.exe
Resource
win10v2004-20240412-en
General
-
Target
BraveBrowserSetup-BRV011.exe
-
Size
1.2MB
-
MD5
09466eb4a83e4e2b6d5591b001d688db
-
SHA1
c6eea55f47ae4ded081f40991b1b7db55172c2b8
-
SHA256
81f02f369d9dd21fa2fe172a0f61146149257c6027ef3f05350705eb11c65a97
-
SHA512
1979382e8d696d3ead95bbf03b5fbc6e61112d09e984976eba05e7e6987c638ff22553e86dcac88dd19e3331f28e8df8617c1b133509ae525bbb30dccdbe7dce
-
SSDEEP
24576:1PEvHbSfQ7WlvaQMWD2Q8VtHvHAo1I187MttFeujUThH/8KPj0Oe:mvHF7WlSQMWCTVtvAo1IO7aLwhf8iIL
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Downloads MZ/PE file
-
Modifies Installed Components in the registry 2 TTPs 7 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\IsInstalled = "1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Version = "43,0,0,0" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\ = "Brave" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\StubPath = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\124.1.65.114\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Localized Name = "Brave" setup.exe -
Sets file execution options in registry 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe BraveUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation = "0" BraveUpdate.exe -
Checks computer location settings 2 TTPs 11 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation BraveUpdate.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe Key value queried \REGISTRY\USER\S-1-5-21-2177723727-746291240-1644359950-1000\Control Panel\International\Geo\Nation brave.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName brave.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer brave.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_863380526\lori-jean.jpg brave.exe File created C:\Program Files\chrome_url_fetcher_2396_21765450\obedbbhbpmojnkanicioggnmelmoomoc_20230923.567854667.14_all_ENUS500000_ace7f54yxy3vtmc2mjkr5yii7sta.crx3 brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\psuser_arm64.dll BraveUpdate.exe File opened for modification C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\20240424012941.pma chrmstp.exe File created C:\Program Files\chrome_url_fetcher_2396_245827821\extension_1_0_55.crx brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1266148347\manifest.json brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-sq.hyb brave.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\psuser.dll BraveBrowserSetup-BRV011.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\MEIPreload\manifest.json setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\ml\messages.json setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_319392762\list.txt brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-sl.hyb brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\goopdateres_bg.dll BraveUpdate.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\vk_swiftshader_icd.json setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-or.hyb brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1529925415\ddc90a63-151a-41d0-9372-aba9e7b2e238.png brave.exe File created C:\Program Files\chrome_url_fetcher_2396_1242339447\extension_1_0_133.crx brave.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\Locales\fi.pak setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\Locales\gu.pak setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\bn\messages.json setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_748952513\manifest.json brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_318499515\1\request-otr.json brave.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\Locales\mr.pak setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\en_GB\messages.json setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\chrome.VisualElementsManifest.xml setup.exe File opened for modification C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\20240424012908.pma setup.exe File created C:\Program Files\chrome_url_fetcher_2396_1153811337\jflookgnkcckhobaglndicnbbgbonegd_3026_all_an75hpewbujg3uqbc7zvphe73a.crx3 brave.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\goopdateres_el.dll BraveBrowserSetup-BRV011.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_318499515\1\scripts\brave_rewards\publisher\reddit\redditBase.bundle.js brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-hu.hyb brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-en-gb.hyb brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateOnDemand.exe BraveUpdate.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1454557052\safety_tips.pb brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_318499515\manifest.json brave.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\goopdateres_kn.dll BraveBrowserSetup-BRV011.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\124.1.65.114.manifest setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\vulkan-1.dll setup.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\BraveUpdateComRegisterShellArm64.exe BraveBrowserSetup-BRV011.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\Locales\ca.pak setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\fr\messages.json setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-af.hyb brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\goopdateres_pl.dll BraveUpdate.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\elevation_service.exe setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1127673821\_metadata\verified_contents.json brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-sv.hyb brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1610610756\manifest.fingerprint brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-cs.hyb brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe BraveUpdate.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\goopdateres_is.dll BraveUpdate.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\gu\messages.json setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\ta\messages.json setup.exe File created C:\Program Files\chrome_url_fetcher_2396_977417575\extension_1_0_11.crx brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_318499515\1\scripts\brave_rewards\publisher\vimeo\vimeoAutoContribution.bundle.js brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_863380526\spencer-moore-4.jpg brave.exe File created C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\goopdateres_lv.dll BraveUpdate.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\Locales\sw.pak setup.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\MEIPreload\preloaded_data.pb setup.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\goopdateres_pt-BR.dll BraveBrowserSetup-BRV011.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_863380526\StudentNTP_John-Ng_x1280.jpg brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1454557052\manifest.json brave.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_1166206306\hyph-cy.hyb brave.exe File created C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1700_1281240150\Chrome-bin\124.1.65.114\resources\brave_extension\_locales\kn\messages.json setup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping2396_2012264645\ssl_error_assistant.pb brave.exe -
Executes dropped EXE 58 IoCs
pid Process 4388 BraveUpdate.exe 1752 BraveUpdate.exe 3432 BraveUpdate.exe 4300 BraveUpdateComRegisterShell64.exe 552 BraveUpdateComRegisterShell64.exe 4340 BraveUpdateComRegisterShell64.exe 4820 BraveUpdate.exe 1864 BraveUpdate.exe 1844 BraveUpdate.exe 728 brave_installer-x64.exe 1700 setup.exe 2264 setup.exe 1968 setup.exe 2336 setup.exe 2484 BraveUpdate.exe 3284 BraveUpdateOnDemand.exe 1404 BraveUpdate.exe 2396 brave.exe 4436 brave.exe 3648 brave.exe 3284 brave.exe 664 brave.exe 4620 brave.exe 2840 brave.exe 2484 brave.exe 5148 brave.exe 5496 brave.exe 6004 brave.exe 6032 chrmstp.exe 6112 chrmstp.exe 5136 chrmstp.exe 1140 chrmstp.exe 5436 brave.exe 5372 brave.exe 5464 brave.exe 5964 brave.exe 428 brave.exe 4508 brave.exe 5756 brave.exe 6432 brave.exe 6568 brave.exe 6600 brave.exe 6884 brave.exe 6900 brave.exe 6208 brave.exe 6276 brave.exe 6856 brave.exe 6464 brave.exe 6424 brave.exe 1792 brave.exe 6784 brave.exe 4508 brave.exe 3092 brave.exe 5800 brave.exe 1116 brave.exe 6808 brave.exe 6468 brave.exe 6424 brave.exe -
Loads dropped DLL 64 IoCs
pid Process 4388 BraveUpdate.exe 1752 BraveUpdate.exe 3432 BraveUpdate.exe 4300 BraveUpdateComRegisterShell64.exe 3432 BraveUpdate.exe 552 BraveUpdateComRegisterShell64.exe 3432 BraveUpdate.exe 4340 BraveUpdateComRegisterShell64.exe 3432 BraveUpdate.exe 4820 BraveUpdate.exe 1864 BraveUpdate.exe 1844 BraveUpdate.exe 1844 BraveUpdate.exe 1864 BraveUpdate.exe 2484 BraveUpdate.exe 1404 BraveUpdate.exe 1404 BraveUpdate.exe 2396 brave.exe 4436 brave.exe 2396 brave.exe 3648 brave.exe 3284 brave.exe 3648 brave.exe 3284 brave.exe 3648 brave.exe 3648 brave.exe 3648 brave.exe 3648 brave.exe 3648 brave.exe 664 brave.exe 3648 brave.exe 664 brave.exe 4620 brave.exe 4620 brave.exe 2840 brave.exe 2840 brave.exe 2484 brave.exe 2484 brave.exe 5148 brave.exe 5148 brave.exe 5496 brave.exe 5496 brave.exe 6004 brave.exe 6004 brave.exe 5436 brave.exe 5436 brave.exe 5372 brave.exe 5372 brave.exe 5464 brave.exe 5464 brave.exe 5964 brave.exe 5964 brave.exe 428 brave.exe 428 brave.exe 4508 brave.exe 4508 brave.exe 5756 brave.exe 5756 brave.exe 6432 brave.exe 6432 brave.exe 6568 brave.exe 6568 brave.exe 6600 brave.exe 6600 brave.exe -
Registers COM server for autorun 1 TTPs 34 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\LocalServer32 setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\LocalServer32\ = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\124.1.65.114\\notification_helper.exe\"" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32 BraveUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\LocalServer32\ServerExecutable = "C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\124.1.65.114\\notification_helper.exe" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32 BraveUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\psmachine_64.dll" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}\InProcServer32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdateComRegisterShell64.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName brave.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer brave.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS brave.exe -
Modifies data under HKEY_USERS 8 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography svchost.exe Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC svchost.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry brave.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133583957819138979" brave.exe Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey svchost.exe Key created \REGISTRY\USER\S-1-5-19 svchost.exe Key created \REGISTRY\USER\S-1-5-19\SOFTWARE svchost.exe Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft svchost.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66CE3D6C-0B35-4F78-AC77-39728A75CB75}\LocalServer32 BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}\ProxyStubClsid32\ = "{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C974F2DD-CFB8-4466-8E6D-96ED901DAACA}\NumMethods BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\NumMethods\ = "4" BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{70E5ECF5-2CA7-4019-9B23-916789A13C2C} BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA9CED87-65D9-429E-AE7A-B029CEACEA49}\InprocHandler32\ThreadingModel = "Both" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\ = "ICoCreateAsync" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\ProxyStubClsid32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoCreateAsync.1.0\ = "CoCreateAsync" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\ = "IGoogleUpdateCore" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\NumMethods BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}\ProxyStubClsid32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA} BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}\ProxyStubClsid32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}\NumMethods BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\NumMethods BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3282EB12-D954-4FD2-A2E1-C942C8745C65}\LocalizedString = "@C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.149\\goopdate.dll,-3000" BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}\ProxyStubClsid32 BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\NumMethods BraveUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F6D9FE5-6ED3-43A3-80D2-EA8766D65352} BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\ProxyStubClsid32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A147722A-5568-4B84-B401-86D744470CBF}\ProxyStubClsid32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{35A4470F-5EEC-4715-A2DC-6AA9F8E21183} BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\ProxyStubClsid32\ = "{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreClass.1\ = "Google Update Core Class" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\ProxyStubClsid32\ = "{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ProxyStubClsid32 BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}\ = "IBrowserHttpRequest2" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F396861E-0C8E-4C71-8256-2FAE6D759CE9}\TypeLib\Version = "1.0" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{F396861E-0C8E-4C71-8256-2FAE6D759CE9}\1.0\0\win32 setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}\NumMethods\ = "4" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF} BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\NumMethods\ = "10" BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}\ProgID\ = "BraveSoftwareUpdate.ProcessLauncher.1.0" BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\VersionIndependentProgID BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66CE3D6C-0B35-4F78-AC77-39728A75CB75}\ProgID BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ = "IPolicyStatusValue" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ProxyStubClsid32 BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C974F2DD-CFB8-4466-8E6D-96ED901DAACA}\NumMethods BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}\NumMethods\ = "5" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}\ = "ICurrentState" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\Software\Classes\BraveFile\DefaultIcon setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\NumMethods\ = "11" BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}\NumMethods BraveUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\ProxyStubClsid32 BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28C83F57-E4C0-4B54-B187-585C51EE8F9C}\ProgID\ = "BraveSoftwareUpdate.OnDemandCOMClassMachine.1.0" BraveUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28C83F57-E4C0-4B54-B187-585C51EE8F9C}\Elevation\Enabled = "1" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebMachine\ = "Google Update Broker Class Factory" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ = "IAppVersion" BraveUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\NumMethods BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\BraveUpdate.exe\AppID = "{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8504FB26-FC3E-4C1C-9C94-46EC93E6BA63}\ = "IProgressWndEvents" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\NumMethods\ = "10" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28C83F57-E4C0-4B54-B187-585C51EE8F9C}\ = "Google Update Broker Class Factory" BraveUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{598BBE98-5919-4392-B62A-50D7115F10A3}\Elevation\Enabled = "1" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\NumMethods\ = "13" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\ = "IGoogleUpdate3" BraveUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}\ = "ServiceModule" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3AD2D487-D166-4160-8E36-1AE505233A55}\ = "Google Update Core Class" BraveUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}\ProxyStubClsid32\ = "{F2F621FF-E6E3-4FD7-B2FE-95C64FCA16D5}" BraveUpdateComRegisterShell64.exe -
Suspicious behavior: EnumeratesProcesses 18 IoCs
pid Process 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 1864 BraveUpdate.exe 1864 BraveUpdate.exe 2484 BraveUpdate.exe 2484 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 4388 BraveUpdate.exe 2396 brave.exe 2396 brave.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4388 BraveUpdate.exe Token: SeDebugPrivilege 4388 BraveUpdate.exe Token: SeDebugPrivilege 4388 BraveUpdate.exe Token: SeDebugPrivilege 4388 BraveUpdate.exe Token: 33 728 brave_installer-x64.exe Token: SeIncBasePriorityPrivilege 728 brave_installer-x64.exe Token: SeDebugPrivilege 1864 BraveUpdate.exe Token: SeDebugPrivilege 2484 BraveUpdate.exe Token: SeDebugPrivilege 4388 BraveUpdate.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe Token: SeCreatePagefilePrivilege 2396 brave.exe Token: SeShutdownPrivilege 2396 brave.exe -
Suspicious use of FindShellTrayWindow 12 IoCs
pid Process 1968 setup.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe 2396 brave.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4760 wrote to memory of 4388 4760 BraveBrowserSetup-BRV011.exe 88 PID 4760 wrote to memory of 4388 4760 BraveBrowserSetup-BRV011.exe 88 PID 4760 wrote to memory of 4388 4760 BraveBrowserSetup-BRV011.exe 88 PID 4388 wrote to memory of 1752 4388 BraveUpdate.exe 89 PID 4388 wrote to memory of 1752 4388 BraveUpdate.exe 89 PID 4388 wrote to memory of 1752 4388 BraveUpdate.exe 89 PID 4388 wrote to memory of 3432 4388 BraveUpdate.exe 90 PID 4388 wrote to memory of 3432 4388 BraveUpdate.exe 90 PID 4388 wrote to memory of 3432 4388 BraveUpdate.exe 90 PID 3432 wrote to memory of 4300 3432 BraveUpdate.exe 91 PID 3432 wrote to memory of 4300 3432 BraveUpdate.exe 91 PID 3432 wrote to memory of 552 3432 BraveUpdate.exe 92 PID 3432 wrote to memory of 552 3432 BraveUpdate.exe 92 PID 3432 wrote to memory of 4340 3432 BraveUpdate.exe 93 PID 3432 wrote to memory of 4340 3432 BraveUpdate.exe 93 PID 4388 wrote to memory of 4820 4388 BraveUpdate.exe 95 PID 4388 wrote to memory of 4820 4388 BraveUpdate.exe 95 PID 4388 wrote to memory of 4820 4388 BraveUpdate.exe 95 PID 4388 wrote to memory of 1864 4388 BraveUpdate.exe 96 PID 4388 wrote to memory of 1864 4388 BraveUpdate.exe 96 PID 4388 wrote to memory of 1864 4388 BraveUpdate.exe 96 PID 1844 wrote to memory of 728 1844 BraveUpdate.exe 109 PID 1844 wrote to memory of 728 1844 BraveUpdate.exe 109 PID 728 wrote to memory of 1700 728 brave_installer-x64.exe 110 PID 728 wrote to memory of 1700 728 brave_installer-x64.exe 110 PID 1700 wrote to memory of 2264 1700 setup.exe 111 PID 1700 wrote to memory of 2264 1700 setup.exe 111 PID 1700 wrote to memory of 1968 1700 setup.exe 116 PID 1700 wrote to memory of 1968 1700 setup.exe 116 PID 1968 wrote to memory of 2336 1968 setup.exe 117 PID 1968 wrote to memory of 2336 1968 setup.exe 117 PID 1844 wrote to memory of 2484 1844 BraveUpdate.exe 119 PID 1844 wrote to memory of 2484 1844 BraveUpdate.exe 119 PID 1844 wrote to memory of 2484 1844 BraveUpdate.exe 119 PID 3284 wrote to memory of 1404 3284 BraveUpdateOnDemand.exe 121 PID 3284 wrote to memory of 1404 3284 BraveUpdateOnDemand.exe 121 PID 3284 wrote to memory of 1404 3284 BraveUpdateOnDemand.exe 121 PID 1404 wrote to memory of 2396 1404 BraveUpdate.exe 122 PID 1404 wrote to memory of 2396 1404 BraveUpdate.exe 122 PID 2396 wrote to memory of 4436 2396 brave.exe 123 PID 2396 wrote to memory of 4436 2396 brave.exe 123 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124 PID 2396 wrote to memory of 3648 2396 brave.exe 124
Processes
-
C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV011.exe"C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV011.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:4760 -
C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Temp\GUM69B7.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"2⤵
- Sets file execution options in registry
- Checks computer location settings
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4388 -
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1752
-
-
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3432 -
C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
PID:4300
-
-
C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
PID:552
-
-
C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateComRegisterShell64.exe"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
PID:4340
-
-
-
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSI3MDQiLz48L2FwcD48L3JlcXVlc3Q-3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4820
-
-
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{A8EAB8A7-3C70-452D-8CD1-08D0AA9BD7B4}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1864
-
-
-
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1844 -
C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\brave_installer-x64.exe"C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\guiC1CB.tmp"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:728 -
C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe"C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\guiC1CB.tmp" --brave-referral-code="BRV011"3⤵
- Modifies Installed Components in the registry
- Drops file in Program Files directory
- Executes dropped EXE
- Registers COM server for autorun
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1700 -
C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe"C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=124.1.65.114 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff7886fd000,0x7ff7886fd00c,0x7ff7886fd0184⤵
- Executes dropped EXE
PID:2264
-
-
C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe"C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\guiC1CB.tmp" --create-shortcuts=0 --install-level=14⤵
- Drops file in Program Files directory
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1968 -
C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe"C:\Program Files (x86)\BraveSoftware\Update\Install\{D07EA1DC-57FD-4B5C-A1D3-AF4D81506627}\CR_E8A50.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=124.1.65.114 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff7886fd000,0x7ff7886fd00c,0x7ff7886fd0185⤵
- Executes dropped EXE
PID:2336
-
-
-
-
-
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTQ5IiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE0OSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntBOEVBQjhBNy0zQzcwLTQ1MkQtOENEMS0wOEQwQUE5QkQ3QjR9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7MkQ5NjFDMDUtNTM0MS00ODkyLUE5MTMtQkRFQTI2OTJCODFBfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSI4IiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIvPjxhcHAgYXBwaWQ9IntBRkU2QTQ2Mi1DNTc0LTRCOEEtQUY0My00Q0M2MERGNDU2M0J9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjQuMS42NS4xMTQiIGFwPSJyZWxlYXNlIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5NjcwNyIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjEwOTMiIGRvd25sb2FkX3RpbWVfbXM9IjE0NDY5IiBkb3dubG9hZGVkPSIxMjQ0ODM2MDgiIHRvdGFsPSIxMjQ0ODM2MDgiIGluc3RhbGxfdGltZV9tcz0iMzAzMzUiLz48L2FwcD48L3JlcXVlc3Q-2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2484
-
-
C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateOnDemand.exe"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.149\BraveUpdateOnDemand.exe" -Embedding1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3284 -
C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1404 -
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer3⤵
- Checks computer location settings
- Checks system information in the registry
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2396 -
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=124.1.65.114 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ffe58861c80,0x7ffe58861c8c,0x7ffe58861c984⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4436
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2044,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=2040 /prefetch:24⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3648
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1932,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=2148 /prefetch:34⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3284
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=2344 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:664
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3340,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=3348 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4620
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3356,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=3420 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:2840
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --extension-process --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4100,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4112 /prefetch:24⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:2484
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --extension-process --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4652,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4848 /prefetch:24⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5148
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=5076,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5100 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5496
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5324,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5316 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6004
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings4⤵
- Drops file in Program Files directory
- Executes dropped EXE
PID:6032 -
C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=124.1.65.114 --initial-client-data=0x278,0x27c,0x280,0x254,0x22c,0x7ff6a6a6d000,0x7ff6a6a6d00c,0x7ff6a6a6d0185⤵
- Executes dropped EXE
PID:6112
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=05⤵
- Executes dropped EXE
PID:5136 -
C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.114\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=124.1.65.114 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff6a6a6d000,0x7ff6a6a6d00c,0x7ff6a6a6d0186⤵
- Executes dropped EXE
PID:1140
-
-
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5492,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5504 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5436
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5528,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5544 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5372
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5312,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5944 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5464
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5684,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5292 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5964
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5664,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5776 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:428
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6068,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5740 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4508
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5952,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6272 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5756
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6164,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5872 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6432
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6140,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5864 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6568
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5280,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5916 /prefetch:84⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6600
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6288,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6132 /prefetch:84⤵
- Executes dropped EXE
PID:6884
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5812,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5744 /prefetch:84⤵
- Executes dropped EXE
PID:6900
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6152,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5876 /prefetch:84⤵
- Executes dropped EXE
PID:6208
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --start-stack-profiler --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5580,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4312 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
PID:6276
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=4956,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=204 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
PID:6856
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=5856,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=3744 /prefetch:84⤵
- Executes dropped EXE
PID:6464
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6072,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4856 /prefetch:84⤵
- Executes dropped EXE
PID:6424
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6124,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5540 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
PID:1792
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --no-appcompat-clear --brave_session_token=341862349211657738 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6336,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5936 /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
PID:6784
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6468,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4320 /prefetch:84⤵
- Executes dropped EXE
PID:4508
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3756,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6256 /prefetch:84⤵
- Executes dropped EXE
PID:3092
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4856,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5764 /prefetch:84⤵
- Executes dropped EXE
PID:5800
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6004,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5708 /prefetch:84⤵
- Executes dropped EXE
PID:1116
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6084,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6088 /prefetch:84⤵
- Executes dropped EXE
PID:6808
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4320,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=780 /prefetch:84⤵
- Executes dropped EXE
PID:6468
-
-
C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4048,i,9130644565732428795,2408965165515606670,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6464 /prefetch:84⤵
- Executes dropped EXE
PID:6424
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4824
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵
- Modifies data under HKEY_USERS
PID:2132
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
270KB
MD581df4345eed08fa6f931cee52c2c08c6
SHA1b26469e0474d04ffc6b8be461880e578fa73b0c8
SHA256330cf2c0804d686af425bf6b2796e0bb4f35f9e673e1e27bbcb4f98e1f815f05
SHA512b29c2aaa5fdd608c423ef67eb6eadb6441406714b8c78a4b6f0ebf2c1d3c0f9bc12cf1f2e3069d8a7f369544984adf82c6a7e0dba94b97c8397bf9ee08422ae3
-
Filesize
360KB
MD5d01d5817a68555221d3bc68ffe5a34fb
SHA16c07bc4701f9d98d8d550a68f4ae35526dee62cb
SHA2568bb4f5c1769948588183297359cae7e33f49f9b4995f9cfa75b1354797babcb8
SHA512a072952b0f382ff3763aebe644ec7077926ecdf1d8bf24ab0a9ab2e468609cb57758e1a2c5ff394c561c0336cf8691e20791d83d6e6066d82cd66e77ab822b80
-
Filesize
355KB
MD53ef2eb28ce14a889409e8dcffbbc317a
SHA157c538c8137afd6294e926116f47f269a2f70224
SHA2565ac765fb6d6114064874bf1c077b52fa431061262ef30c6c9c6e681878879c6a
SHA5127640975569c4a58b547645e031a3e9ce7225e2eb1f69815de49151ae2ed134ba0696f5ed56658883422063bee42e301dc70dceb605ed712c3d699d1cd12ddec0
-
Filesize
162KB
MD556130b4cc8a81982445c2bdfeb9fc6c8
SHA1f4fe08a2f48d0c038443e3917fa3111976335f23
SHA2560eb2f9cc90d65f4ea4bfec32f4dce6be9e0e24b342ea9e9f9cd9005c9fa90b00
SHA512aad1a9396f3f9545d27767881bb189157ce7c3d50fda1c44d848b17b1a8c21bfc6795337b7ada36d974d76b1da298df8838f0a7d1b077c29e9366a7003918d96
-
Filesize
162KB
MD53d40525c8829fc831303f4bd7b929101
SHA1df41bbb2c2fd990be0253d4be96a04721e2f7b56
SHA2562ec1ef334d63697e533431643d7219a40405083a19efc1a9405505370446b98e
SHA512e3f5f96a1dc778092183388022b64b94186cf021762ff5d75ecb89826bc7276cb3b0818539977915d5a04776504c89f6a13424b3d91d1acabe7a0b746c8fb83c
-
Filesize
144KB
MD5551dff5a555a1cee3736cd76f2371cd7
SHA1839946fed246dc724d810d78dd30c8c75d8e2ac1
SHA256f18fb26c8642fb99fd78ba54899ba0d0752ecc323cc8cd63c679dbaff9be65fd
SHA512f61d3f432d9599fe8b69b4bc997873e2e9d1b5ad891bc4016418dc4db701d05b4f1f2bbd88092ab5b990ef508a899f1a3f67ba37800f9f6b07a7279558fcd741
-
Filesize
194KB
MD54c3001794335f8a4fe7a85d049b56bb7
SHA1dc41fd731e32fdc3227483dde73941c86bfe9fad
SHA2563cb8b7cb98bb6b405195ff4d0755081049e74465fcb4fad2b8d8d1e0669290bf
SHA512814b85cec58353029b0b4d10c300bfa41a25db0b9ff4008ddbf8a5ccb5590fe06b7938cf50bd0fd612c32d146e3dee8120a53ea57062b51a2a48655ee6345f26
-
Filesize
1.0MB
MD5971970ee815346f51f326143ff15db1e
SHA157166a99385a457eab32da7664664e9e4d619599
SHA25606749379a7f4a693bf9d53b2d782340b03aa4fc32452af27de115f39c870de8c
SHA51244f121841c13c4e05bcbb054a6fdc15879c7c3e1a4dc7e14621ee45765f06fadf2088615456fb5b87239606f833ced926e4574fa320e0881d300a5967830b5b5
-
Filesize
42KB
MD5dca2049d6b3ad7a2989051a686b16828
SHA151d73f3f6e094a9527be48a85e1f9ad2e1b50956
SHA25638753ff02fc9d0e714872eb459b1c1b4d4fa1149b568289d070b17ad55cbd853
SHA5121a4e47f2b416577244a89866d540c3565ab6aa40b3abda6bebf0e78c91df1f6d4f17f04bf3e0abd8300abfc6e9c35b4294b1e400aa94d1fdbd087aa95418ede2
-
Filesize
41KB
MD5ad8512d7ee10941d944b22931b42c777
SHA10d584db901e591d4ebd9f26ef0afa2fd591d8e05
SHA256ea84b2a3ecee5078bded35d142e89c3c6e3d6c115fdb691891700e2e9a312b6f
SHA512cffd11941b42e7caf9881faccfcf9d39c3d1bf37e873c6119e2786fd201d97dea43312045c4edfb07b01173e8fcfa2ed24077f946a7549ad4a521d6b4e13e9f9
-
Filesize
44KB
MD535a38d2169ef8d3a57cddc2acddec40d
SHA1d54e590f0f4d7c8c4825916ee1e7461e8793780d
SHA256deda59af5a00ab7e3417020a7786d9e59530442258a74492e8447b8169eba7f6
SHA512419eeb76df70c460f15635e2bca62dcdebd3b0a4c081bbdd50af2ae41eaf3f3f4feed2fbf3d70f24970f1791f34252cabaf5e36c88b2bf667135a212aeee1afe
-
Filesize
44KB
MD50e8e81583176d33e5eddc5e4bcbc43b6
SHA172b57ef58421a53b9cb9e0678301d2e3adb9dc01
SHA2566ce51f13f1f17667c0b39de93dde7a0954e9dd27a29d63c40d3c93c4a5a56773
SHA51208dcd98a2dc7da53730aecf5ecd1de70ed2fbe8437363bca2ca61d4121d5eccaf56a1c5f49adc566bd94b5e40a650e5847d943d9f7a9a77ffd1ec94905cfca91
-
Filesize
44KB
MD53f773a6a76107254f85b201773eef3a3
SHA15793c8cb5091bd30daf1fe12f2eade58367248e9
SHA256be22998415b62d0d8985e94fc242b4e718465f877f04b1c4f77e734126328a87
SHA512b1fb70f0224f6aca9eb4ae80092a2cc9c5f27daa17d06a8c3db03fb44231dbde02e5fb49ad13876296ee22e3e629c35d366ef5546777a844dfc209b69d13b63a
-
Filesize
43KB
MD513dbd83241bc3c7ede4c665eb67e054a
SHA1786b1176936f7944d0595f381ceea06b2096462b
SHA256b26d95c2da3efeab8083afb0836104cda3284e12f73bf32a29e1a981311b52d1
SHA5127eba12d7d757bba77eb8187891b331e468ef24597a1b8a08b584ff39db77d33e95fd1838e1d997cc49c346c16a786334a1a4e9c3f5918434c181e852d407d0fc
-
Filesize
43KB
MD511a3ff33e82546e777e8e4db9125e6ee
SHA19b4ac558525355b9c075ba37ca642c4899367160
SHA256c5b58d94be5ed2f5895af622955fd347ec16c59fc3a78f55a06723ec874262f0
SHA5122c8212580132f819a5cb0a640fa42b4ea1e254fab41994f21e5e0e5f686e5d578d5e90e69b4020ef8772dde732c59ee256febdb3679cd1daed4614a3c09ec1a3
-
Filesize
45KB
MD50d438dfa3b76f1de8a24aceb78be800c
SHA1a9260788f15dd3f404d333c36f32fa89e7d3156c
SHA256f8b75cb5390be39b38e1a1fa0a80123e0df05d339314f166dd7afc7a4ac5abe8
SHA5129d9e56ddb2d6ae497bf521f90e94d8bd1c3223a1ae4e2032a2679ac727850bd4fc0557fa49f9d0ccfbe2676209030f999097013aa7ebe5cf1e44cf02cd2ffae9
-
Filesize
44KB
MD54fddb1be54b7e13b73ee2e87a092d7aa
SHA1287461b98d2670fe0bafdab83a2a6d7686b8eb5e
SHA256c807f007bc337f45c4bb2018b8fccfaf70740a8235fd17b98969ace0ff70acb6
SHA51298e35f602aed77d62826706250a9c1ebf08a74426551d4d8c878b0e5d9121dabe0740732135e5e833369b6f139b80bcbdfc080a694caf7ea5be417478f4ef219
-
Filesize
42KB
MD5f4dee9666f35445257226462098243c1
SHA10dc2a7a48929c9aa5b0c65c78b932285e0160f24
SHA25686f5a02e45701ef09e61a6623ee00a59582243aa5d937d91b22c6745130f81dd
SHA5128f62a305af44fa5a3031aa144bb6c0e86b57d92c9aa166ff5e1e4e0b0a93bf1bed26ed42c74fe215ef6fd0bd3827a214ae1ff5e387ce51d6f311ff143d2be6d0
-
Filesize
42KB
MD568369a61a806b90a9d6d7a33566bf7f7
SHA1ee48c5a2b638c0c15fd978e096b305b00d9c8636
SHA2561189be36c9af05b73bc2a6669629f63e93d35bb8c7947f2d4266eebd3f7a06b6
SHA512da41302ae19c8a609a14afc45c5f8838d138c8fc2f15c3065436b30518f8c9907ac468e6d10aab10c95674896eb2007d0176eab65dd7a64d55f9bff4d3cecf55
-
Filesize
43KB
MD5b12605ee56864e9f185d3819c88278b3
SHA1bf92f9c39ecfb78051f43c94574b7985c029076c
SHA2563069760e4224aff954ccf03cb917d6c44a3662bdff6e74a519373aea675b604b
SHA512d445c31e963f512a4ad079a8180192cc69f13f0f503113236b06984285d2fccd9ff5c5a125b941389a5ed505106cd6ea384b1e467e64375f2e65154df8e73a0b
-
Filesize
45KB
MD5f73ffb3561c355dcb4acbc494f77d562
SHA174bb856c0cdaba68a3175979b8a30c76c3fc88c9
SHA256f61835e4ac0f0c1fa78d3e7e1467023f58de4ea136ad7823e24e293cefb5be36
SHA51235993f2a98dc8594ef9b5bd5a3295dd94666b61ccea97409e37b762156ae74f39a919588267defb78ce959cf14cd87a60e885d79fd783708db6b8bfe38298039
-
Filesize
42KB
MD54fb9164fa9c2f41a04fd78492724e4b3
SHA18f68949e9d484de40a7dd9d4ad088e40fc42664d
SHA2564e83918abf80c81e1b1a0208254f4ef0d6f5f0b10dbfb56b1b2ce665516e72d9
SHA512970d3d2c323e716b39e8556cc01720aff20163d11479269c289d75c25da7547898a60a28c806d0a8f61a49cd0a6ad421dc2494ec1cd4bb77f0bd7ed0e3ac5264
-
Filesize
42KB
MD5948f088648139bf4bf2c570f01206911
SHA179a3e5a437ca947a370cbedc69ea5548e256717d
SHA256e4e718075ac8ecacea62350f77f994bc8cbc6b2ae9bc91228d7a0f8d80456e30
SHA512c91b4d6fb7eeb818848880f598e9b3f1ac03715d06f722eba8c4052a32421c1c4b29608b7cc1e54397ebf82eb1c6400fbf377035e466d1e44471fdc1521c498c
-
Filesize
43KB
MD53c90b1a2e41c3d54ca92c6548675a5cf
SHA187731fda16821f00c08a13d62e6bc53c8db4016f
SHA25690d228740e44fae1db65544a44b65ac51280f2a40612c416d34f74ae0c1b1c84
SHA512f19c6184876ecc98fe985fa77f64ed3c3846eedd4f5ff5fe26995eb85e505c04b386f857c9b173ca5a1599546455bd879cfbf1b6e918e3988485e55cf9394339
-
Filesize
44KB
MD5a13212077364d2fe966f668146992f3e
SHA1561dc6e47cfb0dbac3ba28fedf11a3e72ddc17fc
SHA256a3d50bb248b4eebc4264a3d4dd3bbbd5e2d7cdd394231c4e38bbf4adf70da944
SHA512fb66660b0c0250cc7de6d944f26c4478c62d0948cdfa5df93df59c6326a32f2622585d483c047c3229a587090043dc327584653a41cbcfb1c5f576a7c5df8ecb
-
Filesize
44KB
MD566abbdf574c925a69b8b291e6a8d024e
SHA128581f7d0afd304a9b7616380620257dfbfd62de
SHA256d47a9a2878bc1fc09daf2264391c40bf4b80fd2ece1a89f0aeed68e813b4ffdd
SHA512b75d506a6e241059e03adba395aada7085f0e7212f58edca1ed0478786183fe271a77afae1a707e5072ae39e325deb83fe1c2032662e3c84e6006918dae7255e
-
Filesize
44KB
MD5f2fe9f0cf46f930ca212f9218fe3e757
SHA1f4eb6c5dd9eb43f1100388c4b5a1bcada8877147
SHA256c90851e349f61f72ca3d5e3519e87d7283a0c13b42067d7393439a379fd846c7
SHA512dfeef9d45bfdf8058be300c376242f6be516506bc806454c77127ea315c5e01ff6e6a62b41077212b5983ed7054391e78ee46e6a401433b777d00f5c8e1656f7
-
Filesize
43KB
MD54f28c49284a89515017e1886c25761c5
SHA17df4c3178329e7e4fd50c31d68e2a4b846d42eed
SHA256aeaaca2935f5cb91cf4e88a8a061dc0ebc6f2327a35601bb581fd484d42ed373
SHA51285cd5b27e3e77e4714be352c03dd83dabfe11b7f784a49c5765b86618864d01260e8f888190d6a3947dcb13d36a55c05cfd85888c9a01f4405b357a5054c26a7
-
Filesize
43KB
MD57677bbbfeca4d0425cb9197f6df2e523
SHA18ea2a716f8b6ce1ae26e8915b35ff7ba574dd51b
SHA256d931dae0a6e0357e4c7d4e510dd01464085f87e79787bd03fcd2fcf3264e89b3
SHA512d20cc256c254974a16756268f9fa51788408cef5d454b04570a0e92a2464302a0e6e7271d68a1e7d1e8f44cbc24b0d71ede0ff3d03b775df553f71d4ef280bd8
-
Filesize
43KB
MD59ad57f770589e504d790051e05d2ff9b
SHA151eddf9201a447f210e711a62ad1089db59546ae
SHA256eecc2defcebc562832b7121558f736d516cdcb5559f4facf6edce9ffe6ad6fea
SHA512dd867fa3beadf15422a980c887d89f1548cdf083842706842c64f3aaf90142fcc7524339555c6f5c215520acc5c005cc24522b14bbeed2882e1e941558be4541
-
Filesize
42KB
MD51764ddf213cbca666d02618ef184c380
SHA191e238823a2b659bd1b528db213b866a3eafd10f
SHA2562ee0ae70951439013155e7dfb859c34b7f4d2eaca1de2c895588890e9c873cb6
SHA51256ed6a21a6e7e2212c5a5a90b66d6f57cb60b6c6a2c1d64b161484137cddae881990b5938ba923c4dbcc8a90a9eb8887487cac2f528160f88c2bcf0a2c2c5981
-
Filesize
42KB
MD50cb142072770549e4797721875fbe5b4
SHA106531370baa4900d7ae16de667bd1b028835f06a
SHA256f0763df368166f7f974f063a5f4941137741c6b01317a1258f4b9bdba0891975
SHA5124ae3c674ccc4227885c67dc79d16c0f897379afeed9f939352dded8c374fae3e1ac54d0bea45806b520494deaa68c87252c00079f0addf9a924f56559eb98b38
-
Filesize
44KB
MD582d463a796e4de2e858a55ddd73e5d70
SHA1a8d96d6dba2455f4bbd337e5dd6def8836b6bb3d
SHA256f1c496e7fc99e160c2e5b6041ab54d8d03b07922483e4ce65211f89d9b484b13
SHA51207e8c893a586345757a53ee971737e8080c7d9481e1920d4b1e963ea517330bc937f659b7ae50e86ed4fa9f82e1ebfadddba161442d550f5448841520e5e1741
-
Filesize
40KB
MD556990b8123257456be6bef93f11629d7
SHA1be5dc1665417be2e9c1b9338e873693986e88316
SHA25641c4d754faaaaac2a596a6f8551206c0d2349d4123f1a2c572829ab416eb1cb9
SHA51213da9472ef6850dcc3895358b7fc0476d37936bdb1192b5ee87ba5c71e8f1e0c5630221b82b1aed9510eb9cb5a6805f05ce4b856dcd513a87fc5ee118079b8f9
-
Filesize
39KB
MD52576564d832f53cb963e364b437805c8
SHA143df9e41957928268e90d78142f16817216cb9d4
SHA256c564ed485637be8169fba4624ec44122e4e11efa82c534ed79de4e47f34fb103
SHA5124811871204e45e6980111891808beda8569c55dfe4db0fb6beced5b43d53b595ff65f1305c5ea95ddfa4d35a857e33c0677b405f85d1ae5822bee2fc64a1cd59
-
Filesize
44KB
MD5febaa46423d916b177e134bc13805067
SHA1075cf0280abb023bc4f02567dd93f2b4698adc8d
SHA256724ddd7acd3e2b8d9f2f10cef39b874be82d3aeba343e09150d666bdf2c0575e
SHA5123d907c58bb40147f15cecf17ff12096129ad6aa555b9d6d8ed456ffd043224d0ec665c24afc8bcbfe0e4fda5f8569efb5e9b096eaf3796dc010f0e4fd71359ca
-
Filesize
39KB
MD52f029edb9f4a5075d42df4ce554f5dbc
SHA1c8ef2ee568bf9497f2354f26508afbc0be42b8db
SHA256c33f8fadc27d37a4b1dc070175ad9a9b32789cbca82666fd3a15b5731bc97110
SHA512d43dfb4d6fbc2e5d1a670b73bf9c59bf1800d8bc98e2eb28a92a29b639cb1d677d6065f1b3cc69e9f3345abcba2c74c069682692d63e51f1eb8a675b1d5f1c84
-
Filesize
42KB
MD56fd161a970cda09da67e5297d17f3660
SHA18e15bde3c81625d77f2689601425bcec39c3bde8
SHA2562a96da526cae223d6ed54cea62cdbba2534f61c343bbfc14788b0830c87665b0
SHA5126c5a50426a203d210c0fa16fb8327f56a4196f2e68ceee67291fad38ebb56b37b51c03f4f9dae406d4639f6cd2dfcfa829a1630790c9db0724b387407b4d219b
-
Filesize
43KB
MD5da7bf9d5651b30c14ab6f335e1611d7d
SHA17b77a4add740b256dfe38f987d8ec82c775c16b5
SHA2560535ce5d9377d6b62d58bd85ade29a4e10e5814c6e55fc417a6878d30c93175b
SHA512a33179103efff1f2e71259caa3ef29766ff3d80cde00b316b8a6d9d5e5fa319c74573f0df8c2546815d5add6d27df135d9d9936275b475094c87b46b2f18ff42
-
Filesize
46KB
MD5a49c5ae2fe638e6d3cdb92ef8ba3865d
SHA151b78ed31f42544af7ac161ffaaf651b178cfd4c
SHA2569206dd9b40e49f3746ed15d570563ad93a35815653c6674c37dec62ec88f53fe
SHA5125b8f68a82b62e0d89351fa041a85bdd419242b0ec3f8c095bd833989406e00308b89023e2c409ccbaaee8403a0b400abfc7efc06b12a6d64fed09f3ecaf4e8e6
-
Filesize
44KB
MD5874f93e12f4bfb7f7416c0a362af7b3c
SHA116b4991bbe2f5afcce799ec5bbe59fd720645b0d
SHA256703c495b6bb7d794b56675e5face7218d41ae6de9428a9e8613bf2375acab433
SHA5123cb9120523b892f6bb92df433ab59d679998682bed496de0e9fe376b19eeba3d825eb88d0f6739c95309f848688eca70cb0f6d75e29d6f77dbf1285e9c793d46
-
Filesize
42KB
MD5ccc9d45bbb2d906b9e23350a5b2e68ba
SHA13775f28224dbe117a35ae0306ebf45fce4364876
SHA2568767539b0d74c7b27f6dc5a61e39064688c29cd736e6d49fa5d3719f9d966168
SHA512d78831d25927a77e4d75b870a47c4cbd46f0fb50d7754b71e4544fd2365f7b9ae27b956bdcce4380d421a217ebd0b5aa95502fe434c610c51f5535d2da6cbaa7
-
Filesize
44KB
MD544463b62c55fd50d4d0accc127992f0e
SHA182e0e57c7cbfb1ec726e5bd10ef6d7bd84f4e828
SHA2563058d34b1de742954bbd87cd9f7f608cc8feb3c2356338ebcbecc8b7aa3a6b7a
SHA5122226c8e3eb2d97f7e4e43e6ab65edf3700bddf2edacba5cebb041d09db8daa3e03cf48b847120288d1ae5ce3422b274bca900e4c96aaf1d084e0e04b2e8452a0
-
Filesize
43KB
MD55ce4fe1faadb693e516b5cbfbcf4646f
SHA1e0f901d67c0d2746680b1c224b582746ce110bd2
SHA2566a50cd05a9aafe6aa12815c4e48da4351b85a6e8aea248052f6031c53e6987ed
SHA5126e116fdc9dda057e3bf7408e819364abe92c373f80117e6a26ca6b45eb4c2644ba9866d4d3a78e614d752c326077ffb0d06ec7dd6bcc896b22a5cf59ef627d04
-
Filesize
43KB
MD50aeec637b9400c189e54f62462991580
SHA1e68830c9efeb6d43f3d52d5bc1e8abe795b98e17
SHA256922372e4ce849bf51c2e0a7ff6cea7543ca593bcc5d3bbf7df456cfaba098011
SHA512b98cde4baf06cfad55ea7a17e6cd564853c0fea158fdce4283d877465bc4d9d7dc0f8622b8c3feda6a1f23569b9db627717a6e9d4f1f60a60aebe016a301a6ef
-
Filesize
43KB
MD5212dbf84e4ae54900bc86b7fb958a917
SHA18073de946beb19571bb09bb62689e9737e03df71
SHA2567c46d46cfb269909dbd417ec4876d8c3875bb9d868eac12dcdcb1a018c8f308b
SHA512acc5c2ffe2d070c5b7e2d90d79b277b1db346bbaddc7d2babf7676cc4eb3e7a32100d018b297a072b682d97bcdf33e815303685917ec35737bdda37c8ba35e81
-
Filesize
43KB
MD51838ab6a7f9fdf08132f2be1dbcf6983
SHA16fbdba495da529965f8e80d84b2705943504ea40
SHA2560273eab419be3dfaa3f4b84e8b4d3a1926626a3381aa6c0bf641a915c31bc1f3
SHA5125be936905045abd28dfcf73597a3c1e542da0a3593e63a62cf3e96d59dba937197bc7c320adc595e590b85b754d5711304ae56f6334f8ab58889c5e3cb517d7a
-
Filesize
43KB
MD5844350d37a57f3c81a5a578c88a12df8
SHA1a474371accee08c13413e37b5786d6a44bb675fd
SHA256b870f9ebd3a133ea8633dea5b4bb8cff5a1640f4bddd425d0464b9d2d181608c
SHA5121bfa62d51612870a41c331e0d98a6ff9f67b49d6ae6e3171b02553209d8af9e4765a15c557b9e802cc2400fdd5e335e64f672387dfde554357924c34791e03f6
-
Filesize
42KB
MD54cad72807016afc3eb5a7e428d6297fa
SHA192a23e82a2f6de6ce3fc5a51a3fc61ed84567fee
SHA256b19a8178b4b77454ca6c3e428ec3f2086ebad0b65def1961b3178ca41c518b2c
SHA512a18a0ca8b3b94b45b83ce97a42f3a7aafd0d290e56d409e844e674a76514c66803a353e76f3c9e72ffe99be201d765beb6d3330c07d509a11ce9d50c4929e572
-
Filesize
43KB
MD5596d871d3de703dd1fd04505b21dde74
SHA19850f4df883b1bc74ccf57dbeb2024972020a824
SHA256b7c4fa93b241dbbe9bb339a2352061fb5b011af107a8fc5fbdf93132ee8b74b2
SHA5128389b417ec278719e5c07138fcf69f3110b0729d4953b7675e50dfda49ac95d315ac27c54eb3f6cae83c86e9545b086b280a1adb58adf477dbedebb3a80e48ba
-
Filesize
43KB
MD55a799190750d959e02ad6c31c411ad49
SHA1dee89f2432c6964338549773d2f7681df3d28efe
SHA256bf1f35aefb7222ed6cf2f758deaf36a373a0cc6426b1425e4d5beabf921f86ef
SHA5126937a38331f785533fdb7210c4f946fe6fe71b9f694cb0a9d95c8febca56fef7f37642a2ccf1b815d00f0cd56eccbe1153884db871c194dee79004ab4d3b7f09
-
Filesize
43KB
MD54cfc2d54a57d7eb74e362115aa9898ba
SHA14a9523326f14c29127febcb081bbb420395bf234
SHA256b886a3aa87afdfbc0e4044fc86d80747df4c4ad823d6f20e2a0dc69b2ade58e5
SHA512d8a676fe742c716010c775789ec7d5bddcb9831a8dbebe5a78a7a0472ffa7a9a6e33f9a72cd7e39e7395ce9006e65edc2006036a6c5f45aa1ef6b5719ccdceac
-
Filesize
43KB
MD5137fecbc804b82c7066af01e86dd9118
SHA1600be1f8c8da024e450350af5ba15df15423f24d
SHA256d0fb0bbd1aba645376a28ff5a8ab64e1e4b37045219893227108826097e7a079
SHA51298cb6a0a16b88817951190b2da13cf1e2a9d6f9c79606fe39d7a6d8096651b2ececcc37fd65f59b41273212d39114268254544e72ca53141ef14c4d3dbf58fe9
-
Filesize
44KB
MD5b3a36e5db2d295bfd93988e6d7bb3597
SHA19d3dbae67553df4987c097fd52dc1b6f9e683f81
SHA2564d4738a611c28e534ef1ccfcc4caab988138a9b41405ab7d8c0f9f8d738f9e86
SHA5129f1a6afd85b4070908203d1e77b00338f86cd10f0958784e77f23a10e2cc865c4e3131590f8b50fd7870aadf9d736638cbd1d1fb4707f7926481c862fa7c9cbd
-
Filesize
45KB
MD5ea4184c04128028a43c1fb93e0e57993
SHA14debdeca508a27634ef1dade2d756629e40364f0
SHA2564a44a6198ecc2f86f83c7a30323e605d9c4ec1f06fbd7881a86ba229a8627a81
SHA5126c28a4c5b8dd61ae675db23ad6c25562f83cbb16b7a9c1000669fbcb6c4b1a4ee76718fbc3a641b6ecd2c861feaa86c6494387ff2595e60aa628860c6f7771c7
-
Filesize
44KB
MD562736b451c8fb14c927190bd7d64ccc3
SHA147d5296edd731ee4eb6c54918856440b52c163bb
SHA256bc542329d0f85f0c2712bc0df5e361126d85a15fb46b6ce65b26ec9fb663c815
SHA512247a2090bbb1bd7341d4213eb0bd2bbdac1ad9182acdd21c96e2fa74f398688ab125313251e27633295ecb9f96e13b29c80325578a22c102111c67d0517a6e02
-
Filesize
42KB
MD59685e2fc0d400e4b826105784a18d87b
SHA18cc1757015edfaf93be41ae6c2ca26dcfe0963ea
SHA2562bd40d5b193fdb03fb76a7e720bf9684c776a90f81079872ef63c88e55e03651
SHA512a561858be3281fd06025edc4467a047f2764c6188dbfc98037efd0e072b29a3c91e1a7ed72acaa3037a73f78d77ee3b69b2935eb5a4ca54e7619f3080d96ad34
-
Filesize
43KB
MD5d3b8bf5b72462312361be5aa1d3540d9
SHA195c00e861ea2b7b1a7d572f88f4ca3287ac2a048
SHA2566a1ae2a4ee8a17d8db7637d64748d180d36ac60282917efb04dec7a75b02db01
SHA51245b08697b4748eea8a76561acaac20e67bd948b2ecdd23ec37360fbf11bc614aa9cf42a5276124f797277454db7210f9c792a27c426a2fecf5786ced7b083066
-
Filesize
43KB
MD51387b3a5a0ec86977cc0aa0d6b41b479
SHA1a6fbb3d4e77f8f2a0568c0bedfa21f60352373d2
SHA256da345e0499507d053616fd0c81429b1bd16f169d5388815cbedc7d3d1d59127e
SHA512ded0ad1c0d8fb6351b97187937f69f266359731be13cf8ebd1573afb1f4dd17a5cd3872c98dbec138ba1b5cb59db6e0abed2214a58e17fbad49967b5b671140a
-
Filesize
42KB
MD52021dee7da5e5e21ce9152ff201b7ba1
SHA1956849722b7ae71b9d5c4619c4c321f719d7a9a9
SHA256c5f4e4dc5f53eb5f2778c915a39f01c3c9c1b36ec14625640aaefe679875cfc8
SHA512dde96b22204d874ca9fb6fb3b92f25b8a896d764ed0acc3a1fc34dd2772048cdb9787d2e9a7a2e89373a823d4d6b3503aebb1abfff0f5448299539e6c39cf965
-
Filesize
42KB
MD5489e772a4b091d3b7a9547bd4046f816
SHA1899fa35047b832b2cad1ad0afaddbe97fb590329
SHA25667e6fda6de8b48cb789efc5864fe2cdca121a654dbd293b09f29cbef46697a68
SHA512f1a3f135b006c85cc9e6b16edbb7fa7306b67d1531fc4c9d9a53dd4f1f778fba5c3eee93b772c8b6ec9c6d894db8ff1514791f2cf0f8e43a30d13b0db28357c6
-
Filesize
37KB
MD579fd9260f03f657bbfc7d7dad6593256
SHA195d75b2c5de5b05074abd6709cfffebee40aa45e
SHA2561dc5528a4987dc3053f1f358482531c2d80d81e74430268fd5a039f7ab31271f
SHA5121c3996eefa2a6ab3390218c8efbafbf9d10f36537ddc0d40c573f7c10ca277e8d2f9596a255d39ef03d45cb26d27ae289d7cea9df193a4a284a8ffc6f666cfd1
-
C:\Program Files (x86)\BraveSoftware\Update\Download\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\124.1.65.114\brave_installer-x64.exe
Filesize118.7MB
MD570aa10a08a2157b4413de5ee08e7a6dc
SHA10c63b585ef5d2bb664cfa92d3bf35275e5c9143d
SHA2567625d0e3a61cabedb3b29dd4a46a1fdeee4def2899e666c744279f239f611e87
SHA51239af5309c37994148acba456159b2d0947735a530a953aefb8d87b5116fa9a3ee9a9fd86a3956875b86ac33c020f160998d41f10e6391a66ef5745580f82048d
-
Filesize
3.7MB
MD553664205562d72fca7906ca45b0f1e9e
SHA1813e4a1c7fa5f86ceb008b151854d0b536f6fecd
SHA256185f6d557c2da1a58305228f24c2f6c5227f20ec6811006255b63ad9beeeacc7
SHA512c7718e6b938a8b4d5851cd3e65d263e0530f7d68bf6f312aa3d96ddc8a31ed9b7cec3e0b9fda1e6988e382acc1b272faa982e0d3f7c6223b0c8f1acbf37b2b17
-
Filesize
2KB
MD50ace6d6b40c10a51f4809e29dd11c033
SHA1339da876532c22f142991c5745ed3db1923d5d2f
SHA256f19ad712c5fa6a1d4503c7794c094e4b76dc750815653744a1f8171bef7304c4
SHA5129ab4ed6adf947c0fdcb89f998d97f5030bee864db3d65982facaebfd5fdc77834fdd07b6553ad675fafb7b705ff8134fc54a0674503da975b32bc3a99f49ee43
-
Filesize
520B
MD5d7bdecbddac6262e516e22a4d6f24f0b
SHA11a633ee43641fa78fbe959d13fa18654fd4a90be
SHA256db3be7c6d81b2387c39b32d15c096173022cccee1015571dd3e09f2a69b508a9
SHA5121e72db18de776fe264db3052ce9a842c9766a720a9119fc6605f795c36d4c7bf8f77680c5564f36e591368ccd354104a7412f267c4157f04c4926bce51aeeaa1
-
Filesize
40B
MD58320f391091f2da0e10a33c39ef630f0
SHA1b8c4240965d2977c59d618edb317447485b20001
SHA2569156c6ea570e34394973594e0c9a898ff71f8bd47bdeed647db7571a8013301f
SHA512270b668c6cea12dfb03182fe8a354d4b7202b466b8f22cb3f12211d7e8816a3a65926ea68ce2191fa041a819fa2ba43e1439e9d8f43eea0c5d635e1d68e513f4
-
Filesize
95B
MD54e5969d50e2be3f460aab26c752854d5
SHA19f631f8f7bd95196b4711b72ff7cfc9addc5cabb
SHA256def69a7d92ec2b99c21b211c63ded0806079e620a9d36338c0898405caf106d0
SHA5129a31cea8bd9ee7cfee9fcb8f76d34023a5e7690e9a7eff11d979db9d0afd55139644392139bac09084af149c0f2e6d168ff40afa4dde0bec5f5aa5c92d6f4c64
-
Filesize
703B
MD58961fdd3db036dd43002659a4e4a7365
SHA17b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
-
Filesize
687B
MD50807cf29fc4c5d7d87c1689eb2e0baaa
SHA1d0914fb069469d47a36d339ca70164253fccf022
SHA256f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA5125324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
-
Filesize
141KB
MD5677edd1a17d50f0bd11783f58725d0e7
SHA198fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
-
Filesize
82B
MD52617c38bed67a4190fc499142b6f2867
SHA1a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA256d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
SHA512b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
-
Filesize
591B
MD586ff5f5216890e58cde9388e50935e8d
SHA11aab33c8896d7060f27a7a2ade2a396c822793ef
SHA256cb46fc8c331f9cd18a7d2a02f3cd345756a877eabfbc54069853bf4a67e142ea
SHA5129e7b9c001999bf08041cd176484030f13064b140547a98df6dbcf64600e0a3d1ba55afcf2ad8cee792d2ad2b04ce7029f5fdf673526b882529f237a1bca31cf1
-
Filesize
76B
MD5278a5496a66161d545bd355a4d1372ea
SHA19d8bc6bff7e83f6f656310037dd5391488bf7fea
SHA256634b872820f580363861531ee1ef54658920d32174c148ed47ba5cda536f3852
SHA5122ae9f9de1f35f66db369f5220c9f4deff80e4584b3aa4803a6f4ef66f31b2c8fca786669ff8ee33c89d32130ccc4aa51f0c37a4696bbca43b651ddea553af788
-
Filesize
72B
MD50e2fd66073bccc63c9a21ddd2424e9ca
SHA107c9dc78f86ec8a067d25d2c1cce815ddad4bbe3
SHA256fe6725bbce3175865aa38ca4c851bda5ad0ff096911cca68c02f20f7a8d73af6
SHA5125e6092aa4c70b8baa4400f6183fce89797037ca9e516432017b30d3adde5e0c2cb969ba903eb5e80aae277fa9e35c18c47f9312ddc56b11a9350b3a5fd0c3094
-
Filesize
557B
MD582796db6f474288aa848c7cbb6976cc5
SHA1ceb6b817387d1a6b87f729858c4a36b01c86fbd0
SHA25676a01edc65870170016a51bbee6d32d14a82ae2272e7ecbcccd73fe426da6d4a
SHA512ae831e66c04dbb0036e3d179467680511caf0bd723e66a15e225244e116a17b5c4bdc4e52caa8b2a20f9cbfc7604c7c847e64f14beb741a112df88c0d22b699a
-
Filesize
546B
MD5b334d1d7b6bb45db2ecbf76d1c0bcb56
SHA197e6c1f0032b23a70316fb8bf49a9400cdc59070
SHA2563f408f5453e3dcb8b9ff58a1270af589f3d295516a8ad0543af8b62cb941c072
SHA512b8ec2eae4dc3e0768d087916dc0dcf79b9614d7d4a6773e47f7c46dadd6769243b76348ed108ffd0b510ffa6fa1f9bd656edc04766c4d8ee0fe7907b4d839d5d
-
Filesize
577B
MD5d9fee44a580e8ed766c13282ee75bf34
SHA1c6cc2b55faf9ce73ac935f16a43ff0997ca1b122
SHA25608c66b1421b5180b91de2dcf8e72635db6919189aa5d9efa8fbde5a6d039cbf6
SHA5120975274fbc0ce4baae24358052047997136e0061fc3e55ba927216e2accb27aa73c4425bf8385c2541c5c3ecd20d3d3128592a7f3ff5eaf0eaed22d5f6f6b16a
-
Filesize
555B
MD532c91bf9b8f95b4b2330a1b7d8b6c359
SHA132589e12e041bbc42fb3a66c489b39ef380fc1fd
SHA256cf65a918306fa7763350fd8464fd2f3a049468424b6b89b15b15d824f0796df1
SHA5122f6582a63caf1d18298b6ff9ac65172609c3444d676c5d1988d329e2dfcca5293b6cf2838dd9a6eaa655cbff403989f47fc4811b41e9a2b4c10e7478b92f384a
-
Filesize
76B
MD54aaa0ed8099ecc1da778a9bc39393808
SHA10e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA25620b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879
-
Filesize
108B
MD541661ffa4955abac80d236b90a7048f5
SHA1a09baf6ab7ddd8eb5e9470ae9bb7b9c40fa5b2b3
SHA256f5c15e50215265ab0c3671dcb9bb832a7edf5529b15d6cb76b7b2eb1fc4dbf9c
SHA5121be8f8b7e4b5be8d4d802fcc5b9824430078694660c4829dc30b62805aa34230467b652c891488816d3c94be61017b6be1571b41d4ec856a20541b660637874c
-
Filesize
108B
MD554aa1a6b8992b26ce56ec18ac218c5fb
SHA1ffd2e66935d9ad620b1d2dc757184c038ac93405
SHA256c38a72420531e9be36de947f38655378376f1fe872ca944f2d83dadc205adc1f
SHA51206106cfefcbf015101f49d9e018f61a78892d37a976595008b5daea4539a5c4ed5a5318ec101f707cd65656d08a4061eec361995d62b1d145beb77090bc3c7ae
-
Filesize
562B
MD5f4d430361aa560ff657d8ef03584a96f
SHA1749c3beebe1a53607182d38759eaab1e3e062cd5
SHA256794a03016e8c552e8d9fa215ef7bfef700691ece00bf7cfec94c4fe67d6feeb6
SHA51266bee5fc0bf47f3d476318415be55c370c4c2b07b640c62157be664ca68020e1153fb3f6c068d1410beac9b4f58841d1ac4aaeb2df8f8972030710e88d05ce08
-
Filesize
584B
MD5a08d08f48dd59ec8d857ff4206c03424
SHA1c69c6f3f9bdf3acdf28728d254b95ef129661562
SHA25680f710adaa80907e10a622367f2c4c33e8082e206d300c9177134bbdbeb9fbd5
SHA512f6fe27ad6adfaf94a20656ccc254c4d86c8ecd2bfadb9372d0a5d01c60194e396784765c51cc5541c81672eb8d6ba7fd2fc48eec1282674f4f9ba16ed30ea6bc
-
Filesize
111B
MD5225c08f039684dfb54aac162dd9d5b9e
SHA1426bd1044bfcd5e1a10b58ed1f217a6b33b2e9c3
SHA25698306b21c0aaf9546301f4ab7fed785dc369c67e2fd2ad4d62fc63f072a51e3c
SHA512d6ff6cea0c08d13a642996a110432792048d21160c04543fbcacc60abcde362318e13a42fcd7520bc7673e98544a68a3eb6cc4338f4f4d8e90e0dfd5c40b77b7
-
Filesize
72B
MD5e663602bc2d948a3410ee31b60f6d3c2
SHA113b4408865c32bb751c89de3e104694746d93f90
SHA256b2d1d0ca624f457aa6701486d691fb1b07e0ceb68ce8a4dcda34caa7b36602fc
SHA512aa17a4af51dc7e73f60c5f1a41bfea0dd310285e30f59612c7ef688c46327100c0ae6d04289952622e18155cd2c00692909e542baf8eaacf2dc9919114209c6f
-
Filesize
595B
MD5204952ff7f7a2884639b9d23020bde79
SHA1f24883e74f5e8043b241b62aeff2f5576a605188
SHA2565da9cc3ca609ac3a4a9a410d71f4aa2629001c621292fe8e5b7de14a80ce64b1
SHA5121ad5afd6598f58c962f5c3e8ac16d6a737224d1069263d53d6788227c52f5968c90c627eb153e7855594c5c959bf318031aed01a0858cce50a1d497c2b90f9d0
-
Filesize
564B
MD5428c584d3febadf1bb82f0c78ef20029
SHA164d91423d7b725a85d52e97ac2cc47f916fd6dd2
SHA256de637fc105bab2fab6807041853cc6c89b9853ad2c6d4a97deddb85d89f96458
SHA512a798ff70d1935c3279845683a8a030eac2ef14400223ef9c9795596bf9b1090ab1200687e8afb701ffff5e1cdc2bdaad582affd240ea577fcea2ac386c249bf1
-
Filesize
533B
MD5297a9945e57c8dbb0a8a37686ae8f9a3
SHA1326eec5df2b7afaa6f8c9e023c68c149fb1e680e
SHA2566fbc033719a533a6863ceb742335aa2de7b6bb3b8c9cab55579ad26134e20673
SHA512269a7dcd03e71dd3e219e54d00145d5585b246ad8e3092af4a75900dce2f0ce10ca682192f4127a634877e511e86109bc68f8b44b6ef1dc62fe1fcf469bdb323
-
Filesize
29KB
MD5fba9dcc4a95875c49e1fb5cc98f52397
SHA1c7d5a6633c80ca08ffe82373f5b499bb797615a9
SHA256df793eaaa452aa59ad6d606ef35ea5e578963df4f14c3e529405ca0efde3d3b8
SHA512805c7c485ed8d38e7395164c8bd33a3ceb53beeb5c144503a54ca12b8c7297d59926513ab43dd46453d6d78fce9bd5afd03599500c933155be7f88476a746a3c
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\8698\crl-set
Filesize21KB
MD52e850d0bf3c586482845728699480c2e
SHA11403348eb716bce9811c18e4546a210548f53645
SHA256d6bd294c0c92524e3ac966830e688bcda3276e33dbd4fe9e0a15bf4e1cec1d14
SHA512e5689331d05c25c9c8a8c80dd5b85f13c4c856454158fffa7ad07dffe204f24eb4dca4c52f45c8142933b2f7e544519d0eb7eb70c460680dd09f3f0aa8ba3a6b
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2023.11.29.1201\Preload Data
Filesize12KB
MD5aa3ef996bce08a9c34fe513d078d1ee3
SHA121688d164d442d37fd5471e13b41b1d216f88d37
SHA25609d2155be71880356a993fabacc2ce01f4fbab99497ec157b53a094b8927c039
SHA512285c85ca55fa54a1a12c47909b8575e8388570a76f238dc75aedece12e58dc0a3fe15edeffc41af14bb7944a0682de76f0ee0d6502d15973f8d9b1c5b2f828bd
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize48B
MD5005970c8e4080f9f53a68e38a3d42c1b
SHA14baee978742b5280febd584c80bf34e4add24540
SHA256808561cb536403af2944e775c18609a06a7a6f837252e859e7f2a0f08e163b3a
SHA512292fa4bc4dd5c91fd31182218afca84976a05e688b2bbe7dc306ecfa299bb6e0be98663bc206f0770cc003c9e0e50920509c9f4cfed7805c215411109342cb7b
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize96B
MD5f7359b7a8b5e100a0c588ca4a1e7dd8e
SHA1066bd31bbdfaf48e7fc6b71f65033e1e94e80805
SHA256726ffffb54d3e7ea3559608721a3c835a46b9a6b49209dc820ecf82e438eb985
SHA5121cf5f734c51dc41c96785d7c4ce3a3c6f5336c2c8bcacd96ab66a0f895abeaded5b1e8aa067f6169c74b7c04389415a11a4188dd825961450cd3223dc66d9b03
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize1KB
MD507130a37030c3dde44af8b24263dac0d
SHA1d89a499e9243ea8c3824242a7b853b5013325095
SHA256d568f55c143625996b9aa362ab227a20d84336a20cf1695c89c09f4e1f2b4ece
SHA512bace2e51d5d6eb47c3508ba38722cc318539e22ed216b7897c3b60a9ae05b4dff1305bda5308953bc2d893166a4e185dd674565bb369870539ded0c92fd623c1
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Local Storage\leveldb\MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
Filesize1KB
MD53ca8a69ebd70c711806ca16ffc47d74c
SHA1b0f58ff07af00539dedb6bfdd692e0eefd0f538b
SHA2569c17bfe6959be5eb6d01fc70f26edf746ad6dd34836d10bba35db19006b6bbaa
SHA5123dad2fc19a099f41d73ba611e9cc5408788d81e7657aaac9aa35c8829c29018f243132633b5f032e09054b83b13c003fba308fef02b133d134e47ae7fd4b46ff
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State~RFe596f1b.TMP
Filesize59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
Filesize2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
14KB
MD553587597217685356a9a1bf878263fb0
SHA166b4c7c9f45485c8fa712dee9d5dc4e90d943331
SHA2565d403a3650a954674076f08b4f914400de74da410e59dcc3e7a8b6bb4beee91d
SHA512a6125c4c6999738fcf4053bab804325246390af029bfb9fe54bc1398f0defbaed07bb462973a97f1cdedf8a09f9e62cc52a993f2fe405a5f9911a2fcc3581096
-
Filesize
14KB
MD52504f757759b74ae1127bda9b2d203e8
SHA1d5f4f5fe70b4495262a358000aff8b175df694c1
SHA256c2f1332879d2e041bc3b0cfd0cc4621ae100f988c44b710519cd7d1c2e26dc76
SHA512f99bfc39824a381513f46b8bfa60fe6c689a74d50f386511ab71f8831b05b78e4735d12572a0e67e043c18966762df38b57b9c99d52963468e71247a9e95eff5
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences~RFe5863c6.TMP
Filesize1KB
MD591180c594ce4840991cbc276c96cba85
SHA15f2361dff10f509480304ae93dfe0ac0a9684cc9
SHA2562c4c100993f045ee539c75ba2634531e8227cb598bc7342554d3df85159d6ec4
SHA512996b107ddf307499b2fc36edd6fe027dd47cfece1dba7e330858d740bcb9e89e2570f1f859e99c894f27bacc79adaa28b558b46f4bfbbdede2da73e70f1fa6ce
-
Filesize
10KB
MD5e261a3924ab02ff3e98a5b2739a791b9
SHA1258e63eb6f844435cc8353a35ce0cb5e7dc18026
SHA256c00ef0463f877a2e791bbb5e0062e24bc24a06732ebb9306ae13fa0ea89a9437
SHA512fe8b59e6b147a81c0f2f304fd0ff0daa172c1f3f10419dcd9be60794fad993956c6ad6cd2297b3f0181475e1ecd28f03f65395e4afab5949b745b32aaed65716
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Secure Preferences~RFe589016.TMP
Filesize8KB
MD59fe2aca67efdcfab0eda67f07778b5a5
SHA1bcf3ff95933e874523ea298e72c30262601182a9
SHA2567265baaa6b13ea828fc18f44d006903e7382677ff8fd68690ae1cd815e493400
SHA512dc11dceab671ff13dc1c965ea5a5d0e27deb36a1e093a28c00416d07d4b40e432fddfb176a3ae464ac385011af6e035e548ddbe1335c77caa281a03d20360cd3
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Site Characteristics Database\CURRENT
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\a2e6668d-ba3d-4f1f-8c44-d96927f0a315.tmp
Filesize165KB
MD5bc1359a54dcd9989c0e299ff35bd2683
SHA1952dda3536d912217f9964b0a9653fdd622815a1
SHA2563bdd0f91e0c498bb0c968b18917a48532c3958cf80711a4f6ae1506de1b6f072
SHA5124398af7fd94b0ebd620756d62eb30bcb3ea5b1fc5808c3df5628d40627d9739d9dafa8bac9f52207d1230a6783847b6d37b8e9601173342776ce319d4f3ee8db
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\63\download_file_types.pb
Filesize7KB
MD5b8eaf02ebf097cbe05ce4eb62629205d
SHA1dd0277e97a272535c703ed88aa908860f728749b
SHA25605137351a83270e31b0c657fb70df9fca7c9e1fbcaabc1ac07bd57f03ffdf179
SHA5127863a5c9c154e8ee90ca88ba928faf06d7d2a9b7ead64c6eadef9c74b2f698f93238e1e070fca21c621e277424bc0bf3cc26f0573c07ebd76fe79060466cecca
-
Filesize
44KB
MD5b75ee7af37e7a78aed840ddd470b4a26
SHA1a314e0dad9915f22343c059e85c2e8012a047f86
SHA25667c98095ad78938c79aa0bb65d0c9811dcd2003a1065eec262451b56ef2dbb2b
SHA5121542f37faf7186deeeaecb40737f8e553701f6c93682bb2f2ff317d75c11d9142103f94e62d85ba74479a9f7a05bce360713204c41fc1c1c0e26b74a29d08f82
-
Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
Filesize
4.0MB
MD5d097d4e700e3742c72a3a7b571adee18
SHA1639007e1dee359406138220a24b15e08eeef701b
SHA25602b65c4e83d1f0c0f238c838050de753386f52a425d42cab1fa6feceb76577cd
SHA5122c0033ab9a0e58db9134042ab57e332dcceb6114929b649f8b4279e337e22ec5f90859713b13bcdc0294d3f6fe97b2aabf10ebf3233b0b6442aa0f64ecf259ff
-
Filesize
264KB
MD5d0d388f3865d0523e451d6ba0be34cc4
SHA18571c6a52aacc2747c048e3419e5657b74612995
SHA256902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_1073169037\manifest.json
Filesize408B
MD525e45b88de59ae31ed14c753d0ee98a7
SHA1a1193ba5afb2ec60d42b36dcb6456da21555b1bb
SHA2567b65ad26e9cabb61c61e7f1018632e36fd342c29c1079b83edea2114b0d60c31
SHA512a7f7e538f12d65b93af9d926b330ae0a3ba9ea547724a5a7fcfaa8bed103d1f3813fc12115bbc56ff80c3da384b74244ce37e58387cce9b10a1ccdf2f779b29b
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_1350656653\manifest.json
Filesize380B
MD56d68bb758b3a522bd31ccae240558a1e
SHA18cb3b932186ebfd919577d18dbd86e11b57a18bf
SHA256359e9e4eb323d43a311f38d8edba6ad8b399a5c4d014bf2a91d38142ef1dd2b3
SHA5121b7887bbe2b76e5201bbf153cfb19c8be860fa1e3a6959335eab6d757debe4568639a8da2574064510ed2a8101542d2abdd01c5c9a35a0f8a3744dcc6fe7891f
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_273760459\_metadata\computed_hashes.json
Filesize250B
MD535be4f9b728230644568bb742bc8594e
SHA1ee4718273b5599b297bbe6917bd374ed57f49732
SHA256d8bff8ba892ed75a5857dfde7aa24ee5194e31cb64488a350299db9716887287
SHA512c16a9a34fab820616f386e30862bf4928fc271dd8a91e251daed65ab781751bc4ce925172136fab4ff87d4a4d2f6481af18544feb13ec2898e5585a594476877
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_273760459\manifest.json
Filesize407B
MD57488b6d6720532f4a267d26c247141d6
SHA18c94c0b8a7da8bb87085cce4ad42641ad3e8a842
SHA256fb5f4468336ac50fc71dee3568ed7bb2392952261076ea306fc9f4ed5972bde5
SHA5128567b3e896b5dd0bb3608f3fd65fd8cefd284ec4ed5dfa2d6803a962ff41d2c7a59c933f4dc9b9c7c6f6ffc4c0e8e85f62974fe3fbb09f758c2025523355dc42
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_415761661\manifest.json
Filesize385B
MD56f26172981ce246f21dbc1d853ec9433
SHA1a5461d9a26128670f2e2bbef2d1e7578f672a183
SHA25621ca7a61f92685256d98dfc78b9844e7ca784afa51fa5530a3dbd3ee6d79ed6b
SHA512bdefe588284e50e42abb743f3d04171823d2893a6d188cc95118be7dd292c6cd91d3eb827b54d39858698cb526b8e75648688b62bc463759e5b95b04fd09b847
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_637344800\_metadata\computed_hashes.json
Filesize250B
MD5b16a4fc1cd848f3310311affbd405e16
SHA101ccc719f9106352045caf1aea514489fe4194a9
SHA256cea7302a41166422820c9c43cad70ff548ff88ce44c6f0e6a4f9acee59ec7cc6
SHA512a9205276ccbcdff363ae5a8ff5e6d03e000efdb65662be6d30c56ae3ce0740ebbc1ee78b3950be8e86a034106fe9ad61c56f0bf78a4cc1d3e7d14566ceeae41f
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_637344800\manifest.json
Filesize377B
MD51ee6fefe3b23c7c7a8059c979886b744
SHA1aed05f078d9b3da40e63a991ca07e36c99d67633
SHA256ce710effc16c600f9b09699c3dd82c94ef60f63c98411d14dedb6c5dfc201d28
SHA5129b609cd8afbcf2c53cf71dda6c235914155f704d7119090658b55ed96b28c950c110cc4a2955e0780a2efc79ee78bbf46a15ee65d7144ac991c6748a3f2892f7
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Greaselion\Temp\scoped_dir2396_817693984\manifest.json
Filesize349B
MD5c2aa2d6bda7acddee117477137bb0163
SHA14ef6fccff382121d84c22101a7f4677cf056b22e
SHA256cc55f3872699ff7cf5412491264f129c15738daa070001ea029cbf0a8e97dd47
SHA51234f28a91396718921fcd6e77a08346720edff952ee77485c9ba76e2839d1f780df2e225b5adfa2dbc55d68fa7f731427bc52019a93b55f2f5f24cc29dba49221
-
Filesize
45KB
MD5362186462fbd48e00e03f83e380217bf
SHA1c36839c6ede5685bccf477bd06af3884cde73e3b
SHA25607518f41a2d2559af1213d0e5343ea9b81b7a5b4031e7877499e519a9794881e
SHA512be51bebbf278b0bba565074365e599954291fcbcda3c7d3148d411b204a6db68f847d5b07796024409d0d97e0b2e225709d12f7d7e7f17b3499742d5bbe3bbb2
-
Filesize
49KB
MD5866484374333b374ab9a0917817dc5c5
SHA100432bdcd0af2118933d3b09ea925e8d7d71ba03
SHA256bdde9eb5c31517abd990d70883f4afd148c73c8f4e524f012d1a0f63e955df7d
SHA512e912073a59a5f6f0f36517b95d615adb338f0200ecc61e7e8b587b64f8d130bda2a8e920593217f2ede0f22fcf4d6258fa4f987beb894decc09db2a59524527b
-
Filesize
49KB
MD56e43ac3d43a79ff7b863270df870736a
SHA10c11cf4ab1349aff2a2c49dfe4cc7813ce540516
SHA256c0eb4a503843e177b339cfae176fff3bcc5a3b27c063d680a0299d864c816d27
SHA51275456b3d34b8ff8f6a700384cfd7a23642d3ff6cabb38b1faf48bc624a445d4c63ab51fd4c2c9210af11c0973c8b04d3f9830498692618becc3f90c65de18e76
-
Filesize
48KB
MD5f0f5e76e33bdcb5757408c32b7060d8a
SHA17caa2de29b6d7d1f0bc3dd1a665581d1e67ee810
SHA256f86f40a7991bc67ecf94148247805f653f4b9045dafc731fa33bf6939a51411d
SHA512d278991f5b3cb6b9cf0fb5739d42bce8d6887e4ee1b2cf73568dcf7b27b669fdcf0fd387846c8a95052c731b39f9cbc0f6233c7344b27ac14905f051f389d6cd
-
Filesize
59KB
MD54804fb2872d48da6f1ad26918f849a7b
SHA13ded820b9408302a9cf1fcf994b06e26669572b8
SHA256ba731016440cf58671c6ffc1ef07315b4c3b271286bf32d27a37759b8ae90762
SHA5126bc360fad6be289a7bbea46d8454032929890f059169cecbe789d6207812a13f727b789d744c3f9fffbf9fa441267c4cb714557f91d8cc7cfdfee762c904f294
-
Filesize
73KB
MD57366db9dd4ee1b1299ea7c03de95b183
SHA1cff34a50f83ef470cde353bcad045db65dc943c3
SHA25652d6d75614ec8636faaef6e9abb21a0b80031a82862661f95a84a5ff9baddc29
SHA512474fe5c0e7cab80eeb7010ce5a5c551c6f87ea6f9a0807713e51b45d34d6fa5692816c4fd8f892eb4a1dbc32dd59f68d80f1ffab30270ecbafe29c87444420e9
-
Filesize
6KB
MD57c296fb4b3c639816eb736f63eb26e14
SHA147cb2966649cffd60bebeb78c80b1d114f4d7f31
SHA256a6a499df7809c8ec6051fb2a949c0fe153b03faf3bcb00aa081885fe88977d54
SHA51275963e741d12885207898ffd7713badb229b00a9b012ca763cc3a37d623759795daa3ac79faba018de5f912e758cee8e25a5d6763c76bbed343e912c4cb68b6f
-
Filesize
144KB
MD551c912244e7ecaa42f87eacf5dec3d64
SHA16c1fbe878e822b41dc5fd8f8b6fd71c6555a74b3
SHA256cf405ba3735249f0fb97d3d822289737ddbaed63ba60a27fc6732c9f1705668b
SHA512966fd17bdeadc56b8f2a36cf78762cd981aec763a7f00027ca05ffa20da2c318773d0fb39f0ceeed86b49d8aa04544fc87a73ecc9dcac9e54d14b9ba52b7dfbd
-
Filesize
43KB
MD5ea133447ca132939173d3f3602606649
SHA123338cfcb2edcb6d4c9b298ad573e15bdc36b3b1
SHA256b519aeeb65227609bf95ff76524b1d3c5778f4d68051be0dc876a2a863647ef1
SHA512f142ccea342a2383fbf42aaa92bd74ff3670d8291fd6ae8f5b94da4571c05acc3458f403cdceee317977ebeeefdcfa92d7d834d74daab58ae6d956c2f9491782
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb
Filesize2KB
MD5e2f792c9e2dd86f39e8286b2ead2fc70
SHA18a32867614d2a23e473ed642056ded8e566687f9
SHA256ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA5126a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580
-
Filesize
146KB
MD53a2baa7df4d23b680537a5c197656aa1
SHA1054f1f2bdab1844d08b3f34821262b0be09e1526
SHA256eb72872c188ef771dc09f8e446c89ef67ee7b45dd9d24e86559df96fc21813ba
SHA512c2fb2e64b2397d389dd0abd11ef70a950bded057118c4bd7efee4656d8bde9dba4331061ac498afc842ad7c31131f13600b03aaaeb8577af17eae5572643c08e
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\TpcdMetadata\2024.4.22.1\metadata.pb
Filesize29KB
MD574904bb694f4f0b34e1864d21f439442
SHA13dfa786e70627c98386a10b147c04f839c340820
SHA256658030bdd6517ee9f795be8c9dceba9adb75dded8374d5d0950d6506e41b2e15
SHA5127f33f5a05de1f889bec571fea1ef711cb84431791ed24b3341bbc6fb1f2156c523a04166087fbdf8a0e3f4600329fc2cc250d4dbafc3213a8a3e1a82b18fd28d
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.133\list.txt
Filesize86KB
MD5f0de293c1b34d03fc29a9fb6d80d9f70
SHA1c6c2411110def41d09e4adb51f7be88ee1fd5e2a
SHA256bbf337ba307d97f57b12b5d24d837f3e80a0ee1bd167d6f49fa2ef7799d6ef79
SHA5125a604dab841e455aeead0d7f96c6727eef109123a792c9bd832ad4a3583f1220a4ede84c1809b70975af9c6a0f1f86bcd1f1473ff4c5f3681b43287abbd3f1a0
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\Greaselion.json
Filesize3KB
MD53b7f2cdce3ab5de01976c5219d661ee8
SHA1669c6fc08c14a0a66b18aab5a4c92c8d859ddb30
SHA256a04301151f5a06b2ffd4c006590c4eb801157e8d2235585da165b0314cd02348
SHA512d7e53e1873a1037e43578e57a018d63d1f7e991ef8320217e057d06a649b4baf7de880637d2ec57c17dfa9ab5e1b3d60c189dc07ef55c9b5325d8fcfe2f8f8b7
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\clean-urls.json
Filesize11KB
MD5c151dda05334cedd311a11a5f7d43037
SHA17ecdb766aa959d7b4de9139c97ae3c239dc9660c
SHA25624b9a4251666e74063baa9c978dcfaab7fc62bb9635e1a1d14fb0544977cb31a
SHA51274417a9a8ebbe6e121c88c452f821a6f263ca5527997dad2c8a46f1153a12de8730af68ed001422412626878625db4088beaddb5a78fdfd81ad434d64924c31e
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\debounce.json
Filesize10KB
MD5dfe66f6acaf568a0130bba36613e2c5a
SHA1b53f6ee4f1994fe246dc346b341ed9c4ef009e5c
SHA25651427ca754354027d6391b8bbb0ef62be9c22774e7ea58dbc5b4ca5be4cebbb5
SHA51231b44e38a84b5fc50a61ffe86559fc7d9216d8e037ff67d6a9d60c5e5170f49becbef8257c93c5041629137b9638cf22237cacc8e6d5c16b2ff433c55eb8da71
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\https-upgrade-exceptions-list.txt
Filesize86KB
MD5b8ebe8c70e14e1bdff4bf04cee9055a4
SHA16a8eeeb539eb5f630091a971585bc77731c24b12
SHA256a9c464c1aa17ec9958141c020c30badddd4801e15b9c0a0d430859df0ad1955e
SHA5129240b1d7ae17b6d20cb21a466335471d3b62ee2866e6d07dc62c1a288def513cedb5368891e4c8beecd135140a221bf8a16e048cced31b29fff9f8d0d40c7266
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\github\githubBase.bundle.js
Filesize2KB
MD5e7cb1f457c1972065f9a5a5821ed022e
SHA1e8d135731d52cee0975327c99d1a6b745937c36c
SHA256a00d426c743f719cd74ad64441a8f7fdabbea566893c29b756754db91f05355a
SHA512de79db36ae1e042121cc440b21a5f175b7a679192df11883f304debfe3c1256955e13724d47ee3cc874e63fdc9a0b50d4b57f16d8d127d8106dbd0dd73cb5dce
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\reddit\redditBase.bundle.js
Filesize3KB
MD50e7d831110979936c383c74b060388af
SHA1e9f8511b9862cfbbc27452a9463a78b44901de4a
SHA256d046760e839f120547d179a8eb380cdfd07db89ed256d3b95bc975161d075ea1
SHA5128a449257a396b0df25a19211cca28162dc12e5a22144b48996d09111181340d28b79c49610a7fcdc702b5571b0d4ad21efec890d39bf0d678f4842b1d93e629a
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\twitch\twitchBase.bundle.js
Filesize2KB
MD54dff02b3222f25ae7138d884fefe8e8d
SHA158870f0e2511a66b961ee893b332c1241d235ea6
SHA2560a21a4e6173432a274ca9b9ed8c13a4845675f20933a44a1d053c0d12a633447
SHA5120d031ed3c86c8268dd3c01219b3690948f43dbf87870db2af12ab9c60b02b1c8212109848d358a5870a17b8d1d2599f71918690fa0e34aa4194f210e326485b8
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\twitter\twitterBase.bundle.js
Filesize4KB
MD50fdbb757afceb684f8041000d9b80c30
SHA1698834f7d787914f7155d7a1e0d8e24d91ddbc0a
SHA2567dbee02d2b4955afef95ac5ce8445ebaaf84c9fc55d16521bc598303c6521cfa
SHA512bbdd0fe5f8dc576f236d991cc7d29ba2a2929e2a78c86c5c4eb3f04c362f3f612f32a05b9a17762f6563fc7ec705ac83ddc0c97ad0e0dbe1a0d389b699f46dc1
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\vimeo\vimeoBase.bundle.js
Filesize4KB
MD5bdf49604c55dcc6e0af6281c83158f68
SHA11352d66ba7ba76efc4f7e4bd9e8d79cf1142b275
SHA2564978086aca3e6ebf5bdc84494f31a388ce7955fe8bfc043d75cc8306aeb437bb
SHA5128c3c7d69ed8aa2177bd3e56b85e1cf51e98ab97a551df2e11d9b2fb1907503e5ccace21f895d5a61189d6c351ebd828a779e64cef5114c18905d19a1964ab648
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.709\1\scripts\brave_rewards\publisher\youtube\youtubeBase.bundle.js
Filesize6KB
MD531c947a91169986cfa3558f1ef9faec9
SHA150d23ff4bb00edce79a4160ede1545c2c87b5a08
SHA25690f326796832682ebb6533eec08ea34d29e8a864f949e767e3c047b225189a94
SHA51222f66c131abaa03d3a3aba5f1b03a9f0bc355e528468d9740262218e855c4219e891cfef463e4ab5e4e6559f6c49301fe2a70e8b342f5d3eb9c577ed262bce63
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.14\photo.json
Filesize6KB
MD59e7961113273ff27fc0364e1ad5c28a6
SHA176d8d1eea3a4f2423d4e4602dd7b254c919e52c8
SHA256b9d166565aed3ab30c83d2126d636f48a6e502f65f6b09259053fccbcdc48ea7
SHA512c9de055cabcbb23d24d38c0be70489a1f744c0724fc7da83bb55786cfac60fbe64916bcfaf679f8a9f0fc188f8c51f629816f1a6318aa46fbffc068e4a71fbf2
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.5650\list.txt
Filesize42KB
MD5b3b7808e5016f168de900972c171d266
SHA179a5daff71c9ec13b4f3d0b118607e1298c7ad44
SHA25640aae461d782db586facc2fdda1a89207820b183c9e32b00400f604fc948bbd5
SHA51212ad3d655a2bed0a93be16def5d7f9e67b8161b62326e3e294b3d9672063113ff956f7460896bfd02546ba2c70ef7ead199402b54e18fac227c7a1f8405ec5ae
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.6193\list.txt
Filesize1.2MB
MD5420fe8dbc84712344c4c6f60f7e1e2ed
SHA1c705dbf2db40f293393341e4c2c87d844cf257cf
SHA256dbdb40a46076b06897e8c6e639cfa1f46af87d39f6bcb95eca4bd08e8ab345f8
SHA512554cdf3cff1f15b1bfbe0c1a885dcc9e7f4494ce99c035a438ed99848a27e51a4599e118584073a91a5bf457a905f6614ba208ab5e3ec4dae86e297ecb0664c8
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\afalakplffnnnlkncjhbmahjfjhmlkal_e00829f7a2ce13cfa138612de493abe27996d357bfff13552517168395f8ce23
Filesize68KB
MD5002a574314ba1a0ef8b079c2b6ae8e66
SHA1de516f7539100f97c24b836542d03af799ef6b22
SHA256e00829f7a2ce13cfa138612de493abe27996d357bfff13552517168395f8ce23
SHA512ec3e88e8cb7c3f6fb01de3fa39694dff5c7205c4cc1feba5f1ff2e14d834246aa16a14b6b9163601f23e089443b397b0543f1c4379206c7e531fd4725fd5b4e5
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\aoojcmojmmcbpfgoecoadbdpnagfchel_9c5960d21f0263b2ae8cc29534889d287090d59c6cff01b499bde57d53960052
Filesize12.5MB
MD526550720da0033f11c39b9286c89a360
SHA12e4b674d0894fb7ce59ba593f918f760e546749b
SHA2569c5960d21f0263b2ae8cc29534889d287090d59c6cff01b499bde57d53960052
SHA512f51ccede383bf5a8b2c14633da44c075709a9f69254438dd8d1549550b232e7cf5c4520c6afe45a943d39a02c2b3f8bb54b5f53f5dc3499eeaa8df747d998112
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\bfpgedeaaibpoidldhjcknekahbikncb_7f72307a85f1e78ce6bc35b217027b9f81a36d5bc4db5532735e8251f5bf46d8
Filesize11KB
MD516a79ac997cb35d5b65a10c8f47cfb31
SHA1189d78b3bf18c9d4a0e28e6f09b4d75ac360ba78
SHA2567f72307a85f1e78ce6bc35b217027b9f81a36d5bc4db5532735e8251f5bf46d8
SHA512cf85d01905ebaa5eeb8671020a937cbe88d72c2191197fa97c875bf281665b812e1d51fa0463df53380f38bbc52eec67f6104a2ba404472a297778670fd1a4fc
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cdbbhgbmjhfnhnmgeddbliobbofkgdhe_f126d828e6100d88268a1494c37ee6cc7a810c01259bffaabcfc6491554365ad
Filesize378KB
MD57389f3ca2183f8fe0200f24327c87fb9
SHA1e55b8e5213703fff185ba033f1a9b87dc548fc86
SHA256f126d828e6100d88268a1494c37ee6cc7a810c01259bffaabcfc6491554365ad
SHA5121c725d2d7d3ac7a53bf36cfe03528be009441631996973e14fafcf48c3d5b339307a0e21e5fe149b8b2df933acb08aed62da9607024ccb20e5b1c3b8c20012a4
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\efniojlnjndmcbiieegkicadnoecjjef_1.0f7d5e19914fdc90c57d055e70af1f17a0e49be70bce48ab641a32cf0b0c838d
Filesize150KB
MD5150358228d488b8d7f6e9853cbdac338
SHA1fab5d49e43c0aa755f9a65b3ef6197ac63167c91
SHA2560f7d5e19914fdc90c57d055e70af1f17a0e49be70bce48ab641a32cf0b0c838d
SHA5120371eec2d2a1ef7016438053e6bf63e999af8bb652ae7e3fa696ccec78e59ed3fb737bde406ca4b1d20a802a628b2195ba06f19647f0f6355653f60fcb61932e
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gccbbckogglekeggclmmekihdgdpdgoe_dcb23281408a888a097779ce14fcf213e0e1a5724c9151d2d9f3d541dbda916c
Filesize448KB
MD56c5169d9277a7194f087d197132589e4
SHA1b000dd69f67e61bf414756e9979897bb38c38516
SHA256dcb23281408a888a097779ce14fcf213e0e1a5724c9151d2d9f3d541dbda916c
SHA51291998255088bf77add4a7947e15335151aa7eefa7e728534b9a0fb046d439d4885abe455c08d0d4e7e97276340dab9d442cce6151ced7b7509e18edecadc4c4c
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ggkkehgbnfjpeggfpleeakpidbkibbmn_1.905f83845e25579fd4c6ae4bdc81a2740a216023f856918045ced4508329c941
Filesize8KB
MD5be4bd6e1ff889a7bbfa11ba79fd1180d
SHA15afa96a648721fc9d5e5679c0beae33986c13124
SHA256905f83845e25579fd4c6ae4bdc81a2740a216023f856918045ced4508329c941
SHA51278a2aa93d0bfd933cf3300c2f13004551ddfab104a4ff63841505041510e60d327a803082091b9ad9dbb55744898d2c145b055f495ecc311df65abccf192324f
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\giekcmmlnklenlaomppkphknjmnnpneh_1.3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
Filesize5KB
MD5636c653ec2c30bb767533901a18669b2
SHA14b5a01cfea4c5deb62f3aafa01ef24265613b844
SHA2563eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
SHA512a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gkboaolpopklhgplhaaiboijnklogmbc_870c2b7015bb543a7f4cedd1f2f23f27bf5a947ac1b4052975bb91664368ad5a
Filesize72KB
MD5ad55d12d3f05878394e621a455b9a68b
SHA13f25c8fd6d46e76c03f8413bd690a38b7dfb1b9c
SHA256870c2b7015bb543a7f4cedd1f2f23f27bf5a947ac1b4052975bb91664368ad5a
SHA51225712fe940cc8aed4568add74d7d0ebb4a68807c696ccbd13f8b67913aa67655e0e5582b2e3b525374a2e426accedfc90a5cd8267aaf1a6659c03f00918ef529
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\heplpbhjcbmiibdlchlanmdenffpiibo_69d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f
Filesize4KB
MD53a03f3ab4119a23fa6b70a32a6fcd4b0
SHA15d047a5da7c7f388416aa50b5fba745bf5f36eb8
SHA25669d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f
SHA5128caa4e94e831b25226e956a8ee87c5b369547081df863ee34e7f80d686259eb9b7bf75757043ecc5b0eda3a603198da060f9b6f30be755350ab912fdc7681819
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\hfnkpimlhhgieaddgfemjhofmfblmnib_1.c2858b6d7295ba056c7ca2dae1666b09d4f08f99cb34f5207acab81ac7743681
Filesize25KB
MD509e084d51c9dc791e292299508a44377
SHA188ea8461047ffa1993c18cca0fdf40541362de0c
SHA256c2858b6d7295ba056c7ca2dae1666b09d4f08f99cb34f5207acab81ac7743681
SHA512058ed374ddeb093a64e4cb3ecdb000351920609057452499248d85ff18bbc4036400bdcd956a6376d2d1f629e27403ce08f6f44c387e3d52f542fc2f01139b17
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\iblokdlgekdjophgeonmanpnjihcjkjj_9ac596926f05dcb30dd4917cd559f10e16381502f77761c5bed4d9438a737dec
Filesize17KB
MD5a7e4c42e905b14cc01a1050d489a148d
SHA135db36d549e6c40a5d2f02d261beba1b70ab5658
SHA2569ac596926f05dcb30dd4917cd559f10e16381502f77761c5bed4d9438a737dec
SHA512ac7f0d431a4105dce0fc51b316c2243d0021c721c9420754e99b1773aa1e050246196b1f58c562cd2b81f8567a0814d65328f3360f6e2e2e94966bc5834b63e1
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\iodkpdagapdfkphljnddpjlldadblomo_b66913fc597e681c3754ac60be96ac98c9013c3610b82410131522b9cbe0fe21
Filesize1.5MB
MD50237beb4f95ce7d7711e69729ea114e7
SHA15aecc2a8c6ae5a743f82625f47cf6c6d2cdf08a3
SHA256b66913fc597e681c3754ac60be96ac98c9013c3610b82410131522b9cbe0fe21
SHA512fa7eb5a81bbcfda6de9d00061f0c7bf354804b84fdde228ded10f8527051219e582d7669b398ae9876d3e756ffaa7a3f71dda5fd40542269a1cda497ea5df577
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jamhcnnkihinmdlkakkaopbjbbcngflc_1.c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
Filesize1.1MB
MD52ac309d48a054c8b1d9ea88bac4dbd6c
SHA17507922d88a9cb58759b5326fadae5d0c87f40b2
SHA256c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
SHA512870dbb86a67f36a43ad4c80db904e76b602bbe062cbb9fe4222d1cc69d99aa4a60aae91c094a65a481d8c62cca4942f178f1b2744ed21836a526c7ffe3409969
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflhchccmppkfebkiaminageehmchikm_1.49a36c70f99c273e35d312cdd5d7ec24ce64ece5d73e32946b968be336822f12
Filesize9KB
MD5512e122f5f029841f99b483df4d5940d
SHA1a1d2ff93d828d979bc28c2dc5b33c518c22b93d2
SHA25649a36c70f99c273e35d312cdd5d7ec24ce64ece5d73e32946b968be336822f12
SHA512d3c7d74e2dbb6018677160c847697cd660406df7ae98779882ef848d7f1328296f557908c0e5cf904dc01f5af1dbb1228794013415d4e9d2d837a846b4b47135
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflookgnkcckhobaglndicnbbgbonegd_1.0bd20c0ed22291b160114420a22e8ae9fd79a002cff2efdff99285f35a15f629
Filesize69KB
MD525d9086469baca3047d5d3aaef6c98e3
SHA104f34b6fa058d25dea98ba0cd1456b4681fdcf82
SHA2560bd20c0ed22291b160114420a22e8ae9fd79a002cff2efdff99285f35a15f629
SHA5123d3fbb7292307c9fa51c2e8ca05eaafb9e8c7eda27d714a6f509388010e0e1bf8312315cd91cc58f04f04b2b0f1fa309c92454fc4390b26959a51af5f4ba7e8c
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\khaoiebndkojlmppeemjhbpbandiljpe_1.f4f1eb04881095d1cc8f2e1799a8144c10476dc1088a03ecdb4418644040a554
Filesize5KB
MD516875e55b8795c1b001657d8b0831036
SHA10d4ba72f6cecc195b8784156b8713767f5f02a1c
SHA256f4f1eb04881095d1cc8f2e1799a8144c10476dc1088a03ecdb4418644040a554
SHA51269bde046aca6a1d2206f178560a4d5709c3dd51e9180d4878eafb73c326517adc235bf5755cc6c0387de1058cd0ab6cf6ba7f11babf6c6bbde493ffd4cf969d1
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\mfddibmblmbccpadfndgakiopmmhebop_e67544cf560bde79ee6fa5899daaf4ce455a516a8c39786899be9ed24a35d0b2
Filesize141KB
MD524d173656b1c9f482fa7355a033e418c
SHA1c986543d1885b8d401130d1c2a682e14512f9694
SHA256e67544cf560bde79ee6fa5899daaf4ce455a516a8c39786899be9ed24a35d0b2
SHA512bda21600b26e3473690d7a3ec5af6ba590fe3578e6658032ad4619688e13c26bbc4910183ccd13b78232207629d7a38b661cbf7404a231b81bc82d05674e55ab
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\obedbbhbpmojnkanicioggnmelmoomoc_1.e0ccf208ccd019c2eec3b24f3d3704a51a5cb57b8d76a946c41915c50e08108c
Filesize5.2MB
MD553c7eba49e9c0eec89d3211e6a9580d6
SHA14995791390812a4c869ebd74349822e7c2098266
SHA256e0ccf208ccd019c2eec3b24f3d3704a51a5cb57b8d76a946c41915c50e08108c
SHA5123d10c50398c42cd6b6eb8822d1f53a6c433b09488d48f5d732ea6ca996ae4d500a4966771f6c3eda666b4c90c610c94ddd1df150289b66296eb2458b18950c73
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe\1.0.1577\photo.json
Filesize410B
MD5474f8b076d445294871ce76b7d573f7d
SHA1ae958be24af1c44c2cbc431e8c7ff1f9c8c4a6d3
SHA256041c9a926d831f4c23510577d49923ca47360423362224066720a293a9c1045c
SHA51224999efffbf05a317084bd447f78508db12fc0d12ed2a6ef3ddf43d1820996ecb0831e219d514c2b62983a248c4e4b9857582f54292cf0aa1a94b247ada3d9f1
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.55\list_catalog.json
Filesize73KB
MD5718db0f894ab9f82fadb0f5834615b3c
SHA1cb0dda47f3ca93df5e3cf746e4693a5d3cc52e5b
SHA256d27cf4b80baee2727ca447a03d767160ba793e2bcda29f8befe93823c35da19f
SHA5121c20c36ef49e927981a47eec9511865233970e58db36f816c981e73131713d2860750f762b5ec365910517e22201f1524aadeb17e3390b7f9c52dcd4e781bab2
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo\1.0.11\mapping-table.json
Filesize4KB
MD557ff689022f2d93d2287ac3b48daec73
SHA1937b7dc21193a27607340af7fb7b987b8ea50582
SHA2564665c8cb39b1fd0131b72097484bd3a8309992821a21de9ee0420434cc3f7d5c
SHA5121b81c2c9df45875c2f563b99bb2d29972408e3d449fb2e8793822dc0cf85c41cb48eb92510f4940343ae4826ec9bb4b98093d64f53de635ccf75b5307b92ca87
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.100\dnryisldmaqljgwaxeqbuuhuvrbboqlf
Filesize235B
MD5ace804b1b6bf107438c11cd283e7d4ff
SHA17e3c1d5b50f11f31a35286de0ccb4788b3ebfa15
SHA256124bd93f5656393fa501e4cae374cb578330adbcdea314adf11e9dc6320ec466
SHA512f34f36adb9335f11da0a63b3fba9ff19380c308bb17db1cf0b4c1f23f35f3b8074f6beeea7ffdf600fb97a452aabf23fbc64c8dc45719183b98c819e3029181c
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.100\resources.json
Filesize269B
MD520effecf10eeb0456cc6f537c802f172
SHA18fb3968af27ad30c639f45a6fcee99b48ef79878
SHA256044502a67e39049b4cfe2b80295ad396fff4d1a28e7f2a1200abf21061aace8d
SHA5126a002b205519c0fc498c139d1efcab2f26bc03f3fa795a5bee9b3358c9796088bb6419e2b95afdbb84c5ea36a328dfab01b33c148c84dd8e3b9d21fa07fb6dce
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.5364\list.txt
Filesize5.4MB
MD5f1f63505a052db5f011a3b8838b909fa
SHA171022ef4a19435666e8ac27b59b49c61883bcbd7
SHA2567a5ceaa12a3e96a954949ed5d0b0c4ce650f028cbe95e4b198818d2554e10cfb
SHA512e563f1ac4dbee620684f6a93f840c36cd94cbaf34865ce07620c79fe688085bb7bae5d08b877b2fa9b6c841b825bc9912ed40d2d45b4236c3514ee05e56bceea
-
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.85\resources.json
Filesize868KB
MD5b593978951edb3aaccbeb28ad1272527
SHA16c12b537e78be73130060c71e7a59389d11e7f5e
SHA2567fa1fc14c3a728352f1d3e2531d75cd89b54c7df6f0acc8f68cf694b861b0640
SHA5125547e71e4d99dc7b6fb44e1264e4ecdbd5c6b9f8f174a43261a8b6c1c36babca480e36abce23e5247f9742e156a9787dd35a4c2d564502f070de08d9b225a47b
-
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk
Filesize2KB
MD5847a8a26d55da58276b8bd18387228ce
SHA1e881131b293f3df9dabfa9538e5091748995af35
SHA256c1670d045bafcd1ec8f0802d1726fdf81b282c370a8614998a56a42be9c3beb2
SHA512dbc3e045764599303fd3187ec978a42de641cc53c532bbbaf8fb45567e7e7fa20b119db20d63cefc2dfa91fba4bbe0ed8577497a4a7d928f593b37003f70a933