hxxps://brave[.]com/nl/

Analysis

max time kernel
299s
max time network
301s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
06/08/2024, 10:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://brave.com/nl/

Score

8^/10

discovery persistence privilege_escalation spyware stealer

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\IsInstalled = "1"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Version = "43,0,0,0"	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\ = "Brave"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\StubPath = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\127.1.68.134\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Localized Name = "Brave"	setup.exe

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe	BraveUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation = "0"	BraveUpdate.exe

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation	brave.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation	brave.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation	brave.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation	brave.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 58 IoCs

pid	Process
2260	BraveBrowserSetup-BRV002.exe
4808	BraveUpdate.exe
2640	BraveUpdate.exe
3184	BraveUpdate.exe
5008	BraveUpdateComRegisterShell64.exe
3116	BraveUpdateComRegisterShell64.exe
3292	BraveUpdateComRegisterShell64.exe
3364	BraveUpdate.exe
4108	BraveUpdate.exe
4136	BraveUpdate.exe
5112	brave_installer-x64.exe
5000	setup.exe
4900	setup.exe
884	setup.exe
1308	setup.exe
2064	BraveUpdate.exe
4416	BraveUpdateOnDemand.exe
3396	BraveUpdate.exe
2248	brave.exe
2772	brave.exe
1092	brave.exe
5056	brave.exe
2840	brave.exe
4588	elevation_service.exe
4584	brave.exe
2484	brave.exe
956	brave.exe
5624	brave.exe
5652	chrmstp.exe
5720	chrmstp.exe
5816	chrmstp.exe
5844	chrmstp.exe
6108	brave.exe
4700	brave.exe
2888	brave.exe
5248	brave.exe
5384	brave.exe
5420	brave.exe
5484	brave.exe
3184	brave.exe
5536	brave.exe
5200	brave.exe
5148	brave.exe
5988	brave.exe
6084	brave.exe
5824	brave.exe
5868	brave.exe
4644	brave.exe
6048	brave.exe
5648	brave.exe
4376	brave.exe
5660	brave.exe
4144	brave.exe
5932	brave.exe
4396	brave.exe
5524	brave.exe
3444	brave.exe
5372	brave.exe

Loads dropped DLL 64 IoCs

pid	Process
4808	BraveUpdate.exe
2640	BraveUpdate.exe
3184	BraveUpdate.exe
5008	BraveUpdateComRegisterShell64.exe
3184	BraveUpdate.exe
3116	BraveUpdateComRegisterShell64.exe
3184	BraveUpdate.exe
3292	BraveUpdateComRegisterShell64.exe
3184	BraveUpdate.exe
3364	BraveUpdate.exe
4108	BraveUpdate.exe
4136	BraveUpdate.exe
4136	BraveUpdate.exe
4108	BraveUpdate.exe
2064	BraveUpdate.exe
3396	BraveUpdate.exe
3396	BraveUpdate.exe
2248	brave.exe
2772	brave.exe
2248	brave.exe
1092	brave.exe
1092	brave.exe
5056	brave.exe
2840	brave.exe
5056	brave.exe
2840	brave.exe
1092	brave.exe
1092	brave.exe
1092	brave.exe
1092	brave.exe
1092	brave.exe
1092	brave.exe
4584	brave.exe
4584	brave.exe
2484	brave.exe
2484	brave.exe
956	brave.exe
956	brave.exe
5624	brave.exe
5624	brave.exe
6108	brave.exe
6108	brave.exe
4700	brave.exe
4700	brave.exe
2888	brave.exe
2888	brave.exe
5248	brave.exe
5248	brave.exe
5384	brave.exe
5420	brave.exe
5420	brave.exe
5384	brave.exe
5484	brave.exe
5484	brave.exe
3184	brave.exe
3184	brave.exe
5536	brave.exe
5536	brave.exe
5200	brave.exe
5200	brave.exe
5148	brave.exe
5148	brave.exe
5988	brave.exe
5988	brave.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lv.dll	BraveUpdate.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_281453094\Preload Data	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-mr.hyb	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_360051584\kkjipiepeooghlclkedllogndmohhnhi	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\vimeo\vimeoAutoContribution.bundle.js	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_735098255\manifest.json	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fi.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\brave_resources.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\ta.pak	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\5f66d745-413d-432e-8ae8-13488fa1933a.png	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_735098255\metadata.pb	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_kn.dll	BraveUpdate.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_352912788\mapping-table.json	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-de-ch-1901.hyb	brave.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\el.pak	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1921434579\nadeem-choudhary-2.jpg	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-fr.hyb	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-as.hyb	brave.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\fa\messages.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_360051584\manifest.fingerprint	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1183373601\manifest.fingerprint	brave.exe
File created	C:\Program Files\chrome_url_fetcher_2248_1839146428\jamhcnnkihinmdlkakkaopbjbbcngflc_120.0.6050.0_all_dgzfpknn7v3zslsbhrwu6bt44e.crx3	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_et.dll	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lt.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\hr\messages.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\youtube\youtubeBase.bundle.js	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\chrome_wer.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\elevation_service.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\te.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\en_GB\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\vk_swiftshader_icd.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\1a55a568-51c8-442e-b23e-f1a4d11d400a.jpg	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveCrashHandlerArm64.exe	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fa.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hi.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\de.pak	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_201187495\1\scripts\brave_talk\confabs\oneOnOneMeetings.bundle.js	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-it.hyb	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\_metadata\verified_contents.json	brave.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\ca\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\it\messages.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1921434579\StudentNTP_Alyssa-Skala_x1280.jpg	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Ben-McCarty_x1280.jpg	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\aleks-eva-3.jpg	brave.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdateSetup.exe	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\it.pak	setup.exe
File opened for modification	C:\Program Files\Crashpad\settings.dat	chrmstp.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\youtube\youtubeAutoContribution.bundle.js	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\twitter\twitterBase.bundle.js	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_735098255\manifest.fingerprint	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdateComRegisterShellArm64.exe	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\ml.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\sw\messages.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1231779230\resources.json	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_pl.dll	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\Locales\ca.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5000_1476144152\Chrome-bin\127.1.68.134\resources\brave_extension\_locales\pt_PT\messages.json	setup.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1921434579\spencer-moore-1.jpg	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_944409606\manifest.fingerprint	brave.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-nl.hyb	brave.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ar.dll	BraveBrowserSetup-BRV002.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_de.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser.dll	BraveUpdate.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveBrowserSetup-BRV002.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdateOnDemand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
3364	BraveUpdate.exe
2064	BraveUpdate.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	brave.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache	BraveUpdate.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache	BraveUpdate.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	brave.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133674145195554380"	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3AD2D487-D166-4160-8E36-1AE505233A55}\AppID = "{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AAE4AD28-500D-43BA-9F54-730CA146C190}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\NumMethods\ = "4"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A147722A-5568-4B84-B401-86D744470CBF}\NumMethods\ = "43"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\ProxyStubClsid32\ = "{894F37EA-4909-48EF-9BE2-9C125FB1B708}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ = "C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.151\\psmachine.dll"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\NumMethods	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\ = "ICredentialDialog"	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E098B1F0-C923-441E-B37C-BBA1EC908EDA}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.xht\OpenWithProgIds\BraveHTML	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachineFallback.1.0\CLSID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3282EB12-D954-4FD2-A2E1-C942C8745C65}\VersionIndependentProgID\ = "BraveSoftwareUpdate.OnDemandCOMClassMachineFallback"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66CE3D6C-0B35-4F78-AC77-39728A75CB75}\VersionIndependentProgID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}\ProxyStubClsid32\ = "{894F37EA-4909-48EF-9BE2-9C125FB1B708}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91B050A9-5A49-4249-A8C8-B4390961A912}\ProxyStubClsid32\ = "{894F37EA-4909-48EF-9BE2-9C125FB1B708}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.ProcessLauncher.1.0\CLSID\ = "{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusSvc.1.0\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F396861E-0C8E-4C71-8256-2FAE6D759CE9}\TypeLib\Version = "1.0"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveHTML\Application\AppUserModelId = "Brave"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\ = "ICoCreateAsyncStatus"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\NumMethods\ = "41"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebMachineFallback.1.0	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{894F37EA-4909-48EF-9BE2-9C125FB1B708}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreClass\CurVer	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}\ = "IAppCommandWeb"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine\CLSID\ = "{598BBE98-5919-4392-B62A-50D7115F10A3}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\ = "IAppCommand"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods\ = "10"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveFile\Application\ApplicationDescription = "Access the Internet"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\ = "IProcessLauncher2"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{894F37EA-4909-48EF-9BE2-9C125FB1B708}\InProcServer32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoCreateAsync\CLSID\ = "{8F6D9FE5-6ED3-43A3-80D2-EA8766D65352}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}\ProxyStubClsid32\ = "{894F37EA-4909-48EF-9BE2-9C125FB1B708}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.pdf\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\NumMethods\ = "4"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E098B1F0-C923-441E-B37C-BBA1EC908EDA}\InprocHandler32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\ProxyStubClsid32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ProxyStubClsid32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachine\CLSID\ = "{28C83F57-E4C0-4B54-B187-585C51EE8F9C}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\NumMethods\ = "10"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}\NumMethods\ = "24"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoCreateAsync.1.0	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\ProgID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xht	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}\NumMethods\ = "12"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}	BraveUpdateComRegisterShell64.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
4616	chrome.exe
4616	chrome.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4108	BraveUpdate.exe
4108	BraveUpdate.exe
2064	BraveUpdate.exe
2064	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
4808	BraveUpdate.exe
2248	brave.exe
2248	brave.exe
5672	chrome.exe
5672	chrome.exe
5372	brave.exe
5372	brave.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
2248	brave.exe
2248	brave.exe
2248	brave.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeDebugPrivilege	4808	BraveUpdate.exe
Token: SeDebugPrivilege	4808	BraveUpdate.exe
Token: SeDebugPrivilege	4808	BraveUpdate.exe
Token: SeDebugPrivilege	4808	BraveUpdate.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe
Token: SeShutdownPrivilege	4616	chrome.exe
Token: SeCreatePagefilePrivilege	4616	chrome.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
2248	brave.exe
2248	brave.exe
2248	brave.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe
4616	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4616 wrote to memory of 192	4616	chrome.exe	74
PID 4616 wrote to memory of 192	4616	chrome.exe	74
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 2628	4616	chrome.exe	76
PID 4616 wrote to memory of 1452	4616	chrome.exe	77
PID 4616 wrote to memory of 1452	4616	chrome.exe	77
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78
PID 4616 wrote to memory of 2944	4616	chrome.exe	78

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://brave.com/nl/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff813de9758,0x7ff813de9768,0x7ff813de9778
  2⤵
  PID:192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1504 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:2
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:1452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2112 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2896 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2904 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4676 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3160 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5080 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5348 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5388 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5096 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5084 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5712 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5796 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:8
  2⤵
  PID:3192
- C:\Users\Admin\Downloads\BraveBrowserSetup-BRV002.exe
  "C:\Users\Admin\Downloads\BraveBrowserSetup-BRV002.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:2260
- - C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
    3⤵
    - Event Triggered Execution: Image File Execution Options Injection
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4808
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:2640
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:3184
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:5008
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:3116
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:3292
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSI2OTQiLz48L2FwcD48L3JlcXVlc3Q-
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      System Network Configuration Discovery: Internet Connection Discovery
      PID:3364
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{E89C7FB8-4A51-4D50-951E-2556C8B3D486}"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3132 --field-trial-handle=1732,i,13879953456136744844,8215120117281942317,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5672

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2968

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:4136
- C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\brave_installer-x64.exe
  "C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\guiF87B.tmp"
  2⤵
  - Executes dropped EXE
  PID:5112
- - C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe
    "C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\guiF87B.tmp" --brave-referral-code="BRV002"
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Modifies registry class
    PID:5000
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=127.1.68.134 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff796fa3a70,0x7ff796fa3a7c,0x7ff796fa3a88
      4⤵
      Executes dropped EXE
      PID:4900
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\guiF87B.tmp" --create-shortcuts=0 --install-level=1
      4⤵
      Executes dropped EXE
      PID:884
    - - C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{8316554D-3FB9-4505-8C6C-93DA8710FAF8}\CR_3F54D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=127.1.68.134 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff796fa3a70,0x7ff796fa3a7c,0x7ff796fa3a88
        5⤵
        Executes dropped EXE
        
        PID:1308
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5NjcwNyIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjUzNiIgZG93bmxvYWRfdGltZV9tcz0iMTI3MDciIGRvd25sb2FkZWQ9IjEyMjcxMjA4OCIgdG90YWw9IjEyMjcxMjA4OCIgaW5zdGFsbF90aW1lX21zPSIyODA2MiIvPjwvYXBwPjwvcmVxdWVzdD4
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  - Modifies data under HKEY_USERS
  - Suspicious behavior: EnumeratesProcesses
  PID:2064

C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4416
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:3396
- - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:2248
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=127.1.68.134 --initial-client-data=0xe4,0xe8,0xec,0xc0,0x3c,0x7ff8036007a0,0x7ff8036007ac,0x7ff8036007b8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2772
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1972,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=1968 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1092
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --field-trial-handle=1764,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=2004 /prefetch:3
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5056
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2160,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=2328 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2840
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=8144256712866110352 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3244,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=3268 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:2484
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=8144256712866110352 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3308,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=3296 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:4584
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --extension-process --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=8144256712866110352 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3928,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4028 /prefetch:2
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:956
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=5008,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5100 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5624
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
      4⤵
      Executes dropped EXE
      Drops file in Program Files directory
      PID:5652
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=127.1.68.134 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff60eec3a70,0x7ff60eec3a7c,0x7ff60eec3a88
        5⤵
        Executes dropped EXE
        
        PID:5720
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
        5⤵
        Executes dropped EXE
        
        PID:5816
      - C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=127.1.68.134 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff60eec3a70,0x7ff60eec3a7c,0x7ff60eec3a88
        6⤵
        Executes dropped EXE
        
        PID:5844
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4900,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5128 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6108
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5272,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5284 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4700
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5308,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=4700 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2888
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5304,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5380 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5248
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5316,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5156 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5384
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4940,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5580 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5420
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5344,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5348 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5484
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5728,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5420 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3184
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4576,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5740 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5536
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5748,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=744 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5200
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5760,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=740 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5148
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5400,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5884 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5988
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5868,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5888 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:6084
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5848,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5764 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5824
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4644,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5904 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5868
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5892,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6100 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:4644
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6100,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5916 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:6048
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6108,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6116 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5648
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5992,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6024 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:4376
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5928,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6096 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5660
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6120,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:4144
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6112,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5908 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5932
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5932,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5136 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:4396
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6040,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6004 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:5524
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=5940,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=5764 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:3444
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6092,i,2325749164819820959,4897193480195105856,262144 --variations-seed-version=1 --mojo-platform-channel-handle=6064 /prefetch:8
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      PID:5372

C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\elevation_service.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:4588

\??\c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NgcSvc
1⤵
PID:5792

\??\c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
1⤵
PID:5904

\??\c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:5992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveCrashHandler.exe

Filesize
270KB

MD5
aa6df806c69d35d55642addc80a125d4

SHA1
72a347ddf77ee67b3ab8b17a6ffdf616136dcaed

SHA256
62b3170815c9405f1d349b64bd7af79df8d5b7edc5e508639fc09ee2b73a60f8

SHA512
c0762e0f1bf660daed01d06bfbff2aeba73503f84d4caf55c29a6ee0f0f9d8b532245ca021125d8b3463b4e8296813fb7236d9bd9ac305f9bd5325190d9772f2

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveCrashHandler64.exe

Filesize
355KB

MD5
d7473f373979b4dd81a10370d064d25b

SHA1
89c5bce72cb5d6b9e42ce760d314c2348c7438a8

SHA256
91b07cef266b3576cbe746988bde678b39d130c85099079603aeaef55ec2c612

SHA512
9354b4260097b4390b78018af7adb9ccaed20bdd27e47628a2915ba6dfa7ee248178c9f8e315ac814edb7fb08eca356d29b1b4e73f0dd07e398d4e3f8a6f08b7

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveCrashHandlerArm64.exe

Filesize
353KB

MD5
5131b7f38a2a6f88128701cc834c50e8

SHA1
49dcf34e5f54974fb087c5a06941646ddc6f16c8

SHA256
cf0b17cb0d1df36501fb6be36e93181dc5b49e28cca165d8c3c382c7bc7fd748

SHA512
f63efab13544c5e23f444fa846a17037c4a14b30713d120bfa3b9922409f348d747cfe979649c05882a4c9afbf89b11d8819f9626a823ad48fc800ed3329403a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdate.exe

Filesize
163KB

MD5
ef5eeeb82f9ba11ef3b0cfb95b4f08a6

SHA1
3c359d4d53ba3ffcd51d1e33f61e756d8cf0b60d

SHA256
f3289fbf1b518ebc6aa63ae3d7f918245a9e2919799ec6d3a1c4cda8468ded6f

SHA512
cbae9830a3f9241f1b3cbaca3310358372badd4813ecdf83319822f82dc285825fc74b5583ac8cc7f51a266e7c459e6eb94376cefd674d767c991d67f79cb65c

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdateComRegisterShell64.exe

Filesize
170KB

MD5
19522893a62643f2dbf778d87627e400

SHA1
6b057e0823eec0afd42b84a9b85b186414867421

SHA256
8d48cf08aa6b79ab2b86f98cc337e275b86131d5ee51f7202e51bad698470ec5

SHA512
e128c19b4933fbc4a61178f5f836543314ea9eee5d89d3b719ac33a7bc147edda3c80303ef2bfb9b9832806e48fb57823d279e7efe6ad5a30a79ac5716e0b88a

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdateComRegisterShellArm64.exe

Filesize
154KB

MD5
9f7658cd4624c4f94a06c00d25a383ac

SHA1
b93f1921cac9f51a0240ea87f4bd8d209f54e1a5

SHA256
6ada54d6a6650d8efb0fc36d2ebcc95b586e969f159e47c1a3d843bdbefbd722

SHA512
beddac650d5a5c62116c111e2bdb41ea077689e6c97890e57219c6a9c252c4d7243fb6fc740b6851813198fccd7960d51520b37d466a2ad2b50f35e58c8ecf64

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\BraveUpdateCore.exe

Filesize
195KB

MD5
538ba6b2719df03b8b0881d236b2c00e

SHA1
c82d35cf4a9367399a88c4a6032cecc5e0da16ca

SHA256
b6b155bebb89b001d30b5dc6ba41423c4bb128a70941bd8047588ae2be954b98

SHA512
4e4259fd0dc6e264414f746288c5a29dab5d6b09f635042d5c22dfe6cb34faf00b3b4c82cf13a7d95bac8c881555a3cc778142ed0bfc7662e0bc239ac4107572

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdate.dll

Filesize
1.0MB

MD5
f335401815d03f9d5cf1254db3949ba1

SHA1
c5c3ddc0c9328aaf1c31853ce5047168859d8e6f

SHA256
e666ca9bfb3122e2d5beec916e80e417c96255fd0585425213de799b1a2d0d86

SHA512
99bd0600b2f826a5e8037bbfc97110f584bb55b26db58980dfaf3223a9209500c4091fa832ecf4e1610ac83f0adbf806aa44c85a0385cedc721bd1a03a320187

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_am.dll

Filesize
42KB

MD5
dbfb031555a39d71733840bb97b33046

SHA1
4f3ea6d5672911b7cfbded69f9ece17f26b1d5b4

SHA256
7b8195f31ed76442dc2b9e8353724f8b7434e5fe55322f890624d645749958af

SHA512
a3ed69dc6e9e1dca8bc9458ba68a32805bc9e4dd9024be3f6dd24b60d185c24843fc62d002981ceda573b8dad130b9d587a8e50d1a106a4f1b5b6d960258322f

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ar.dll

Filesize
41KB

MD5
d57182e00265c00c2e0d333273c33d4b

SHA1
1e80f0a7476cdacd0ffed123388429d144f3a150

SHA256
c4291ed0893e49827af587641ee1595f701a904848e50369bd951c4b7dcac207

SHA512
2a619e3b2da6a3d217fe889bfc9e4e9b418b6ecc15c6375717af9448599d0dcd6ea0394b9d9e8d8683aed81c1ec8c5e05b744e6742de0384319862f108826702

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_bg.dll

Filesize
44KB

MD5
9d826d0a7a18b350c689db16e7993ca7

SHA1
6f7990aa99e64cc2a9587d7c8faac0398b185d32

SHA256
ea75f2c28a68c8e74a846c3a4f087fbfaf843838a6703fc0adf3b45aeb896f72

SHA512
2723859aba49d9fa5de60a313cc57b7ae7a94e0369afc44d651f7771f3792ffead1960f0186d1ed025022e60a8b7d9ede2086f628bedeb3b860473d9fd93cc7b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_bn.dll

Filesize
44KB

MD5
6822d5da309b04b279fd33614471037e

SHA1
7e31182c52665350e5ad65324691e49b60860352

SHA256
67845066e450a8216ad06e6d87ebf0caf6d3d459b96a8eef9205ed1a4ddf9890

SHA512
452bc292d8954f532a6749756b190496b1c0d7cbd9ff0672001ab354795d1939fb312ac4289e1ac84963747d4573be3423a30e7bdd6b10139b631cd839186659

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ca.dll

Filesize
44KB

MD5
8a4facf9909d351d6d5dbeab290e6fc0

SHA1
6b250679cb42193f4efa8de6dd6a9ea987a8a3fb

SHA256
5fd9be08f9c09b689bed11997675fd7fe7ebdf312651e9a9f593a0b2eaf6ee66

SHA512
25f994678e999c070c0c948a952bd7cd966320b9caff8548742e9a76a3e2cd5584c494429646ccfad16e8afe56a34de6aa3013eb10eeefeb4a2ab22632ccb408

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_cs.dll

Filesize
43KB

MD5
bccb97b791f97eeb5c5b2479dc9eae71

SHA1
55c5957f427544243edd835780f4ab956f3bec4a

SHA256
90d9a969ee506658c8b497604ec9e7240be7a068a365641568b03715b5c101fd

SHA512
13d38291a6d1fbe30f51eb80edd9a897338656d6c05323900c6655c494d07bedb18b92bd9491d00d673a3a37a3c4d9f1b26cd507784ee96caead4b62b5521e9e

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_da.dll

Filesize
43KB

MD5
0ec14b447f67ea34fca94e09a59f30bd

SHA1
2ee8d5c3fafb6cd7c120b11dde616bbe163ccd57

SHA256
e0e01af9dbd91ee3f48e8aa69f1db780f8196a55b71a23d6c639784a15d15a0b

SHA512
81af91fa77d554fe04099b555acd3f0343761b08e00db7b8e0f9c35351ecd6fa6efe917ad8eab56718f0ec71681bcbc6f7f807e3ee626094225c66fa562af2b1

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_de.dll

Filesize
45KB

MD5
2fa115487610bf9560834936088fe9e1

SHA1
cf2dd055dba6c227bfbfd268c61f95ef31fc7fbe

SHA256
e38af2b60642b8257e2ff4fae544581c60185de7de89d0451105ea236eb1dc63

SHA512
420136cd416310b1d4c5d4265eed6c8cca0ce463c15e77d957866650bd2ba2f0e7861b98be4c8a2615829f99a618391b2c306b36d5ebd77fde573b9a842a6333

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_el.dll

Filesize
44KB

MD5
65bebbd6ab2e00ca5ce014ed1a4b5b0a

SHA1
3b9febd9cb0837c5573bcd1e5a72be378ba1e272

SHA256
67472ed038e3056bf7b28b5d28ae277f3aeea2282ad67e6e62349e1fb0389ddb

SHA512
412725ba01f86ec09e5adf075613927e81b4280e8c211f4e2f233dbda148f98104231e15d6b3eea3bdc1275f219bbfa149a3e7c183a474d9bcd829b5f2d944a8

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_en-GB.dll

Filesize
42KB

MD5
ef2d2e1a7c432d6f38132cceb2b6a3a9

SHA1
cf38339b1bd310aa2dd74975d006d9a41602757e

SHA256
7ec7cfde90b81869762d82cf81e243377aacbdbb19c5a11070f67ae77b7c6a69

SHA512
d10a1a07a1f53767dcdcdfe8c8b0f7b1f0a91eb785b93413f1695ff8de3e485bda72202af3240e175201696c071e34a85fc18f39c128afd178deeb4ffbe307c3

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_en.dll

Filesize
42KB

MD5
21bc435bf30990f35ba8f8d5c00b9a03

SHA1
8dbc18b01f2abd81c76b9a0ddf293462038a472c

SHA256
f7397dab7d8d27a9474399402ab90b76835becd9a86405e0fb8f14e3a923c1df

SHA512
4efbc4b8869bdd3fdcf38897ede4482dee7167c7ea95aabe51ac55c381099a8f8a0d1a1110bb186776b2e034b8fa8d7413db0ec42ff51192c301f5a3acfbee2b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_es-419.dll

Filesize
43KB

MD5
df7fd7bc78640ae11821d2124dd1f7fd

SHA1
65eb5c1aa99a5c9aa88ebbbd9438d6dc2e59f406

SHA256
81257f5bb08a7d588f1113e3b59e07d0ba61aa119572dd9f3ddeb2f714562f23

SHA512
96cb12714df236956f51d26312384a7e0d674e9383dd25cf963b8568ab1ad264618f974356cd9d1f79fa00ea76e1b3ba155cf43ad97d4b30b9acf43c63407ab3

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_es.dll

Filesize
45KB

MD5
71850f29ed6290751f161c302904eabe

SHA1
8c461d33ea3b17d7c69e0cf2a90940bd59756ff4

SHA256
d12e72dea25966e0e0687b448b550dc9fff5071b6e141efa552c96aa07ad760c

SHA512
07c91120cf2377bd5ad2b686ed254a341fc60b7df129987674375c4bec6004081523ff49d278a57ea565f1546bfc999c62ab8f83bcb0cc383cad714c9ff0d1af

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_et.dll

Filesize
42KB

MD5
1d8b640af4cffda8fb3c26ecaceb4a57

SHA1
7b0d9476037a2ba0ee95b544bafa6603c89fd67d

SHA256
81749e6288950a5007d33548eb6bc8ab7ac4256729d297915f34202348695e72

SHA512
25874af092e9f8be9e8d06e97d8f4b0b07b8958e8cec0ebf540296d8b5d063c08fbdca0e3d4ab0ab1365e37eff8c96fc35b8803426da0409d6170d39681b7bec

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_fa.dll

Filesize
42KB

MD5
415f1e361afd780bbebe12d8e4dc76f4

SHA1
397d80fdf1d24c907f96276b4ed51af153aff6fb

SHA256
5454735ddd30f8d056a04992eb97061db085a181abb8d462cdd3d5a317943b54

SHA512
6a386e07a18bb58857dcfd2952bd59fd7940bce1cbd48e6453bbe17f2de568802e27c10ef4945fbc5a458e2ddc8b1517f56cc4ec10a6d5e957412d7fd15c0a13

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_fi.dll

Filesize
43KB

MD5
237e6d823e30837e275ea0c780125973

SHA1
59e83e89d76dcd7a89c556581b582c880e09f05a

SHA256
13f458e73809ee4448a70c7d08422adf2fc96a06aa2875982868da5f9213b1cd

SHA512
70d12bae37b10ba8ff964271ac137d2ad6e200c7dfd320430f9df7e888d12bc57118942fcabad4ffefbf6ed9e6b12f62367c100cf456c4ae2ba1035aa6e6c0af

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_fil.dll

Filesize
44KB

MD5
2ba87b413376189842776ce724b5c075

SHA1
b9fc8ffc49fe743ad51dfe6991179dfe34722283

SHA256
d3ef7cbd4ddf5f09b3c4346d52ef28d804996eff18698481902fb47c06f734a2

SHA512
f1deb4a98a1320d70f91f27552461f373b5844ed5674f76db624100ad17eac29a970bf27d9d606ba709acf2cca793d741a319770530235e76f6b41fcc6739bfd

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_fr.dll

Filesize
44KB

MD5
95e6ed18902c31509857581989465381

SHA1
c000cfc188ec18e86bea9b03bc51a147c4eda789

SHA256
0a18cf4478577cb81a6b24aeaa131d19ae197af98ef8049c743e1ff33309946f

SHA512
1835910899bb8e09c1ac66e65d47de76220309658103d8ed8b407b04e3b2f4d7833bf21b27e48a3f1e825bcfaff44319764389a208177780f1934301aea79ee4

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_gu.dll

Filesize
44KB

MD5
33d1722b94618e76c58fe9ba5c54f50e

SHA1
e4f666e04b1696fedabb5f4651fe09383ae172a5

SHA256
aaf0ee4c81a7129942aa735bf5bfb2fe7262de80a9abefffaef41a5b5fc79847

SHA512
1c6dbe34548fc5742a7600dbe7e864ea147f0d4cf012152811ddccf96d07c6977b9039699de93ee84caa1248dff3d3e39bc4ba42e78ea53cf1db38bc80b39602

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_hi.dll

Filesize
43KB

MD5
46c42f7e9409e90e1d2c53d0d7d88352

SHA1
b97556243965645f8709eb9321eb674b70297043

SHA256
ffaf925ce8d7f4cf23ac63f62b927086ba9aaa9e6defc42327d961e8a6c0ec15

SHA512
b4fadc6fe76dee73f395f9412846a388cae4fd236371098692e3a050e55e08baee2bf353e73ec1e9ceef86b5dae7e8625b4d62d4e4559f6e6b667be0623cd3a6

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_hr.dll

Filesize
43KB

MD5
639cbf16b79c0e372c445efae0d7604d

SHA1
c99b232d372870e364c0534b6d1c477af74cd952

SHA256
bac81b899111af07958cbabab871e891117c1080821aefd4471acbb0521f5cec

SHA512
2659e48e091d3f74324687333607a78988327171ddc5da15d6e680ee399465c90c6918adee9a17ee574f2df10588e184457b0265f2e7f282a148d72f07efd8ae

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_hu.dll

Filesize
43KB

MD5
237d26b3cec7748a945d7590533728e6

SHA1
474183aad21a7424841b8f283c86b155df7588fd

SHA256
457c59b4d119a28866d802f81466013267906f8dbc781ad66d17ff126d67ae9c

SHA512
ba2bcb1aca3886be5450e75ed7359db82d6695cfe9087be63dafd469658676582031b3306af07f4f7d647693d275ccab53b9fb8c0580fd656bb96e104be3e712

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_id.dll

Filesize
42KB

MD5
30cee8c37d302508525fa310e674f706

SHA1
bfd6a683d9614ffb7b0ce291181a71ccd24dd929

SHA256
644a5f48b3ae20082b3e1ad0c05597de2c05036b1239dfc120ca655940e4aa03

SHA512
945d5d8373193f624bd22d68f48172f7217701b2736616f13c14e12543e5c22003c87f98d174bc6b3e135ecfd64090d51050448c8d6bfce3ca2de5b590cfef90

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_is.dll

Filesize
42KB

MD5
912e0f6f48a1847ce5d8151bdadad6c8

SHA1
17c1a0c7b087a62942528b0bd86d3e910aed355a

SHA256
79017a0bab250f74b12f2dd9f1bfe74f194bc73791c02f6a75cb2d8c6c262e05

SHA512
1c0a7567d9257122131b9863ddba0c52bad0ee8b6575ae4ced6c1a50a4a52929838e1f6c6bbf3487a6dd80f6feaf90d653af28697a7171ca5b10e6220b496ae5

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_it.dll

Filesize
44KB

MD5
5c9af34a17c4edf81f2d8d65e99064f2

SHA1
d2af282db1bd72266f27a90671b34bb67a0ee139

SHA256
a7e6babbbb67f0df5f76ae0975271bed348134919b62ffa06791946aecb1ef98

SHA512
a18dd28eb29064fedca77c8927728dd2800510cfe76f0277c003c7875af34e596cfa207fe123a862fff49429359c20d319d0846fe0da2e1251d610d035987a1d

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_iw.dll

Filesize
40KB

MD5
daebf77393398b8b72656070bfe5e3f9

SHA1
391226b7a9a0c0b31b2bf75e111378a1498a5adb

SHA256
a1c26929c8f8a8b077abd73bfc58b439fd75679462e22dc897a5d920286634a4

SHA512
a2e84f64f9d39b2ba9c493b762936fccf6a027157b86e0f03b0f6c6d542bbaf498d6e1d3d230a938c143daa6af913033a95862850dfafd4ccdf4e3efc794d1e5

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ja.dll

Filesize
39KB

MD5
bd4fe0f2226d9cf17cd67721cde1e26c

SHA1
a98125a904dfdd11cf6b9acfe9cb703d9c1b08c6

SHA256
12c8382b24f49e4e2b9c848bc2f6427e5e978b25a21d13aa95b0a997d3ddfe7b

SHA512
4c895b38289e05aea88a3aa01b3c5a9b359ee2099517504288650731ea0028f3305518bbe2b342e86d083034c4961ac90f65137d34269b408bd03059770b9aed

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_kn.dll

Filesize
44KB

MD5
13e802d5e1ae5182deebd43aee5bd5e9

SHA1
77ff0370ba4215ec5da24a58318714bb5f92385f

SHA256
338593e0396d0315b7eb4d9197be19c15a65df94256f6c792893eb6526bb4a04

SHA512
11ba8453652c508af6af6da8f6c8a3326accfb356f6d61a026f0ff6d54ffe999aa99d3543193363ddc4715a192b622bdb8920f7ccf9043828d867abb2ccaf8f6

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ko.dll

Filesize
39KB

MD5
1a4fd3be49d159b6d2373d2764435ed6

SHA1
27f4958996195a4d6785ec3feb85c2a14b3d2a26

SHA256
d610a9a82a9d1fd25043a2eaea674a14539a32c3543db6ce52731617817e0178

SHA512
23619808aa5d59dffdfdbc2348cf88319c1948507f97e5b931bbe19addedd2f85893204aeb5d128f70984ec34b55127911ceb8fc702a1b145fcdf9efe17bf4c5

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_lt.dll

Filesize
42KB

MD5
0156ae91b0a0ae311c59adbfb103daa6

SHA1
1d56fc1d1961a86ac6373124e4972f2a7155f194

SHA256
fed64f508d00d46dfd8b9218862fe68b146455a201bfb3aa74ad82297a34af03

SHA512
baf8422f7515a45a8cc0d56a9fe57907b987474a57027994899c7b12a0c5b57fd951b525307373b6fe717e9085750774272f3aed999afb679242f133d2e42519

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_lv.dll

Filesize
43KB

MD5
9c72a2cf36c1093bfc10dc58d3f08703

SHA1
bf625c0449fff6532a8a7765ce960b056ecb08c9

SHA256
2c482951ac84bdb41186a238f3e30b8eb296f0ce6067e0538ab732aca359b405

SHA512
0a805b912f58a2bb2ad0b31f3c4f29026871e220219dfd08714ded8bba234f75af9ddafe4e0ba56543027472e09d9a10125cbd08b1b834a10b1f994d561296b8

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ml.dll

Filesize
46KB

MD5
80a5b607e4d28c0fe4f0be2f2cb01bc5

SHA1
940548ed6b683a479dd510611c3b7d3a34c4f8dc

SHA256
bbc943da451362f596884d2021f60388e7ed4019ef8f98af05d4000a860cc332

SHA512
a9e9acd4e77d21217a41220b8e259fc98aa038103350ab0354601d8502f9a29f8259a5a8c924fa24017a5579b6eee47c821af42c5732b5ff49c2cd43c0bc4632

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_mr.dll

Filesize
44KB

MD5
ffd1cd61dc2a7fb359b0e94875250c42

SHA1
415ec3882f121bf18d0e48dfe84bc7d73ccee537

SHA256
f117602b6814d0c5ae145a6a0763df77a83a43db1c29370ecbce59090cd65eb2

SHA512
564dfa96e2ebb889951b94c08d58197aa6392689e1b85feddb008f73d1f4e36cac36b5e9e430fa9d08735cb3179edd14231aee62b0c97022860e96c41fff8ac5

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_ms.dll

Filesize
42KB

MD5
3bb1b81112c345652ad6590afefd3695

SHA1
4606dffe224ae6764e3dd0a45709e8ca8f7f1bbd

SHA256
eb8d9cd1123db3b406ff28fd12565265b2adf07ea019f3670df93584598c57c4

SHA512
dd9f9587a832f603594869fdfd497691a9c7b5d2b74f8cfc2ebd5a72741f16b946e654d48e29568267059fda9410370ef11f50480b72583ea19a1ac1d8bd67e7

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_nl.dll

Filesize
44KB

MD5
b1cbeabba62f5f29191983f30411b9c0

SHA1
45557cfded0e0051a402c0aa5feb800eb2896315

SHA256
74e4ab0897c9e4b7d9388fcd7b93e5061c8feabe7e9005c1127f67a05cc71771

SHA512
c76c7e59cc9ebf40131022517c86edd2a9fbdc89305776d4b390d9150f91a63dd9c38619cf55af5a7f582aa1695635c9e39d875f6b50bd30e4bb7cbfd7babe61

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_no.dll

Filesize
43KB

MD5
c51e1e3406cec71bb487fc5e24d55741

SHA1
5ab1f706b37bf199eabb7ad5ce93e9e6fdb9cb0a

SHA256
da54cb728ca92492258e135c9e352bd4e19a1638d512ab86801237eb38600d10

SHA512
fe2cf593616e744d6f33acd3069276cb6f33f99e70fa0d9f4983649fa0ef1252b3134f22e1f8c986f38ffea8cf2a28cfd7e07d3b5658c40acc3f6de0bde90c2b

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_pl.dll

Filesize
43KB

MD5
3359e8a7fc4b1d05d90f789f0c3c98f9

SHA1
754fc96dcd16a8ce63ba2349369bb1690012e6c8

SHA256
05a88f863346adb315642c6f10c4d79bce866323c6fc3480ce05e5981e3efcc2

SHA512
b74e3412c05a331014e54f521aa8ebad582e65d3107044a16f469149f33023d6d5f1c46f5872525e3ae282e536594c2c4586ba4bc63f0914ff6c0e45aab1d277

Download Submit
C:\Program Files (x86)\BraveSoftware\Temp\GUMB0E2.tmp\goopdateres_pt-BR.dll

Filesize
43KB

MD5
0bf81d4b3545fa9cf1452c608aca6695

SHA1
03346a0107e8cb9f5819ec5f2bfaf5def64b2ce8

SHA256
2d5975f75a6354515273e9420bb81591fddbdab4fd7e8ce327288ed57ddf6407

SHA512
8a175cd81738527379e5332aa2efac898d3eef7944f20ec553e1870194f8cd6c91815e30c625cdfaf225c60555669ce183486d1cf537775699e8ad2ccd2c0c5d

Download Submit
C:\Program Files\BraveSoftware\Brave-Browser\Application\127.1.68.134\Installer\setup.exe

Filesize
3.5MB

MD5
cf2bea70ddacd36051163cbbe4a8a15f

SHA1
115ee30cdd276dbbcf724001b1d3aea002fcf8c0

SHA256
8fa63e7e97eb1cea5f2b35ec0c088a6bcecee45f018b7eb1f59c97890c8208cb

SHA512
e088b1c25e7252e1f01e35cd2fefb3495575e49de709cf40104d4286d73ec86fc0f196e4af86ba0d16a6fc98c972ba5cd678ad26416e4004eacfeddfa86b47bc

Download Submit
C:\Program Files\Crashpad\settings.dat

Filesize
40B

MD5
6ca8d3642a8ea3e8c1bbbf0da7477c11

SHA1
3259040fcacc8f8dbb00c01d205146261bed62eb

SHA256
1d8b922ad8d442e107236dffbc1ead42fc51d423aca1226a6f1160d270744716

SHA512
f62788d50933e714efc88c74d72ac9882ce8bc50b33a704fb403b9874679b54eec5b154b86b5854dbec5aa3704da043b5bfa7d1e5f4602b991a013bf37f7731b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1058930364\manifest.json

Filesize
76B

MD5
b5dabcb6b1744da449b7ee8f85258f7f

SHA1
6602da5eb5d1e64644f5427f210ce1e57544bfbd

SHA256
082775d5ea6bacc6bee71f31a68e966b4a7cf8d39adc681894b0e1f89bfbb47b

SHA512
f89296d1dd2f6acffc102c45e1d51516937f4c143eb642cdf6c79d35b121a1c712063f56fdb6636765882246fadacd67cae71131831346f7b5770952070d76a9

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1157290741\manifest.fingerprint

Filesize
64B

MD5
d2cd598345e297ce9186eb958ecb76a7

SHA1
1a7012caa88d9532b1627805208aaa8c382b2ebf

SHA256
a792cefededcd15732f45f5346b705c2c0a712b31a1bbd68135b7058e688c434

SHA512
1b5e25caa8764775a38dde2dea39088fcbbe25ebcd14c1e0eddf6c20b163af084f1d1db3b7aa51789444815ca90a0e29f223c64a5e1774ceaf32935904b2d9dc

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1157290741\resources.json

Filesize
1013KB

MD5
547e2671dfc8d3fae94d4a075820f412

SHA1
df6a291616a76cc7b88c253b6c424a0b518462a5

SHA256
f872b9b82ec2756c1e15123ef0e3fbc8a52aeca121d7e7cae070f735821a7c0f

SHA512
a55b7546b8ed6bbedc172bc59665722a78ecfef975556a11a36c1c0abfa62c0b31a32c3e87f02652310eb578611d2ca4d67c30110c106b254dbab69f48fa3f91

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1183373601\manifest.json

Filesize
108B

MD5
f226f2485b41a6989a809fd2cf6bdcbb

SHA1
07b6fd5dc38e7ade71c909e45f9298dc289a7b3f

SHA256
81d30ab6c7a621f03ad7107ab1c767f55419efc72248fe2c88bfda0ae76d4dbf

SHA512
641512ad0ceb0ea542c530965a68ea74acca75f2c62eae066e802765a1a8d21a7dd2a9294a8824aa52bab8c56b52e689533ac6448263d2e018c25588bd95d55c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1231779230\manifest.json

Filesize
557B

MD5
412910206d207525f02d0b00b23100d9

SHA1
2bc7e8055e24f070e2c79533037da1e2173f9bba

SHA256
344a0bb376d377cf84080e3c9c643afea137620e3e93a7a71972d53934f9a53c

SHA512
1ada6116e53dc3c1c893429292b1baf246afff6908d19bb9654da68693f407d1a9d47e3f78203fc892d973ae34d410ddff9870094a6f0ad83512c2efa0764004

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\Greaselion.json

Filesize
3KB

MD5
1b8b879387dd5db18b39805603e6cf68

SHA1
e499dbde8d14a86eaf769cb81423f9451dcdc7d3

SHA256
a0cab2be6fda93b0c8139b4492de98dd6220353af978968fabbd75010eda41a8

SHA512
02579779d7d4f0ebdec886049ea284fcb157c4b09920bc83b59c6e300676937143f0b2e863b5602c020325fc928d1abadf11914ac93c75b92157878afb5c7cf5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\clean-urls-permissions.json

Filesize
169B

MD5
5d882c878e15a24f369caa4785164655

SHA1
fd1d173ca01d1c7d83c4f31650bd5bc7a6f60c6c

SHA256
6930726386e89cf7e597d9907985af52ef8797d01d723c1d0ffb5f0263ec1a31

SHA512
7521233393b0989936807c8d51ea1aad486858fb7ea85cc2ab70cee45b0f508898592c1be9d6b7afa93ae9c5ddc77977725235abf760b27bc90ef54765d610e6

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\clean-urls.json

Filesize
15KB

MD5
61789b7de9a7b927b7117930a5a870d5

SHA1
7193d01faee2e397110af250238d45437771cbfe

SHA256
ab4ae5e191fa3b9bfa1bc631a9530e3a882b8d3d10adc0a00364b277837e19e1

SHA512
cd09fd3988e476696b0d82977a814ef494e01072f7a5c071baf4d5f36c8e3269e0da6b302356a9527e54a3c3dbabf51e8768b9941fe8985a96afd571c6d0b7e0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\debounce.json

Filesize
10KB

MD5
4b3d62a464431840d659a61fc1535c68

SHA1
42b38dd037fdc0f9cd10912f9104d6b726296b01

SHA256
4d5c93957ef815283c0bf8ffcfaefcc2a28a6666276ccea04a3b91d333f1d77f

SHA512
261218b6b7e2945cc67529e92f2f7d16859e8bfc3ca4b817e2edf77473200fe30e566ecce3c0bbd171a839c4f6502164820219404745ffbdc4b5c65d7b4f448d

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\https-upgrade-exceptions-list.txt

Filesize
86KB

MD5
b8ebe8c70e14e1bdff4bf04cee9055a4

SHA1
6a8eeeb539eb5f630091a971585bc77731c24b12

SHA256
a9c464c1aa17ec9958141c020c30badddd4801e15b9c0a0d430859df0ad1955e

SHA512
9240b1d7ae17b6d20cb21a466335471d3b62ee2866e6d07dc62c1a288def513cedb5368891e4c8beecd135140a221bf8a16e048cced31b29fff9f8d0d40c7266

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\localhost-permission-allow-list.txt

Filesize
579B

MD5
1a430435553535dc29205eaf6706e212

SHA1
f1846b5173bd77af3dab7570a644ef46ea198d1d

SHA256
8562c50eaf54c070cf470dc5e1594ee5b2e8fcfb8b3de7456882e5de118ca241

SHA512
98c3f242f180be7a4059a4404ab9acffc10c3dac765da203bbdc6ea5444eba8b8482e54d434adc5ffe10e703d35b4e41caa1c8add475ffbc6cb8899742b37be3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\request-otr.json

Filesize
617B

MD5
89fad9eb4e065b4d0080e4b846240aff

SHA1
b2f643818a6663a79ccc6ed77f65be657b3e3412

SHA256
e3a7bfe4f7019b5716f3b7717470481970485b0fc530106eba2b547eb17f9498

SHA512
6945e0be09f6686d8243b655c7cccdfc18a38de05202351c0e5318ace04432454e57d8717dfec322c91ff6463da75c872227a4af49baef08e204acc3028b88c5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\github\githubAutoContribution.bundle.js

Filesize
1KB

MD5
79d70d18400fd4f89e223370e7fbb79f

SHA1
c8d794190a8c361e45a73b0519f146756ae056cc

SHA256
d549d2cbf08f4f8e6f7dc396d20b785aed50bf81767d4e296d5e6c6832d06a77

SHA512
6c58e1c8a851876a0c93c2e0f25db9ad6fd5de8c8fe0e39cec7e8039622ee819212e3eb6fc56e37bb99782f32885f3df3a962e5b9ff6fc1f1fe7aed99a1f0361

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\github\githubBase.bundle.js

Filesize
2KB

MD5
e7cb1f457c1972065f9a5a5821ed022e

SHA1
e8d135731d52cee0975327c99d1a6b745937c36c

SHA256
a00d426c743f719cd74ad64441a8f7fdabbea566893c29b756754db91f05355a

SHA512
de79db36ae1e042121cc440b21a5f175b7a679192df11883f304debfe3c1256955e13724d47ee3cc874e63fdc9a0b50d4b57f16d8d127d8106dbd0dd73cb5dce

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\reddit\redditAutoContribution.bundle.js

Filesize
1KB

MD5
31978ca44fed5bd2d42935211a03c88d

SHA1
bf64573ccb242746f632f5dae6f3331b0969cb65

SHA256
2e3d1b816cbf935f901beb92511761fbd3823bda9ab6ed81dfe7536741ffa277

SHA512
9982d26b235fd0351468edaf91e0ebcacd5b32bc8bea8c83deeef6c9ba559d7269411d5bcdbcf5be841d8410c10d3f7e630c9a28e761e0c0d4989dc246bc9430

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\reddit\redditBase.bundle.js

Filesize
3KB

MD5
0e7d831110979936c383c74b060388af

SHA1
e9f8511b9862cfbbc27452a9463a78b44901de4a

SHA256
d046760e839f120547d179a8eb380cdfd07db89ed256d3b95bc975161d075ea1

SHA512
8a449257a396b0df25a19211cca28162dc12e5a22144b48996d09111181340d28b79c49610a7fcdc702b5571b0d4ad21efec890d39bf0d678f4842b1d93e629a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\twitch\twitchAutoContribution.bundle.js

Filesize
2KB

MD5
7e878965a219be342a4e081dcb31f8e9

SHA1
932d68fec9c13654d950589d1d669cf3a6b79f4f

SHA256
675c6b7fd6b7d5890a1224b49bab3dc301d3f9f331d8e8875782fc38fb0bd96b

SHA512
95e610266be7c5f83ebbe8b0125d7a63552336ebd7a3977da26b49b3e4123544c007a815584db8c0ae5f9c4c90bcef3401327a44fb0478c89d7284f5c3f629db

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\twitch\twitchBase.bundle.js

Filesize
2KB

MD5
4dff02b3222f25ae7138d884fefe8e8d

SHA1
58870f0e2511a66b961ee893b332c1241d235ea6

SHA256
0a21a4e6173432a274ca9b9ed8c13a4845675f20933a44a1d053c0d12a633447

SHA512
0d031ed3c86c8268dd3c01219b3690948f43dbf87870db2af12ab9c60b02b1c8212109848d358a5870a17b8d1d2599f71918690fa0e34aa4194f210e326485b8

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\twitter\twitterAutoContribution.bundle.js

Filesize
1KB

MD5
3cd612243371db2785a924187305e920

SHA1
4f4230fa493c74215bc38e32d6997cfc95ade2ee

SHA256
4b484fa368ceb0cffce7f1cc6219ae62b2182e1623e1fcf737b9232778b7d56c

SHA512
eb65d66f44e999da5c2a02ae972bfc1e891bf5028f97f537b8a219fb1d56d958567a2f143ec2e3574e014f9bfcbf9ff14270348cdaf300f075f37b95f966460f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\twitter\twitterBase.bundle.js

Filesize
4KB

MD5
a51665c6845913fa91a8cab79856f5e3

SHA1
bf2cb19406ad712c01799222ca1a98473b1430e1

SHA256
a4a6c8417714562e30af022a99cabcc3b53315dbdecd053475b141d94e4d687f

SHA512
e18f7fc6db3e30f78e963aa00246791642ae57f761869871839b67a87cba9e00e7b3f64674cee409544b5bd09c6f0d7ac9ef3c8195e49a2a483caf7a758c3241

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\vimeo\vimeoAutoContribution.bundle.js

Filesize
3KB

MD5
f7ba8a29a38c67b1cb7793867568bc88

SHA1
87d0be9eb6a19a314c8e816d5fbf0332c04433d2

SHA256
e280fc5b5a79040eec3574a64cd28a408540e67fb1fbb7b84ac9c463f8e70636

SHA512
a975d765135185a6e75157c0d5ceff1b3aee660e74d82bf2c3a6189392deadf43c5bfdd1de473431992f984171e77d3a2ccb60c30e4754d4a70385efaa55cbc3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\vimeo\vimeoBase.bundle.js

Filesize
4KB

MD5
bdf49604c55dcc6e0af6281c83158f68

SHA1
1352d66ba7ba76efc4f7e4bd9e8d79cf1142b275

SHA256
4978086aca3e6ebf5bdc84494f31a388ce7955fe8bfc043d75cc8306aeb437bb

SHA512
8c3c7d69ed8aa2177bd3e56b85e1cf51e98ab97a551df2e11d9b2fb1907503e5ccace21f895d5a61189d6c351ebd828a779e64cef5114c18905d19a1964ab648

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\youtube\youtubeAutoContribution.bundle.js

Filesize
5KB

MD5
34977f386eb709a4487fc2fcfd7fc72d

SHA1
507685cd598c3a9bdb74e569b42982c01ba0bb25

SHA256
8c8cce1b410973c994ca10dc483dbb3a128b3aa8aa33ce0eff251ff139d57109

SHA512
da76c48ad0688b747f58537797aff8bec3fe8d26d8b1781935ae1f8291e7136f925bfb9907ad91e624be4e5e20663ad9c249028ebf7655116e126a6510e7067b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_rewards\publisher\youtube\youtubeBase.bundle.js

Filesize
6KB

MD5
31c947a91169986cfa3558f1ef9faec9

SHA1
50d23ff4bb00edce79a4160ede1545c2c87b5a08

SHA256
90f326796832682ebb6533eec08ea34d29e8a864f949e767e3c047b225189a94

SHA512
22f66c131abaa03d3a3aba5f1b03a9f0bc355e528468d9740262218e855c4219e891cfef463e4ab5e4e6559f6c49301fe2a70e8b342f5d3eb9c577ed262bce63

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\scripts\brave_talk\confabs\oneOnOneMeetings.bundle.js

Filesize
99B

MD5
bbd68eed081f75e21822ac082cfb1fa4

SHA1
3406d166b75b2a7877fc354f96d1d52056f93a4a

SHA256
2524a523604ec7256c2d351e14e8472e0483fe41c3421bff8181eed67ba8c2fd

SHA512
84dc0b8fc3d7d871ec9b4175715ec08c4ceb3edb6c25ecb630feb74558dd266d53bb47f609db3acdf53050b110eb6e03c403db285d59089b16f75c025f432ab8

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\1\webcompat-exceptions.json

Filesize
1KB

MD5
e419212994a70239fd43106d8de0f68b

SHA1
228c999ab715dfc004af5fc05d6c4b14cc356786

SHA256
7dc8d25b5a45b29313fc0ec640954a6231ba43566e16fef8dcdc7fcdf8d89892

SHA512
333b7ae4e954ecff0fa19465618a6c26b3470919a19d77bbc9042b1a60eecc928bcad33e37e6c8d61b2531fe511750b61b04de6e3c9ac717d57cc03bcfb154c6

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1239725686\manifest.fingerprint

Filesize
64B

MD5
c473040340e376e84566654d771c33fe

SHA1
250ec4ef7ec8b868393aec49bb0915aefe384329

SHA256
cfa2105b31cd327e6656e5f04143b1585665baf4587602d0b1ce3cede33fb37b

SHA512
9de684b15da5d84622c19f3aab0c73b28144b3b3c533cb39be53a8d338ac8efb582464429c6e7d3e6d1bf91202c62590c2acaba8f30cf247caa258210b1dcee3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1329719662\_metadata\verified_contents.json

Filesize
1KB

MD5
4694baf425b0900f7eb877c2e40cedd0

SHA1
3433e30157f03e4be9f4684d1caa051a6fb7ef9a

SHA256
3e593c0fbff809533f1618b4782f1883232760498685bc746b609fe5d5d2d33d

SHA512
500c4f076cce1fbb0e9504712a236aabe2545950c3450521f6e73a3b30934cae8d9eb1e35def408ff0dddd0031af7be6197a101c0d71f551340529974ef53600

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1329719662\download_file_types.pb

Filesize
7KB

MD5
b486a2d22e22545b4d7ce820c38245ca

SHA1
3be7e3d4e07c581b9638a73a062809fb1f535ca8

SHA256
2f490c4adc51b58604c99546925f091dbda66ce6e54a0ea5b75e675d1fbe019c

SHA512
5c47112085670e0726401d436984accf4ab21c23fd785f0031997b786238618a163cd194749b8f625c3ab18d211f31711cc904c3164671bbc9347550c3b72ace

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1329719662\manifest.fingerprint

Filesize
66B

MD5
2d2821924dca2175310c5327df6f43ab

SHA1
184fc6d05c9976e6ad04f29b9a079258e70622df

SHA256
7aebdba4c92933a450f9fd66dd4bc7829cec5013d9bb662ce12f32170d066e28

SHA512
14af533c33136531da49da565f4ab12c25a8983cf4e059f8517162a0eeae431aa0a49057d5be044bbb26468a25d3c5f38e9020db2af59ee56f16b6c5312dc13e

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-as.hyb

Filesize
703B

MD5
8961fdd3db036dd43002659a4e4a7365

SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321

SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-hi.hyb

Filesize
687B

MD5
0807cf29fc4c5d7d87c1689eb2e0baaa

SHA1
d0914fb069469d47a36d339ca70164253fccf022

SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\hyph-nb.hyb

Filesize
141KB

MD5
677edd1a17d50f0bd11783f58725d0e7

SHA1
98fedc5862c78f3b03daed1ff9efbe5e31c205ee

SHA256
c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

SHA512
c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1407292719\manifest.json

Filesize
82B

MD5
2617c38bed67a4190fc499142b6f2867

SHA1
a37f0251cd6be0a6983d9a04193b773f86d31da1

SHA256
d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

SHA512
b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1502572647\manifest.json

Filesize
72B

MD5
b242c7366b864357e4b4a78a2e92da63

SHA1
fe90d44f5768e0b81e990b0f9f5c319e5b6419fe

SHA256
20ae41f7b0c29118b0a6c5618e06fd8e8e4a82d73dae7b23b8363073c6fec384

SHA512
a24112b6ee189ca094a907dfde915956414fe45de63cd74396c5ac313e0d5333cd25dae15af600458aa9fbcb971d5724d6c72f8639255a72642878b0560a252d

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\1a55a568-51c8-442e-b23e-f1a4d11d400a.jpg

Filesize
349KB

MD5
6aca9f7c696a4f522cb873f371f4ab64

SHA1
4b56ab915f439626b8f05b7a99e8c7669a52e4a1

SHA256
91ab97bc903868883cc7a0634efcf025ac184af5889601493f1498ce2d062648

SHA512
4bcbd1ca80bf1a1cbb19ef866457c6ac97b49161c9fcb8944ae8cc5c34eb684518b1b7ea715798f26e1868285fcf94206deb80f5c77b543329d9a5c467da6a47

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\5ba9014d-2442-4ef9-b5fa-cab74a87f6ee.png

Filesize
37KB

MD5
9adcfd1327119ca5f0c07f90f91d98dc

SHA1
bce1438045d9024073afa177d72826caf64d30d4

SHA256
4ef02a93c03f41e530edac24ffec1022228bbea1454707b7969ec7dd1949ea8e

SHA512
1e3890418dcb751dcdbcf679ee77bc6f97b68df1d7ae7d95ff696eb6b990e53253c4b88a51c4379fb7b0cb2f51fb2d24af62f1c399add8db2a7b3e79fb5cb538

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\5f66d745-413d-432e-8ae8-13488fa1933a.png

Filesize
36KB

MD5
84313d7a120a25c70073cbb49cbad225

SHA1
1253ce9ccb765298ef5db312aaeafe9f761459ab

SHA256
738037a36a6ae6fb48eaf4961064e74828d9b08ca280fbb7c84ed484c3f68609

SHA512
5a9d771874204eec87c9984ee6f7617a0d5a7cf8cbd7bc637f46431e4c4b08ae9e00def134fff19b86ecae4932e328a125e0635b7cfb15b1aa2db239ae4cab00

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\77ff4830-6bad-438e-8f60-69c57c55bdc5.jpg

Filesize
368KB

MD5
472c0c95e748a10799f77c59dc113aa6

SHA1
ab1ac9e6c12185dd90b64e4215b723cf05a4d647

SHA256
1424cce965d6a59b59b94d5767da33d66b6a70ca4f3bc07392713854920a8c69

SHA512
d26283520eff68b8fb89ae1ccb3f983941a9db63fa842c24e35a3fb0b176866ef61ef77b940df9f241ab3efa3518cabb327fdfb67494d5da4ed8280caa78ae2a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\baabe0e2-0be0-490f-8f0c-e33219b4264f.jpg

Filesize
314KB

MD5
60b28aaf1661c134196de1053d55ecd5

SHA1
b7ac20ac13d82b3dd2c7e01e7cbe518be5f1dcc4

SHA256
e9684a85f833838dfe0e2a35364baa24e3ddfcef1daa90a1b63835b4842490fa

SHA512
524d8c5f5a34ea5352a314d2147c1082bb1390452f04c21432850e561cc6ae0dcd00d9adbea3d898a925ae2b76075a35756cbd4e2e949932b8e2506ff16fde29

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\ed79ac8a-85e0-4176-bebc-432c2a349b15.png

Filesize
35KB

MD5
01e2bcd66a9287ff1dbed7ddc356d1ca

SHA1
e927be25c6c04e2fda9e2cca74d6caba793a79f7

SHA256
d8795b4b02981026c0a1f9e6266071ca3c28b5ee0b955f8ba5a1c1b9e68815ab

SHA512
4705b0fea342808615fdb8e87dec863ecf77f3dc9e5f648e105de394c979cbe1cf296991267ce0cbe442ea71021f0e3e57ee53909aff23140513fcd300e3a607

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\manifest.fingerprint

Filesize
64B

MD5
4f8f566720954922c5eebe096df284b6

SHA1
42372f1dde9a5c3769470a7aceb845aeaa6e74ea

SHA256
0c7036aa30c457f5049117eda0f84788dd7f1b392871d178d0112775b3d09a9b

SHA512
16ea15c0a7980eac5bac6f6641a6c754e1882ebd16903b3f4e55dce2fb9487ee195032bd186fe31fe85685a99454fa746f90bba3f1bee929168c30b236fe79fe

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1653481483\photo.json

Filesize
1KB

MD5
9245e955e668d403b6b975210b121d30

SHA1
99061a61a2e52bd6b426dbb5ff4514e713e584d3

SHA256
a5de8969403c2e1ee623f0d0466276993a939839425850ee31edf1a920a145f5

SHA512
f7ae54b8f50ca8cd4d62ef41ec3c8495f3f76a1632b36425045333ad47cc18e3ca208cc07ad46d9467188e6e7c37ae1bd409136784cd2f764cada64608cc46c5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1725704319\manifest.json

Filesize
73B

MD5
f5ad66e2ff38c237003d73f45533fb9d

SHA1
cfc73dd136ffbd33d1bc0c486510c4ad062cdbd9

SHA256
917adecce521b99c91d0a800553b935e927ea4e57ed02f69c46df019e5326629

SHA512
4d6951bc38ae18dc50765ab288f3b8bd7089bcd2cef0305984fec155da74cdd6afc71a6a6a6ef447a50bc260b3cea2de5b1ea1cff4a98dccdb6a5c486c865e62

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Alyssa-Skala_x1280.jpg

Filesize
308KB

MD5
2bd8dda959c6b3e68379301df36dfcfc

SHA1
420fd6daf63e4fc896a8d5cf7320fcfa8f3bb7f4

SHA256
225b36e7a6f884fd3dd7206851c35b27a2f882a3d8bd9217799165b357bc58be

SHA512
b0cdd950dd2e8af198a5aa053b3059493032b609d8207939045c505085463c7c2fdbd0fcbd0655f841f89b05d04b60618ff1679586a42a0e38329d72ad8f4e3b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Aurora-Tennant_x1140.jpg

Filesize
325KB

MD5
566a8b7bb0e266b8ffc3d9dffb617f62

SHA1
6c95c40237712795cb6571898bfe96601d954b0f

SHA256
b007b325f8a03d76a69ffee0adacc2cf90ae43acd9ac77629f98dce736bbe755

SHA512
8e20e235d327d76fd822b58400029156790536a5865ba4235c508c35a82439d3260dfe2dc82defac62d98a2d4dfbd8f5b42f258a98540a53197fa0d02e3322c7

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Ben-McCarty_x1280.jpg

Filesize
443KB

MD5
e6b37deb624a120fc410196d24243722

SHA1
79a3854b737a1014e8d241be85bc6365135cb868

SHA256
e13f6758811d017e9ee974a98e4c1f69602628544a94dd04787154912c7bb824

SHA512
1c52962d60f689c810525e1ff363e65af3d1760be014bdbb0f5bb710c4041a5bf0ffec3b3d91213d607a4fdfa6aba9f66a00d37405bd4c05a380449347c52e54

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Erin-Gottschalk_v2_x1295.jpg

Filesize
392KB

MD5
f2cec169eea511366a712da450900bf5

SHA1
db3a644af00ed772d55f5542428e1d03b1986690

SHA256
19a225d41685d2a655eb6864f967571818dbe6d63fc314bb8d616950325eb9db

SHA512
ee3d1bedd03d95c19a62bb4a08de1d7a0cf94b07bad12a8e6bf9d43b56a6212181bccca7752b62e896b52b4b873f579d8261bdf7aa55602d78efa1f79dcf13f6

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_John-Ng_x1280.jpg

Filesize
418KB

MD5
3d133899b87ae6e9516b7c2a563b1694

SHA1
1dcf87d50a46dbebf271e67a75d27716f0d7daa7

SHA256
425257fe0d391eda8c851cb06bf8e929d6078b23c911ccb643623a21e1a26c7f

SHA512
cf537d86c84f7c9abbe9f8d212765af35aee51a9ee9f96a2c1ce39f031ab797891b76b9c828b1392673344b88cf9fc536b77345a360c41bfadf2c027ca257cd9

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Luke-Berrigan_x1280.jpg

Filesize
594KB

MD5
566f8012f4317b1e121a7e045eab38f9

SHA1
95e8970b7fb602dd8db2eab3c1401bbc0b9ebd81

SHA256
5ddffbce5adaf0a40f9c5cd3db4d97a2fef590fda267aef6a250003881f12d69

SHA512
e7105f266731f9ad426d87088c077cc8ac4aaf977060aa955927aa540947f36291e9cd2fbd2202ec75e00d19c30308d52fd399d7643a6de70970622bc53188e6

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\StudentNTP_Sam-Richter_x0825_WINNER.jpg

Filesize
544KB

MD5
f66e5fa138432af6b40849484545b809

SHA1
25942df987649a1bddda636686064d29dca799a6

SHA256
65b5f21ccdcbdb23f39baf036ae5eb3999f3e88e241bc57a3a4d1bf0fbfda605

SHA512
29a512f0f028b2c4e53f492f6a4fe27cc88b547334466341b08b70724b16e7eaaf70cb0308e251f404aa6b80db972a553438afc3894440e1b1ed0962ec7a5319

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\aleks-eva-1.jpg

Filesize
787KB

MD5
7fcc62c80e578553b99fbd3f4c6d1f44

SHA1
5f97298963c325576512bef666d766df680817e2

SHA256
d5533ac2cf1391c227e8fdd4e28e4ca920b3e1c3f221439aac602cca427b54b9

SHA512
4891a7e4da000c4ba3f36b4c569f3ef4d16b44014f9bd1e4fffd66636a4d03085137c124528840a6ca4230887634a26f965174a476bce4ff5c78acfb3515e81e

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\aleks-eva-3.jpg

Filesize
377KB

MD5
2311046b4cece0a48ab0ddd223bbfe5f

SHA1
f0b70bca5d79e94ada3e443ece8192d9c65e0aee

SHA256
0986a12f6995f3821fbaa4b283033b1c5979d091c3985e275b4318e036a47797

SHA512
810253d4c616b45d4f585d5cd1f11587ea3419d81d3e4ca339b9336390e3ee42b9df67b7d8a148677ca58c788be57fa163e97546e0d0e4efc840b2ce55fdcb53

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\carla-gomez-1.jpg

Filesize
331KB

MD5
a5e12b2c32e875a1f6e926878d049c50

SHA1
0da3257d147f45d39c17022af4788abfb4e0cfc9

SHA256
2080566d1e80dbe51bb743c876f8f90c29b40ff0f1857a8f163867aa4e6f4d35

SHA512
108ebc7468ae1c0f545bb55f50182a66ec02fd410220124efe4ecb1d656ff7d10cee24252f03ec32cefb2707c84ffb73750d8a1d4c6ca630626d55c8adf27a7a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\eric-patterson-1.jpg

Filesize
711KB

MD5
fdfdbebb4781b525090b9e97b90c5983

SHA1
593ee936f7e3cc8f126c46a5d27bb89b8fd827d2

SHA256
c48b1ee4b010fdb19332161b4fa980048252f3a58fca9a84abfda1f3d235683c

SHA512
47b07711043ebceee0d079e01b7f41bb256d8eb827bb9257cc1c21fcb954c175d65403c2cdb038b6474b967959d0b15c8b8292da34f16d13a36944266a10c66b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\eric-patterson-2.jpg

Filesize
355KB

MD5
99a5443a82fa5e803a6a313988dcaace

SHA1
3cf19b3b8dd2877fd9324aa677666bdacf70891d

SHA256
13e79b0a91277213a3451fc3c91730deda690ea2c4161502d08a399d1838c01a

SHA512
939a645636eae3de887ad363c8dff29e90ea31e47091757c9ffd4cec6c29a98032ed28d8f268cc44d5652d0eaa0dcfe4ba6fedd6835868bd0ad5dfe8f227ffd7

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\gordon-ross-1.jpg

Filesize
347KB

MD5
9ef0eff023d2b1f9e62af6f3a37eb1c7

SHA1
6147a6172370cb0c27650f8ce004804abc30cb6d

SHA256
dc6fbdb1275f08923b156be39832737f1036a895fc97be927b3c701344a06647

SHA512
5af9363b497a6bcfb2ce21195258349515aec34c14a93b8243f3bb2e75eb86ba07c9261512d4b3b17f9fc8a0ea5bbe049f2959bb388643fd3d2b998b4b20ac5f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\lori-jean.jpg

Filesize
332KB

MD5
bf41b19765780298d91a14cf865a58bf

SHA1
e4acc7f82bc5d35cea3e3850170244a87fcb9b1a

SHA256
a9dde345a5a5ad76869d5fbf6989272bee0c292691203f975229598e0a95d7e9

SHA512
dad6206db91786507f17f2288e8faac335dc71fadd33a00991089b4f3af05e3156f07966af4390386ac0ce22533e15ccf539a9d27be8344939c469ff513c09ab

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\manifest.fingerprint

Filesize
64B

MD5
0a23bda4bdb74bb1d1b7e08640264d84

SHA1
01683e4138eb95acb05c589d361b67fed4a1061b

SHA256
01d600ccbc2c7b8e61dcae133b2580ace36d963600f128be40e395299b2c971e

SHA512
d4f53db2aed8e83e5950f523a6813bac121b33a008f580cf395d436c42deeed6cd569d6487a992c4bc685f5f9a102f9c88d1db628ec4ff43514cba2627f3185b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\minkyeong-shin.jpg

Filesize
348KB

MD5
2359f2f17131f13b6fe6255ff0041d9a

SHA1
a70dd6e6a1f05478388e90683e74aed453da74a4

SHA256
e43a3cc5d510d2556a92778aaadf8079c726e6c3a55919073c96f0a60e0b9fc6

SHA512
616b4d9f2d9b755815628ff6214a1d099ebd248ff99205467e3eb8e98d752782310df30271f0ea6c2ebc344f51a9e68108d5f10923e2eeb53729d62c98c005d4

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\mohammad-usaid-abbasi.jpg

Filesize
764KB

MD5
47aaa5579abcd381b18256bc134016ed

SHA1
c50c7db2b198004dabd8ac6596492dbcfc5a0c66

SHA256
8321d66bde0272a1b5a4fdb58b24c607ec128bc0ade0317c92393c58d66ff079

SHA512
2e3af5f0ea2daf3ec35af9a395fffea190671fe0fadfd089b0d11f3725cb7269656e4f09e34715c0c79a10420e108bc4bce8c8831ea3e8aec168374554e2211d

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\nabil-george.jpg

Filesize
576KB

MD5
8ba58fdcd2a74b807602db8068941512

SHA1
4f91e23b5dfb593d605102b10a79d57cb051ef37

SHA256
2ff4d442da596dd7f0ff6800dd1a8d0e9f86f46059d581c9b141601d704ac6e3

SHA512
da57183ca6d71d6fc658ad8cb2c5877b960412ff6a293dda1f16c596269e7d8064bab4b111cfdf03f61b7feaadfe83f5511c66aad96070f5ba6b0b3546dbadec

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\nadeem-choudhary-1.jpg

Filesize
496KB

MD5
e6367edcf28b7effea8d8327c1442872

SHA1
654a38dae9ccb14366d6e520ba70660bd5a87124

SHA256
6de45ebdd15a98e46027c465cd9f6ea479c71f7b6af10b465cd09d834b9eb35f

SHA512
6b3646a6598a42759cfa57c0c17fc76bd609cad085918ccb11537c7bba7c757ec493feb31ea1f6e03daf3969e6324df2b92755d0bc6f1e9e88395b093d1722fa

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\nadeem-choudhary-2.jpg

Filesize
487KB

MD5
78ef14775fa197bda298d28a17101151

SHA1
29edc1fae79a7c2e2eb35f88088bdf16f78033b4

SHA256
3f0071b5b20adc84cf965e7ae51b500658af979c41b158955e6f35ff57fec9be

SHA512
4da42002208e7e3495581e3b28e1290db12c46a5ef5a0a7c6186589adeea6bfba0f5d7948747ac8e20999b502164b1ceb4d5d6c3e59995312ab7108099507870

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\photo.json

Filesize
6KB

MD5
9e7961113273ff27fc0364e1ad5c28a6

SHA1
76d8d1eea3a4f2423d4e4602dd7b254c919e52c8

SHA256
b9d166565aed3ab30c83d2126d636f48a6e502f65f6b09259053fccbcdc48ea7

SHA512
c9de055cabcbb23d24d38c0be70489a1f744c0724fc7da83bb55786cfac60fbe64916bcfaf679f8a9f0fc188f8c51f629816f1a6318aa46fbffc068e4a71fbf2

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\sean-o-riordan.jpg

Filesize
469KB

MD5
e84081df63a8b6b8b4f06a7c0adfaba6

SHA1
760bc8a24d4f0a2758a8efbb087875c9cf480f3f

SHA256
bf242c8d7517006338dadbe3850cddc80b5341ff4cf17d4002ee4ae5a7dcca85

SHA512
04b0bc5efa9bdbdeb3d1022a0670109f3820a043dd3d0f7c1b1e6a5b5c910663e44eff8b4101d74101fbb5572a07005dbf8c3ae32e030e1589b04f1d21814d2f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\spencer-moore-1.jpg

Filesize
952KB

MD5
f0da558f7b2fcfe9264d8dbd4e381bf8

SHA1
036671fc09d5874c10ef55778e5559ce1e7f2ce0

SHA256
65d09ad3ce9842817de49a3dc63e01cb4037260b45992c69128435c3075df64b

SHA512
00dfdc452303eff105acd1392379118e4aec7a79673f2febeb386d5757b0476e4009514ca8d0b5638e67f2440a16b1a596d42782d1dbe223deae6821abcf7602

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\spencer-moore-2.jpg

Filesize
350KB

MD5
bf1668b988c4f19b9dfaecffa9453a57

SHA1
4efde82288f6d58e69084ec8571a3d838887d13a

SHA256
6da1a6584625f1cf9d7dc72aed31e0f880574cdae1ec7b3997d3a61776b9dcd9

SHA512
fe63253685f2b8c392920da8eb0a44637e964a861fa33c0377d7dc7fe78f96a50062c08fea477f5c57027eab3b819e5acbfcb66f7d789191e2398939648e68da

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\spencer-moore-3.jpg

Filesize
804KB

MD5
62ff7ad2f728a872ccf1ca26930de89b

SHA1
bb3b680e1ba33728ea49bbbd8fa75c8a99bcba1f

SHA256
93db22b59b7969f82d86013dcd9f76fe0424dcbfc9d4993a4f353497ff0f945d

SHA512
e28a8e9b3bbe6f21cd95e035a50531809ea5d4f3b67186cc70f50d35712541887463834ad8d30df23b36a73eb13394bd8a23d27fca3a15a427f0424ca18266a0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\spencer-moore-4.jpg

Filesize
310KB

MD5
a882cdfb2a53123f3d74488ba13baf7c

SHA1
e52240bc0aae406d378ef6221b64ad15aa7c6d69

SHA256
7c0fd8d3466da815b4e5fabe6df3f34bbb66a13553cbdf512ee1ef24a5e9bb66

SHA512
59f2f53d9ba365bf2a28b01c8ec2f6f18f59ffc740461f572290034bdfbfe418eea12a771eb1c7734065e3567a2bcd4a21544f48cbc7a5592c18f2f206f2aa51

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1864353083\zoltan-malovanyi.jpg

Filesize
964KB

MD5
b931c3c50e57703e9cb2b8adb6b98608

SHA1
5a96c8be77851eb1154020bdd0c4fcc11909ab31

SHA256
fe2d4172c964b9f3311ab5fbbafa2191451a040bfa661c23948d64bf6adbd231

SHA512
63d45ca1ae159f78a8281ff18fadb5b4d7fc0c126bc9b886e4d13b652b09f37fac1a32b796860e44436ec1ca8f512c16a9595618c6402732d74be6b29c347a17

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_1921434579\manifest.json

Filesize
533B

MD5
297a9945e57c8dbb0a8a37686ae8f9a3

SHA1
326eec5df2b7afaa6f8c9e023c68c149fb1e680e

SHA256
6fbc033719a533a6863ceb742335aa2de7b6bb3b8c9cab55579ad26134e20673

SHA512
269a7dcd03e71dd3e219e54d00145d5585b246ad8e3092af4a75900dce2f0ce10ca682192f4127a634877e511e86109bc68f8b44b6ef1dc62fe1fcf469bdb323

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_201187495\manifest.json

Filesize
562B

MD5
f9184554c31456979a7a52f68c7da550

SHA1
806e216ff34843d492074951bf64209443397c56

SHA256
4b5e0d7105fffe68e6e0375dbc5361521cd59a9bfd8c6107b8c2e2916bbb500b

SHA512
56f7d931b511b66aa56fab51cb31bd2e1ece2179162907b1f5ec716c2a06b7cf84da7837d6aed8337b1c90df05c4f4c0049e843b906e47b1884f4bb2ad165e9e

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_2079451614\manifest.json

Filesize
95B

MD5
12b94649e438d93ae179bb4d4e3d299f

SHA1
ba679e81584f826249fbbf97844e56e9ff1e119c

SHA256
7ff1b17f7cdfa84ea578dbe4c2ac27fefb35cb91a85d0a30c303ffad994e804a

SHA512
4944272cc42ad54a2d16ca6552da023000a32a42ca6a54644ae48b6ae3ebf58eb09432f20f33607d994d13f99def381162cdb4d1a2b0d52a9a0eecdd0744d4ac

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_281453094\manifest.json

Filesize
111B

MD5
225c08f039684dfb54aac162dd9d5b9e

SHA1
426bd1044bfcd5e1a10b58ed1f217a6b33b2e9c3

SHA256
98306b21c0aaf9546301f4ab7fed785dc369c67e2fd2ad4d62fc63f072a51e3c

SHA512
d6ff6cea0c08d13a642996a110432792048d21160c04543fbcacc60abcde362318e13a42fcd7520bc7673e98544a68a3eb6cc4338f4f4d8e90e0dfd5c40b77b7

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_352912788\manifest.fingerprint

Filesize
64B

MD5
4677a67660916081a9107c81046fcace

SHA1
b2c14826318907fe941bd599a8068a7b2c3bd253

SHA256
b7878c742184cfa948bf77bdd713746ae58507684acae896a60230c51f54a7ea

SHA512
cc952d573ff81ac650ba2bd19c067daf7a938a0b8dbb8a033b8aec086de0b480354f7a3ccaceed983f75a509a2997d6856b315eb5419699bfd5019d1cdaa1d20

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_352912788\mapping-table.json

Filesize
4KB

MD5
57ff689022f2d93d2287ac3b48daec73

SHA1
937b7dc21193a27607340af7fb7b987b8ea50582

SHA256
4665c8cb39b1fd0131b72097484bd3a8309992821a21de9ee0420434cc3f7d5c

SHA512
1b81c2c9df45875c2f563b99bb2d29972408e3d449fb2e8793822dc0cf85c41cb48eb92510f4940343ae4826ec9bb4b98093d64f53de635ccf75b5307b92ca87

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_360051584\manifest.json

Filesize
518B

MD5
0be20db48f6ef545ecc93ae49e1f1250

SHA1
fa639b3e9ee6f0f521fa1ec88dfb14227b3586f4

SHA256
950d5365a5d31fc50b448e064e8b1e3f984468a08de1b87828a9852c85bb9ad3

SHA512
d8dc762613e08cb08e2945828aec6e364680f05f7daee79f7fab34838ec47aaabd504836ca8e76ae09a3356988300ccc96157a0713e16923e6df8edd5a0fbee5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_392231451\manifest.json

Filesize
555B

MD5
32c91bf9b8f95b4b2330a1b7d8b6c359

SHA1
32589e12e041bbc42fb3a66c489b39ef380fc1fd

SHA256
cf65a918306fa7763350fd8464fd2f3a049468424b6b89b15b15d824f0796df1

SHA512
2f6582a63caf1d18298b6ff9ac65172609c3444d676c5d1988d329e2dfcca5293b6cf2838dd9a6eaa655cbff403989f47fc4811b41e9a2b4c10e7478b92f384a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_421878369\manifest.json

Filesize
564B

MD5
4fa20552addec9f565555c623417d79d

SHA1
5a750551853818f5ce06da5531bcc73ef992e06a

SHA256
5f69350585f56f99a3a7c17effb524ab85a1830b41d20f13d428575221f89d79

SHA512
45952fefdef2f1e9b414d2f0f43c6690bd19743e9d57d098361d9677130680dfdf668b2228a245d9833f69162d86f879c2e4b1add2af1318791ba7b3a165117f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_459893294\manifest.json

Filesize
76B

MD5
4aaa0ed8099ecc1da778a9bc39393808

SHA1
0e4a733a5af337f101cfa6bea5ebc153380f7b05

SHA256
20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d

SHA512
dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_511312920\dnryisldmaqljgwaxeqbuuhuvrbboqlf

Filesize
235B

MD5
a04be1657909390ffc500ddcd67bcfd0

SHA1
ebd0f86a6296f02dda91e6961f20a8a6d945cc47

SHA256
ed10faa4269c0c53471193a079696b858e8f38cf486a96729881be822d4204cc

SHA512
5f0e84e5a1423d7e1252d2d04fe0a6e1475ce6a0fa2b9fda22333d85a7090beda2e7d4c5ba44e0a95e022abd581eb292707afc8dfa25ea4f4e7d924ada00ec0c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_511312920\kkjipiepeooghlclkedllogndmohhnhi

Filesize
71KB

MD5
7e04b69e2ae5ef2ee3bd980231e7a2cb

SHA1
d0c2b216a19d25f56eac67ae7dac1e957e86c92f

SHA256
6aab3260a34caa39627d2c1718fead4c15842c3515e887cc01788a975ba6fe5a

SHA512
dbba77988296cfd8c6ae51861e194fafacd6949a5865e060208807d5da6e8a8204e2622f22a0e4cba5e59cec4f17592c2073543bae8edb94f383f986c26a4d77

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_511312920\manifest.fingerprint

Filesize
64B

MD5
fb15854de2f09086bcdf7a463a6ec7e2

SHA1
2f10cc2813a39f6f9ed0adf46783c60710ea6fab

SHA256
8cb3629a878aa4868153618b1d3881d307977ef2f4c7e37e136d8d928361777f

SHA512
f76d93a8795793a6a5467fed307463998e223e6ebebfa180d963b13592f2b8e8d7c173819b4730c1840e935cd26d74c6a6cb47cd4c0138a88f01c731cec063c0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_511312920\resources.json

Filesize
269B

MD5
20effecf10eeb0456cc6f537c802f172

SHA1
8fb3968af27ad30c639f45a6fcee99b48ef79878

SHA256
044502a67e39049b4cfe2b80295ad396fff4d1a28e7f2a1200abf21061aace8d

SHA512
6a002b205519c0fc498c139d1efcab2f26bc03f3fa795a5bee9b3358c9796088bb6419e2b95afdbb84c5ea36a328dfab01b33c148c84dd8e3b9d21fa07fb6dce

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_607522708\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_607522708\_metadata\verified_contents.json

Filesize
1KB

MD5
63a3dea77c0490206055f1325b6be69a

SHA1
bac7c343d456aedad817bf7e32ae692866e7ad43

SHA256
e3de45fd386c7529a3a5cc3c95475c5e8819c2d1f781c27b27a0193e312f23d2

SHA512
33eb5c0feb76aa4148626bf493727196fbb10273e3281de348b5ae67d1f48ad1ed1382b3ca3235c8243975fc197597b4c4ea9c876fde0f6e91437372482f3431

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_607522708\crl-set

Filesize
21KB

MD5
1baf96e28e990dbc9bd74909f46d07a9

SHA1
d63436eca8b9092437884abe761bf7ec9a846a50

SHA256
cc33a7c4d355e9914e58af642f22b748d7a28b620572a41bcce4826ba0d32ddb

SHA512
eb245e6aa9ad31942dbbb230dc2199509891a0a444b80bc7b95679fa42298815ef9b235fe82e758865f3ecde4075bd70b526f1cf612ced1a8619a6ed3d39d4cc

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_607522708\manifest.fingerprint

Filesize
66B

MD5
b5704670253977684bee646e2baef6ad

SHA1
3611769f47c7d66258ff05f5e9e15ebdf506ff75

SHA256
8830f753fbe524c5a7dd131378d9aa8281bb0d36380a00d151a6c16a8b65914c

SHA512
85e36a8c8549b17c8157714b6cedb01b2bcec2b7a446436447e7445855c79d6eede196c4b4846430108ce0e11a20bf7b00ca2d7bd04a04b0a757132c08c74407

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_735098255\manifest.json

Filesize
107B

MD5
02937c86f238d5dc967d98b04688bd2e

SHA1
26aeef43a128e675d61d24f90945d919ebc098ba

SHA256
97d6148d4b0fbf3ba0e0138e7dc974f4aef1ed5ed26d65e651298addf1c01fb3

SHA512
14d64d2bc6fff1e1a5fb67e7c3e77e38e3b9c6073886a9fe582c84c69c39226ed93f7dea3253997387023c2b6cb7993362e244bd3d3958c0c3181b27e69b91cf

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_740829451\manifest.json

Filesize
546B

MD5
c0c7bcc4e493495c65f841a2953baa13

SHA1
9443467cd1637741047eea2906f23acf97626f50

SHA256
342c1b0c43f42c98fd0d6628a2778f5bc7d0019b5f3957197ad069ffdf6dcd97

SHA512
21014690393bd6447f3f1865335ab57c37862e3b2007221b07b98d7695a650bb586366e2341e821fcda1843ff90d506dec89bd04983995bf083769cf23196507

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_944409606\list_catalog.json

Filesize
73KB

MD5
cd16a584d865a33a8b830e8d21708e26

SHA1
87f0d3314960a12fcb88bce93b8314367aa98814

SHA256
33cec7ea9957a23c04e73f7a7bed7829d9d94504893cbbe66923dd7e3cb98b31

SHA512
dd220f5baab6b837ece2b521ab8724fcc2177ea6913d0a07492bc1879712d0ee0fccc37c927a0f2ebdb18d0ae42c2d8f2b66a9dc608854112769063be17caafb

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_944409606\manifest.fingerprint

Filesize
64B

MD5
1a7b6de8a589ceed6635672b206b063c

SHA1
11e1d9c1adb2788391434fe40d608ec8bd453645

SHA256
1ab930bbecaa210befa9f3ad3c29157446cdcf43fbd0725649b260bbea955cec

SHA512
d54fff1fcd38feec6889c260655cf0c3bd78c1996040c61b7b37cd35a37057cd0dd62b4fd8d7b3b823dba56cbcffbc9cfa483874113dcc9c06fa9bef8cf8143b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping2248_944409606\regional_catalog.json

Filesize
65KB

MD5
0cd4f4303704916752cd627e9fa6b287

SHA1
39793803f09d1cd73d74c802644bade32d309ea1

SHA256
220553de903da6c8d83d6f8feb42a7766fdd067d20ef58dc52ecffa50d463e93

SHA512
825e7c9e40391fb66cf59770e1774b5ebfeab26f63066c90d50ba6f35a41a0f0c61c1665aea35696e4f51379d55efd109a74f8d793d3e470d02d2742de038ce8

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
90015b096488df158f6cbec2ef92b6d1

SHA1
6115edf390b337e55b9a554d597b04e63b15d449

SHA256
743059bbb3d90bc2833ebef1599e59b42781a0930b2ac5a4b44a7d1ce5a4a1ac

SHA512
1b6467a5f905b79de164faa22f925eea9bb9ddc3cc13433eafa363eca3aef95e2cb817cf12f241fb4b882420b9e04d0f66157331f53bf3cc2cee60527b25a9fb

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bb8b.TMP

Filesize
48B

MD5
6f8bdbb021bb0942fea6996f040629e4

SHA1
37f86591a2fdbbea07850a69f4a0e5a08c345ae4

SHA256
59f403dc89c7a11c97ec023ce9b4ea3fe62d74086988f86ecbde671b70b1b2e2

SHA512
8dbd86ee1c9ab6e8e1536ee6fa09594e747053ae53d6a0efa80e542a800f1b7bd84fba39c234f342b33dcfed393d3f859909af02678a1136fd9ce5e959d2bcc4

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Local Storage\leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Local Storage\leveldb\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State~RFe599021.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences

Filesize
15KB

MD5
a8499a6072aaab852905339f938e6156

SHA1
7fbf86bfceb513d8a00b11b568a91a1bbf923dd5

SHA256
42afbdb5795da54745bca03eb3d9b88e5be8e77dea2bb49f400d9c8bbf226af4

SHA512
bc4758974b5d1ee1341e310333df143e8a1db1bbc045341b52492cc7443af463ff8d3d0fa10a9744558c29c115bd74f7189663be034a77986a3bf81b407f3560

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences~RFe58911f.TMP

Filesize
2KB

MD5
16d784f7943178ce80e669e77a1a353b

SHA1
73fcc09d53c8edb72645cb47fc19d18e838068da

SHA256
9419887b4fbdac3f0c2daebae8508457ae1ee33d2b942786d4cceb8a46f36251

SHA512
8823c0031e45ae70e35bf0d6c797daf9bc31f61da4c381eaadc5cd8d5f62f7b54d11d49fc9eb20a13d23931f5c7ce640d1b3caa72ddf87b33b53ef57c10fa3bf

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\e4c0f6f6-7b36-43d0-a857-9595853426a8.tmp

Filesize
165KB

MD5
dceb0cfa9b61effc8788488f43747572

SHA1
c43235ebfd21469a747e8a264b67f874e0400cb9

SHA256
4f6f8abe6e2a6bbfea1c79b495019e80015343160d7fd99ecd0d428c9a8fd57a

SHA512
a4f5775c654fa4f31f53cb6fbab084939bd929feb95740b904045cd1f0a52c819e90876e56e66f7d1bb38db66fa0cb49c7365511f8346eec3cdc610e32b02c6b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
53KB

MD5
dd9bf573500ae4a171ac11fa4fb7e104

SHA1
0ac0826aa99e4f3144881c769cec5be700c8ee31

SHA256
673508844ede2feff020072c2a5e9cd6ebb36cd64cd58b9fdc861fd5ea210cba

SHA512
130fcf3472a35b3d81770ea703245089ce56f0d731ea0c908a2f3b0a735ab46bdb9dbadf2b3f01e5e51b38bdf6bd067b6112cbbf05c3ec7d3715285c1c1c8572

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
53KB

MD5
43f0ca64432150814b875c2b6dd1aea2

SHA1
4ac12f07db49ffc95d0fa31260af6528ab4cb167

SHA256
33dc9c39b8a1ede2e00e4d9c7a1f2b4d7827b661e5ff2034a50edbfad89ca6aa

SHA512
db6bc231960e1cac5415e0217a4f00253364a7d27b020905e99d2c3558c6e6b22a087f441c10c83da872d86ed8c72c3d9e893a696da56f032cff1ea064c90513

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
59KB

MD5
227e64967df0f1972a7919590f7a3973

SHA1
c0def25e119601e24de8592068083a800f9fdc57

SHA256
2bbea1fb2985fb31befbaac74cb2911f8e733ae8ec07b9f2c10a637f297609d1

SHA512
b296679c59171f8dd474857755c7e3d8689edd234c818e20ccd0ccbc137e9396d19ea62150c6fa4fda226c4d856c45088bb82444f3629e8d51228e5dc4422608

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
6KB

MD5
5698488f1ee1a8f6e86a14d734190072

SHA1
4d63a3964c56bbb8ba338feec9b588d52314ee13

SHA256
9aa0c731552dc4a120b9ce7a31dc88e0e6e01086a14ea56d93641f680f0115b0

SHA512
d5026ee541ef18af78576e2659af6ef1094e71b79d07a1924ab3ce75c578f537e10cb4a5113dcd97eeb7f92cc58095590fe6f1028017ac75695d97d5b2ebc492

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
48KB

MD5
6f825ffe8d1182adc1b46a30e2dcac79

SHA1
e8df7f0bd98a32e1c161c5202b3da17cc2a6e66c

SHA256
1e3c3c2ec3d6eb57dd02c50f6fd10121f3358317b2f8822f1c899ebdc19c9a5e

SHA512
26a58daa0edca0e8c8c6aca57e3e7528985e3da538f8ff82d08f8e7d28f2f53b80f2f17310abed8108338fe40f378fdd25b73dc1dda903d1fb685a5c803baada

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
48KB

MD5
fc72a359b18ad1fbdd9aa1668574fc6a

SHA1
2373877804ef48ad68e2eda0e74266d7187fc3e2

SHA256
fd168847566b782f83c0483e96cd0fdf59d0abae1e0a695fde9a4a8fd7859979

SHA512
95e2ae9ec77082a94c0cdf6da510ea0552f2f84c4fa7f4720a94d923050b1097c4011ddc2c387afea22316bb515ec5934352059c6694b92f4af6cea9edb3309a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
59KB

MD5
ebd342181845f72bfe84212052084196

SHA1
355886b36e997850d00c5983d86a1de4839d8004

SHA256
1edbfcdb6357f6bf09afbbbab6048ffc5709c88994eabefe388f9ea4d6e42211

SHA512
e18f292009a4170db87a69410c69a993d4e81c6a9b0ad8e4d448d3faae94c4896150db25adfabb83914178be692bc602f6d5675b080c73e526914712da576569

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
60KB

MD5
56b7ebc4057de8c98a4f94f236057353

SHA1
04606bfde6bd1fb6891979601b072a669d397df1

SHA256
87d7d1cdc95683aa1abeb1fbda97cf2fd69bfd06d116b8563f2df07573715999

SHA512
4756871913e5d6a6379f52843bbb454d9e02103080efcd0d056ddbefb57d88057eab45c7917d2cd737a52d568982d981f0ad0c3b51d46ae3e9903cf3fade75da

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State~RFe586a5d.TMP

Filesize
6KB

MD5
15afa4fa1c4abe97d452ae0c15e974b5

SHA1
53597d3c418e7a0c1c66245ad055a907ef0cac72

SHA256
f76bb7388fb080d3610bbca80e56b1c213a7002c75d5ed62dee0ca73646cc06a

SHA512
ba28567d6a35b72f1719851ff498a80ca2c2198fea98f85baca21724f23c6325a9657c7c91de8b47980344a355893ae8324f8ad99d462fa35e508a70abe12bd6

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\afalakplffnnnlkncjhbmahjfjhmlkal_38e07afa12f96754205275102914b269f3938ea21fb91a429f7d6712e4d3e135

Filesize
69KB

MD5
e340535228020722945425e75f5d3450

SHA1
690ca47a2d9f556fd031c82cccb9ec9ae0785c33

SHA256
38e07afa12f96754205275102914b269f3938ea21fb91a429f7d6712e4d3e135

SHA512
fef71917959cd6cc0b50d4cdd57d5eead5e185f9d9f96ff2b958ffdce4ea562f082c71d5a6402c9c606c054a61e953fbb545b13291c85aeec3e64144e04c63c1

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\aoojcmojmmcbpfgoecoadbdpnagfchel_9c5960d21f0263b2ae8cc29534889d287090d59c6cff01b499bde57d53960052

Filesize
12.5MB

MD5
26550720da0033f11c39b9286c89a360

SHA1
2e4b674d0894fb7ce59ba593f918f760e546749b

SHA256
9c5960d21f0263b2ae8cc29534889d287090d59c6cff01b499bde57d53960052

SHA512
f51ccede383bf5a8b2c14633da44c075709a9f69254438dd8d1549550b232e7cf5c4520c6afe45a943d39a02c2b3f8bb54b5f53f5dc3499eeaa8df747d998112

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\efniojlnjndmcbiieegkicadnoecjjef_1.f0e6e93d9283d69f039b618edb53499012bac7cce9bc204c07cc8ccd04b4502b

Filesize
151KB

MD5
7c33a08b95188d05fb3d1155d89e6443

SHA1
0b4d9e8df242939fbd2fd4934815dca4dffe79d8

SHA256
f0e6e93d9283d69f039b618edb53499012bac7cce9bc204c07cc8ccd04b4502b

SHA512
f5e8550558a1d6906b6c3b9a7e422c677cc3da16029b2e3e966b9e64576f31f188a30cda17c3ccaf478f25ec6b78486c58893127ad334ff02e141b1948b3bdbb

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gccbbckogglekeggclmmekihdgdpdgoe_fc230569159a42f124d96858c69cb9cdd255757ce277ecdcb3ffa84d85180239

Filesize
1.1MB

MD5
6d0017e41a940ebb2c1678644c882778

SHA1
ec4520c3b78109c792530dd7be670902359ae39e

SHA256
fc230569159a42f124d96858c69cb9cdd255757ce277ecdcb3ffa84d85180239

SHA512
c684099ba565b627e6a7eb93339e760b27d1314c005287128a4add17e72a1a5cf9b8503c09b0185cf5b92eed806dc5998d2543e137d68fe16bd574bda3f0efaf

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ggkkehgbnfjpeggfpleeakpidbkibbmn_1.905f83845e25579fd4c6ae4bdc81a2740a216023f856918045ced4508329c941

Filesize
8KB

MD5
be4bd6e1ff889a7bbfa11ba79fd1180d

SHA1
5afa96a648721fc9d5e5679c0beae33986c13124

SHA256
905f83845e25579fd4c6ae4bdc81a2740a216023f856918045ced4508329c941

SHA512
78a2aa93d0bfd933cf3300c2f13004551ddfab104a4ff63841505041510e60d327a803082091b9ad9dbb55744898d2c145b055f495ecc311df65abccf192324f

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\giekcmmlnklenlaomppkphknjmnnpneh_1.3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

Filesize
5KB

MD5
636c653ec2c30bb767533901a18669b2

SHA1
4b5a01cfea4c5deb62f3aafa01ef24265613b844

SHA256
3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

SHA512
a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gkboaolpopklhgplhaaiboijnklogmbc_8745d7117a3ec56037bc7bf53c7e57ad5fc75461ad5601171a5bc2fc241a95fc

Filesize
71KB

MD5
9a55d4e7ccd41e42e049a14bd89ae334

SHA1
e358c0c87352e54fc844032d54fc43912a4a0f21

SHA256
8745d7117a3ec56037bc7bf53c7e57ad5fc75461ad5601171a5bc2fc241a95fc

SHA512
631159c8838e52ae099f1498546c0a1676c3a82f2d6bba91ae32d00ebaff879fefd5fd6f5c4c9c0109980d9a6497d9b4900badfb1b323805eb4416c4d754bf1c

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\heplpbhjcbmiibdlchlanmdenffpiibo_69d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f

Filesize
4KB

MD5
3a03f3ab4119a23fa6b70a32a6fcd4b0

SHA1
5d047a5da7c7f388416aa50b5fba745bf5f36eb8

SHA256
69d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f

SHA512
8caa4e94e831b25226e956a8ee87c5b369547081df863ee34e7f80d686259eb9b7bf75757043ecc5b0eda3a603198da060f9b6f30be755350ab912fdc7681819

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\hfnkpimlhhgieaddgfemjhofmfblmnib_1.406b6fa2f6678c499744de4687a168cfc059013a294d553a8d699896a70ca375

Filesize
24KB

MD5
93ba0cfab786dc6e6b410ad74c1754b9

SHA1
c01797dc86399366c48fc7b85034bb2c8c699bd4

SHA256
406b6fa2f6678c499744de4687a168cfc059013a294d553a8d699896a70ca375

SHA512
b03f4f7682938de2434b9df9d61c55dd57e18a843dd491d7767a20dfa7259a2ef7df74ef6a09e08ee1b51a287f4ec33bbc73882f223dd5e07433ca10b804f108

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\iblokdlgekdjophgeonmanpnjihcjkjj_6d59519c34a8c034a88712725c4fddf59a551d4d16ba797ac79792624a8e830d

Filesize
18KB

MD5
603a5431529f90d9cec1b205c7b9a25b

SHA1
848a4e4e9dc21d57a73b0282dcf20e343ad505f4

SHA256
6d59519c34a8c034a88712725c4fddf59a551d4d16ba797ac79792624a8e830d

SHA512
7443170fbb349a34b5aaeca1a69cf90e65adb7ed544c3f03ea80dc279089b777c308b50a70bfad5ce26f94c258a5cae08dc19c017c17588b7e35813dacd897dd

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jamhcnnkihinmdlkakkaopbjbbcngflc_1.c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

Filesize
1.1MB

MD5
2ac309d48a054c8b1d9ea88bac4dbd6c

SHA1
7507922d88a9cb58759b5326fadae5d0c87f40b2

SHA256
c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

SHA512
870dbb86a67f36a43ad4c80db904e76b602bbe062cbb9fe4222d1cc69d99aa4a60aae91c094a65a481d8c62cca4942f178f1b2744ed21836a526c7ffe3409969

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflhchccmppkfebkiaminageehmchikm_1.701454d02cf8eb7da31f8e2aa8ff5bebab4a744e997a71b32ed6b6ef3b8b7846

Filesize
9KB

MD5
e4019822729d6f0dd50bb786afb6f9a5

SHA1
03e7d1703f0064762978b4107e86588d5c085efa

SHA256
701454d02cf8eb7da31f8e2aa8ff5bebab4a744e997a71b32ed6b6ef3b8b7846

SHA512
13440a9913cd211299de7e45efb003ebd9b5814147f33b99ce620dbaa374ff69cb0c4edabfd8dee66bc026ff22d98309564b90c2cffc85ab65f0a8bc3d9d84a9

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflookgnkcckhobaglndicnbbgbonegd_1.007b8abf941fa2b29e3aa0876b17aa8a7bf516666af484cd44efa9dda0e2b7f3

Filesize
73KB

MD5
5efedf8ad7d3912525c131b605e511bc

SHA1
dfd6f6d6f9f18ebf53be46bf6397e744d2401eaf

SHA256
007b8abf941fa2b29e3aa0876b17aa8a7bf516666af484cd44efa9dda0e2b7f3

SHA512
2fd90b3aae488072908fdfd90f1f06f740c9fe29c54d8378887dbd21338b24ab4f30f6263a206b77fcb4bcf1ae43f5cbe5b7e91b2f836d3ce66475cbdbcb3cac

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\khaoiebndkojlmppeemjhbpbandiljpe_1.8aed26106d9b12205a9cc12ca05a8e0c347d405a5db4b77f28b3324ead0bbae4

Filesize
5KB

MD5
9ba6b229cb1af40f2e28509d5e31ce29

SHA1
627cf719a46a774ccd2bd4ff15fab4df72f99db4

SHA256
8aed26106d9b12205a9cc12ca05a8e0c347d405a5db4b77f28b3324ead0bbae4

SHA512
0cf99f99eaecac089a39ec9e661419ff4af7e6126465743704a38965c43b6637e6085e3f62c39dd548b7c07ffc6c801df74cde5cda224b7f24a8d2f621e26fb5

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\mfddibmblmbccpadfndgakiopmmhebop_4698ef30d75d8c01654a9c489c438b6be1faecac44dd8a1d6f77760a2bc9b65a

Filesize
164KB

MD5
12f34d34432d2aeff59a107064b94586

SHA1
53916d660d9d3bbf9f7cd6110ab184311fa7c69d

SHA256
4698ef30d75d8c01654a9c489c438b6be1faecac44dd8a1d6f77760a2bc9b65a

SHA512
75b69a0e73cd0336d5bc4da8c017c273532abd176798460d730473131e2cef844e8990be0d85079a03cf3f5e2bd2d8c34993285bf9d248f29bfb9e09e58c069f

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\obedbbhbpmojnkanicioggnmelmoomoc_1.de91d6398c9bffe7eaeebe4144db8ad3704aaa8ef2b4064a2cd6d8bd9d99e80c

Filesize
5.1MB

MD5
8838c75296230c8881f8d4737f3a4306

SHA1
ee39e6088df09eb8c38c188f398a9459d529e613

SHA256
de91d6398c9bffe7eaeebe4144db8ad3704aaa8ef2b4064a2cd6d8bd9d99e80c

SHA512
bb85b127a9fa4fde66aca06cc66c616d1a4daf2c48d3690572c5d73cca021557d188b3d47fb2683d154c047bb9ca95e21b493ab7b53bb06ba522d83e8f300d2f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
11cac6eef891b03ff446eda72b3838ec

SHA1
450718cf1e5103bbdf5ee585bc7f41680d271bbe

SHA256
b3a6b359bd7f743f33dfdb4a20ad389ff1e2ad985a6a3b4866d42982ae474b06

SHA512
7c4c7fa700c8f6eb7ff5894ceff7e7375ca15b8e9028c25fe8e2a1b7b850de3817430e70d867adb7f5b9aa5c973495dac060c3b37be098e48a8cc110abcfcca1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
834be26e9e7dc53c770ba64a4b41cbbe

SHA1
eb9593d78048d5d3b424c451490e9de818630abf

SHA256
b684837192564a196e58144610e625daba107c6ef781587c7668927f6de374b4

SHA512
f1d808bcf9836e8491c707877f71cb099306777659b7cf9d78446285a03af737b3b924734e1932a702f6690938673ceee7065867a3f3d1303340c98fd97be8f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
a2b16cb27b9e3d72ce1f3966e9adaad7

SHA1
51f7c1365d164775a13a15769eea70965681724a

SHA256
45a7253cf7e98635f1085f51129704796b8bafa7f8b62f192525796964c9d69f

SHA512
667b4dbc3c258e39fb31d80f4c1ff6a8b1cbd3b9b2f02afe21eb379d130bd279468240546da82fb77cd8ea902fd6db1da5588771f9843bc95983962b48df6506

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
764886accc36b6dc0a2f3fc88f76c5c0

SHA1
701229a8b33e1bdb9ecde9c1aaa3ce6677c8172c

SHA256
c23fb062ef1af6a309ba141298418dbdbb54b18f78cfb26800aaf0ffcb1fc289

SHA512
607d8e659befeaab3165ce2538e15b9b3cbe5ec854fc38a9240b56aff5e1b7084d5adec2f8624490e7ed66058a0cbc1eb38be3a6980fd0fd3a127c6e4c57e2f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a7343bd6b678fdd1242e5ce7662bf1a5

SHA1
f58e934c4415845a55b5c523b4c6e578abbd0870

SHA256
50b124c5f48a93c381ea2c56087d71799e5a5852c6e7891832d6e10171ac2c41

SHA512
ee8fb1312994c36ea150e034f444ae34844c08143ee2105c327f6cbe102722e67f333787e6c9c8275d01fe34c7b573710afeb7e6e240d7af7b5bf07043ab5a1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
5e1efc26b49af58976ac822a8d40e269

SHA1
8777c7237175021b475d460adcb851486cff746e

SHA256
b4778bb28e235fe220a93701cb0d0a9997d56a1460d31ca34ca26df50d464243

SHA512
593ca6248c7c6fe5c941843e0eb30ec6b6b9a573709e8006034af7cf846ff3356acb21ad03d07f640ed36c3d76289f90abb4985d0058070437687bdb576bfde3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
911462e7bae0d1cc195965e32374e5f2

SHA1
f0bacc34d4c4edf23507e7ecd08ba1e86fd50c83

SHA256
3eb8b1accaf50660d2244a5643543850e00ab70868167b6f7704fe85d4e323ec

SHA512
c7a1abbdf152501caa88ac0c6e4c0f79bbccd193de51059e4fd2a597b25934488bdd02205fbb54a006b05cd69e73406ce55b627286ae9b2c1141b673391b08a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
136KB

MD5
b2511101dec16e96a3485ccfb5cd22c8

SHA1
1f39bb7276ce7f9b7e565f396751b7908db9d927

SHA256
ac6f8b1e7f356154f4579f7baf0be9743b3cad0630cff7680a15b110e9a9f114

SHA512
45cd334aad5170a710745b09e39f8a14d0b5e79730b26fbb9b5241c4c2683eff049cdcd4c102ee73b7baf43c5714e06706acbb96fd6511dfb3f23e89a1f98cd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
111KB

MD5
3caa758d04096a70d9699a146bb38c4b

SHA1
56ec2ba28cdc65021c93be7d84e26b3d13ee63f6

SHA256
f53d95c4f358e8b51d75eaacbb6cec3c2e470a2bae257734e9c55f3f1f243a8f

SHA512
f890f668fcd62b50c239793c7376cf9f70fc177b566c249d97c3e0a304a4decaa73b2eded3bc7217661e9fee6901b878a66091650c5f7f624100a3ed032846ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57d7a3.TMP

Filesize
105KB

MD5
432ec9d5ba140dae227f39dbd772e1a3

SHA1
2e653454ecf2ed079ce65f4db08da5d07786264a

SHA256
7a4c93fa4746c1daba492ddad99035e3ded96ee216047122d213d2a7682ff49f

SHA512
d2446e3ab6b688ff302f99c77b6f9e2008488d3fafdbebfc1776d154663cab8dc14b12f078597f57d5699707364c591ec2b74434057661204310e24070f8624e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 363982.crdownload

Filesize
1.2MB

MD5
72f2aca87db84e4a9e7b57074ebb05b4

SHA1
9548fae2813e6377b6176cf7676fd6d08c91517c

SHA256
73386710b5f63ed953c8c562750816d64738e26d33899fbbd4d5ed75770b1f52

SHA512
8dbd978f6befb7b0d0dc99cdabcd1fa232c93b7b5b7eb38da738d211994910a5cd78835f850d45b737672664151f441e3c0e2fe41c5493f389dd29715b2df758

Download Submit
memory/2840-532-0x00007FF820060000-0x00007FF820061000-memory.dmp

Filesize
4KB

Download
memory/2840-531-0x00007FF821830000-0x00007FF821831000-memory.dmp

Filesize
4KB

Download