e3a1b30b470cbd3d70762bb9cde5f3a1b1ecb7742c66dc3e2cb43cb506f83976

Analysis

max time kernel
1799s
max time network
1781s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
02-01-2025 11:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

README.md
Size

2KB
MD5

0e0474334d2c3b128badbfbcb8635abc
SHA1

709fa4aade11af526c95a88fd67f8acf2e7f85af
SHA256

e3a1b30b470cbd3d70762bb9cde5f3a1b1ecb7742c66dc3e2cb43cb506f83976
SHA512

5fc8c2d29646c3b00fdb76081008227ff19cfaebba568b3737361128759c3a95c28bfd96551085581292b4651a0b2ef4c83d443a1ae253a569a8c14817fab39f

Score

8^/10

steam defense_evasion discovery persistence phishing privilege_escalation spyware stealer

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\ = "Brave"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\StubPath = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\131.1.73.104\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Localized Name = "Brave"	setup.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\IsInstalled = "1"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Version = "43,0,0,0"	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}	setup.exe

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation = "0"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe	BraveUpdate.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 64 IoCs

pid	Process
6012	BraveBrowserSetup-BRV011.exe
1876	BraveUpdate.exe
3856	BraveUpdate.exe
4832	BraveUpdate.exe
2512	BraveUpdateComRegisterShell64.exe
1300	BraveUpdateComRegisterShell64.exe
5576	BraveUpdateComRegisterShell64.exe
4936	BraveUpdate.exe
4276	BraveUpdate.exe
2116	BraveUpdate.exe
1724	brave_installer-x64.exe
3124	setup.exe
5280	setup.exe
6112	setup.exe
5148	setup.exe
5956	BraveUpdate.exe
5208	BraveUpdateOnDemand.exe
3564	BraveUpdate.exe
5736	brave.exe
964	brave.exe
5352	brave.exe
2292	brave.exe
5304	brave.exe
2160	elevation_service.exe
3392	brave.exe
5064	brave.exe
4608	brave.exe
1344	brave.exe
3376	brave.exe
5144	brave.exe
2160	brave.exe
1100	brave.exe
4532	brave.exe
5592	brave.exe
5424	chrmstp.exe
5700	chrmstp.exe
5476	chrmstp.exe
3656	chrmstp.exe
5448	brave.exe
5336	brave.exe
5144	brave.exe
6732	brave.exe
6936	brave.exe
6340	brave.exe
6400	brave.exe
6560	brave.exe
6548	brave.exe
1616	brave.exe
7036	brave.exe
2824	brave.exe
6092	brave.exe
4120	brave.exe
6616	brave.exe
6908	brave.exe
7008	brave.exe
3732	brave.exe
5256	brave.exe
5832	BraveUpdate.exe
5828	BraveUpdate.exe
5656	BraveUpdate.exe
6824	BraveCrashHandler.exe
3140	BraveCrashHandler64.exe
2468	BraveUpdate.exe
6776	BraveUpdate.exe

Loads dropped DLL 64 IoCs

pid	Process
1876	BraveUpdate.exe
3856	BraveUpdate.exe
4832	BraveUpdate.exe
2512	BraveUpdateComRegisterShell64.exe
4832	BraveUpdate.exe
1300	BraveUpdateComRegisterShell64.exe
4832	BraveUpdate.exe
5576	BraveUpdateComRegisterShell64.exe
4832	BraveUpdate.exe
4936	BraveUpdate.exe
4276	BraveUpdate.exe
2116	BraveUpdate.exe
2116	BraveUpdate.exe
4276	BraveUpdate.exe
5956	BraveUpdate.exe
3564	BraveUpdate.exe
3564	BraveUpdate.exe
5736	brave.exe
964	brave.exe
5736	brave.exe
2292	brave.exe
2292	brave.exe
5304	brave.exe
5352	brave.exe
5304	brave.exe
5352	brave.exe
5352	brave.exe
5352	brave.exe
5352	brave.exe
5352	brave.exe
5352	brave.exe
5352	brave.exe
3392	brave.exe
5064	brave.exe
3392	brave.exe
5064	brave.exe
4608	brave.exe
4608	brave.exe
1344	brave.exe
1344	brave.exe
3376	brave.exe
3376	brave.exe
5144	brave.exe
5144	brave.exe
2160	brave.exe
2160	brave.exe
1100	brave.exe
1100	brave.exe
4532	brave.exe
5592	brave.exe
4532	brave.exe
5592	brave.exe
5448	brave.exe
5448	brave.exe
5336	brave.exe
5336	brave.exe
5144	brave.exe
5144	brave.exe
6732	brave.exe
6732	brave.exe
6936	brave.exe
6936	brave.exe
6340	brave.exe
6340	brave.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 2 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	brave.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	brave.exe

Detected potential entity reuse from brand STEAM.
phishing steam

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\chrome_wer.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\am.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\fr.pak	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_da.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ko.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_tr.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ta.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\PrivacySandboxAttestationsPreloaded\manifest.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\ko\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\zh_TW\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hu.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\d3dcompiler_47.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\ar.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\cs\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\fa\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\ca.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\PrivacySandboxAttestationsPreloaded\privacy-sandbox-attestations.dat	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_et.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sr.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Extensions\external_extensions.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\sv.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\ta\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\v8_context_snapshot.bin	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\chrome_proxy.exe	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ca.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\hi.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\af\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\notification_helper.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\kn\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\sr\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fil.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_nl.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\ta.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\nl\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_te.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\gu.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\fa.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\ja\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fa.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\de.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\et.pak	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\brave_installer-x64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_mr.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_zh-TW.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\tr\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine.dll	BraveUpdate.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdate.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_es.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lt.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\pl.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\it\messages.json	setup.exe
File opened for modification	C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\bd6ebf42-ce42-4468-bb79-20f28ff0082d.tmp	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ru.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine_arm64.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\Locales\lt.pak	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\BraveVpnWireguardService\tunnel.dll	setup.exe
File opened for modification	C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\6112_13380292801469918.pma	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source3124_808887972\Chrome-bin\131.1.73.104\resources\brave_extension\_locales\fi\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_el.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\CHROME.PACKED.7Z	brave_installer-x64.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_ta.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\minkyeong-shin.jpg	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_da.dll	BraveBrowserSetup-BRV011.exe
File opened for modification	C:\Windows\SystemTemp\Crashpad\metadata	setup.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-sl.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_hr.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1110961593\456ff29c-deba-43f1-89fa-491649d7d0d9.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-it.hyb	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\aleks-eva-3.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1759463594\manifest.fingerprint	brave.exe
File created	C:\Windows\SystemTemp\chrome_url_fetcher_5736_1936228295\7_all_sslErrorAssistant.crx3	brave.exe
File opened for modification	C:\Windows\SystemTemp\Crashpad\settings.dat	chrmstp.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\nadeem-choudhary-2.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\nadeem-choudhary-1.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1759463594\safety_tips.pb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateSetup.exe\:Zone.Identifier:$DATA	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\gordon-ross-1.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\manifest.fingerprint	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveCrashHandler.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_en-GB.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\mohammad-usaid-abbasi.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_712855970\brave_metadata\verified_contents.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-lt.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_el.dll	BraveBrowserSetup-BRV011.exe
File opened for modification	C:\Windows\SystemTemp\chromium_installer.log	setup.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-af.hyb	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1024514122\crs.pb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_ro.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_492576428\LICENSE	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateBroker.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_iw.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_pt-BR.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_sw.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\manifest.fingerprint	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_492576428\crl-set	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_vi.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1110961593\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\1\localhost-permission-allow-list.txt	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\1\scripts\brave_rewards\publisher\youtube\youtubeAutoContribution.bundle.js	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\StudentNTP_Erin-Gottschalk_v2_x1295.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_url_fetcher_5736_395019028\extension_1_0_106.crx	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_460086266\resources.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-pa.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdate.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_hu.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1110961593\photo.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_url_fetcher_5736_990784615\extension_1_0_9865.crx	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-tk.hyb	brave.exe
File created	C:\Windows\SystemTemp\chrome_url_fetcher_5736_686244189\jflookgnkcckhobaglndicnbbgbonegd_3057_all_adycskxktxzvigxwfgq274srj2nq.crx3	brave.exe
File created	C:\Windows\SystemTemp\chrome_url_fetcher_5736_1137163975\obedbbhbpmojnkanicioggnmelmoomoc_20241213.706874907.14_all_ENUS500000_bv2xsewd4szlhr3kdrwcyjtyxa.crx3	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveCrashHandlerArm64.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_lt.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\StudentNTP_Luke-Berrigan_x1280.jpg	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\spencer-moore-2.jpg	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_ms.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_ru.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\1\scripts\brave_rewards\publisher\github\githubBase.bundle.js	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_460086266\dnryisldmaqljgwaxeqbuuhuvrbboqlf	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1349947186\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-mn-cyrl.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_es-419.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_id.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_te.dll	BraveBrowserSetup-BRV011.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\BraveBrowserSetup-BRV011.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveBrowserSetup-BRV011.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdateOnDemand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveCrashHandler.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4936	BraveUpdate.exe
5956	BraveUpdate.exe

Checks processor information in registry 2 TTPs 12 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	brave.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133802924079017753"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	brave.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.ProcessLauncher\CurVer	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28C83F57-E4C0-4B54-B187-585C51EE8F9C}\ProgID\ = "BraveSoftwareUpdate.OnDemandCOMClassMachine.1.0"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\BravePDF\shell\open	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachineFallback.1.0	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7FF255A-A593-41BD-A69B-E05D72B72756}\Elevation	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\LocalServer32	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F396861E-0C8E-4C71-8256-2FAE6D759CE9}\TypeLib\ = "{F396861E-0C8E-4C71-8256-2FAE6D759CE9}"	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3AD2D487-D166-4160-8E36-1AE505233A55}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\NumMethods\ = "41"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C974F2DD-CFB8-4466-8E6D-96ED901DAACA}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods\ = "17"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0D2DC5A9-E726-4D6B-BD5E-648F4BDA4930}\InprocHandler32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\NumMethods	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.ProcessLauncher\CLSID\ = "{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebSvc.1.0\ = "BraveUpdate Update3Web"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6B042DC7-1633-49A2-8255-7DA828C32CA7}\InProcServer32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{652886FF-517B-4F23-A14F-F99563A04BCC}\LocalServer32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.htm	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3COMClassService.1.0\CLSID\ = "{08F15E98-0442-45D3-82F1-F67495CC51EB}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine\CurVer	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{598BBE98-5919-4392-B62A-50D7115F10A3}\VersionIndependentProgID\ = "BraveSoftwareUpdate.PolicyStatusMachine"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebMachine\ = "Google Update Broker Class Factory"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\ = "IAppWeb"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}\ = "Google Update Process Launcher Class"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusSvc.1.0\CLSID\ = "{13B35483-DF37-4603-97F8-9504E48B49BF}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ = "IPolicyStatusValue"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{598BBE98-5919-4392-B62A-50D7115F10A3}\LocalServer32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebSvc\CurVer\ = "BraveSoftwareUpdate.Update3WebSvc.1.0"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusSvc\CurVer\ = "BraveSoftwareUpdate.PolicyStatusSvc.1.0"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A147722A-5568-4B84-B401-86D744470CBF}\ProxyStubClsid32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\ProxyStubClsid32\ = "{6B042DC7-1633-49A2-8255-7DA828C32CA7}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0D2DC5A9-E726-4D6B-BD5E-648F4BDA4930}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{70E5ECF5-2CA7-4019-9B23-916789A13C2C}\NumMethods\ = "6"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00B16F95-319A-4F01-AC81-CE69B8F4E387}\ProgID	BraveUpdate.exe

NTFS ADS 4 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 475063.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\BraveBrowserSetup-BRV011.exe:Zone.Identifier	msedge.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateSetup.exe\:SmartScreen:$DATA	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateSetup.exe\:Zone.Identifier:$DATA	BraveBrowserSetup-BRV011.exe

Suspicious behavior: EnumeratesProcesses 46 IoCs

pid	Process
2908	chrome.exe
2908	chrome.exe
1524	msedge.exe
1524	msedge.exe
4016	msedge.exe
4016	msedge.exe
4044	msedge.exe
4044	msedge.exe
3336	identity_helper.exe
3336	identity_helper.exe
780	chrome.exe
780	chrome.exe
780	chrome.exe
780	chrome.exe
880	msedge.exe
880	msedge.exe
880	msedge.exe
880	msedge.exe
2612	msedge.exe
2612	msedge.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
4276	BraveUpdate.exe
4276	BraveUpdate.exe
5956	BraveUpdate.exe
5956	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
1876	BraveUpdate.exe
5736	brave.exe
5736	brave.exe
5256	brave.exe
5256	brave.exe
5656	BraveUpdate.exe
5656	BraveUpdate.exe
5832	BraveUpdate.exe
5832	BraveUpdate.exe
6776	BraveUpdate.exe
6776	BraveUpdate.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe
Token: SeShutdownPrivilege	2908	chrome.exe
Token: SeCreatePagefilePrivilege	2908	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
2908	chrome.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
4016	msedge.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
2504	firefox.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe
5736	brave.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
568	OpenWith.exe
2504	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 4188	2908	chrome.exe	82
PID 2908 wrote to memory of 4188	2908	chrome.exe	82
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2464	2908	chrome.exe	83
PID 2908 wrote to memory of 2912	2908	chrome.exe	84
PID 2908 wrote to memory of 2912	2908	chrome.exe	84
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85
PID 2908 wrote to memory of 916	2908	chrome.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\README.md
1⤵
PID:2384

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:568

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb4ec3cc40,0x7ffb4ec3cc4c,0x7ffb4ec3cc58
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1812 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2120,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2172 /prefetch:8
  2⤵
  PID:916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3112,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3172,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3588,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4816,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4980,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4568,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4648,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4832,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5176,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3744,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5416 /prefetch:2
  2⤵
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5588,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=872,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3492,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4336,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3464,i,2902722297328795140,8181218657562304194,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:3336

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:1028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb3af93cb8,0x7ffb3af93cc8,0x7ffb3af93cd8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1792 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4672 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6512 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3820 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7268 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1940,15422682314401146449,17450400473008623098,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2612
- C:\Users\Admin\Downloads\BraveBrowserSetup-BRV011.exe
  "C:\Users\Admin\Downloads\BraveBrowserSetup-BRV011.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - NTFS ADS
  PID:6012
- - C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdate.exe
    C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdate.exe /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
    3⤵
    - Event Triggered Execution: Image File Execution Options Injection
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:1876
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:3856
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:4832
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:2512
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:1300
    - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:5576
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins2RENBOEQ1OC1BNkJDLTRGNDMtQUU3OC1DODkyNzY1OTY3N0V9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7NURCQkYwOTgtMDdCMC00NzhGLTgyQjctQzJEM0ZBMUJDMzhFfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSI4IiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0IxMzFDOTM1LTlCRTYtNDFEQS05NTk5LTFGNzc2QkVCODAxOX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4zNjEuMTUxIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjcyOSIvPjwvYXBwPjwvcmVxdWVzdD4
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      System Network Configuration Discovery: Internet Connection Discovery
      PID:4936
  - - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{6DCA8D58-A6BC-4F43-AE78-C8927659677E}"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:4276

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3160

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:1568
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:2504
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1960 -parentBuildID 20240401114208 -prefsHandle 1888 -prefMapHandle 1880 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d21bd099-61ba-4fd7-ac30-652d3770ac09} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" gpu
    3⤵
    PID:1360
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2360 -parentBuildID 20240401114208 -prefsHandle 2352 -prefMapHandle 2340 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {762adcc6-b466-46d2-868a-fb2c21698960} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" socket
    3⤵
    - Checks processor information in registry
    PID:3276
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3168 -childID 1 -isForBrowser -prefsHandle 3172 -prefMapHandle 3096 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {72f4b12c-91c2-4f72-ae69-ddff6249c692} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:4044
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3656 -childID 2 -isForBrowser -prefsHandle 3584 -prefMapHandle 3448 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {925bbed2-69a9-408f-9111-f273cbdd88a1} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:4472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4704 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4684 -prefMapHandle 4692 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {569b458e-f477-48a8-be6c-05e4ead92b1c} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" utility
    3⤵
    - Checks processor information in registry
    PID:5772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5380 -childID 3 -isForBrowser -prefsHandle 5412 -prefMapHandle 5392 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {934a10b2-c80b-4ab4-a162-5f048c9258bf} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:5272
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5348 -childID 4 -isForBrowser -prefsHandle 5424 -prefMapHandle 5420 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f3dc33b-097c-4d6f-91a5-ff95a8dd53b6} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:5280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5348 -childID 5 -isForBrowser -prefsHandle 5336 -prefMapHandle 5328 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3ad49a45-ad22-4b7c-b7dc-5ccc4f7e5b12} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:5296
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6108 -childID 6 -isForBrowser -prefsHandle 6092 -prefMapHandle 6088 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 936 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {32d3bcd3-91a5-4997-88d2-5f3e1a6cd624} 2504 "\\.\pipe\gecko-crash-server-pipe.2504" tab
    3⤵
    PID:4712

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2116
- C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\brave_installer-x64.exe
  "C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\guiFE3B.tmp"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  PID:1724
- - C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe
    "C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\guiFE3B.tmp" --brave-referral-code="BRV011"
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Modifies registry class
    PID:3124
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=131.1.73.104 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff62c55f418,0x7ff62c55f424,0x7ff62c55f430
      4⤵
      Executes dropped EXE
      Drops file in Windows directory
      PID:5280
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\guiFE3B.tmp" --create-shortcuts=0 --install-level=1
      4⤵
      Executes dropped EXE
      Drops file in Program Files directory
      Drops file in Windows directory
      PID:6112
    - - C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{502E1C48-9F60-4B12-B070-3E63E91DCECE}\CR_8AE33.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=131.1.73.104 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff62c55f418,0x7ff62c55f424,0x7ff62c55f430
        5⤵
        Executes dropped EXE
        
        PID:5148
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGFwcCBhcHBpZD0ie0FGRTZBNDYyLUM1NzQtNEI4QS1BRjQzLTRDQzYwREY0NTYzQn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEzMS4xLjczLjEwNCIgYXA9InJlbGVhc2UiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjxldmVudCBldmVudHR5cGU9IjkiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI1IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzA3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzE2IiBkb3dubG9hZF90aW1lX21zPSIxMTgxMyIgZG93bmxvYWRlZD0iMTMwOTI4NjU2IiB0b3RhbD0iMTMwOTI4NjU2IiBpbnN0YWxsX3RpbWVfbXM9IjI5ODQxIi8-PC9hcHA-PC9yZXF1ZXN0Pg
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:5956

C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5208
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:3564
- - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks system information in the registry
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of SendNotifyMessage
    PID:5736
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=131.1.73.104 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb38d41d18,0x7ffb38d41d24,0x7ffb38d41d30
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:964
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --string-annotations=is-enterprise-managed=no --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1932,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=1928 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5352
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --start-stack-profiler --field-trial-handle=2184,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=2244 /prefetch:11
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2292
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --field-trial-handle=2396,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=2596 /prefetch:13
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5304
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3428,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3448 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5064
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3480,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3596 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3392
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4564,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=4940 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4608
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4632,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5036 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1344
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5052,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=4668 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3376
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5148,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5176 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5144
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4680,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5324 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2160
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4684,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5484 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1100
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
      4⤵
      Executes dropped EXE
      Drops file in Windows directory
      PID:5424
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=131.1.73.104 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7f5ecf418,0x7ff7f5ecf424,0x7ff7f5ecf430
        5⤵
        Executes dropped EXE
        
        PID:5700
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
        5⤵
        Executes dropped EXE
        
        PID:5476
      - C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=131.1.73.104 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7f5ecf418,0x7ff7f5ecf424,0x7ff7f5ecf430
        6⤵
        Executes dropped EXE
        
        PID:3656
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5336,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5012 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4532
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5448,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5196 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5592
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5416,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5440 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5448
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5380,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5368 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5336
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5220,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5436 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5144
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5140,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=4804 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6732
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5164,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5712 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6936
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5812,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5716 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6340
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --start-stack-profiler --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5732,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5632 /prefetch:1
      4⤵
      Executes dropped EXE
      PID:6400
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4748,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3704 /prefetch:1
      4⤵
      Executes dropped EXE
      PID:6548
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5420,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3692 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:6560
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=3476,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3628 /prefetch:1
      4⤵
      Executes dropped EXE
      PID:1616
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --brave_session_token=4858366318110811940 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5976,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5896 /prefetch:1
      4⤵
      Executes dropped EXE
      PID:7036
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5520,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=3404 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:2824
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6124,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=4728 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:6092
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=3568,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=6096 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4120
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5664,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5020 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:6616
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5644,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5960 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:6908
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=5784,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5908 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:7008
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4120,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=5720 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:3732
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations=is-enterprise-managed=no --start-stack-profiler --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2888,i,6456831677049429132,13765491299690444243,262144 --variations-seed-version=main@a57acceeac76f9e1e94a52c2dc8e025872bf853c --mojo-platform-channel-handle=2848 /prefetch:10
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      PID:5256

C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\elevation_service.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:2160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1332

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:4460

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource scheduler
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5832

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /c
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5828
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /cr
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:5656
- C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
  "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:6824
- C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
  "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe"
  2⤵
  - Executes dropped EXE
  PID:3140
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource core
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2468

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:6776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\BraveSoftware\Brave-Browser\Application\131.1.73.104\Installer\setup.exe

Filesize
4.3MB

MD5
94483ea960f9bee9044e0a8ca31fc33c

SHA1
39e29cde48af84b3efdf16ffeacdc35be3e0e1e5

SHA256
e308f70103afbfac265121f89759906299213e88fb9802352695f8260bd3d31c

SHA512
d189adf07c6715d38547bd8873234d16596970d671ba3fb9c222d6a9aa10a5fc7cdcc6cea6627c5b0031b93e60e6db18e45b2661532873f510151a9b3f1fcb94

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\9447\crl-set

Filesize
641KB

MD5
eb5843f458609e429671bfd5d3aa905b

SHA1
5c1edcca92a283d948aa9a9b15f3667cca301153

SHA256
d27b68f1a5ba464e37b3c66a89ea6d2ea9d92277e22ed5ee41a26c71ecf9a746

SHA512
973d6569dd14864d73d7ea3d3cb28f279ea7e73c99f45d9bf43124ea44502d1f4a35c581ede3333df2bd019014edee463ae300701acc0614ad196fb64c685e78

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad\settings.dat

Filesize
40B

MD5
756b2c70ce4c6a85c104a99c66ca96ed

SHA1
5fad28e0178177df2d2a66257375141700b99ee3

SHA256
a6a87e16bf259b5335f7119239a63768003264e96387993177e767a878a1a35f

SHA512
0c8f9576230d7d01d1626171ec093a28ca1c3044b87acc98c643965817d4b0090461725b8eb262f81bdf222042ff18c2afd5d309002fb553e1054249fe89ad71

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2024.12.17.1202\Preload Data

Filesize
16KB

MD5
39340d947297e2994bf80e1b4b54ad62

SHA1
d8ab66a1b577b83874572a16bdcac7fb7bb5fe2a

SHA256
26fe953e3813a940c62569493326b33ea55fd6196a1c61dfef1ff04c86a52134

SHA512
41df69f7af802086150f612b8a0295b092d2a5e9794a0da44614a9c8106b48540ab188e4b1f60e81c649c268d06687bc65bf36ea99d562d40a6d81c170c8b1f7

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\302e35c3-aa47-4349-9609-982f5376d53d.tmp

Filesize
16KB

MD5
33548a433b743d546a615058191b3ca2

SHA1
b4ed812d6a21a3e1c0f1e7327940cff18c4020a6

SHA256
1e168a0725afea8f81c4d482122c6d4953c44100d899edae522799c8930338da

SHA512
f0dbe96304aa952b696ab5512f3565001f7f8a2a3dc4546a1bfa7f7c1590d0f1aea3b046c6bb5e2f36b2c276f75db4a9d49784c3f6689ca38a1432ee1af5f2e9

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_00003b

Filesize
23KB

MD5
0ab7a8b7baeb26dd7abe56a31221352d

SHA1
5686b53a9980dfeab741b760c17009dbedc67b78

SHA256
d1c90f721fa2e5893b4f3a208af745f3bccc7aa1ba52cb1f7bc45f51ff532710

SHA512
261486abebff6f083cd3c737b6380e9aaa1cae6f08ec6bb04c8b68299a55d383c296a458a22d816cea653858741afd962dbe6003b613a15e64900987a5a6ece7

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_00003f

Filesize
17KB

MD5
c4d9e02f4affab9323225f1e50118b3d

SHA1
de03c94e42cd476c1117a8e3370966a4af073f13

SHA256
a2adf507c3e5446ea0ccff13ebfd4bcc369e1c1c0cc28077eab2dbc6b272ade6

SHA512
c050b1cfd2686e0be70f54a59d8666369b8d41785ad0c6c79581f8fb4b3dc4f998eade5a0811eefef3162589c9a7446f9f2f3eb3933fe8a63068610ed1a34def

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_000049

Filesize
171KB

MD5
5e54d2b12c7935c52fd05e45837ce134

SHA1
191365e57dda9439be5fc2a8422f34041fa2737f

SHA256
89885fb85c2e5b448d5cb074c5488835733bba49ef32e794c2a40204316d1808

SHA512
68a28b17d6af71b5c1c3fedf947462919fdf2ee5a7f1a3505d8872f9f1cf4bdd314439ada18219a36690eca18fbd1b04bb48e0f7ffafb1678dc6b3e7634b75ce

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_000089

Filesize
37KB

MD5
231913fdebabcbe65f4b0052372bde56

SHA1
553909d080e4f210b64dc73292f3a111d5a0781f

SHA256
9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad

SHA512
7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_000090

Filesize
47KB

MD5
180b69f6bf96d221e8ae6e915712d32f

SHA1
ff954ea8f472a59ba1081e1ff0e4986e051e552a

SHA256
d76342f5ed7dd94c5752a339e5af374dcdc0da4b81f4d27b4ad27b982be60b22

SHA512
ff10637099c0c1d7dd1de81d0f1b9ffa6dcb09d55afdad9ce969229e68aa3cbf9676fd9388792cf83b22a33023b7df02c7c6ec4d65e1d7c5fe8b1b3ffe157617

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
54e6c1bcecfc4f027522218495de484c

SHA1
59daa13c4d523ad40ff319a7297e0479fb190edc

SHA256
7e7735baf37ca34348b1303fde4d020ee566f376671016d77c0fb22365e2f8da

SHA512
76879bbe3ee6da72a166302c694b1b503f318a90bf2235b73b976c3bcfe0ad4393714439e407bcb51c6cd7c5934c59301a259e758600ac7a5373642229766403

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
1a3faf1391899ca2633ff1f5e45223ab

SHA1
a1d6714b0366fc418dfc7970c8bc0acc0387c377

SHA256
9d4e38acf3473ee4d1ba94d9edeac4295082c64b1b2244e978a59212b94b2673

SHA512
c17cffeba85c89b8cff38949f08ea323194b3f9cac4d40e64cd1b982d1b504977c5ddb89fe113125ebde66879d9173f2b5e34af4894f10d432df43ee3a32210a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
9e52087820506f911f8375164bf706cb

SHA1
d51c0d06dd4274f7aa72a10313a2bd2affdf367a

SHA256
43f61970438bfbef2c622236725e5e6adc411fef2dfb02f01644b9baf0f3a790

SHA512
d602340477886bf473e7210377524622728438830b4645f168f5e2d6bc616544ba2abb8dd56a9dbd3601387eed4b2d4b5cda2e324f816486a8f7b5488fc1b720

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
a9bc9aab189562e6e18980d8d6d1abed

SHA1
f86a02ab8883f7a2d9beb4eacbc81e8e097fd6a7

SHA256
1a9d77cadb157b5655c256f4334a3b1dc3697b35d7cd8f7f2f864ef19b3cd7d3

SHA512
16f40608af0426858aa5e23cabc93ed5a3096bef2b58ee606305a00dd99ae1bc11ddc266e6cd6cd84d7eb178f63ff71fafba9acf9d49a56404d6e2d03d206d5e

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State~RFe5f9ca6.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
42cd2e8b583b8041cb17513f900b9a94

SHA1
04f5761ad7ca23decdf2a6c20839eae88a74b342

SHA256
db91bfe7343784e13289f148bc55c6ede82ef51bff4c20c8bfc749f9c2eb0f6d

SHA512
a97ae3c4cf860b4d9c15ee179a40a87802e32269db4c554e4b393ec3bccd6e187b440511594b04ce913e21db0f8226d01fabd1e8fee8df4ec7d8f37cd3d00a1d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c2c37a567ecbb2f84a83da2da736f2e7

SHA1
d4dc63573c8860b3f72e4f7a66b6800199c5e2c8

SHA256
7c771b3a502308efff89cacf48442d53a4bb14af5450a59b61d3abda7c238997

SHA512
3c5a7f64ddac8795fc080cfaa7f1f83494896f88245f1a3ff9263d657ba65ce46d56bb2663ba3bfb15271fe9d5a4b339d26c38861488b54bd2285d042eebbb5d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\TransportSecurity~RFe5f31f6.TMP

Filesize
859B

MD5
fe7399d406e2e1a06a7641473e7fc2cf

SHA1
6c039c6157fc940474bb42aaffafb5c4783566c0

SHA256
93887aa5174b310a6952f29ee7505176802f07e114e17c4c891a2ec264103da4

SHA512
dde435496d7417c9bbd798f6cf33cfcd0ea2edca5750b4fc3e301dc2c022cb815727b36ca88ed0ea6daf635b3f0657b82abbc59ca910af78422062c90bda1f22

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences

Filesize
17KB

MD5
d834c5116e238881603a016cc56f700a

SHA1
0ec77f8bd8b96c15486387f02d28c601cc900f50

SHA256
15421cffe9cba1fe1753eaf8979e0c892bd62547890c3eee67a68cb32683ed18

SHA512
96d85c2039a1ab1687fcafeda786192c63e53ff0407e4e9ab89412a7b0cd711ca01016830d91eff222a1e13e2244c62c385bacdfd3f4761fda873a2ea3a02b0a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences~RFe5e9dc4.TMP

Filesize
2KB

MD5
c830f8fb1704f0ac80ada8ccf6c009ba

SHA1
0ac9e456c7dbdd6230a5cf235247822a209fda2e

SHA256
df47785e96ca4318788f64d14090926f33fcf3c9c65bef8a35c6517197db6c79

SHA512
79184af8d9effd06c2177cd7839bde7ff41f02397518248f4b8ec9de37fbb3c2e16bb5d3d043a203aa5e6aab06e968d0aa3f581f075cc38876ffc0e01c7119dd

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Sync Data\LevelDB\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\fdc2c907-df4e-473f-b823-ce854ad7d8a5.tmp

Filesize
165KB

MD5
dceb0cfa9b61effc8788488f43747572

SHA1
c43235ebfd21469a747e8a264b67f874e0400cb9

SHA256
4f6f8abe6e2a6bbfea1c79b495019e80015343160d7fd99ecd0d428c9a8fd57a

SHA512
a4f5775c654fa4f31f53cb6fbab084939bd929feb95740b904045cd1f0a52c819e90876e56e66f7d1bb38db66fa0cb49c7365511f8346eec3cdc610e32b02c6b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\67\download_file_types.pb

Filesize
7KB

MD5
d28b6246cba1d78930d98b7b943d4fc0

SHA1
4936ebc7dbe0c2875046cac3a4dcaa35a7434740

SHA256
239557f40c6f3a18673d220534b1a34289021142dc9ba0d438a3a678333a0ec6

SHA512
b8dbebe85e6d720c36dbdae9395fb633fb7028fecc5292498ac89276ae87bd6de36288fbf858f3476e18033a430f503acf6280596449dd0478b6ab7139f3cea6

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GraphiteDawnCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
51KB

MD5
6bd14fdb96262a56f7983b07d93cef6e

SHA1
c0b9882dc7d081b37a6aa95b37b9181c3c9e3029

SHA256
f0784def9e5da77b3e2c85a1f6f2ed22c066e8eaff1e1bc1d748d5424fe225c4

SHA512
0b60e08b5780d801deef14b36e3441fc5dde53b91bc69a0b753a171e2f068ddd1aeb54d6b6752e3ca05aefde0e543ceafb303b26cc76c6292c13a1b6ff7e2f89

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
6KB

MD5
6f3afb531b7f18c3efb6e70eae7831aa

SHA1
edf5390c0d13a114a30abe188f8679ee3dd022e6

SHA256
388432fe847e4e92ed3c3637f3cbb0edc30f240d63541026b0b7620ecf1cc356

SHA512
8dab117a0457e28ba4e9a0acc57348e0a37ae503e0fe2b1bceabad28f3917788b5e43902cb3608fbc0ebf22db313e2c886dd1616e75d19b10187db25b7d3cd75

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
53KB

MD5
0e420184520ec713e4aeaac4b86de024

SHA1
3ad56aa342438e831e70f0130b68f57d77485837

SHA256
e201ac22efb48b5f957b1e00430e78c762aac5727bb15b3aac2cf4630190c22f

SHA512
0dd27083cfae2c7558feb6f6af2475a7b121afcaa83e6b9e0ccc4cc1bf871ee4215d3672cbe76c2d0cbe4a8ddc571e131c323e702b55321b8c64f6d0d7f0d9e9

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
60KB

MD5
401b9af474922885004656843735bcf2

SHA1
465fc41258a3037b3eae5b53b188afe4fea4ae2a

SHA256
94080b54e6945dafafdbcd68ae3a6fa0ea63bc7eb5953da42de30ffa49db350f

SHA512
39782d0537e79709e9fa4c26b816c77a37a8d34851cffde3ba78ba1bcbf5208b081b6741b08c943d06b0dcb980762541e3dfbeb40dbc8ef6626cbf8eff2b8ed6

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
67KB

MD5
b5ef3758f629a010e62e0d7bae0693b3

SHA1
b6d3be8f40e9fdbdde4cc842ec01e66695a33356

SHA256
0a4937cc05d005bb3c0bde0e5f7f6dd1f3f65c3b75f51276a4f906f80c277fb4

SHA512
9f37f6abb5d5845d3485ff8c4de8efbbaf0fc6abb98117f1484fbcec130564d300e3f35e27344c23d8d9ba9af65a3445963f09b05c8e150d6fd39a3d0fbc99c6

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
84KB

MD5
d0dead8c1719cdc3ca56aa6344c53925

SHA1
a0097878728e6c3209a561686c2034f976871cff

SHA256
00cd541a3fc8a4993292bad0b1a867f05fc67543a3b8a56abcc8d131b21de537

SHA512
bdae3acc5a0d8da80ba3675c92a636eddce4bff67b7970f0f1564fbbf6dfe7aa2955b95cb50f9bfee13cf64f6d1c91aca7f43b5e9e96513c18eaf7015ee5cd07

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
81KB

MD5
2b0468490ad4cd7a7bfd6bf37973f23a

SHA1
070b920340819c5dac6e23b4c38d253efa39a29e

SHA256
7771589c5569a76f113872beb07e2b1963f21cce4a9a6e41259d73d5e3dc66d0

SHA512
da9a114bcb81988421db169930301ecbea294530fff8988d8bc13df328cdb64cb0016f18572f1abe75c64e075da962a8aa9c51ff23ecc110ea931a89343b53c3

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
81KB

MD5
71fdfd2d6e77071fc17777f8ecbf3ca6

SHA1
d55e31f94a5ad3d298bd3f57d02a3e75011d4d49

SHA256
5e1d0fe6ae80470ab64ecd09cd033f2709fc164ad0e381c7c192346d13874186

SHA512
db89164745f0f4e9f77015331f72256f5b98da7a49f4e41f0fd0a020ede0a6a827edea822d8aca2f9940cadca9bf51d9568a965719bc2ee0b9c34392ced9f46f

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
93KB

MD5
014e3ad0bbef329a9b8284c042618752

SHA1
718fff14bf17f47429877015c1d0666b01a932ca

SHA256
341398c6e8c2bca38223607d18b5e59d6d75f00b158600c4d129bfefa951dc15

SHA512
32ca6850bf3198b3edec347d36d99d548a0b07d85f31b919b8d266556cf1739fd73e3e882c2764003d153bddc24cdd67cfc1e82d1e88b54ce4b9b339deabf164

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
51KB

MD5
1e4786d2874b980634c046cde736e3cf

SHA1
a40ab8f12c1f3ab3ea8db7b9b6a9c0452a083502

SHA256
e7167f70e2cb86f86199ee9c21a5ba0acfdd48f15caeae203ab360f42b9588df

SHA512
45d7fe0bf7a723b43bada65bceeb774fe9bf7a79d0f5d5d676f7075ab7f3c4c9b05b795dc5d06a87866bd39443d308c599b5c851032a6c28945f56dcb47ee34f

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
50KB

MD5
4fe25f84d64b274bea4b438ac09d0a16

SHA1
5e5a990c86ff105b57ef14799d458b905a078aa9

SHA256
0f735050b6a09317e2eb2dda6abf8804ab01250b9758dd52be577b75806ccf42

SHA512
2a8e9f4177744e9115c2f80e2cfa8aaf460d325c98ff746e5e7770b13eaa6ae7a97fa9c0d4711fd54279f046702d92a4580ddcc5406911606e612d2dbc1e8791

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
51KB

MD5
620a4cb88f7df96e6a452bf378c8ffc5

SHA1
add6985027af770311c4ae7dff18f7252140d31d

SHA256
984f6f9f5f4b967cec6832913b5d89db30aedb31a9cab2736afd95a345e6e6be

SHA512
c198a2d0ea17b1b1273f6430edd29355de0ddd9217adb9377cfb1728cb3740dc4dd9c48285128fded6d741be7c287782a492441fbd1e010156873cd81fa6709d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
62KB

MD5
167fc519d30f47f26b62b22ba7f54049

SHA1
38a7bcbb8ee7b56054d3fcd8cb640fe29f4f55e5

SHA256
c388fdbe743928841e39cb577b9dfdfd67d996f3b08bbbabf799fc49acef9b2e

SHA512
13865047b7d13dcacf5829a1f2142f4f2fe55f2f5c28288113de1cc4aff0fc80528d2847220fe21a1e6a5a98e131688fd55a36f02d30a1f02ed916171546921d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
50KB

MD5
15b092c2bcb4adb032bbea4bd18094bf

SHA1
3daa39f90a6d21832ed29ef5e5fb2bfbf7ae8119

SHA256
5abc95ad40fb0f9ba84e36f3cd8da34cf22f482d645e5e40f2e512690401ae53

SHA512
bb1caf4b24ecc73a76f6c6a8f06ec4e2af55c2526f1ab4b0068383b732384b9f37cdab05620ceab4e847e08a805ff563d73ba9cdb59c5e9504cc09f02ca2bc7a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
7874dd5b290b03e151f16137413e6172

SHA1
0e0db5fcceed053c38beb4d01a0fba77a5757248

SHA256
54cdc80344c13a05a3a11874b74fa7c92c58dd26c53753f17b8888a6ac772762

SHA512
c0334d6f98efc907204a6efb1584c3de4b3b442ec446861673222cc31be24acd1f39f2cc38e3900ab7eac3268877d1eb3041983c4bcc6a4259cab827b8c9e6cb

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
90KB

MD5
61031acbf7a66ff07e9364eeac7bd431

SHA1
4e29da1ea2892083b961dfdec436670cabb4b319

SHA256
13576a214f8f6838602391135f15ae6dd75d57607ccb83a7bc0d1e6ba9379503

SHA512
3fe191c89ebd570cfd599863bb71d3cc225316b8369e6486417d17e6debcdd1a5d9a68d9191fa837906cc5752f313c7bf1853edc252fd2a2d9e90f57c1d153a4

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
93KB

MD5
2782bcdf4bebdf1fb8a4174be3c55e2f

SHA1
1a0f1a5d0f382c1e2d2de59affc155fd06bffdbe

SHA256
7719ce1a2a04d6e620964006d44de56eec8726c54d87d69d5473028c68722708

SHA512
90062b5e9fc8a7945e26ff03f86be735b2b48bc3efedcfab46e3c26faf50ebb772d7a16ef76895b38d828fb04a2c4a42863683029548f806a006c6f4063af322

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
70KB

MD5
487fd7e0295c253a960d0d3570c25a6f

SHA1
441dc81991f87e12667866d07df5a71c21fa4788

SHA256
50f72b46e383984062cfc8eb1abad1ed95f8cddcffde6e89904a40d47c2f6734

SHA512
4605bfb6516cf181016968e97d61acfdb3e5498b48ba4e3d111781d88d92b942c1d258198acd5a40d7f40ae7244346b2a1aee41997e9182dfe2a377ab9e5690a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
93KB

MD5
888ecc769b4dc95fb1f55eb8973264b0

SHA1
e2ea065dd74432fe4913cc8207bd1f3119f4268a

SHA256
ab81b3c48e7efab6c9e555dfca7f427aef4ada14014ed9bb192ee528762bdba6

SHA512
878802f8b1e843eb07186f980c42aa6a1e49393e939fee217d5a38cbfc87c4f62cb4ef7b9cebe4d8ad09920b494b7f03fae8b75f1f2fc2242cdec579cf9967e1

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
90KB

MD5
7009b396519ff448598ec4365532e8c1

SHA1
3c5c7cedefc5717bf76894a602596c020126072b

SHA256
c284eb4b9ee49ebc243f4c861df03b7c671645ec222b9057f37284b7cca8376f

SHA512
a64b7c130f31fac87d8750b7f34796c34f952d9b05e34bccd2d4053e8c0bb66ccf55e87955e2b2adbc01a5ab10cfa6c6788fda890e5374540eda01aa51070fc9

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
80KB

MD5
17b041420f2da4801a0895e3bdce4279

SHA1
027e7faeafb61329fabf5e1d76c7ae0daa8d8f9f

SHA256
c934a9afe8b42dbb400548b8ea61b4c27c026ec3d0233e5ace0e52a749a23a68

SHA512
dca23e5a7a4a4a03f1fbd5f2ac68bf0e967a5afaf91628b24901e2eab98f16684dd0287743c63a29877b56566ff0e881b5ee2983cca39f6e2b5b5851822c5b2e

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
90KB

MD5
eab8d4bf95306c439825d7789ff730ce

SHA1
0e0985cc2d4b79fc2227ce3ad5552c55892839bd

SHA256
2b951f0a6adf12047d95b81f16560a403779ae25964eeeaa7701a58251389a0a

SHA512
69c136d01dd4d1d29906d57deb07cd6e6a259c7e72d05cf2c52d48d0d89c01607f60c53e919e67891226aae120a9581c6225bd741c8fbc8a14e74c5fd4ea1e65

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
73KB

MD5
4d0c57261270b225ca7f7015ca8f6287

SHA1
a5a2d82f6dd06fe60c040b13f93355ea8d9f8809

SHA256
34da272ecc0db3d17672b980f960acaa2e0e4ea41ada54f9476966224f56db5c

SHA512
a23627b5cc6605ed446efeec590aebdcce0a0c242abdb203b45d491530415f530841754ec2df8ba27fe2f9660e051c2aa5fd957cf7324d1621882357a2a1cb66

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
ae91d3ea0dfb9c5ee070d2af35c1521f

SHA1
c3b5cede020c943ba8ea42c0812c56f9a7ff0588

SHA256
487a074809cb441ae991de3ded08581edccc633ed735402c90766d742a93d76c

SHA512
4860b605675a9e2c985049cd93962ff73c78912e654e496caa52edac5f01315dec6a3d8e15c1058bebaa245dbb046b61a3a5400bce3b476682706be26b6b0655

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
67KB

MD5
c393b67d3f52dad7502a3d1d22478986

SHA1
6025c86b61666e8eccf77e2874638acae5bf8e60

SHA256
4f0c6da4aa644b089b152cd6fc780f8a80cd5f6f2047a83c4b3e8d2e5301515f

SHA512
e5eccad97782ec530bfb732524652368327d6b674108d176feb701b2a55ca16aedcb8fbc8c904d4cb2a288d00444a0400331156c1dd21765f60f866f9f445897

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
84KB

MD5
f9eaf23cc0b7db2fc456cce6280b87d6

SHA1
28be9cd7b5335231ac62e681e4c4cf33ffec9e3b

SHA256
5df05edfb6e69fdca215dab9a04fff03ec104a4105e0a971e32a0e7b073c439e

SHA512
96d71c804fcd300c7027eb0256856da90936f58a9df60942c77fe2c5e1ffd2cb1cda0df28788b0695a010873096e3c5fcd6a12e5962e1daa817d3a7430df484d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
97KB

MD5
6310a8c009c19e718ed5632c1c0e38d8

SHA1
31035110d412134690571598b237b30638455871

SHA256
03b1af11a04ed1a106510b027736fb3d5012f632a9287d33c97562b457e74130

SHA512
1bff6894ca066ebad948851dafac760240f7b4ec240677093b334d70fa780c6be6c0facc219d78b007a2c2430758e41e336aab2053efbf7b5f43f2cd8e80886c

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
79b4045159e8e16f2af039cb4d7271af

SHA1
b378e1e15562b11bc55e810900c377f30d855e51

SHA256
596ecf55ff179e29e0c4718e3eda0db83b97972f9b2386e6b927011512512d91

SHA512
8c295fddd76de9ea443fb3e6e44aac7f53311d576d6b8fabcac2202ee60bc5b7f27d3fcdf55c0ee721515979c381826ab7a48ee162e88d2f423fac91f4cc12ef

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
be2078aa1c6c2d2faa382d78aaab0057

SHA1
7da00a7495ba0e2d32db348c240414d4ce1b1ceb

SHA256
2f6d31466ff66e80f895b9dc2f4285b034594e0bd5c4af88a95def349392e7e1

SHA512
4ffd7b1a95c8e3690be70bd47e2a6cc97bde318f499c0a6828cefb3833f1f34ae124684a06d64feb2307a8476211c02706b235872da28cfa1588d9dab027c401

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
77KB

MD5
6009be0e3bb6a6e24f34ecc5d4b40eb9

SHA1
5ec73b15a21cf38f12b6e527ed27b6982ffd8188

SHA256
34c4afa57eb8668e009674beeeb79e760a17cc29a953bbc084da199290cfe531

SHA512
346d3f34a65d9576a6d5dc957303a0a5c613114d0d799e80294c12b31026fcdd27cb3d80870cd0064929c8aa089de095cb1ba58a476e332afe5c9f0ea76c6dbc

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
81KB

MD5
081edaacb5bb4a3a885521479b20bca6

SHA1
13277a12c58dff3716b884f50fd65ee558eabb3f

SHA256
8f8902a472ac6cc6118add3b438fd92544609d5e55d5592337e3e5cb1fbd5c92

SHA512
704192a41ca3d90ae2f772b620c4a3562e77edca57c7a6cc288f2584d3c5d7364ac45629f51a59fd4489b300d286a05f807d81c1c54aa9b7cccde28eb5c5e140

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
91KB

MD5
cfc60e2179a6e92b86c903c4993abd4c

SHA1
f7286e39e8d8b91e2ce8313a82f8bb272b21b3b2

SHA256
42fad63acc02a8afe42e7537a119bccd64d047ef5ec335eeb0ffceca0a5e2a58

SHA512
98a31175d63f9489a946a25ef40abe2d4afb8f2eaba574f15d25d713ead3470da7a23459d99f02e0c8dd52a11764a3095ee0060560ccc063a869e370fa391dc5

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
8c231ab804c999e94e306e0675e60579

SHA1
c872c8a196acfc007df4091395b2819825bbfded

SHA256
66ac1eb6dc5dcc13727d6ffe17b8766042a25be38015472b14dc279664e6f749

SHA512
f58b5f87a746b85007196d4ba12d0bd06c8401050a44f5548a25f9177b8ee438313aee9c9412c7d635bcbb36cfc6c459752c703bd33eb2e5e3ee828b0a522abf

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
87KB

MD5
04929bb63b84e395706e55713d065073

SHA1
de3a7265dfea2a2ed50e5e085573ddde754cedc8

SHA256
40a18bd10dfe774f98a4555a4bf9eb2dc0b63f8f65acb11087dc3427203e6126

SHA512
8068b7b5333464fb354679f10654626287ce9fbb948d90f90a1caa1407807326d924c57799e57ae3a098cc3d50be78255c283b6655a0a5d846361061c35dfe0c

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
91KB

MD5
b0b74f0adedd3d90abd5beb8c9117636

SHA1
b9e99857b3063eaded40bbba5afcabeb14a261da

SHA256
7827698fe85f2e4f29dd97fd786934efea119203e9a77325559ae0243f0f3365

SHA512
0194dad12a8823cb292f0b53101b633d26101ed2818812d70faa4b49e5c4a35fe28a9124358b54ce87ca15096b11be92439b19d91c751fc92a5b0f32d2b94bb0

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State

Filesize
84KB

MD5
a1ba1cf8abe7e0c21570025f13543884

SHA1
4710b105d57f91c3fdfcecdc9fefd73118f10efe

SHA256
33b32b3f6dd00c7cf4d44fda62b038c83f638df75bdf24a5971ca2aa9b381f3f

SHA512
7e89893f20f7c30262a15558cb7c6dd61c179194188e55743f17cc622562f654b2fc7397a3559f288bda227780812bb6abd55ec66fc1cfb5684770975fa11d54

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State~RFe5e7676.TMP

Filesize
6KB

MD5
87739bf76ee719ee599826c0fc46005a

SHA1
645e0ae8b1bce8bbd4f6160ba8e4cc69b0754196

SHA256
75708bec08334d79726499e90bc5f4ecbe9225da71a7219f7091ce29db6d6e1a

SHA512
5715554b75d13d1fb7dde77c709cec938d50f6f3d08ca20410c9d7c616ffbfdb71b47721535c8f2274488bf69402c513651f0888928b55237b1724171666d089

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1179\crs.pb

Filesize
141KB

MD5
57086b02f74c3fe7b79a5e2e3d852322

SHA1
6420387225ddcd5210175de4f3fdb0ab2be8ee9c

SHA256
a1b5be8d4aab349aff58ed34e1f3bc6647cf440830da0a12a8bd5a1c976c6407

SHA512
b195eb9a9129863e75be603b00b85ecfe46360910529fb38513af6940f9d17efd56f234b47963452329cd85b16bebb5a85ab5d304743e57d33bafd5b59900468

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1179\ct_config.pb

Filesize
50KB

MD5
707188bb15e4a85a9cefad622a4a3645

SHA1
5ae7db7303b644b373d1398c11cb1db1a376849d

SHA256
1ca2e7bb57721949a639d5f4c80e09a0dbe65e39bc070db15a6d7b04ad2d9ae7

SHA512
e55e15124f3c5825313fec0a7b0d48afb5c84c9028ff2d823df117723bd6c1931810c919b612571ac9af59fb21a651acda747ad7a8de85bf612b67b4f8a62e27

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb

Filesize
2KB

MD5
e2f792c9e2dd86f39e8286b2ead2fc70

SHA1
8a32867614d2a23e473ed642056ded8e566687f9

SHA256
ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7

SHA512
6a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SafetyTips\3057\safety_tips.pb

Filesize
163KB

MD5
bd6846ffa7f4cf897b5323e4a5dcd551

SHA1
a6596cdc8de199492791faa39ce6096cf39295cd

SHA256
854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666

SHA512
aa19b278f7211ffaf16b14b59d509ce6b80708e2bb5af87d98848747de4cba13b6626135dd3ec7aabd51b4c2cfb46ed96800a520d2dae8af8105054b6cd40e0b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\TpcdMetadata\2024.12.31.1\metadata.pb

Filesize
33KB

MD5
06167dc3992cc6667a6cf1e66d70ac5d

SHA1
fd3966582f334e3184ee39c7a881a55d48789729

SHA256
ceb3a3c59e1bee0bc061d321680f28badc214d7ef0b4a422cef341b62bd2c82e

SHA512
3f0eac05f5ce443e7513f3fd921143ca16c179665d20a3808e32b405e1dd5c15ac35ef25223462b0614156808d12829cd6babcaa19ebe97180da3379952908d7

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.280\list.txt

Filesize
149KB

MD5
841be8b649af448676a4568f1e770f74

SHA1
9f9b9f9cbf06a93e1a709d21e617650cea91ebd8

SHA256
ec8d35bf391252da22e3c5c85ff01be9a270479095be1738073243def8bbf6da

SHA512
63175bd6db2082ba23587df95087c656f913a4e0e39e986e19c352b58189bfcb60f3d01c492082b0b04637414c78b1b62027fda74e0317f5bb3d5658faa3e45c

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\Greaselion.json

Filesize
3KB

MD5
7a611abbb6a9a924867db6020cb190d0

SHA1
e2f19e2ef273b9f5ae247873ce3306e774961d3d

SHA256
b080bd46957a74b2d321e701237222980c202f4139bc4c33056e8b8824f64402

SHA512
6646e87023a890e63c7c7aa6b006b41dddfc7b9005a9d70fc114e45614e8bb652fcf4450f7bdf6326d31611d4d4c12f40cdd690313d56d6b214682d98a5ac898

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\clean-urls-permissions.json

Filesize
268B

MD5
00acb0f14b6b6c11ce80107110ead798

SHA1
2a40b0217ddea6d507234f236d3889b46ee35baa

SHA256
2e666bd0d92b08bddac4487b184c5612dc408f21fe4f3fab78a7ce1b2fa3f8ca

SHA512
c3a53397be2fcf41702524cb42c8d2b49d4cbde4c5479c6d0d6e92152cd213dd7436d7729906d76ed003d64e806cdf66dda7f3ca8dd4b9f9efabe25ffb76c2cc

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\clean-urls.json

Filesize
18KB

MD5
25830a781ab98b30b545c9bedfa69876

SHA1
09e24b60fc7460a6ae9e193af5c319287560e0d8

SHA256
0ade7de894a46e966af886dcb880b6cf10a5cad6f88cbc8a56176cdf51f22503

SHA512
40c3a935fe3599891ad7470dd58a15169775d97ec1e0162df2ba2d6f87ff8ce27b0418b4b21d2af447ae310d33e34fcde20ee84d8e2d823453239030c3a2629f

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\debounce.json

Filesize
11KB

MD5
e0df2d0dc75d2deac9eebbe0ba8db9ab

SHA1
d0636e518045a34eb081096f86609744fa47ddab

SHA256
5f05b84687de1011614eb1ededfe23d6f98fb2be47ea1a04bae0c95d9a3113c2

SHA512
c086e251cac5c121b8841f0dbfd2a45af99991a8b4bf584727c6bbe7e1e52d2361d2ffeb099be5da937b17d3ea36882d7516ebb294b5f2ccd9959424c2a5a0e0

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\https-upgrade-exceptions-list.txt

Filesize
86KB

MD5
b8ebe8c70e14e1bdff4bf04cee9055a4

SHA1
6a8eeeb539eb5f630091a971585bc77731c24b12

SHA256
a9c464c1aa17ec9958141c020c30badddd4801e15b9c0a0d430859df0ad1955e

SHA512
9240b1d7ae17b6d20cb21a466335471d3b62ee2866e6d07dc62c1a288def513cedb5368891e4c8beecd135140a221bf8a16e048cced31b29fff9f8d0d40c7266

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1016\1\webcompat-exceptions.json

Filesize
6KB

MD5
2a2c56c638a0f1f88d646fc103bded91

SHA1
c237ded05b13fa97e8866a9c8e5134665e182696

SHA256
95a3a136656abd68087a6d295ca5e7235e44299a31abdf1ac0bce907904e1f30

SHA512
b1976c7d1e018d969effdd4a9383503b5ab2d09aef814c63ee9a6e006ce0910f09462b061a615ea060d2bf84c7d3a1ad67a1e553c27004fd660a7e7358777f4a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.15\StudentNTP_Sam-Richter_x0825_WINNER.jpg

Filesize
544KB

MD5
f66e5fa138432af6b40849484545b809

SHA1
25942df987649a1bddda636686064d29dca799a6

SHA256
65b5f21ccdcbdb23f39baf036ae5eb3999f3e88e241bc57a3a4d1bf0fbfda605

SHA512
29a512f0f028b2c4e53f492f6a4fe27cc88b547334466341b08b70724b16e7eaaf70cb0308e251f404aa6b80db972a553438afc3894440e1b1ed0962ec7a5319

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.15\photo.json

Filesize
6KB

MD5
a7e80c8cc5121a2febc654140e53ac32

SHA1
c3b1b578dcbf91aa19e65d0ef6974c165723828e

SHA256
a2595174656b59176071c0b79b404efa7246a9242c2bd19545155194c6b8cf99

SHA512
d7ef1e8df49956bc212388ef7a5343b9836e825c4ff066aa65bf0f3a136ecee4b63ff807dd63eb33e6e812e470d644eccaf3a7f61a816e441ffc44a982690577

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.10467\list.txt

Filesize
54KB

MD5
2b1c2e8103f5eda7eeb78510fe0f5f94

SHA1
666c1f96f36a9de88ce031c2856f02247c42f529

SHA256
e3a6f42d1e20335523f2040340b5dfdb54aeb29935fa398d5c6bb0d8a923e751

SHA512
61f7c8555bf87724d71d9137312b97fd06250fc769ea35fd36e136ed2c373dc909ceefcb32ebd5de5793edb01e5dc4fe036f57d0ca70a1b74c8370eba892723c

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.11604\list.txt

Filesize
1.4MB

MD5
faa2c86520927b2cebd9f7f971800d75

SHA1
71d6eed10007a39dbfb35b798a0e926032981745

SHA256
3d3d7085a15372b271f90cd596b0b5aa2a6e50c06f2ef29fc7e2be59f58fd687

SHA512
2de28f9b3db59782367d0990701bdf2a42c58e070220ba3d31e67b5197487264a12097f02cb3b3168c33b40d8187a550bc57659be6c18add23d53f5fbd543ee7

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\adcocjohghhfpidemphmcmlmhnfgikei_a9af85da93b67d89a7b91c10a60c8290b0ba74bfb9bf885932812e4aa5429063

Filesize
50KB

MD5
015550e032ed4317c16d5e2b4571e824

SHA1
ab7f101c9bee23fc2a1ece1d69d8b6766746ba6b

SHA256
a9af85da93b67d89a7b91c10a60c8290b0ba74bfb9bf885932812e4aa5429063

SHA512
fb59283e175168ae0b03c81855bc9343d2d50eab3b1e4e61c64a751e98f6854be5b56d211783a7555e18ed7036bef11dfee4fbc431ab883152e332bd0c919081

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\afalakplffnnnlkncjhbmahjfjhmlkal_9762c994c6bbb94f0223969d1e40351a5b14aa9947871152a276e3b2eadffa7f

Filesize
71KB

MD5
a065bda00c15c579906a91aa11e88874

SHA1
59ecaf9fde3f569814e0fa53f16726c0f600445f

SHA256
9762c994c6bbb94f0223969d1e40351a5b14aa9947871152a276e3b2eadffa7f

SHA512
1fcf16a0ba3e698dcb2f8ddd4b3b114d213bd1d31b7b6786a205d6d62f3d55f2fc72766705b7f63f75fba897cc67b85dd8f20f9577d686c0b432e43ba906c08d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\aoojcmojmmcbpfgoecoadbdpnagfchel_9f86d8efba865ca6f98389b7c55e368191b7954cd10b872da84de0b5382a247a

Filesize
12.1MB

MD5
89c01a540e21a6012c4292eac6100dbb

SHA1
2bf600a9d372f38d37c64a9df5cb26d5cb046cf9

SHA256
9f86d8efba865ca6f98389b7c55e368191b7954cd10b872da84de0b5382a247a

SHA512
abd83f91b97c9c9bba4cb82501a6d316ef07173e4916e87a13f888ad32947b424d18bd6186a36245b2bd9f6c6cd29ccaaaf2445b3e5754c30ea53f1ab6016f25

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\bfpgedeaaibpoidldhjcknekahbikncb_3e6258da36b82bcae73367f5ad61a51d03d7b3aee6d4d610848e62816c7a6a4e

Filesize
18KB

MD5
a3a5754553f03e2e5f623ad1172c9ee5

SHA1
f6fa4a54f609f90d415f51f748ccbd4b87706548

SHA256
3e6258da36b82bcae73367f5ad61a51d03d7b3aee6d4d610848e62816c7a6a4e

SHA512
5c09187043998d292ea82bef3f273866fce00b291320a6d13b3d37293926be7fad1f419fb3c4602b606d906dda7ef91b9122ab08ca92bc98621c98d9100329be

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cdbbhgbmjhfnhnmgeddbliobbofkgdhe_f4413b3aac0f91e66a0c9026f8bfd90dd07be1ea1b3d3520f146650b06983011

Filesize
411KB

MD5
d6781a46fe61f6ad51a3056b63ec6a0c

SHA1
cfa916d96ea96e049156efda238ff90fc8eee088

SHA256
f4413b3aac0f91e66a0c9026f8bfd90dd07be1ea1b3d3520f146650b06983011

SHA512
b5e871bf2424c200e03045b2ca4196e102928600d0cb23a6a3b4a43a1f566a40e59859d5ffb9546e6e3951d79887631a158097abe1dab744dee2ca6916f41947

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\efniojlnjndmcbiieegkicadnoecjjef_1.309d2c69220b6b14326ae4d0502fbe965d374b626b48acc5b249582b90c3f42b

Filesize
150KB

MD5
c186eb83a03b38a8558e9a0dde067dfe

SHA1
fc7d098b87c458e88369f7994b55add8f7db81a1

SHA256
309d2c69220b6b14326ae4d0502fbe965d374b626b48acc5b249582b90c3f42b

SHA512
25d9305fff9b31dde360b4ce2c1c4bed03e6000ea50e4016d9fea52285c1fcbc5d666350394e14ccf319edd08bd45c66212bbae78c2b282962178c4db5d26ac6

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gccbbckogglekeggclmmekihdgdpdgoe_7a8a03d6c0d07821f89144485b54462160fe6181b719095eb238d0aaf0c50e20

Filesize
1.6MB

MD5
c92d930dc73168fce82a3b6e38d9a2e1

SHA1
937a97c0e3a1d38fc0f9c03f5ec54b3576f3d914

SHA256
7a8a03d6c0d07821f89144485b54462160fe6181b719095eb238d0aaf0c50e20

SHA512
18e626d7cc4a0a04a462c7dfe9a714551c6ca52488ebfce12951316a9e5db44ef17799d2a24d6cf0009a51164c519a09985ee50b32c51aab91e25825014c213a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ggkkehgbnfjpeggfpleeakpidbkibbmn_1.8f2156c9c55b2854005f0ecfcdc23654d0acb1c505f2b698013e44bab994fe80

Filesize
10KB

MD5
48435969dc9cb9937f0a98dd6749a87f

SHA1
94468724e1bc8f1ea5b34072b67d1806a8c84cf5

SHA256
8f2156c9c55b2854005f0ecfcdc23654d0acb1c505f2b698013e44bab994fe80

SHA512
28b2fa4f65234bae6b2fa641311a6a70784b40905795d7f49c057c7c03177bb2faf257ccaa25c62de2b67bdc2799363d1cbfdbc7b2e6bd196d3d120c58ae7b6b

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\giekcmmlnklenlaomppkphknjmnnpneh_1.3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

Filesize
5KB

MD5
636c653ec2c30bb767533901a18669b2

SHA1
4b5a01cfea4c5deb62f3aafa01ef24265613b844

SHA256
3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

SHA512
a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\gkboaolpopklhgplhaaiboijnklogmbc_ef46bc0eb4964941eda6cef8c6a4feba90dbd8f96a88492689485b40f3b358ff

Filesize
74KB

MD5
00128ecb04200fe447cc1cdf6c6b83f9

SHA1
b4c8a71e72c0b7502f348e88180e2afc46ba33da

SHA256
ef46bc0eb4964941eda6cef8c6a4feba90dbd8f96a88492689485b40f3b358ff

SHA512
543f00597fbd8867f5c69af96f5781db3a4663290f1165a0e5320b1754a89abb70b5860e6b1d72c54eef2258bb686c0167c4666cdb658abf821a59d752bdf27a

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\heplpbhjcbmiibdlchlanmdenffpiibo_69d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f

Filesize
4KB

MD5
3a03f3ab4119a23fa6b70a32a6fcd4b0

SHA1
5d047a5da7c7f388416aa50b5fba745bf5f36eb8

SHA256
69d8f36372ec6edbfc4bdd957f954cc2aa97c9dc8c7992c1575b072632f3157f

SHA512
8caa4e94e831b25226e956a8ee87c5b369547081df863ee34e7f80d686259eb9b7bf75757043ecc5b0eda3a603198da060f9b6f30be755350ab912fdc7681819

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\hfnkpimlhhgieaddgfemjhofmfblmnib_1.6c670bb5af0736183915f4f24a8c4e7fc8f68fdb134b6acbc95b91cc6ca900a6

Filesize
611KB

MD5
b475189b52b0171a25ad17ec638f8a85

SHA1
79b1311344ef8c0277b9de6e25b9a1a2946bbe69

SHA256
6c670bb5af0736183915f4f24a8c4e7fc8f68fdb134b6acbc95b91cc6ca900a6

SHA512
1f35e0e9123bf80f82ed78170bc9646ebf8926d35f7cf51d79edb5a734ad1609c0d0b52b3493ad04e59a1d3d8b1840fd36f310ed014e5d1ecff61d4470be8089

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\iblokdlgekdjophgeonmanpnjihcjkjj_44fdfde835126a128fd9f020a2d7c388491ab5d251a107e4e10b6f24b63e7d72

Filesize
17KB

MD5
a1b36d762732f9439efa78708a40dafb

SHA1
6533b78ae795077fa711c67347eabdc88b5a6c6b

SHA256
44fdfde835126a128fd9f020a2d7c388491ab5d251a107e4e10b6f24b63e7d72

SHA512
8dbfd514f87e7b929ab9d2b61f99939b3cf687947dff980ce3378b56127785acacde7b8fb4ff034e2a31f8cec1901605c6216b6846f5d2a199a245bf6144e05d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\iodkpdagapdfkphljnddpjlldadblomo_3910a310856e1d7e47273c0bcbf482396bca0ac189979c9375a62ca53a63b7a0

Filesize
1.6MB

MD5
47e3d8bcf7e363d883d8d0f1601ee91e

SHA1
13c3aae1b52bcd6a58d9e66c4d8d9168b537f337

SHA256
3910a310856e1d7e47273c0bcbf482396bca0ac189979c9375a62ca53a63b7a0

SHA512
5456227fd3c05e220b298493ea439cee18d598ddf3321fb5c1446b85dd03c5687ad6c18f7c061934956fd5cfecaff1397c15d5ae5c233cc9ffd7678187ecf6b2

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jamhcnnkihinmdlkakkaopbjbbcngflc_1.c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

Filesize
1.1MB

MD5
2ac309d48a054c8b1d9ea88bac4dbd6c

SHA1
7507922d88a9cb58759b5326fadae5d0c87f40b2

SHA256
c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

SHA512
870dbb86a67f36a43ad4c80db904e76b602bbe062cbb9fe4222d1cc69d99aa4a60aae91c094a65a481d8c62cca4942f178f1b2744ed21836a526c7ffe3409969

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflhchccmppkfebkiaminageehmchikm_1.e081b6f8a72b3a186c2195224db6603352b6d251d8cf79413ed9be0e8540f157

Filesize
9KB

MD5
1deb6a9811c71fe6e656d8ed76cf6dfe

SHA1
662da6724494838306051cb6b096c061cebb115d

SHA256
e081b6f8a72b3a186c2195224db6603352b6d251d8cf79413ed9be0e8540f157

SHA512
c9b6a208d210589c23fbf75e0962cfbb16f3e9717fd14f752e143a2c4bf1f447000a046f16f219050913ed1daebd15a2f802c7914472df700b6287f22f279de3

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\jflookgnkcckhobaglndicnbbgbonegd_1.e698359726dbebe13881db2d3d53856d8a3a1ffba048ac94773036cd08a60240

Filesize
77KB

MD5
1068b68cfdad67e39e13fb7b97adbdb6

SHA1
d3dac92d9c28b948ec33699ff69ae75a900de6cb

SHA256
e698359726dbebe13881db2d3d53856d8a3a1ffba048ac94773036cd08a60240

SHA512
da6c4d63d8d22e231d5101d93429a3ecc33c89d62b5fc969c7276816d79f8cbe45a16652507581480edb83b61f0e1c57f41e4432f6fdd67c878f38e0d4eef64d

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\khaoiebndkojlmppeemjhbpbandiljpe_1.44c97a8527ef50cab95a16c5e78cd321cbdf315726823afe7e0482af9eb18319

Filesize
5KB

MD5
93e97a6ae8c0cc4acaa5f960c7918511

SHA1
5d61c08dde1db8a4b27e113344edc17b2f89c415

SHA256
44c97a8527ef50cab95a16c5e78cd321cbdf315726823afe7e0482af9eb18319

SHA512
e61727a277d971467e850456fbc259dad77a331873e53e3e905605cd19b01c2dc46df7400ce8442e39cfac5ac3fbcd833ec7310c7ab1c3380d900dd676ed1679

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\mfddibmblmbccpadfndgakiopmmhebop_bdf60991017fe5e955ab0be306333b5427fac3db247bad1f24709d4c9c4b6ef3

Filesize
179KB

MD5
62af22ce07e0375e66db401f83384d5d

SHA1
468b255ebdfc24ff83db791823bca7e78b09f3b1

SHA256
bdf60991017fe5e955ab0be306333b5427fac3db247bad1f24709d4c9c4b6ef3

SHA512
54dd31001427a97665dad169b0d5f32fdb79a89eac7fa23a164bf78095be2d2e5f9195eb9ffedc2d1998f839781e32515baeae482ec74d8409b0d58fe53993e1

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\obedbbhbpmojnkanicioggnmelmoomoc_1.95fb949e1f2ed6407c041adec19da4f5b4d2f081e6c60aa5fee35c24ade856d0

Filesize
5.1MB

MD5
e6a22e336d7ede1951c40cdb9b603d95

SHA1
34bf97a10b2474fcbc1b12e4b69517fd77c7b917

SHA256
95fb949e1f2ed6407c041adec19da4f5b4d2f081e6c60aa5fee35c24ade856d0

SHA512
efa596656790c768697a8d5b5f3814f5a4ad9cd475d30a523bcc8770d2ddd8cea18143f570c591c437c4560a0f442e55981bbe027c250b06f54718adc29a1123

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe\1.0.1838\photo.json

Filesize
1KB

MD5
a7cd44075e44e7b77f84370b4f2a0365

SHA1
6f1106b30d3dca84b7d4b04aeb1523ee0145cbd5

SHA256
a3ebc6732592494c5e2f10a91df4dacf23e828cddf5d685b18a35b1989f006b0

SHA512
b102768e5828bdda36f8c901c8253ac57cea0e7af7b80277d0a6d8a8377332af69cec4d27a2a610cb7b34a830bc20997369b7ae092c29f864aa83ad58d1d20f2

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.68\list_catalog.json

Filesize
76KB

MD5
986712f893817366c582c3dd2e24451c

SHA1
5ad4c249712657f438950a7ba379e53a0e3304fc

SHA256
8be9fc0f7a67d492fc01b2c001562f27328cbd7403ede81221ed489850f5dbd0

SHA512
00d3882404f59cd93a05d118c511ca23ba2984d352e97e4c6283cd09b68faa1e1498636e2e310afcdc86284bd5ead091903b6537750795db5ee55fa5b8a38edf

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo\1.0.11\mapping-table.json

Filesize
4KB

MD5
57ff689022f2d93d2287ac3b48daec73

SHA1
937b7dc21193a27607340af7fb7b987b8ea50582

SHA256
4665c8cb39b1fd0131b72097484bd3a8309992821a21de9ee0420434cc3f7d5c

SHA512
1b81c2c9df45875c2f563b99bb2d29972408e3d449fb2e8793822dc0cf85c41cb48eb92510f4940343ae4826ec9bb4b98093d64f53de635ccf75b5307b92ca87

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.106\resources.json

Filesize
269B

MD5
20effecf10eeb0456cc6f537c802f172

SHA1
8fb3968af27ad30c639f45a6fcee99b48ef79878

SHA256
044502a67e39049b4cfe2b80295ad396fff4d1a28e7f2a1200abf21061aace8d

SHA512
6a002b205519c0fc498c139d1efcab2f26bc03f3fa795a5bee9b3358c9796088bb6419e2b95afdbb84c5ea36a328dfab01b33c148c84dd8e3b9d21fa07fb6dce

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.9865\list.txt

Filesize
5.6MB

MD5
d818fef6a1c3a3ea5ac27b87713906e5

SHA1
0e39b87e27564e6cad5367f832363fc58d0b717b

SHA256
4533bdfe9827993fa9c7680040e5e8f5f0c252c70f21389bb966c97ff94fbfac

SHA512
ab8f7b33141c0c0002feb5be6264a753cfff4e88a5f2c619aa884bf95f0bb123d091420c64cad03ea353ec7b5e27ca4dc2966b171cc655a8e916e91b046b21b7

Download Submit
C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.104\resources.json

Filesize
1.2MB

MD5
f7e232619fcd50a55c3df6ffbab0245f

SHA1
f26eff68192fa88acc08ed97979c258f8f534a33

SHA256
f4e1a4ce5d42af762210fc9218115a1048d3564ffbc987b4c47f1d9321dd35e7

SHA512
bbe0d62000740c6958e8630af812bc388011a225785e3f8b3b7ccdf2e033a42d63db566df030244ac22884d005f5f2048b4a506ae64a8e7062395b8bf08430f4

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
844d7fefdf0763dd0273d4c17318bfb2

SHA1
c7784408e57a226d11e88e5f914b355c37210501

SHA256
5011b7146ef2b3ff912430bf6a4bd69a7c913a90d00cd4e44ce896a55fb65f60

SHA512
3cf5a2e9aac7233a372447fa389e69e00d751fad8d9f067b160de7d9333fa3e28b1c52d42ebfcb2ea2c7dcec83e2db7a79a39833027a6f5f78426e600349f571

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
11b19d8dfa468e00744f9e8283afc4c3

SHA1
11943924f9ce4e9b266f26e3e200a795df41cca5

SHA256
00eaed98ef2bd244f8bdcfe386889856a2162f9449b9cc36a2b4dc730b82e2bf

SHA512
df2f33e3dbd927f4b70af648db7fee931fa1d0fac96554326131754ce7fd35a1e871d6927516a633f83b02d990a8601fa753cf1a9f18dd07c5bcef73a60d6df7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
c9fe47e14333d819c736ea0f9710f23f

SHA1
f7373910a75b6bd2ff23d3087de00cb05fd8dd40

SHA256
d3e58322d7697b9a616426d25ecac2c85fb1b9623a2ceb45332ccee397bbb0e6

SHA512
da9887797659c309fbdecee14c4dbb1349194d366e83dcece387a6ea8c7a530e1c2677ccb811612d491b44b4550aa1247ed3b97df6d0fb1d5f49d35261a04e1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.85.1_0\_locales\en\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.85.1_0\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
588d4d48285830ad6a97f40ee56e8e3e

SHA1
f51a09082fcdc3fcb5efbaddd7bb034bdadf05a6

SHA256
0d253b7981b2d63033d4846fb7467a4606ef28a637daa45a42cb400c3b813dfe

SHA512
456d45471ceea357f9f4aade3fa16ddbfa7b9657efdeef8ba0f246a1c668ac98e1d7c206f37c471758d195bbc0d2f85481c455eb4aa117f77eadbfab2500d49c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
35e14d1f5f92edb531a97d6a9d6f24de

SHA1
434db3b4eee6027dc7ac3370781f13e99eb9b091

SHA256
0a65fc9c68d2dde083699803f78ac1692b0dd1b340f30dd17f2b4bb7c6b8351e

SHA512
3bb1f96c1b9e61939edc7d5620b4b445cc748d69b9848ff9ee0f0803b2667aee4565abfeaf9ecf4af6943bfd6a8e7ef486bf424fcb38cb2508eba92cffd288d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
475b6afa399fba1dc9e923691f2a531d

SHA1
416c039be4149613f006d2172f993994dbc6d2ca

SHA256
cdeee6adac8e1e41431bd004c517bef12feb37d3c5ee6c3bb6b0791e5edb4778

SHA512
8d2f48eea177efc3614eb329525a7ad913f64aff168627b4ffe8aba80ca07ac9e62dfe956400c6efa0b6bfefbab72f12491d429e16d7e13d719398f3da7d2da0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
6202f96a9dbb07940dee29fef004c3d5

SHA1
9d2f7622a4324da3879b291b766522fef1e9106e

SHA256
2e28147cf2327367aacefbef4ba9108839b5758f1f0820d21c833c1a9b746fb0

SHA512
91cf46b3736bef757f81848b3024c0f75c1be503dc0afb64ec09d3a692f2a4c21131d78197bfef0435a7a441d87612a785237554f48f2ef235d0ce1bd7663f3b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
14f682720aef842cd3eedcdf37b07b08

SHA1
b100453e7fb130fee93ff70719e28f24df4137f0

SHA256
20af175d7bb154d3e31d1c33517bc5d994ff07ee61c7a3ddaf9eb115afd36dab

SHA512
a692191eea846ae96bb702c786c8850d869108b4f9318a0ce87e60a2d201170bcc0355a20323ab76c42d44b7b04b2c689121576f81fcac12a51b34cd417f61fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
354B

MD5
acaf9751e74cf18d49d5d898f8d5e9f7

SHA1
020e8222a70731e1acac5e41f8ed4543c85029ae

SHA256
41874b301bea3a19ce3b3a8faa69a1ba303ca9e2d4b93fc23beadad9366bcd63

SHA512
4cfceb46215b5aeeed7142c2632eeaad5a493107753eb2704a410d696a3affdd335a533a3da861527a2810bb67323a5e95399f0fec4899d7ca8d9dedf8bf3d7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f1c902b1-3cc8-4d4c-9e4d-a30bed161b41.tmp

Filesize
354B

MD5
f0adbf24b1975978d0ac5ef9100fa356

SHA1
f61bf4366f9389e6da631a78f8140669acd3329f

SHA256
1c742eafcc3899a457d58a55a24a107c5d279b4e7ce14aed69f31cffa32582e2

SHA512
77386adc64d1639a1e1775355632eb388167318a9ac21c05be0cf6e04f0d94c8e3feb5b90a3a553e094b5310921929ce4ab49fe1035b740cb2a6307df7066932

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f567eca2937061052d7569514d6cb1a1

SHA1
447f8ccbb3e50654d44c2e6a81c393475fa41e2a

SHA256
31da1b3a5a25bef31e6c92b9f7c9ff1b31592e98c6e380e7dfa6aa4c717e9040

SHA512
147238963b16fcd54a3bfd52803c51f94a17cd49f724cfb80c7eefa72a55c70558f73bc49efe024a88bf743bec8d3be6b172881267897fcde6651884df141e9e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3049d0bf52d5bc5395a2d7bc54d8b459

SHA1
95a1f7390ad01516136e26f3012c96ac359b2d08

SHA256
f9dc1bdf6b1b049ecb477a4ab65619725e3ca5e46b974b350b367e7fb7daa5e6

SHA512
4187b97991cf1c8aa6380feef7f4dacbf12d726ccb66ee564fe7f53e9e6485a5f6e0e42ac03f2d7e6dbe46f7ebe741224dad794bb455cd329d71f48061d053f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
80487dbf2f53e52f19ed80c6eec81e22

SHA1
2c83ea18b69c52f8ad42efa8a6834baa0fb821a3

SHA256
7e933b42aaf98c473c03eb57c7b4b4fa5a9c7e7b1669b5974462da9d66d0b7c3

SHA512
c660a3dfe913d9438d33a1788c5c0cac9c649aec2c0d3b5cc81f3ad4358659a6dc0acb010baeea2d9b172aea92c91680fe55ad93dcb5e0c6ab36f30336c4eabe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
43ce2f5df7667cd0184797f0a642e90c

SHA1
3f6335ac8b560ff3cc8feb4c60aba0792fd19c96

SHA256
a504fb05aee845014b628bdf7798097b44b0d7d26b470b630e68547d6dbae458

SHA512
6e9de81990cf8ae4cb1ed25944a7ce36fc7498c7f7e913e743f1383b96e5dcbb8ba2ae3ae7ad8d72cb551b02f4ce6eee992d11a24c92d57f18421b1a6983c400

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5282d8ad3fee15516c0daf2b86f8ad14

SHA1
a74a7100a3d2d1858a38f085c1b6a8d1a185c9fa

SHA256
2656099294af38b47c35d38e6ba33260c9657b916557e0e18609d288d35583cd

SHA512
c7b690912408315568c5aec1be0f4f217f8449ee41bc2179856afb903b5fa27653f1092d4bc2fc02127bc460ae6939ef14b785514364d020454c20fc3a8d0807

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
346651280d2fee9a6967b4a856dce5d8

SHA1
def95e7f3bd26580ab50135b5301c4dd5e2430d2

SHA256
849bfcf09c7c563671a1afec789e2696ed2d3e2a8b48dd231170a77cb40631e3

SHA512
c3ea27a002672c1cff305d5c64a7f72f21fc37f0f52c3e7ac31b5b55eb553ea1db590350e68ad7fc0064a9166151b3a32593b1437c81ee93abdb1336be76ce34

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b7755588a0d431411e5fb3570decd4c2

SHA1
c0bd80eacdfdf0a9bc5b491062340ebacfbbae8a

SHA256
988633762b8d9c6525efee6ac3df87e8dcc92ef2e91ce7c247610280dae709ef

SHA512
845263d0d593632c98bc75a93bbec35966f96491582df5901691c39004dca921ed4b408a305532b18ebdc5644782611f06fa0c96ec929510ded61da5710534f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
446f66909549be5ada94af6d210e5810

SHA1
a596022ccd82d66c4701d393779852672b6bc140

SHA256
e83c6b8e7b1ed6c6d7b5b85dbb0ef3bf961ee5899bd0f90c57a4aeeaf2ec10f8

SHA512
869f7ae7c85796b30caebe9bbfc8e15d46598ad42c6f3d5b4555b7c710c6c2768392f0e5ea3dfae8c6ed8e9a1d6bcec62757de366b05b40876c18f515672a309

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f889f9264a3a30aee759d8a4625ee9da

SHA1
90e1684e5f1de84a9643a5f59b5cbb9799111cbd

SHA256
7be2d9aa0ce2c08e1b00df638333f6db64a3096a09bca5867a9f3fc9850b4714

SHA512
f950cb2347a357892c5495df1a527f1a4fcb5a04aa042aa9e1a0660292502b7159e46160aa48f21965c559ad0f0bbd9f091abcca924f53a3d0aabc14ea6ac87d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
25b0e002fbcda2d157d5efe0ba96d3e3

SHA1
8f36e8453fbbc00ce0c722b153e44e4fd619334f

SHA256
9a0bcb7f05ada80d97933ca357347183b00dfe4cb76e894852f6ca11da18f406

SHA512
31e99cbacca8d07fb553c5af92a1c4c87b060ba6c5067f1fbc449ac81a4306eb1b12813cb4d20e3667d22ba63dc6ea2cafa947883dcda88d86cf83edfe3f56e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
43f4c0e06b8cb70d7c8fd8017b251390

SHA1
340daad42ec80fa2ac11055ccd2c6c6e6b43d2e8

SHA256
649e7340812f5caabc4f68cfb8ab8cafbe26c31c2987ef7a0ebd63abc8b028b7

SHA512
17df5b98241fce489aa80911e03f245516a7036fb87c869dabba3a242bd3e6c7acc20b7f2def6e9a5712071bcec8f27e32b75409427171b96c2dd5fa6c38558c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
32901d92a0a117e7df5977fcaa8a62a4

SHA1
be4440c2362160484bcbc00a53201ee962fdf4d3

SHA256
94b27d028fef9f3b8d58522747ea4f4778e7cc5f9cd848a07d563eac209d536c

SHA512
2660aefaa4c5eae50e601b7dee4aa54e280f088a2b16eb706282e72998b4ea7cff3da0c640c83754d93e0065705114ba4a086265cff66cbb78d7f6488f6104bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7688d90edb49c95e151ce3b9d5a3a89b

SHA1
252424be2af2206e47afe6a9888c91dd16a6f096

SHA256
a52ef8a7647c62e03a07885a4129d8b21c3fa0039ad603c2bec00a6fcf8b7f01

SHA512
931cb4590189d54113bf14871342a2e5192822042742893ddce927fb1da7a97af7793e0f4e728a19e1b26e1d9c5edacf868677ed22867ae2afe84c7a82765b2c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d6c3bbcdb2c5b58ad7a87721d2de94b3

SHA1
8596af3a4d8f6b4406eed3747dc75cedb4adf389

SHA256
8f9c8b9f88a60e1b40df9ba9ab18d87edbedc88f659830ca0c8acb13615a3e5b

SHA512
bc96347c1629df8a7f80e8422fe2e76a82f65ef3cbb460db1fb4354da9515565cc7a6552a290cfb3d7555791b398e904ee8b9c2bb59a73e85e0b157bfa38b5e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
8fee63e917ba437b2bad772d3761ba9b

SHA1
1e1b87ae5f8a7cd08a95e599bfdfd7b4e6264015

SHA256
d7197c86bdede309807bea3c798dd9a3183f896b4c94bf6dbb5690c3a19f5ae3

SHA512
df2d67f45901d0b1cc0d1bbda5fa61a2c8be088b2074ac226c2f4b2605a46e02794c83676183c630329a83ffe1bce62ece3a34a31ca46bf0c9ff75d9418eb7cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
1cfd4d2ac81e2fb87bdfc95e9076050b

SHA1
f428087afa9085ea02f01b05343e677064704e05

SHA256
335267d3f708e865be0b35a34d9e66895f2b4d09f45cf20b9846a5dbecd89480

SHA512
6b9888261fb9fe6772995bef05c0e770b8a2ea4f3e3a8985d25277004c182a01957ecb8dcc78a101961cc8dbda10ad8e5d1b6759475c79d9ecd648ed20dbad77

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ba45e5e144d961b017273814fb8a2b92

SHA1
0ef51eaa215d6a8279428b979bf10db1da0a6929

SHA256
9eb8b83cc7cb0dda6ff583334105d8121e76b61e17a78facaadcfdac64a3a01b

SHA512
5ad94ffb442a6a4ac08fd316cf73d2053d138725260392ff12ee43293da45bb3bdc04def71d673909bcce562ad79c3dea404cac750c06062315bb471a489610e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7c05812bcb6d1babc9e852ecf69ebd15

SHA1
03297f09354b0e68fa918139636b0ff0a53bcd6e

SHA256
9a6198ab43fe3a975e893ccf3fd8f0ebb276872f870b1f7524cd242c17a98eaf

SHA512
e10c38b0c4c15f26a928b4e953cb9a1408c7c338eaafe70959fef4a47620697d95738331dde81ea4a70343c9ff183c2f970b79594ba2405d060bde3d8b8525ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b6bf74d77d17a8ff16cac982af6751ce

SHA1
f803a797d16f8dc1b6e73a946b0133ed8f5d2ec9

SHA256
5f01215b60e5509fe6358d9c827ac8935ecd9130bba66f0c343f32819cdbe02f

SHA512
d3fd7752b42832414277b2ce8148cf45f43e541a019bd61527b80dec8a15814458f7bdc36a1256a6eb1064f0b6b14a34928e10feeef870edc2a9ca52120b0bf4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d347867cafe73529fc38a7340228c682

SHA1
5e47ee797c584d9a2033b87c2ceec3f2533e8526

SHA256
deeb8ed50fe4e5ff3403d21308ed61c333620ebc4943981d09d04066a11ff6be

SHA512
64f369134f6fe0e038f71570cc305f81d208e6ed974de265362e5181fd1a148409257b093cbffd38eff8927600b9f71fb4992c9257f50d8e07d1be5b7d554889

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
cda476bfeb9cfa1f4fbdb8882d9082b0

SHA1
0fdc1e0c8fc98de5d809c45e40239c5a60544a5c

SHA256
4fb7c04e44bd829864b42ee1e9b6ff256c1fcf328a3fbeffc063f8501e2994dd

SHA512
c4951fcd9e005127631c1e5b72271a0a9bb0f39a76473bb69dc2b7356413525b5402c36b398b214fec038d0308c6909a89184f001ed31e75498deeb56f040482

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f479bdccd37e4172625fe3e8d563f1a0

SHA1
f01b34e379d1d808aa8600d1ff3170bd6516efca

SHA256
1c5b97f7b18cb884be878118ecd19642a111abee5e0f7e899b3a527f326a3afc

SHA512
ebcb40870af4df8f4378d831445afe0e4df916524c362c10dfca8e5f7d4a4a948d8464f017d51f5fe9924ee120ca099f02d57856034cd7628d6c0af09cd10be8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f8cbcf716d85fc4430048ac31c0808a8

SHA1
e2ae7b3ce72627193375f78406225cdcee85e190

SHA256
8fd6b397df48d893341a646191c3d9ef8b7a28d748833c62ca144f509546b55b

SHA512
7e7a1993890e7e902d12d67fd4026e4b7bc180b3daa980782f7620dc6339287e185ab2212a968546563bde37b32f3ff4c1ef46191f6a4e2a2cfbdf622e938248

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
bdfc97ac224261b0b4ab986a5b37ec7a

SHA1
7fb712b9ca1d333f83ab4a8cf3ddae99143e9fb2

SHA256
55a044d2fe791b1c2af4ba5bfe955fe669317dbc8777817be1d2a1efc99821c4

SHA512
43f7034d81f1aded05c76bfb1554a91da12ee596a3c1f4a3391abc58ad45c0778aac6ba6586075a951c6526b2ac093379d8d68fe0948b039570f2d3737f188c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f91e11bb08aa84dc37a05e59b1940820

SHA1
1a4bc7a3538272cc138943772cf5299fdf62c5a3

SHA256
836ccd4d3f8fbcd785f481b51f2f9e4f344c91345fd05f8006f731b7e89e1e73

SHA512
95a3578c84ebef021ee15943afd307c6279bdf0fe52da96d87a6aba85a6ad446e061aadfa507d530919714fb5270ab479069766e65d0e6332106e5e647b5c82d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
af81b73551b22d3b46306e5e3b28169c

SHA1
a0865c67857a859efc0ef40e2ccc496bea50a53e

SHA256
4250787771ebb8b855beca191d2135da97c9209586871eaf08e00a9149fe565c

SHA512
6e925f530fb535c7f8b945ca287c6ea27715976f0ad8d731ec227d72d6c7e7c77c7a5d8c887079fe47778e11d9fa8a688d7df5fd3e64c8597c2b14fa207005a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
8cfac888f357d2ef4f2ba92aac0661e7

SHA1
4c66b27f72110f012b1405e0f3ba5e21a5f19c72

SHA256
862d7038aeb4b86bd18bc1a831ed6c3387691dffae0662224aad6e6a8376c806

SHA512
875ef4e77ac737664fd6dcf940cacb22368d4be7ed19ccf99420d8366a998dd429fbe00ab8abb1d3cbb5e77c13b86fb9a245c1cba117368382fb21b09c9cb833

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f0962330a324e4c9371bbe8d1f80cc19

SHA1
2a8dad0ef4f0dd9cc459762f52b670390d2e1653

SHA256
73d3008b60415d8d504420cc13c37afd951a69cbad7b988a1305cffd0105b1d4

SHA512
d18088e32cf179769aecae2296065f9e7fea1f9b3630117f9a6b5f1310047c9845919c77d22f97d23098fdfbf6b3d5b378a1f8ea391a28215fce7e18e53e4503

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
8c37c396100998f4ef14c97a4f0810f2

SHA1
e678c80847b1b95fd4ca9b7ededb4e95d36bba9b

SHA256
a1598ff246135d146323728b0468d1101b58735c25d8d61c88b413d09d2ff7a7

SHA512
e4cadf781314ec25f5497ddd1e1cbb63d5dd5f07d08489d1de1ffe364d930cd21ad875b7ff711917bafea482b38da27c27b564ce7a0f3a8c9e15f6d8cba7c3d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5a12498202ce381da2d3fa43362fa3d5

SHA1
fd363682aba2e6ba33dc7bf08fd591fb00217eed

SHA256
941bed6515fd487ab814520ab811d6b905cc427d0658f1173d05748b8373cc4f

SHA512
6b1d0ab28695e323baa913307797db62fae31ee7a4cf6b9e2fe654bad55f8e758bdda69e7310a823fd2474d5b616c80c0fdbaa6303abdf743d8d301c4d5b3495

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5faf075e023ec1896d013c353de97a07

SHA1
c22b5f80ddefc365ac69abc0bb2924316d346fc5

SHA256
72be3426d1b637777ddf17a0f4f036347273c88a0b96e715cb92044529077293

SHA512
eef6f16269fdf0a9162d3a7c0c348dccb1ced60c0baa81f035df7f6853395d9c43f6c2b8d4cb97490d03aee7a63d76cf2359b52e34fb8768e01ed8c881a1b0dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
12787c7ab72f0f8d4ba285f09312c9d6

SHA1
83d2fdc42a148db5b76f791559ee3b8a7a5dc0a2

SHA256
60def0b30f54122c5a6625099598436c6f5af428c05431cb6600a2a28da01e6e

SHA512
46630630ab7f21f221776a3478d5b425d39b58a0dc68783899e92e1db3e5dae49d6cd18aefe9172a1939738fc54289851834acaacf687ed83280dcaad8ba579d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1e43a05833270df0068f43a688518c2f

SHA1
dab958ae3e429b4ea6cdd83507287923abde996a

SHA256
1c4a0922cf179e006654ff51230d925e85a6da6843917f21ca7a450995bb4542

SHA512
cbd0c086ff0a8fe6c66e7779143f819a7165e0ea5397887a9de98568ebd2ad367cf36b22376fdcfbd84ef36d5ebcc4c2ca835652fbebc1dfd378825a1ed58e54

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
cf047c653dbfb319cac8fb9b18ed7b22

SHA1
e3da2dbb6844d52780d0d7453ac9b5bfb59262c4

SHA256
97a733deb12ec377182ee37ea1cf6a49ca0960c2ac63ecc7f3ac3c2b7e3c524c

SHA512
6f99e3db32bdcc7ecb0c1df3d23fec5a1a20d17177518f8b5f69c54331a0ace71f223857a19611c909fac6ef929162f690922b36ab309f1f72e6cd8d4e19febd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
608e7a499d0b8df1759d4bc0c42a83c9

SHA1
e9c9a6bfb16ff15c1498f1236a87a3dd94afd81b

SHA256
b7f1657bd0f9d4dfad5fed7466a0f79c17232cdc5bf8c19a7e97796687af5644

SHA512
c5dfc0ed548f337703f9c0e2a2c286bed24a728ccf522dedee2b78fa731dacbe38452fe3df6871ebe32142f1361daf5b72c40f21ee6f9af6fd466cb878e10372

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3efb9009910195c16345fa3eb220daa4

SHA1
94b40a7ead55c3f4b9244f42c4b7e431beedf44c

SHA256
464863d51280093f8fa1ee29e57209718cf42e8babf608f2becb521caabd71d8

SHA512
fa2d565f333518671432bb7f25c999c8233c661acaaaeccc423caca48ef1b2566bac8d281b172b84e69995ee1a84f4e37c6841011dd61a4243d1ad09af564d24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7663b65e42c27bc7f9abfd957fc76452

SHA1
7034540c913c7fa6888533ffcf847a7219d5aed1

SHA256
0114cf0d39778f3324fa5f3186fed45bf64380273cc1553c8eeac2c278a3aa93

SHA512
d065de143425d58e89af03f30427a67faeb068eb2c659428d274a98df16b123b9b45ea86d73db791f2caf78f0891950bfd39a00287296b0774e205db1cf86972

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f68dffa97b55c900a18eea4bcb159c52

SHA1
d040f50f603d13a702538689f16f2d440747c3bb

SHA256
f30d1dd1c40b41c03204e728262484cd013a12220bed8d151a01b7b0f7889788

SHA512
592e948eb76bea0878e8be9951bee21360b36f0ea3122bbfd992cd5184278db6c51372878580b05ccd4fb421ced104bf6bda8c1993f753b406865eb285536e1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
839c13df21766efa1415b61c6bb13b49

SHA1
8b32d49b7ed7def6353edc011c1e94b0f5000503

SHA256
4849895ab8f642eb5988c81f1d35b007ad053a089b68cf8d581860f65fd40428

SHA512
e596a6b25fa060d82f0af2f046618107cfa07fe494f0d043a512ba78602637b1c53f21ea98882c315d7fb98342f0b8148a933ff7cea86a6215e34e23dab8ed84

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
640cff6ef4ced4a4051ae3cb13a65b3e

SHA1
e9a0d70e2557af65d5afeb08f0d966d3d1c5e348

SHA256
be2f2699b3042490c0e486f61a4af4a79808761c2b5a60b10185c9dd74222d8b

SHA512
ba8ddee09191002753e946f8d0fe3cb7da6cea1c65c87774035004be94b30860735b258978cc869cbae2e941712afb40ef9cd537e2114282360ccd98610b7bb7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
acf8676885add45341debeb8aaa52132

SHA1
226bb4752b385f5afa8b908195662ff56140c9dd

SHA256
f978029988eb1335f14abefed463b8137fcfd562fa008d0fbfe68761675b38fd

SHA512
84761b55b2219d372fdb623a1effc3e136492bdb4635ba784c5aa8e87dd3243222a19c35d594a2acdb49d200155550d9998adb45b2a1e9c9987a63d37bc7cc77

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
02aec14f533b68c0a4e11eb3094c3715

SHA1
5020ff4fcdb6fe6ccec6324eca88dbcf9123d334

SHA256
e45a0da1247a7ecfb5c9fddb293d534085b34b150e1c43244bcf934fa094ff65

SHA512
917c1c9e09d719959e4b7ccc09dbabbaabee8e4232ae9e87056cff28acdf34061ba933483f56dc258e9415d4be26cd34076c60336150d3f5ac333fd41b028e29

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
9e409a8cedbb627e16d8be782cfbcd29

SHA1
950c076ad4b8a3cdc6c019388f9ed847558a3da3

SHA256
dea70f887230bc2f1597bbccc54763e791587a0fcf6bb1d4e7514d13d3710d0d

SHA512
a603b8a1e627dda3bc30ca7c402c9ca88eada829904be3c5f26a23f99377a93ef5b55317a4043e50145ae382fa93ebf97ab61f586ba998f4ac105c25abe27082

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
fda77bafb053d46e59395189d99b7135

SHA1
acb6ba0b5adbf3e9a60517d5285c1ba78433b05d

SHA256
b57e2654d4b289bd55060b3d4a4355775a81c1ca1fb776af3ce2c3c006f78c13

SHA512
055b169a44021d726bc4f2112990348fd3ba6760ecde7f5172a9b2a261a829fab2a6d74cbc1712515c2472acdbb094a7880fee3e0c874496e550865e4b41c1da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e985ba9cac45dbaef8ddcb0fab770010

SHA1
7ac3d7eae6fa76d611c63a0195b568543f6de74e

SHA256
273322509380bdda335522acd825655c82bd81f97970c3466f3596649d04f822

SHA512
89256a754b476fc12da6ccff69b7b674fc11087e93aa9dbaa8474817afa019d6c1bcbb27d40748883d9cd49d3d4c1e1e0f2577ac586310f2ee7efca224982bcc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ca5dde93f80f2ca31fc12e9326d92950

SHA1
3642907e789f2770d8cd5cc25eebb49f046bbc57

SHA256
f5ede95c8a2f80d2f998107b39620a86bf1e4f4cfb9d965be5ad826a75bc89ae

SHA512
e97558d9355274f808eb838329f788a2823bd1c60e19fdabe8bb503d43c2974805bec92128aacbf2915a7a1c0af6da5b76f427093e10b80ea027ab2150039d88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
48f27c28958c5e1d1bb3c7496df843de

SHA1
8546c1e76ad7323f44f30bc6bdbe3393d62873d5

SHA256
61794684eafd71fff6dc886ca1d8a0f55fe25b065dcd4b8eabc036d53a43e320

SHA512
ece54b0c7027ff550d7be8897dc9405f077b704ba880fd23c41a7b6295fb855df63485eb3e4192fa14f5593ccee513b7ecaca13bf152e38764b11ebf7909b886

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
aee0070b860404bdd9ba1771ad6ac57d

SHA1
376dbf1fe9f8b3287b2f4c84232f674f9358022e

SHA256
9a9e31ba5465af5ca8ed89b46cda150f714bd26d6d40cc34db9192736f6d3f41

SHA512
5c229aef1a2c1ea4d464b170094d25418448e1b222fd57f0f75c3cc2be647fc228b1529ea634479b4a528f4a545dd9a9f4562437f3adb538337b34ffdecc78d4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
92ff0167aae29f5ec53a783fb2f12a7e

SHA1
6293e741d553670ca2197ee8cd9c63ad3c890939

SHA256
37b85907259f9954030350a85183888796b6f32da3ad2f1b5ea9671fe4da8c4f

SHA512
bf218697890bb5a5c8115479fd75f35b17b026045faada61119dbd4b0de3601fef25c5043eb45c6126d4b8154a81145a409400f8148acc61a40e7326fb041fac

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e34c7ae585d42e7eda6cbdc78c7a00d5

SHA1
6f80ddcd49a9d9401d2db40a56b549a83d2fcfe3

SHA256
b1f5cc40556dfd0025acc1febf1bb8527b1a8391a54785ebff3047972db0bbf0

SHA512
be7fe7f24725a25cb491c5b02d554d1861af5dd59f3e5abff13c2c969d6902329b3b632ca3c67a7121bf82bdad804e7ddfa6d722d9914f83bd4e8aec15ba1fa0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c1b525eebd0339688b2494e30c7d8ce1

SHA1
1ddeb7822af4d8498da3af440893a395092e50ef

SHA256
86f0a46aa876840bb28d5380712f2a2bfba0976e793ef9aae486dbfa5099da1d

SHA512
f5b15ed0be1023054a54d510811cfe932fbdf92d688a75743754e026fa5e0d801740f3fbf296fd062a8296d8d790ef44c30e494998f7060a5ea563533e99fb32

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1c2671800ad70f62c3dcdb563a65fe4f

SHA1
75134705cd2ca7790916f2c492a806a9fd570001

SHA256
98acce005cc623ddf44a89e335f41922d3acffd2045195600ba82c0a4587c547

SHA512
6bbb4656ddafd806034db8b0f3eaa849efe246239383fe29cedfc9884880ae56b4295331ad8d6f77fee7680d3a76f12b391ed68d126cccf9116edfdbce2088a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3048fe86e5ebbd83876a1d7fb5e4ee92

SHA1
dc2f21ba8da8bf85a489e3814db6f5aef1c61552

SHA256
e886312636874c678d5bcb49047ce177bce54a9aa420b21f51a100e4312c41b3

SHA512
7da3d5d53c44442eb53534d8a520ab279a1a9e388faab02851d477dc25e2a2b6f7e5e7e30e29c69d2bf1eefd8371a0b45fe74436e32e95d336c867ce9ab2085a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7f27c88a37536d47b0c2b5a9a213860c

SHA1
e3b231ad1f492cbcd4aee56f083b3075eaea112c

SHA256
b0e92e745ecd61e0a0f3aaf4e13d37d1217b90b9e941db2fb138a0b641a32712

SHA512
40602d80e8b22bc60d3d7ba61b47cbfd1f12dff7b99c3b516cd01b4ae7fa0b308d5163283363a7d291150f95550584b78f2e8974a5e31cbde89a6dfee09ec991

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
eb9c6e7196f6aeda75686c1fddcca7c0

SHA1
23b3bb6b8389d400edb2ae7016afa890c7d990d0

SHA256
2f118b6939e82e4e8d8e9afac0bbe2842e799ba3c4b933f46e7aa26befa7c9f6

SHA512
57648950a053c38d642491ce37e39e5d98422a62805c7c22d1955c94344f9b2b1a9173dac938a0458e0c27e6345044c86becce746a9d048a8d31c8c513944aa3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
a3d985472cc92740dfba13c97a83e736

SHA1
38bed186579582ade99f5fcd82d857b94d41126c

SHA256
78cdac6e87f3a618d4312141227d33cf27e62b2a8e788e3cf7464e5533006493

SHA512
c2b999b6d5a34de2e40a24a4e66fa4e186b9dd1947f13da85b214cdcb605721479f26087e9bc14fc389e27b4a1ea548be46dd4a94c760ff87dbe54385d2bfffe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
1fda5e5d01821a4c765470db72a780bc

SHA1
839256232dce701e634f933ab38cca8a7d726e79

SHA256
12e050c3d3a7ea504d7b897f82e88e536c3c8e4a2768cc1438683c5417ce6f2d

SHA512
9a391f7b46cea52279174c8bd467742958e33db4772d3fd5ff990c1f281b15ebe62f0a67229abe5ffa56f69b09c58ef9a3cfb01a9cb264b9def58857cb101f13

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f7b440455bb37e316e5489e426f38cd5

SHA1
59f357a2362fef033bd1ef62cbf14bdf4d5c2bf4

SHA256
b9ab4b8ec24b82f7cbd237da794a18d12a951b2edd752d5e426f45f419bb4af2

SHA512
13a85040bb1caf882364519d5a7708a5766be08c298e957a2955324c4ee781dca87c4f7dfb76ed5ac8a0279a9ec724a29a475c9fdad43f09df7de4e596a7e5e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a3cf49a0a0cac3891eef3a35322bd065

SHA1
ad50123626f575b4938751aa8461aa37d6156599

SHA256
f1456239c50a63eabdee30ee79072e1f08b965cf637cc184d2c73e1ef179f005

SHA512
659e1f3f810167a789038e86716f5a6074a0f462743fb20376fb669772868e2e229b856762bfb288d7eaba4db8a36ff61eef6f4fdd871a79f3e8e74d823b09f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
cac918d0f2145d55a768b3cb57e2ef9b

SHA1
70dbdede36376677a38adaee461bb7d9970194b8

SHA256
23a2a5d36160e73e1a27509a06b8984e412a9cd082719edf090931377a7976bf

SHA512
778fc1fe1b2c271a1be2de30d6768b36bede1fd58fb2f0c655ba69ecd99f9e4a31416f9e297feb74e9053aad031e1c42e8104db0be7c5c03d7fa461aaa331510

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3622b7dc8e849b401b90bbd60d57ef84

SHA1
cb6e85ed86b963ca5f157f091db121e1d35f1361

SHA256
17107e68c6df73857e6d0a24e8fbf2bae5a6f2691b580391dc1e88f61c5af258

SHA512
200e492d8412dd9fb95502563801b483e070f3ef97c80525ddd066fc736474c4decbdaf100626c96a5bb80cd89f263953acb3ff93d8ae01138107fe12f9df7af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7f4e06700399ff5b7e81933af7bcd32c

SHA1
56963ee5e1a84324287a94ca5b10b62bbbd26416

SHA256
2640abf8995274dcaf53946f463b7efc0afb85b1cd84335fa6c97d1b912ded00

SHA512
5140c689eb2e441f9d1aa0f7b6eec9e47f204dbff097e5571cb9e28050a1a18af537199b6acc0a421468abd4c27d73e2e958dbeaa2874f31f8a11a34a48352fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
2c0675bfa451f2422321e8f76e19fb78

SHA1
cb65b6916ed856fb1d9a7198ccfc7d7663d58409

SHA256
b710c9d2c30537556cdfdfaf7550405f9a689349ac4b43caa1233c3ca7f9a4e8

SHA512
41f2e003603098a98a8ae55718726696b5e7d967fc2e1126caf3200e48ee380a3940e8fd0b0860ac991b41de1a3987ff8e61493fa1a6bdabce550105e1d75af5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
4aa5c0c0162b7b60c5d84e652dc7daa0

SHA1
b39ab2bd0ef994507ed399946c75064a2afb30f0

SHA256
880950592ec53ef67d8e2d7688690a0b0852d5f6d7203047ca56bc34924c0c46

SHA512
392ed8ccf69b4b912495409cbdea34023a62f5fa5761e92d951640ed78c74ede5c9d41febfc05b27cb72b9d14324a3517fb09aa18128080e93f0dc3144198131

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a5a38df53871a99330dcfad3830aba53

SHA1
1559a18006106803baa434ad6ae99e52c020b35f

SHA256
2790692c5d3a923b508c49b8c12e07fd5e5c359c68df9610732de2a30d5bf9f2

SHA512
11142e7c4cb666d279513606ee5737da8ba4a8c49ea2e2b7fd407886afb7c6349ecd518563f68acd6f613b6721ea3d752edd036f9c8a84cf582174e8a9f70939

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7d40c25318626e3f63d943481b3312b9

SHA1
0ea5ed31de8b0b12e2b2702f88fdd8518f0a7284

SHA256
47616da980606450767b5b627f36eb33434b6aaa35f01e291375e058e70e97d5

SHA512
c1ea37e8d0371964a19637830b0d34ec22c4d815cc32d5e76a2d2ca67b6b815880172e5fc9d0520397598a8c4eed611a019d374e7c7dad5270dadb092bf61530

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3ce568cdb335dacfc938cdb4964ee82b

SHA1
49050fdb2a17668048e661e0f904f328e40e1e0f

SHA256
0c5598b2a4447ab0155ada166011d194d508c0463019eb4dad0a1ff3572159fc

SHA512
844ae8515cf1e8f6180760c2203ac911162fffd47419480cb1c07138487c6078c4a5e501303f3076fc4da3ce73bdbb048b6e619529b301b4d7788890477a4f6d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b8e55abd67e84a05559f5f29ce397f43

SHA1
bcf52d4f76c788de950e427072f3b57d3f2fec5a

SHA256
1fb33e9e319c52ae9d27d6e50d67e1b716437f7e3b3d9f2f2b16230d4ce47bc4

SHA512
ee095d42ce5f4c8012b34f05565ff07699234fc7c51a00fd1263fa8c3d9c271f30943e8b461506e47a58d2cde786709dd04eb9e991d170a56d21e95b9e9c5984

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7ea49588e7142cd49fc47376c6973419

SHA1
73b0d9b9778300366ae76881ef4d96938cd0df78

SHA256
f6bdfc7f8b5ed969faf9fbab1fa9bd31cbbc8b7493cc173dc6165b842c2b2ff3

SHA512
0007423c5637fb934031ebba37c0e7e01807362b095871f8faa4c6a1314eb70d84519a616a5099498643747f102498e1d76a9328ae0bfc025e1021dca110db80

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4e92402093074049ae37c8c581cfd5bb

SHA1
101d582fa20181f85609938d9ced321e8d5014e6

SHA256
3209c845f0cfa38ea976a62cdc5ce9389c5aeb4a26d70c007c41f5eada67bb89

SHA512
29e2d2021a47dd59ac68fd9c0b6423ac80dc3408f9547c8dc122aa7dd8317983161c4857201b01696fd73f6b1b488cc8a614444e6c7fca2ee278d2b29158d3a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
04cff9717ed202af8e970ce705246647

SHA1
4f83d1ce1566aa4377f14e30a58d86de92f789ab

SHA256
cf8e344e17466bb314d8f5d18f27c53feb15f1c86c31c4555f817ca785c7bace

SHA512
dcd6bfab107b574459866076ee8a47791b03a82b5b6938ec0895445a982d639b01b656bdbc07f364228c88e869e4240f3c038160dbebfb79d102d19b12fa91b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d3b12534f89a5d655f39217003b5ff1c

SHA1
134527ede629e67d94adb5906a3cfacd2ef8aa8c

SHA256
9ae4e41860b38db6a0e20d4d5c0ddf35a626337dd518d228b0f68cdd2c5c0046

SHA512
38ec39c7c6d48654bbf4a1b0f8ff085da2aa15051dcffaed900c690baa963d4e6315c74b0078d48a790520bb8de1d81642967d41de425bb1958204298ddb71f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b0b268eeb2974900df0a42ea4149e414

SHA1
27070660a83a771c43d6fbf3d9842076e90b8784

SHA256
526a1dec6807f94cb0d74e88ed2f1adcf2b7d18faa57b3e65e7c1deb9756ab8e

SHA512
d3217f83126d7e5d290b797f588ede6852f6c0e5fb22bfdc79a0299c198da754373001a4fc88c8b57f6b43f55f5902071ec755b9202d61e7cb1c1b89d54be60d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
74d48af3610a1b2f08ea0fe235515e43

SHA1
fb739e2b4c223de1391b07783cf383297c0f4373

SHA256
8def743b5db433d742b5d60bcfeb6ae26c1cf4870a508d9abc987c3a226ffce7

SHA512
8a1a4e4c9ad5006fceb0af41e8bccd3a4d2bc9098758b65e3e39197ea99fc4fbf7051c3f5b968db15dac9af82c99fe120ab4b4e327a125a48553e3394287b67e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1656d6567eec224806edfd2afd2b392c

SHA1
89bcc3b6a005ae7fa4ce2f1ebd68b5ba4ebefe2c

SHA256
03861edd73a8f61a0627ee49443ab71a1e735382140cae142704626f6374688e

SHA512
0ba888ca7464376f0de33e5fc109dae97c91deacfd0c2114e37162e50ab09321d87872e8065c9e0e80ce032f02e9d90966480e147c567e6c736cd73adff2a694

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
2874a9189cbc6b5879982dc0f2876477

SHA1
610df02a9e34c60a493f66a621a74f5afbfbb6fd

SHA256
f15d5001e5f1900d47b4978ba64e6a6142bdba61fcf03f19dcb04c407888781b

SHA512
39c9a6eb525e4ba9b8b1bf17791724740c2437a4b5dc7c0067de40b1380904b042b8891705de4367c0bca7e99e2dd8db2f5b83aff27f5286f7ffb00a7ca01f4d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c9c58c25cec78a86a0ca30f45bff8a35

SHA1
f22dc688c2507cc2dcddcab25ce9682666e93936

SHA256
3ef5dee93ec8d9f216e8db1a435481ac0a235eeb43d4b755dee7f8565deed96c

SHA512
7035c97ac16e3c7bd1abf8770872fd242591a0374a02a27b35c43e70f7674e9862e473ff03a739d8b1312985e743d9104a862cd9d1d6bc9509b79b4a0eb88e4f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0d482debe238b3447afb89a2f6b1d490

SHA1
6a211bf0af98bae11d3c8bb74c2bde3ea9dd2eb8

SHA256
5e56540743e969728a3772e75e5cb9807975dbdfd93cea67359f8e5e769b48c4

SHA512
5dd15fac401a4de140f5dc8e515e63536e1bbb601ddd0ee71e6cb7804d451aed2817110410bff8bdf21e9af54e277544f1cb902d5f3a1c8a83b55c1e36fb9fa9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9e20e7852183caa046e98bafacf13684

SHA1
23b15876aa674dd5224cb9e47026e8615b3457f6

SHA256
0ce185fb434d45fbe253f7b6c0bdee39f88cfdc67cefeb5e7d4deec37eca08b7

SHA512
72ef6332f38bd9ea7bfd109d163a6cc32e1e392fd7bddb177429561bee536f2c699b067f982abffbbba28347fff95711e1ef64bbfe94380d78146047586e9cf1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
74ef622f9fd347d63996b6097cddead1

SHA1
3e85f4f420d5b63e7e0b1c2b90a623fcd4860112

SHA256
0a04879481a3bab51f46610dfb0d91273564e21016a46f421fb37683c69303f2

SHA512
ecd5e6cea0c5e109218d122ced7ec795f159c2342da57f28f34788e998d172cd76c7d19b93a1b86a06f01de62f1a2a2182650d450e867902a0f7f33aa22fc4f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0d79cac86c5c9b67cc266451ffa37b22

SHA1
0b208550bdf4ac6d5059b0217d016b90cd6043ad

SHA256
0f2f3c34069cb9f1061003d70656803fd05be37aefdbf294c980e97da8c81723

SHA512
2d37b923359992f1fd30049663431089f7f587cb9e3b3f9b7c9b0627966961970dc4a537aa5415e53091e7adbc1a2dd7ff646e329a95369a39b8254d70d8fb28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4e3455b90605c5a5da9866f91d1cdfb2

SHA1
f0b509746d8323f06b555e7672666fb71464df69

SHA256
e84f1ad1b64bee24b75e3f4e0933680bbdf91b8c6ddb6b9eecf253fc7cc3bf6d

SHA512
f97a764b96a2789b1d07dc7d77421087fd3d4f8e66602af83ccb900084dc36fb2042d90fb0e86c8eadca8b56b99558d7b0235eef6a5f3f1996acb58d71e14f4d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e9d8a38a83ffcd9c3f8b0ee8db0ff7d8

SHA1
880d8e05fa450d251dc15290ecba81bcbfe4279c

SHA256
64ee2f6eb3b03abd217b2ff7dbd9bcf6c5acc891f38246661a773e9c9e550983

SHA512
9f0c8345d328a128b764f1b27a0bb51b79250f92388782af375ebeb24f63a0578247602b3d98d1f835452d3f30f591c79d46729f586b095f437ea1e8b1666cce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ec52dcb23d31a49d2882f05badbf34c0

SHA1
61fc1a33924048f1ea80321e1039c85e2d9a8f97

SHA256
8fbd4c7029e3f91ad5797a0693ca7f3312bb3af3275da67bd642f7739b6d6a3b

SHA512
a4ceecfdbd4eac045a5abe8c464d8e1f6e132dd1926f5aa8d241a7c5de33d5af472e30fb559ca52776714873f6a35ef514839b6d3934c3a1633ec1e2825eede5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ea224c03e047883da43ed0e0c4ba6d62

SHA1
ff66735319f70ad54e3c2514d30846a39660c5f2

SHA256
4bce6f78ff599f76c7df7e7963003ce1f6e4493c36565235e18935c7994d575a

SHA512
9d9ca77bf0c231c041f980eb7595080f4f22d4067d0f44b7c582ef9a959d3844141c2138a4c61922b3ab24547b828ae493bad8246fe0f564500623b69cf79508

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ca35e1e23bf65b2de3decfd1e3dcd816

SHA1
30fc450a3cb9f0382c4b0ccae5188b719092c18e

SHA256
4154574d823718c8bb7d7d48206e35e3c7fda1d2d2cd6ad92e4977f869b04d85

SHA512
013712892e742d357775fd2260d7e8222b9a64022d7375bb108a1907c318c5ef9e55361924d0f7c61356bc0a917ec63e23262fab17df0ff1079f9e332442f527

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9fe3452fef9b3a716f7b82200ac962a1

SHA1
1b68ab7d4e2d397fe4e46a8ae8ae56742cfda80a

SHA256
ef987fdc99e732e3d99f689ca9fcd79c563c7932c3e4fff93dc05839532c1ed4

SHA512
ac8ff822fb7e7f29b4f0656c37919f4f740066cec293cc0c0a4b9e4219a55a133519cc50751770ff470ed92e5e715f2b08dc8c4474c23b44949fe9a08bcf0988

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
848d675a703acc4b733ea34b01a34971

SHA1
c30d30880ededd940a29ebff5646b1606c3ecd03

SHA256
c83578179accdea28111b9d1c58fbd5f1e82208d45c623396bb5a62717677b9e

SHA512
fb5958636cda5c4d1df623aa02a0635ff4dbabde3e4331c958f348b94090e11dcbd94163143426f6623234f0a28ef291a1c016e8386b486de95e6ff6da249a97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ba1761935c595ce144e6f4ffd78a8381

SHA1
a4cb7cf2dfeaba4d480cf99c9d330476397709d5

SHA256
80ffc2564e53453778b2f1914b8ecdf5d8780289ab340e3dd87cef6c305e91cc

SHA512
4a11c7ae58dde6b9c4884b3347ef543ae7b71bfa265ca12e64ca85baf155b578839ff394c45202ceb095e81cad0506dad6c297ccc5212dd5fdebb011b08d3d4c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7d833077ca682a4dcc4193ae0bb1c64b

SHA1
3f80a8dced7d8c73b5563dedc0b1fc59a192a549

SHA256
78b2289d05396f81dbdf77139f9447377f5c40719ba58752323836cdffde6061

SHA512
d0b1d9ad4d9927e9daf73425812c33a3e7557991efc79ae5f6aea450cb9f198a8a2bf998a225a82809be603ece8e9b7b77e06e14b04ea21ed94bbab8e2857cf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9ea113be89ef53c105f4bf3f64d668b0

SHA1
a51e0753555bd7762950b9c5aa916ddbbe616ca6

SHA256
0d201065650265e88b03410f8994008b8ce7764ba44b70a370997b723308613e

SHA512
3add49fb4bc8cd744ea26d5c98feff7c457ee2f719d6e646d3bd38e189a1ae578644754251c1bb23c7db4cea3c1d28d5078456c65d9b922709926e13247092dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
50845fa0e7cba2e8c28aa03e7ac80e1f

SHA1
18131584c388c5f1f0eb9d7d1fc03d5a15f60068

SHA256
9b973959b29185a16fc1bcc471f2a7b8dd8dc9562a8fec62703ff1f75234b076

SHA512
0e16b2eb2c361d53bbcd4e4eb2d8c0a2fd193898e2845e3ad2bf337530e54e819b7c94094cda2ce3d9023ecf60f69980a66fc6beb0cb85ad944f3a02850eaffd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6a267134c3283c07ab2b5c36d20e212a

SHA1
36c2adb6548e30baf1992482fd1e8fb2a89f7ac8

SHA256
680a8ce9b3d102768c1c1fe814ae420abba540a14a352ae4c3934e76dac0cf06

SHA512
c65ddc74714210bb40364560c0c596b8d746ec76f5b1327c748b09dce6f26275616de418900031f9448cacf95d045d9496fb88134f6dadf892134d9878cc4d40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
018a739b0f9587712cf99a7778ae1c88

SHA1
64176db2167dd79b72cbdc26450a7af04be7d102

SHA256
7135ae4cc9e023b2353f7baf443a444df3698c9c4a41f5c1966cb434a52ba935

SHA512
b7974e2b9a1c02757c641fdb1ee8e1f002ef282a78c5983235f77ed7599d6b93f0fd564e54bfe7a5fd1f48f004a053de542e78b847d1f30fb94973ad506ae7c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c6883d640adbfb16874d8e71039d96cd

SHA1
ed29fe09fae689cf3f4b9efdb5f3ea6f8b96f355

SHA256
2217825cb9b291cb6ce785cf7c23e98ac24a73e177912bb8d98de1b53fd57eef

SHA512
fb2fa1fb8009d7de24a49e8d536ceef0a14586671c14748a25d8d4309233d358a24c16b1b9ad3b9e46cfa1ddbbd9596a3a603dd28fe04bb693c4bb53ef4ed97b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
af372ea249943079da9f89d307193c87

SHA1
9c0235f8a6d1a489eaa8a50fdae00f014be4ea58

SHA256
c029853f73578595d1c2c52bd624bffa199e1adf161ddc5d3899952c01b14f87

SHA512
62706362907b072d54bf85da3b8f8da55b43b6650a0e622fecf1b2f4218a139fd3a6529887d6d9b7dd9a661db8648001544f53e3d21f7dd5d39c4eecfaa3da2d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
074f327822c77aec3b34a090ca29901c

SHA1
ea1665774dd1b4ce09ae61fb0f96c65a3f12a4e5

SHA256
33ea2a1cc8330b49561def91c705c83e66b0d358dbdba0b8e55bacf7a95a3fad

SHA512
b98969109daa9939ce1043215420c8387911be4baaa3a443a35b41c1c38759c38700e77fa89512eb91ded1639fb39189291e6877bb04047d62e2ee4d3d9a6779

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9ca016fe15fa106618b1d18e6954a207

SHA1
562f42d970881cf139798d5390a27fc2e6fd703b

SHA256
a93cbdff9d2547d5b2ce335620d30be2c169f164f43ed8f3528d530d9084994a

SHA512
ec45332b2189afeb8d7ff8ae8c6f94320d1989df2bd78e4b885ea18b4a50f7c240f141a3989244fcc8596e54b612a51b883c6c273623c48ebc0e51419d71fa93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b71e70cbf728bf5a2fd490fc803026b9

SHA1
f5b94bc19fe159f4388829243bd9620fefc412e2

SHA256
9095fec1b2c592d6a533663d3bf42b2c7680f2d0af10c2429d06e33ae3080920

SHA512
1aab6177a19ba1cecd6c66b46147a8a5927a0c0bb0b9163132cabfe78d97b539bb6b6a870ae68f519b0facb5b0dd6f0861945c1c84ea19110597d32a4c036e1b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6278d03b0d04cd6ba87c225a2a2b8780

SHA1
7a151727782dc74b44da660d4a1ccd685a8040d0

SHA256
f90dda43f3a44d375e14ff317037a8059768c0787e83a12419b81d92899d59fe

SHA512
28cbc2242c75545c00067357d79baa4ef478e81b3550dfc4c3a315cbf5c8e4f5c65746b9d05afea67c5e1bd5bd4fc62274199c238d593ee6db8066ceb403e25a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
654820b84a543304952045ea86a17d92

SHA1
b88b3bd0aa6f6d92c160d6f648e0633e900407ac

SHA256
3f86625efef4e955c1a66b8f615e6adabdf92b54e1a176387c0dd7841c416a4b

SHA512
f5974f75a6be31018e064406d8ebd49a858026bc7789c94a94c4c2692af0c9a3afb53aabe07e27254b58c2af1c0a1cd537e42e1ac5884c548469a9a3571bf786

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9206ce98fc05f0c9924eccd1a3050235

SHA1
5741121fa26f01f04862005e4d7167ea30962815

SHA256
a217f2cc14be053b3d78aa3b33983e00a8a3d9bff62c867202e3ac2e8c136575

SHA512
0de886613bf09a40bf70645bde21742cc06dec0518b7e3bc4f3a103dea3d17045bd4a3b6c7be823c2d9d523bd4872dd39c863db7088c284fec2353b3e2d4433d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d42fc2bf8edab4f626e8dbce90faea6d

SHA1
430ff4703840fb1cb430553c2e531631e192b566

SHA256
c14bb875a7b5d0276da0de15d61d0a61dc9b4cab931056554dbd4b94ce838a6b

SHA512
2f1bf45f671ca5af16d64e33074ae8ee7b52bb227bf99c070a0e8dec6bfe46fd2451a3bb4e5b97185f1c4c84735d1c386115a983ad60f0f17a80c64035aabccb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9430fa6082516c302a45e560c7f85839

SHA1
e72519b9d3e41d91c02ed5cb5f9edde211548595

SHA256
ba9a32be0f3d097bdb484f17ee2510ffce618eb1cf2d2430f33d837088b42337

SHA512
e192d6a0856c3a35e68f5f1a312f09d905ee07c7bd7a5d56f167eb9aacb7165f17d47aa8b2d1c0b69e172392a0905b917e9b1ff69fad34c72b06484807a70dca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d8ee4706f711cd213b9959617bb4ab8e

SHA1
0c102d1f7142842098c628694c0399f01158c609

SHA256
1425141fc88f42bd46f517c151b98b1148d267b4b25ea2f936b6dd2e2364f668

SHA512
92b8f6fdeb65f2af07a909d1e8b115b2024ef81ce4d180a707c7f7985c1b88606206a18ec40ec217854ea76c15ea584bc28f3cb4579d6efe4d89a943b8f063b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a55d9033000a4a2ef18e1798e385f93f

SHA1
1e6b3f91e87ef98bfbf3fd259aa204f7de69053c

SHA256
dafca0299f46159fd4b0444c5655829790f976375e858090e3818eea5452e216

SHA512
959583aab781a0ef1bcd2cb369f1f9bf843f428a4679cb2d290dc3cb773ad3a4739892943e08aa39dfd5cc424fe72cfed2e6572a9f8c4ad5d60fe0f02fc0a1ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
04cb87f684d71e778d36f0c106feb2e6

SHA1
daf13c05ac01403a85a744cbc60188a8cad36524

SHA256
9847f90b192a9f12410895fb9e3c9740a5df617590cf93ff8fb0db7fc98421dc

SHA512
52ace5a6557133fcb08bcf1d13312b21bf4e27473ccf739ce99628caed0dc55f558448bb06da516e61be4bc995ca5f893403d4771a9749a4e5d23c525890a3ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0a333521187533cef7d3cb8e84574237

SHA1
3cd1ba4c6b8cdd5daebeba8422e9506638ee0b0a

SHA256
a46e4d1cf72800e51a45410603aece253953a5ec4d8564409272e8f0d3c63148

SHA512
b8f9249a19e3e720411e764653e51b6722c0377ed8515b5e9d83943ee0b158020c18dc903b7f7e827dcb01a7af6cd980b8e6e4f88a3a4b4ff5ca0327e68e4bd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2f63a2d7a83a7dfb4b39f0eafef495c7

SHA1
9a8066ca784c868545d8a3bb7d6efa66cdba2915

SHA256
a3b21f780a8710bc5a44a323510d9d9a0d71575900eb6afd944f92a979bff22b

SHA512
aca0917fbc89c570db8d48c41285ded09a74982b67be59b0320c9c8abc8f611571e1cdb35bcf4431b20a4a6e7f6819f6789968a011bd7bbdafc892034e1401b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fde68937cf762665d5db119fbef19bed

SHA1
6a848b575d65d70dc382b64cdb24939e3a44aa79

SHA256
604b7f6dfd39120883c9d18df8a4e6ae5d3f5aaefcb8938a9b914880d76f6cf2

SHA512
f0c940e27104448a3cefb2f50f39b8c257dd62e1e248b0e39f492595951d6db37a6dad24fba2b739149853022c1d047620a4f1825820557737439f3f64cb06df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
59d0d815d38e27b7ca42bfbf227a428d

SHA1
5808a55e72de0a0674857ac7ac0a2ff5f42ba316

SHA256
e8e3d7a2cafb7c34078f22e582622998618cfad7fd49124368ecbfca69b32677

SHA512
a3d5e4e62dee0d136a8dece9662b0a55abf6c869b8964fd94b218b5f4683580cffd2d7a456e2bb230e7ef91db1961a46501ccec6d51c9ae5ca11615c35c2b098

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
15fa808a4ab702baef0fe80b45b4f07a

SHA1
8f0032a5036b556fadbb86a1d4d5fbd48bc36457

SHA256
40684793e8f5b3714bd3f238ef7933598e6bf0ff31cda03ba9a83f65a09dc71a

SHA512
ab9848b38c082699098c30991e16d02bb4b5dbb906cac46e829231c66b06e8f0c96b8a950912a67a69da98cf4fbaa905bc14a19d0818c942274f359561d81378

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
72a60bcfae33e081f09dd42a94753d39

SHA1
44bafcc37d56e3a1841a4016072bca25401f985d

SHA256
3377a0598566372ff822f9a8d38cd38bc7196ad6b405863b4cbe92947cd588cb

SHA512
bba104df5ae5f51e3e9b9a742f4ac5e39db554189641833d8dc1f3a29e049abf7ee5cf595a0dad1327869687d1bcf2bc8b6f1ad769a15c80dfcaf2873d4fa7d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
19fdf313f783dab71ed2582a7696e7fc

SHA1
98a53deaf4c12f50d5f13bbf7f61b15f5b532e40

SHA256
8cf78b67921b28073f6fc7d69491e79d7038d15882a136a93b722812b8cb5966

SHA512
4ed3d194e30d7d6c984c486bf11d0d9cb885ebb11c43d549d87c99e33c5fd42b4a87f98d215afb923e4d1ac16a5e2a7c5eef04f119989016c7be50dd8bb0c699

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ec5b7595-5e91-4bbe-afb6-4e0ffc94468d.tmp

Filesize
9KB

MD5
e313ef32220539e7cf6edeb425dc29ac

SHA1
a040d0cb225533635715e0940a2aca298a45947f

SHA256
5e59b53a3b1f922a58bec90ee1e234c607ace16a3e9a2c96f8f6cd0050033f01

SHA512
5969cc38bd04e8ae4275d0d718eb6ecb6321bbf4e1defe7306b2d488f4e2ec9bfe8334ea0283c3b04755fdf8902c3a3e97806858c5499d298cb07e082daa4e7c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
231KB

MD5
bcc3e75f041501743cf42889c403630c

SHA1
d3756f502c4daedefa622a5a70939bd1d5496bdc

SHA256
044a24c545c855a66bb3a9f08d50aefb692c6771cf34e9f451a2394821a7732a

SHA512
9f54f789bf9859415c82a10c6a3805dd7970f2635738947058d167d962f9a143b6c454e6e2431be40b2b25bdada5077b0ca44448b0da4dcce053181efd0e3619

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
231KB

MD5
41286c4027e203e7ea0bb31e4cbc280a

SHA1
61228fc1f720eb61de22e729e0bab278adfee45d

SHA256
3fa89e099412a7987a14f538f7871c5038d57acbe3b998544086be716e44cfc6

SHA512
bb6d63bab4e59ca5ffdc73edec88116d3e2addf1c08020a323f418613d64513b4a3c41bcb3b10dc2a1f9ed5b923a03169e5a3551c441216cc1df03a2b966a733

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
231KB

MD5
40097cd5dfa0ddab438220a3a3c71dd2

SHA1
6e70d8aa3acf1b4b58dc3a4a0690a885365b027e

SHA256
399beb9c9cc2ec9e3c7482839ca43fbec0047dca98d326d2647d42c8738daac9

SHA512
c145e0a828ca769bf310d7f57238cfa9cc8cde3bd25a25e259fc70353b3813e3035aeab8181151911769f7bc7c934b2d733317dbf622686dfa8b28258bbdee3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
02a4b762e84a74f9ee8a7d8ddd34fedb

SHA1
4a870e3bd7fd56235062789d780610f95e3b8785

SHA256
366e497233268d7cdf699242e4b2c7ecc1999d0a84e12744f5af2b638e9d86da

SHA512
19028c45f2e05a0cb32865a2554513c1536bf9da63512ff4e964c94a3e171f373493c7787d2d2a6df8012648bbefab63a9de924f119c50c39c727cf81bdc659f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
826c7cac03e3ae47bfe2a7e50281605e

SHA1
100fbea3e078edec43db48c3312fbbf83f11fca0

SHA256
239b1d7cc6f76e1d1832b0587664f114f38a21539cb8548e25626ed5053ea2ab

SHA512
a82f3c817a6460fd8907a4ac6ab37c2129fb5466707edcfb565c255680d7f7212a5669fe2a42976150f16e4e549ea8310078f22ed35514ee1b7b45b46d8cc96e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
19KB

MD5
8f661b8c2dc08d06a2992b1006fbf95d

SHA1
51f7614ee218ca027670a3bb0d7cfe1f23869602

SHA256
8bb39a6f700638d352b26ee0cb86fe5fd1127397dbc18d50a5bf37eb9ef6519a

SHA512
80789cf71769f1c03910535c610c942aa4be684433bcdff360ba309a6c15b3878920a49d1d1303c322de64f200b8e5d316b428b66668d51f9ddffaac0aa5f80f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
24KB

MD5
b201e8da90ef456598b8b3bb0e31bf53

SHA1
8bb524c8e9b17920c83d9a06c0b305e41cfca560

SHA256
2c8b630d1edafb8cc8c8cd73fff10c8ab6d06232929a4d458ec34628920f1665

SHA512
50126ac5b7800f5a848ef49ebc8e71d78cb5ee9c1602486b30e697ce57af32c868e46795ac2c157cdfd7fe65c03133c7a752813d520a9106adc3e50620b473f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
40KB

MD5
0c9f37673dd9c878a4b5bb419ee24b5d

SHA1
d973a8e073c1f76068f0947d495998f7f823d76e

SHA256
c1e12f630e7f356d154ffe4a7a3873e7e136e41c1c37e6c0fa4d2c52f1d269dd

SHA512
b361afedb4a910b12f7dd7b5b33d2914be39528bf4d1486661d0107c24135cff3a5393df1af85cd7d1551f0e601ea9d2ad4b147e56f469691e2b11906fd1514c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
17KB

MD5
a421438ebae11fcb4808982f78536c8e

SHA1
cb3287d6dc2557343cc2e4723f6bb5e5534ab075

SHA256
8d40f05f3d7b0c08cc959534185a4ec52963c06322e7c31dbf90266d9a0c6bfc

SHA512
5f6e88895377f671f867464313290d9cea0ccf4377ed74153c3fa745456ac35f9686fcf0a2e9643316c60f5bb677dfabe1ff408a56318c48e0f7853954abfe1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
216KB

MD5
60f3ab1dc0a84cf62f6d7c533345ff78

SHA1
68bd632dc672aec73c776b3c49322ac902e97516

SHA256
fe3fb6603c5f71392831a1b000179497379624f33a652b74a2ae7afa545cd942

SHA512
fcf4d20a55afebf404d04d2fef682865ddb85c26752786722e2193a37670022791f87426f3d9264e6a012ee72585cca1a3433e0c65ff75f4ba6c07ab4c288ee9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

Filesize
205KB

MD5
c9c9e7a0321c20a8faea53cb744f62a5

SHA1
a4f7964d6df916c63bc019879e15dfd8a010c9e8

SHA256
9dc45a4308a94cc765a3fe2409e6998871eadf786e01bd0fdcbc5e354ced331d

SHA512
12bfb41ca0dffe67448d2ca50e44432d60f150b588e168efcebe37ce4f030da3161936d443735587b9833eaf506d6448bce92985c16456caa6b2b94b48b7896e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

Filesize
66KB

MD5
100655c23b1e2cbdadf8919bf6f14f50

SHA1
1b535aa013148bcf8dbae70f31064ed03380f97b

SHA256
9de4c1063286a2bcfe2c2b232e45bd8947e70d941f4685a50fd9d99cc6b74fe9

SHA512
9904ae2ea00d092f4d2cad4969d26e08b1840373e6869b358f11686d109b09eebe25fbb6a45671a918e1be53130a4ca20cb5e217348a855811cc4fdc32808f67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

Filesize
22KB

MD5
9d53309ac2415ed6efe77b43a5a2b2b6

SHA1
31d26e32f551242c037116da7fe1f039bd1c4b41

SHA256
31e667f7d809056c4199b4204f46dbc6cd118a97530308229bbb9d450c42f89f

SHA512
25510c4cd3ac3388a1c91b5011e12a34c409f272d8f7fbec1a89cbff45f2553f7061c1f63d1a2c06f8773b885bcabd9c96501434b8905778132fffef80989476

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000091

Filesize
99KB

MD5
cfcfc24a2387d0df4c6d6720f10a2c03

SHA1
6c814019646496348ca28599b6cf0fe0834d6331

SHA256
479485d672bf6a462911fb1811254f4052309e5a8b539be09e414948a04535f6

SHA512
933ecc54138b143564df5d9ac15c407fa781ddcba071613d719e447963bf84d2941c65eff05f915685f934c2a03834c83017a364f2ddf5637973945a80349910

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000092

Filesize
314KB

MD5
26cfc528bbf3f9545a35f07fd4cc4c83

SHA1
68c18ab5b58b839bca80835b6fece6081e5ecd04

SHA256
813b795e6bab991add6fcc2f9b4e8f938681ab29f21b280f1348b3d1198e8147

SHA512
226ab5af99230fef492ecbbd33c1c4ef9ffdcd8e9c48997455942196c1bf653404313890b7240b781e57e6e456ddb9b921a7031abb85b653b534d3340d4f6a4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000093

Filesize
32KB

MD5
e7eb40a17f017e7b0651dec263c01ffc

SHA1
26fea5c5c688b2ecf33bb6892c9905159b6d48d9

SHA256
afb8e284cacb33c4d52af3a501a871cf560e4ec94358761743c02f3a21cb1810

SHA512
d7af8ff7adb71dd5ed1620efd913673e108846e02a7775d012825357fa81ab28dde7bce06592256e9f9c2e91ede6a249a7e6bce91a392f6f7ac0b53ac3ca0123

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
48549f09bbceb8db74a9c08605ca10ce

SHA1
8a6f5dafe82eb40eb8c4a2e3fdb9e638c123214b

SHA256
21468c17cca6f26c50cf032f752458342260f75f93e2270f9d0b76233b0f4620

SHA512
fc28b50f8c4ac59f5ee13a2aebe4538c1df6366ba7920e065c9573ebab1bea82cb7517e3de96bf2af2d12b9179c156a92d4ceb8f4127c0ace09392e0875abc82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
1b75e92c7d130e25b422fa742d511138

SHA1
bf7071151b6a55d336d82fd5543009fb9fa88f60

SHA256
5656d313e8997e6f6edcbdde0ef23e2c8bd14d9536905680ade6ef00d7884d8f

SHA512
da81feefbd43e0c3c48b49eac145e8e6df3931dfd3439103114212828ffa8c7b7c131f7435b5bb58b7665da0faca0d92983f81a015e1002fea451ac79d4bc9b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
fc0acfbc225c5b4e80307902693ec89e

SHA1
6696751150205299b55c22a02d801e0929028459

SHA256
bd5714abc1eb280105564eb1bb2863f8c0e53bf1fd16c848acfd75ce8acc4a5c

SHA512
d5f5ca6a41d43c36a21c887cf5c1e74226dc42857e5499db31300772933cc210162abadbe1da938e91ed50e17daddaeb2cdd29a97e2b0c6c7fc13284a3eea8bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
61730f350de3033f19f9d43f27637836

SHA1
63ab6e4a706a3143843efe8d0f133f262a5f8aff

SHA256
10a84c7138df236d0a5b70d3df7c90507ff0665f7503e99ca071b1ecd0470f5a

SHA512
d9e053541a87a591f6124c8fa921082194279e0a84b678ac26aa157fae6b0b8626ea98b5fc4d32c9145a1196a9fb126af1b8a2c339b2825d2cebfe29c12f62dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
9436e96ee41911fb1e87049edc3b0dcc

SHA1
9f889ec772837f9bb6122904c84c721d41a0b6a7

SHA256
8150433d8770d09848ff5016bc1a1fc3aa7655736bb41267afcca94458ef4400

SHA512
b970d4d3f555cdbfed804e6a1f6ee93288d11a4a9165f6ceefcd68b23979a8373115fd0e65c3cfa0f46939b6fd9c06f312bc009b55c0db4ba80b78f934db66ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
40a4ddaeff2fa7c8205681d33950bb03

SHA1
216e3abce85e8f9baad52ab3c7c0a67f5ce69de1

SHA256
e6d0eb9d6f5c3361167464b1544705170243968a5a452e4d8097cdcbd627f061

SHA512
a99c0da328c8eae5c44675f0137719202c16960afcbe1851c6c429fdf00520bcd7c31a33dc36ae8bda3670f354bebdfed57a27adcf4068c0ecc98ab267b94bc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1006B

MD5
6bdbed7c3f376db37e6d543a5dec091f

SHA1
94f3283ccef110312e1533bbb2a4034a23fb0114

SHA256
46a387942380eca90cf3269da0e6c1af2558fec836b763f80e44a93a5d5a455c

SHA512
0ee68eecfb139a360f1d94c416a609cf4e53dc44a04c12b41502a8ed2dd86dbc20cafd658c2d266028719b1dbc9e5cbca7dabf2e4242d841920722e8c53266dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4b1cda541f16759bb1e5179c1a64c536

SHA1
1ee1cea36c86baf1162f37f83f10daca16df6410

SHA256
b7514649be0e5b398cc4fba7c33fb89241012deb2ec71f395394f2b907e8446e

SHA512
294af12fa7a55729d666a32a81dbeafb6f7c638089714eeb379f7b2a2e91e4af4479a619d4405ac0589a30ec6daa99301f4f7d367875a05c5ac40fe59f46cfb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
69a8e0d51faacc11a2af1aa9f48ec984

SHA1
73df1f8c63a706cef781d9e0683db07282449774

SHA256
7b1ad1fc452f62c72366c9b4362ef4340b2eba5dfcfd20a579c49d23fa89ada2

SHA512
7e9914dbd7c864e245095ad06491b66b172a8d98dfae1d6a14ab4dd061a1bd6344e28ed2b4ae2361e0de7e610710a24b500f2b3225a7780a9c789baf053bcc70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
73d52da120c10985301e54f246aa1303

SHA1
53b1c9bb3b36fc714cfbf3926bf19f5344207b51

SHA256
9085765271bebd6c00715677e3c954eb4ded82c146391fa5fbfa1ef850cd5c7e

SHA512
6865314442263188b177b58d6a2b731cf7831f643fe0392d45579c305889d2dfd480db759addd0ef2f7fbbdc7a1e07023432799b5310d85f574970b2d1c7a868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
227636639fd7da966482a71827ddfeb7

SHA1
65b275903fce9cf302cebebf0dc9b360b6605f6f

SHA256
6be0eea5610a0bb09a0239f2c49118792d78c481430207724fd9d43a84e27961

SHA512
6bfe118b29a51171396a3bf0fd972801a84357c7d8fe39af3c3832c1436e055bf6055076dae3c07a6d4325d5d61ed642952838dd74e405865f1d57fe19586926

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fa82edaf7fa8f84cc063c8edc3976ee3

SHA1
f4ed6367c19d7ca6471d0d838aaf4f3c1bbb7909

SHA256
90a608e3defe8d4189927dcf6d6fa4a6002ade75319a54f8d162b0641f0f485c

SHA512
eff468e02bb7185fa09a64e04229e95043845f52456ffc6203ea8ea10bc66d135e68342affab0281f6e901cc91accc2079f5b3d602494ccaf96babc0981c1d06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2b1e0c4d588d77bf2d7535ef3cdad14f

SHA1
809eb1a067d7b8a858d44567e74983dcc49b80a6

SHA256
4fd7a3a783532f492b307abbd9a3bc70e28ac7bc12a2ed826c6b153346daf554

SHA512
00875bc27a24cef0d705b32a6b547e2f585e2226cc889f2785bab088374c53234fd3f418a817671ec5d06a80b19d610163e81e34c0ee2c97d4ec4a53cbd9fd57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
64df8d9f29e6061efa9c8cab651d3d80

SHA1
55dd87559e342ea04b8aad6956260424f1e43869

SHA256
85c40144be951621b2447d1a681e9cb8c1c218ef34fd8fbca20e24130d852bcc

SHA512
db93a07ba7d4651ed3da281541c3f4c06ebb1ac90cc399940edf8c20335f538feb5787f27136df949096626acf47a9db7bc73968737286e2b5c03648b018c657

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8ee61be76fdb6d371dc652cb3064c3ed

SHA1
a9018f7dc76149c1594b243d6541de1c696c3ba2

SHA256
643de843155dd07c1aee197df10bd576ba86b532c5f460431851b6a3d2e0ba12

SHA512
c55c9ad72e03b3a933eaba8ff1bcc306af6868fb6046e26fe7cb4a23475e6c134307eeb0c20355310b3fa81cfbe9b200d5f8c906372fe5306f9d34dac33941f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
428a02a4b28729ada4b0cf55c6f3b2d8

SHA1
59848778c170175b39d071028336b5d59f02ced2

SHA256
62fa1ad2c9297d65295a9e4d7d03eae809675eb377f248e04cc46cffe30f6d51

SHA512
ad482c3b47868c4f2bc7e61861cf361249396ea1a086715f73f5e2d22a5bf80f6bbebe56cf851f7f867ec330593296b12c28c933c17d107f49e0b2d6ef3ad8ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ac42ce22e64cb068b622c86c9c21b1cc

SHA1
e6f9c1d276801dcf2764b531702ac93ae6c03b12

SHA256
9dbab506925a9a367ca6a22f74aabafad9058ad2f66f34bd18d0f1b4a5ee109c

SHA512
c3879185b18d7fc654a9835d938e809a0c9d9a23d4522c83e4faa5c14b859114da0324e12e76fa19d67bdf0f53370a2c805502163a8a3eef3f0ac54f55062b8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1f738e5b3c4fbe3f695148fe89bd8997

SHA1
2525c8bb3c3ad4ef75a542ab0ff6a19d342babe3

SHA256
cddb0cecb32fe389aa0d2f97c77415f369469e7dc2203f508cdafe8524eb0263

SHA512
cfe856eed640bc61b9c4f4e8d65a8d1119b7644e5105771acbc84a013a881310d88fb87d03ee6128507b2ab427c98057eb9a200d7d1f4ba56fbe6792d4b0e623

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dd832c67c51e04b1246b152af0a4375d

SHA1
e71782337902d2af0bd219192692964c67807575

SHA256
9f0b13cb339bffd4bf0bc2842d9fabe5533261bd0a9cd628480e10140d1f6094

SHA512
00a6450cfbaf20a1ada0dc111f95bbc2047cc17458325e687c2371920b269482a75301257d6fcf55ef7e2eb15f66aa3b16e6962b02e44e2372af27468f8b6d89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
2324abf270d98e9cf9978a1e4407deba

SHA1
229f68e2faf316c0b5898799ec22e8fc7b15f2b2

SHA256
dd8ac57f9c10fafcbc1f72f7ab1e60b1a8e32418db05a4f7a2c7813ac2576038

SHA512
57a14027348a6b45802af80171ef5fad4a2e38f57df96df96553a4f1f4f0a97b3f79dab6da369d7fd1a728d58a5d7959f58d93d202714376b7191f15ff7e3448

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2b600da5f35c8dd6147b155576b9d489

SHA1
6346c4ebf6c8b7a0173e9264c3bbff8c777398e4

SHA256
c0d49a0d8b0058f3bdbbff5cada7988bbe92120da164afbc352eb1f6a1cf75a3

SHA512
c5bf3c3fa907676b87bb5cfc07a1f0946183ef0813bfb43a6177319a57dcf724f650b3fc356a882fd1ccd336b0b887dc1275f5ab81a8485e40a3799d4350cce6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e3d61d9d6279dbeaf108ff0e8f482b26

SHA1
ccbb22af0be5c3bc2dc8706591bd020a950e1086

SHA256
84018a01071e439926fdfc66bf804683b7e5edbb442d31da234437b8e32c512b

SHA512
ec72bbf1a38cfd38290792a68bf6dd101f7d6341ea9d6fa3d7ad83b65af8e870f95ee57eaea403765b27213165356b5b4f1fcb6d8a253ca7c3b16f0a1c421cc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3eb16998800667d735b0eb8f166b6728

SHA1
5488db622e51795fb9136127959f21312ac58f5e

SHA256
03f454eff248441d551a070dfa4fc75bc0041e8758dc4817e737f3077ee0a90a

SHA512
43ec912693edc61a2b1a499c8e3d09103ed5bdf6061983db9f4ec3ca88c5725dc83dc4480de0dacd442eaedab25fba6555d1cc383ebea1b3d26a080fd536200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
31f4324dc0c1433c33013a231454b72f

SHA1
4507bedf60081c3b60df7ae506a7c84379f44696

SHA256
f6c8d276f2c35894e18b663a2dfaf258225370b33548539034375948faeb75ec

SHA512
e38347a0c79182dbe8682cfdac7a3c044c2eefe46148f7fe673f46cb77ab1233185eb35460b547bc011326e9c01745638a07d6be7b1f6b2b400d54ebe995f416

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d26ffe806de8bbae4cabe14371dd3a87

SHA1
e8eb4c80083cc30618a00094389c6c965037e40f

SHA256
7870801b5be9e0341914c9ea575d15ed9b1cb497b14f6f2db5c2c565272848f8

SHA512
b1b34052316ecbbd86fc402e1022074203c4b66d5d77c311bdf705f3b5a4c0397dc47a61ce4a75111877ebd4621c668b84df6f65a91e8b319e8cef887ddbe0f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5986f9.TMP

Filesize
1KB

MD5
35bb220df136f57c5fabd28c1ae43c7b

SHA1
2c9140287cf84548f28158a37fa7277adcff9006

SHA256
5d7ae926c42f67d8f996c5b1587bfeba5813e5216ec4a5b6004943276a1f841a

SHA512
72f78eda2a7ed6a349011d27f7a17b56f6d4995a25f15c7c47a6e22c86559b55ed025da147942e4b66b0c2c97f89fae3178fa396881d97f1d59c78b16697d18a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a16c0d8b-78e2-4f09-aee2-7b7c0775ded1.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ddca813ac3f0634b2e4603fd2cf74f88

SHA1
51c57235cf36ce95bbc3259e272dd13308209c8b

SHA256
ab79451ec44c3a6f3cad731a6d1678362d4a56aa7409b874d17cd21f58f409df

SHA512
aa32a0c0e04d8a1e893319be00426cac92e7f32ad889554c7371277299a8ec5ad464afa519a06ab9eab7151726352f8fa1d08efbc8da18477dd53a9fa91fb687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c04d796946afd26947b78c03d8bf8f4b

SHA1
063116872874a9d75e1a631cd2ef1cb6766a7020

SHA256
0eae7fc3ca65257d4c4adcf9b23ef209988c830e1c35cac927fad9eb2ed8b60f

SHA512
63e781ad6b2f5b6e7e7a3b470fce128db9efbd04381279028c0d7e78c937b82a6ec66c3dea6b3fbb0289fa2ed9542762f6474f9179227500e0d2c8c7746108eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a871f449-e745-4454-8af8-6b641bda6e87.tmp

Filesize
11KB

MD5
d24743615034f28fe12ff8211564a365

SHA1
ab1c1f2c81c938e7b0efa7795d93a772c4dca815

SHA256
8ef60c990c1c367cbe04d67efdbe4faa5611d546ea699557f8175db58ec6e085

SHA512
ec361e54d555e771f77aa58228364bd58450dc6a82c246bfb781ec61b94b0fec40491082b00d4da5056f6cc3593260da8aae8e3b3e202019eff2bf84f30e72aa

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vo8scey3.default-release\activity-stream.discovery_stream.json

Filesize
22KB

MD5
5023e4a8159e1d9a1e71f31f433d5fb0

SHA1
a074502213dfaa36198cb2f4abd0eb7896deadd6

SHA256
fb15d78b3b345e03e8268f3ee849c6d3891e7cf9300125ab35625d62d75cba63

SHA512
46a527b6e42cbc5fc9d2c055c10cab8a03fbb04fb702ef193005fd4eb3bad4044ecd269e6ab77e759daffb5268f2671b62e58eb726859c19490c62a3b71c425c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vo8scey3.default-release\cache2\entries\1028C0594A2905A51C9BE4B9198A912DA5F01823

Filesize
49KB

MD5
1af5873aea2572a4b0ea9ed4278d3ce3

SHA1
ca14eede0ca740612e2f2037a1567995a9ac0e04

SHA256
156304a389e5651d32c3cd0f4602a137c0211915a4935e94526a3af4312d8e8f

SHA512
4ffe0c53d9e973fb9da0590f43d1c75e3617a75e4c548c47f8e2f85973b73e6df8424e912fce7a2c1dbd07a4669b5e71b256c30c0395c383c8c14632bc6bd2f3

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vo8scey3.default-release\cache2\entries\183E2680605B56F24D804B991A30FEF1163A9594

Filesize
61KB

MD5
90c988888a928554a206b4257ebf2152

SHA1
5cac3105899f3f293f5a8cb87dec18ca3f377c4c

SHA256
fd8878b8b80acebc908599a3badcceb8055b7eb491be2060c846fc8c26064bf4

SHA512
a9f387fe5575c570acbb2cb247e124de711f8ab4021f5c50dd8d30279188f857e4c5780b431383b1f99447b5c6ebbfd8eed33f7832ab3b61e08693ee900eacdb

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vo8scey3.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

Filesize
15KB

MD5
96c542dec016d9ec1ecc4dddfcbaac66

SHA1
6199f7648bb744efa58acf7b96fee85d938389e4

SHA256
7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798

SHA512
cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2908_2134878167\5ca1a665-07cc-4410-af65-84ca7fd9ca07.tmp

Filesize
150KB

MD5
14937b985303ecce4196154a24fc369a

SHA1
ecfe89e11a8d08ce0c8745ff5735d5edad683730

SHA256
71006a5311819fef45c659428944897184880bcdb571bf68c52b3d6ee97682ff

SHA512
1d03c75e4d2cd57eee7b0e93e2de293b41f280c415fb2446ac234fc5afd11fe2f2fcc8ab9843db0847c2ce6bd7df7213fcf249ea71896fbf6c0696e3f5aee46c

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2908_2134878167\CRX_INSTALL\_locales\en\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk

Filesize
2KB

MD5
91698e4c440fd9a831cdd3fbc932c1df

SHA1
7878d1e17d9d15c2d871046eab8ba24310e655ac

SHA256
d922fe34e54ca3eaab457246f88df8b0b5f0bf3c199a458936d46ed8f01f187d

SHA512
e3a4a8021b4e54b9e1fb09a8cdb2c1b905614771d3e08b89f7675a9a1b8e4a90ecfdd7fa96634967f5694b71586e960116c3a8c167224bf73649fed1a83b7289

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\AlternateServices.bin

Filesize
6KB

MD5
71edc4fd220e689f957790fc6309fb1d

SHA1
784e34335fe680ee683cccbb06dfa355abd96f2c

SHA256
7939b67ef6841d4b791eb760f4d6d4d8728515a57af204c1d6633838ce981167

SHA512
ea34f30f84ae76f4153a5206ac9f4eaad65a77fac9eeedfd5cfe040ce9f6c14c72b1c40069f81250e5bf5a845aaabd52db339154dac3a8e782873a5876943825

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\AlternateServices.bin

Filesize
12KB

MD5
1ff6ebd1311e4697269113578fe0dc76

SHA1
1174775656f26ba85712f25786d20f107b2402e7

SHA256
64fb9ef80fd581c47f9b6c89c5c446a0b6cdb0fce09b842703cf6c9bc49c3392

SHA512
4ab47ff72a8e4600c072df486668497ddf04569a4a79e241a39f050921a85937cd6cfaf1c559b4203e6f423eba55d9853cc62a71ae656782e801a3ebfe8684f3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
5a7333ae0ef9f8d817e5729f39afdd89

SHA1
896b88013bc9b5c1a0a70140ba871211544ec81b

SHA256
a09eb9e0e092b22c4326b7d7e0f557c9b34be93ab2c54aeeedacff9d28343731

SHA512
fabbeacad393adbc2a5a79b696f8d11fb38814c456e10450789c1de2ebcae6d3363496e1799cac1d99c6f75072c0b4e8e0e3b296c7b24d5ce98f65a7277c26e1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
3b33daa4f67056912db0d7a448d187af

SHA1
6b231c823b2dd6788afa15b036f77e32070d9d83

SHA256
05956abfa5465eca6a678211e458d8b0b97da9acd844f9d15ec465e37af45a80

SHA512
696e7d568ab0beaf59dbef56b39b745fc869a4bdcaccb0326830b776daee8fef3c55db0ae7b1c3c643d7e3cf4440a1f2d4324b09f0833fb19268bb5a262ba404

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
d33a996f0501daa222e9f8106462d74a

SHA1
32eb999f1ffc6be4d68c0abc4f59e152d3a1e074

SHA256
e4ec1741084e211f2276effce646b558babbdd716761acf70d2d01d4cb19c82e

SHA512
095b1f0e596bd14e4db121e7f01dbd4549527f51022b60557e29116b2b186835694e2e359d6a3d63ef957ad02ca101add5fff6c604ce2f6212b39095cab6e879

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\4efd96ef-3590-4b7c-8cfb-a60a59c47aef

Filesize
671B

MD5
9f264eb7d72494bed25a87cd013f0239

SHA1
f49eaaa7ea530dba7f3011eaf5b5892b17dbe979

SHA256
a7544ed59fd4a57b2de6cf2056cd3469c42c4ea843d7a3adfaa1e71b15131647

SHA512
ddb6f1e9dbc5c0adc8b9aa66b4c1230f3d5493ff4700251b8a08544cc9a0eabf819e02826479195c57a525e3e505eacfeabc1eeae119557b5a20d408c837cb5a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\e0ffc9e4-1e48-47de-bad0-d4f49530d8b9

Filesize
982B

MD5
ff24348ae5a4c10727185fcad00d62ca

SHA1
66059f01b3113a158e7880f2f3a6eba053128351

SHA256
382fd855501720493962f8552958f3eb161aff2504f957c79d140ba24cd224ab

SHA512
b8dbb0d52f550c5c882642b7c0f5533c492569800cda5afc95464041c81f25610b7399a95727b260c5525bd50d62b5f6e5eeab075c036e3fd4368106ee1a3d81

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\ee57691d-7557-4b0a-a585-d6168d4ef705

Filesize
25KB

MD5
095070aa939602df4e9fc9b284659d5f

SHA1
a6019faffb1f5b6dc930fdde1dd945376829ee99

SHA256
864854daf584eb196ca33a1e878e8b5de7a39c7d018198576d38a1b00fd33444

SHA512
5c17e138f960493e4b8ee53de77206202f21686d005c08d4d71503b7717769b7437c48b1669d4fde05278ff8d979d22d4b1168ab744219f24f49aae77de03698

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\prefs-1.js

Filesize
10KB

MD5
83355faf80928a3ead685542e2d764b0

SHA1
0201053bdfcd60d5a0970258629ffe75fb9859f0

SHA256
65fd20ef906a9c253eca361c6961eb8215ff82ac7ca55d81df39a8b2bd00edd6

SHA512
78d50cf00a3966f7e4d518ede4eb07206863aaff254fdbea5d6f860e2d5b3ccafa69447de486c2391650b10e96a4dea5bbeb2e3dd54ada11b316cfc2d619e9cc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\sessionstore-backups\recovery.baklz4

Filesize
3KB

MD5
a5ab00d83b4d6b4dd87ee1c7a130e6ff

SHA1
0a31dab5f890e1e583847004bc7c6e21e840c030

SHA256
a6ad861609a1612f80f3a7e8b029de2824d4578ff133fb1cf979c76e22e3bbb9

SHA512
6c57e10fd37ee2e783d2fc86b3c79e603394583d47ed1fda395bb307378f1bebabe9b58bfad1558e306189e4fef2c7133cef374d50d32d39ff57756fe239ba26

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\sessionstore-backups\recovery.baklz4

Filesize
4KB

MD5
abe4ee345445babd7e83511e6bb77547

SHA1
21c70d6862f4645a2c1d25fa101010a634dbfdea

SHA256
1581b03363ffaff0839a0d45323a2cdcddbf3f4f7f32ec1859927ada5d6865f8

SHA512
1ed23e49d1c054faf4b571c4fe19d1409763179077cb0bf1b2ee94be23b0e15f64e8ae77e33742c01555e274a14e43bc0ea055967305c8b02ff3e2cde0663caa

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\sessionstore-backups\recovery.baklz4

Filesize
4KB

MD5
f1540439873603af9c787b8922c664b1

SHA1
908f651b89da2074aeb4cd72d70ee5ea87aa4ff8

SHA256
114f79ed0ef59d08956c9fdbd3806c45e12dd184724f1d4377fe140d595c4908

SHA512
62fa749b05cdfc0d0ce5062362731892b10087a4de32f7de08a00053469637d58e33dbb20893b328cfab86998f2d9ec4fba194ed7690e1315e50516e6258d21c

Download Submit
C:\Users\Admin\Downloads\BraveBrowserSetup-BRV011.exe:Zone.Identifier

Filesize
131B

MD5
c2b0d12a9298285daa8d3fc17f5300b2

SHA1
858322b12136ef83f8d51db0aa1199d8e0cb9396

SHA256
5eadb4e86b4885ee0821f114d99520e24b17ec065974c451c8ca81cc9254bfb5

SHA512
25d69a4824488fc06b9dcd7a2e96a3d3ff873d04dcbb66705c8b321dfb533e22a86de21fb640edc073031a904035c8e257fd3639b04e297753f0ee3bc0801d56

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 475063.crdownload

Filesize
1.2MB

MD5
06f058eee50645758a81e8842353f372

SHA1
15e9010bab33f1733ea41b7c45d2da5d74ed721b

SHA256
854d06a90dab54e7b69882925886fb24be711fdc21884e13c77e29048b21a098

SHA512
920d5b6b902a742551dd0003c3feab430c3648a36850ceecc33f5baee365bf3f938420f80695618e1ef604daf3e215112938a57f3a7f6420c286ec430e89d817

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveCrashHandler.exe

Filesize
270KB

MD5
1215366af12337d0c6df30cf1e8d8703

SHA1
c068c7c67c7940a8b54f91878a41d7d563b89b52

SHA256
afc14e01f32986b8fdf70abedf20a4fa4f8617197164eda2486e81960a4c82fd

SHA512
159f94185a34d0f7eda4bcd7a3428a47df7bd380908a3cd2e8f3793740e2be683637279f248c78ba919e2e9eab7f1196ab6e1c3f090e51ff0b84d5e152e613fb

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveCrashHandler64.exe

Filesize
355KB

MD5
57a36d4a82d48dec0b84dbead5af407a

SHA1
09fb2a73be8171a3d0e4fe8202c8b5aa8e0c662e

SHA256
688fc87c2c8659b03a4e356b2e0d60d644b4f91865afde2edd0b431fe3e9ce6d

SHA512
35cce78ec9b0fef3836b543f3737f71403cdf8d4b084f37276dd9eec63dcc958ea2e64197a09dda9bb85c69654b5d9d65992f7509c9ae542786e49867102a0c8

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveCrashHandlerArm64.exe

Filesize
353KB

MD5
e2c7fc3a842c66f204a71680ea65be48

SHA1
9770bd0b297be216651330f5dada585bb9ab7280

SHA256
024e34c8d8ec714e98a82a6df2de2252f2e0028f91b3ccc928f53498179a7ca2

SHA512
5549a1478cd09cd00525d56dd4b162a3d42a1284c9f811037f02c6c0aed6094e6be53f7580b62226cc9eb31b8b5048435e6225ead7de996c4f3480f5852c7089

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdate.exe

Filesize
163KB

MD5
ee743bc7055cd46c5dc436c2e31fbb2f

SHA1
bc2ecc65e2de6095306d752ad8d4005c0abf0a95

SHA256
fb5355f32b99974fcce4eeaf47eb285b7a5eeed743389ef86cd781227885f7de

SHA512
de549940080e22134a462061b05c19b71224f99d88748e161626c15c10b0e6dde73f614d2b73e7c667883669ef073da249066bda7344e8832f2db3f4ca771b53

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateComRegisterShell64.exe

Filesize
170KB

MD5
0ab8bc5e7781d4d8adf8e9042a092b01

SHA1
55b8f5c9eb6569684d3dcd5a9eaf307c130a9096

SHA256
413516c1b9256ac6091789ab02ee8374720a8e4d3e4ff02f9dccbed707e1d5e3

SHA512
0e2e3c94f7d2c7c7ee7ee8894b97e7d45fec8869ff31a6202b2316a5122570036455b4a6dfb9419c7d21d3dcc90f92bb5297b4e964469ea656b4aec82bc25226

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateComRegisterShellArm64.exe

Filesize
154KB

MD5
d0ac42d1758fd7d7c358ad2afce07b01

SHA1
6714c0c29fc240f6173baaf61876836bad18ca9e

SHA256
35dff5c835b1e56f004fd744c2e9c66495130bf8de1a35bb216fdd21d012d12d

SHA512
e2f27b1c4463de2046b3dbb8dd0cc489ad591bdb0be2b566e1bb909c6409cb333da3905f3239a45560aaebb3ae0760dd12854b6ea1d48ec43fd2d037bcaa67bd

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\BraveUpdateCore.exe

Filesize
195KB

MD5
bbcf651a95a8ef4de64e68aae60739ca

SHA1
63c219727f867525ce1f3bec122117427ab17e74

SHA256
fc081f3cbae71ad895f77ee661b8eb8d6adb7f7652ef072572f83a21024f3e52

SHA512
e77bda759b5330a4084d1904273af243bf3667058eb71494f29413e0ce05dd2800eca3b6046d577a648c9e4f9c582b0b88e07312b9ef0cbc30b1732f2a371856

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\goopdate.dll

Filesize
1.0MB

MD5
371ca63d32e87dc52fbeb61e32f0b5ad

SHA1
ac6a727a473c6e86a940ffe5b2e159f643f14c8b

SHA256
509d0da97daf68177e9ac67768bdc249069e6c524d016546413df78f96ca5b71

SHA512
3273ba366d91288cfff6dcdac96f320048bb0e9eb6b721b40aa97396e04902d7d9cd3b5374314a7cad06ae1622f6de83189ce0947b6de97771f2651c3cd5f275

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_am.dll

Filesize
42KB

MD5
44f5b5915e90e0ea92230935ffdb387a

SHA1
dc8a855da4ce00d1e7fe6666ec5517f1b9251d46

SHA256
b424c70cde21c207c7a0ce50c528a07916f3a23e729662399005a9c2101a4572

SHA512
802100300f9227aae6e2a68c88bb8ce898f54ffeb5a1291e793fb05e8dd5eefba43cf0d8ce6729e3e2b96b8877703ef96e75ccad4bf7b7104b3c4ad98e9fb520

Download Submit
C:\Windows\SystemTemp\GUMB23D.tmp\goopdateres_en.dll

Filesize
42KB

MD5
1bbccbbbeafa25d677e1accf13fc7e91

SHA1
522cba760d745a78f9d2b1af43431b749ba525dd

SHA256
8dad4dfdddb975321556a1f1b398459dac6d68d6b29ea05e96d280b256cf0109

SHA512
f06b803b293a7a3e4b435a741179ccc64b41818a890a62d75dde459667c58db17b4b3a24529a654a64322777941218885a2b6e7b72e6e334386c1dfc20d0da38

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1020835297\manifest.json

Filesize
533B

MD5
42009b4dd959e3bc13f18be4df9274fd

SHA1
587ae3aa747b57ee96f44ff231efec1cc594dc97

SHA256
c9e3cf0c31a16a1a4737fd30b166c6da0a74925590c75026af334c224c022f92

SHA512
6a667409d99bfd69b9096fe322eac756e24a96d5a1cff2ff0ef30cbdb66b3355fb00e6914aebbd2fec35107a4e89a5b9981a030e505b8d88cc4a28a6feabc3a8

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1024514122\manifest.json

Filesize
73B

MD5
52e1e0efe835a2f793349e00af6e8b75

SHA1
e4983561fd9dedbaed5c1cf1e46f27173291ac8f

SHA256
dcf7af171b741a960ee3e947fc824b14d01f81c93bb31d558a18a32fc4571481

SHA512
363a10f98867314f064924ed4b5d575b8604ce72e4087ad0bf953c3cf82db2643a1c81334f7d9ffe04c4cf3651fbfecb83f53a0769f39cb13e271cbfbe7734eb

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1110961593\manifest.json

Filesize
546B

MD5
9740ccd64a7299acd04f1c74e2e1e084

SHA1
6796ae1a7618e307c3b7420c75489e60d79277af

SHA256
894552b63743b4256b5015b1ded8eb735b0068b718b626530a40cbe737636104

SHA512
78c7602c30140b1efa7fd825487feccbc7be641f2d033fb640419f5b7a13f57c899cd43dd2c1eb16a0643ee6bbdecb23cb2e2b06672b3464d84961cfd24d1c3f

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1349947186\manifest.json

Filesize
595B

MD5
18b4bd5a8f50dff7bc0fbbc12097c67c

SHA1
3b8ffe9850fb71af045f5ce02a428256e85cbb40

SHA256
3218618ece9ef512b074811b5608994c140d0fddca8776e2a90020288494efb6

SHA512
40e08115493edef3aeb4bbd609b1d9f61828b85aa73df5a2a49276902c8ee58d68e2c15699386579ddd68c3b482bfdda1889fec4f09344c552b4b80dbc7d064c

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1380502189\manifest.json

Filesize
108B

MD5
c73124e5c89d6650279da8d075ad946f

SHA1
48d17bf85f0f6a585d35a664715cd7ee20bd2c67

SHA256
c2c4b1b4791ef65bca2cff7348038f2863b678c1d6346395bfb49e4856bb3fdb

SHA512
2e9e056063cc55d9361564d389ab277e605bdac46ab83bed1e5b5e1da05c4049b53fcf664cb4209225ff4cbb3deba66e1fd5b6536720201b8b71cefcb05525e2

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1505332155\manifest.json

Filesize
558B

MD5
f2ea88c3713fadc1cb2f57ffc5f763e5

SHA1
203adbd539223c4ea2c2f0a549dd198d46bda233

SHA256
3ecf70ef4593b2d7ff9955f6f62f656b1a3957b743972f1b615c91ad8b4acd62

SHA512
32b8508cdb2b650abf06c6e1507769cca8cbaa99bc654d6ad528872aa1606bb66773142029f78353798c1ea73a4e2ade7c76582340b85206cda0a3de857dc212

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1582221006\manifest.json

Filesize
111B

MD5
d72fc70027b2f46d7f00e415694f1ba0

SHA1
d2adcc47e5436a8a002880b7d02d3d262788e4ee

SHA256
a0e4d6d019af6f028bbbf3be6a7e371b796420f2f407a25f8ef27133da1dde38

SHA512
68beb0a61f0dbfe9d72f3a9c959328ba33d3e65875ae99cd24bbfaf5eca3436ac3ea29ca24633760ed96670751f0d70653aa673f24d346db3bc30a296eb43ea4

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-as.hyb

Filesize
703B

MD5
8961fdd3db036dd43002659a4e4a7365

SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321

SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-hi.hyb

Filesize
687B

MD5
0807cf29fc4c5d7d87c1689eb2e0baaa

SHA1
d0914fb069469d47a36d339ca70164253fccf022

SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\hyph-nb.hyb

Filesize
141KB

MD5
677edd1a17d50f0bd11783f58725d0e7

SHA1
98fedc5862c78f3b03daed1ff9efbe5e31c205ee

SHA256
c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

SHA512
c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1613799057\manifest.json

Filesize
82B

MD5
2617c38bed67a4190fc499142b6f2867

SHA1
a37f0251cd6be0a6983d9a04193b773f86d31da1

SHA256
d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

SHA512
b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_166689075\manifest.json

Filesize
563B

MD5
831e70c5b1c01e15353379045b3e7c7c

SHA1
470558d00546354cad98bc7ea623f7849964e424

SHA256
5cba18f0cc858e01dd1e996fd5d381346fc1c55822aa48550e7feb5b01fabba2

SHA512
8fc0e0f25cd1a82491b52fdfa2f4520b8257e91aaa794973c4aebcda82905721ea26827fe5ea73bd30bd3a65a4df15ee154469f6e13ea2e381b1d843ea662267

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1670006047\manifest.json

Filesize
584B

MD5
1ef387903288d62e05e51735352252bd

SHA1
3f849e95ea9711e428998a903349896acb84aa24

SHA256
dd5ad913a6cbc9b25ea81d1f332c56fe0bb891bb394051b69f0ff7dc7e275cf1

SHA512
c256f425450409dfbd7cc4d49a5c72b3320880e5e029e5fc858edc4e9587d56fc05df35c59b8bea6406fef474d1ec7ed2b7cdee25e826fe392794a556501f0a6

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1759463594\manifest.json

Filesize
72B

MD5
a30b19bb414d78fff00fc7855d6ed5fd

SHA1
2a6408f2829e964c578751bf29ec4f702412c11e

SHA256
9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f

SHA512
66b6db60e9e6f3059d1a47db14f05d35587aa2019bc06e6cf352dfbb237d9dfe6dce7cb21c9127320a7fdca5b9d3eb21e799abe6a926ae51b5f62cf646c30490

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_1760322556\manifest.json

Filesize
564B

MD5
b2a19aa845bc89bd0970c1a1cd2c4dd5

SHA1
487b6b6f909f9de24852d791ab23ae206070db6a

SHA256
10b088025febd5fa580164d49bcfb4e10f23e75a4a390d4456d588b71c8a0967

SHA512
5fc288a500681cdd8a3d75df4129cec439aa1bf29733be8b216115bb308abba980f81a5e5c6e2f7111ac2652f95ee54aefe90bf479eecefed90d6d99a034f622

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_214057924\manifest.json

Filesize
578B

MD5
b5a6cd755414b4aa34e36c238327ed6e

SHA1
b140539c90c1f5cc8668cfd7315137c42cf5bcf8

SHA256
f8f03962ae033a2b0c041b74dd9e7d5030b67c0e90aee02d516ede24240b5578

SHA512
522bf768eba68acac564160d2413a2138aef2517a21b191e4c1306c8255e81fb5132124aadb9904eb06355774833e96e8db14c5e61722a5fce44fecbde10f234

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_492576428\manifest.json

Filesize
95B

MD5
824297c2996af89a1373b1845dd82742

SHA1
72bfd2a7f9ef41103914b801ad31f5f5ef01cbe9

SHA256
5e9356c06beb25685d1bf14478676bd83253e38d7b9f27489cba2724c779e467

SHA512
8d062f5c7083d551d7051a88ea0bf7baaaa574be9969fcbec2fa9f80aaef9a621497dba117b6204223182b4dcc1d75e74deb2d2c4a40f028882c1ca9bf75d42f

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_690106486\manifest.json

Filesize
76B

MD5
4aaa0ed8099ecc1da778a9bc39393808

SHA1
0e4a733a5af337f101cfa6bea5ebc153380f7b05

SHA256
20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d

SHA512
dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_703965668\manifest.json

Filesize
76B

MD5
c08a4e8fe2334119d49ca6967c23850f

SHA1
13c566b819d8e087246c80919e938ef2828b5dc4

SHA256
5b01512276c45ecc43d4bfa9a912bdaf7afc26150881f2a0119972bffdbd8ab0

SHA512
506f9f4fa4baaa4096ce10007eb09cfa95c9188082053b9ff7f2dec65164ff57506b6a8fea28d58783700f257c982aef037afc33f62da8da281e67636430dc23

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_71087779\manifest.json

Filesize
109B

MD5
0c77e064dd056f1ca2294808f01262a5

SHA1
93a3a1f1e6e8e5ebcd309ce8925ec215cc235bff

SHA256
5488ef1ca44c41eb07c5929fbde3cdcbe798135ed4ade35466fba6b32024cadf

SHA512
c625d75e9363e96eee02c8a2799e0b79b5d5fc04a5a0b9f9ae8a084a5cf05323c47b8475fd0b37b84fd0f884d77a4d9d34fd4c7bd8752f53a745438393c1092c

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_712855970\manifest.json

Filesize
592B

MD5
92780793ca71952f03a4eac606e950dd

SHA1
2e12764889cb24e91414f5d6124bd74ea8fd669d

SHA256
f89b37a2136bce0c01ff34089838aa9dfc5a7600a53dc31f25d1159314482899

SHA512
6385835185379b79cf0d84d49a2a3a00fbd0206b1b08eda7065d0241ad680db02756ba7e7ab1c2081307c938c4747e18173e754b99aa0b5f580df2fb8c54c639

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5736_873030054\manifest.json

Filesize
555B

MD5
32c91bf9b8f95b4b2330a1b7d8b6c359

SHA1
32589e12e041bbc42fb3a66c489b39ef380fc1fd

SHA256
cf65a918306fa7763350fd8464fd2f3a049468424b6b89b15b15d824f0796df1

SHA512
2f6582a63caf1d18298b6ff9ac65172609c3444d676c5d1988d329e2dfcca5293b6cf2838dd9a6eaa655cbff403989f47fc4811b41e9a2b4c10e7478b92f384a

Download Submit
memory/5256-5280-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5283-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5282-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5284-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5281-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5279-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5275-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5273-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5256-5274-0x0000026362BF0000-0x0000026362BF1000-memory.dmp

Filesize
4KB

Download
memory/5352-4611-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4613-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4614-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4615-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4617-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4616-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4612-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4609-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4610-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download
memory/5352-4608-0x000001D739040000-0x000001D739041000-memory.dmp

Filesize
4KB

Download