4c891082fdb808e0fa9ebe16a26e762a309d703c9c2254a71ebdbf4612e48dc2

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 17:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BraveBrowserSetup-BRV011.exe
Size 1.2MB
Sample260503-vpsemaes51
SHA256 4c891082fdb808e0fa9ebe16a26e762a309d703c9c2254a71ebdbf4612e48dc2
MD5 d9f569785635635d01e1bb3032156830
SHA1 78b6edb49bc4f6923a29110d78666d0272453ca1
SHA512 d8de3f326aa0b9af629d827dc3c038e1c3a6bcfe2e7f33a19eece9db38f38e174505067e70e9e7ccd9d2b46c90b6ebed440ae9da2e079c6961a1ad796beca5b0
SSDEEP 24576:Lmmr/0ge471nOdZpvWRQ2IdcQUAD06zujf3f2hCMPHBgqAIT4feCFVlS7:Dr/beu1nO/pegCAQ6z1h3JFT4jBa
TLSH
T13C451221B2D08075F5B32D3119E596759F7EFC304E62999F239A1F2D1FB0181EB2932A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence privilege_escalation spyware stealer trojan

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\ = "Brave"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\StubPath = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\147.1.89.145\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Localized Name = "Brave"	setup.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\IsInstalled = "1"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}\Version = "43,0,0,0"	setup.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe	BraveUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation = "0"	BraveUpdate.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_iw.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Extensions\external_extensions.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\pt-PT.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\ar\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\km\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\sv\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\SetupMetrics\c43b0ffc-65bb-4b36-9402-af42aa049523.tmp	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\notification_helper.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\hr\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sk.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\chrome_200_percent.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\id.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\ro.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\sl\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\ur\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hi.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\sr-Latn.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\zh-TW.pak	setup.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe	brave_installer-x64.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_am.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lt.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\BraveVpnWireguardService\tunnel.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\nb.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\lo\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\VisualElements\Logo.png	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\mk\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\brave_installer-x64.exe	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\mr.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\ko\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Application\chrome.VisualElementsManifest.xml	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fr.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\BraveVpnWireguardService\brave_vpn_wireguard_service.exe	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\bg.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\gu.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\el\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\mr\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_en.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_mr.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_tr.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\chrome_elf.dll	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\bn\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\te\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_pt-BR.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine_64.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\147.1.89.145.manifest	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\v8_context_snapshot.bin	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\bn.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\sk.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\MEIPreload\manifest.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ml.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\tr\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ja.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_kn.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShellArm64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_zh-TW.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\my\messages.json	setup.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sw.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_bn.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lv.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ms.dll	BraveUpdate.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\et.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\Locales\hi.pak	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\zh_TW\messages.json	setup.exe
File created	C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\dxil.dll	setup.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\0732516e-fe33-4cb8-9b0e-6ebc140cec82\index.html	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_602956388\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1662965801\brave_metadata\verified_contents.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\sarbajit-paul.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\3acc3b5d-9dea-4b73-a74e-28856d4f1421\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\marek-piwnicki.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_334057634\cr_en-us_500000_index.bin	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-ml.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_cs.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_is.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1406768476\crl-set	brave.exe
File opened for modification	C:\Windows\SystemTemp\Crashpad\metadata	chrmstp.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-de-1996.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_url_fetcher_5264_1725725153\hfnkpimlhhgieaddgfemjhofmfblmnib_10502_all_paxhm56gxifgaj4iy7gf3tfenu.crx3	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_pt-BR.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_th.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_url_fetcher_5264_1445541915\extension_1_0_425.crx	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\photo.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_bg.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_tr.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_220514340\1\debounce.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\search-logo.webp	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1307227414\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-ga.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_url_fetcher_5264_1498757903\ggkkehgbnfjpeggfpleeakpidbkibbmn_2026.4.23.60_all_ad6545mkoqw7lg2rvp4aktvdbzhq.crx3	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1721828702\passwords.txt	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdateBroker.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\BraveCrashHandler64.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1572392784\resources.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\nguyen-hoa.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-de-ch-1901.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-bn.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sk.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1161324634\brave_metadata\verified_contents.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\kellen-riggin.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\inigo-concepcion.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_url_fetcher_5264_1780831337\obedbbhbpmojnkanicioggnmelmoomoc_20251024.824731831.14_all_ENUS500000_pvfnv4psgpsyzcf3aznhkmdrk4.crx3	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-sk.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1430623145\_metadata\verified_contents.json	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdate.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\psuser_64.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_fa.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ro.dll	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\3acc3b5d-9dea-4b73-a74e-28856d4f1421\mouse-pointer-DSDsXotA.webp	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1880233729\kkjipiepeooghlclkedllogndmohhnhi	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\bolivia-inteligente.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\liana-s.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_582770862\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\9f16a9f0-f6f8-4853-9fad-ae472d00660f\adad97aa-b7d4-475c-bd94-d190f91d7366.png	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-sq.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-or.hyb	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\index-DmqawZrO.css	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\fabian-quintero.jpg	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1443011075\_metadata\verified_contents.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-nb.hyb	brave.exe
File created	C:\Windows\SystemTemp\GUMF5EA.tmp\BraveCrashHandler.exe	BraveBrowserSetup-BRV011.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\3acc3b5d-9dea-4b73-a74e-28856d4f1421\search-logo.webp	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\mouse-pointer-DSDsXotA.webp	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_url_fetcher_5264_1260227768\7_all_sslErrorAssistant.crx3	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1550989826\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1572392784\manifest.json	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\index-CIFDYWhS.js	brave.exe
File created	C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\search-icon-BD6Rfjhr.webp	brave.exe

Executes dropped EXE 59 IoCs

pid	Process
1376	BraveUpdate.exe
5536	BraveUpdate.exe
2588	BraveUpdate.exe
5268	BraveUpdateComRegisterShell64.exe
3024	BraveUpdateComRegisterShell64.exe
5860	BraveUpdateComRegisterShell64.exe
5920	BraveUpdate.exe
1944	BraveUpdate.exe
5412	BraveUpdate.exe
796	BraveUpdate.exe
4268	BraveUpdate.exe
2200	BraveUpdate.exe
4536	brave_installer-x64.exe
2876	setup.exe
2320	setup.exe
3244	setup.exe
5468	setup.exe
1628	elevation_service.exe
5616	BraveUpdate.exe
5432	BraveUpdateOnDemand.exe
5968	BraveUpdate.exe
5264	brave.exe
1644	brave.exe
5920	brave.exe
1328	brave.exe
5568	elevation_service.exe
2844	brave.exe
4552	brave.exe
3764	brave.exe
5456	brave.exe
1144	brave.exe
1020	brave.exe
5484	brave.exe
5580	brave.exe
1508	brave.exe
1860	brave.exe
492	brave.exe
5544	brave.exe
4296	brave.exe
3680	brave.exe
2740	brave.exe
6068	chrmstp.exe
5524	chrmstp.exe
4408	chrmstp.exe
5656	chrmstp.exe
5996	brave.exe
1020	brave.exe
1288	brave.exe
4560	brave.exe
4976	brave.exe
4496	brave.exe
5176	brave.exe
5452	brave.exe
5100	brave.exe
1120	brave.exe
4832	brave.exe
328	brave.exe
3460	brave.exe
4312	brave.exe

Loads dropped DLL 64 IoCs

pid	Process
1376	BraveUpdate.exe
5536	BraveUpdate.exe
2588	BraveUpdate.exe
5268	BraveUpdateComRegisterShell64.exe
2588	BraveUpdate.exe
3024	BraveUpdateComRegisterShell64.exe
2588	BraveUpdate.exe
5860	BraveUpdateComRegisterShell64.exe
2588	BraveUpdate.exe
5920	BraveUpdate.exe
1944	BraveUpdate.exe
5412	BraveUpdate.exe
796	BraveUpdate.exe
4268	BraveUpdate.exe
2200	BraveUpdate.exe
2200	BraveUpdate.exe
4268	BraveUpdate.exe
5616	BraveUpdate.exe
5968	BraveUpdate.exe
5968	BraveUpdate.exe
5264	brave.exe
1644	brave.exe
5264	brave.exe
5920	brave.exe
5920	brave.exe
5920	brave.exe
1328	brave.exe
5920	brave.exe
1328	brave.exe
5920	brave.exe
5920	brave.exe
5920	brave.exe
5920	brave.exe
2844	brave.exe
2844	brave.exe
4552	brave.exe
3764	brave.exe
3764	brave.exe
4552	brave.exe
5456	brave.exe
5456	brave.exe
1144	brave.exe
1144	brave.exe
1020	brave.exe
1020	brave.exe
5484	brave.exe
5580	brave.exe
5484	brave.exe
5580	brave.exe
1508	brave.exe
1508	brave.exe
1860	brave.exe
1860	brave.exe
492	brave.exe
492	brave.exe
5544	brave.exe
4296	brave.exe
4296	brave.exe
3680	brave.exe
3680	brave.exe
2740	brave.exe
2740	brave.exe
5544	brave.exe
5996	brave.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BraveUpdate.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BraveUpdate.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveBrowserSetup-BRV011.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdateOnDemand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
5920	BraveUpdate.exe
5616	BraveUpdate.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1328	brave.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	brave.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	brave.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	brave.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	brave.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134223019058072675"	brave.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	brave.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveHTML\Application\AppUserModelId = "Brave"	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\ProxyStubClsid32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC938520-1782-43C2-83C5-13AA5C6A0138}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.ProcessLauncher.1.0\CLSID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{576B31AF-6369-4B6B-8560-E4B203A97A8B}\AppID = "{576B31AF-6369-4B6B-8560-E4B203A97A8B}"	setup.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.webp	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00B16F95-319A-4F01-AC81-CE69B8F4E387}\VersionIndependentProgID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08F15E98-0442-45D3-82F1-F67495CC51EB}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4C3BA8F3-1264-4BDB-BB2D-CA44734AD00D}\ = "Google Update Process Launcher Class"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\LocalServer32	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebSvc\CLSID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\NumMethods\ = "4"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CredentialDialogMachine.1.0\ = "BraveUpdate CredentialDialog"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\BravePDF\Application	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08F15E98-0442-45D3-82F1-F67495CC51EB}\ProgID\ = "BraveSoftwareUpdate.Update3COMClassService.1.0"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C974F2DD-CFB8-4466-8E6D-96ED901DAACA}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19F4616B-B7DD-4B3F-8084-C81C5C77AAA4}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{652886FF-517B-4F23-A14F-F99563A04BCC}\ProgID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10479D64-2C5F-46CD-9BC8-FD04FF4D02D8}\ = "IGoogleUpdateCore"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods\ = "17"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ProxyStubClsid32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\BraveHTML\shell\open	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreClass.1\CLSID	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{35A4470F-5EEC-4715-A2DC-6AA9F8E21183}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\ = "IPackage"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{48B5E6B2-9383-4B1E-AAE7-720C4779ABA6}\ = "IRegistrationUpdateHook"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{852A0F87-D117-4B7C-ABA9-2F76D91BCB9D}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\ = "IGoogleUpdate3"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ = "IGoogleUpdate3WebSecurity"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachine	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachine\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\brave-browser\URL Protocol	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\brave-browser\shell\open\command\ = "\"C:\\Program Files\\BraveSoftware\\Brave-Browser\\Application\\brave.exe\" --single-argument %1"	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{13B35483-DF37-4603-97F8-9504E48B49BF}\VersionIndependentProgID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\NumMethods\ = "7"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}\NumMethods	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xht\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\NumMethods\ = "4"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{48B5E6B2-9383-4B1E-AAE7-720C4779ABA6}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{931E73FD-D487-4458-AA08-1FF41413377B}	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC938520-1782-43C2-83C5-13AA5C6A0138}\InprocHandler32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A147722A-5568-4B84-B401-86D744470CBF}\NumMethods\ = "43"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A147722A-5568-4B84-B401-86D744470CBF}\ProxyStubClsid32\ = "{497D4487-D544-4CD9-9CC3-E820E7BA1FBE}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A147722A-5568-4B84-B401-86D744470CBF}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}	BraveUpdate.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
4268	BraveUpdate.exe
4268	BraveUpdate.exe
5616	BraveUpdate.exe
5616	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
1376	BraveUpdate.exe
5264	brave.exe
5264	brave.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5264	brave.exe
5264	brave.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1376	BraveUpdate.exe
Token: SeDebugPrivilege	1376	BraveUpdate.exe
Token: SeDebugPrivilege	1376	BraveUpdate.exe
Token: SeDebugPrivilege	1376	BraveUpdate.exe
Token: 33	4536	brave_installer-x64.exe
Token: SeIncBasePriorityPrivilege	4536	brave_installer-x64.exe
Token: SeDebugPrivilege	4268	BraveUpdate.exe
Token: SeDebugPrivilege	5616	BraveUpdate.exe
Token: SeDebugPrivilege	1376	BraveUpdate.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe
Token: SeCreatePagefilePrivilege	5264	brave.exe
Token: SeShutdownPrivilege	5264	brave.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
5264	brave.exe
5264	brave.exe
5264	brave.exe
4408	chrmstp.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 2840 wrote to memory of 1376	2840	BraveBrowserSetup-BRV011.exe	79
PID 1376 wrote to memory of 5536	1376	BraveUpdate.exe	80
PID 1376 wrote to memory of 2588	1376	BraveUpdate.exe	81
PID 2588 wrote to memory of 5268	2588	BraveUpdate.exe	82
PID 2588 wrote to memory of 3024	2588	BraveUpdate.exe	83
PID 2588 wrote to memory of 5860	2588	BraveUpdate.exe	84
PID 1376 wrote to memory of 5920	1376	BraveUpdate.exe	88
PID 1376 wrote to memory of 4268	1376	BraveUpdate.exe	92
PID 2200 wrote to memory of 4536	2200	BraveUpdate.exe	95
PID 4536 wrote to memory of 2876	4536	brave_installer-x64.exe	96
PID 2876 wrote to memory of 2320	2876	setup.exe	97
PID 2876 wrote to memory of 3244	2876	setup.exe	98
PID 3244 wrote to memory of 5468	3244	setup.exe	99
PID 2200 wrote to memory of 5616	2200	BraveUpdate.exe	103
PID 5432 wrote to memory of 5968	5432	BraveUpdateOnDemand.exe	105
PID 5968 wrote to memory of 5264	5968	BraveUpdate.exe	106
PID 5264 wrote to memory of 1644	5264	brave.exe	107
PID 5264 wrote to memory of 5920	5264	brave.exe	108
PID 5264 wrote to memory of 1328	5264	brave.exe	109
PID 5264 wrote to memory of 2844	5264	brave.exe	111
PID 5264 wrote to memory of 4552	5264	brave.exe	114
PID 5264 wrote to memory of 3764	5264	brave.exe	115
PID 5264 wrote to memory of 5456	5264	brave.exe	117
PID 5264 wrote to memory of 1144	5264	brave.exe	118
PID 5264 wrote to memory of 1020	5264	brave.exe	134
PID 5264 wrote to memory of 5484	5264	brave.exe	120
PID 5264 wrote to memory of 5580	5264	brave.exe	121
PID 5264 wrote to memory of 1508	5264	brave.exe	122
PID 5264 wrote to memory of 1860	5264	brave.exe	123
PID 5264 wrote to memory of 492	5264	brave.exe	124
PID 5264 wrote to memory of 5544	5264	brave.exe	125
PID 5264 wrote to memory of 4296	5264	brave.exe	126
PID 5264 wrote to memory of 3680	5264	brave.exe	127
PID 5264 wrote to memory of 2740	5264	brave.exe	129
PID 5264 wrote to memory of 6068	5264	brave.exe	128
PID 6068 wrote to memory of 5524	6068	chrmstp.exe	130
PID 6068 wrote to memory of 4408	6068	chrmstp.exe	131
PID 4408 wrote to memory of 5656	4408	chrmstp.exe	132
PID 5264 wrote to memory of 5996	5264	brave.exe	133
PID 5264 wrote to memory of 1020	5264	brave.exe	134
PID 5264 wrote to memory of 1288	5264	brave.exe	135
PID 5264 wrote to memory of 4560	5264	brave.exe	136
PID 5264 wrote to memory of 4976	5264	brave.exe	137
PID 5264 wrote to memory of 4496	5264	brave.exe	138
PID 5264 wrote to memory of 5176	5264	brave.exe	139
PID 5264 wrote to memory of 5452	5264	brave.exe	140
PID 5264 wrote to memory of 5100	5264	brave.exe	141
PID 5264 wrote to memory of 1120	5264	brave.exe	142
PID 5264 wrote to memory of 4832	5264	brave.exe	143
PID 5264 wrote to memory of 328	5264	brave.exe	144
PID 5264 wrote to memory of 3460	5264	brave.exe	145
PID 5264 wrote to memory of 4312	5264	brave.exe	146

C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV011.exe
"C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV011.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2840
- C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdate.exe
  C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdate.exe /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
  2⤵
  - Event Triggered Execution: Image File Execution Options Injection
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1376
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:5536
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:2588
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:5268
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:3024
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:5860
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSI1MTUiLz48L2FwcD48L3JlcXVlc3Q-
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:5920
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{3F621459-22CA-412E-BCAC-29FD7B0F3A78}"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4268

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1944

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:5412

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:796

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\brave_installer-x64.exe
  "C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\gui86C1.tmp"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4536
- - C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe
    "C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\gui86C1.tmp" --brave-referral-code="BRV011"
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Drops file in Program Files directory
    - Executes dropped EXE
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:2876
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=147.1.89.145 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff61b9b9a68,0x7ff61b9b9a74,0x7ff61b9b9a80
      4⤵
      Executes dropped EXE
      PID:2320
  - - C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\gui86C1.tmp" --create-shortcuts=0 --install-level=1
      4⤵
      Drops file in Program Files directory
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:3244
    - - C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe
        
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{974DE80B-91FB-4D82-B72E-252C789F1EE3}\CR_54B70.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=147.1.89.145 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff61b9b9a68,0x7ff61b9b9a74,0x7ff61b9b9a80
        5⤵
        Executes dropped EXE
        
        PID:5468
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzA3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMjEzNDQiIGRvd25sb2FkX3RpbWVfbXM9Ijg2NTYiIGRvd25sb2FkZWQ9IjE0NDY2MDA0OCIgdG90YWw9IjE0NDY2MDA0OCIgaW5zdGFsbF90aW1lX21zPSIzMjk2OSIvPjwvYXBwPjwvcmVxdWVzdD4
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5616

C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\elevation_service.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:1628

C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
"C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5432
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5968
- - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
    3⤵
    - Drops file in Windows directory
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5264
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=147.1.89.145 --initial-client-data=0xf8,0xfc,0x100,0xb4,0x104,0x7ffa17105828,0x7ffa17105834,0x7ffa17105840
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1644
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,7109257356773170382,5384199771148637328,262144 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5920
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2188,i,12236604368878342246,3751552532816850737,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1996 /prefetch:11
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Time Discovery
      PID:1328
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,8758448798475802432,9713896340050186915,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2420 /prefetch:13
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2844
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3408,i,5883797124900952974,15462888119990616694,2097152 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3416 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4552
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3460,i,10015127651056835167,9627416074322136604,2097152 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3436 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3764
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,2027195408384794029,17212291333963734133,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5292 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5456
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,2668633376441072421,16755540449683797789,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5432 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1144
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,32427126163143395,1285992484914995891,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5580 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1020
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,7551761566103120487,9129578162355536854,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5728 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5484
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,8309797750561517216,18285069484583610687,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5884 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5580
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5736,i,17762066382804904152,2504933711128358958,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6020 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1508
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,3804416702222169787,13749226108992540932,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6108 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1860
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5860,i,13487184111827644518,7882793541758644403,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=3752 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:492
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5984,i,7164822861987960023,5321042677177976253,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5768 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5544
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,3294231866468720361,1023573282551165680,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=6112 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4296
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,7448015597467420134,15865910030231406558,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5948 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3680
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:6068
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=147.1.89.145 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff698519a68,0x7ff698519a74,0x7ff698519a80
        5⤵
        Drops file in Windows directory
        Executes dropped EXE
        
        PID:5524
    - - C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
        5⤵
        Executes dropped EXE
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:4408
      - C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe
        
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=147.1.89.145 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff698519a68,0x7ff698519a74,0x7ff698519a80
        6⤵
        Executes dropped EXE
        
        PID:5656
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6124,i,14505592355649410330,6434783240180158265,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5656 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2740
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,17065741244367092111,6054110211712116761,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5708 /prefetch:14
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5996
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6156,i,8555207074184690349,18162181466638547894,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=3676 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:1020
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,6773637245490336214,6289160569478055995,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=3748 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:1288
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,8564661379996171501,3714967336813910880,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6120 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4560
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,17614846223784678813,10387197463745976655,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6396 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4976
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6036,i,18327103580162532374,13332782050263209909,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=3800 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4496
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6580,i,8877319293268110880,5409054260552663456,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6544 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:5176
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,5657894049994560392,10696739008570901920,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5556 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:5452
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,18401393887377889121,14790521753365461618,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5316 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:5100
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,6905525152958295416,1987299300365724944,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6556 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:1120
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6596,i,908995780181892344,7522507702709997528,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=2884 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4832
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,11367620031847678404,10358429512924042720,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=5348 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:328
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,16396564762702356613,1664592429228925618,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=5324 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:3460
  - - C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5944,i,243200168178456760,7227671908568408956,524288 --field-trial-handle=1904,i,13600739852366673250,1947193949456236545,262144 --variations-seed-version=main@aeaac611db040c4ed7f358e4c550fc73cce9081a --pseudonymization-salt-handle=1908,i,17769042260242775226,5058459418890165493,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=724 /prefetch:14
      4⤵
      Executes dropped EXE
      PID:4312

C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\elevation_service.exe
"C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:5568

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BraveUpdateComRegisterShell64.exe

Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
Size 170KB
SHA256 de64e7d3c5094643e791cbc2f04c9682a6951babc5f43bc9b9860dafaba0bac0
MD5 e4103c482fd9d6828499a79f1f563e94
SHA1 6967dc3393426ae1aa5369309fd7de49e5bbdc1e
SHA512 8b7ddd487ee400e66d668e5d0c23b9037d1c27a96dcf5d4d9ac581b669b7ea9b678c05a6f00b745bfa1649a9a45a7b3419148229d0fc2d7969d515c2ce59ee25
SSDEEP 3072:GurxDqvsKxxDo4WVSWW/VaO7QAiOWdj/81qVwvgB+chbXB:GMlKxxc4oIt97QAY/qoB+ix
TLSH
T101045C1B73E430F9E1B78135C8924A16E7B2B8720B50E79F13A4477A1F336919D2EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.exe

Path C:\Program Files\BraveSoftware\Brave-Browser\Application\147.1.89.145\Installer\setup.exe
Size 5.7MB
SHA256 c7262c3d44930120013ccb53f9b54293276462034e32b9a8ba5c0e34f88367c2
MD5 e06df6bb5e9388c1e615b3365562b34c
SHA1 f32f0b2c717388ba8b7a948cf989906de17d516b
SHA512 b0243fffabf7d7d6fd5958a62849a8bb0a27f973f9453ebce00c7cba3f58cdb0dccd1eefc532856100e4cce99201deacabd995be26e1baa2a733bb3c5fdf3944
SSDEEP 49152:Bpx82P5rbWtAFOjtDiEjaQ4MccEKV1+7ZDj6DogRcxhQ6LRDCxsfy6xoEssOfSOv:B3P0AYJh/cB7qobaQ3341scMi
TLSH
T14C565B53E3A601E8D06ED974CF6D51229A257C8A47B1E3EF1AD436E11A31ED47B3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2876_1222274701\Chrome-bin\147.1.89.145\resources\brave_extension\_locales\sr\messages.json
Size 9KB
SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
MD5 be4d3ff630ba68c0c1ef6332335aa4fb
SHA1 eee39c1e1fd075bdbaf15e00dba66b68fcd03789
SHA512 50ae00273c44a86ecc6a40b3010d92bd860061d89072e72c95ea2171ef2c0cb7d31b711639c3a5e9d9274159150488ec7dc1869db3c2efac50ee115b0ec3d5bc
SSDEEP 192:RUt3IkuwVCnSuvPlxuTQFDi41vjZpNns6:syjDNs6
TLSH
T1BB127D00DD703DBB02DA05263C7B7084B73407AA52257D2CEADA919D1B8E9FBD4BB385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a7915ab-66c0-4673-aae2-a63a994176af.tmp

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\5a7915ab-66c0-4673-aae2-a63a994176af.tmp
Size 53KB
SHA256 24e29a2eae7ad6298c017c908ae47058c6c977d55d88785e7048150cdc4bc874
MD5 f847bae9041070fb6a059343f342bf53
SHA1 ad0b7e049ffb576e76dd8fa58799ab43c5a637d2
SHA512 66f1b3729f1bb35f308111c4c3e4a6dde932fa8372631ea5278f5709aa45355a08e38b271dd006458b0275eb0db8c0393b1a4c1ebddffa122136446c6be48336
SSDEEP 768:44cLOdu26l02tMlKyzbEAwXJxXTEmegdZWZu8j0OZFIHaxSvUV9e2jtCksxEutg:44Vd60hKyzbEA0PEmegdEZFIHCj9r
TLSH
T15F33D116D06A8DBB88EB953FB09D7A49AFEC019D501C92D8C49A4E3B35DFD9C3227443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\10502\crl-set
Size 1.1MB
SHA256 90de01a807687f4cc90a0ed6ca1dec3f709ea83f9bc23d85059db8972d3abaff
MD5 702e5fc7fcb72d255d9777b7eb9d0627
SHA1 ccb4caf9385feda3faede33ce82eec2a71bf7ee6
SHA512 5b94e6997004a360a6302257c595fac3a48260879463dd3b978a19fd54f068d27963e34b11e9474decc2ccc7db7951e7bdadae02ecec2f8d0b30e414cee67d5e
SSDEEP 24576:8I+1BBmaQrknegcqTTnvBKRIMrZozG7tbV85HMj4xBLda3:WrmZNHuTnvsdrZoS7lV8asBLd0
TLSH
T16045338FAE87762884EB10A23452A3863F871DD5B35DAD9E0C87063748E74D1EB90D7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preload Data

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2026.4.23.60\Preload Data
Size 225KB
SHA256 c589dea70bc58c8435c8568ee42cea767a1b8832d5cc570a93bac7768c147761
MD5 959a8b93dc9f3b229afd0b1f6e48bc32
SHA1 0037d72f99f4e8de6c0ad84670e2da939498b57f
SHA512 a2c958366dc41b40217558404789bf9d2c2de43a2c84f362a4b12344a28378ed245f6f9a00ea4b099e235688de869f276697e4cff419d3b57d5c45221490f029
SSDEEP 6144:UDs7Mc+ImP40CJ8zjadm+6HcJJ62jS+icaFBvGNOQqhvAc4g6:S40q6HL2e+Ufe
TLSH
T13C341E81D9393127AFCA573EA9B51A1C2BB4ED20337CF4DD841852DA39BF3C41268D96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
Size 19KB
SHA256 1fdba9d3994e5f0235192e44aa322bf33755f37908aa0d4dc74e7437cc128cc9
MD5 1985299900be51418e421001ed6fdc50
SHA1 dfdb64bb0b0602c6bb314e4b5ffedb27b487e804
SHA512 a0271d53a239c01933a6dac65979660be9984e2f419fb080561f3f10632d0ba8994154438b2f013bc6554fbb0559349207645e8355ebc438dbfa56dd27599ccf
SSDEEP 384:zpHmRa0WaaE5UHmRa0taaED3SqMEYuSpiXel51OQxAo:RmRgaaE0mRnaaEDCqfYu8iXelRp
TLSH
T1ED92A42994686F3F8FD6595CB6727F11EEE431049480B845E5F82F6C4BEA8F8221F067
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5932ce.TMP

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences~RFe5932ce.TMP
Size 3KB
SHA256 166e7f30b6eb40e1f2f657857ad8519f1441f5248d3f83f80c46b00a571290c7
MD5 5085a5b27664a1d689537795d5c36e6b
SHA1 67fd0249ac002b3735b3a7f8cc3dd4a91e861e02
SHA512 ba42fb6c2509acf2f49a3fdb0be8d888b490e480c346bccc6458d848c8fa3da97a967ce5e2394f5b37d44072b8ce72a1b35d5d3ce1efd3ee217eeaf9a45f4052
TLSH
T14171716CC0A01CAB8EB3762638BA0B81FAA1673F11801907797D464D4FB392B8045F99
MD5 SHA1 SHA512 TLSH

Submit Download

adf1f838-c0cf-4b18-b76a-1d9ab6f5eed0.tmp

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\adf1f838-c0cf-4b18-b76a-1d9ab6f5eed0.tmp
Size 165KB
SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
MD5 0d61959956bffda7a8384cb7ce68d6bd
SHA1 cc70aa6fc4a12b762b7884610a28e03c221ab9ee
SHA512 51754f0a0cb23be0982b8578f9ddbed0544506fbadff97e59878873f93d78634c7da60d954c8f1cb717c9e4f35a613b7b455914eb468f05b9aa55d3daa6c544e
SSDEEP 1536:gwNyTwB6zqWP13FRMsBFX1jkVXvEgBeeDyGfj2kqwus3KC5RxF:j/O9t1oVXvrTus3KCj
TLSH
T191F35155215054DED2035734CB2DE867BB76AEE92D36B9036F60BEE6BA7B1C0BC401C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

download_file_types.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
Size 7KB
SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
MD5 7dc81804b51ea4b37bd595b44c7e087c
SHA1 88fa328e93247b5d8d8aaca3d83bd8a803bf1c28
SHA512 8028fda2f5fcf3b7b23d09bb0a35f6e885417b10bf4512aac1d109d4ab355804c9f092f765c3017b87d120c7d00d4dbe8e628ccc8b15b807089e2b9b1b741f3a
SSDEEP 192:e0aEW8SsWk/pvtHB3Nf5Y10k6QKEa4pmifL1YbAnz1BRsO1v:e0aEW8SsWk/pvtHB3Nf5YKk6QKEa4pmu
TLSH
T1E7F1E9C5893A19E83C31D391F1B9C120CD15EDAB9C6F248E8BB3529B7BC1D868E27157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
Size 65KB
SHA256 6a7cd2c5bbdae1544890a90fcea5ac7d55e8106c4e6ae1fc3f68920ac3ffc002
MD5 cbf5aef4095fcbd0442f058265415686
SHA1 82a0fb6d1c3875dfcedb7b8d29a4742df0449373
SHA512 e6778b68d58787b342784849ab85fbc00989e5ccec2524aecff4e4ad7e6cf84030246113c3792bed253d8cdb81d92680a4c0865f4321efc1464188982bb653eb
SSDEEP 1536:C4Vd60hKyzbEA0PEmegdEZFIHfpYDXj9r:CGcNegSI/y9r
TLSH
T19353D136D05A8EF788EB992FF49D3E45AFAC019F605C91C4C4965E2E35EEC5C2227413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe593241.TMP

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State~RFe593241.TMP
Size 10KB
SHA256 3d705e31f3b53855aef6a7c0e09a31694a2dad52a877e2190a6e6f4a83781678
MD5 5095a5589396941358ce8934bf7d3f05
SHA1 ad15ea010b968b84601e3a8f2b6824fff91642b4
SHA512 38b138f086991b44c8cd8fe4d0b071feca2e0db0576a4da78c6a7159b0fbbddbbf0d82947d265b6b28937ae1d4ef293b6caa896e204ec2afd8971af9d7e1c4a0
SSDEEP 192:NryuA6ETjwwznShnGO/Jd2gGheCgnsk9lq3Lo9uSDy4zyDpKu9lhDFYs:R98nSRGighgXW3Lo9uEEz
TLSH
T1CF22BE9B80E47832762B02457AA5528F0FFD98F67190DAF484E77A5208451DD2B6FC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preloaded_data.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\MEIPreload\1.1.0.3\preloaded_data.pb
Size 8KB
SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
MD5 a01c788456b7771739d0c770da676ea8
SHA1 23b67e6618949c08a0a214d920fbc9779bf89377
SHA512 9846efd14ec46154b7b80b89e08b30bc8f82ca1b11bfaf19ebd4f1f32b3f44fbac8ea8c33203070c4414cbab9d727d2ccc4f1f733b64cbea880c0b516a16a8a1
SSDEEP 192:/8bnweeDe4NkGNXDsyEsR6R6Oh/CU3y5M1ZJ8jmmOd:/8bnsa46GN1eRv/RR7J8jmmOd
TLSH
T1EA029F068E4B3E4F0D1A964D49863F56373B216751C54C8CFF9B992A4069761B0AC89D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

p3a_manifest.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig\1.0.5\p3a_manifest.json
Size 437B
SHA256 9f5f196db1a077339eb8c5eaec285bbf2d8645ff890985a808b3208ef5cb5ccf
MD5 aeadb8443ee0d094f57d9e63030d70da
SHA1 fe59c3e510a6791f8c01102997c9b5fdc9d519ff
SHA512 a25e8af16c6ea2e1a4ec617ceea1fd117dbd2459c7262a564dd4a304e58271929334a7732442ee9099371c037adfcf534683abed039fcbb0c5456e274880868b
TLSH
T17FE0DC16190E4EF39EE6012190AA19035CBC042284C43CA451DDD76EC1CDDCD302221F
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1654\crs.pb
Size 301KB
SHA256 452d35c514c03fb13cb95ad363c2107480eed6490476abf6b28fca89a12e3710
MD5 3f674b21707367dadc4a0fc0676b5853
SHA1 bfbb980982f4c918b2611d0f30f52e5e6adabfd2
SHA512 b819d182c9fe5fbaf3142e35ba7e3baa9d55a9a2c621acc19c930824ca7c95f6d693c8744f94fcfe1bc45a324c92e032b19734d5eda29fd561007492d3720c5a
SSDEEP 6144:JHJ2YpYYUbV3p0k6wpnnoTBfStk06xrWtefZhzSVs3LowNZFeO:32YpYN/hnQStaBOs3kUeO
TLSH
T1D5649DDE0F387843AFC3DE54B1C8D53BBDB576D17A9A54829049C4F269827E17E8802E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1654\ct_config.pb
Size 54KB
SHA256 8dcf208b8ed4cba0e1298a87b49e68df92f43a7a2d32e6cb2ac59bb50f04d791
MD5 755222bbf88c1bb60e4741262ab83708
SHA1 576ca45f426a1def745509c762bdc56b6ba55893
SHA512 b6e19540575fda37ac9b3867d49d6d980b5520967962aeb7e299f175fdd40c5a02226c40438f60cb68cbfcdd975deafcb5dd7615888b2a5b5db068369f76a3ee
SSDEEP 1536:+9Myh3zp3n6v1jO4alVyMgMJitYuvJoPSCW:P4yMgMJsRvb
TLSH
T1F5439EB7B4249B411B839118B4DC6BDA921373A98CF3D93FF1D19004F7812B6619E93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1654\kp_pinslist.pb
Size 10KB
SHA256 79b619e92ebd2f1401b04d51f69eae0e3b108a380c8b006a7516687a6425021c
MD5 41f4bd67ab0dbb9b6dc66416cacf74b7
SHA1 20ba9670a9b63fd51188137414d16aebc4782e26
SHA512 9d1d623b8deaff61eed1a3703a11a6fc4002e2bb39eabf531a4ce04157d7ce36aef7d26d4ef7a6fe358db4f60f27c7f5670d1b795ee2a244d1d1900f89f8e90f
SSDEEP 96:Fxk+yBjecaikDBwrXnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:k1IDCrXnYQ5jlMacFwn2c9w
TLSH
T1802204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssl_error_assistant.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb
Size 2KB
SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
MD5 e2f792c9e2dd86f39e8286b2ead2fc70
SHA1 8a32867614d2a23e473ed642056ded8e566687f9
SHA512 6a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580
TLSH
T1A651B7784F9B685029FCE2A817190FF158FE816367264DDA83893097A2C0F9DC6F079D
MD5 SHA1 SHA512 TLSH

Submit Download

safety_tips.pb

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SafetyTips\3091\safety_tips.pb
Size 180KB
SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
MD5 ed136d4c105cc252f52bceed4b36ee35
SHA1 2a3115d95987d638d9095af51f0a70c1e9893728
SHA512 7b7cfc3adf944628b0ef6224229f7def0543cb7d41cdc8bb6b2ad5be2338a0173fbe63490f8d742f4c006e88652d191e24b4933e459f03cea2570085b95297b9
SSDEEP 3072:2LHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9D:7lVAdkXPOaRdwtzre7NChsf6B9D
TLSH
T11A043C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\ZxcvbnData\3\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.458\list.txt
Size 260KB
SHA256 e00256002095528a14bdec17076243060e5bff135a51a7a25c6fd1fe2b6384f5
MD5 870b0c9542ac24c172199b92d14f1d7e
SHA1 330ff8fecccf1b218530182f7f00a049abd53e51
SHA512 1b130f5b092a0e21def0872efd4133649b26e99664162957e4dda4e166b623ff39bf56a93faa3b03c4041192870113714ac565fc85879b46acdaf5103151a029
SSDEEP 6144:jjLFHE1oLuRuDw1WbhXfCsMbn8GyxCVwESUx0fPbEgf9htbv7Y:jjLFHEmLuRuDMWbOSjhUx0fPbEgf9htg
TLSH
T1AF4427279D14262662F6007E38B8A94B5A20A3118167FED69FFB910C7FC65C671F12FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clean-urls-permissions.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1424\1\clean-urls-permissions.json
Size 302B
SHA256 58438a458b6170dd2a6010993b9b3215a55f187f87f7dbbc5594247ccc222b18
MD5 1312b89bfd5608591a5318349186a437
SHA1 b3caaee5f886bd79b9644d3fb4fce1159f16ffac
SHA512 4d5ee9b71fc7a39f6b920ee41678cbd491fdfc4c675d099be96d2157e111cc3ceb8344ecdd544afd75e844fb100ca803560dc354ddcf9840d2618ed68e324237
TLSH
T169E0425ACBD49F954941889A601592D97616510BBCC6B9D1F30D407E8F0C8AB386D108
MD5 SHA1 SHA512 TLSH

Submit Download

clean-urls.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1424\1\clean-urls.json
Size 28KB
SHA256 5d9dfeeb0f860d903ec5c0cd7cc75906b09b2c2a238202e21740d001d57a16a5
MD5 150ee8580f236b84a0f97cea913848aa
SHA1 d2a80f89fbd22d626a46e0116ecce39c37b22f10
SHA512 c49308f4b68d142faf529d4f2ac59d76173fbd6ffc67377800418e7c61961c37995a8309ba998a2bfe3071daf9fd0667b02b6f1a2fa44946eee66ee8f645d611
SSDEEP 768:uu4PIS9VRE7E1dMQMG1LekIUnIDYpTKdK7saK1FnPIi:uu4PIS9VRE7E1dMQMG1LekIUnIDo+dKu
TLSH
T186D2AE8AF6DD8F4714A8C9256869D2C427224187FC987D84BB8C847E1F9CDEF247A1DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

debounce.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1424\1\debounce.json
Size 12KB
SHA256 e5924b59ce1a3c3fec47e8dd9f9a6e38a43c8f05a8777767069085716c670dc4
MD5 f5f131cc0d986d599b3a2becd1b47b76
SHA1 57676d4b7a913542aa9a2a84fdc8ba0553343083
SHA512 174dacf497a1d5b59c3d544ec7f7667a44da84f1aee4669b97d76f93205ca82ef0f89be491fba80b0851430bf4baa9290a8e0cb19add5c332fb67112fbcdc6c0
SSDEEP 192:yL+yWAeNl3L+089MDKyr2GDxjg9BqLFYTADsOsGDq+Fk6IlsG8LqV6h8WVWXMsE:KQck7JiBE
TLSH
T1B442CE10D2ED1F261408C6756C2A94C1B6251087BCA8BD98F74D91BD9FAD8FF367E2C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

https-upgrade-exceptions-list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1424\1\https-upgrade-exceptions-list.txt
Size 1KB
SHA256 ec12bca633a18d9d3aed6d3e54a7da678f3d70e84e9bedd911e968fa912ad58c
MD5 f59fb819a1c0e976593a7aa28409df16
SHA1 5ceb0b7583a8e1023b5bf628582e240b1694cba8
SHA512 e7713d2ba0872e5c18fdfcbe94796351ca82fea84eab63480a609b6fa6b91e0600478e60ec30efcfd38cd5b7651192da908c8eead2896dff0d72e9d214dbf769
TLSH
T15431B7975D207760D77A047DF84C2AACE426E7108035FCEDBE6974D042CA78D326BA79
MD5 SHA1 SHA512 TLSH

Submit Download

webcompat-exceptions.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1424\1\webcompat-exceptions.json
Size 3KB
SHA256 6f71751c9eaad41b07bed15698d352b3970f6a0d1a5fce30fc3ea19c618e8373
MD5 f069fd7c58f31a49b897f67a7f6f9bd5
SHA1 90512a6fc2d10c478eaed0ff4e56937484a310ed
SHA512 2231a00f33d2d05dc2e33e5ec4b7b7a6d33df596b584f9c07a8106218c811882f59db06fd53f9ec4a7fab70c771936e613537fd0b2ee53975e89942a8483c8fd
TLSH
T1AA81764BC5ED4F865C48D534B8AA99C07222114BDDD5BE82B42C107D6FEC8EB25AB398
MD5 SHA1 SHA512 TLSH

Submit Download

photo.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.23\photo.json
Size 9KB
SHA256 689aa08ae49301ce41043037f8c83ba1c18bf21f757a3dcf44f5cf52822959dd
MD5 1f4a5736a9d74b29801a1b39515c4376
SHA1 b9379a343e219df8f71ef8f2fcd15b36af28a42f
SHA512 e158a841fb0745619810f83a19e713977b7f9bea6806027da9094c540510b74379b10b9ee111e247efd5f401055580b2bbd51b851e796df16ad75293d209eca0
SSDEEP 192:4a7cx0Sy5v9w393ug5OTS4teVyp5rUmZQ5tSa81P1iLKn/aSXygcv/K4QSuciRmF:4a7cx0n5v9S93u9S4oV45rUm+5tV81PG
TLSH
T12622EDCE9ED929BA4BC046D1868FB99FF4AC1509D4E75C42BD70864C04F930B9F48F9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16851\list.txt
Size 47KB
SHA256 f7676b8a54a364f251222463e6da3ce299b043ac28d09be0d8924283a0add38d
MD5 73446023dc8a1e13f636034b1bc6aa6e
SHA1 6695dfaba1fa1bc9ffb6056242ae5cb06edf7663
SHA512 273bfc6ff66fc1e024d6bb801729ad892a3abe4e0220ae3e660ce4ec8cfc7560dfd84b7278112cad11a49c11b5dbadc96283ab41efda0b02246ab281e0eedff7
SSDEEP 768:V9OnFkcWN0BgtYo0W6EfjWNRBaQJcwB49TJ31sF4NfrtzSg5/qbnPrFI4k:qq0WwP1JD2958a
TLSH
T1A123E607FD510A32468AC29E397979AEDD307B19C11FFCE25EB701391FA598120B64FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19622\list.txt
Size 1.5MB
SHA256 45149da88b167726c751ed0df66d4bfa84df08ea7194675d38763c56f761b602
MD5 7edd5edb9dbca0fb9d9f03d237c4fe95
SHA1 160e76c9968048acef7320f00e537bb109fded85
SHA512 1d7042dd68713d822f670d7f1a44e070efcf6673dea127c526a5ba947341e98ea3118953df1ce5175ec2f82cb52fdf388b27517c0e80aa85032a2df7e0f94380
SSDEEP 24576:BwrQ4UF1a8Y1fRRjl4Q0Gk736Q8iAtJIIPaiO+2I5:Bws4UFc8YFfuQ0Gk736niAtJIIPaiyI5
TLSH
T10F65D70E7C2E153D07DA51AD68A73F0A7E1056119197ECFD866A32383F91A931CF932B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
Size 17.8MB
SHA256 00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
MD5 8d5e09dcaf68142312bff6185af1c3a6
SHA1 6ba45ec2950e148450b7d21390a8eff134ca6ba4
SHA512 8bbc14b8ca97e00d71b337546089359dda97d707d270fc7040f1be529e5801d6d76e8560b63a93a70df6908bd9e67cfb9f5ab419ba9af172cdc593f5350f67c4
SSDEEP 393216:QX1N9aLWUjaIGvwi+R8cOhjFaXO7FGGT0t34/CQbUc9Sy/Y:0HaLpG3aAM1Tc9LQ
TLSH
T18A173340EF4DF1B3D4DF327488631B9227309222EB75E9897ADCCD1ED3A5290DE25A64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
Size 7.6MB
SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
MD5 2b5ba9d713ef228cd28c7fe7c23b2317
SHA1 f79686e2054f484e5052e346780f2e4af4b96fe3
SHA512 ce94780b820c7c067fb0f22e0d022abc7b404c948a43a13f15cd066ae90799a165cdb719659e64965db3b122769126b4d1a4dc32e9ccdb48a8c668d5a40c0e75
SSDEEP 98304:AMRrxe4Zx+IkBSSCt77Vm1K3eWwqnPtoFtVPbDY082enzL3WfzxYHT9D5:Fqyx+IkBq7VzkqVwp6JzLGfGh5
TLSH
T12986C02DB6B4102B4DBB4325D4472693617B805DC74D4B8890ECEDBD358268E92BBBFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
Size 11KB
SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
MD5 e4037bd1ac0223417fb686339e377e9a
SHA1 2c1acaf29a7af097c36036bf967204e8e30ef7d9
SHA512 1f72d211d61a0c5aaa976dae7d1f6268d792af0cd78e94c3630147fd7aae8c8c9b58fb5cbd2593e6707ea9b5c2247c4a5cc936de581924d0c4ddd16815a37b70
SSDEEP 192:O7jf6mUD50aEW8SsWk/pvtHB3Nf5Y10k6QKEa4pmifL1YbAnz1BRsO1mwkSVU3dz:O+50aEW8SsWk/pvtHB3Nf5YKk6QKEa4m
TLSH
T17732B7C1993A15E9BC31C3A0F1B9C1218D16EEAB9C5F148E4BF3429B7BC1D868E27157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a53b14f6788a59531d14d7b3db096fa1dc7ef5eadec2170714f2e5d29e3b476

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2a53b14f6788a59531d14d7b3db096fa1dc7ef5eadec2170714f2e5d29e3b476
Size 443KB
SHA256 2a53b14f6788a59531d14d7b3db096fa1dc7ef5eadec2170714f2e5d29e3b476
MD5 8b43788b2662b5e3ef60981f4840f7fa
SHA1 c4890452b537772f2ffb756ba3144a9499e6c343
SHA512 96c31be9a24e1ab64d88493f5bc0e09ea3357f3e64fec288927d16a5966840b80e0164c076bf44afa5f129d843f1836c5d0765790642fef85f55ad73b7d89320
SSDEEP 12288:hVjWbHmY56vvm15vtm8Prek8OD5fLHCs9hPrxh0+PEZ:TjAmE+vUlm8jJ1T3XNh09Z
TLSH
T147A4233C014B460CF6D9F7BBA01A7B958E17850C39DA9346EEA1DFC2F412AA53F68507
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ed922613a29171673b855bb0c2a565c26a12d9f0159edb19df6856557a2870f

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2ed922613a29171673b855bb0c2a565c26a12d9f0159edb19df6856557a2870f
Size 19KB
SHA256 2ed922613a29171673b855bb0c2a565c26a12d9f0159edb19df6856557a2870f
MD5 466b1c45d701fdb3775c4d45d4393e14
SHA1 9c2e2a0d570e4780c2e1f767a778cdfdbfc7b199
SHA512 656be40aafc8d8597b452bd7cdf5499514fbe2fc685be60069ddb49e1974893b26e70d3cd6a25dec4b8bea2e76bc767dde60135ff8098aa40845e62c2b0910bc
SSDEEP 384:QJbDzDtq3t5Lpcqwow64SQmB/t69cwZqsyxjlyAei5gbK72:QJbDtq39iow64SQU/c6KKJ0Ug1
TLSH
T1BC92D1DE283DA915CF7DF631902A225CD089B94D8D4385735DA736328CDA77A1F0B287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

352899fdf24f33f296c534d9530c5c638e7d3d90228cb9c90a069c240759d84b

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\352899fdf24f33f296c534d9530c5c638e7d3d90228cb9c90a069c240759d84b
Size 229KB
SHA256 352899fdf24f33f296c534d9530c5c638e7d3d90228cb9c90a069c240759d84b
MD5 0d623c28fb907383403461327c3f8593
SHA1 f62ffc218819daa68f831817525448460e7ad56f
SHA512 4863e1ed8d34e81f79958ebc6f2016d84c8094e12fb57d993cbff0c72fa688b3f29d54eeb7913e2a0117afd2cbbb97ccbd8fe7c5623882656c95e2664039d503
SSDEEP 6144:PDs7Mc+ImP40CJ8zjadm+6HcJJ62jS+icaFBvGNOQqhvAc4gr:140q6HL2e+Uf/
TLSH
T1A8341E81D9393127EFCA573EA9B51A1C2BB4ED20337CF4DD8418529A39BF3C41268D96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
Size 5KB
SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
MD5 636c653ec2c30bb767533901a18669b2
SHA1 4b5a01cfea4c5deb62f3aafa01ef24265613b844
SHA512 a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee
SSDEEP 96:59xCB3w1ypHsT6LJ/2pBHGl+ZfQyftpmfzHwm1hgVCuCsbZbUYB5vQAyE8iX4Fgv:5SB3yuHse1CBGlSZtpESChNc5ILh6b
TLSH
T1EDB15C646CDE7145F1472935DBBB9813088CD1CE90B496CF28C7065F2391E23971AE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45fc48d40d71f9a3e4bc8c23cf09f77b13b2ebce81b1864ca170a0ae95771679

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\45fc48d40d71f9a3e4bc8c23cf09f77b13b2ebce81b1864ca170a0ae95771679
Size 1.7MB
SHA256 45fc48d40d71f9a3e4bc8c23cf09f77b13b2ebce81b1864ca170a0ae95771679
MD5 10e10cde33c202d399d1e559663b4e15
SHA1 2f5e12902943dad038b6d423c807cebec2135d5a
SHA512 8bd0c31b0d1ac7eeb73055b991f5a311c928fe05d74262ee5459fd1b632f73a13d323374ad72cb03d1220f833bdabe12fcf48a2a379181107254528ff377e882
SSDEEP 49152:5sop5PeVabVGDdk7EUupfv9+YYGCVU0qTPPemd:Gop5hWkwUuL+YuOT3eC
TLSH
T18B85236BC353E452E99E9330C5870B23EB7359A112D54E83DFBDA92919F1F0CBD85288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49e0af6f381fdb6763900e16541f487c8257435652bebe26d7131bc4e1fbba0a

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\49e0af6f381fdb6763900e16541f487c8257435652bebe26d7131bc4e1fbba0a
Size 1.6MB
SHA256 49e0af6f381fdb6763900e16541f487c8257435652bebe26d7131bc4e1fbba0a
MD5 5ca3c3c5bfdb9a32d186bd35cc6667ef
SHA1 7b8cdf935260180bb573fe69509c3f44ee4c4e46
SHA512 a9d4084bffbaba37be6ba0f9ac73fbdb9503735413b41f0c6cdbaf54a04197ae578bcc31a3979bdba96fe761237f94eee2983aa80be88c8ac1548d4a099ece50
SSDEEP 24576:On8Kt190zSDpn6mn4z3YRteS7OXHPksgArtao1Mu/XfVmNHHpelxGTkcdkUY5NCu:O8Kt1WSNn66QYRHiTH/PVmNpdTc1V
TLSH
T12F753363D6C27276E930113CB91A7FCEDE8098F0DE5516232AE51873B6220BDDC5C95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51172987956d4ee191d3fc32ab1e2ad268cd9bc7a5dd07a0e3a0bc1f49613e89

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\51172987956d4ee191d3fc32ab1e2ad268cd9bc7a5dd07a0e3a0bc1f49613e89
Size 1.1MB
SHA256 51172987956d4ee191d3fc32ab1e2ad268cd9bc7a5dd07a0e3a0bc1f49613e89
MD5 2e009db8812889b59115442106196d3f
SHA1 adb91a7c78b95e4a268a570d3ffe4c77f85d00d8
SHA512 eab101d8e7cd24f6292d5533cc7a2c22fd122b592550687ab2abaa2f5e42be0d3d07dfdd34b58171ce2bc4a1c219a5164a16842996a39792f632f3cff15c84b9
SSDEEP 24576:HI+1BBmaQrknegcqTTnvBKRIMrZozG7tbV85HMj4xBLdaU:7rmZNHuTnvsdrZoS7lV8asBLdV
TLSH
T18445238FAD87772884EB10A23496A3823F871DD5A35D6D9E0C87063748E74D1EB90C7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
Size 857KB
SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
MD5 a40c655b337e082c76b6ab04042b7ae0
SHA1 3cc2a2b7178a29fd2d246cbc532684d6ae45bea8
SHA512 fb4d54b573eb2275d8a3580fff138ecd7bded27ec58086b909b12c03c8005e35105c354a4a1ff76ada608ee8bbabeaafe208bb9e557661bb74e4ca39ee5eee56
SSDEEP 24576:tN1HYqiefjuhBCLF9t3c7y04bfB8w2aQnVBg1jAQpdnBXAt5:tN1HYqi2z9c7y04rKSpdtzw
TLSH
T1E7152367F7534E87A693C0F101B9EF5CDC2EC6B863DD6D5862DB6405CB8A8014EF1A28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ff590d394f115dbdf6fb1d39c1e7176dd17343c12b133daa477371a6c17256b

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\6ff590d394f115dbdf6fb1d39c1e7176dd17343c12b133daa477371a6c17256b
Size 12KB
SHA256 6ff590d394f115dbdf6fb1d39c1e7176dd17343c12b133daa477371a6c17256b
MD5 7510b597d5b5d06b4a438ddcff7aebc7
SHA1 91c41fde6bd4912e067d0dcc2c446c85aad6f8d1
SHA512 220af1f029997b42f3d85e432017315c311755b365c8177830837af8454a288782c217c1610127ace4dd1da80f0b119c86c1cfc3d85d05f056b73a74366aac09
SSDEEP 192:Nt80rRg2CBlArxlIYKzGS+wSG4QCcSyDqjnDwLCLaolSDsfmtHDfdIST7lIEEdKa:nrKo1RKgnOqjnDfOolGsqdImpdV5i
TLSH
T15142AE66FBC481FDE4BEE53A60D4825B8B494F98E488C3AEED574C524CAB26057CD041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

72a009e220760d27c05c093f41c763463025a29bb9338e693c1fe19a999d724e

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\72a009e220760d27c05c093f41c763463025a29bb9338e693c1fe19a999d724e
Size 471KB
SHA256 72a009e220760d27c05c093f41c763463025a29bb9338e693c1fe19a999d724e
MD5 0cc0c09fe51f5600d6c9ae2b3c034f98
SHA1 80f996d35cb38d13662fb81edb0d37d8c6cf5b87
SHA512 bccc4bf84472df8719a634bb855a29890ad8052a914c8c01318b820ededf8b17af822a5b26179b2afbc8d21229e7b64bc50708f420dfecf25c0b203dcb31afc0
SSDEEP 12288:GxnHHO1jblcN/NWHMNjiDozGJcCwpfp9a3:GRniRMNWczOzwlC3
TLSH
T18AA42334FACE8D8ACA81FD1B41F68D668762E68C148DDAA7EC4D24F760D5C450E5E0CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
Size 12KB
SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
MD5 752fb191723f2ac933f27a4cf7b0e381
SHA1 143a9a509ebb85b228eb5e3721c0f4a3274e4f62
SHA512 bc04fcf4486206228df389b27e910bb38e926b0a2b625591f03d3c4f616befd96498b0c8355e83c36400969d2600aafe0f8d06c8ddf2e83636419de21cc68750
SSDEEP 384:KouyxMA8bnsa46GN1eRv/RR7J8jmmOsRJpJyV:dxMzsyGNUZj+jmmrpo
TLSH
T12842AE069D4E3A8FD90AD23D454A3E07377B326711D25449FB8B982980E97B1B0E89CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
Size 7KB
SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
MD5 7560d840d67c71f4341f6feaa2572f20
SHA1 0ef6bae1a678f488b145e940acb1f74f40145d52
SHA512 23e6ddf521b6fc234025f80b9b524ea31734dc05b6932e408c2bfb511ae8e72a8de0ff87f5d79ab89c159695f7c43e8196a0627a62333d8f7531d06f86450403
SSDEEP 192:NR9TC7sNjOYYCiZgPldeoKMFTekPlcNlJTV/jklqJalMv:79ePCiZgPeOY2yjP/z7
TLSH
T1F0F19F8078B029B1DF65C0B72C6505507701BAF56B998CB2B8CB146FCA2CFF85D98C57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
Size 184KB
SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
MD5 e5e7439bcae6cbb81408e08e1ceaa799
SHA1 a166c00d6f4ef6f541da1a291afcef11a5d7e426
SHA512 6122ff4a5d2a652565c0d9ab600f5c2558c95fac1c7d3eeca7c9bc20d054cdb20f6c089aaf38d51200b0b0276519a52c390142e11989f3d90145d7f648618e71
SSDEEP 3072:YRLHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9d/:9lVAdkXPOaRdwtzre7NChsf6B9t
TLSH
T13E044C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d832782537b278f700372d75bc79ff2540cf29e129925660974ee3dc5c6142f

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9d832782537b278f700372d75bc79ff2540cf29e129925660974ee3dc5c6142f
Size 87KB
SHA256 9d832782537b278f700372d75bc79ff2540cf29e129925660974ee3dc5c6142f
MD5 837322221ced5566486feed5543b72ce
SHA1 b375f095d0baaae4428341d19e4fc3e51130f11f
SHA512 ed7717a95f9147bead99991664e0d164336cda99b3cd80fe473d11239d084397af9ba4cb9b4ef185f5e8f2d91ea0b0db9061aee3f4694d43a0fb32ec00d44010
SSDEEP 1536:9aoJnwPDkT3SRFFpvdL6toZxDTXuP6ShlMgyQcLifv7gAl9NfGm:9aoJIDndVdL6OZxvwUQWifL9Num
TLSH
T1E793021117277362EED9DC7FC1883691E21BDDBB0EA33F832817902A3D69C055FA9652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
Size 14KB
SHA256 acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
MD5 a37d2dcafb8aef98b55cc4e67c3251af
SHA1 d692884811e127a4867a014f394e4f109bb80e9a
SHA512 ca12dbb58a9bf032d48e79a3ce7907cb98156f84b28c34ad5fe052634b21d14b9e0d2950695075b226a617d138c971bfaf6b72c01b1adca7e76b7db2bf9c0671
SSDEEP 384:vtS8CwSCx2ww9R52e78DjBkOkCpaRtxIK1QjctWl9/Gr:lS8CExBSLqvnQeWMfer
TLSH
T1B562C08805E79B5DE13232BC2557280DAE4278BDDE1574348A8FB863D9C85AB3EE15D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c45ef18b9b9dae23697cd84d08c7889f08ba0d09dae13de3446d2ab84b0a4413

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c45ef18b9b9dae23697cd84d08c7889f08ba0d09dae13de3446d2ab84b0a4413
Size 467KB
SHA256 c45ef18b9b9dae23697cd84d08c7889f08ba0d09dae13de3446d2ab84b0a4413
MD5 4869b5a605d84f83a951ed4e162b6cce
SHA1 6a1e2019e44d1fa3538660bf1025cf912ddf978a
SHA512 fa6c598992a89459773f797cb4af65364945b438684b8b1cecc444e3422b5626564329e7c14a027a2e2003458ba41dab9da65519b8bb62d3c82a8599940670d8
SSDEEP 12288:BP+NutTqx0qphbJMVksR3wgBylNzInXaA7E86:BFtMXtMVZR3hBAIXrYN
TLSH
T102A423332A0802A59570A3E8E554DF583B927C2FDBBC5FBFE38424E4598BC4D5385B68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
Size 1.1MB
SHA256 c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
MD5 2ac309d48a054c8b1d9ea88bac4dbd6c
SHA1 7507922d88a9cb58759b5326fadae5d0c87f40b2
SHA512 870dbb86a67f36a43ad4c80db904e76b602bbe062cbb9fe4222d1cc69d99aa4a60aae91c094a65a481d8c62cca4942f178f1b2744ed21836a526c7ffe3409969
SSDEEP 24576:apkdiJ0dL4jY7HJ0dLB+SeBLRTpsTRP/dfRycwYuGV:apkdK0d0010d7G1TUpbd
TLSH
T1F73523794C0F0088EC2FC932D750ABAA8196993F1B13D027BAB41DE95DE7F871967B05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
Size 3KB
SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
MD5 a310f65b0f29502c5f2e753746fc6943
SHA1 bf42c008c987714ed99356e10425c8b1e00e3822
SHA512 ed490ddf4cba23f83c00ddf52165a1bdfd882ba0a6a449cebdff9b6b4c88000a5c3e6024e22518ab9f7a81387ec7e7f68174363f68be9cf3f0f0ae048bf114aa
TLSH
T14D513885038423A1FE390E3C306A365B3580EFFD5D4EC1B72A2718060ECC3B82BE8212
MD5 SHA1 SHA512 TLSH

Submit Download

e66188879b36fd255856a911cef9343d8bc37a7ffb452487044b0983d6cc38e0

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\e66188879b36fd255856a911cef9343d8bc37a7ffb452487044b0983d6cc38e0
Size 371KB
SHA256 e66188879b36fd255856a911cef9343d8bc37a7ffb452487044b0983d6cc38e0
MD5 c54589ab83e750afec9c57d1f2238486
SHA1 8a26271baa4eafd0bd6cc62d5e0ad1e5f97aea21
SHA512 f96d071d04e5e51d124a1cdb755b23d661d3b894451af2a075e3cd8f6fcf93595b54a7b9764a91c7b86ccc57f69c971b83b73706473432983db3a5f9949def9e
SSDEEP 6144:NHJ2YpYYUbV3p0k6wpnnoTBfStk06xrWtefZhzSVs3LowNZFeAgMWv8:72YpYN/hnQStaBOs3kUe1U
TLSH
T1D1849FEB2F247943AFC3DD7471C8E52BBDB233D175AA98969049C0B165817D23E8902F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec
Size 46KB
SHA256 ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec
MD5 6a1d135be107ceb6c0995026a909896e
SHA1 b95a4d3d021dcb4f25e5292204dc493010b56bb4
SHA512 c660476a44e8cba8cdb98099a6ffa2c0dcfe89248445b5f370545370125696bc661f017d11eaa4be377effe306be684d76e056ac906884a487b703453773efd7
SSDEEP 768:Wbro4/VdeZ9vx6rjDIHJ6tqj+prWONLJjDsyyakjiyA6O:Dvx638pAqj+pyO77yakjiH6O
TLSH
T1EF23F24338761517FA267FB1B860226D83A1F60F1EC5AE65F9BCDC6C8E85A4226C4CC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd2d5ce47ea7c7e671fd8835836debbafe10bb8eb6dfa09080df3dc771dc209f

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\fd2d5ce47ea7c7e671fd8835836debbafe10bb8eb6dfa09080df3dc771dc209f
Size 1.1MB
SHA256 fd2d5ce47ea7c7e671fd8835836debbafe10bb8eb6dfa09080df3dc771dc209f
MD5 969c1b23e5d4308e2627a2fcc50c828a
SHA1 6bcc262077e3afbcefdd1d498e2827343130cf9f
SHA512 1bd11a52f61803e7114d85adb529266966848af353f13545fba5c2aff14f8e62f5a3bd21068e7ac9422e6fde6690d53f2427b13735a851a403398b669da1ac54
SSDEEP 24576:pP+izVmtYFi/tY2JPTT0LiFKiUDdSxCrRp6CDmie9BmcBiO8:pGCVUYyTPPei4VBygRp5PeVm
TLSH
T1364523BBC392F502EC0F227191831F23D1621A5E54D4DAC1DAB4F65AAAC0F4D9FC21AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffd0e90110e5c9dad6d204567017180f16d7e21511e3da75588a4777d8f440dc

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ffd0e90110e5c9dad6d204567017180f16d7e21511e3da75588a4777d8f440dc
Size 5KB
SHA256 ffd0e90110e5c9dad6d204567017180f16d7e21511e3da75588a4777d8f440dc
MD5 f3ab75ccf4697cd1fbe156b113a48e0f
SHA1 6d73480b7e3690381091ba08ccdeff17e0dc165e
SHA512 3eeff6bc2a996cbc51d7e2ab5db89414ba411327466acaae8572ac66bf68d1573922200fd9e9b579ed1fe45e5b04b85abebdec44ccdf4d61337f0fac4f43859f
SSDEEP 96:N98PJaNRwI8rWPp+92pdDlMU61J28MaLgD+wY0mea4g484wvbj/:NaGuCR+YbMU61U/0gSP0Fmiwvbb
TLSH
T1FCB18F29683F2D92E46A9B78B02D5A346F3014E6ECF5CE22199A091BDDCC7F58DC4711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 a8b69f04835d06d685c144035f3bed8790c14a9b2231eeb86d5c260967f8d019
MD5 31c695bb945382139c9b813b4e460def
SHA1 5f4c0491b37bed769a109b5866d4f2d0ee5da8b2
SHA512 aaae38a42ab4f0fa952d4aea042b8e9f8799b99c227319c081f68288c13157505c07a309153b27288018fc4d25ad3d2067d14d4263418fb112aacfcfa4e5dd0d
TLSH
T15E41C6E2EC4E57D00B521E2F8C47725CC1E03A51FA71737CC549EA86063EA6E361687D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json~RFe5a1f22.TMP

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json~RFe5a1f22.TMP
Size 1KB
SHA256 c2ace62fff4d2b11cb8850c0de4e4a0d660c2fc0c5d39d26e830fff38d4164d3
MD5 4ade17cc268fe651c654eadb6674260a
SHA1 fff2f49256a00ed5a3ef3e21eb5af6e95ad6d585
SHA512 314275d382e314366872ea82a9b48974904766f6f944baf0e2a9c65bf043e2301902a3a4bb053979b098b7c1b10b50afeb943e64e48675b634a716d2a18395e9
TLSH
T1EC41D5E1EC1E53D10B221E3F889B726CC0A02552F6B572BDC858EA4A073AA2A361147D
MD5 SHA1 SHA512 TLSH

Submit Download

campaigns.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe\1.0.2430\campaigns.json
Size 4KB
SHA256 1a6fc6d35e453458c4cc0ff35b1380643cdcdbeffdbc267d444c963eea0125dc
MD5 4958de2eb0668ff36712683622e9de26
SHA1 348e339963abb654de88bfda80587213b94e47ef
SHA512 d1ec07217a29becee7bfc1c8a1e1542846704449713162f5c121cc15213c7958f9071f9337d1a516b6f9a53de783d90d83fd827fd0354cac2cf83fb0b6bf8c4e
SSDEEP 96:g30o1PFMVBcRhyzkoG/Y8CBz2k63Q73PdDTx5oihN5pgohrN5jPi:I0IIKjyzk6cRc/pt5VN/g2rNdPi
TLSH
T15FA1B8229F77B876932653E350B7E98438E2762487C48580C4C77EEDD159D32362D94F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list_catalog.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.91\list_catalog.json
Size 54KB
SHA256 9556c2a05c582c4f88900f8c9d8c9cc656cee0ff17c837ef87aace5bda8387a2
MD5 f89cb3fb6b2c9ff8e35e66d3ca15c342
SHA1 255341437a806470af285b90e4cf1a9248ffe5d8
SHA512 5a04db1b8607df9b73e4c1e8c62e0c561dc2fac3eea154b6d28cb50b72ba089999f7d34f6c580214fa890b9e5ceff44a0a84f504f0682e46faacfd0e5c1de2ce
SSDEEP 1536:8F3qp4XPwDTIzXybHgeP2wZaZArqadt0CaC7ZLLr5Em8fNGydr0Vk5TnJ1x0QyqQ:8F3qp4XPwDUzXybHP5MZAWadt0CaILLr
TLSH
T1B2431AAF86B818E90FD439C5DC9B24CBE9B450BACAC1F49FC2B4DA8C065E685C115D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.110\resources.json
Size 151B
SHA256 e63435b549ceb62bf8b2f4e0db54c7bde829fab704119dcc7fb295258c996f4d
MD5 80d8bae4b5a8a0adbe0887d2e3f113a5
SHA1 86c8a3f104e4c432116b7ec0500fd52efa5c8818
SHA512 47f8984c58e418e827a803a21e0b78bca6e74dc7150774a58872f65511cb2fdee31893d7eb534da0c8f3c4791aa6760b29c9a400a9db9676edd434163dce3502
TLSH
T128C02B4D290DAFF59730530302CCA54E839445828C2B42AC4359C184D1950F410E3523
MD5 SHA1 SHA512 TLSH

Submit Download

list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.19488\list.txt
Size 5.1MB
SHA256 48f086ad8893a7ec6a4aeca363f5d41ce0acd3112135771880d0d795acabd495
MD5 7ac2b32b9bbb0deb631d23df282a4c4a
SHA1 d913a913cee726bc6b4c17d5f333f42b25a78f95
SHA512 f7bb2362112d2e155681880ccd8103a7458da0af424143588c3d4ae61ad8aca82650c04d69152b589e52ec5dc036881f802a345b0a9354449e810b7394676798
SSDEEP 98304:f1uplBwQMTjtUYQdcurx8xXFMCdHlj9QHPFHBK:9uSQMTjtUYQdcursFMCdHlj9QHPFHBK
TLSH
T16C362BAB4F2516781EF05BAC2CE9F64EE33203B8D647FCDBC9B24118D51895622B746C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.5070\list.txt
Size 1.6MB
SHA256 0d47758fd43d605e5d842f7d198c99cd3e014cbcdc7a24e895052053c1f3fe5b
MD5 d23d6b22b33c692020dc89596441d1a2
SHA1 b1750d65e68ffcfaf91ef30e8df3afab24f14198
SHA512 0d2ed891388c843ba603493e91f543e076addaa9cf89aabddad56f8ca5e35b31e8d4e980f4513ed9b628e2c74793112989d5c63cb6e253d7b18bd68f105b4b43
SSDEEP 49152:zCTaoukHxgBn+Ie7VDYcawUq9Kxqjjy32/sRltKfqqg5YiBdWkbL8FsIfBJlJMLO:BI
TLSH
T1227582479F45017E09F40B3CA8DBE70EE1382BFD4196F9DAAB6102E5C6455CE222B63D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.133\resources.json
Size 2.2MB
SHA256 55e55ff8ad498cfab6649910b167b93dc38e7e9b8724627c380f4cfc65f16451
MD5 7b09adcafc1041b4cb7bd6b0d4e76b73
SHA1 ac1480c25fe432953c3b9164f9d3020043ababac
SHA512 cbd586e0951f559fc5dc69234fdc3d650189e947fe29e00d74bbcdfac6c4ed77e2c9d04e30ed4b64a8e1345916ca12852e245b233fdfc4560231ced43ad3c3f4
SSDEEP 12288:PkP7KgJP3yJ1KOdGeYeJl8wc+A2gn7OCb8mb888d8VEOVYKYzFg574FlncdnjC+9:PkPS8Z3bZbB6ulV/qFQ7rnj19
TLSH
T195B5E7A7CF4F2C44DBA055471ADE28CA2D5D53CE64E319CF541BD7A8CA8E03628CC6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaigns.json

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjpbonbjgpinifgnneajcbigekbpfige\1.0.2388\campaigns.json
Size 3KB
SHA256 85aebfc808431b783bbefb5458aa956734eb6d42d91d77253b8db8a41bdcf203
MD5 8215457f1fda56c50c20e8dca4e808ab
SHA1 a93a59ee210802e7f6cdecd90fc361554b466c12
SHA512 a80f7ed8c21dcdce0e22396e01c6b4ff5b984630efdf2d5d083e4ec12bb3639135aa2ebb6d3453b97e956f484044cbf3c67072a0f6f3ec8bf586fd9b5776175d
TLSH
T19771C5219FB77435932553F240B7E99428B276258BD4C580C08B7EEEC09D833322D90F
MD5 SHA1 SHA512 TLSH

Submit Download

brave-checks.txt

Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe\1.0.425\brave-checks.txt
Size 4KB
SHA256 b6e1f5b9329ddc31388f48e05132b460b18da0f3ce5bf009c2e4b96836d5d4f6
MD5 5ac22348fd25faca10e3a88589ac4759
SHA1 e0a6f20f5d372f27231c5ba767060b668c439b51
SHA512 b828da0b9bb8c5480a6dfcd41ff160331ca001d76dcf791ab4f75bc230db6e96c855ec4bd8d90ff07201a420177a923fb80a152ceb14a5987e3c0c9e65a1fba3
SSDEEP 96:XBRZbX0Ai7DlBREfmTK+JqzH96IWKaxWeA0w5EargdXVpuGFwc:XdDm7BBsmGNLfWPxWfRrgX
TLSH
T106A1D6889F105A9437A0053EB4D9338D39C51B674C65FAE8EEFEF988942578E31312BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Brave.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk
Size 2KB
SHA256 48a88708982e3b280e048eb7bf28f60b3adb1cc4cbc02fc85bab490d683a2027
MD5 4272c2ad5b03aee6a765b1de650cb07e
SHA1 ffa9f1f04a2b1476dff82dea7f3c20bf302cf454
SHA512 eb1dbd3a7255707c813d7feadff950accaf782e8e2cf062a72e122f48c166a99715648225d4dd0438559b8437e0c94fa99b75d52dc350a5be2c13af5d218696f
TLSH
T19A519D152BE51728F3B7C63319F379314A7AB890966CDF6E00905588CB7251019ECF7B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1079565256\manifest.json
Size 72B
SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
MD5 d482d7180f77c5c4a21a7f9a04cb797b
SHA1 d06ba12c44afa7bfe7d3dc660a5b38ba3e200531
SHA512 9393f8752a6e1e1f80e30a83c00ba41b8978bbc52e38aea4a03aa8ee4db2dd001b19b79da0ed96822ad5adfcb67bb5d91f9600b7a2f787a98153d9e8c1a3697b
TLSH
T1F8A02230BC008033388C0BB000328383A3B02C022020FE0A0E0B2080228823E20F228C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1161324634\manifest.json
Size 592B
SHA256 fd5a3d914f9859c20a05c756e7fd39b0623e502a4f86af03847a80dc662560db
MD5 33e26e650b98c744a917161f11cf7b7d
SHA1 eb631d4d121406450ce7d42985190b0b430e73ea
SHA512 de6134169c5e025a0812de3910dc46516d14cc50ae9f99034ca37b8d3178043d1a95f9e3db3decf75a3316f249c80d1c0c0aeb9574a6f2d31f6b3d41d0ec2b07
TLSH
T117F047513D5EE03039D42504CF1231928F64155D4716D75A67877CE99AC7C7B0372219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1307227414\manifest.json
Size 587B
SHA256 2547e43517e89d129ee4e6446d5051c865547f26c0b63a81f74ddfcc21708aa5
MD5 93cd8246ed8938efda4e85d2a46aa1a9
SHA1 f974e87113cbeb25341d2ee8db96f20382284707
SHA512 0181ab901f5ab7a74d0d94ec781b8c16d801f2ec66385612e34a98ecd00807e39d7a3405e82be1a266d5c5484c110a997d922d2656017d1c9e4cb40673360cac
TLSH
T163F00C49496AD072261C0A324C0242428F2C286E3B817F680EAAA89910CFB6E417660E
MD5 SHA1 SHA512 TLSH

Submit Download

adad97aa-b7d4-475c-bd94-d190f91d7366.png

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\dd1f4ec5-8888-4449-9b62-472965532123\adad97aa-b7d4-475c-bd94-d190f91d7366.png
Size 29KB
SHA256 5f3e2240127a73cdd50e399b249811e931a6566b5c8fe468dc3598818b819f86
MD5 5ee11e86cf8fb24c87d480532836a3e4
SHA1 151b0104f9cdf2e1d7ab3e460a3a17d73ab0f62c
SHA512 8f0287f588e6d0dba5e7ea1a01c313816398f3b889f23ec4fdad50f3293a1db30a8b040cbb8dc2107dff5abddb0ab5d7c91b198f505a539703640e91908eca05
SSDEEP 768:791ohyLG0+UADuZXbp/kavlupA43ksYpv4:7Ehip26bp/kaMNXY94
TLSH
T19BD2D1DD19BCC4298FDB50B912504F57961B241E82C17FA6D2F73E0E48A6C1BA2A017E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_138715215\manifest.json
Size 546B
SHA256 f65133ced97845430fb4a092442b8f5a3bc50946e5e887c3d09c6f3f6d7b8c6c
MD5 83ed8e022f89883ac058d0e2d3ac450d
SHA1 b2e794f60d54ca42d9234f0f4d7be051e4c18499
SHA512 1f06c1ba308d28de50b0544b980908a009da825e788d9e53fce03b22b1aac760bd078337563d90584c4d58db7ab37d2fd4ce8467f275d603e2374e605ad3247d
TLSH
T12BF020091ECEEBB9544E17150A63C8D2CFEC6AEB7453E21C4AE6884483098BC84308AA
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1406768476\manifest.json
Size 96B
SHA256 c3ea3b8c80f84b0b3bdee87c012c5ec602494da588fb9801539b316ba7a4c0ba
MD5 0aae26addb8afb9ed2da2ef162d394ac
SHA1 9fb79f00459a3cd1edc28c35b0fb91af35c0f313
SHA512 024d9a67e02ccaf444801ec0f21a542e2a857f8c765efc147d947992d20def240f72e415e87cf0b00c1237718983288219f57cdfb084ea7e5a571265ed4d44a0
TLSH
T109B012223C00802320C01B240030B3D39B682D29991274004B7714C0B75CF3D122092D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1430623145\manifest.json
Size 73B
SHA256 dc8c81a81e8306e178d0455b273562cc5038b4d0afb17a7bfc9db80190686a48
MD5 7d093e98627c15abd8870b3161044e32
SHA1 bf5af89dca3f32bbe9ee6a5671a0bcac59d16b5c
SHA512 0534bf5a775eced5c528725ee331d7b0009482fdede28acd2c50d5454632b6852937ea23a857e7871d23ad72a955d657f1c26c5b266a83635a15a22b36ed6507
TLSH
T110A02230BC02A03330C0032C0030C3C383A23E0A280028080A233C8023AC33B203032E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1443011075\manifest.json
Size 76B
SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
MD5 4aaa0ed8099ecc1da778a9bc39393808
SHA1 0e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA512 dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879
TLSH
T158A024505C10C1373CC00754003143C347553D0310101504031F30411174337453013C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1550989826\manifest.json
Size 534B
SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
MD5 8381ef866edc4c4a2265ba8e51950593
SHA1 1d8fffbdd417ee0c1578fc05611661f369ddb335
SHA512 990e96bb12be1e6b7f08ceb31e7f1806629d3c03dc76fccb217f21627a4ddb989b05208d1700b737d90e694a597f951958d3ed948e8a0e12bfc0334d0b537deb
TLSH
T10AF020F136218CBFE04287310DA381431FBE2E0A350A5048AA2A609142B45B983FD908
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1572392784\manifest.json
Size 558B
SHA256 a66677721bd926e58c0a982e6658fee7c0d2ed5da5afa68b3470d6ec7b5e9169
MD5 dd62bf8d73d8a8ebf10a87de7b13cb93
SHA1 50fd8843bbf38356c47c5cc2939e02cec8a8a06c
SHA512 eeb50b6003637607a3d7c4f4fb043f8d6391c463a6a3ad8b7c5d6ac373b1fe201f02e3815a3677cc843e4ffce7e9bbe368abdd3921cff833383be1482cb07fbd
TLSH
T188F020201A2BE43810C82A678E320502CBB8284EB780630882EE51A1628EB36467235F
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1662965801\manifest.json
Size 591B
SHA256 0ff3ad877f4696accb6bf1f1d6f93777753f968afb7095125c608716ce64ccd5
MD5 9c0916f0f555034e7d7a55839c28b5c4
SHA1 a00477158fde951f19bacf6be23b9c7ea61f863e
SHA512 aa63038a6a39dc475e9964d5e2be9855a7afaa9bc3739ab5fcd42368319be1558c8c18a22360db20d96212aad00622710b7eab798223323b5882353f1d304544
TLSH
T1BBF0E1490C9FE4B51488472CDC2718458EFF3E9ED702BB2104DB561472DDF75427625A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1718433152\manifest.json
Size 584B
SHA256 6efbd78ded74eca7a3be346097a79cb28e202e81b2ccdd40562a4f1fabdee8b0
MD5 672e90eb4d2a8ba4ed42560da25434de
SHA1 ab51f110fbf3ccd8aac0309fc84f512940353113
SHA512 466cc2f1d69961ed9f2ebbb09b5f96ef837b3904407228b6fdb9834f129c99e506a029053205234fc57769c8c448f4d108ef9e4dc6737f618affc08d181f9bc7
TLSH
T117F041A204C9B82234EB0BBD0CD352B3E76429E39345344C0EEBB184108AB1AC02A99B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_1721828702\manifest.json
Size 69B
SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
MD5 fb195043cfc35ce711b45934e387267b
SHA1 6f1aaafee57a3da2687e9fc8defe2dbc7cba0e07
SHA512 bd7fee1d6f8e51137c849d76ff53f3b501d60ddce83cce18f3a217703d3d8b1a1cc7696b656c666d4f6de62a17ea2407c857137d12e0b6ac7bcdde4b3c8ff86b
TLSH
T1F9A022A0EC20C03B308023280230C3CB8BB22F0230082C0002332080228CA3A22B022C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_2138201812\manifest.json
Size 533B
SHA256 a8d21ada0eab056b184257778876267ac5ff74ec27fe801ec2eff0f8ae945433
MD5 c93b8a7f6fe1dd4a34bce2d971ad6df8
SHA1 9be771aa9553037cf5fe0fb37a1b7fad38584fdf
SHA512 0ebf9fb7fdfd6c1522739588341c575f9ccaefbf1172d9a2931492b5bab36d20b2dcae4ad5e5fe7b8b3b15fcd02e32127887d6492f0072c14d351091076e7338
TLSH
T153F020044DD9A8AE21D716701D7B628B4BFCA5E96251E700851EEC53229ACAA323B49E
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_215083362\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_256194904\manifest.json
Size 512B
SHA256 ef7af392eb6975e9b703cd050bd854583006d1ef5819e92466fa1650036f2b19
MD5 7f3be8d44f09ee3ad2c951d62ecc4f75
SHA1 98dff70fa2ddd975cd0b35559eefe05528b98df3
SHA512 6a630e3b52cc4bb6a1d01712950afc7ab8ff5a9b6550cd163b1308a2c12443923fafadf88f766fac8c57d253bd8d7e3a892fcc96878ed35464050fcdbdc7361c
TLSH
T180F00E845D8BD4FC04781A718DABD1DB9DBD02BA4582DB84989DB90E41A0268C47A4ED
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_334057634\manifest.json
Size 108B
SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
MD5 70045b6ede48125f626e7f9971984e3d
SHA1 1354618eb0b8f463579de7a25b39f748ca06fb50
SHA512 4561e8e3b77f295187104b3a331cf4c5552bfe02e61ccc3e285c86682cc518f130e17366aabf37c1837bb5375c4484714b2a35ff65561036a64c3c0c8244fc51
TLSH
T17DB012766D00797754CA0760253563C2E7E47C0E68557D429B332492115B73A41B132C
MD5 SHA1 SHA512 TLSH

Submit Download

48f7c565-09ee-48e0-bf2d-d2a6c9ffa5e4.jpg

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\9f16a9f0-f6f8-4853-9fad-ae472d00660f\48f7c565-09ee-48e0-bf2d-d2a6c9ffa5e4.jpg
Size 171KB
SHA256 eaeb554e40c8c5ff53695dfd6fc32fb69be0c5b0642ab1e38ce4da2ad30c7e55
MD5 8961362b896a4367c974a4e4ab91a512
SHA1 e78e39593708cdaa374b803225d1c26f523ef477
SHA512 d1d903a8b9a550fed356b206214d1a73511b8b060ec8c8c80e355f5d3da3319b9208342b8bc297cfaf35c1ab6cf5161e4c67b5fea5fd3a738e99f531636e9a84
SSDEEP 3072:4AQx4fDs9Ob629DxTbE/qsSTzVmlULaejAXElK6jEfo9sFXAlD1:dQirs8hgCLzVmlULA0YTVXAlD1
TLSH
T17B04E1A7D1E3B449FC0E4136E48F6A11EDE0869678A0CBE658B8DCD427C8BACDE4445C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
Size 341KB
SHA256 2a54364257349b6c145fa4dd7ec41d3e0b8ab3144205b6f0cd58578aa370e671
MD5 9dfe4dc3cbfd6c6d65569bb98b0255c6
SHA1 c4e14405076c153cf2e02e2b43dc281f7bbd423d
SHA512 fa9d51999aeb98024b90b0181af77d8eb5a0447785e1157043bc3d4ba161ae20788af1041999be4c6407d61ca507a974c71118a1ded0ca5753db1cc879b859f5
SSDEEP 6144:LcYAtdJQ95LaqpHuVFCFxMv9Xvjvu70XIcXp7/j48BeI1rI:wYadaToV0F6VfjmIpXB/MwI
TLSH
T1CC74239BC48F97904C8571EBA331C8838449BF5B51FC9E60ED5CBA2999D2B8758E6308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index-CIFDYWhS.js

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\index-CIFDYWhS.js
Size 104KB
SHA256 54ad220e77e08505893d7dbc73435eb7e554237f7587f14495b8a98c9317873f
MD5 ee0a64dcc05387e4d7b55f63032a359a
SHA1 f21c5e7a509e40b1c5cbe53b52ee0268579727bb
SHA512 6b78f1ba562adfd8085fe5f2844a3cbbec7b3a8c966d16c22cbb11ee1d25cf75da9faebce9bc9c483256c11c6fdd6a6e758dfebf3e2d523ed3d723c7212194b9
SSDEEP 1536:66FbEpdYdpMyUKWlTjALq1E9ZEywfcdZ0nbmJ+uvWRwE7otdDAqFIbS0+C9Cvbac:lFbEpQUnlTjW0CEnsh4Ymw
TLSH
T1A1A39448B6E72632417B603EE27F75993E795003A004D648399CC5482FF9D7872FBAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index-DmqawZrO.css

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\index-DmqawZrO.css
Size 17KB
SHA256 732e370350623be0fac69cada7f9965621e0cb71a3d044ba196243181ce24fa6
MD5 ef76ca34e065a3e88cfc9659cda4c499
SHA1 340d5107e7d6150a49b5ef43c6c6e7da54e67cf3
SHA512 68675e1a2f39ef6bf6292255e64ad0b5d583be599b4b43f34f29040536ef806f6b45a8eb8d85fc27da324e03a27a7bd162a9895669c601965a65cdf66f288134
SSDEEP 384:YDO2pAQaOhmxfdc3Q8uO2LznoRzl3vhIb:YDdAQYdc3Q8ufQll32b
TLSH
T1568263D4B9F11818292B936816BFF70C3628D4836C2EDE9D72E51068CFC57BC6B87A51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.webp

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\logo.webp
Size 6KB
SHA256 fbe1831f3abb9be1d5b81785055bac244f70553e51a25556f558c31cb2ac6e37
MD5 a7b77da98f19f969fd737121c862790f
SHA1 f1402e029b8dbbc92a0dfae9a51eb0413fee2890
SHA512 d1c6e773a0db7f9d880133003d25acaaf3726ee97e8ed8f76ed8d7895cedabea02cc3d99d0df4a25473d5ec4fb5ca9c823849ebfe3006eaeeb08b6b5bfad5441
SSDEEP 192:m3LGUqY7tdtVKbHS06xVNfDgte7lU92e4Q+hd6mWOtv/3ImkKAQV1HCJcT25Q:6LeittKbH8xzmey9z4Phd6mzWmxbHCab
TLSH
T1A6D17E2E928B69648EA7EFA543C331121B6010B4419207A3BCAB4445834A6D27AAF4E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mouse-pointer-DSDsXotA.webp

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\mouse-pointer-DSDsXotA.webp
Size 136B
SHA256 c53bc691edd32cbc245bdd461b5fc36ef21afc3d8e4304f0df49119204e0b0ff
MD5 b9f03ee12b0e0c2956a5a0ac3a5d3245
SHA1 5b1fdfcf92ee03a022bf3ce0233e0c4da6c2994d
SHA512 12c8d19d5685ea7b993d3a2758c8ba060620cfc26415ab7e24a73354fb5e1051ed5f7e3c0e7a796ce8250ceb80c7af0c7606eec69764b7e6878ab12b466a3098
TLSH
T1B1C02BC18C09C050C5107C3AE4AD78B0F847105C41950F011DD02C303355F0CB9A5AD9
MD5 SHA1 SHA512 TLSH

Submit Download

search-icon-BD6Rfjhr.webp

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\search-icon-BD6Rfjhr.webp
Size 1KB
SHA256 02f34d12e8f5f7a2838bde1be407fe1f9815dae8678cd6c77c7c031a6f41d8df
MD5 eaf2d651f993812cc4be771e566460b6
SHA1 8db35f32194de0003253730b81dac6e78622f39d
SHA512 5d834e7c97eeacee4c08eb62e0f6051e80f2c0f4e68299ef248ce238084b7a7edf3baa4bfcfff8b3ff78a43763575d32bbf766562e37533cb10dfaafbb983796
TLSH
T17C2119B2CB667417C60AB05F9014A3C68FBF3B04E2A9C786A5A229D47124B292E30225
MD5 SHA1 SHA512 TLSH

Submit Download

search-logo.webp

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\search-logo.webp
Size 5KB
SHA256 3a1dec651528a4b789020b9bc240f7c7a1ffef36cc3024095cc6c6c73da7ec85
MD5 beedc26a7a9638bab3220ce8a4d74007
SHA1 e93b44e4da9eccf5bc2542125102ef7b1711c445
SHA512 f1e92a5622988833d013097e2cfced6cf8a4577030fa354627b5fb8a2b4aaa929e54c5be3cbc37e8831c09d4de445219c23a8eb611aa0b6543077d09c4ee24f8
SSDEEP 96:Z7aQTdcNRoI+x/RnP4NUYVDdgowaBB9D6BwAW5cZL+gtCSJHqriPM0m1ajm0i4d:LTdcNRobx94NUYldjwaBXu05Avw5iPM6
TLSH
T1F4C18E50C35296D7C8D393F788D9FE17509A8EB109140C91463DFD30F964C697A2740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper.webp

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\a0378ec6-e4ee-462f-b443-db89d672298f\wallpaper.webp
Size 38B
SHA256 2f9a4c22931833a8fc296bf89b86d94eec618752a62a1add43b753a77c80852b
MD5 e277f4ab896e59909e8ede6d9f305d53
SHA1 619779f3d466c6a86f30c9ae0c2f07e99954724f
SHA512 4e96670e14b4d802f6d74d258a03dad7e7101dfabd97724f7da64c4aa89c2222392919e4ef13271d0237274c5fc1b2a33e53214889745a14f755211de1333ba9
MD5 SHA1 SHA512

Submit Download

c3c36b39-5907-4229-8aab-0fa36c5671e6.jpg

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\dd1f4ec5-8888-4449-9b62-472965532123\c3c36b39-5907-4229-8aab-0fa36c5671e6.jpg
Size 308KB
SHA256 16eaa3821fa2a2b32fb7edc01aa46acf863a708d102c5fb85a056e78a0d50a41
MD5 0a22f83c06489dcac684087ed33b29af
SHA1 256320d71ed7d26e3390ab47be783bbe4d7a7ba9
SHA512 e04c243308475f9f40f71e18c6ecd6a4101c55155afe41bf333777781878a3a7af6f5e0efb68e8558615856fe02069fa3c6bb1a07ed70592275dfcd5938e2dd8
SSDEEP 6144:tQncAaxp86IhgXoeiovJVXtiFrwxhk3py10KUkQnJBGPijdr2:tP/8aY2JVXtiF0xh0LKh7
TLSH
T1496423B783055446DA6A5F701A970737CB329E281BC22586B9E35334A4E178C3F8D6FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\manifest.json
Size 546B
SHA256 571e30171041db2710c16a3487d0ae1ead5f9d02905e2e2607905df37bb28b35
MD5 2d6b5cc0d6836dec425155d0bcc596d8
SHA1 583168a7bf650730641caabc4f0f14c6ee82ef50
SHA512 870bfc134be5fc6b8e87bd807324c6b6aa000ab8eb75bae1161432438c735e528b39d4ea47e5e3e18b5c6cac78f1d83a638ff9a552c1892698c5bbe2732b7a20
TLSH
T173F020442C4AE8FF04EE490C593F1CC11BBC7AF2A6E0F30839C69D2C0186D5A863009F
MD5 SHA1 SHA512 TLSH

Submit Download

photo.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_540855145\photo.json
Size 50B
SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
MD5 e859f2fb97f6c63e2bea53beff808b3f
SHA1 450de59b6cbbebd65faed92333edd73bab6fe984
SHA512 2bdb6f863aedd3a9324467ff399e6b006e3b8f747f7352807c2d07eec50e3000abb08837baef5619e00a7a5b076fb5ef15f42fed66c2968a4c7ec5b7d14801d1
TLSH
T15B900254030309A1308402F04D0211C261D30B5B0CA0D5A697580AB8432007D0851264
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_582770862\manifest.json
Size 564B
SHA256 842d3ce75bc872d61aaf4861c917445b87ff5ac1be3ec7b1ef2bc3156c148ed6
MD5 29ed99c78a99a41306d212404dfe4855
SHA1 74c801252c730dd1035fe04ae4687df4527f0f1c
SHA512 4dd4406200f2795cba4edbbbbd9b28d043c758317270a0b92ef3504335eef375b7351ed99e724169cc444edf6583f04f1c3e6a818ab301740fb4e1e77f737555
TLSH
T150F041A00C16A0314898273E9D33560F9DF42F0E1209222AC99FA2D1B40E47A24A428D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_602956388\manifest.json
Size 86B
SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
MD5 e97d9354ca8a054fb36d180f393b1252
SHA1 b3e4ec5a6a3751e6d9f0da1f0ceb8ad1da8520a4
SHA512 7c45acb49bc2e172fae8afa1ec2eb7df0b10e0ce774c578a2b2e68df5ac6d44dd81daa9373aad5ffc7db46073f53f29d3b8921ed2fbf9a47307c599b5bdba4d4
TLSH
T196A012623C00C92724C007640030438343653C0A7420250005521401A14473A01A6219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_897539460\manifest.json
Size 108B
SHA256 1091919fce88593005430b566058f3989403f2dfe32502ac48d19838f63ad141
MD5 1a88be780ec6c894e1bc16eae425052b
SHA1 5cf7a956f5af60106053e9af80bf343de9f34988
SHA512 1fef2e214b5efa06d43ba443198e93f38c6abd99b047dff39a883b2d02c347af762ed8193ee8ad9cad434c319421cf81c5193665cbff046c34d4a92fc929193c
TLSH
T118B012B0BC95A13710903FB001ACA3C36FF17D031930AC122B232000116C73DA17271E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_90525796\manifest.json
Size 594B
SHA256 85a004195ee5d18a6016ba0dec2f12b6fac84f79938fc46e97f92d788d37ee69
MD5 3b0b36dde93b175ebf152e9e933a135d
SHA1 4256de82fbadebee238645ed994dcc14636b8f1b
SHA512 3aa3bfbdc6d922a6f1e689aa7db9df3ceaa62f9eef32c653509754f0acf43ecaf1381493a2d5b90157ac6664f5ddb8b9358559613ac5aad5fdb2f00d6b84d2b6
TLSH
T18CF041441FAAD8F2052F5624DD2309A2CB3E79A70704B79C01BF651652CEE7A40BC30E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping5264_911061613\manifest.json
Size 202B
SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
MD5 837451b9bf5675593e66a3b58787a0a5
SHA1 0d8c4631e5308fcc2abe2f1b9ce29921717d2bb1
SHA512 3a746580453761bd2fd27ff6087193189e51845c8c4282247b0946ab5da91e60c134c1a75e66d271a0455704aa2f861e35f2b54356191704c343f748f47b741d
TLSH
T1ABD012E33D41D4F701985BA86922E10A67B92F0F5C47B41A07925049D4D9EB7347872E
MD5 SHA1 SHA512 TLSH

Submit Download

BraveCrashHandler.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveCrashHandler.exe
Size 270KB
SHA256 4b62cfa9c5ad230ba5044150b9bc5cb5618812fcf1c8bffbde407fd1e155fb25
MD5 e6248d59fe59952bb56928b4883e7899
SHA1 18e2e11e7b0bfddcda767a3f93c54ef7cddd5319
SHA512 de2f3247a3289e84b0dafe481b1e8fb6d3fdd293468ab235f7f138efe6bb965c46211c34b819305c5e7714d74380c4f96843ec27729eec881fad10b2f6f6f888
SSDEEP 6144:3Jd4maD39rUMyjJr+64hQqNSEzVcdfYiGdfsDRYYYYYOYBI07YYlYYYZbj9ItwpB:74l9rNyjbxqNSEzOafsDRYYYYYOYBI0m
TLSH
T13A44AE02B5D18432E9B315365EB89B316EBEB8304962DE9F23D44D2EEF316C0D625763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveCrashHandler64.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveCrashHandler64.exe
Size 355KB
SHA256 a602910e99300f514ffad6856165ca4d99a4d9719e93d54d7f519c665092e9e0
MD5 eface7778558170b93ea67242dfb8091
SHA1 b0051e3f5cce79b27d4eb20f82ece9e43172e010
SHA512 bbffd3764d1c4e29796de3da9c6145bec2377630cd1dfded99dd9d0a03e0f122206948c7d4f8d97bdf30252058c51dee56324e645de4e4d8781bd980f143e406
SSDEEP 6144:QHlSHLFsLeljMiBwkyPnYeP1jJLSGtouZFvSWjItjQauHzx+Gs:QFZY5ryfPP1jx5FFvSWjI5JuTx+Gs
TLSH
T16F746C15F3E404F8F5A78174C992CA1AE7B27C5607B0D78F23A4869A3F336519D2EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveCrashHandlerArm64.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveCrashHandlerArm64.exe
Size 353KB
SHA256 d54a48fdfddc21739d837abc74212fd1704924206cef6493815595a15f7c1ad8
MD5 9503f6b4188abae765de59ba4aef7256
SHA1 1071d431f39fec7ed100511740871ea3423467f7
SHA512 2cee7c0065e6bcef1e4bf66881e27f5587d341fdaede46f84e54b2f5636d137429a113a7c0b626857e71132ff60f72f5fbbf92f0265655f3cdc8d5bfbdfd81b7
SSDEEP 6144:Uuqb6JOtxnqOtBIjEYIkEBPZkwca2zJ/LmwpNtkOKRig3It1nvx+P:+VscDpihz4JiGIDvx+P
TLSH
T17F742A51DA8C68D4E1D2867CDFB94B50312FBE788474C5CE3156020CEEAEAC5CEB56E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdate.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdate.exe
Size 163KB
SHA256 0fbf05f87ffd7c33ed72a6a84288ebcbadab19e5846d1851e70a1b7700a589db
MD5 774911192d05c7dd17877ce75efd7309
SHA1 8b21ebf2c5945debcbcc74b0f5b521bc81a6c180
SHA512 94d677004d7785c8bb89ba1f85367c1c8121570e6830a42c049bab7ac02ccb5740afaf552528b06de6305a04b9867471015cc6caccd1d7ec0c0a8a474f2f2d28
SSDEEP 3072:/NDG1aS4GHOaGCbtrrE0Za9/U7hxTKbfXkdu13jB+MC2R8Fl2Z/GU7ysb5vvIfFH:vhaGGhZa9YTcqwB+3piI
TLSH
T1D6F3F60373F4006CF8F36A3069B56725A97EBCB2D962CABE1780059D2F316918D51B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdateComRegisterShellArm64.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdateComRegisterShellArm64.exe
Size 154KB
SHA256 bc90a5d97bc0c2eb4bbd805e21683ff3907897ed7d5faafeafc67fc41a6d4665
MD5 c66a561ebaa34ae333d320373ff1458f
SHA1 84ff65df10cac2a6e853a7d33fb18703c4eb3999
SHA512 d05941c7e116c8c951aab2a31f48cc3734173393d376e52469f51db7e2c99b49d4b0dae749123979dad1c5765e8cf96b2ceeed4f40f00b1eab905c2b8dea70f6
SSDEEP 3072:moGPa6NpZk+tkJCbjOAY8nMl/Eed9G0btQUpojb90CB+cE7:mpPlpZk+yKyVFhQIolHB+H
TLSH
T1CBF3199376CD38C5E2C3DB38DD564950272BFA788430CB8A3296020EEF6E6C5DEB5552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdateCore.exe

Path C:\Windows\SystemTemp\GUMF5EA.tmp\BraveUpdateCore.exe
Size 195KB
SHA256 f359b2eaacf819d1b303f468e4c8e3134f12703ca3f8094b6d18f5a8a028a84f
MD5 57068075b90cedf9fdd89781c1e551ce
SHA1 d261994d3b4aea616ec2d36e39285d5272c56436
SHA512 d7bab12745baa3b10019403bff180c491933fe3f35793ec758ccf18b4cc2b2e1b0990b38acb836784a9b5baf331a9f91f10a72e378f9c1b4dffc54d9e080729f
SSDEEP 6144:JzXt4nqREgRKE2kKh+0nc0y/czweIITx+1Pc:RXt4nqREgRKE2kKhjkczhImx+10
TLSH
T1C3148D12B1E08072E57315321AF0AA705EBDFD704E62DA9F27940F6E5F716C0D626B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdate.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdate.dll
Size 1.0MB
SHA256 7c0ddc86e425828de63885be30fa0e92c6c0c4613821241dc272503690c2b2bc
MD5 df4dd90b17e30a16f70b0ca062660db9
SHA1 8603ecb8264e9a7f1aaff514717103aadc53e7a4
SHA512 d5713183b7379e7f903e85451cc9dd7073f79a2df1717f048267388c5b3a80337f617804b0f8f01ab70e178bcb3a1674a273a18eb592249f132412097ab736f8
SSDEEP 24576:b+uIUZlrkEfAJiPHUfWb7DDtjV6PXq3sXx6/LjhWuf53QnATLWiNuKGNH:fdlrDYiP0fWb/DtjVIX0lLjhWufxQnAI
TLSH
T113359E1375D18035E5B3063099BDBB25AEFDBA310A32D64E13D82A5E6F72980D73A353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_am.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_am.dll
Size 42KB
SHA256 e409e6e84011fadaf0ead83074a482e3eb0e43fb17cc578fad1b56f4412fb992
MD5 85ec978d13d9f1a0cda2240b235ae5bd
SHA1 13f122eec63b37068ccd54133cd79f5884858848
SHA512 56d578af09b9bfc2fe4c8bb1cc6ffb133f3d3cea1e78cf08cf38782fface00ca9297d94e39a9e92cf774d4024352359947804e0edbb72fcecd4b27ada90d0e78
SSDEEP 192:/xxsk4lK4dAFlDmdYR7A6eHu26NyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHBbs1V:5ek4k4+J26NyEIYi2mL4/y8RLVHBwzTv
TLSH
T15A13513946085C0EE727FA3179941A3E45676DCC5BE0F3861198A13C9D703236BAEF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ar.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ar.dll
Size 41KB
SHA256 f3211a92bf525deff837ab2b04a749f5da18a86a48fe64ef2d18d80712f066cc
MD5 0e918e19a69713a825cf3338d95a3ac5
SHA1 e06a5701a4c0b43100abb255203d9b6a3e9c3230
SHA512 78e9d390d69cbc5a6b2e05aab15443a3202aad312fad268a1fa2364bd72a7a7b687607e6e4ca562d5caa65910ed2aa2e234db4d1c1ad3f66acc217abf1bb394d
SSDEEP 384:DkOtkCLu+JGHNyEIYi2mL4/y8RLVHRyy0:IOtkCLdlYiDLk5/8
TLSH
T1951330720948DD3CE7137A30D196CE3F916751D29CC4736A21A4A9318AB07226B5FEFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_bg.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_bg.dll
Size 44KB
SHA256 8deb2342345a83626115cfb6b21f0301a9c01a040b8950c0da35e13e5f1ed264
MD5 505b026fa45e581027f88fb50992e595
SHA1 1aa9f1d7f12dd5940d8f3fa5b0b3c17746b10423
SHA512 09676b10cb24d345739b0dcb829d54b5d509eab0cab2eef30d7e99613a2a60b417d03cf4c172b3575801e24c941ae38522b2518d0e9407433e3c0f20150cc3bf
SSDEEP 384:krndckbeGZBOcSNyEIYi2mL4/y8RLVHt/ZVF:unV7DPYiDLk5/v
TLSH
T15013DD7BA5788908F755B6301A9589FE2167779063E4B7C1628F7874A038331372EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_bn.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_bn.dll
Size 44KB
SHA256 c5d2dea97c5add7d5e4cfc6cf0b5eda977d0fc006671634d7ac9f501d0c48d86
MD5 468a6f4a3b64938d7bf7e783a2689151
SHA1 4a3e52db912fdae0bc52053468867a0d1738acba
SHA512 31a14a7a4663d39114296beee46179458d1a30aa85533ef8fe9768fff116c47fc351404dbe4c3febf3984c6ed9397958eb6064bbd9ccd5a0066bdd45202739bb
SSDEEP 384:I6IvUx7tYF7qKF0FrHF6zjbmBwvhNyEIYi2mL4/y8RLVHGPbvC:/IrlF0FrF3BwGYiDLk5/p
TLSH
T15413FA3996087C0AE7ADB53476C15D3F09E7388017E8F35421D8A5388AB03B75E5EE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ca.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ca.dll
Size 44KB
SHA256 f231c965917b661d23ed33bbcafae9e140dc3963c847135f5b788f83673b1395
MD5 a2da8c05303a64b5cb866e90602b0435
SHA1 f61999c11990274cae59d359fb21e39ffea10f63
SHA512 c1c6dad778b4cbb7a9e9aad9ae6337cdd2aa7e8035e9e6138997131c31ae05a2dcbc507808c5d2c1b2a5c79dc88aa9931df01b83a747caeecb91a778db4fd7d6
SSDEEP 384:8Us2ArzVuRm4bPTGNyEIYi2mL4/y8RLVHch9:ls2ArBupPYiDLk5/u
TLSH
T13D13C9718BE85A48F7B33F707874192D4A6B7895A8F4F34D1240A5398970B01DEADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_cs.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_cs.dll
Size 43KB
SHA256 ff438d4cd5f5de600f653b409725b335df283e101b6a15de0dcda8037c31b194
MD5 f3aa6ac4734bd20f86fc6a77f5034d38
SHA1 37c3d8d581927d9295aa37a87d253cf72c9254a0
SHA512 de195e1353be4d986c3971ad1d3abd238885bc49e4b946fd435ce91ff6f98967900858f3b8b225e5d419a4cc817469208c2de85384fd47b6c78eca3f6aef7136
SSDEEP 384:Wd0BWpaJkhYwA+fKFNyEIYi2mL4/y8RLVH60bKD5:y/tYiDLk5/fb25
TLSH
T1D313FF7155E80948F7B77F3028B00A7E197778D199F0F34E528051798970781EAAEF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_da.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_da.dll
Size 43KB
SHA256 29bfccaf25390ce75a0ea99a6e199c35acc44c04e430f584d4a178c4d3820804
MD5 54ad46f6a5f61ff9a8d4f7661c7e3362
SHA1 b6af32192450838af94070356118c66b05e77d5d
SHA512 2867f6dc542e13c01a8932cc1c2a7b01f215661115a92a52cde67e57936eaf65e9912773d99be64424cc7df11810153783ccc6254502f8ebf1efbb3c6e9986f8
SSDEEP 384:uKZfNnwtpTqPRNyEIYi2mL4/y8RLVHZ7C0n9b:9Lnw/+OYiDLk5/r9b
TLSH
T1F813737153E88A1CF7B23B3068B44A2D4967BCD199F4F35D2244607C8971385A6BEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_de.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_de.dll
Size 45KB
SHA256 0fd07b36718336e07c366f5b85c8e4a5d8d1b43dc15ba640739c71ecc63cd17c
MD5 33e2fb526089b0e1b2af62fdd609a4d3
SHA1 7eba59c5d97bdc45a5b37bf84d225f6266109e57
SHA512 70e3b9c8423bcf8b2dc8eb47b19b317046a7a8833f0f735c522d66b6195bbe1f0ea400d05ad18ede0fa186e6955f0d67dc76dc1b2f27200db0f554eb4f434009
SSDEEP 384:8arQUM8QtPM0Me6INK/AtNyEIYi2mL4/y8RLVHUX6bQg:XrgjMePsAyYiDLk5/NUg
TLSH
T1E823417147E4491CF7B23B306DB45A2E5A63BCD5A9F0F74D228060788971701AAADF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_el.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_el.dll
Size 44KB
SHA256 68c72a29d1e69f93472573648613e8f3738f2024d760d35f5bf92de4c989dd00
MD5 44f3fd7a19dab7bce0d1d358a47d0157
SHA1 7ad199fc8b10c9f7d88dc23914acf04a18ac8626
SHA512 9bd31a3184336487814bb4e7f047370c00523cb8a0c8f9d64c491e14fd2c97d1b59ad65c68f9e3e5962b5c6b861012d5f5d59c6b4e79dc501bff46017e8aa3c2
SSDEEP 384:uLNE5eILkSIrGCSqlIxRFiAhAc8zBtfsBsTbjNyEIYi2mL4/y8RLVH2x/6:km5lLO+R52/oYiDLk5/v
TLSH
T13A23CB7E096B5A18DB66B9F15462893E4A6BF0C108D0FB6631E07074DA7C7029ECFD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_en-GB.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_en-GB.dll
Size 42KB
SHA256 0952ee05bfc060ea9ac16cc94b4cfefbbf58c0e64d31b6e9a96d8a9759af224b
MD5 6235157abe932836d230bf279a77f732
SHA1 1bd82461b911cffb18f28021e622a8901a4cc885
SHA512 c40736dce66562ba3e3df81147b80cdcb4f0d272ebff905ba35bc9850fb62544da15e3e995056b139c8e9e7ad98fd4cabf2b2588a9ed4cb73e1e0492f036317e
SSDEEP 384:HQQ8Uagyh6QuxDNyEIYi2mL4/y8RLVHVogRw5:8UagyhiiYiDLk5/30
TLSH
T13E1383B197E44918F7B73B3069B4597E09777C81A9F0F35D2280A0399970701AABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_en.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_en.dll
Size 42KB
SHA256 30d2c1cdfa63616f81b27eca8666c2051d2969a037bf0f0723bed55fa5f90e27
MD5 b0eef8f80193edfa589c2a6519481d9a
SHA1 44c24416a23cc779f8d2e26d2259ac065de84fb0
SHA512 26f487d0be622beb77b2fa5838ec4122610482993e7896d211b020454431fe480988f5b66f79cc5e5a29567f6a16ee50c105761f5e3e7ebfd11d2bca052b3abf
SSDEEP 384:GciagyMk9R0NyEIYi2mL4/y8RLVHkkUHf:PiagyM4xYiDLk5/of
TLSH
T1FF1384B257E44918F7B73B3069B4593E49777C81A9F0F35D228060399970701AABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_es-419.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_es-419.dll
Size 43KB
SHA256 8392b39b8aef95cf84f8e5b646838b9116b1fea3e0d534344f73957826e8772c
MD5 d2e8c2620aa1c2c86a56817a93d074d9
SHA1 41a66e159946f92c526e73ac9a49fe82bb4c5dd2
SHA512 1b3a96f606dd99e9671a9b0449e2443244b15992558ce8f37a23adc2ec8c61eecf0ce4d8cc343faed20e86c4a4c57773e61387281e8c82a063ccbd897639ac13
SSDEEP 384:bi5Wffs4zNyEIYi2mL4/y8RLVH20WXhkW:yWffs4QYiDLk5/f2kW
TLSH
T1B713857146E85A49F7B33B34A8B41A3D4D77BC9198F4B34D1240A1398970B419ABEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_es.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_es.dll
Size 45KB
SHA256 f1888cfad7cceffe2b36fbe66d69799bee952ba292e626b897b03811176c7656
MD5 dd8cd3f2a719f1bf42b2477e9a993b96
SHA1 e6803b60757637019e83fc3d03cfec0197c601d6
SHA512 b484cb52867c6d32401500a1f100e60171dfbbc2efbbfce255c795a748d8ba82261715f4ba0987717ee1cdad71af377d3030d84458b5deb5a8f828f460122231
SSDEEP 384:vpadNzf1oNyEIYi2mL4/y8RLVH/zYaFlBj:BadNj1tYiDLk5/kaTBj
TLSH
T16E23957156E85A4AF7B33B30A8B4193D4D3B7CD198B8B34D124061798970B41AEADF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_et.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_et.dll
Size 42KB
SHA256 abe844655f32d5a758eb9316eb8aa08389747c00cdffa2c86d1eaba1d96bb9ad
MD5 4d55a3dfc2b0cf93ebaa00a55d5b80de
SHA1 83f51df354a2df2b96879e7f0cfeb6ec8069ab3a
SHA512 032996e6848f7bc34594bb364b0089c5b52e88af2224105eef65a1e25659ebbac01f15e870cc14d5b77674bbf1400821e530a8536e249cef81caf3f8dd0baef9
SSDEEP 384:TpT7bDFbDZETJ9TSQ2NyEIYi2mL4/y8RLVHpCtG:l396nH7YiDLk5/F
TLSH
T12B1397B196E48918E7F77E3068B05A2E59637DD2ADF0F34D224060389970341E6BDF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fa.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_fa.dll
Size 42KB
SHA256 8d645481acbe9114f7b1c4e94b7767215e819a01f825f6d49ccdfe7a4bfcb013
MD5 4993b4422ffac82e0fe33ed5c7c3cdc6
SHA1 cb5da4b98d498e2fffaa65aa160ab8bdf8234cf7
SHA512 00b9990181461d2040e4beedc2216ba451a5127abb706b4bf8dfb477e39caa180e27ba1a8810634c4192c1093cc675bb6c6fec7c0ea4d8f0dddbdaac89893359
SSDEEP 384:+MJZMK9Y5aNyEIYi2mL4/y8RLVH7y92wX2:TABHYiDLk5/TwG
TLSH
T192132E368996CC38E7233A30D44BCD3F216361D858C1B77616D8643D96B0369AB9FD2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fi.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_fi.dll
Size 43KB
SHA256 a010aac85bacd7b394c4082c9cea5f995e397c4ced07003452fed780987ee72b
MD5 e37c8ff0aa58050c12edeb605b461312
SHA1 e56f4d6990a193691caefe571e5f520d76dfd276
SHA512 ae0d2333341e64b6eba68c2922ed0bb13e4ccc55726840fced88845b2e436b44bd61839979efa44e2ec4e7e434a21f49f20db96e821dea950c679f6bd09443a4
SSDEEP 384:A7ePEzPhXY7RzYd99hKh1GAbNyEIYi2mL4/y8RLVHNHozDcZc:qePEVmKgoYiDLk5/hK
TLSH
T14413657146E88A28E7B77F3068B44A2D46237DD269F0F35D1A40603C9971341AA7EF7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fil.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_fil.dll
Size 44KB
SHA256 f1771b460ee2b21db5c7453aa4e59b860265c6db33c571651ce5e4a479f564d5
MD5 03dd4654c98e76bb8bbd2482fc60553a
SHA1 54d2694fc6eee6e8008c31fd0d584e3ab567e28a
SHA512 9d2a91d558b8f80be65f7552ade3b8e9111a86ff6d42e7c64b816924649aa006e14391d5ef85b5c633f9c5e9670a308f29c892fabf17339fd1a834c301e2ed1d
SSDEEP 384:bFijdaUNPw+B3RVaw7ycNyEIYi2mL4/y8RLVHHo9rhQ2:+aU9w+B3RVawWJYiDLk5/Ivn
TLSH
T1F313A97156A8490CFBF73B3069A41A6D0677FC82A9F4F745228051399831385AFADF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fr.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_fr.dll
Size 44KB
SHA256 1835b4c4b5d307608053f7c6b3d55194f441705c5558841404e9e2411ab188cf
MD5 6da9fea877c9eb0dcd3b8ffc06a23ec6
SHA1 9781bdfb826fdd3e5df9d32a0b26bbce00036cac
SHA512 c5931c669c02ee7c31ddd9875bf77a843b5dcffbfb6102f18040934b011498f08aa6eefc070ec373a5add15fd6f90cd4778ca78bb4ee8754443c22c1671d66e3
SSDEEP 384:qgK98EoycpW4xHNyEIYi2mL4/y8RLVHVOuT:DKaycNsYiDLk5/UM
TLSH
T14123767153E44909F7B73B30A8B8592D0E677CDA99B0F35D1280A07D9930B419AADF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_gu.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_gu.dll
Size 44KB
SHA256 7a954a3120e08fdaee5400f26b1608947523f24527ae7d0cda50b04f6eff1c7c
MD5 fe2f15f41fecb5abb2c29adfee169728
SHA1 876a74f33a89e528067dda55eeba0593d1b60b55
SHA512 75d3c602bd5660749874021055585fd3d709db2dab7eec1e33fd951b44a4514c2c0f8d2bf4a8781bc8aa6789f7a6bca1701587ad7d874c80884f43802f09e425
SSDEEP 384:sS53UbeAV4DnYCRfwmkIZNyEIYi2mL4/y8RLVH06X1X:bJUbe7hbGYiDLk5/0MX
TLSH
T171231E791A4A4C8FE32AB930B5A4693E532718C0D7E0F343119862799EF1313765EFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hi.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_hi.dll
Size 43KB
SHA256 e1efedf10a680d05fcbac71e1e00d9a5c19b4e445fef31adf96c2c487b6d579d
MD5 5b1142767526fca951c4e76282fe7d14
SHA1 f65a65eb198b865524f1c190259b3ce05e4fc1fd
SHA512 542d191f80f7454e8f6fa9e9c991e7f3aa12b6634f57efd403ede47f798a43fb42efadb0889810a49dae8e95910990998c54b5e6d63e7b9fa736cbe66fb00f8e
SSDEEP 384:RRxx6AN6AQqjexbyqKXhHqCESNyEIYi2mL4/y8RLVHzkK/:fxx6AN6AQqjexbyqKXhHqCyYiDLk5/Z/
TLSH
T162134C3204404E2CE35C7E38F4640ABF5DEB64A5A9CD338166C071B9D9F533A668EE9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hr.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_hr.dll
Size 43KB
SHA256 da2d5bea74dc2563e2f2468f155d72f91ba0344b9e30dd488590f4999c7778f7
MD5 6674466ce00aeb05921ea4f21f3649a8
SHA1 568ac42cc56e25a588f815708b40b0aff772a685
SHA512 7e89e9b0ed5fe814ac7e4b56ba78a77f2df1ea2934e7caca75a2a5e90a550e1e80dfb810c402feaa40403ed32a11fa021283658fb65caf4b09af6c7b7e962ffe
SSDEEP 384:GsaqdOXz19szMH5KBL/eNyEIYi2mL4/y8RLVH3jm:3aZ5oL/TYiDLk5/6
TLSH
T1EE13EE7196E41919F7F73F3064B41B3E097B78E1A9F0B34E118061788A70741AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hu.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_hu.dll
Size 43KB
SHA256 18f0145676bb89e59df90406d1dcc1c71743f3080f4a8970d59a07dd7d69e041
MD5 c2aa353a1568d60687df541a47920e0a
SHA1 ba8a1bc55e83708f5421103222ccab727a8a096c
SHA512 bcef4340eb62e8f647239f2cc49d5f6e402c9bb5063b3addb5c89adc191099b0ecd99ab88ce4da12e79eb19547f3b7c919b4fab28843f6d8787c7a4dfef8703e
SSDEEP 768:+y7U7RPX1C2TycfBwGFTbeSDY6931lBVZpjqAy3FGVswYiDLk5/xL4:+y7U791C2TzpwGFTbZY6d1lBVZ5qAy32
TLSH
T19213CC3152E84909F7B77F313DB04A6E092778A0A9F8F34E5180A1BC9931741EA6DF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_id.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_id.dll
Size 42KB
SHA256 2fba2c895d0ddedfd3a23723dc948f2c0c4d007cd7bcbb8c41ede08a79bf43b2
MD5 e5bb1b91fdadff5d6fc8f6807c9b2f41
SHA1 8d45b46de7955b8db8958568f49d2d08bb7c40f0
SHA512 850bcf08da93e71746c0d72994ef109ccf90be065893a0d5353693fcbfb1bb7e2655b2eb7bdee5b40992d42c5d20e2252e13b0b1cd5c28f85b758b6d217474d8
SSDEEP 384:Y4DaL3THRNkAHqQ3lFRf2I9ByrUXNyEIYi2mL4/y8RLVHJY6s7:NihR58YiDLk5/G
TLSH
T12813BAB142D8590CFBB73B3069B41A6D0A67BCD2A9F0B34D624065389D717819E2EF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_is.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_is.dll
Size 42KB
SHA256 3a16f9d6b4843e5e44c338dffa7e0e3848c252be07589a07916778495b47a26d
MD5 8b381ac74cfdfc275c34ac135edda42d
SHA1 eefc388096ab2f73bdfe006536e1985b89e6332b
SHA512 d4164757c03aaf9fbe58f48d61426dfc15ab39db2676c166c9997c662353e6868a806fbde3e69cd0ea6731a6baac426157e4945e1cbbe9b9722db787fc342dd4
SSDEEP 384:uaciZsioif2lIBuAjYkUVQFoMUefV3RNyEIYi2mL4/y8RLVHrG42x:OiqibAIErkUVQF5UefV3OYiDLk5/Cl
TLSH
T10213DB719398590CFBB77B3014E45A2E0A27BDD29CF4F749118569388931382AAADF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_it.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_it.dll
Size 44KB
SHA256 14c6e7a5497b2ed38cf871a24a19f5ad97a403587c56f4ddee55a6e0f48f5533
MD5 2db1d8baeeb2c7c3790c8cfabd610982
SHA1 16dcae99227eafab4d034a8f64cacf42e5dcafe0
SHA512 0d8914c5aae36c57b72bb5b180b80425b3c3e3bcb67b070d700ad4240e8f7dd92d5b4bc012e163fd44f1f1f40d45278ed26047184585c2cffb80f28746e21e0a
SSDEEP 384:n8+DIN+shh3/NyEIYi2mL4/y8RLVHPOhdl:8KIN+q30YiDLk5/Wl
TLSH
T13523527157E85A18F7F33B30A8785A6E093BBD8198B4F3591281607C99307119AADF3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_iw.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_iw.dll
Size 40KB
SHA256 d8cd731bb3475364739375479a99a432b6f1903cd7906d63ad464fac5e4faa14
MD5 ad70a985b2f3fcafc360ced7bb585e4a
SHA1 7285f0c7dbab477b33d8de3388087e88fc234353
SHA512 27adbd2d2f1cc9bd87c15dd5f6e4358606cace6c1b201941ad47295aaf8a957da05deaf2ab264419aed42c48761f334f4421bb634e01f5462cdddb8009bf0c4e
SSDEEP 384:fixv7hdVexaDywGfJssINyEIYi2mL4/y8RLVHVyd:K9NM1NYiDLk5/4
TLSH
T18A134F714A50CDDCEB22FE32A14E0D3E5563E6C055E473532098A470AAB9392DB5EF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ja.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ja.dll
Size 39KB
SHA256 26da613b4b9af90042634c44549777c763df13df53ecc4f9ac263a293600338b
MD5 cd1fb96ce7c7c81294e2ef2a0d61d384
SHA1 a7ddf7db20627293ee8ff260055262e7abdcc215
SHA512 f0c70e551e8f9724416def24ecba289e75795335a83f5748b97807e4b5743a18dbd9522604eab1949cde38eb9140fadd92c4998ec3e662beabbb95c27707e853
SSDEEP 192:DcmE5rkl4EAnej0FgW5E9jboNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHHWR1wE0:gb3EHj0FgW1NyEIYi2mL4/y8RLVHH+dq
TLSH
T12F03B5B566908C0DFBB37A7010946E3E196BB5D055D1BB8121C0B03ADA70346AB5FFBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_kn.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_kn.dll
Size 44KB
SHA256 bc63f155424d638f59720e5d2f413fc2b68667ef6921138ed8bc889c9da23008
MD5 4580295686a0e9135043d963d82c994c
SHA1 49f1a512a08e0e3ce022d4e0ec91530a2ac565e8
SHA512 99c4e5cba4c9c8781442e0a666b111ab21171f8af62d55e5ea11bdee1b12d11d17c534c7237984185446dadbba44de025b8c77f1aa31fa2dd09808beb2bf3c6d
SSDEEP 192:NQIeQFHcVlOzM3Hw+a1Osb/pSJG1RNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHfZ:WTaUIRBSINyEIYi2mL4/y8RLVHfGEbB
TLSH
T1F7234F79867A8C0AE7D1BAFB7092193D911359C353E1F3813188503C8A707765AAEFDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ko.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ko.dll
Size 39KB
SHA256 d191452be9c516df6c9f2911809525a0db9bfcfbdcbf94035785d3cb84e53a52
MD5 2f26353ad66e9e1039b3041bbd613990
SHA1 364ce506ec746cf1c6725ce580a6492ddd64b251
SHA512 5b07c55e50b8ac98026a30fad385d6c996341a6b7c036603494df710d2dc8f17f6f5150349009b41b71f8b32b47cbcffcceaa408225d7aa5f4d182800c889293
SSDEEP 384:mZ+/Td4IY+N1vZsYoRHgA12plxB4xRkkTY1M5tkOnNyEIYi2mL4/y8RLVHjBODha:u+/WmAf/jvMYiDLk5/eiMY
TLSH
T13203B4324560DC1DDB227A3164C14F3E627321D159D2B382B2C4B178EAB1382AB6FF9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_lt.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_lt.dll
Size 42KB
SHA256 a6581375e0e1b537d543f7e9825236e50728c780f783510487789d1a359f5fbe
MD5 15f691c74af67f3efb94e99b6dedd1cc
SHA1 e4a0f8e18da0ff3090d8c675ad6ebe988729c537
SHA512 2bf01963f34da7615fabece5fbcd3e2d4a901ed150095f356aea220998da80ac38f029a310a2ee0a46e0704801589911e8a7216068e275d110eb668edae4bd21
SSDEEP 384:+tA3nc9eHz0CwTmDq092XzNyEIYi2mL4/y8RLVH4Gb3F:COckHz05TmDq09PYiDLk5/zZ
TLSH
T1A813DB7192E8494DF3F33E3051F44E2E4A7BB8D169F0B34A11946179C9707819AAEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_lv.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_lv.dll
Size 43KB
SHA256 8a9f9c1df8db30653d16bd080d5aabae6d1f4003db7ee8906b42ea4d3903b0b8
MD5 8f93be791a1163ded095a44066766707
SHA1 37892a9a8fae55d1abcb6b143fce10a767df58de
SHA512 581aeb0ef6b3cb4f832ee70149a7ee242de2c977b62142908b49872ed2d1c0c1f4e15ca5febd415b32be69611cd31ba4b37d2ce51c6821ce98727111a0bcfb00
SSDEEP 384:GQ6ZyAxOeK6eANyEIYi2mL4/y8RLVHgXtEuExT:/4u1YiDLk5/+LM
TLSH
T1BA13A67156E8591CF3F37E3065B04A2E1A6B78916DF0F34E1140A1798A70741EABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ml.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ml.dll
Size 46KB
SHA256 650441c151f4392808d3cf976d4ce3ab31e57d2f61c5cfe0b2860e699ee03138
MD5 643111d22cb6a65c530639f9a9b9b6ec
SHA1 9bf34a1687690d9800506d64e4a20c2356848bf9
SHA512 f4983b3484cc59931c81c71a61513a7188e3022f64b3e50844988c1c50863ee951844dde81a116db75a85624f220d68f17afa3ba2aeb108769b6009ba48c1bd9
SSDEEP 384:u8dIB7FZygp8/JLgNyEIYi2mL4/y8RLVHek6P:7cWJLVYiDLk5/eB
TLSH
T1E7232F761104ED4BEBADB57038851E2F549B2E8D87E0F390219060B97D3A3036E6DFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_mr.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_mr.dll
Size 44KB
SHA256 d031637f2c71e549a1af1b8264c1a11134b8cc7e231564917c9282a93a148201
MD5 f1beed9d888cca3f26c9696d7b1c98d3
SHA1 758b7c07662d940ee1df8de4ac8967bbebeff573
SHA512 1184ef73375e9105698320782e84107b1602d1325b5bf8cbc256026461ecafef1c9c35d5099729a07bb8da410f162904c51703f2c8aee19be1fdd6ccb3870727
SSDEEP 384:A/zdo/7JK7bABkNNyEIYi2mL4/y8RLVHRgGF9w0:yho/7JK7b5SYiDLk5/x
TLSH
T14A130C3941485D1AE32DBA70B4A41A3F0CD7288467ECB3851AC4727CDDB43375A9EE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ms.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ms.dll
Size 42KB
SHA256 d2ff996835e245c89bfe3e4228e9cbd8c140dbbccf9e8a05fcc5fe87cce3655a
MD5 915dbbc05ee4b3a3ace2296c36afe20e
SHA1 0f5af405ec12d3af95f095aee045d763d4d2e982
SHA512 4edc7884ce0a9bf585e2f55b08266e83bc868b2e76e3eb1ef7d3a36491e5a7cda82397f8dd984ca514c54967711b1d46cd39c21f64b015d05424994efc93bc6f
SSDEEP 384:C63OSeyrQLtUv6oNpaMkYjZZ/fbMgTRlREmNyEIYi2mL4/y8RLVHo3rjH1n:K8Zf3TFQYiDLk5/O31n
TLSH
T10A1389B142D8994CFBB77B3029F41A6D0A67BDC2A9F0B35D5244603889707819E2EF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_nl.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_nl.dll
Size 44KB
SHA256 6cedf2d9a01f5f3c02bb7dcad749e5e4e386525ab56446921a1375f9a19c3289
MD5 cde4309278ca8fc69499d4c482946702
SHA1 9ebc5cf5b15f412925862adfa8df8128b9f037d7
SHA512 28911f75a3d85fd9e8f34eff8e9d697f82ab16381b4d8be23f0eaa9f050567fc91920c21865c0bf7742be3fd3d8ac6575b436efdbabf6c140447dbb90606c7fa
SSDEEP 192:gtOf6Xd/mkD3UK38yAa9W/16NyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHcEmJo70:GI6Xd/T3k6NyEIYi2mL4/y8RLVHttFq
TLSH
T17F13757253E8891CF7B33B3069B4596D4A77BCC1A9F0F39D124061788970741AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_no.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_no.dll
Size 43KB
SHA256 5843db0105b4bcce496f4e6ee8fb86b9a51b379bb8745923114f067ec8e1ed60
MD5 61e5d2db08cd23eb980f697942b7a114
SHA1 297fe159eb6edffeab6cefdac8d488f401bd1be2
SHA512 98ef95d8ca8e0f18efb548eadb0d7a80215d0424881120b3cd35221c2bd419c12a6b17804188042410f254392251633696687abe4205db57ed96cf209892ceba
SSDEEP 384:Wy5JZSiyCSiytNRAYiTvaK3QFNyEIYi2mL4/y8RLVHFOymDzzT3X:wNCYGiK3Q6YiDLk5/gyczP3X
TLSH
T1D113647197E4891DF7B23B3068B80A2D4967BCD1A9F0F34D124460798971385E6BEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pl.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_pl.dll
Size 43KB
SHA256 5368abb2381b0985bc003d0927b5bc5d4004709618e20ef8c0fc54c01f049486
MD5 b928949cf272906d40ffae73fe0299e4
SHA1 ca35b66cb65bbab44e915eee47037c498c072cdd
SHA512 61f6f1512f9ba8be756a481db27d2a015ba55eff0f5a1139a9f55e5f247ed236f9969466b775afebd3701a5b1b78a7c25b1215ffa34b6edd04df6fa5f2ebc524
SSDEEP 384:I5c7n7KZHCCA7U8Gp6sNyEIYi2mL4/y8RLVHkHwFF:j/y3AIyZYiDLk5/5
TLSH
T15113FE7196F40948E7F37F3065B41A7D8A7B7C91A9F0B38A224061398570741AA6DF3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pt-BR.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_pt-BR.dll
Size 43KB
SHA256 0bf66b5ac5b9ea1a20e3e1edea432c5c5d3408a4fee3fcb87af962a8714ed709
MD5 e538079d00e4d979c2a0d11e93b9ab6a
SHA1 2fef630cd56bc060bb712d2f370e9a62761ceae7
SHA512 62da1b14ff24af6be93676728251a48271e988b015e51fc0934eaba0c676258a9b47efb48abd6a30c7abe132d0bee350145df5adf1f7809bc5dddce397d8b200
SSDEEP 384:SnYxmgZcOZX8+NyEIYi2mL4/y8RLVHDe1GSk:GegzYiDLk5/yE/
TLSH
T10013877286F84A08F7B37B316874193D8977799168F4B389128060799D70B41DABEF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pt-PT.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_pt-PT.dll
Size 43KB
SHA256 1c115515fb5a63f7d5cc1fe8cd94fdd6846c9372704febae0906a7cf4e4e4ebb
MD5 f98e861b62c89d1fc26d727156f02985
SHA1 53c0cd8e025f2d84c87f075a1635d327c9420432
SHA512 72ea8285930cd4fdce7f3cb72b786393be48d593ce2e6b37e80e76e8be80f83a68f072287ce6244c03adc59c418c5707b372a233428bab2f0e6295eeb3db446a
SSDEEP 384:QWpqzstnEx6ewBJPNyEIYi2mL4/y8RLVHpDE2y:qIEx/UJEYiDLk5/+
TLSH
T1F413877297F84A18FBB33E316874193E49777891A8F4B349124064399970B41EABDF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ro.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ro.dll
Size 43KB
SHA256 05a9742326f636646284bb2dad04b16cad4b0c7c63bbcb67f2516cf9fb7e6faa
MD5 b849587db68dd1a9e742b56df2c880f1
SHA1 3d5efb38d04a895ccb91bb71f3f8bf9ed665cecf
SHA512 57200cd33270083247aa2709bb35a11bf284a0e20cf8a9b3c6a7e29da808bfd1070f5cf3354f390f7f800148afc2adc873a52cd5062be20f3377250a41aafe82
SSDEEP 768:x0CRNNDM7qm0GdVqT541naEpPYiDLk5/0:xudVqlcaE7j
TLSH
T10213C97157E81A18F7B33B3068741A3D1D7739A298F5F34D2144607C8A71B81AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ru.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ru.dll
Size 42KB
SHA256 1b8427a2c0de5ad3944275e08f891dc13bbaa1f76a674988415f71b67e400bb0
MD5 6ed8acffe6c5ff6a83bde4250d621830
SHA1 23e9ab23ae1a750a5ca765ac27efaab46e310c2a
SHA512 9c7bc7c9995cabeb9897cdaaafad982ba2f17920e4a919aa45025821016317442bee50a3da4528d0503c5d454ee414c90179534d459ea4fdb361efe3d879b37e
SSDEEP 384:fS5FA47AvHlho4d29NyEIYi2mL4/y8RLVHKygj:q4vHUCYiDLk5/8
TLSH
T1EF13ED7BA6688908E715B2701A914DFF206777A027D5B3C2618F7C74A174332772EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sk.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sk.dll
Size 43KB
SHA256 2e500eaf25971b892340ab9203ae0a04c1871baff7c4fd8fca96c0049d6797bb
MD5 cfcfe626a18bba5002246cfcb09b6cc2
SHA1 2cf232da5b425e909def2592ae7c31b642268512
SHA512 c41ada8cd15c695526dc44fbe09176a5da87c8418d4b84238838301f4919acae120df39aff523a7875717210761f2c568cdae502d3b4d245fa3edfb4b333c15a
SSDEEP 384:ouI8uhJPiR6gLTYNyEIYi2mL4/y8RLVHws9pzto:bO8RjdYiDLk5/Bto
TLSH
T19013007252EC095AF7B77F3068B0497D0A7B38E1A9F4F34E5140A17889707819A6DF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sl.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sl.dll
Size 43KB
SHA256 d8b7f361c29bea2106eed2e65cd478793f1f7ae8a02309dfec750bc97dff54f0
MD5 75e5a43a51a05fa187503401dbf8d6a1
SHA1 f4fc201e64b4693363a85e6beeb6b7607ccbb347
SHA512 850aae81782a85ba81e287c61a13d2f9af8c00ad4ef36b2a6c2fe61ee72fa014fdf275fdf8b348d0a4115cefd84d2bc23404011f4c4d12a82347e59c75478f31
SSDEEP 384:VkgTcshVyigOHHTpWBdH1i2IXousFNyEIYi2mL4/y8RLVH0zZYTtmdZtt:+DhOHHy1YZs6YiDLk5/8YTYdZtt
TLSH
T1DD13997152F8090CF7B77B3054B40A7D0A3B78E5A9F4F30D119461B88971782AAADF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sr.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sr.dll
Size 43KB
SHA256 c15d153b02b430771be97403348b400e6d67cd2b514c1436a5dd398e752dd4e1
MD5 a91af8cf9d1d5350d8b40cf6fa0bd8f6
SHA1 1135391760a6a2732709407db5c8c75f61816e93
SHA512 22e8ad81744c200b3ba7e220cac72a1ba22b8c312f23b56d26b013e581ee151af5de6efa8f0b7aef19a6479a05332c9953b41647e2bc029c25bbe193990fc65b
SSDEEP 384:2p4aOxCx7UjYN3tGLNyEIYi2mL4/y8RLVH7BsCu:u40Uj+dGYYiDLk5/Pu
TLSH
T19513973FA5B88908F751B6301A948AFE256B779067E47382618F7C749034732371EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sv.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sv.dll
Size 43KB
SHA256 b64b2e50fe0dd0c70d1153d6cc4e0616eb7d78f4b11f635bb9662d7328592ab3
MD5 ae91a71ee1337b3d18b144dc5b3e49b8
SHA1 9f01bc66571a8e2f807aa6503881a0390d896930
SHA512 cf1c853a45b6d9247cfe6bc03404224bf63f9fb142b64010e958372cc7316e253eccff8721cd715557fe023bb03a7726d1283795797c31b168cd8d157cd72ad6
SSDEEP 384:xK0xC7Ec3E0dNyEIYi2mL4/y8RLVHr88sFlV:M0xCYc3E0iYiDLk5/Z4j
TLSH
T1FF1384B147E8491CF7B33B3068B44A2E1967BCD159F4F359224065BC8970742A6BEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sw.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_sw.dll
Size 44KB
SHA256 e361b09c2cdbe4c3d1881b9092a97cb41a4af2ddcd3f1d7617c17c2afede1ef3
MD5 fe32bd4d99ea22ed368f8fc687953f1c
SHA1 649fabd3776fb00fa9b71b503ecbf2a5d64987a6
SHA512 d57f35622d5fa19cd100f4c7dd87f5092fb71360ee46633224eb14c6164394c7c12aa63770c79b62a3c263a4752bd2a41fba3a664f4b9b05347c6f8f29a2aa6c
SSDEEP 384:mpUgicgiY7upr4M5eNyEIYi2mL4/y8RLVHmR7F:+UQ07Gr4M5TYiDLk5/0
TLSH
T12523B939465C5D0AF7F7BE3179D06A2D062379A26BF4F385108460388D307939AADF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ta.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ta.dll
Size 45KB
SHA256 07aa8efe813384702cc40193ac816c2873114e3736a7c4ec8892a165f3c1067b
MD5 ce6cccba5a337f7a451ef577c86f02de
SHA1 d4a4a84fc85c8f1da0b73c9b6bfdd478b98e07d5
SHA512 d960529008a76118b00576452caa1c3b8d01778527ff4a0bac5c58fece7c686849e89a42deea400e3e079d21330d8112c6db8a3259638c552627a3a964f76054
SSDEEP 384:ITuNwMY51ZLm+4HwzNyEIYi2mL4/y8RLVHl+3zj2n18:TNHY51ZLm+4HwQYiDLk5/82+
TLSH
T1B323323C0A1BBC0AEF21B93279A9593E05172C8097E1F3B02199647CDEF4B12666DF5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_te.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_te.dll
Size 44KB
SHA256 90823e291fb35854d967eb624e40a8a2e54b5f2270e19bf7e10fd20d2f93cc83
MD5 529e3a5d2d32e278c5abf6f64f81d297
SHA1 e6a45f7b904991823d6092cd554730f126196885
SHA512 d317612be400066ec985c1dfd0d0457d86d29f6156653f93452bbfcd615d9bbe139111a9732dfe95ba88c69b7866c2bb502b45c05a0b1b1e4521ce2e80705d4a
SSDEEP 384:yJbnig45Z4aJ8LDENyEIYi2mL4/y8RLVHhRGJ/M72:yVniN5ya+LDBYiDLk5/X6T
TLSH
T1C8230B3949084C0AE3DDBAB074C45A3D186759C16FE0F36290C5A438DE717376A9DEEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_th.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_th.dll
Size 42KB
SHA256 45febf23c945db50a7fd0f223eb0d76a35206d082360a05b7f781ab755d86369
MD5 f150c808dae2c1998c2127c393334afc
SHA1 4012801eff9920809bc74ac28810b21664b80fd3
SHA512 ac878abb7aab32c246c5dc72a23089b9cba980f7ba3636ac72f40bb92748ff77537846034498d379f3e1046724c35f8b25c2de76f9a5b061dc2d2febb4de19f1
SSDEEP 384:Yq4lrGsMKNMfetN+NyEIYi2mL4/y8RLVHlHd:P4lrGszNMfetNzYiDLk5/P
TLSH
T1A2130A7582B15E0AC71BB5B0E1D44E3F3C2B6591C8D2B391909AE934DA7032267FEC6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_tr.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_tr.dll
Size 43KB
SHA256 7c6e8bd98c496af6526009df367f7fcc3f4de91d8857389a2b3de60b3155a4bd
MD5 456f37b741af4d4af44ca1b8667f0743
SHA1 46043207528593475eebf375b5a42f803326eadf
SHA512 dd6167878a264a4e5870ac1bec295ea5b0bc48ce206d19868c0bada23b977bd02c3c7d455b18a1a46052dbb0d9c745452c5c13598dd3e5bbde933c997150adf7
SSDEEP 768:p1p9ABk6qXQEdmvgh3FGk+G9Ahrx++BzQSXqYiDLk5/c2:p1ZhdmvMFGkSxLQKq7M
TLSH
T1E413DC3143D84D0AF7F33B3428B4693E0AA779E5B9F0B34E2191A13999703815A5DF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_uk.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_uk.dll
Size 43KB
SHA256 95f4bcf2797e3cd9c3cba22efd925b1d8c5b3caf97f2bf6fe3a264db3e8d67f8
MD5 2b536714194692b67b511aa8bf270e29
SHA1 7347e9d8b838ec69cf4c9be47d3e231a12d57dcf
SHA512 109f7f89ce72853379144ee26f6a52a683e4e736e47b5b1705ecdeb68088370d3c1f5956169a62e0d9001da0ba30a2eb40a0cf548d3958592db105fbcf9f01c5
SSDEEP 384:vtbuKgHWyC2EeovVHE/GfuSNyEIYi2mL4/y8RLVHYXUt:Vbu2uPYiDLk5/Vt
TLSH
T16D13D73BA5788918E71AB2311A864DFF1467769017D5B3C5628F7830A078336772EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ur.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_ur.dll
Size 42KB
SHA256 3719ca834b399d658c4e3b124f6ade0132261d5d25e16f92d2bf9ed35a4e86ce
MD5 eb990993ee3113c7f8b871605afe3826
SHA1 26cba2cbbbcd8606a04960b57984002124871862
SHA512 2d2ec7e69be35e8fcbf34ebfa7cbc66c265613874f673d366cb10b9736e75631eb990229d92d4e76c7134c589ffea782a94512f8f3e08968e74adedbfa8f784e
SSDEEP 384:QfIoo+OmAcoWu9CeeZyYG5NyEIYi2mL4/y8RLVH0X41:SIoo+OmAcoWACeesYnYiDLk5//1
TLSH
T172130D754464CC7CEB733A38D046D83F262360D454C2B7316ADD64399AB13E29AAFD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_vi.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_vi.dll
Size 42KB
SHA256 d46a077385c5e9f5dcdf2f1501f7971aad048b5e768ddac55f778d336237655b
MD5 1737478ab59f5cd365b8a25e6fe6079f
SHA1 9de27e2d647bae56e848dbc37b50c8dea656fcf3
SHA512 7c29c410f7376c469d67c187e974490c50f27e11aff32bd3711efc1be77e07784dba163feca9f1fdfc9c5ffa7c29329db610c0573a06af704196be3b3ec6c9a9
SSDEEP 192:XAUFZzLrEFUEN+mVNjXvCOAqFjncMNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHHH:wQZfKFjncMNyEIYi2mL4/y8RLVHH9OzA
TLSH
T1BB131B70C62B895CF77237301498193E1D6BBDE0A4F6F3429286A97496707426F4EF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_zh-CN.dll

Path C:\Windows\SystemTemp\GUMF5EA.tmp\goopdateres_zh-CN.dll
Size 37KB
SHA256 16d615d83100e2a4a8c8a3a85d7ff2c711efd90be1b3c2d87c4076cb014c2005
MD5 03a99800422685f974a516d0d0cf9045
SHA1 ae7dd0d5f0fd7cb6c41256f327c97f63f64d0b1c
SHA512 62af52bb3bfd6075684141485575023d4b320301da37f0d63e4956e19040587376ae78473c6f5b056528508fb086ec0d3c64df3b702c2cae2446df2afb7c32d2
SSDEEP 384:SIpOyZshAWBUNyEIYi2mL4/y8RLVHKu2eM:yZAWBRYiDLk5/A
TLSH
T16803C57246904C4DEB273A3064D46E3E9A37B1C019D1B38671D4B535DAB0702ABAFE6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/796-300-0x0000000000C70000-0x0000000000C95000-memory.dmp

Download

memory/1376-311-0x00000000012C0000-0x00000000012E5000-memory.dmp

Download

memory/1376-744-0x00000000012C0000-0x00000000012E5000-memory.dmp

Download

memory/1944-297-0x0000000000CF0000-0x0000000000D15000-memory.dmp

Download

memory/2320-724-0x000001CC572A0000-0x000001CC5730F000-memory.dmp

Download

memory/2588-287-0x0000000000740000-0x0000000000765000-memory.dmp

Download

memory/2840-310-0x00000000015A0000-0x00000000015C5000-memory.dmp

Download

memory/2840-746-0x00000000015A0000-0x00000000015C5000-memory.dmp

Download

memory/2876-722-0x000001A62E890000-0x000001A62E8FF000-memory.dmp

Download

memory/3244-717-0x000001DCEC150000-0x000001DCEC1BF000-memory.dmp

Download

memory/4268-313-0x0000000001120000-0x0000000001145000-memory.dmp

Download

memory/4268-739-0x0000000001120000-0x0000000001145000-memory.dmp

Download

memory/4268-740-0x0000000002A20000-0x0000000002AEB000-memory.dmp

Download

memory/4408-1338-0x00000250E2200000-0x00000250E226F000-memory.dmp

Download

memory/5264-1616-0x0000017D32A40000-0x0000017D32B16000-memory.dmp

Download

memory/5412-299-0x00000000010E0000-0x0000000001105000-memory.dmp

Download

memory/5456-1613-0x000001984AEC0000-0x000001984AF96000-memory.dmp

Download

memory/5468-729-0x000002952D810000-0x000002952D87F000-memory.dmp

Download

memory/5524-1642-0x000001ACC4DA0000-0x000001ACC4E0F000-memory.dmp

Download

memory/5536-282-0x0000000000E60000-0x0000000000E85000-memory.dmp

Download

memory/5656-1643-0x00000230EB1B0000-0x00000230EB21F000-memory.dmp

Download

memory/5920-312-0x0000000000740000-0x0000000000765000-memory.dmp

Download

memory/5920-1637-0x000002A9ED2A0000-0x000002A9ED376000-memory.dmp

Download

memory/5920-318-0x0000000000740000-0x0000000000765000-memory.dmp

Download

memory/5968-741-0x0000000000BF0000-0x0000000000C15000-memory.dmp

Download

memory/6068-1340-0x00000231D8D00000-0x00000231D8D6F000-memory.dmp

Download