Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    1018s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    25/05/2026, 21:39

General

  • Target
    https://nahuatlecaanopsyshoreland.com\hyriD6263f696405020a55d0ff7b3506e11998f1d3504?
  • Sample260525-1hsppsax2x

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 24 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 4 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 52 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 47 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://nahuatlecaanopsyshoreland.com\hyriD6263f696405020a55d0ff7b3506e11998f1d3504?
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4996
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8eca7c188,0x7ff8eca7c194,0x7ff8eca7c1a0
      2⤵
        PID:1688
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,9819248180457532803,7437292701061810839,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:4152
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,7405479991620231587,2052136160612435784,262144 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
        2⤵
          PID:4932
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1724,i,3446311272606357023,5076823234381290176,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
          2⤵
            PID:2456
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,4350077092606571271,14237806842980711711,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
            2⤵
              PID:3448
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,13149030096157029109,10441610969030194998,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:2152
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4076,i,9897294803931761933,3833589243813491598,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4092 /prefetch:1
                2⤵
                  PID:1216
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4124,i,4536593728124683003,446461590243951261,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:2
                  2⤵
                    PID:372
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,3935689956224927417,9373967925849023356,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
                    2⤵
                      PID:3384
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5164,i,517156020430567245,12491469791318744681,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
                      2⤵
                        PID:2744
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,13650123784395534174,11055931715291905736,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
                        2⤵
                          PID:3812
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,6029265424256621031,17970074504601897169,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:8
                          2⤵
                            PID:3732
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,10099067390099940501,11544734315466656780,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
                            2⤵
                              PID:4404
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,5642958086881915225,12545692381163117324,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:8
                              2⤵
                                PID:3316
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11174529084633232184,1700689146689663585,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
                                2⤵
                                  PID:3768
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11174529084633232184,1700689146689663585,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
                                  2⤵
                                    PID:4728
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,683215491011518097,7629748547729679457,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
                                    2⤵
                                      PID:3784
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,7762177044252311997,6462470415083130603,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
                                      2⤵
                                        PID:1984
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6508,i,14471398242618684663,12669052227139074083,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
                                        2⤵
                                          PID:3572
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4064,i,7378092043073662811,8062606261319431083,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:8
                                          2⤵
                                            PID:2984
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,12028605879403366646,11085474053270166978,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
                                            2⤵
                                              PID:1616
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,5346840917858544533,11912794532500357927,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:8
                                              2⤵
                                                PID:4248
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3496,i,4842712868988753889,18267661211348989480,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
                                                2⤵
                                                  PID:3800
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=es --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,5118206971946656617,12153600979817777052,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:8
                                                  2⤵
                                                    PID:4516
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4268,i,15361145470535247312,1017022640988306906,2097152 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
                                                    2⤵
                                                      PID:2212
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,3268728307661287060,5904343407328374412,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
                                                      2⤵
                                                        PID:5000
                                                      • C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe
                                                        "C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe"
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Drops file in Program Files directory
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:2272
                                                        • C:\Program Files (x86)\BraveSoftware\Temp\GUM83D2.tmp\BraveUpdate.exe
                                                          "C:\Program Files (x86)\BraveSoftware\Temp\GUM83D2.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          PID:5396
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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
                                                            4⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                            PID:3824
                                                      • C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe
                                                        "C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe"
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Drops file in Program Files directory
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4772
                                                        • C:\Program Files (x86)\BraveSoftware\Temp\GUM83E2.tmp\BraveUpdate.exe
                                                          "C:\Program Files (x86)\BraveSoftware\Temp\GUM83E2.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
                                                          3⤵
                                                          • Event Triggered Execution: Image File Execution Options Injection
                                                          • Checks computer location settings
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Drops file in Program Files directory
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:5988
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies registry class
                                                            PID:5752
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies registry class
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5940
                                                            • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
                                                              "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Modifies registry class
                                                              PID:5884
                                                            • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
                                                              "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Modifies registry class
                                                              PID:5788
                                                            • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
                                                              "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Modifies registry class
                                                              PID:5428
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                            PID:5348
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{A8A406D5-4119-4ED7-90E9-F1509516EA4D}"
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of AdjustPrivilegeToken
                                                            PID:5652
                                                      • C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe
                                                        "C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe"
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Drops file in Program Files directory
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5000
                                                        • C:\Program Files (x86)\BraveSoftware\Temp\GUM83D3.tmp\BraveUpdate.exe
                                                          "C:\Program Files (x86)\BraveSoftware\Temp\GUM83D3.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          PID:5676
                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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
                                                            4⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                            PID:396
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,4632856698430796262,12736574072623761237,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:8
                                                        2⤵
                                                          PID:5932
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,245282400166498781,11895637003958820464,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:8
                                                          2⤵
                                                            PID:5876
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,15411285019229284458,14872517231352333300,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:8
                                                            2⤵
                                                              PID:5868
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2872,i,1918865484248163055,5595072647245136848,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
                                                              2⤵
                                                                PID:6492
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7308,i,12810168534479287795,17602034614755537965,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:8
                                                                2⤵
                                                                  PID:6776
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7180,i,15551868837837652599,15501684534280208613,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
                                                                  2⤵
                                                                    PID:7036
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7416,i,4870057737801540192,4858201027782267639,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:8
                                                                    2⤵
                                                                      PID:6636
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,11380507607672963909,8231981532418667569,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
                                                                      2⤵
                                                                        PID:7036
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2868,i,13900754403915993121,10868398514207600841,262144 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:8
                                                                        2⤵
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        PID:7104
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,6109370803005677162,5483617223379399540,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
                                                                        2⤵
                                                                          PID:3628
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7424,i,8953062481381858800,11397324820670661449,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:8
                                                                          2⤵
                                                                            PID:3864
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7488,i,16765401460232688226,14142444626854596510,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
                                                                            2⤵
                                                                              PID:5520
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,15757566638311072667,15841351278516604294,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
                                                                              2⤵
                                                                                PID:4512
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2514211383487349533,12769338517845553782,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:8
                                                                                2⤵
                                                                                  PID:6156
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7836,i,8560073351058640542,11520600252960349046,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:8
                                                                                  2⤵
                                                                                    PID:6756
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2627681894222682222,12968656825232920328,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:8
                                                                                    2⤵
                                                                                      PID:696
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1508,i,328954311568363914,12724128683289507225,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
                                                                                      2⤵
                                                                                        PID:5452
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,5857036978361129016,1997239320992527006,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
                                                                                        2⤵
                                                                                          PID:4836
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7608,i,6104635810541744931,14479346609774552659,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:8
                                                                                          2⤵
                                                                                            PID:1144
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,1810118741438009716,13533582767976665171,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:8
                                                                                            2⤵
                                                                                              PID:2276
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7456,i,9222865324117691784,1365728966208491860,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=8020 /prefetch:8
                                                                                              2⤵
                                                                                                PID:784
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8148,i,13285059606611834484,2574272987370665562,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:6608
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8116,i,17697460677852266905,11480392479983033491,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=8144 /prefetch:8
                                                                                                  2⤵
                                                                                                    PID:6328
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8104,i,11992289682773617656,12914496262869227282,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
                                                                                                    2⤵
                                                                                                      PID:3504
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8116,i,9991765516499340455,8817104472275072391,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=8156 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:6904
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,11791498156537179810,4157822637088477748,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
                                                                                                        2⤵
                                                                                                          PID:6404
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8020,i,16393321287582336312,5793452650629959718,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                                                                                                          2⤵
                                                                                                            PID:6760
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8004,i,10868190405725604511,1431924250897809813,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
                                                                                                            2⤵
                                                                                                              PID:6084
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,17108321707522769864,8537130474686875118,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:8
                                                                                                              2⤵
                                                                                                                PID:5888
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,15882858288708909698,9210115962475971830,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:5912
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7860,i,16214037711191921136,12945575781492261241,524288 --field-trial-handle=2280,i,4873240586485588928,15590483643293189322,262144 --variations-seed-version --mojo-platform-channel-handle=7904 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:2444
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                  1⤵
                                                                                                                    PID:3948
                                                                                                                  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • Loads dropped DLL
                                                                                                                    • Checks whether UAC is enabled
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:4648
                                                                                                                  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • Loads dropped DLL
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:5140
                                                                                                                  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • Loads dropped DLL
                                                                                                                    • Checks whether UAC is enabled
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:5264
                                                                                                                  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • Loads dropped DLL
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:5772
                                                                                                                    • C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\brave_installer-x64.exe
                                                                                                                      "C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\guiF152.tmp"
                                                                                                                      2⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Drops file in Program Files directory
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      PID:3544
                                                                                                                      • C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe
                                                                                                                        "C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\guiF152.tmp" --brave-referral-code="BRV040"
                                                                                                                        3⤵
                                                                                                                        • Boot or Logon Autostart Execution: Active Setup
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Drops file in Program Files directory
                                                                                                                        • Modifies registry class
                                                                                                                        PID:5920
                                                                                                                        • C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe
                                                                                                                          "C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=148.1.90.124 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff6a0b43a68,0x7ff6a0b43a74,0x7ff6a0b43a80
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:3796
                                                                                                                        • C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe
                                                                                                                          "C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\guiF152.tmp" --create-shortcuts=0 --install-level=1
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6228
                                                                                                                          • C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe
                                                                                                                            "C:\Program Files (x86)\BraveSoftware\Update\Install\{6DA3F386-BC9A-4E5B-8244-DCADCA5EF6B9}\CR_6FE9B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=148.1.90.124 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff6a0b43a68,0x7ff6a0b43a74,0x7ff6a0b43a80
                                                                                                                            5⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            PID:6244
                                                                                                                    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iOSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHBzOi8vdXBkYXRlcy1jZG4uYnJhdmVzb2Z0d2FyZS5jb20vYnVpbGQvQnJhdmUtUmVsZWFzZS9yZWxlYXNlL3dpbi8xNDguMS45MC4xMjQveDY0L2JyYXZlX2luc3RhbGxlci14NjQuZXhlIiBkb3dubG9hZGVkPSIxNDY4NTE5MjAiIHRvdGFsPSIxNDY4NTE5MjAiIGRvd25sb2FkX3RpbWVfbXM9IjE1NTMyIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3MDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIzNjgiIGRvd25sb2FkX3RpbWVfbXM9IjE3MTY0IiBkb3dubG9hZGVkPSIxNDY4NTE5MjAiIHRvdGFsPSIxNDY4NTE5MjAiIGluc3RhbGxfdGltZV9tcz0iMzUwMTUiLz48L2FwcD48L3JlcXVlc3Q-
                                                                                                                      2⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Loads dropped DLL
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      PID:7120
                                                                                                                  • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\elevation_service.exe
                                                                                                                    "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\elevation_service.exe"
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    PID:6352
                                                                                                                  • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
                                                                                                                    "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:7136
                                                                                                                    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
                                                                                                                      2⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Loads dropped DLL
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:7156
                                                                                                                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
                                                                                                                        3⤵
                                                                                                                        • Checks computer location settings
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Loads dropped DLL
                                                                                                                        • Drops file in Program Files directory
                                                                                                                        • Checks processor information in registry
                                                                                                                        • Enumerates system info in registry
                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                        PID:4232
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=148.1.90.124 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ff8e987fa00,0x7ff8e987fa0c,0x7ff8e987fa18
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:5180
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1868,i,6815426322186827991,14157505904787850141,262144 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1896 /prefetch:2
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:5924
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2216,i,12462681799738017635,2744953706010339841,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2232 /prefetch:3
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          • System Time Discovery
                                                                                                                          PID:5160
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2452,i,15411194761934743274,140556785868154278,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2456 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:5272
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3440,i,5889814938102605601,17868799318431715773,2097152 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3448 /prefetch:1
                                                                                                                          4⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6516
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3560,i,7666734226589323317,143126428344984377,2097152 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3656 /prefetch:1
                                                                                                                          4⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6576
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5384,i,18076252333579868225,11127305721895245008,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5328 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:3580
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,6654957500293273909,4694893780191919850,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5488 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6328
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,5364162165108755304,1760507345720464174,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5640 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:5668
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,2607085832934774207,6008300646919078155,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5780 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6860
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3884,i,3311744105401109887,853772299765530596,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=6028 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6908
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3880,i,15512562657086259580,12793744361301108750,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6064 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6884
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,9606115707675864643,3824567365620621922,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6328 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:456
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6332,i,9165998084691793609,8889532515514380126,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=6492 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:6336
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,1930112194936725824,14115887758632203542,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=6648 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:4724
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6656,i,17698799595558365428,12186506429397736272,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=6800 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:1588
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6928,i,2428272690525410496,9104459753498286791,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6952 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:1388
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6960,i,2577934073935127633,9801001893272012009,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=7104 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Loads dropped DLL
                                                                                                                          PID:5012
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Drops file in Program Files directory
                                                                                                                          PID:3172
                                                                                                                          • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe
                                                                                                                            "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=148.1.90.124 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7475d3a68,0x7ff7475d3a74,0x7ff7475d3a80
                                                                                                                            5⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Drops file in Program Files directory
                                                                                                                            PID:3568
                                                                                                                          • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe
                                                                                                                            "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
                                                                                                                            5⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                            PID:4768
                                                                                                                            • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe
                                                                                                                              "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=148.1.90.124 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7475d3a68,0x7ff7475d3a74,0x7ff7475d3a80
                                                                                                                              6⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              PID:6324
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,3281226724357538297,6047026654994991761,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6720 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6432
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,6146016182443975979,4033009738553808277,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6072 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6312
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5388,i,17618773832948707464,4778980763028831820,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6344 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6988
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,9851548306575670559,7471161114113324806,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6324 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6876
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6464,i,4445313607384488601,9270529982444735989,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6952 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6784
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6956,i,13273223714828452600,17518842184367786032,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6916 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6068
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3876,i,9899408592745906008,12767019401708411528,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7204 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:7160
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6920,i,13783826446686298628,16014352133040750137,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6204 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6176
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2208,i,2247225174020699811,3067806730179316341,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5464 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:1364
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7208,i,5768719812577310584,12832711548009665597,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6164 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:3296
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7136,i,6604414805597087292,13019117439566432158,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=4892 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:436
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6928,i,16339052055400897812,10644769591865692580,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6200 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:408
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6664,i,4250982766396482699,326360801336074743,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=5328 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:5372
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7052,i,7946492637265627666,9112462821696331399,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=6052 /prefetch:8
                                                                                                                          4⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:6200
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6472,i,13285606862345783456,5026441089699964540,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=3884 /prefetch:8
                                                                                                                          4⤵
                                                                                                                            PID:6904
                                                                                                                          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,6368747226243537287,10030627498731498425,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=3856 /prefetch:8
                                                                                                                            4⤵
                                                                                                                              PID:6180
                                                                                                                            • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                              "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5328,i,1668853962756065641,15913578458197344640,262144 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=724 /prefetch:8
                                                                                                                              4⤵
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:2576
                                                                                                                            • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                                                                                                                              "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6164,i,12186157357107793486,235963153161631404,524288 --field-trial-handle=1900,i,15501928859642968861,11966445210318539810,262144 --variations-seed-version=main@be1bb88ba76667195959c6388f378f4338a5986d --pseudonymization-salt-handle=1904,i,2179011362946681323,5930443250082187303,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=5408 /prefetch:8
                                                                                                                              4⤵
                                                                                                                                PID:5568
                                                                                                                        • C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\elevation_service.exe
                                                                                                                          "C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\elevation_service.exe"
                                                                                                                          1⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:5564
                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                          1⤵
                                                                                                                            PID:6288
                                                                                                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /c
                                                                                                                            1⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:6940
                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /cr
                                                                                                                              2⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:4808
                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe"
                                                                                                                              2⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:6428
                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe"
                                                                                                                              2⤵
                                                                                                                                PID:756
                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource scheduler
                                                                                                                              1⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:7152
                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
                                                                                                                              1⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:3580

                                                                                                                            Network

                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                  Replay Monitor

                                                                                                                                  Loading Replay Monitor...

                                                                                                                                  Downloads

                                                                                                                                  BraveUpdate.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM83D2.tmp\BraveUpdate.exe
                                                                                                                                  • Size 163KB
                                                                                                                                  • SHA256 e815d0bf80f13ad4aca0d25d3634e95f6906671558a2fbfa71237542181ec0d5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdate.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM83D2.tmp\goopdate.dll
                                                                                                                                  • Size 1.0MB
                                                                                                                                  • SHA256 0b94afd45fa47e936b87c1403c7a45ffafc063f4f3c079d6e961c5dea6fbbc44
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_es.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM83D3.tmp\goopdateres_es.dll
                                                                                                                                  • Size 45KB
                                                                                                                                  • SHA256 b65901c81137817f3db451ca9ef450dd8a5660f0dd50ee9b5bfd5e425ad35cd3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveUpdateCore.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM83E2.tmp\BraveUpdateCore.exe
                                                                                                                                  • Size 195KB
                                                                                                                                  • SHA256 c28e1ddb30f1b958e3ec526e4dc1749de5b9880c01cf8f51a2301b380937f242
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveCrashHandler.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
                                                                                                                                  • Size 270KB
                                                                                                                                  • SHA256 320e46cfb7abdc0fede4e702ae6e018edcb42b48c144be0b82221b10b86b8d9d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveCrashHandler64.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
                                                                                                                                  • Size 355KB
                                                                                                                                  • SHA256 f7b32468dc47bf6e99bd3dd3a0ab6dd1cbfb94d71f43f882f6ba3a2d3bbffbe2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveCrashHandlerArm64.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandlerArm64.exe
                                                                                                                                  • Size 353KB
                                                                                                                                  • SHA256 282914e3c3bdd3313b27394c93eb6dd68c672d662a8f5f68365b2ee45f0b7b29
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveUpdateBroker.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateBroker.exe
                                                                                                                                  • Size 103KB
                                                                                                                                  • SHA256 e68b76a042eb8c2dfa2acbde911d7249421baaa58c4128c2a732a81ec616f1a3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveUpdateComRegisterShell64.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
                                                                                                                                  • Size 170KB
                                                                                                                                  • SHA256 dcfd2d1cca9fc14206ab54d12d0f1f4865b86ca205ffae83e0687757251d5f8b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveUpdateComRegisterShellArm64.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShellArm64.exe
                                                                                                                                  • Size 154KB
                                                                                                                                  • SHA256 d1b32e8ac39958749283906fb29ee6a87a77d101f705284927955f08f45f3f39
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  BraveUpdateOnDemand.exe

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
                                                                                                                                  • Size 103KB
                                                                                                                                  • SHA256 948bd4d9381ec299de010ab16819bca50963efaa26fc428fcec992763768f73c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_am.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_am.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 a1a045c2f8b86536449c86dc1d0ca85471e270f603168b277a5e0bf424b6d0a2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ar.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ar.dll
                                                                                                                                  • Size 41KB
                                                                                                                                  • SHA256 7efda1c2aef28b69dbb7826032737f642a3af33a43f8a249c5ed845a50de4618
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_bg.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_bg.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 6571cb39c767f37d96e54cf93c498a7f4815ea6c510addef0d2d82ba3e226d65
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_bn.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_bn.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 265b949820cbd800cf10347b74e91fc8b18aed4a1b6ded6f5ba9fd546332562c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ca.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ca.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 3e837d83d3586802938e84abe159c878e923c6a88313e124f7be45b892577663
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_cs.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_cs.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 e5b34a557c75faa4808d823027f21fdbee3c29b14744b743c3fb535b8f2ba9e8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_da.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_da.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 0f53ffafae4cafbf5dc9a24de3a9238719ae325689fd153969fdf073d83c87e7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_de.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_de.dll
                                                                                                                                  • Size 45KB
                                                                                                                                  • SHA256 c12998e00bf9a127801d585f7bb0368cb2bf12e4af9c1ba1ee5005d4917275f7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_el.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_el.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 270b44247659eac4ad19a1c325dae2139016326f33ccf6205a9a73689824f192
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_en-GB.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_en-GB.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 95871da9a8bd914286844c1273fedb34da4b94fd947d87419133ab19752a220d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_en.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_en.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 552b282ca7b3a1d27003dc3a35d5501f65e4693913744fe5a57489143622257a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_es-419.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_es-419.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 7bcfa71f78437acfd8ccc5c92f119c3f163fe02d7b29ed33e05e0199db7f7c62
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_et.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_et.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 7271ddfd917beb7a45b7ba3b0d68a2e5f25b153e4db4704a15a51c5e89951ae1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_fa.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fa.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 947d2f99600f1a6f8d7d35abc00cdc0d006c423ce7f230edbac70e0bf07fc7fc
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_fi.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fi.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 aad440a632ba4ba25acad3299ea44083841e6ec5e779ae607f2863be9098463a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_fil.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fil.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 553d9b42ec5ac83202f188f85f3082904ba59f1b848c213e410ebd23e155e8f3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_fr.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fr.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 e42d07cc5a9f7f6c392463612e758a6c38cd5db79d7f6775975bbc177fff4a5a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_gu.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_gu.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 18a2a3a9e77b187420722de7325ee9361b8af48c8e82e39739dced1ed1f3cd91
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_hi.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hi.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 7bbefbf11430c767c140cf3437fa1af702577969bfe60b1b90d1e031827b69a0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_hr.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hr.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 4450b6cc210d532e6ca90eae1ffdc69b170ba8443c21a3486fdf596955266798
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_hu.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hu.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 0dbb85f8f7ccc3bb7c139ff6ed0d3cdc211494ff8900d9f789d2c168430a71df
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_id.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_id.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 2263aa92b5873ede7abed95489723e161bf90eb4ee224dec09700cfe1af3f6a1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_is.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_is.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 090372d2fc9e4a7cb79456c259e4c2f9a3479022b2e3e3d7ab0753426894a2bb
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_it.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_it.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 4f2b108c8a046d5e197af2f490b453869b6191e7d2c96b08d1aeea3da67d1806
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_iw.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_iw.dll
                                                                                                                                  • Size 40KB
                                                                                                                                  • SHA256 c56d41e1c9347e29cc16f45227fb56049952ee7da311af0bb2579dcb48fc0b4c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ja.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ja.dll
                                                                                                                                  • Size 39KB
                                                                                                                                  • SHA256 f07cb69684caccf618a36e9cb1dc442efaafc4ec85c81994c01fc63da1c40e96
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_kn.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_kn.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 66f094238550de25686cc750d98c47830ccf0559d8dcb29fe7ee6b9c25945596
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ko.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ko.dll
                                                                                                                                  • Size 39KB
                                                                                                                                  • SHA256 3683d51ac7cc8cd777eafbab2f5675595acf505ea9b605bf93047d5a97b74df8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_lt.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lt.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 902a3fb679e913cac822520aa2e00be362dd540a7bb7a5c6dc9783460f9b957a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_lv.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lv.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 e6d74044f255c8703e99e51f8c45c3ee0b8212a25b55fcba45708caab987f6c8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ml.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ml.dll
                                                                                                                                  • Size 46KB
                                                                                                                                  • SHA256 b084a44eb505c18e36019c8c4e2c31f04e6e685cc6e9406d5aa455379effbc32
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_mr.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_mr.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 c33a9edfce5f940c6a6203df87d3c227434e97bbe4b29f55a57021c1b6a90e96
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ms.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ms.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 6aee44c92fcd6838211ad0eb0c965a66640d2182b1e244708103e286c70f9837
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_nl.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_nl.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 23c5cae801f6d2b17036152718ef08ed43c2ed91eb993467236bbba54c76139e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_no.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_no.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 4ccd4b64761c87d4ab2abf406c05582c0a300b60d18886dc0bf7bbe936e418a7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_pl.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_pl.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 9f5d9a290dd951af64fa8e209bc669bdc41c0c12edcafb25cf59c08315da86e0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_pt-BR.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_pt-BR.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 2850fa9e32a609b0940373ecc24b5955e30218dee02623204003d3360c697e3f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_pt-PT.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_pt-PT.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 49d5f867b4776c0f8d31e60049483a8f9f46b729971f7b3611e84a8f77b6ea7c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ro.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ro.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 a2a7ec0bdc5d3acd40f71f34c7989c4e76c90ee4bc2de113f530e064c27cb654
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ru.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ru.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 72369ef0fd5ed0fc5ea0980a6ff7c001bcb86eee9ff2e0b4489949156c075128
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_sk.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sk.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 f8976149b65cf64ec86270b0b41a747713460486f2400a6bc0af6b5b390ffb86
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_sl.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sl.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 c05008652c1ea0f818c6cf2554db4c518881dcc317fd051eb9d1ec2267ffcd14
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_sr.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sr.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 9e89dda0d70012bdf6037513f624908aa204f6cf883fdcf18499a88849b47f72
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_sv.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sv.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 05ee6d95fae01a35c7b12747eff2f5434521d000fbb4f0d5c184d76a9699d811
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_sw.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sw.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 9d7de676a56af9b4357484c307d4086a6c16f1764bd1d8d1c858f2bc31d183c1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ta.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ta.dll
                                                                                                                                  • Size 45KB
                                                                                                                                  • SHA256 66f41d75158bb768852c555c84cfd8cf8dca9e9813f11b91a177da2ca81d9fb9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_te.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_te.dll
                                                                                                                                  • Size 44KB
                                                                                                                                  • SHA256 776d71990d06563739410d1e6035144cd1680e05ee97d395fb48afca658caa99
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_th.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_th.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 e7de853055a5f887b7da1b90de58193fbcae8435c0e6ed418b4b394ecd9c0b53
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_tr.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_tr.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 93e724613680aa3bdbe8fe8407f35a4601a0d7d160807bc572eeaa3edf63cfa7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_uk.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_uk.dll
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 2e5121c919b0625f486409baea4115abd268712b271212fb3f110fac4dad9585
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_ur.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ur.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 c433aea78884d2d780f3c75bd7ace1ccc00aa8077416757ea9eb64f5bb106396
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_vi.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_vi.dll
                                                                                                                                  • Size 42KB
                                                                                                                                  • SHA256 15f62ec43235cf45d78f4cda5a5f4f5484b03907097b381d7f15a581809bd1e5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_zh-CN.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_zh-CN.dll
                                                                                                                                  • Size 37KB
                                                                                                                                  • SHA256 63e212a06d823b003994280521e4e183f5a13b6c5d3285be2459cfed012715d5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  goopdateres_zh-TW.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_zh-TW.dll
                                                                                                                                  • Size 37KB
                                                                                                                                  • SHA256 50ca4441ada17e7e8dfa86b10a45f9a8afdddf0adec9e24a4ac5d860298bc817
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psmachine.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine.dll
                                                                                                                                  • Size 250KB
                                                                                                                                  • SHA256 7396dc01c313c47902f0434d1408805ed6a6c6e22008189e04c5cf70fc0848d1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psmachine_64.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine_64.dll
                                                                                                                                  • Size 318KB
                                                                                                                                  • SHA256 1ed199095f7d4e915e461513799eb19793780ecc9c342ff83ce35d12ba70e570
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psmachine_arm64.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine_arm64.dll
                                                                                                                                  • Size 308KB
                                                                                                                                  • SHA256 e97aebdd5bf37c1cf17b9aa56d73c67b7253c38607b7e83d8bd62c4a4c12718a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psuser.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser.dll
                                                                                                                                  • Size 250KB
                                                                                                                                  • SHA256 30bcf20cdeab57bd6e56f9f3528273257c9cbe9251f569874f7503beb2bd987c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psuser_64.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser_64.dll
                                                                                                                                  • Size 318KB
                                                                                                                                  • SHA256 9cdb03c5a83816fddccd3d581f0751cc014964f1010d48ec7d3f1103537f599d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  psuser_arm64.dll

                                                                                                                                  • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser_arm64.dll
                                                                                                                                  • Size 308KB
                                                                                                                                  • SHA256 c105bebf6c3681e0dc4937f2e7dfd332eba948440f08b9a042db00a80cd59dc1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1037032468\manifest.json
                                                                                                                                  • Size 86B
                                                                                                                                  • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1135195379\manifest.json
                                                                                                                                  • Size 587B
                                                                                                                                  • SHA256 ff1a0d8ab54db9efd5e08045951e576458c988afc46cbf8f7eb697f8068011b5
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1308922940\manifest.json
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1496183237\manifest.json
                                                                                                                                  • Size 592B
                                                                                                                                  • SHA256 eb5b18f8b3d9cb317ad9f9151da5663768edf0f8dcfa9581e83abd3f7f9242df
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1662675578\manifest.json
                                                                                                                                  • Size 558B
                                                                                                                                  • SHA256 cf6c7214919b0c6e519989af1f53fe30ed05867f2f907753add3a3393b6273b8
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_1755783033\manifest.json
                                                                                                                                  • Size 202B
                                                                                                                                  • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_179604947\manifest.json
                                                                                                                                  • Size 533B
                                                                                                                                  • SHA256 a8d21ada0eab056b184257778876267ac5ff74ec27fe801ec2eff0f8ae945433
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_2089541369\manifest.json
                                                                                                                                  • Size 534B
                                                                                                                                  • SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_323968665\manifest.json
                                                                                                                                  • Size 106B
                                                                                                                                  • SHA256 4d50a8b58553ce3733682c777164ce8fa3cf29d13dd0b9eb12e14b3a73d8e4c4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_351746666\manifest.json
                                                                                                                                  • Size 564B
                                                                                                                                  • SHA256 842d3ce75bc872d61aaf4861c917445b87ff5ac1be3ec7b1ef2bc3156c148ed6
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_358297425\manifest.json
                                                                                                                                  • Size 591B
                                                                                                                                  • SHA256 3aa0184cdcde13574bde5f2d6edeaaabb3698d87618fec5d59471b4a8d5ff96a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_363817844\manifest.json
                                                                                                                                  • Size 73B
                                                                                                                                  • SHA256 2f73f1b7c9b45f7e9c7aa8c47957312ee8490b8b9a0fd5ecc36374cbfe282378
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  821af8ca-b271-4c00-8e59-c2623615ed63.png

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\4350965e-c5d7-4b7d-866f-8822eb981f2a\821af8ca-b271-4c00-8e59-c2623615ed63.png
                                                                                                                                  • Size 26KB
                                                                                                                                  • SHA256 dd4731bf5b8136f4a5e2aa290921ddf54452b275df24cdce411dfae8c61cf072
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  campaigns.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\campaigns.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 8e7bd5f736c42db74b75a57928d1a421f01f874226abfe97b3052861f6d519c7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  f78e8f05-7908-43fe-9b29-166b723f982f.jpg

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\d751fdd0-fbb5-43d4-9b70-e7da60a89dd1\f78e8f05-7908-43fe-9b29-166b723f982f.jpg
                                                                                                                                  • Size 294KB
                                                                                                                                  • SHA256 7d49f0a86b059164cfd7d041fa8deb500ab8a917fd0cfc16a75a38fb632d429a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  dc29dc0a-d4d0-4d59-99ea-3951e5740837.jpg

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\fd23e6b0-4d92-4d2f-853b-fdb6d1063ce2\dc29dc0a-d4d0-4d59-99ea-3951e5740837.jpg
                                                                                                                                  • Size 298KB
                                                                                                                                  • SHA256 c229bdfd072f40456b94fe24304615b83205375fee797694d17bc8eb89f7d449
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\manifest.json
                                                                                                                                  • Size 546B
                                                                                                                                  • SHA256 d3a6817b3d8e069a22a599fe5808d9b7e1271ed387687bb5243a6a93101ae8ce
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  photo.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_448445140\photo.json
                                                                                                                                  • Size 50B
                                                                                                                                  • SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_456410359\manifest.json
                                                                                                                                  • Size 594B
                                                                                                                                  • SHA256 69ea759be0969cfc6b8dbcf0475aab6153623ddcfc81991cd4493264234c93f0
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  hyph-as.hyb

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_459011855\hyph-as.hyb
                                                                                                                                  • Size 703B
                                                                                                                                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  hyph-hi.hyb

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_459011855\hyph-hi.hyb
                                                                                                                                  • Size 687B
                                                                                                                                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  hyph-nb.hyb

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_459011855\hyph-nb.hyb
                                                                                                                                  • Size 141KB
                                                                                                                                  • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_459011855\manifest.json
                                                                                                                                  • Size 82B
                                                                                                                                  • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_597388981\manifest.json
                                                                                                                                  • Size 108B
                                                                                                                                  • SHA256 5526fd89d40c5d403d74e2c080dd26f851e1c9f764381578354ea33455bb05eb
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_692365160\manifest.json
                                                                                                                                  • Size 76B
                                                                                                                                  • SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_706707577\manifest.json
                                                                                                                                  • Size 512B
                                                                                                                                  • SHA256 a13457c0eb24e79b34f47a13a4e59a2f727433fe6a9a7e69a2a924754c53034f
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_738316566\manifest.json
                                                                                                                                  • Size 584B
                                                                                                                                  • SHA256 a8440cf3ecf91877dce6a5cf0e7e6c8f78e316f82af438cb4d51966e7ac275af
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  3a23505b-ddbd-4012-b4ff-edb8ddd17501.jpg

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_868699497\4350965e-c5d7-4b7d-866f-8822eb981f2a\3a23505b-ddbd-4012-b4ff-edb8ddd17501.jpg
                                                                                                                                  • Size 306KB
                                                                                                                                  • SHA256 6484fed14a2801682585fef95f13803429d12b64e84017940915eb32109da1bb
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_868699497\manifest.json
                                                                                                                                  • Size 546B
                                                                                                                                  • SHA256 82086bafee548d15f4e4703a5d8b82602991a5d5beaf529791e61dc123a465d2
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_893638301\manifest.json
                                                                                                                                  • Size 589B
                                                                                                                                  • SHA256 daf190bb9b10543f850c33f490e2c6aa331e5cba353398b4d9cef1b33869c126
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_96394898\manifest.json
                                                                                                                                  • Size 69B
                                                                                                                                  • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping4232_974390270\manifest.json
                                                                                                                                  • Size 94B
                                                                                                                                  • SHA256 49fe7ccccd53441367c948f115d4d74c9e659f42683ccf25aebd717946ff03a0
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  setup.exe

                                                                                                                                  • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\148.1.90.124\Installer\setup.exe
                                                                                                                                  • Size 5.9MB
                                                                                                                                  • SHA256 f8d68b2257680aa78438a080d9da827739b7694874445ad8c2edc1ce284eaef8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  es-ES-3-0.bdic

                                                                                                                                  • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\Dictionaries\es-ES-3-0.bdic
                                                                                                                                  • Size 766KB
                                                                                                                                  • SHA256 e6334dcf080aaeca679db70565762a2c296ff5780c1af263530ac7345736bfa9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  messages.json

                                                                                                                                  • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source5920_224725115\Chrome-bin\148.1.90.124\resources\brave_extension\_locales\sr\messages.json
                                                                                                                                  • Size 9KB
                                                                                                                                  • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1119073109\manifest.json
                                                                                                                                  • Size 238B
                                                                                                                                  • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1166361890\manifest.json
                                                                                                                                  • Size 79B
                                                                                                                                  • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1252509583\manifest.json
                                                                                                                                  • Size 69B
                                                                                                                                  • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1360717842\manifest.json
                                                                                                                                  • Size 160B
                                                                                                                                  • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1377956480\manifest.json
                                                                                                                                  • Size 113B
                                                                                                                                  • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1681063869\manifest.json
                                                                                                                                  • Size 43B
                                                                                                                                  • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1982061249\manifest.json
                                                                                                                                  • Size 102B
                                                                                                                                  • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1983858854\manifest.json
                                                                                                                                  • Size 119B
                                                                                                                                  • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_1998521306\manifest.json
                                                                                                                                  • Size 52B
                                                                                                                                  • SHA256 98fd5d8bd64136534587ef4cd3f9151defa2a6dae9f0b269a2cbb06433c50336
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Staging

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_2084306129\Sigma\Staging
                                                                                                                                  • Size 36B
                                                                                                                                  • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_2084306129\manifest.json
                                                                                                                                  • Size 132B
                                                                                                                                  • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_284770395\manifest.json
                                                                                                                                  • Size 135B
                                                                                                                                  • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_51393571\manifest.json
                                                                                                                                  • Size 177B
                                                                                                                                  • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_537204650\manifest.json
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_604278110\manifest.json
                                                                                                                                  • Size 160B
                                                                                                                                  • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_638856059\manifest.json
                                                                                                                                  • Size 76B
                                                                                                                                  • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LICENSE

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_672210005\LICENSE
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_672210005\manifest.json
                                                                                                                                  • Size 85B
                                                                                                                                  • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_783968377\manifest.json
                                                                                                                                  • Size 165B
                                                                                                                                  • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_795394510\manifest.json
                                                                                                                                  • Size 118B
                                                                                                                                  • SHA256 3c286bc18a9899fc2b55d3c55cd8331e6c64b853519149d854d42958b8209b87
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_858586700\manifest.json
                                                                                                                                  • Size 135B
                                                                                                                                  • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4996_880904643\manifest.json
                                                                                                                                  • Size 141B
                                                                                                                                  • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  crl-set

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\10547\crl-set
                                                                                                                                  • Size 1.3MB
                                                                                                                                  • SHA256 b78277f8f8dcd405ffdd7f3627775b898e7e7a7ee61f1128648f7296fcf427be
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  settings.dat

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 40B
                                                                                                                                  • SHA256 795c99689b13f99008d06b8d9020371f102c93c5fee787ed397a1aa3049de8e1
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Preload Data

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2026.5.25.61\Preload Data
                                                                                                                                  • Size 235KB
                                                                                                                                  • SHA256 dbb461c5b7b4f15d78726cb7df9b62ce5294fa929368bf45a8309d12381b31a2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  555c8b15-f221-4c5b-9a11-63ae492cf722.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\555c8b15-f221-4c5b-9a11-63ae492cf722.tmp
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 bc69bc608a2453e826645d8be36d7053fd72acb1f0b7eb269e247f407cde15c7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  66567ca3-e306-44d6-aeba-a3e4ec0228a2.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\66567ca3-e306-44d6-aeba-a3e4ec0228a2.tmp
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 c32090233baefbe1171f52bcebc2f40466839af19298dfc8e84650329b78b86f
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  8a2c184f-da0c-4279-af6f-72adea8f88f0.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\8a2c184f-da0c-4279-af6f-72adea8f88f0.tmp
                                                                                                                                  • Size 165KB
                                                                                                                                  • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  000001.dbtmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Scripts\000001.dbtmp
                                                                                                                                  • Size 16B
                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  MANIFEST-000001

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Scripts\MANIFEST-000001
                                                                                                                                  • Size 41B
                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 e03e2403711434c2f9e602691e54172c239bf0d98b5fa100cc54e72e8279463a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 750B
                                                                                                                                  • SHA256 5b3d48fed84b0c4a98055478b3f35e0d535e3225da159ac5ced007d375bd82f7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 dab20fe96baf2fe20a23938d7482c5e95ade99503fdcc1f791fec4733706cac6
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  c8498805-0fb3-4a50-ae08-c7fd401af7c8.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\c8498805-0fb3-4a50-ae08-c7fd401af7c8.tmp
                                                                                                                                  • Size 59B
                                                                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 2918949e89ac39bc0c0e3cb13ff7ab3563d5cb924d78a75419d19b235f3a12d1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
                                                                                                                                  • Size 20KB
                                                                                                                                  • SHA256 a90dd6c213aff7c3e0a8c99c7ab9e3ba35db294f310ce3d47facc7c8774a874f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  download_file_types.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
                                                                                                                                  • Size 7KB
                                                                                                                                  • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  data_0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_0
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                  data_1

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_1
                                                                                                                                  • Size 264KB
                                                                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                  data_2

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                  data_3

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_3
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 54KB
                                                                                                                                  • SHA256 89fd020d757e87e7fa4b5143871b5e996b70ce139abae108e7e05c17a5680be4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 88KB
                                                                                                                                  • SHA256 5e46d281b511f7af26356cd5fca90ecd3f3d215251cb4cd16d0e4d2050fd7a09
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 53KB
                                                                                                                                  • SHA256 a1713179400dd059515a30eda3e35285ca4ceac7120aca17cfbbc89346e397e8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 88KB
                                                                                                                                  • SHA256 51afa3768d97e1db35cdf8fcdf4bdfeac09cda823e4cfd1273e625676de2ce11
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 85KB
                                                                                                                                  • SHA256 ccffdfea7612731a293f8fe208924c259ee1ed7837822ad9b7fdb70535988070
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 44f7a72aa16acaec4d3c6c24f175906370abb595932b6beae2347b524f6621da
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 96KB
                                                                                                                                  • SHA256 52797f6ceea42632a50a9d9a48b30d8692c6d9ed9872c27c3a8f293f46403238
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 99KB
                                                                                                                                  • SHA256 e9513515f4bd153c74b2cb07e82df78dc4ad613b935a45735ec0d49c4d2b70d7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 89KB
                                                                                                                                  • SHA256 22981e244757a99452f3b44d7d30252a30ec02226a807b068f56f020c06583b3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 95KB
                                                                                                                                  • SHA256 1e930897351a35660fed9daedfb65a1c8f7490ed2d435d95acc1317a52f7ff8b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 99KB
                                                                                                                                  • SHA256 38597f74aec25b2fc4e9a7345ec794fbd7a6309cf0545b2f31e4640db1ba5628
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 62KB
                                                                                                                                  • SHA256 50614769f35665df60d554183b9fbfeaceb71c2910e6d58655d9c471aeccae3f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 62KB
                                                                                                                                  • SHA256 975e52929e75be97b25a95353630a26a02d683bb0596725e344baf6fbe4fb4fd
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 85KB
                                                                                                                                  • SHA256 00e6cb9203ad278b8f1d386b295a3b157bca9f30dd2660eeeb67f7da423a4606
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 88KB
                                                                                                                                  • SHA256 c02f052928bc42e64a60f451510a82bcc4e21f77e3a196b178303b855f0b3953
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 39070bf826affadac76eb4c75178c987083c80dc25f5bf1609fccb688137e310
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 68KB
                                                                                                                                  • SHA256 e95fe4dacc65c2783104ddb1b58d5c46cc26a4d26dc6afd8af7c8957b6683ca2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 5fe2a7b752f666a0f3fa89d6a507cad54212ccbe8c78c115174a985d73d68b2e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 53146ea57ac830c1b24374aeeb4bcb78f3ced9e253bdc5ab58279c45a3f1087d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 70c7b291305391aa847e01de1c1afcd46c1ff125170202142688e4a53f30a252
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 65KB
                                                                                                                                  • SHA256 ca008ae0b411acfece6b4531a22fa595eeaa3b406833c5efc1559d3769049ce4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 89KB
                                                                                                                                  • SHA256 00c768327a758055c22254f82bdb00fd464dc79710decc9368f1dac8c294b499
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 fa0420f8baf4420d3e227f9a708af1c4404639e056bf1982fac8127ece23e401
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 89KB
                                                                                                                                  • SHA256 79644290bf6d2b4edaeb536de5ebff934dd9d224c371f584837afe8a4a5d6e1b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                  • Size 99KB
                                                                                                                                  • SHA256 b7cf5438ff89a3b433d2e6694a5276c088a480eaa2ba52c244b7a43007bd3ee9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  preloaded_data.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\MEIPreload\1.1.0.3\preloaded_data.pb
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  cr_es_500000_index.bin

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\OnDeviceHeadSuggestModel\20251024.824731831.14\cr_es_500000_index.bin
                                                                                                                                  • Size 7.6MB
                                                                                                                                  • SHA256 98d7a41a936a6afe66286192d6eb115531afeb4a496fde9aa0b275c79aa33411
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  p3a_manifest.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig\1.0.5\p3a_manifest.json
                                                                                                                                  • Size 437B
                                                                                                                                  • SHA256 9f5f196db1a077339eb8c5eaec285bbf2d8645ff890985a808b3208ef5cb5ccf
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  crs.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1679\crs.pb
                                                                                                                                  • Size 301KB
                                                                                                                                  • SHA256 4cbe183aa5a2d385236b09a65adcda811c010116c6aecaf76c64e4ccc17d29f7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ct_config.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1679\ct_config.pb
                                                                                                                                  • Size 54KB
                                                                                                                                  • SHA256 d6f2937dc61d580d00f12e609c1cbd9e1cd6d9d9e29254fde076d9d18fdc5bc6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  kp_pinslist.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1679\kp_pinslist.pb
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 53e47b8e447f9ab234287a304a2ae3226fed3f8445f5f996ceed3a31e5f3dec2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ssl_error_assistant.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  safety_tips.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SafetyTips\3091\safety_tips.pb
                                                                                                                                  • Size 180KB
                                                                                                                                  • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ranked_dicts

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\ZxcvbnData\3\ranked_dicts
                                                                                                                                  • Size 865KB
                                                                                                                                  • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.459\list.txt
                                                                                                                                  • Size 260KB
                                                                                                                                  • SHA256 8d8ed8baadf8c6719c84b3747479b05ea57a68144423923563e62f52ee543563
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  clean-urls-permissions.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1442\1\clean-urls-permissions.json
                                                                                                                                  • Size 302B
                                                                                                                                  • SHA256 58438a458b6170dd2a6010993b9b3215a55f187f87f7dbbc5594247ccc222b18
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  clean-urls.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1442\1\clean-urls.json
                                                                                                                                  • Size 28KB
                                                                                                                                  • SHA256 032a4f618222013ae796f2b7943d77c8076dadbb49dd284262431580d68092ca
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  debounce.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1442\1\debounce.json
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 e5924b59ce1a3c3fec47e8dd9f9a6e38a43c8f05a8777767069085716c670dc4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  https-upgrade-exceptions-list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1442\1\https-upgrade-exceptions-list.txt
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 ec12bca633a18d9d3aed6d3e54a7da678f3d70e84e9bedd911e968fa912ad58c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  webcompat-exceptions.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1442\1\webcompat-exceptions.json
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 6f71751c9eaad41b07bed15698d352b3970f6a0d1a5fce30fc3ea19c618e8373
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  photo.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.23\photo.json
                                                                                                                                  • Size 9KB
                                                                                                                                  • SHA256 689aa08ae49301ce41043037f8c83ba1c18bf21f757a3dcf44f5cf52822959dd
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  b8babcf9-636a-43f8-a93e-771d3a39481a.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\b8babcf9-636a-43f8-a93e-771d3a39481a.tmp
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 ed7cf99c7b4b85df5310b695e9b3bfb79846b9d6caff585123b876ed1ff02fb1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16857\list.txt
                                                                                                                                  • Size 47KB
                                                                                                                                  • SHA256 196afd85113cc0d64eb9b3166005d6e7e6c7416f8c97ebcdb334714992a31c1f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19667\list.txt
                                                                                                                                  • Size 1.5MB
                                                                                                                                  • SHA256 dea35e8da6895e5608dae751be1e310ff8907436ed9d882662809fcc755e478b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  resources.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cmdlemldhabgmejfognbhdejendfeikd\1.0.110\resources.json
                                                                                                                                  • Size 151B
                                                                                                                                  • SHA256 c8bd3316903d4bef02c7dd68513b83e7efd1ba41ec71d12610778c0c211d5200
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  00b139e3c090b314d554224b8bfba18c7f6d29677be3584802c3ec53ee9edc8f

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\00b139e3c090b314d554224b8bfba18c7f6d29677be3584802c3ec53ee9edc8f
                                                                                                                                  • Size 1.3MB
                                                                                                                                  • SHA256 00b139e3c090b314d554224b8bfba18c7f6d29677be3584802c3ec53ee9edc8f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
                                                                                                                                  • Size 17.8MB
                                                                                                                                  • SHA256 00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  0d97a8f37fa4fbc85364013328a44ded9ff240f5fd62575abba5e2f4a27de9f5

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\0d97a8f37fa4fbc85364013328a44ded9ff240f5fd62575abba5e2f4a27de9f5
                                                                                                                                  • Size 87KB
                                                                                                                                  • SHA256 0d97a8f37fa4fbc85364013328a44ded9ff240f5fd62575abba5e2f4a27de9f5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  239f8c4c182528bff1593dd3a9882d255ee322a36d8dadfa05674f42258557df

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\239f8c4c182528bff1593dd3a9882d255ee322a36d8dadfa05674f42258557df
                                                                                                                                  • Size 239KB
                                                                                                                                  • SHA256 239f8c4c182528bff1593dd3a9882d255ee322a36d8dadfa05674f42258557df
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                                  • Size 11KB
                                                                                                                                  • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  2c64e44264890b42b6c89341bcc02617275792a00ebc6ce5fc922168c46ba0ca

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2c64e44264890b42b6c89341bcc02617275792a00ebc6ce5fc922168c46ba0ca
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 2c64e44264890b42b6c89341bcc02617275792a00ebc6ce5fc922168c46ba0ca
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  30a54974-7aa7-4571-939c-b956840a011c.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\30a54974-7aa7-4571-939c-b956840a011c.tmp
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 12c73da26b6e0b6d49f0beaecedc48d06bba9320da53b2419c27b45d740c5b64
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  30a8f5e900a6cf8695270cff11fcc3491e220b8a65daa5d82dfc9e98ece38689

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\30a8f5e900a6cf8695270cff11fcc3491e220b8a65daa5d82dfc9e98ece38689
                                                                                                                                  • Size 471KB
                                                                                                                                  • SHA256 30a8f5e900a6cf8695270cff11fcc3491e220b8a65daa5d82dfc9e98ece38689
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  3587a5d00bf55d189585fd600dde7dcac43e655d901182fc954feb5a07fdede5

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3587a5d00bf55d189585fd600dde7dcac43e655d901182fc954feb5a07fdede5
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 3587a5d00bf55d189585fd600dde7dcac43e655d901182fc954feb5a07fdede5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  36c594c9b1ef452f5287d816b5f324047e75ee8acc4676bc0ecf8ba44d4b1c48

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\36c594c9b1ef452f5287d816b5f324047e75ee8acc4676bc0ecf8ba44d4b1c48
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 36c594c9b1ef452f5287d816b5f324047e75ee8acc4676bc0ecf8ba44d4b1c48
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  43beb524ba6b7ffcea28d782e61df9b4b8b5b081e6bd81d36dc1718cda5f2e76

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\43beb524ba6b7ffcea28d782e61df9b4b8b5b081e6bd81d36dc1718cda5f2e76
                                                                                                                                  • Size 987KB
                                                                                                                                  • SHA256 43beb524ba6b7ffcea28d782e61df9b4b8b5b081e6bd81d36dc1718cda5f2e76
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  532cf9efd87c19774b2d2e4fff8737053a5a16384de88b1d60776d24fb2e0165

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\532cf9efd87c19774b2d2e4fff8737053a5a16384de88b1d60776d24fb2e0165
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 532cf9efd87c19774b2d2e4fff8737053a5a16384de88b1d60776d24fb2e0165
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                                  • Size 857KB
                                                                                                                                  • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  72484c53692c0a1be9f2afafa594fa04090efc81f8961c77bbf6dd867649825d

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\72484c53692c0a1be9f2afafa594fa04090efc81f8961c77bbf6dd867649825d
                                                                                                                                  • Size 468KB
                                                                                                                                  • SHA256 72484c53692c0a1be9f2afafa594fa04090efc81f8961c77bbf6dd867649825d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  74863bc8a7f4b8231fb26123a8726069d5a5461ecd755589c5a61dbb1f5959c8

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\74863bc8a7f4b8231fb26123a8726069d5a5461ecd755589c5a61dbb1f5959c8
                                                                                                                                  • Size 43KB
                                                                                                                                  • SHA256 74863bc8a7f4b8231fb26123a8726069d5a5461ecd755589c5a61dbb1f5959c8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
                                                                                                                                  • Size 7KB
                                                                                                                                  • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  8d0092e663a5764e72341d2c8a75d812f28dc742e90cb07fbff3ce166dab85e8

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8d0092e663a5764e72341d2c8a75d812f28dc742e90cb07fbff3ce166dab85e8
                                                                                                                                  • Size 987KB
                                                                                                                                  • SHA256 8d0092e663a5764e72341d2c8a75d812f28dc742e90cb07fbff3ce166dab85e8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                  • Size 184KB
                                                                                                                                  • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  a1c9514a4ead5b924c63ea34cd917e2076a5b8192566ab73dcf37454589e0f5b

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\a1c9514a4ead5b924c63ea34cd917e2076a5b8192566ab73dcf37454589e0f5b
                                                                                                                                  • Size 371KB
                                                                                                                                  • SHA256 a1c9514a4ead5b924c63ea34cd917e2076a5b8192566ab73dcf37454589e0f5b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  b2c2cae548cad801ba665273df276ad970d5a5db7afb42395c610402d4fa0303

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\b2c2cae548cad801ba665273df276ad970d5a5db7afb42395c610402d4fa0303
                                                                                                                                  • Size 451KB
                                                                                                                                  • SHA256 b2c2cae548cad801ba665273df276ad970d5a5db7afb42395c610402d4fa0303
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
                                                                                                                                  • Size 1.1MB
                                                                                                                                  • SHA256 c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  ced7f11cd363bf9043fbd2e4346dbbb386159a6f61a59398795eb3a7c59e9a6d

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ced7f11cd363bf9043fbd2e4346dbbb386159a6f61a59398795eb3a7c59e9a6d
                                                                                                                                  • Size 7.6MB
                                                                                                                                  • SHA256 ced7f11cd363bf9043fbd2e4346dbbb386159a6f61a59398795eb3a7c59e9a6d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec
                                                                                                                                  • Size 46KB
                                                                                                                                  • SHA256 ec1e07abf57f91c1325f48f968d9862dc472b063db7db0405ae5ef4ea1f4bdec
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f0436fd08d3d499618458a58fd5a2268f9580f00013b636e75ebbfc361ac2cf4

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\f0436fd08d3d499618458a58fd5a2268f9580f00013b636e75ebbfc361ac2cf4
                                                                                                                                  • Size 1.6MB
                                                                                                                                  • SHA256 f0436fd08d3d499618458a58fd5a2268f9580f00013b636e75ebbfc361ac2cf4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f13a2b226f69979dc9623869b3f3b2fd991c77fed598fc71480ee61a85623cfa

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\f13a2b226f69979dc9623869b3f3b2fd991c77fed598fc71480ee61a85623cfa
                                                                                                                                  • Size 95KB
                                                                                                                                  • SHA256 f13a2b226f69979dc9623869b3f3b2fd991c77fed598fc71480ee61a85623cfa
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 641990eb6c4b2c9ce8247d2b929f376e0fa7dcce6a624a617dc2f5445eec7aaf
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 d9344cb09b21ec708fc860b6fb2e788fd72943e3192f5e3a0e91189ef7185f97
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\fejmaeodjeekfldnbegjagemjgnmhfof\1.0.24103\list.txt
                                                                                                                                  • Size 123KB
                                                                                                                                  • SHA256 9365fd37ca06f3c53e1093e9337828b2a4567ea130eb3bdee94be55104e11e1d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  resources.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\ganmbmiebelpdlnohnabgkkocholelbp\1.0.54\resources.json
                                                                                                                                  • Size 151B
                                                                                                                                  • SHA256 d67107df922baa602051cc4d50bddd4a615799f34ee12847ba40a2afa9620e0d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  list_catalog.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.91\list_catalog.json
                                                                                                                                  • Size 54KB
                                                                                                                                  • SHA256 9556c2a05c582c4f88900f8c9d8c9cc656cee0ff17c837ef87aace5bda8387a2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.19943\list.txt
                                                                                                                                  • Size 5.1MB
                                                                                                                                  • SHA256 beb6e51cd9c3fa2312c6786246ea9f80490127954458fb0e42a0b1bd44aeeb67
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  list.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.5523\list.txt
                                                                                                                                  • Size 1.6MB
                                                                                                                                  • SHA256 8e68a4776592bad388175d700a7a1e942755d6ffbede724fdbc682ba39f38c5e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  resources.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.143\resources.json
                                                                                                                                  • Size 2.3MB
                                                                                                                                  • SHA256 6f8a7828a0dfd2da58836aeda0854ca4098cc4804b981a3f0d55355efbd00014
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  brave-checks.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe\1.0.446\brave-checks.txt
                                                                                                                                  • Size 4KB
                                                                                                                                  • SHA256 b6e1f5b9329ddc31388f48e05132b460b18da0f3ce5bf009c2e4b96836d5d4f6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  blocklist

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                  • Size 105KB
                                                                                                                                  • SHA256 4970154c03e71372a250182be039e454337be64d232075875a85fe45679e9791
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  protocols.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  autofill_bypass_cache_forms.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                  • Size 161B
                                                                                                                                  • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  edge_autofill_global_block_list.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  v1FieldTypes.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                  • Size 509KB
                                                                                                                                  • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  crl-set

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  settings.dat

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  settings.dat

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LOG.old

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                  • Size 7KB
                                                                                                                                  • SHA256 aae193d8cd23ab0180678bfe3a361f06c11d503434e3a512ce7b69eb07428207
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  LOG.old

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 960c6bc9ae5f5cf85d6c4beff4f3495c9190eef20e101bab8da7098b7c2e5a08
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  LOG.old

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                  • Size 352B
                                                                                                                                  • SHA256 9eb49feb48dc5a7bd07ad57010de2bfc1fe50ce469f1ada34212c0c65d1c92c2
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  MANIFEST-000001

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                  • Size 276B
                                                                                                                                  • SHA256 5c5fe7e0dde91bc1b3dd937ac104fc1e94eaf80f4a71f39fbf8a0758408057aa
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  BookmarkMergedSurfaceOrdering

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                  • Size 6B
                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  the-real-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 d0308dc4bcfbc4b6881d49ec5e94867083bf7bce760993d9c158e275af88e725
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  the-real-index~RFe58a13c.TMP

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a13c.TMP
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 cdfa50d2c50354ecce95d977f95fbc28ec2d0f4b6057427a38c44759055e1a4c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  SiteList-Enterprise.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Edge Profile.ico

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                  • Size 70KB
                                                                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  HubApps

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                  • Size 107KB
                                                                                                                                  • SHA256 9be535ed568a139bb3c90f462fbef0d4a24f7fb433d850ace4ade58aa039e9fe
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 7KB
                                                                                                                                  • SHA256 450b81f0ce4fddd0e00ff34d765bd3d13db085a2138bb884093abb0b57eed383
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 111B
                                                                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Network Persistent State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 bc7cbd7434290d2b7d2fea0c3c84f9b9efec0dc1bab389bd0f88743efa51c596
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  SCT Auditing Pending Reports

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 c6db95ed28a1d9a9df9b9722307abb8011e94c47cba2f539755430c918b17ced
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 14KB
                                                                                                                                  • SHA256 8ab5dae0849505c8b8fdabdf3e1e8c829cf4e91260287194be70f1b1d8d1b71d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 29KB
                                                                                                                                  • SHA256 b7f782209d08e81265a08fa436f0634ab65b3785cd2c571fa5dfc3e085391dd9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 14KB
                                                                                                                                  • SHA256 930ad2c9cd69a576ae83a4e671ec8e0a4c5a43bacf57ac48205a8b4c22e2fc77
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Secure Preferences

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                  • Size 35KB
                                                                                                                                  • SHA256 ccb4a9aab7fa39734f39a05422383a5db122f2487d2ab0e9bdc2958c2bdf612c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  the-real-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 8f643be03e5875a718bb2ec00c131f47a905032f9ca840f8da8eaa3c8c0fb0f4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  the-real-index~RFe5cd7aa.TMP

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5cd7aa.TMP
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 53f52bc2d0b362958dbcea9807401ba021eb5560cc8935799b1d45e2761c8c21
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  index.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                  • Size 371B
                                                                                                                                  • SHA256 2408098ee1948631a80ea85f7efc8b63423eb1741e5f400aae8851b13899ef1b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  sync_diagnostic.log

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 6e609b8b856a951a65a9d7200ca6c911c44955739aa0553d46c3465b86c461d2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  domain_actions.dll

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                                  • Size 83KB
                                                                                                                                  • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  data.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.8\data.txt
                                                                                                                                  • Size 146KB
                                                                                                                                  • SHA256 4d3b611b8b664c9b2e4503f41eabf3833860e521447c1dc921f0849e0c8633de
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  OperationConfig

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  OperationConfig~RFe5928db.TMP

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5928db.TMP
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  office_endpoints_list.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 68ea256a43efe77e27ab0f29738fb6cd4437f7be31d167dbb46dc5feeb6b1f02
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 c542e1b7abe32958961c6654466896588efb3121591c1c2c817900655bd26477
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 b316e760883a5657255512a92895136bbc9d51d86dd8c84571bd2d10f9487b0c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 0d3d0766b8437a639ce0b7f30b89a47c044b4808e250267b3152d75bd635f165
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 30KB
                                                                                                                                  • SHA256 8c2bda3625da857e17ed39f41e7027723e247478fc9267096ffe87cfb8417861
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 5a539f1ac0bea51fb0f286823471e33958b17ea0c155145fd4d6c860862f0af5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Local State

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 31KB
                                                                                                                                  • SHA256 a59064834009d9054b0d1b5855d6ec6e9d9c9719815e50a5d46a9afe1dafff73
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  crs.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                                  • Size 233KB
                                                                                                                                  • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ct_config.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                                  • Size 16KB
                                                                                                                                  • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  kp_pinslist.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  safety_tips.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                  • Size 163KB
                                                                                                                                  • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typosquatting_list.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Advertising

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Analytics

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                                  • Size 4KB
                                                                                                                                  • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  CompatExceptions

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                                  • Size 689B
                                                                                                                                  • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Content

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                                  • Size 4KB
                                                                                                                                  • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Cryptomining

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                                  • Size 668B
                                                                                                                                  • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Entities

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                                  • Size 68KB
                                                                                                                                  • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Fingerprinting

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LICENSE

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                                  • Size 34KB
                                                                                                                                  • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Other

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                                  • Size 34B
                                                                                                                                  • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Social

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                                  • Size 754B
                                                                                                                                  • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  TransparentAdvertisers

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                                  • Size 105B
                                                                                                                                  • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Advertising

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                                  • Size 20KB
                                                                                                                                  • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Analytics

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Content

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Cryptomining

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                                  • Size 32B
                                                                                                                                  • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  Entities

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                                  • Size 106KB
                                                                                                                                  • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Fingerprinting

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LICENSE

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                                  • Size 66B
                                                                                                                                  • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Other

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                                  • Size 198B
                                                                                                                                  • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  Social

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  keys.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typosquatting_list.pb

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.5.21.1\typosquatting_list.pb
                                                                                                                                  • Size 426KB
                                                                                                                                  • SHA256 dd09485bbf5cc88d4b16947759497eaa159173798917953ed192e4f70f7b5d4f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  well_known_domains.dll

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                                  • Size 572KB
                                                                                                                                  • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  nav_config.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 732B
                                                                                                                                  • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 45a6b06e48cb3eedac93a0d53aa71f535bd43cbf956b7e1b9214bb14d119b498
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 372B
                                                                                                                                  • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 492B
                                                                                                                                  • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 852B
                                                                                                                                  • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 b75e3f7640d809f791ce86985c4656def01f6ec84ddb01c4cb150236be7e44a3
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 47b3a5d84c2cd6b5946c96e1b4972192f543e367a4d457326cd490ea1c29a15a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 5b1a03c77886208725cbcf572307a5ab2dfa75f9b7aaaffbec8390716b8b230b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 252B
                                                                                                                                  • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 7ba017eb04ac9706f2fa7962204d2ec635366031d074939ef699fda495131328
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 972B
                                                                                                                                  • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 82fba2895dc62a0629ab5edc1d966df7c5a310c1cf4996c8fce3d7ae1b8f4464
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 d06ee63cf14c15bbf76574453fd32c1612782df89c8ff41ff990d1745b65948d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 612B
                                                                                                                                  • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 b69671daad9a7ab9bc27a888fb612e3c2ee8feb0e0607d650b2e12c1857a8c5a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                  • Size 132B
                                                                                                                                  • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  metadata.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                  • Size 13B
                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 13dd1351ea9ca2c79f619b275a9b8e8cc09b5554fcfe3b14ee3580a9c0118a23
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  00935088-f15d-4761-b752-6dd667a206cc.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\00935088-f15d-4761-b752-6dd667a206cc.tmp
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  8ca389f0-3f8e-42bd-b78a-c320ffdd57d7.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\8ca389f0-3f8e-42bd-b78a-c320ffdd57d7.tmp
                                                                                                                                  • Size 1B
                                                                                                                                  • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  0f3b0701-f0b7-4c9b-8052-9fce5e5859c7.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_1010159773\0f3b0701-f0b7-4c9b-8052-9fce5e5859c7.tmp
                                                                                                                                  • Size 147KB
                                                                                                                                  • SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  content_new.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4996_382431919\CRX_INSTALL\content_new.js
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  Brave.lnk

                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 8533f9a92035dae9f8e97375514b4b7929600c2cd3e3d25e918067564ac8ddad
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  BraveBrowserSetup-BRV040.exe.crdownload

                                                                                                                                  • Path C:\Users\Admin\Downloads\BraveBrowserSetup-BRV040.exe.crdownload
                                                                                                                                  • Size 1.2MB
                                                                                                                                  • SHA256 4f3931e9ba1e1c53a34a56d85e67f195175c53a536423764d30cceda1d7e016a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  memory/2576-3071-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3081-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3077-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3070-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3078-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3072-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3082-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3079-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3076-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/2576-3080-0x00000230AF500000-0x00000230AF501000-memory.dmp

                                                                                                                                  memory/3796-3329-0x00007FF6A05C0000-0x00007FF6A0BD0000-memory.dmp

                                                                                                                                  memory/5272-1538-0x00007FF907DD0000-0x00007FF907DD1000-memory.dmp

                                                                                                                                  memory/5272-1537-0x00007FF908880000-0x00007FF908881000-memory.dmp

                                                                                                                                  memory/6244-3330-0x00007FF6A05C0000-0x00007FF6A0BD0000-memory.dmp