Overview

overview

6

Static

static

1

BraveBrows...10.exe

windows10-2004-x64

6

BraveBrows...10.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/06/2026, 19:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BraveBrowserSetup-BRV010.exe
  • Size 1.2MB
  • Sample260626-xt97caes51
  • SHA256 10426a4a09b6767185ce9da9d04e4a96157b354fc8f861d8aa9a407b6685bd0c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 59 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of WriteProcessMemory 52 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe
    "C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2724
    • C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2156
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:1412
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4544
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:1344
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:624
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:956
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3572
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{0CC21E87-88D7-4DBB-A8DD-B9FB090CA45F}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3388
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:3556
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:2420
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4244
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\brave_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\gui91DD.tmp"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1976
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\gui91DD.tmp" --brave-referral-code="BRV010"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:1344
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=149.1.91.180 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff731ab2aa8,0x7ff731ab2ab4,0x7ff731ab2ac0
          4⤵
          • Executes dropped EXE
          PID:3412
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\gui91DD.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:4632
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{B8582FE5-00D9-4FFF-8E6E-DB6890F6B777}\CR_02ECC.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=149.1.91.180 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff731ab2aa8,0x7ff731ab2ab4,0x7ff731ab2ac0
            5⤵
            • Executes dropped EXE
            PID:4424
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5NjcwNyIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjIxNTAwIiBkb3dubG9hZF90aW1lX21zPSI4NTQ3IiBkb3dubG9hZGVkPSIxNDgzODQ4NDgiIHRvdGFsPSIxNDgzODQ4NDgiIGluc3RhbGxfdGltZV9tcz0iMzIzNzUiLz48L2FwcD48L3JlcXVlc3Q-
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:452
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:4772
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4964
  • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
    "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2104
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1732
      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
        3⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:652
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=149.1.91.180 --initial-client-data=0xf8,0xfc,0x100,0xd0,0xdc,0x7ffa34f6da60,0x7ffa34f6da6c,0x7ffa34f6da78
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4016
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1884,i,4382747302613884429,13207260118606588024,262144 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1896 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4376
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2236,i,17147507002972762059,16088104369654949305,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2240 /prefetch:3
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Time Discovery
          PID:1120
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2548,i,17602682963703270150,15030937762765658355,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2564 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4512
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3444,i,7617848223109633577,982533771953310595,2097152 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3452 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3880
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3544,i,6239329941048725519,4409287819389082433,2097152 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3576 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3292
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,2872765049605009445,18426841314717508441,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5144 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1368
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3604,i,211970716874454856,3916689628663161972,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5364 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3768
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,16962826764908605696,7502691035552270653,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5560 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:920
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,6520087396591416962,15511231912495626067,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5720 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1936
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,16733678114505682651,6626744365514108693,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5852 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3252
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,6260331532031028062,1888010284634480032,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5664 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3416
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,9711346128916118869,17558841364340237842,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5700 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2176
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,8237059611854748657,10343429182073147029,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5944 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3644
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,4854629355967895341,13211038537049804804,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5736 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5828
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:5892
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=149.1.91.180 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff733e12aa8,0x7ff733e12ab4,0x7ff733e12ac0
            5⤵
            • Drops file in Program Files directory
            • Executes dropped EXE
            PID:6096
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
            5⤵
            • Executes dropped EXE
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:6140
            • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=149.1.91.180 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff733e12aa8,0x7ff733e12ab4,0x7ff733e12ac0
              6⤵
              • Executes dropped EXE
              PID:1532
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,10366477965710397009,14006759550230053347,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5464 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5976
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,8364199520409033951,14536800298537776574,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5392 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5988
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,13511564174965058418,4508155587949263786,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5760 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5164
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,12090171483853449070,14876068287686522524,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5924 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5192
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,9511802875022510863,3524084297576294933,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=3688 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5200
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,15916086625691443175,16074720087941318802,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6136 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5444
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6152,i,1394167006786142966,17918194321703749654,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5776 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:2328
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6172,i,14160675041181542356,4803910528988831678,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5732 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:1908
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,5396940640172725839,18380461919099698541,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6312 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:872
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=720,i,8075098382542736907,13250215877286202363,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=5440 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5288
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6328,i,12146256349953072871,16279565187156067710,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6300 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5456
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6300,i,17440438958410026148,10682093791236355303,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6340 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5736
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,5924082681055430598,18159993875612203020,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=1140 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:2960
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=204,i,3109770093402116229,13506425826355774130,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6364 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5364
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6380,i,13162387457992907153,16920826927377250378,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6424 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5188
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,1669060165706349433,10546669376828197358,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=6164 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:4728
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,213408800082979536,5987574677137527179,524288 --field-trial-handle=1900,i,16875839317411343048,12401808351239109219,262144 --variations-seed-version=main@aa5ecb1acee9aab1b82b5f4c1dbd7f2e611ff996 --pseudonymization-salt-handle=1904,i,4524940975761828488,7456951536099945393,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=5864 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5456
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1204
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:4976

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Persistence

          Boot or Logon Autostart Execution

          1
          T1547

          Active Setup

          1
          T1547.014

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Privilege Escalation

          Boot or Logon Autostart Execution

          1
          T1547

          Active Setup

          1
          T1547.014

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Defense Evasion

          Modify Registry

          1
          T1112

          Credential Access

          Credentials from Password Stores

          1
          T1555

          Credentials from Web Browsers

          1
          T1555.003

          Unsecured Credentials

          1
          T1552

          Credentials In Files

          1
          T1552.001

          Discovery

          Query Registry

          4
          T1012

          System Information Discovery

          5
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          System Network Configuration Discovery

          1
          T1016

          Internet Connection Discovery

          1
          T1016.001

          System Time Discovery

          1
          T1124

          Lateral Movement

          Collection

          Data from Local System

          1
          T1005

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          BraveCrashHandler.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveCrashHandler.exe
          • Size 270KB
          • SHA256 3797cfc1904f5aa250c5934a541192633d9abfb9928a03298ee3749654bfccda
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandler64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveCrashHandler64.exe
          • Size 355KB
          • SHA256 a8e5b397c61c142ff2331ddf5826ea33ae75f1b2f58fd0e92c2abbcefff71949
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandlerArm64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveCrashHandlerArm64.exe
          • Size 353KB
          • SHA256 9ce0461e5fe10b6f5d63881756d76a15a54dada9fe290b5c85514a28badb4561
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdate.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveUpdate.exe
          • Size 163KB
          • SHA256 02ae1a4d013376c9661934b8967549e15e61574a1599e6307ec39f2f9cb6b36b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShellArm64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveUpdateComRegisterShellArm64.exe
          • Size 154KB
          • SHA256 086986ea94f5a93ec04fcf0b665d185cd48098210df6600ed833dd44b3cfcd7c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateCore.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\BraveUpdateCore.exe
          • Size 195KB
          • SHA256 c4eaed4a5044821c1d11da5431add422aa29a58a19ac8698aeb11730877f2ed7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdate.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdate.dll
          • Size 1.0MB
          • SHA256 3df6971254b2a89e0424efc87904e7f47434b5ae6693a957376d391f05745425
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_am.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_am.dll
          • Size 42KB
          • SHA256 34087a9adea2f2dc94695e22480d33c0c75029037fe8aa45d3530b44bc3c0bc1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ar.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ar.dll
          • Size 41KB
          • SHA256 a72600ada42d5767e64117c234a281ed4042adcf21d9ed6ddaf379012a8d231b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bg.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_bg.dll
          • Size 44KB
          • SHA256 69ddf809dc5c963642588dd4a46f957dcd39cf935ef644be7eb60fdfd72f07ca
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bn.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_bn.dll
          • Size 44KB
          • SHA256 c4a54a1b7802a2fc0e0c0348ca969fad90bb1378179e5fbfa532e35309b3924a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ca.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ca.dll
          • Size 44KB
          • SHA256 46ff8d7b8f8c7a5c675e3b4b27d0047b0f656ac4ccddbd88ca27dd48101f8384
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_cs.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_cs.dll
          • Size 43KB
          • SHA256 f5d159ba5174df269e7cb213c4a7d3c1a726e157ac0a0c3d21096d29599bc55b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_da.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_da.dll
          • Size 43KB
          • SHA256 0fe3b6a655c9fbfbc972a9744c2dd770ad2e887f67636bf559230b0073796a5c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_de.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_de.dll
          • Size 45KB
          • SHA256 2cb205d1e85b42502706eda894159be979f8aa99fd6251d258d7764a56e8b4f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_el.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_el.dll
          • Size 44KB
          • SHA256 09f23d583a62a4466b818561e82ee00697240133fce7a581446d311b7de03bc1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en-GB.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_en-GB.dll
          • Size 42KB
          • SHA256 e23e51a7bb4879a19398153122638d76b84b5f98c92602f18ad68e500ff2cf01
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_en.dll
          • Size 42KB
          • SHA256 3fb270c280f89fef9ad2382ed3af3592b4b4f561f76393befe91b1917855efdb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es-419.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_es-419.dll
          • Size 43KB
          • SHA256 3dd26af922a67583025198bb82ead4b3294c239a9c8ef113a6551233abe3a0b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_es.dll
          • Size 45KB
          • SHA256 1d02f8af1b573893581f203ba60a355eadeb793063ae30f2eb974acdc613f985
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_et.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_et.dll
          • Size 42KB
          • SHA256 194993d600136fdd62806e6d8aecd25ae02480498319f220e8807b241b244489
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fa.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_fa.dll
          • Size 42KB
          • SHA256 34e4cdcad95f665abeb62cdf5b398ffc80752bd39b8a7316bf6279f3a3dded88
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fi.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_fi.dll
          • Size 43KB
          • SHA256 8857e60c50de4ee501262d15914bb79139a8260cd35ab717caa17f99f3f43c59
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fil.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_fil.dll
          • Size 44KB
          • SHA256 6c40eb0d800506421fc2df207c3dc007d725d3bbb1f2c3ac71b2adefedb45750
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_fr.dll
          • Size 44KB
          • SHA256 6ecb97e50edf5cb1f2aed887112df4a1c8e311101cfab84d9d960ffca0f0f5f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_gu.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_gu.dll
          • Size 44KB
          • SHA256 adae7f94d0dd9fa63d826e85c60f724c2e2be3586aa1744013e76a35528736e3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hi.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_hi.dll
          • Size 43KB
          • SHA256 0e1cc373b9331e4534a4499785e97a199692e2f853d07cab0d315e4fc8f51392
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_hr.dll
          • Size 43KB
          • SHA256 5ebce926ad44aa73aec9b692ef70ff0c260eb0c44b14eaab5adf631fad30b653
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hu.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_hu.dll
          • Size 43KB
          • SHA256 076b76fd333a4dd5961140af44a401c22ac9a6331759f3db3112bec8a961ea1c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_id.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_id.dll
          • Size 42KB
          • SHA256 4d30cf6f8e6a3d521e92d2f6a2368099b66328e4ad7a9447a1d3e211ffd18529
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_is.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_is.dll
          • Size 42KB
          • SHA256 f105097f1576f4cb660ecab9cb79be91836623cd9ee37b5421a0da4cc30b733b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_it.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_it.dll
          • Size 44KB
          • SHA256 e3cfbf62d54f2a658d37bfc8d09b2c11fbfe819e6745fac4b097ac7b37e3eeb3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_iw.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_iw.dll
          • Size 40KB
          • SHA256 447175e5e31680bb6c7a187f6fa77303c57be524ff75111a3c0989d253ca7a27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ja.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ja.dll
          • Size 39KB
          • SHA256 f1183239242b7402c881cc948a3d47e5764a0a32a3566c5e3f43c108befba3ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_kn.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_kn.dll
          • Size 44KB
          • SHA256 49f05067d66446d612c662ea6b9324c4870dd8c3a7b7905793627b6832bfedd1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ko.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ko.dll
          • Size 39KB
          • SHA256 2a36e7e38033c50aa51ed69163e4fe530c78fa179d21cb757d076954ac63aa7b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lt.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_lt.dll
          • Size 42KB
          • SHA256 816972bb54b88e0fa50e05b5283f7e85b770fa0fb86a5110dc6e822b332b3c76
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lv.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_lv.dll
          • Size 43KB
          • SHA256 f0024e563f097a295bb0cc449bcbb5b36fee08fa1e42d6f1e91d378c052c0263
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ml.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ml.dll
          • Size 46KB
          • SHA256 91af83d2ed740f2f1332c9bddfb749f11a97684c6ea9c562d7b99d5fd78c9196
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_mr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_mr.dll
          • Size 44KB
          • SHA256 9441bafa356f93745076a669f8c6f444fdd0719e9d65424f534825ad6b70d7c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ms.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ms.dll
          • Size 42KB
          • SHA256 433b1c23a3fdb2183b307ec49196af833b3fe3c304aa776c8d6645e4ce59e87e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_nl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_nl.dll
          • Size 44KB
          • SHA256 9b7a3c0327cca74e990905788b9af44810c9d823bb7da85d78cef0538fda5978
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_no.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_no.dll
          • Size 43KB
          • SHA256 65be4e00f8fefc777e7d5434ff25ba2ad533c9d26f9b6b595a1520639c0658de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_pl.dll
          • Size 43KB
          • SHA256 26262f420b8a3eb867a74f1b91ff72012bb58c0dda3ee2c0189a23b1a3468416
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-BR.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_pt-BR.dll
          • Size 43KB
          • SHA256 22949d56e2fd6731f8c9bc1cd4974a60d28813cccf6026c9aa2b74fd7ec39113
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-PT.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_pt-PT.dll
          • Size 43KB
          • SHA256 66dd9f25458aeb23b87bd6d93393971ff5df323d0f939baf9687b2718ea15e51
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ro.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ro.dll
          • Size 43KB
          • SHA256 e85c89068d46b1c54f710de9d07e9f9f293544ab6183e1f858dd9bf4d5853305
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ru.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ru.dll
          • Size 42KB
          • SHA256 ce3abfd4d209d7307319cf3647cde8d07dff02a36fd8d9f6ddacfd1b7f897625
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sk.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_sk.dll
          • Size 43KB
          • SHA256 f2958cf0231aa13172700d354fd7968b8faa626c996dfb1bf117714ef67b123e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_sl.dll
          • Size 43KB
          • SHA256 ba637b87e034fd532111fb804f248049d1d3d65fb27882df2299e5efec5d5b22
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_sr.dll
          • Size 43KB
          • SHA256 13ff20998c5af1d8776ac9985da8f767f045df607eebab4a732189132cbc842a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sv.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_sv.dll
          • Size 43KB
          • SHA256 903e42430020b3163532076293c7906e23583d3a0e70e5f375c71dbd161eeb2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sw.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_sw.dll
          • Size 44KB
          • SHA256 d210f9c04920c6b3e48e248f4d92de5cf2847c9b920ca2c9a9ed5f98b25e8cee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ta.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ta.dll
          • Size 45KB
          • SHA256 cf13c8068a65ee3a76ed4fc30d9ea1db2a01e9aa2de7e6cf39acbef41abb892f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_te.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_te.dll
          • Size 44KB
          • SHA256 347007a0fdf4e14bc578e31e08c4abf20f0c3899a00f95abdcd59ceaa7625b4c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_th.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_th.dll
          • Size 42KB
          • SHA256 9eef8e8eaa70308b5773742e147990aa38c6941b83ebe601e9f0a617675f58b6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_tr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_tr.dll
          • Size 43KB
          • SHA256 17ac1a1c9ef02efc2e8f93e3e01abf9c8c0e35833fdc8b3f40244ddc4dd53fd5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_uk.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_uk.dll
          • Size 43KB
          • SHA256 636907d05bfa0a381e77455af06fd62934d5a4a2ccf4050217959d83cd88b7b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ur.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_ur.dll
          • Size 42KB
          • SHA256 1df3baaacf16c98f98feacb42f28089b53d5c3289cb5af4d1a557a75c0ba176d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_vi.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_vi.dll
          • Size 42KB
          • SHA256 cfceb0eb7fbc231c0ff0ee3549b20facce6f07afc697beff61efdd8b3ba8496b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_zh-CN.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM69.tmp\goopdateres_zh-CN.dll
          • Size 37KB
          • SHA256 854a5ea22468a8b2cf1b16e53070214e3f401994e478a68209fbd88509d52f25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShell64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          • Size 170KB
          • SHA256 9167e2f4b300c07247146f02e341bfc8153387c2ca90d19fae5d8b6b14454ec7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1069512080\manifest.json
          • Size 584B
          • SHA256 aee5468cfd00cf03f6389fcaf25576ff67130ffd0cdb2d3749595f606d8c3e3e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1082576446\manifest.json
          • Size 69B
          • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1230076624\manifest.json
          • Size 591B
          • SHA256 0cdf106cc0407137b7fbb38fd39dabe0d72e31f140d04915b3362c063a430d79
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1353740720\manifest.json
          • Size 587B
          • SHA256 5833f3c5b51ea03de9b7a2b704aa5b05484684c15b9144cbef6110fac291842b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1479142700\manifest.json
          • Size 76B
          • SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1496076039\manifest.json
          • Size 72B
          • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1570052881\manifest.json
          • Size 512B
          • SHA256 d0035ff86bfe07181198976f4b6452c9baada0543c15bed9b4f0d7e370342e48
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1686263674\manifest.json
          • Size 533B
          • SHA256 a8d21ada0eab056b184257778876267ac5ff74ec27fe801ec2eff0f8ae945433
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1715396215\manifest.json
          • Size 95B
          • SHA256 770e08f2b1a9e82de49c34f75cf04a9ebadccc4b34e601b7856c487404320e58
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1792862870\manifest.json
          • Size 108B
          • SHA256 4b99719d57b8628ae8343e1d820af97f24d2e48f81e864f54fc6ff3ee88c8f24
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1892714796\manifest.json
          • Size 86B
          • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Size 341KB
          • SHA256 2a54364257349b6c145fa4dd7ec41d3e0b8ab3144205b6f0cd58578aa370e671
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ask-brave-icon-DdJTJrmV.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\ask-brave-icon-DdJTJrmV.webp
          • Size 2KB
          • SHA256 3788d823c7714a2e36547bd5fe86c834b86cb6c182858e047789aee196f1f598
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          de-de-wie-oft-hat-deutschland-die-fifa-weltmeisterschaft-gewonnen.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-oft-hat-deutschland-die-fifa-weltmeisterschaft-gewonnen.webp
          • Size 87KB
          • SHA256 e6eee01c4a960376f8a869a9c4d0147b7ae82735b52c4ceff7c81507947fe288
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-wie-schlaft-ein-bar-im-winterschlaf.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-schlaft-ein-bar-im-winterschlaf.webp
          • Size 84KB
          • SHA256 63b446f4b75ba1d1875be2b0e20f400ec3f96bca8394f66bf8660eea9a1304fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-wie-viele-burgen-und-schlosser-gibt-es-in-deutschland.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-viele-burgen-und-schlosser-gibt-es-in-deutschland.webp
          • Size 82KB
          • SHA256 e89556bb39055895cc561fc1a3ceabedd7cf0d2eb0ff68728bd0f795f1a81906
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-which-canadian-players-are-ones-to-watch-at-the-2026-fifa-world-cup.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-which-canadian-players-are-ones-to-watch-at-the-2026-fifa-world-cup.webp
          • Size 87KB
          • SHA256 629e1c1566722ea38b64f3bff5fec7da894ea9d0033275b68f37a0ca658a0a94
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-why-do-geese-fly-in-a-v-formation.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-why-do-geese-fly-in-a-v-formation.webp
          • Size 79KB
          • SHA256 ba41b919b0476e121f01e53b23721bd0ed046cfe31b536adb8b847a4d7170ad6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-why-does-canada-have-so-many-lakes.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-why-does-canada-have-so-many-lakes.webp
          • Size 122KB
          • SHA256 d55809b419cd2a5bdf63af6d30f98941b2e6f2486de47b216431ab72b4f83bf1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-why-does-the-uk-get-so-much-more-rain-than-the-rest-of-europe.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-does-the-uk-get-so-much-more-rain-than-the-rest-of-europe.webp
          • Size 86KB
          • SHA256 328585aa6a3540b014e1fcf96072d3c025be5408d44f330a2eb4f6e4d55996f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-why-is-dizzy-from-codemasters-an-egg.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-is-dizzy-from-codemasters-an-egg.webp
          • Size 78KB
          • SHA256 4ae12d3e50c6150c13c056c7892dd25d1ad19dd986985fa4a82afbde85501c4d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-why-is-england-considered-the-home-of-modern-football.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-is-england-considered-the-home-of-modern-football.webp
          • Size 92KB
          • SHA256 85b0778ad1760887e909f14c5758818cdbe5774e42cc3ad7d8192d0f6b06c99f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-how-many-bones-do-sharks-have.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-how-many-bones-do-sharks-have.webp
          • Size 61KB
          • SHA256 140b9c88d4ce610d54b411a30b0ef98bdd007cfcbb96bb2da69c11b2c63d6c9d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-which-usmnt-players-are-ones-to-watch-at-the-2026-fifa-world-cup.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-which-usmnt-players-are-ones-to-watch-at-the-2026-fifa-world-cup.webp
          • Size 85KB
          • SHA256 0a6ef140f0802833a54adf994a4d9c58d07308b36e0d7d4bf596d28d53f7ca2b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-why-do-tornadoes-form-in-tornado-alley.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-why-do-tornadoes-form-in-tornado-alley.webp
          • Size 83KB
          • SHA256 9cfb24d66dafd02f82ad495d4a03d56eda4b1492a114cb6de32a02ae9e2d6cea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-cuales-son-las-estrellas-latinoamericanas-del-mundial-fifa-2026.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-cuales-son-las-estrellas-latinoamericanas-del-mundial-fifa-2026.webp
          • Size 74KB
          • SHA256 50f701ede827f31fc2089d12670db6d1e4845b8089182a71c95ae39f7c551599
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-cuantos-hispanohablantes-hay-en-estados-unidos.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-cuantos-hispanohablantes-hay-en-estados-unidos.webp
          • Size 73KB
          • SHA256 d520fa456dab2e0b25266ad0e978ea2bdd62ed7156c10b0e7c79bbf468a3e75b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-por-que-los-tacos-se-hicieron-tan-populares-en-todo-el-mundo.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-tacos-se-hicieron-tan-populares-en-todo-el-mundo.webp
          • Size 85KB
          • SHA256 45f525127b6720d412bf10574b63c5d3d92fd4218c51bf80a8c1888b5c94eb57
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-combien-de-matchs-de-la-coupe-du-monde-fifa-2026-se-joueront-au-canada.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-combien-de-matchs-de-la-coupe-du-monde-fifa-2026-se-joueront-au-canada.webp
          • Size 71KB
          • SHA256 1fec1ebbebd5ed01a958cc31d3f4797f9b2eb343ea4991a4d4fc9416129b5e6f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-pourquoi-le-castor-est-il-le-symbole-du-canada.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-le-castor-est-il-le-symbole-du-canada.webp
          • Size 104KB
          • SHA256 38be772a363f79bd2ceae4b74e84941ea3609319f41b8014f4a84b4d1a68b19c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-pourquoi-les-aurores-boreales-sont-elles-visibles-au-canada.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-les-aurores-boreales-sont-elles-visibles-au-canada.webp
          • Size 79KB
          • SHA256 cf3588aa406698aec361b51f63b8b9e901f1556d8e9462026d1e6925d546d9e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-combien-de-buts-kylian-mbappe-a-t-il-marques-en-coupe-du-monde-fifa.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-combien-de-buts-kylian-mbappe-a-t-il-marques-en-coupe-du-monde-fifa.webp
          • Size 100KB
          • SHA256 fd96ee7076e34c315cfdebfb71b43d148818ace4d548e7e0f088dc8d9e0ef149
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-la-tour-eiffel-retrecit-elle-en-hiver.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-la-tour-eiffel-retrecit-elle-en-hiver.webp
          • Size 77KB
          • SHA256 50792bc18866c771e2b4e843640af1206b70ea10f87b57a35c503479926c1a1b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-mange-t-on-des-escargots-en-france.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-mange-t-on-des-escargots-en-france.webp
          • Size 78KB
          • SHA256 de9abe961383605cc177cab996bbae6febcc546fc6584328fca757288b5cd4f5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index-C8g22OGQ.css
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-C8g22OGQ.css
          • Size 30KB
          • SHA256 19b099627396007cfcf21d64ed208361dce53926523439f3102fb7ee96323ad4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.html
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index.html
          • Size 4KB
          • SHA256 bd6757f0a35dbae885268901830b3df76b84f7b13453bef62036c3593d6c1480
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\logo.webp
          • Size 6KB
          • SHA256 fbe1831f3abb9be1d5b81785055bac244f70553e51a25556f558c31cb2ac6e37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mouse-pointer-DSDsXotA.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\mouse-pointer-DSDsXotA.webp
          • Size 136B
          • SHA256 c53bc691edd32cbc245bdd461b5fc36ef21afc3d8e4304f0df49119204e0b0ff
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-icon-BD6Rfjhr.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-icon-BD6Rfjhr.webp
          • Size 1KB
          • SHA256 02f34d12e8f5f7a2838bde1be407fe1f9815dae8678cd6c77c7c031a6f41d8df
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-logo.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-logo.webp
          • Size 5KB
          • SHA256 3a1dec651528a4b789020b9bc240f7c7a1ffef36cc3024095cc6c6c73da7ec85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wallpaper.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\ebec0987-c5ed-4874-8fbf-032c1cc6da91\wallpaper.webp
          • Size 38B
          • SHA256 2f9a4c22931833a8fc296bf89b86d94eec618752a62a1add43b753a77c80852b
          • MD5 SHA1 SHA512
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\manifest.json
          • Size 546B
          • SHA256 dd7beb772f974750fffe8b150d98eea1fef9112bd5039ee88337191ac6a3723c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          photo.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_1954234593\photo.json
          • Size 50B
          • SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_2081729544\manifest.json
          • Size 558B
          • SHA256 78781a011920eb078ba299c515433d181e145debb5f89311b619a99f008b2a00
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          index-DIxXAQ8B.js
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_280605115\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-DIxXAQ8B.js
          • Size 204KB
          • SHA256 3bb1e09dd8d40b0285093802c9d5af3387dfa4c2a378bacdc7d36fb774329dad
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_280605115\manifest.json
          • Size 546B
          • SHA256 af7bd0c4ba18756423334cfbe105e5d7283f472742231f2b5804cef504670c4c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_324356332\manifest.json
          • Size 108B
          • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_450474937\manifest.json
          • Size 592B
          • SHA256 9cb12c76cbcb57146b229388d750ceb1bc29b1354d03b231ee045ca7654e886b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_608181033\manifest.json
          • Size 202B
          • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_692828507\manifest.json
          • Size 73B
          • SHA256 7dc9e8a5e859223684fce4e515582e50f7fbabf18290aadc2f6dca4f920febdf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_728954079\manifest.json
          • Size 534B
          • SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_909698674\manifest.json
          • Size 594B
          • SHA256 635449a7041ff241a925f536ad59786f792829ce53eeb391b257016b1d47e245
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          hyph-as.hyb
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_990037460\hyph-as.hyb
          • Size 703B
          • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          hyph-hi.hyb
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_990037460\hyph-hi.hyb
          • Size 687B
          • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          hyph-nb.hyb
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_990037460\hyph-nb.hyb
          • Size 141KB
          • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping652_990037460\manifest.json
          • Size 82B
          • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          setup.exe
          • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\149.1.91.180\Installer\setup.exe
          • Size 5.9MB
          • SHA256 4cbf2b24054e5af7a8e99548f8609c9794b3791c5be5d200e388b3a2b49add44
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          messages.json
          • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source1344_1161485571\Chrome-bin\149.1.91.180\resources\brave_extension\_locales\sr\messages.json
          • Size 9KB
          • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          947d6c50-9271-451e-9357-fdeca6a08169.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\947d6c50-9271-451e-9357-fdeca6a08169.tmp
          • Size 10KB
          • SHA256 ce472a90a52ad24d5df7bb6d967d4a609172f905e5146535b33a7c3f9f615a83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          crl-set
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\10609\crl-set
          • Size 1.5MB
          • SHA256 1e0ff005dfcc54cb0deaa333b2b9b405e83531e0f501d1ae7e2b1491f7559291
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Preload Data
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2026.6.25.61\Preload Data
          • Size 254KB
          • SHA256 dbaee132fb64ddc98429f3721e32dadbfb0a188cd3533e9b361f22b569f7801c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          4f1f00ad-f02d-414f-82a0-5b3031e180d7.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\4f1f00ad-f02d-414f-82a0-5b3031e180d7.tmp
          • Size 165KB
          • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          000001.dbtmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\BraveWallet\Brave Wallet Storage\000001.dbtmp
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Rules\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          76303e5f-23ea-4e2b-8687-2c2c4d732029.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\76303e5f-23ea-4e2b-8687-2c2c4d732029.tmp
          • Size 59B
          • SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
          • Size 301B
          • SHA256 0e00e5dbf8d622f98b92d2768a0693367de560c9963cace70af28c5294e7443b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          SCT Auditing Pending Reports
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512
          Submit Download

          Preferences
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
          • Size 19KB
          • SHA256 9982f4a790c3cb8d483e0195538c5707a5cef6e41e7b5bd669a2f88acb99ea8c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ebcc6383-ba38-46d4-94d0-604c05d33729.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\ebcc6383-ba38-46d4-94d0-604c05d33729.tmp
          • Size 3KB
          • SHA256 6855d2928149da29769d37cb8498e501e495d961e09525563049b655b151e7a2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          download_file_types.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
          • Size 7KB
          • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 53KB
          • SHA256 2c226c82f220b7f552fcd9a9866438ad3623ed2d1c527d5630bc912ff3707a23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 54KB
          • SHA256 4c0f15150bc1a45f89ab8c5a4ab56f84b78cabdca131663761c9e836e3c2c85a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 62KB
          • SHA256 d56da5a533725d703036f62e33e21e536d73d6c716b748aabde4b2396e319401
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          preloaded_data.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\MEIPreload\1.1.0.3\preloaded_data.pb
          • Size 8KB
          • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          p3a_manifest.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig\1.0.5\p3a_manifest.json
          • Size 437B
          • SHA256 9f5f196db1a077339eb8c5eaec285bbf2d8645ff890985a808b3208ef5cb5ccf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          crs.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1699\crs.pb
          • Size 301KB
          • SHA256 4cbe183aa5a2d385236b09a65adcda811c010116c6aecaf76c64e4ccc17d29f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ct_config.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1699\ct_config.pb
          • Size 54KB
          • SHA256 6f6fdc790ef9a68778b4c845be3b685fbf5175d63bfd8dd2fe820f5d371f9c17
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kp_pinslist.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1699\kp_pinslist.pb
          • Size 10KB
          • SHA256 c3843424d4bc9c51a5d103e4cb23e8d838e36bd5cc9369b232a7c7a309def2e9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ssl_error_assistant.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb
          • Size 2KB
          • SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          safety_tips.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SafetyTips\3091\safety_tips.pb
          • Size 180KB
          • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ranked_dicts
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\ZxcvbnData\3\ranked_dicts
          • Size 865KB
          • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.471\list.txt
          • Size 263KB
          • SHA256 4a41e2396bc8ae534d0de131cc4f0edc105ea4d46d35d93bfa537ef5d3a3663e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          clean-urls-permissions.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\1\clean-urls-permissions.json
          • Size 302B
          • SHA256 58438a458b6170dd2a6010993b9b3215a55f187f87f7dbbc5594247ccc222b18
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          clean-urls.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\1\clean-urls.json
          • Size 28KB
          • SHA256 1dbab4f9b48f9d1293762d8e91c2c67faa90f60003117cf08672692767a819d3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          debounce.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\1\debounce.json
          • Size 12KB
          • SHA256 e5924b59ce1a3c3fec47e8dd9f9a6e38a43c8f05a8777767069085716c670dc4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          https-upgrade-exceptions-list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\1\https-upgrade-exceptions-list.txt
          • Size 1KB
          • SHA256 ec12bca633a18d9d3aed6d3e54a7da678f3d70e84e9bedd911e968fa912ad58c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          webcompat-exceptions.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\1\webcompat-exceptions.json
          • Size 3KB
          • SHA256 0d1cfbe19c5241358e1b973a286f19d75e90ef0725afb7a20cb874f0fdf52c18
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1476\manifest.json
          • Size 563B
          • SHA256 2225a3dedb381bd75416a51f6977e540fa52969822fa09c6d39583380136958c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          photo.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.23\photo.json
          • Size 9KB
          • SHA256 689aa08ae49301ce41043037f8c83ba1c18bf21f757a3dcf44f5cf52822959dd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16865\list.txt
          • Size 48KB
          • SHA256 6599c5ffbade478a47f0bbf37ceb53824a1162987f1a306c6b8bc8480ccb2225
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19778\list.txt
          • Size 1.5MB
          • SHA256 48c5d49c5bd6f1b3b0f6fb4ee1ec7c3c0edf44baee1a97feae06e10b2c463bc3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cmdlemldhabgmejfognbhdejendfeikd\1.0.110\resources.json
          • Size 151B
          • SHA256 c8bd3316903d4bef02c7dd68513b83e7efd1ba41ec71d12610778c0c211d5200
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
          • Size 17.8MB
          • SHA256 00d7a18d208288fa35492c89179938f4bf973748c937693346d641bfb01619d7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0e5fc1f56031853aba99041e7b069b7ee904aa0e24cb35edfab077bb45b5f688
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\0e5fc1f56031853aba99041e7b069b7ee904aa0e24cb35edfab077bb45b5f688
          • Size 3.1MB
          • SHA256 0e5fc1f56031853aba99041e7b069b7ee904aa0e24cb35edfab077bb45b5f688
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          2034e021e230b1f652d907225c60eaba71ffbcd1ee35af9aafa0de9db7b5b392
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2034e021e230b1f652d907225c60eaba71ffbcd1ee35af9aafa0de9db7b5b392
          • Size 1.5MB
          • SHA256 2034e021e230b1f652d907225c60eaba71ffbcd1ee35af9aafa0de9db7b5b392
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Size 7.6MB
          • SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Size 11KB
          • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          388f5f0cbcfd2a79656c2d94c13e390516c3245aa51d72901c763040f1472ade
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\388f5f0cbcfd2a79656c2d94c13e390516c3245aa51d72901c763040f1472ade
          • Size 258KB
          • SHA256 388f5f0cbcfd2a79656c2d94c13e390516c3245aa51d72901c763040f1472ade
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • Size 5KB
          • SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          4177f241669e7cbad3aa65c099a472344d752fb7ea3db59d8f076411cc6c746d
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\4177f241669e7cbad3aa65c099a472344d752fb7ea3db59d8f076411cc6c746d
          • Size 12KB
          • SHA256 4177f241669e7cbad3aa65c099a472344d752fb7ea3db59d8f076411cc6c746d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          46650acd4fb716e0c805161e0b306331d235648b74fb77dd2d71db6ee7693223
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\46650acd4fb716e0c805161e0b306331d235648b74fb77dd2d71db6ee7693223
          • Size 256KB
          • SHA256 46650acd4fb716e0c805161e0b306331d235648b74fb77dd2d71db6ee7693223
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          471db834a172655370b304d015105f16a29025bdefede39e4463d22795986a69
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\471db834a172655370b304d015105f16a29025bdefede39e4463d22795986a69
          • Size 3.2MB
          • SHA256 471db834a172655370b304d015105f16a29025bdefede39e4463d22795986a69
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Size 857KB
          • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          581def8e7fa8c15c89aad94a7c40edd81b73e0a341e19f5517125a338526c01c
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\581def8e7fa8c15c89aad94a7c40edd81b73e0a341e19f5517125a338526c01c
          • Size 88KB
          • SHA256 581def8e7fa8c15c89aad94a7c40edd81b73e0a341e19f5517125a338526c01c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          64549235e1b32c71456241b3e99d5d01e0e97216aa2b7c0d9121933f9fb474d5
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\64549235e1b32c71456241b3e99d5d01e0e97216aa2b7c0d9121933f9fb474d5
          • Size 5KB
          • SHA256 64549235e1b32c71456241b3e99d5d01e0e97216aa2b7c0d9121933f9fb474d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
          • Size 12KB
          • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Size 7KB
          • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          96e99b96554e99ffe0d9f6a1e5f2ee48ab18245469fa56a5e3a90f140e6e7078
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\96e99b96554e99ffe0d9f6a1e5f2ee48ab18245469fa56a5e3a90f140e6e7078
          • Size 19KB
          • SHA256 96e99b96554e99ffe0d9f6a1e5f2ee48ab18245469fa56a5e3a90f140e6e7078
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Size 184KB
          • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Size 14KB
          • SHA256 acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • Size 1.1MB
          • SHA256 c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Size 3KB
          • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          d53653ac96548649f8b6e345d005e4dbd30858fdad0150585f97363f690df18c
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\d53653ac96548649f8b6e345d005e4dbd30858fdad0150585f97363f690df18c
          • Size 475KB
          • SHA256 d53653ac96548649f8b6e345d005e4dbd30858fdad0150585f97363f690df18c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          e768e274f06c67ffe5332af2e34aa50688cc12f0595ec4e6081e12ec8845d01b
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\e768e274f06c67ffe5332af2e34aa50688cc12f0595ec4e6081e12ec8845d01b
          • Size 473KB
          • SHA256 e768e274f06c67ffe5332af2e34aa50688cc12f0595ec4e6081e12ec8845d01b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f71cbfe89ddfb813412f3a2d50635751f9630ec9511e3133284bfde6fde397bd
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\f71cbfe89ddfb813412f3a2d50635751f9630ec9511e3133284bfde6fde397bd
          • Size 1.5MB
          • SHA256 f71cbfe89ddfb813412f3a2d50635751f9630ec9511e3133284bfde6fde397bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fec70c2c-0812-43c9-868e-3c242b5925ff.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\fec70c2c-0812-43c9-868e-3c242b5925ff.tmp
          • Size 1KB
          • SHA256 f9b27bc65117dfac6fae2103f8ed2ddaf9ff9ba397baf4efdf3dc33a6eff6e9b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          ff38c13090eda73d7c21da4bb541b55b6a83bf63ec34691769834036817efc03
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ff38c13090eda73d7c21da4bb541b55b6a83bf63ec34691769834036817efc03
          • Size 372KB
          • SHA256 ff38c13090eda73d7c21da4bb541b55b6a83bf63ec34691769834036817efc03
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 1235402359e9e77151d8af6440213d4b54fa153291c01f64734221e5a0c7fbb4
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          campaigns.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe\1.0.2494\campaigns.json
          • Size 1KB
          • SHA256 82f78689026e19d5692f54215c1328d19877608367df4149b53957679bc92f21
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.110\resources.json
          • Size 151B
          • SHA256 e63435b549ceb62bf8b2f4e0db54c7bde829fab704119dcc7fb295258c996f4d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.20542\list.txt
          • Size 4.9MB
          • SHA256 37766bc56af480eca21ed39e154095aaab572230eeac35c2ec17b7ed8a51ef9d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.6122\list.txt
          • Size 1.6MB
          • SHA256 4480f9b56c396d41c75524074d18ab1985335ae91016085690b9d08e3f785de6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.146\resources.json
          • Size 937KB
          • SHA256 cbcbf997fb4e1da02fd0be7e6ba3e4889a33ad376874fd58ba03d22a64e308aa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          campaigns.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjpbonbjgpinifgnneajcbigekbpfige\1.0.2454\campaigns.json
          • Size 4KB
          • SHA256 099bef5d3d6e91c4a0854e760e6ead63100425f6ac041c296ed3b8ed8cafe9f5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          8a87d261-a24f-4010-8c81-67ec26799dde.png
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjpbonbjgpinifgnneajcbigekbpfige\1.0.2454\fc34ad62-fa60-40d1-8f46-b2409cc7777f\8a87d261-a24f-4010-8c81-67ec26799dde.png
          • Size 41KB
          • SHA256 0492c361e65ed5d08833d4e6cb0e8d3341a7e797d130921b556e513e56c8a1c5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          brave-checks.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe\1.0.478\brave-checks.txt
          • Size 4KB
          • SHA256 8727cfd9428a028183ddf2435846c2175eb346c2af2bb38f1567e05a8706b296
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Brave.lnk
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk
          • Size 2KB
          • SHA256 9785110c9937d9292278810db2bf25d7a35f448eb16d76d1d6b3e02fa3971694
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/4376-1782-0x000001CF37450000-0x000001CF38CC9000-memory.dmp
          Download

          memory/4376-1796-0x000001CF37450000-0x000001CF38CC9000-memory.dmp
          Download

          memory/4512-735-0x00007FFA535F0000-0x00007FFA535F1000-memory.dmp
          Download

          memory/4512-736-0x00007FFA52E40000-0x00007FFA52E41000-memory.dmp
          Download