5592d75e8e40f8379c598db99f402a6ebef26f5dd9b8659826852de1f67bd113

Analysis

user interaction
yes
max time kernel
898s
max time network
884s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BraveBrowserSetup-BRV010.exe
Size 1.2MB
Sample260804-wl3xmabl3y
SHA256 5592d75e8e40f8379c598db99f402a6ebef26f5dd9b8659826852de1f67bd113
MD5 d3377208297b36400e33f9eceedf3047
SHA1 c4e4130942465a3b739b0a2b66a3f659dc99b3ef
SHA512 128b8b388610a52ad0b509098b5212a16a8354d2a616ee4709832facf2c0c81e93415c131eac38a35faac3de11332e11031c24238272bae18a52b6f0ba5fb7e5
SSDEEP 24576:4mmr/02vBHToO5ygbCetj6Z+7mSQnbLARvaStqV6NkdFdU+4nTP4CVSV:Yr//rl8mm1URHtqVRcTwCVc
TLSH
T1B8452211F5D08071E07359302AF0A6B15F7DFC301B759A9F279A2F3A1AB06D2EA25367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence privilege_escalation trojan

Malware Config

Signatures

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe	BraveUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation = "0"	BraveUpdate.exe

Indicator Removal: Clear Persistence 1 TTPs 1 IoCs

remove IFEO.

defense_evasion

Clear Persistence

T1070.009

description	ioc	Process
Delete value	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BraveUpdate.exe\DisableExceptionChainValidation	BraveUpdate.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Control Panel\International\Geo\Nation	BraveUpdate.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdateOnDemand.exe	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_cs.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_lt.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_pt-BR.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_te.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_da.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_nl.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShellArm64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_bg.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_es-419.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_it.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ru.dll	BraveUpdate.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Temp\GUT16C1.tmp	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\psmachine.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sw.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sw.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sk.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_id.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ja.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ar.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_no.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ro.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_kn.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_mr.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_zh-TW.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_cs.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_zh-CN.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_am.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ms.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ro.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_fi.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hu.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_uk.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psmachine_64.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_en-GB.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_et.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ko.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ja.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdate.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_hr.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_ar.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_sv.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_hr.dll	BraveBrowserSetup-BRV010.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdate.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_vi.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_el.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sr.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_th.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ur.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_en.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser_arm64.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdate.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveCrashHandlerArm64.exe	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_pt-PT.dll	BraveBrowserSetup-BRV010.exe
File opened for modification	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdateSetup.exe	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateCore.exe	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\psuser_64.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_fr.dll	BraveBrowserSetup-BRV010.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_en-GB.dll	BraveUpdate.exe
File created	C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\goopdateres_lt.dll	BraveUpdate.exe

Executes dropped EXE 17 IoCs

pid	Process
2652	BraveUpdate.exe
2752	BraveUpdate.exe
1540	BraveUpdate.exe
472	BraveUpdateComRegisterShell64.exe
4552	BraveUpdateComRegisterShell64.exe
916	BraveUpdateComRegisterShell64.exe
3744	BraveUpdate.exe
4992	BraveUpdate.exe
1592	BraveUpdate.exe
1364	BraveUpdate.exe
4280	BraveUpdate.exe
1444	BraveUpdate.exe
3836	BraveUpdate.exe
2264	BraveUpdateComRegisterShell64.exe
2552	BraveUpdateComRegisterShell64.exe
3544	BraveUpdateComRegisterShell64.exe
4428	BraveUpdate.exe

Loads dropped DLL 25 IoCs

pid	Process
2652	BraveUpdate.exe
2752	BraveUpdate.exe
1540	BraveUpdate.exe
472	BraveUpdateComRegisterShell64.exe
1540	BraveUpdate.exe
4552	BraveUpdateComRegisterShell64.exe
1540	BraveUpdate.exe
916	BraveUpdateComRegisterShell64.exe
1540	BraveUpdate.exe
3744	BraveUpdate.exe
4992	BraveUpdate.exe
1592	BraveUpdate.exe
1364	BraveUpdate.exe
4280	BraveUpdate.exe
1592	BraveUpdate.exe
4992	BraveUpdate.exe
1444	BraveUpdate.exe
3836	BraveUpdate.exe
2264	BraveUpdateComRegisterShell64.exe
3836	BraveUpdate.exe
2552	BraveUpdateComRegisterShell64.exe
3836	BraveUpdate.exe
3544	BraveUpdateComRegisterShell64.exe
3836	BraveUpdate.exe
4428	BraveUpdate.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BraveUpdate.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveBrowserSetup-BRV010.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BraveUpdate.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
3744	BraveUpdate.exe
1444	BraveUpdate.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreClass.1\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\NumMethods	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods\ = "17"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{660130E8-74E4-4821-A6FD-4E9A86E06470}\NumMethods\ = "4"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CB305B1-4D45-4668-AD91-677F87BED305}\NumMethods\ = "10"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F26E08F2-BA64-4BC1-8C0E-7D3390D7B27D}\InprocHandler32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ = "IPolicyStatus"	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C11C073F-E6D0-4EF7-897B-AAF52498CD2F}	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\ProxyStubClsid32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassSvc\CurVer	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F234546B-DACD-4374-97CF-7BADFAB76766}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7A24060E-533F-4962-9E15-34BD82555FA7}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{48B5E6B2-9383-4B1E-AAE7-720C4779ABA6}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\NumMethods\ = "17"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5D1924F-CB80-47AA-8DEC-5E0854A42A73}\ProgID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.Update3WebMachineFallback\CurVer	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{10DB7BD5-BD0B-4886-9705-174203FE0ADA}\ProxyStubClsid32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28C83F57-E4C0-4B54-B187-585C51EE8F9C}\LocalizedString = "@C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.151\\goopdate.dll,-3000"	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INTERFACE\{660130E8-74E4-4821-A6FD-4E9A86E06470}\NUMMETHODS	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{91B050A9-5A49-4249-A8C8-B4390961A912}\ProxyStubClsid32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A4BCDF52-2179-4C77-8C5F-B8095712B563}\NumMethods\ = "41"	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INTERFACE\{1985533F-9B0F-490A-85C5-24F316E66FB2}\NUMMETHODS	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4842EC21-0860-45B5-99F0-A1E6E7C11561}\ = "IAppCommand"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9190589-ECEC-43F8-8AEC-62496BB87B26}\ProxyStubClsid32	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C663DEBB-F082-4971-9F6E-35DE45C96F4E}\NumMethods	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D5627FC9-E2F0-484B-89A4-5DACFE7FAAD3}	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3282EB12-D954-4FD2-A2E1-C942C8745C65}\LocalServer32\ = "\"C:\\Program Files (x86)\\BraveSoftware\\Update\\1.3.361.151\\BraveUpdateOnDemand.exe\""	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EFF9CA12-4CD3-474B-B881-CDE1D92F1996}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24D704AD-AC42-49F2-BB4F-68BA77C98E91}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3AD2D487-D166-4160-8E36-1AE505233A55}\ProgID\ = "BraveSoftwareUpdate.CoreClass.1"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FB43AAD0-DDBA-4D01-A3E0-FAB100E7926B}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{48B5E6B2-9383-4B1E-AAE7-720C4779ABA6}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}\ = "ICurrentState"	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1985533F-9B0F-490A-85C5-24F316E66FB2}\ProxyStubClsid32	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.ProcessLauncher\CurVer	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.OnDemandCOMClassMachineFallback\CurVer\ = "BraveSoftwareUpdate.OnDemandCOMClassMachineFallback.1.0"	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine.1.0\CLSID	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreClass.1	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\NumMethods	BraveUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}\ProxyStubClsid32	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InprocServer32\ThreadingModel = "Both"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7CFC4E00-1C9D-443D-B5BE-CEEEAC1443AF}\NumMethods\ = "13"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.PolicyStatusMachine\ = "Google Update Broker Class Factory"	BraveUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3FC92C1A-57C1-4A34-AB53-3C69366320E8}\ = "PSFactoryBuffer"	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E6836CFF-5949-44BC-B6BE-9C8C48DD8D97}\ProxyStubClsid32\ = "{3FC92C1A-57C1-4A34-AB53-3C69366320E8}"	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\BraveSoftwareUpdate.CoreMachineClass\CurVer	BraveUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{D7D7525F-5DF4-4C9D-8781-C02F39F973E6}	BraveUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4C929BFE-4FA4-488D-B1E2-82ECD6F076C8}\NumMethods	BraveUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD84E356-3D21-44C8-83DD-6BEEC22FA427}\NumMethods\ = "4"	BraveUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INTERFACE\{C974F2DD-CFB8-4466-8E6D-96ED901DAACA}\NUMMETHODS	BraveUpdateComRegisterShell64.exe

Suspicious behavior: EnumeratesProcesses 22 IoCs

pid	Process
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
1444	BraveUpdate.exe
1444	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe
2652	BraveUpdate.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	1444	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe
Token: SeDebugPrivilege	2652	BraveUpdate.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 2652	2372	BraveBrowserSetup-BRV010.exe	85
PID 2652 wrote to memory of 2752	2652	BraveUpdate.exe	86
PID 2652 wrote to memory of 1540	2652	BraveUpdate.exe	87
PID 1540 wrote to memory of 472	1540	BraveUpdate.exe	88
PID 1540 wrote to memory of 4552	1540	BraveUpdate.exe	89
PID 1540 wrote to memory of 916	1540	BraveUpdate.exe	90
PID 2652 wrote to memory of 3744	2652	BraveUpdate.exe	91
PID 2652 wrote to memory of 4992	2652	BraveUpdate.exe	95
PID 1592 wrote to memory of 1444	1592	BraveUpdate.exe	99
PID 2652 wrote to memory of 3836	2652	BraveUpdate.exe	111
PID 3836 wrote to memory of 2264	3836	BraveUpdate.exe	112
PID 3836 wrote to memory of 2552	3836	BraveUpdate.exe	113
PID 3836 wrote to memory of 3544	3836	BraveUpdate.exe	114
PID 2652 wrote to memory of 4428	2652	BraveUpdate.exe	115

C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe
"C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe"
1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
  2⤵
  - Event Triggered Execution: Image File Execution Options Injection
  - Indicator Removal: Clear Persistence
  - Checks computer location settings
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2652
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:2752
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:1540
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:472
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:4552
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:916
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3744
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{35A58C4F-49FB-4B85-A790-74BD9E2C2A72}"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:4992
- - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /unregserver
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:3836
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe" /unregister
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:2264
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe" /unregister
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2552
  - - C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe" /unregister
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3544
- - C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe" /unregsvc
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:4428

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjQiIGVycm9yY29kZT0iLTIxNDcyMTk0NDAiIGV4dHJhY29kZTE9IjI2ODQzNTQ1OSIgaXNfYnVuZGxlZD0iMCIgc3RhdGVfY2FuY2VsbGVkPSIzIi8-PC9hcHA-PC9yZXF1ZXN0Pg
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1444

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1364

C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
"C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:4280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Indicator Removal

T1070

Clear Persistence

T1070.009

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BraveCrashHandler.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveCrashHandler.exe
Size 270KB
SHA256 ea698af883bd96f1e4fb29b85785997420def8ec42e7f91fbbaf43f3db493582
MD5 3c38616a3bfbd7dd5807c8a7b4a928b6
SHA1 37dfb50afa5f34666436d6960fff1dc08f20d52c
SHA512 89b9aa8a261849b7a2adb15c396b9ce3c12a67e82f6144bf387974f5b6983979d89a94097b10d27a6ba0bd1b16ac446737b189d4823c81c246b1da7f0e8d1804
SSDEEP 6144:Udd4maD39rUMyjJr+64hQqNSEzVcdfYiGdEksDxYYYYYOYBI07YYlYYYZbw9Itwa:S4l9rNyjbxqNSEzOaEksDxYYYYYOYBIj
TLSH
T1C944AE02B5D18432E9B315365EB89B316EBEB8304962DE9F23D44D1EEF316C0D625763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveCrashHandler64.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveCrashHandler64.exe
Size 355KB
SHA256 681d60a96bfb704c5a0d905c26f364f4869326c040319d3e9c706f3801e58963
MD5 0bf24d2a68b08e673127a53f190ea0f3
SHA1 ae6ca2e74f1384423c08e61de450c9cab20ae08c
SHA512 34d03a769b702ae3e91e5757cf0fbef720280ba024dfd57149f13ba6b1c88574c5d3668b389bb2a8413d5943a663057bbe8ce62c658ce8760ca465393216c6fb
SSDEEP 6144:EHlSHLFsLeljMiBwkyPnYeP1jJLSGtouZFvS+aItjQauHzx+m:EFZY5ryfPP1jx5FFvS+aI5JuTx+m
TLSH
T1F8746C15F3E404F8F5A78174C992CA1AE7B27C5607B0D78F23A4869A3F336619D2DB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveCrashHandlerArm64.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveCrashHandlerArm64.exe
Size 353KB
SHA256 04d32a0f30fd2e685289814c709c15ba03096175f4638d1a4a3c49cb57748b1e
MD5 dd6131f4caf4047727d4370e51ab4985
SHA1 867be41250de245590fb57f5a62f7f21d3631c4e
SHA512 29b3da8d30ea1e2d9715812b31af216a795853053651597e92c0b4ae69d9d8d66dffaef0d603d6abd1e79cd079f4641b8684f2633452d5ff8b86c57e5c874758
SSDEEP 6144:3uqb6JOtxnqOtBIjEYIkEBPZkwca2zJ/LmwpNtkOKRC93It1nvx+o:pVscDpihz4JC1IDvx+o
TLSH
T1D2743A51DA8C68D4E1D2867CDBB94B50312FBE788474C5CE3157020CEEAEAC5CEB56E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdate.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdate.exe
Size 163KB
SHA256 cef8c0af5f698a7665631844af423c8a09f63310520a4d3bebed4e4341fe1b6d
MD5 fa1e04da3cd2a5d893e78ac753db2036
SHA1 1b3dca57c11b4ec37393f8887ef8f28b9afc6124
SHA512 71b44f5dd1ec95292c8dcc6efbeb33333e53d9f4a728cbaae40291d417d6e8ca51f541d299bdc3ae1d01030e358a1be87d205cbbbfacb0de400aebdab7fa91a6
SSDEEP 3072:FNDG1ap4GHOaGCbtrrE0Za9/U7hxTKbfXkdu13jB+MC2R8Fl2Z/GU7ysb5vvIfF0:2haGGhZa9YTcqwB+3pg
TLSH
T1CAF3E60373F4006CF8F36A3169B56725A93EBCB2D962CABE1780059D2F316918D51B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdateComRegisterShellArm64.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdateComRegisterShellArm64.exe
Size 154KB
SHA256 14e5f7d08369626c62a37f2d9920a9057653a007bf24d642d8c4c77cc4b1b00a
MD5 8995549fb81f114c5d93d74015f3ae2b
SHA1 488c37cd3d5879fd32a808a91402efb205c18ba0
SHA512 173951f1e1077d2609a2a44d0088b3edb1d1de65fa0973d2e3b60266403485eccfdf437f98118331d2cb4611257f642288102b17cfa05694660a74015e9a8b36
SSDEEP 3072:foGPa6NpZk+tkJCbjOAY8nMl/Eed9G0rIQUpojb90CB+cIUR:fpPlpZk+yKyVFEQIolHB+o
TLSH
T1ACF3199376CD38C5E2C3DB38DD564950272BFA788430CB8A3296020EEF6E6C5DEB5552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdateCore.exe

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\BraveUpdateCore.exe
Size 195KB
SHA256 d9ad02b89918d77763f133417f56b02349ee0b0f0f7d4f6e2409fbfaaefb167b
MD5 ea185f5a5a426ed338c5e78ac7004648
SHA1 d2c75c1b2f96f6244eb3997eb98e447f9223ffd6
SHA512 4b9449b375996a6870cbe3b99c91bfdcda60b9c28b974e001edcf9c0e46929b95b92dbba1e16d8b44d0fdc5dbad3a1e4e4783932817fdff3b2f6329f156c66fa
SSDEEP 6144:8/Xt4nqREgRKE2kKh+0nc0y3xzweIITx+1y:2Xt4nqREgRKE2kKhj8xzhImx+1y
TLSH
T111148D12B1E08072E97315321AF0AA705EBDFD704E62DA9F27940F6E5F716C0D626B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdate.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdate.dll
Size 1.0MB
SHA256 775f7d667acc1b117474d6dacce7ed83aa49ae2f7a92c5e50c11583cb88c2ac3
MD5 b8e16e8da5aeb4b02358ef4e0f2b4200
SHA1 6d8155f5282768d48f5f55c517181f3e83903e1c
SHA512 b04b4e31c661f72d872ce8502c4fbdb1003ece8bcd12fbd67805711fa2c644d907bfb7fe8aa8ba54f9b4255f7b0331368018e4d8438a28ebde6ebaafc6e45818
SSDEEP 24576:P+uMkbgbE0YgJePXUHOb7DDtjViLXq3sXx6/LjhWuf53canTLiNNtWGN3:7rgbz1ePkHOb/DtjV8X0lLjhWufxcang
TLSH
T1B2359E1375D18035E5B3063099BDBB25AEFDBA310A32D64E13D82A5E6F72980D73A353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_am.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_am.dll
Size 42KB
SHA256 e785d7058810a73e484ad0f7d5fcf55162d35180b79d8f3c06aadb75d80d56ea
MD5 75d5e8ed40c0f1b3d914cd24090cb20b
SHA1 810ab225361a1e7332d21e956a41af3fe79b6034
SHA512 cc4f399d688c6dcff1f8157dc5d88f1aab61975fabbcfe91c252972a775dd5bddf5771a828e6fa5d136747a0bd3b7cd1ce22d9b1082a9e5e40c13a3ed81d7d8b
SSDEEP 192:rxxsk4lK4dAFlDmdYR7A6eHu25NyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHh91fY:1ek4k4+J25NyEIYi2mL4/y8RLVHh9V8
TLSH
T10513423946085C0EE727FA3179941A3E45276DCC6BE0F3861184653C9D707236BAEFAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ar.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ar.dll
Size 41KB
SHA256 fe55a1546621d7f9405b0e4a29dbe7261599e6f94cd57fc310037fc43087e9b4
MD5 75d680006abcf1aabbbe8b1c91135b5a
SHA1 9e1c3115ea21b2513d41eb6aa66a4891c4156722
SHA512 f5470875b0423c267fd00ca20b197b6607375094a596b70c03d46670df78e0455357f8f378a5c0265e738911b5d6374ef872135676df23564ff68f75462206f8
SSDEEP 384:qkOtkCLu+JGnNyEIYi2mL4/y8RLVHT7S7V:POtkCLdVYiDLk5/Ha
TLSH
T174132F720948DD3CE7237A30D196CE3F916711D29CC4736A21A4A93186B07226B5FEFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_bg.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_bg.dll
Size 44KB
SHA256 46696c9da4526e22838e049d2e445f4ef47e5e755207c1113a595db28d1bb60e
MD5 b0f9a1091ba4b5472115d4d19f2ee2f0
SHA1 9813dfd1c7fa03b6a5768d2d2f57f98a043fcbad
SHA512 c305d8f20d4fb1de6bbc2e8ec259d1d1d1d4392892f4c380fe67e6381cdcdea33055f4617cec5967aaf52984d71d565e0cfe2ee870a61200bd58bf4471b27215
SSDEEP 384:IrndckbeGZBOcKNyEIYi2mL4/y8RLVHMlY6:CnV7D3YiDLk5/Y
TLSH
T14D13BD7BA5788908F755B2301A9549FE2177779063E4B7C1528F7874A038332672EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_bn.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_bn.dll
Size 44KB
SHA256 224ab75018f1a3744ca3b64e9ac031c8b628afbc5b767c94a8a7efbd2b8857f0
MD5 a40365f252fd90a687682c8197e9fae3
SHA1 baec1cb9a43637a299a30243fb9727c4ec997632
SHA512 49d0fb0d5604e1d7bdf9b061811fa31c241b55c7829a9341c2cd854f959de9f465265202459c3d99bf843e713015d84a00fd47694b29c9576f89da89e63c82c4
SSDEEP 384:R6IvUx7tYF7qKF0FrHF6zjbmBwONyEIYi2mL4/y8RLVHGjlU9HC:oIrlF0FrF3BwDYiDLk5/p0
TLSH
T16413EA3996087C1AE7ADB53076C55D3F09E7388017E8F39420D8A53889B03B75E5EE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ca.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ca.dll
Size 44KB
SHA256 e32bcf68448a40489f035c2dbdc5dd817554143e5900795e42dee85fb86287fb
MD5 5a743ca6c6f4cf8425cf534051eb72e5
SHA1 977d00d8bb0eb747bf73debccdffb994cfe0dfb9
SHA512 5f66b4a6b5756d9a4312fc6a3bb1f400ec4c54b86604635bb6e94c55427521b2d045886aba85d8a6ea1fae10ae77b6e13d296162ca969849085d5726072b2127
SSDEEP 384:CUs2ArzVuRm4bPdSNyEIYi2mL4/y8RLVHQlHd7so:ns2ArBupdPYiDLk5/uuo
TLSH
T19613BA718BE85A48F7B33F703874192D4A6B7995A8F4F34D1240A5398970B01DEADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_cs.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_cs.dll
Size 43KB
SHA256 7562edd2b97b8033eb89c14020d479d7ab092d3c487fcbab9b4b58663024d36d
MD5 5a64a7c01bbaf29fc9dc991a156aa3f1
SHA1 c7c456168bf96b4db1d204d99d1d6c6c8f3a2a3c
SHA512 807073bda7b646ad40b6f18796fc9f1b5b42744794cc78d18633fe785040115b1ca076c70758873eb33ad088e9c7c3fdb9aa73df426650b8a22a0a9f903d8eaa
SSDEEP 384:4d0BWpaJkhYwA+fLNyEIYi2mL4/y8RLVHZwN4c:I/YYiDLk5/2ic
TLSH
T18913ED7155E40948F7B77F3028B00A7E197B78D1A9F0F34E528061798970781EAAEF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_da.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_da.dll
Size 43KB
SHA256 b8426493d7aed6d308f4ae5b93c0991784ee0a299cfd93d928bc8a96c2da3490
MD5 847b10107e65d4a0fc42eab112794c38
SHA1 c8f72cc26d8e5cb262cb77bfaae4eb866b82a56e
SHA512 1ca59273eb69d224135943c855daaddb5305dc1814b8cb8046f3bbf5f51203240f5a69d5e8d020088601d2b26b276ef7f3cc9e130d8e1b9b8bcda3912f429da7
SSDEEP 384:3KZfNnwtpTqPUNyEIYi2mL4/y8RLVHq315Hh:6Lnw/+RYiDLk5/Wj
TLSH
T19D13637153E88A1CF7B23B3068B4492D4967BCD199F4F35D2284607C8971385A6BEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_de.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_de.dll
Size 45KB
SHA256 9765c1efac552441deaf5bb6fef329e9e67ed65f540bb17cb1767718bd0c2349
MD5 3f0656c4aba1748030fdbb92880fcfb2
SHA1 b20a852903725c25369082e5832b10b1ba4c44ef
SHA512 c214e2385752ecb6ba614058722d29661e01c43b5db122f54d0c78c12c70c83c4a927e89cfb45ebf4e61d0d2647d901cf728bdd9d28d94c6355557027819cc03
SSDEEP 384:FarQUM8QtPM0Me6INK/AiNyEIYi2mL4/y8RLVHLpNKB8:UrgjMePsAfYiDLk5/t
TLSH
T1A023307147E4890CF7B23B306DB45A695A63BCD5A9F0F74D2280607C8971701AAADF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_el.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_el.dll
Size 44KB
SHA256 e752f141dc7051b7d732c341d4879977a8be2c7e028fc8d745fa54cb7de5e61d
MD5 34b9c65e3673dee2d4b61c2d41b1068c
SHA1 dfe1c1ac7ec982ec369e07aaafc9d47ed56f853b
SHA512 f4b9ab5e59d99fafbc09880ec8b0ada8c8675f935c06edc6b6bbbce908240a09794e46278ad639eedc18788d7a9f347ca810dd48d4ab7d96b7ac6abc45e3363a
SSDEEP 384:7LNE5eILkSIrGCSqlIxRFiAhAc8zBtfsBsTbJNyEIYi2mL4/y8RLVHSpjulNo+:Pm5lLO+R52/+YiDLk5/ajus+
TLSH
T17F23CB7E09AB5A18DB66B8F11462892E466BF0C108D0FB6631F07074DA7C7029ECFD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_en-GB.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_en-GB.dll
Size 42KB
SHA256 f044b3a896cd6b97093c50608f52cd9d15a23038b1c878bc64a85a83c41dd635
MD5 686dcc95b84d6831d679b12eaf5d9752
SHA1 a2b0cde88f66f0bb1f5bcdc846b53a4cac9500e7
SHA512 170cfae76b2ce6c88e3d59f3a0876753807a94360ccd580b49e1216ad01bad58f8bcd49f1e72ac7395c263ea48d0985e52056f244223abfe23af1a21d603006b
SSDEEP 384:ZXQ8Uagyh6QukNyEIYi2mL4/y8RLVH0WoKg:bUagyhihYiDLk5/6
TLSH
T1C61395B157E44918F7B73B3069B4593E49377C91A9F0F39D228060399970701AABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_en.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_en.dll
Size 42KB
SHA256 43c7383c2b5463bb5e343268639aff19e676cf492e17ffc7633600a7de0ffb65
MD5 bd7147b4f16432f3dfc5ef62fd5773f7
SHA1 61eb2b4f9618f53252d57f5687514aca0318e3ac
SHA512 ebf262506b7c30071e195a2fa4304bb0939ab7306764f098720a85ac4baddd7e1650b19a01da60e29a7bc4b1144c5f4b1295e66009cd00d5cf083fab332ba7c1
SSDEEP 384:MciagyMk9RiSNyEIYi2mL4/y8RLVH9Wo2qV:tiagyM4+YiDLk5/+qV
TLSH
T1B81385B257E44918F7B73B3069B4593E0A777C91A9F0F35D228060399970701AABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_es-419.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_es-419.dll
Size 43KB
SHA256 43360612616b2cc9690447812d6b9d024a9231c4723e7042711e544aa951e1a2
MD5 4594207d1d713a510b3c77d833d32664
SHA1 73555a9a8bf8ad42b64ccd448492e1e64c6856b5
SHA512 ffe65100786cd33e4c9251665e6506ddc4b875426f9315ca051f09b03d645706a47af0e3db0fc3e069d7964226f5ad5e145aa22dd9d905dc51767c48905c3709
SSDEEP 192:3UWVrWff5pA7FGQNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHQrq6hrFr:3d5Wffs4QNyEIYi2mL4/y8RLVHQrRht
TLSH
T18513857046E85A49F7B33B34A8B41A3D4D7BBC9198F4B34D125061398970B41DABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_es.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_es.dll
Size 45KB
SHA256 766c440504bd67564c1fe2acab7407393e5825af868590fe46280a5d35b7d520
MD5 0fcabd8cde45989b3f02caeff6dcfc3a
SHA1 0903111934df74226631933c8417f88def616187
SHA512 c36f66479a1d88fd8979f25b901a3cf8321423057689cdf6697937e711426e5845669ae048bd45f23349afab805b16c99dbeb40a87cc5d01a179fe5d47b4c2ac
SSDEEP 384:XpadNzf1HNyEIYi2mL4/y8RLVH6kZeRDx:ZadNj1sYiDLk5/nZOx
TLSH
T17F23957156E85A4AF7B33B30A8B4193D4D3B7CD198B8B34D128061798970B41AE6DF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_et.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_et.dll
Size 42KB
SHA256 0422309e1e82005b5ba9788caf01595f575f712c774a76654fc2437ce63d282c
MD5 5798bdd1fd575a92d72fc6b6efa1ca5c
SHA1 e60a47c0cdc752e31984ebba9ceb8b79a4ed5665
SHA512 83ec60b087ff4daa39bea2c83515828f017a844739b8c49ae1a106d16b5bba6994cfcfe4431d2774487a1e8e3eeb0bd6b5451f9077aa79cad84391bd042753f7
SSDEEP 384:bpT7bDFbDZETJ9TSQANyEIYi2mL4/y8RLVHixExC:d396nH1YiDLk5/bQ
TLSH
T14D1397B256E49918E7F37E3068B45A2D59637DD2ADF0F34D224060389970341EABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fa.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_fa.dll
Size 42KB
SHA256 edd8c539f7ae7dce62f812f6f702929f07675eb5dfb06c0b932dedcba7bad212
MD5 ed44faa88c683e4a4aed48054a1072ae
SHA1 c255baf4707953d6d0bf087df50911ff82855da8
SHA512 4c8fa6b3de7846e3cca7d54cab7c4bfc14a484c0988acf46d72ffe34f6f946c76b8e313bd3be8552a31ccec1cebe8836e452a4661f9994668ab6a9a8dfbad8ce
SSDEEP 384:HMJZMK9Y5PNyEIYi2mL4/y8RLVH+bdZqpJat:sABEYiDLk5/0dEet
TLSH
T143131E368996CC38E7233A30D54BDC3F215361D868C1B77216D8643DDAB0369AA5FD2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fi.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_fi.dll
Size 43KB
SHA256 32a2b19eb8b2d64b379a412021cd387940be07db4ad449d9ef4d92208c6bd8b7
MD5 c7c88e48c3a23787f6071ff091efc7c6
SHA1 76111e21a650faf38608897ac5aa47f2d23bf20c
SHA512 654a057b0dba73105c16023bc32c14eced8373df6bf7fcb1bd3d352d3c436170c2b6d5d469ae82395d33db25d307b9c0421bec28852ca3618ed947a37df0ff76
SSDEEP 384:SE7ePEzPhXY7RzYd99hKh1GApNyEIYi2mL4/y8RLVHf/DK:SGePEVmKgWYiDLk5/G
TLSH
T15013867146E88928E7B77F3029B44A2D46237DD269F0F35E1A80603C9971341AA7DF7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fil.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_fil.dll
Size 44KB
SHA256 4ffdb92e9a53207df3dd8c4a2c335e80d676a8969e6851d5708c912577a801e6
MD5 9bc96932a29ff5295d02a513ea8f75fc
SHA1 6f412a170075696335004112abdb14661d129811
SHA512 916cb42b7404bb4255e879d39c2eeaac1667d1b3d06cdd831faf166b90ffc18e66bcfc4130c6318175fbcf857344122861f689c7b9c0085b1234d8b43258eae4
SSDEEP 384:YthjdaUNPw+B3RVaw7y0NyEIYi2mL4/y8RLVHNGrjxqwAF:uaU9w+B3RVawWxYiDLk5/8j2F
TLSH
T12B13B97156A8491CFBF73B3069A41A6D0677FC82A9F4F7452280613998313819FADF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_fr.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_fr.dll
Size 44KB
SHA256 8466d6fb5c8c40dfe9bf1c042b66b86e0bc0ab6f713d7a22a43db18707d2ac46
MD5 d68aa8c51a77cba6be833cce046d1cb7
SHA1 ebbb6c1d2844c2fb7f673e42b5a246f677b522cb
SHA512 bb343b77100be38aad0fd91f519b210392fda601e379c26462c150007bfaccd1051c71e261966f9efdaa447a83ea7af65ad30975f396bd790b3b1366e9897a04
SSDEEP 384:JgK98EoycpW4xHNyEIYi2mL4/y8RLVHtJDFZ1T:iKaycNsYiDLk5/XRH
TLSH
T14823877157E44A08F7B73B30A8B8592D0E277CDA99B0F35D1240A07D9930B419AADF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_gu.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_gu.dll
Size 44KB
SHA256 398b7f7bebd8aa48f6fe3a6754a2dc4f08c4bc46d12fbab2ec9e41c6ecc66cd7
MD5 48f6893231ced4d7e5423fb9e082a79b
SHA1 9b60b9b2fe172de6c32059d3941a695bbdf2422a
SHA512 760936c740eadd690dea128ab36609164883ab15832ced45e69c32e67d15904db705c82eb6ac00ece55ad29b42fd82df6ae2e419aa8c3ea40d34304a3b2b436c
SSDEEP 384:HS53UbeAV4DnYCRfwmkI2NyEIYi2mL4/y8RLVH9Rx9DTex:yJUbe7hb7YiDLk5/TO
TLSH
T1C723FD391A4B5C8FE32AB930A5A4593E532718C0D7E0F343119862799EF1313766EFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hi.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_hi.dll
Size 43KB
SHA256 9826dcfcbfbaf6af4d05aa1080bef8b7107d2c694d26a1ea49367155936f5e12
MD5 4395f07b4f88e11d75980b809c65f476
SHA1 06c0bb2c0e8de3a4ca08aa1cc247916dea1756d0
SHA512 f5c9bccfa3372e32b6f83bd322e2ae262eb52b2ea5cebc6ebb44bb6a3044b18ec01dafea8bfca33923d4e86b4d42c2b2acb6b7aabd722491a3107b1682fef155
SSDEEP 384:2lRxx6AN6AQqjexbyqKXhHqCEGNyEIYi2mL4/y8RLVHQm8ra:Wxx6AN6AQqjexbyqKXhHqC+YiDLk5/qa
TLSH
T112135E3204804E2CE35D7E34F4640ABF5CEB6491A9CD338166C471B9D9F533A668EE9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hr.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_hr.dll
Size 43KB
SHA256 59495d4298b764115706f4521f150e77fe0fe9e3faddaa4506e171c360337d7c
MD5 dec783deedec97678bae02106dc8b880
SHA1 a5021dd10f9e04f7ee0d7379a4510749a07bb386
SHA512 8021676fa584f836858c990e678dd3c1927e4e70ebee822e0706cc87fd77e676ad92abee9df6cf2d560150618a47f405b3e1fe49a23cac0fb1a686e017a673d1
SSDEEP 384:dsaqdOXz19szMH5KBL/xNyEIYi2mL4/y8RLVH7cvX9JEC7:yaZ5oL/uYiDLk5/m7
TLSH
T1DB13EF7196E41919F7F73F3064B41B3E097B78E1A9F0B34E118061788A70741AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_hu.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_hu.dll
Size 43KB
SHA256 9d8bb1be91832138417138e003e56ac61f3e0a1be6993753085335d5b6e1f97d
MD5 64dc0ab9aa88218db419681bfe0bbfa5
SHA1 f00d61e7a7128685ffc26f259bb439ad2be6315c
SHA512 729359adf8e5c73a86ba4528f80b27abe3c71f6e62f3d430921a7ebcf40a5d047a1c9ef0c0568ca1783fc83edc797d019cb61b3cb28b3ab4e2488a8a7f1f3aff
SSDEEP 768:Qy7U7RPX1C2TycfBwGFTbeSDY6931lBVZpjqAy3FGVswYiDLk5/W/9:Qy7U791C2TzpwGFTbZY6d1lBVZ5qAy3+
TLSH
T19113CB3152D84909F7B77F313DB04A6E0927B8A069F8F34E6180A1BC9931741EA6DF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_id.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_id.dll
Size 42KB
SHA256 1effc734b01c7180ed875a62ba258acd338f5c613123a1050ef0796224a5be84
MD5 8815e30e3ef7af69a5658fd08033dbdc
SHA1 528c2f60434460ba4a07dc9df4bf0edeb96ee216
SHA512 c9afdefd720ff9730ae6d195384f25c06d27f15d32975fc9913c63ce1be804deea714a79c7d2564037d9cb8734a5b47ca02edf42c7c2e4a82db767b48003350d
SSDEEP 384:H4DaL3THRNkAHqQ3lFRf2I9ByrUaNyEIYi2mL4/y8RLVHqPDDOd:kihR5HYiDLk5/sng
TLSH
T11713CAB142D8594CFBB73B3069B41A6D0A67BC92ADF0B34D224065389D707819E6EF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_is.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_is.dll
Size 42KB
SHA256 c451d333bae1a3c1d2447894f8e3a3bf6b4ceed57b51a934e8462b00e793f7e5
MD5 43d88dea4773c34030c448055e30a59d
SHA1 728ca65316f587430749878b104f10eadfc2c081
SHA512 ef417f2d4be76430306b341586424cc54311ce9c63849161dc6d0db444c1043f5b27b81cba4fe958e88216bfd479515cacc77ba934f2b9d3035f1a476aa0e303
SSDEEP 384:1aciZsioif2lIBuAjYkUVQFoMUefV3WNyEIYi2mL4/y8RLVH6oa:TiqibAIErkUVQF5UefV3bYiDLk5/8
TLSH
T15F13EB709398590CFBB77B3024E45A2E0A2BBDD29CF4F74D118465388931382AA6DF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_it.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_it.dll
Size 44KB
SHA256 fb92a3d4bf1fa5cda03447b3583e8770a0a8c47099b3eac7af595776404926e0
MD5 bb3d999a8966586a97fc1c0567306073
SHA1 5373106fa6937b63f6afc9a4a43ac09a5a047b6f
SHA512 1fcc1720df865f696ed765184204592d37d76fe2cd08c0bbe9500f4899877936b63557656d8a9dfad8d1e0c2eeac017411b24a0da818f1122fc50d695e9a0996
SSDEEP 384:x8+DIN+shh3HNyEIYi2mL4/y8RLVHoI33yc:OKIN+q3sYiDLk5/tb
TLSH
T1A623527156E85A18F7F33B30A8785A6D093B7D81A8B4F35D1281607C8970B119AADF3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_iw.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_iw.dll
Size 40KB
SHA256 284d5960d302d20a8e7037d44bbf260d911ecba73919126aa50b6a3ad1765087
MD5 f94b3d39be9d1db1f730efeb2450b03a
SHA1 2090b7bea39067b30a96d7f3a08baa3b4a71fc42
SHA512 5bc7db8f0a53e78a7cbc910951151e92d09cb4feac1e33dbaff27ab0d0c99dc87537492eb479c1914bad03daf61a8ef228b591a18295594e4ea2d082a94f13b9
SSDEEP 384:nixv7hdVexaDywGfJssaNyEIYi2mL4/y8RLVHrxOSc9:i9NM1HYiDLk5/t8
TLSH
T18A1352710A50CDDCEB26FE32A24E4D3E5663E6C055E4735320886470AAB9352DB9EF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ja.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ja.dll
Size 39KB
SHA256 f0451c7486530b549fe3fe5de9c74372511021c82e0a6216bcdce96382ca3d27
MD5 f6dd3aefea36926fca66e150109af575
SHA1 aafd1f8d6c92bf2a562d5943d9486ba164306ca2
SHA512 1677d9abedd8eaf0b71e7d9b059adf7325e4fa216d7c1a83d3cc2530798bd12d069abfef28ae42922383e0cf780521643a58347653c950d593170b9bdd9fab99
SSDEEP 384:/b3EHj0FgWKNyEIYi2mL4/y8RLVHxuY9Mj:j3ED0FgW3YiDLk5/0j
TLSH
T1050394B266904C0EFBB37A7050946E3E192BB4D155D1BB812184F03AD670346AB5FFBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_kn.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_kn.dll
Size 44KB
SHA256 9d7e1b34d7b2dd20559ce9ecd55a0a8200d9d477c27a49502d4de191921990fc
MD5 5bf71c10f5288913690b870d9498b1de
SHA1 825d4302d998f2f09322e6f3fbedf5888a9da385
SHA512 ffe390a3cfba044317527ed9639053345685238305e2f3b2d0f87890747b1348a05a1755b98fa720d03d320dcdd8182547118a84bc2fac6c1e614f33d23abd05
SSDEEP 192:0QIeQFHcVlOzM3Hw+a1Osb/pSJGqNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHeEF:fTaUIRBSRNyEIYi2mL4/y8RLVHei1r
TLSH
T133234F79827A9C0AE7D1BAFB7082193D911359C353E1F3813188503C9A707765AAEFDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ko.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ko.dll
Size 39KB
SHA256 f70f67f28a4e11e343b4782768f2899e9c28451ed4038c65cf45fc5181c41588
MD5 4594063dc1508e812ad7fa302998bbfe
SHA1 d94a3fe4a72e14a7cf94a09d924cb922439ac543
SHA512 d678cce7c39d6fb570ca17cba5e4e4a701e62bd655e4bfa88e20801e43eb0655bf716ca666e958c76d99120fc13afd1f8084995c480b370ca67f59be314fce91
SSDEEP 384:0Z+/Td4IY+N1vZsYoRHgA12plxB4xRkkTY1M5tkOUPNyEIYi2mL4/y8RLVHvrWgx:o+/WmAf/jvUEYiDLk5/z1
TLSH
T15103A4328590DC1DDB227A3165C15F7E627361D059D2B382B2C4B178DAB0382AB6EFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_lt.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_lt.dll
Size 42KB
SHA256 19e071fe3d9174c82cbefa3bca6bc2b48f29d3efb70a6c3dd196e2fc58296ba7
MD5 83b65a0ffcde4897d218010938ea631a
SHA1 501990b79bd0231107169d328cc6e59c4d0666be
SHA512 2656b87c117b4644c956baa3ca18ea46cd46f8b6803a344f80d7ff580c098d0514b363e6341bdd9287a41c34a1af5949c87554ea6b4aba72baaec6757680fa13
SSDEEP 384:jtA3nc9eHz0CwTmDq092XtNyEIYi2mL4/y8RLVHVEIzVArk:pOckHz05TmDq09FYiDLk5/D+4
TLSH
T1D913CB7152E8494DF7F33E3055B44E3E4A7BB8D169F0B34A21806179C9707819AAEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_lv.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_lv.dll
Size 43KB
SHA256 ced0da6882cdf05604e5f23b5a4f57ace6c4ee5ce8be4bded42b3cac75463c4a
MD5 510337199ff3ca317250306d5230a9b3
SHA1 261e56d22f4ee3c382c730e49821cf6500f80a5d
SHA512 5e8a43082225dd66a38a854e177f81e393d7bad0d6a0fc3abc4b6ed82726752388235d07d5a209c0150ca4d5e1111204b5a6a4f4a61f91cdc94c0db3f0914a54
SSDEEP 384:kQ6ZyAxOeK6e8NyEIYi2mL4/y8RLVHJz3P:N4upYiDLk5/B
TLSH
T15213967156E85A1CF3F37E3065B04A2E196B78916DF0F34E1140A1798A70B41EABDF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ml.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ml.dll
Size 46KB
SHA256 cc3925d5c900e3be8f6fcf84dd0b325bcc3680abd1f64bc1a2c6f1b9fc3c3d68
MD5 56c462bb69b425f769e87328c6c04a37
SHA1 6337edbc63cbc133cebf382255af4b29488a24d2
SHA512 277949942d1ac667ae2f39d5aa95ce1d5228be730980625eba260b672010b68ee46e9bc41bca24d1c8bda006fb64e9a53bc2089961d387f86876031291a92378
SSDEEP 384:S8dIB7FZygp8/JL+NyEIYi2mL4/y8RLVHsEoSpOH:XcWJLzYiDLk5/7pU
TLSH
T1BF2330761504ED4BEBADB57079851E2F509B1E8D8BE0F390219060B97D3A3032E6DFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_mr.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_mr.dll
Size 44KB
SHA256 fa3efe2998fbb476b083e4b5dd0db8c07b4c8a341918e188e875252b0aab4b0b
MD5 7189818b0f0e2c3f8ee107a458fde5f9
SHA1 e0bc1a5c10c73684b3e58b4bc144bb65333f3f30
SHA512 ba29f0fc74473aa9a93a5a631bd3312a8b923a63bb1be5adf8f988c2a009fd7c2eb56d34bbd98e46b963da276f8dc651a04d9da92e8646d7cddb8a33ff60f460
SSDEEP 384:8/zdo/7JK7bABkLNyEIYi2mL4/y8RLVHpl2qT:uho/7JK7b5YYiDLk5/yqT
TLSH
T123130C3941485D1AE32DBA70B4A41A3F0CE7288467E8F38516C4717CDDB433B6A5EE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ms.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ms.dll
Size 42KB
SHA256 ac4096f8ebfc348d21dd721f07e43794f76459039b95ceb58efb6310dc8e8c98
MD5 f366208662a42245e9acc94aee5f7eeb
SHA1 5add888decf73e1626b2fe38b5d51cba474352d9
SHA512 9c9ecbf6d682b23b2d8dc9432e48e25b190f4c6c7245ede0bd40d9c303f7e3466a50fbd9f2d5530c1ef26ee8d21bc5b2f11e227dbc0163600569fa1dd3b3ae18
SSDEEP 384:Z60OSeyrQLtUv6oNpaMkYjZZ/fbMgTRlRE/NyEIYi2mL4/y8RLVHFu+b:i8Zf3TF/YiDLk5/tb
TLSH
T1FC1399B142D8994CFBB77B3029B41A6D0A67BC82ADF0B35D524064389D707819E6EF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_nl.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_nl.dll
Size 44KB
SHA256 d31b89d3f05c60f6621d5dc320284b946f91f0a3519512f4f40008892c05ac02
MD5 dece0e6278a4be9fd94206f852eaed76
SHA1 8cad21915a93fd4e68ca4d59032eea7476b9f7c2
SHA512 07e90079276198a9045b0b7c15abf2d2b7c602bfef1ab05e3fd740a2cac8c6797ce1954cdafb575c73eb7cf9341b45e061c91d690816fbde8a2e4fbc74f05505
SSDEEP 192:ntOf6Xd/mkD3UK38yAa9W/1pNyEIYiYF80dmL4pUQaULc8pq8RuIQCFVHHcnFAkK:tI6Xd/T3kpNyEIYi2mL4/y8RLVHHcnK
TLSH
T1A413637247E8891CF7B73B3069B4596D4A777CC1A9F0F38D128061788970741AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_no.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_no.dll
Size 43KB
SHA256 c138bc33de535bc4c4084a6297a92ea4f8dcb477839b19f117ddf30c48e87e49
MD5 f0a64c01904ce9956887a107bb47da95
SHA1 d2de1edbfed036705a354fe3be7b13f8a539c858
SHA512 ca86990b415f5bfca9876db1636845950925724f58c561a2a99f551170f71314380c7cfbce35b0f030603a694465774cd01334c1775785e3fe5b1a1e75839481
SSDEEP 384:Jy5JZSiyCSiytNRAYiTvaK3QzNyEIYi2mL4/y8RLVHpMKaX:RNCYGiK3QQYiDLk5/EX
TLSH
T1B613537197E44919F7B23B3078B80A2E4967BCD1A9F0F30D124460798971385E6BEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pl.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_pl.dll
Size 43KB
SHA256 bdab9de34742748234dbd7edb07d30290835d88fefb3d5efec07c3a3fa2c1145
MD5 3fc24388f3def13f31e7b18fae308476
SHA1 9be3ff92741fee8899ccf1e7395ddefa261f7d55
SHA512 27d53e9135c1bcac9b3634f4c67becf3a76d9f92231e22ac8fd5351133a9fac18326d89937f0b0092c5f27e1578128a10fd8d41776503e9e93735613b2c235d7
SSDEEP 384:c5c7n7KZHCCA7U8Gp6zNyEIYi2mL4/y8RLVHgGZT:v/y3AIyQYiDLk5/nT
TLSH
T1A013FD7196F40908E7F37F3065B41A7D8A7B7C91A9F0B38A224061798570741AA6DF3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pt-BR.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_pt-BR.dll
Size 43KB
SHA256 bc0200cf2aa39daf3f17def9f88d070875738a35f9c92a5147037ba4afaa51f8
MD5 25f9aa39acb11f6a0717e2302aa2f8d5
SHA1 7507bcf3871ec2a041a991445276ad42f59d74e5
SHA512 17fa4cf2eaa2f550c252ed0d4bc06fcd3a769c6767a8438c1d952f03817769d2be3e9dc052335bee8f71f4c1ef1e4f3dbebe64481ae5fc3408f7309ec03f3a66
SSDEEP 384:jZYxmgZcOZX8FNyEIYi2mL4/y8RLVH9ASc1ZX:Xeg6YiDLk5/Y
TLSH
T1A613A77286F84A08F7B33B356874193D8977799168F4B34D124060399D70B41AABEF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_pt-PT.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_pt-PT.dll
Size 43KB
SHA256 11a9211b04f7b8f7b213c957d8c8af9543d60063b761f2c02392a8c872781a7e
MD5 2e2a8fca23f34c2570fccf6bd7d60abd
SHA1 7179f7be334308d349b9a22be99c31c9d7f20605
SHA512 0e28aa8fc3f9147f76fdf9283fdf18e8807f217ec4696d44204121234141295dad56b6276813192dfb4e705a87fb6f11b718f7c46b1711529d0e129c6a14f3d2
SSDEEP 384:YJpqzstnEx6ewBXNyEIYi2mL4/y8RLVHBK4eDuj:rIEx/U8YiDLk5/UWj
TLSH
T10613877296F84A18FBB33B316874193E4977789198F4B34D124061399970B41EABEF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ro.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ro.dll
Size 43KB
SHA256 03aa2cfb87e018ffb00d43f02af28806b7230ce20375d7fc8722dc51446408b7
MD5 01b1f4fcff2c1bfbe41af328b7bf4abb
SHA1 ac682a93dea9b313347c347ff2b8c4e84d6d6f75
SHA512 4cba6e659c98dc9e80006b1dae831ef0a450feff0521671450a252d1e146e96d448911fbc13e6cca93705f54547310dfb69c8138e60a09e2b3d00a7264e5199d
SSDEEP 768:X0CRNNDM7qm0GdVqT541naEp9YiDLk5/mk:XudVqlcaK7Hk
TLSH
T17913C97153E81A18F7F33B306874193D1D7739A299F5F34E124460788A71B81AAADF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ru.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ru.dll
Size 42KB
SHA256 86fbf734046ef4676f19fab3be40555de193b5604d2954ea59e2ce0c086fb92c
MD5 daac75e3cc47451966f346db46f93e26
SHA1 a8a7ee4b11bce0f622f45c712c18333cdf95d82d
SHA512 9d6feffdbb4620f9912fd5acddf998afb3bb3cfe21cea5a4262899b4a71af0b0a792dbca0542458c826cd224b56a252175db9a2f9a07ae0594d689aa77297b7a
SSDEEP 384:nS5FA47AvHlho4d25/NyEIYi2mL4/y8RLVHw1toShTt:S4vHU50YiDLk5/+
TLSH
T106130E7BA6688908E715B6701A914DFF206777A027D5B3C2618F7C74A074332772EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sk.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sk.dll
Size 43KB
SHA256 b2943158a333968a6058748e187c376060a0b287e185db6bc9583e2322db8268
MD5 48f414678a7949171785e47497fb4fbf
SHA1 f0f01cc0db07f6c5b3c1270c3d76313b24339363
SHA512 4f70781b872807defb177bf0440a8c1affce866b6d3d85e6396da322a84a4b931fc597e7034766e9e31eafaca707b357793eb322f9d4a603aa17832b1e11b5c8
SSDEEP 384:YuI8uhJPiR6gLTnNyEIYi2mL4/y8RLVHjYVb2:LO8RjMYiDLk5/r
TLSH
T1B113107252EC095AF7B37F3064B0497E0A7B38E1A9F4F34E5140A17889707819A6DF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sl.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sl.dll
Size 43KB
SHA256 8a89f32bd23cf216bf8bf17f46b62af096d17d71f3105803b7897b982c1d66c2
MD5 6bd2600bf3986cdde75c441e660a94d3
SHA1 561e263a9981f3400d7370f357dc90e55341b303
SHA512 646cf570d2ecb982b61cad5e24de5fbad788967e9acc8a6de5ca29736d5bf3b1c7e33ea073201f18a8c5408b0169230872f7a4a3b2f675e25b56f194521cceb2
SSDEEP 384:wkgTcshVyigOHHTpWBdH1i2IXousPNyEIYi2mL4/y8RLVHCbt8i9:lDhOHHy1YZsEYiDLk5/0p9
TLSH
T15E13987152F8090DF7B77B3054B40A7D0A3B79E5A9F4F30D118461B88971382AAADF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sr.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sr.dll
Size 43KB
SHA256 a7e61f272b12d806a3c62591658a84bc100d79c8bb24d85445b879d7e8e1134b
MD5 a2e14e7426ce6f03596feacd984f78b2
SHA1 3e9a82fe6e5fe7f11087a66d8a41fd0b12a35da5
SHA512 91f63151c5e1baa61e0b04c2eaa1f25932d70c7cb12859b3cbbcd09280815d66ce51b17345ca4fecf1c139b76d2ee93fd643f60c2f657dc78efa119bb47711b7
SSDEEP 384:Ip4aOxCx7UjYN3tGMNyEIYi2mL4/y8RLVHqEImUh:Q40Uj+dG5YiDLk5/HUh
TLSH
T1BC13A83FA5B84908F751B2301AA489FE256B779067E47386518F7C74A138732371EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sv.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sv.dll
Size 43KB
SHA256 5c3c4807aa80e4e6bc24a3e72d2a05de1e705450d3ea9418d7ee57e742336afc
MD5 74795ef43793bca90595b172a82e0e40
SHA1 74dfbcd0efe374838a5aea8ce1cf9212269fbed1
SHA512 2016791866ca76002f267c735837aab1877af69027633c50db9632ab014765c5c1114862a480e0652dad2d81e5f71ea3b0d8fa106fd10619b44f1499d391e9b9
SSDEEP 384:nK0xC7Ec3EINyEIYi2mL4/y8RLVHX49l0wUT:K0xCYc3ENYiDLk5/I9l0D
TLSH
T18A1383B147E8491CF7B33B3068B44A2D1967BCD159F5F359224064BC8970742AABEF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_sw.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_sw.dll
Size 44KB
SHA256 27d25b3687e9734dae0525e9d719fe8ec798e1bd55bf8bc7aec153fae0f87f42
MD5 275028b93a79c045673f071a972605b5
SHA1 c2ed1f68fe89a0c616917d321823829cd949fd3d
SHA512 21b76937921a7bb2d30468bc52d70a8ffe01281b424be63d179a8804cc8710a9a7f37f6e0a709f57cf72a92270397cfe40bcbb43c00ef79e5f98adfc1158cc03
SSDEEP 384:4pUgicgiY7upr4M5+NyEIYi2mL4/y8RLVHz+7RWc:0UQ07Gr4M5zYiDLk5/yoc
TLSH
T1B623C838455C5D4AF7F7BE3179D06A2D062379A26BF0F385108460388D307A39AADF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ta.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ta.dll
Size 45KB
SHA256 0a701a4b7d31f0701c337ed4e78f2149918c529b25b97b7ed9f2c646dd54af3b
MD5 09ff17df7ee72f37b40cc8e75a275681
SHA1 96f8435d44178affb847d4321344f8ba95f0e51d
SHA512 284743cc4e6f2944bb5333b86900a744bebcb10c86aef84e54591a0baa6dfc1d3fe7f0cf65abc9f9a411a7ccee3cabd161ea39b5a7ea75064b49da5126dcf156
SSDEEP 384:NuNwMY51ZLm+4HwNNyEIYi2mL4/y8RLVHSLpGc:4NHY51ZLm+4HwSYiDLk5/SLV
TLSH
T18523323C0A1BBC0AEF21B93179A9593E05172880D7E1F3B02199647CDEF8B12666DF5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_te.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_te.dll
Size 44KB
SHA256 ce030efe866b7db36a75c04a078552429d7cf6d6e6b4bcd23402934d70638779
MD5 2ba3ceb2021fdc5a50f7bd41f5aea2e2
SHA1 4dbcec8a11e4a9418b869ecdbe18369e761e8cdb
SHA512 11ae5e5de24727d8eeb672ba525e165714ceb831b7101f0189c688a70f96641a584d637581d12fb9286dbad573c2b151bbe6acc74c4fd53821eafe69811e2efe
SSDEEP 384:8bnig45Z4aJ8LD+NyEIYi2mL4/y8RLVHcbllfIcLT4:aniN5ya+LDzYiDLk5/GWcY
TLSH
T1C4232C3949085C0AE3DDBAB074D46A3D186759C06FE0F36290C96038DE717376A9DEEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_th.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_th.dll
Size 42KB
SHA256 d6d780cc1649824c936eb3fa17c788b4024fcebc4a1080c909fb147b92e83066
MD5 b7eca92f221b759abb268875505e1a45
SHA1 c4db75ea49e7864febfad29d19f80f65d573ea40
SHA512 03a642b4a4386a62a45416cf0e4c329fce98da6a4e95ab5de1b70acf97a3b74dc259b8e8f0892cebbff6103e95debfb2b4914f7b102ba1c02c48c24fe19d8b70
SSDEEP 384:Tq4lrGsMKNMfetNlNyEIYi2mL4/y8RLVHp+j:O4lrGszNMfetNaYiDLk5/S
TLSH
T1C213FAB182B15E0AC71BB5B0E1D44E3F3C2B6591C8D2F391909AE934D67032266FED6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_tr.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_tr.dll
Size 43KB
SHA256 813a15466aecf8bbb992e21f506a202d5d0be3cfe14e4208f80844a7ed6d1f92
MD5 490f8a71e5bffa1b37ab9d77a7cb2a47
SHA1 e4c1565778c0c673e110f5aaa2c45e24125a186c
SHA512 5d0c8a83684f9947dd271ad8fca53fa1d69ef049d63faceba7f147aae19333ff05dddede7b6ad2b34b8341fc9641c5de2fdc0897d601018ccaea0ac0b5742615
SSDEEP 768:h1p9ABk6qXQEdmvgh3FGk+G9Ahrx++BzQSXKYiDLk5/NM:h1ZhdmvMFGkSxLQKK7N
TLSH
T1AC13CB3143D84E0AF7F33B3428B4593E0AA779E5B9F1B34E2191A13989703815A5DF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_uk.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_uk.dll
Size 43KB
SHA256 859b5c812028204282af314af0fe481939053d9a76f33502e7ee40e258f4003b
MD5 c84fe14fb9f7d1ba6df01922fc737a3c
SHA1 449d3ef66384fda8a4d0497585005b673bcbe623
SHA512 1db7e428a42891d7b1cde89fe8ec532f2d1729beeddd53c9f7a02ddbeb22e01988214e249a7398b741d6e6886bf3bd1be1fb37be1f9398466e17f7901eb527e3
SSDEEP 384:/tbuKgHWyC2EeovVHE/GfuLNyEIYi2mL4/y8RLVHkPxBlmIT:Fbu2uYYiDLk5/ow+
TLSH
T16E13C63BA5788858E71AB23119968DFF1467769017D5B3C5628F7830A078332772EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_ur.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_ur.dll
Size 42KB
SHA256 7501b46601b16989def51a3bec5a6f275323d00d93e4b6f692abe00447c7ca73
MD5 19c8b231fc480e442ebe6600b3af677e
SHA1 4d82e2e697044091b30b2c22cd13212cdfe2b0a2
SHA512 f260f7c4493a0d93cbad703bb514bcd6cbc17f57f886ea65c901c59e00f1e9ad64f0eae9017cbc7cb934df45d6fdd5eb1636a703df9eab542a4210bf42e4fbfb
SSDEEP 384:VfIoo+OmAcoWu9CeeZyYGLNyEIYi2mL4/y8RLVHAEGL:pIoo+OmAcoWACeesYxYiDLk5/Rk
TLSH
T130131D754464CC7CEB733A38C046D83F262360D455C2BB316ADD643D9AB13A29AAFD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_vi.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_vi.dll
Size 42KB
SHA256 f403f637ced922caf83e7cf64ff78a110d3efe4af712427ad7965f2e223eec7c
MD5 12d97fbab697f02274834f8844a0d5f5
SHA1 0790625fa1ab3496f364ea45acda7c6618588aa2
SHA512 e14bef552abc3ea3460fb2c01e70e5ea86ed4dcbb637ae0857c2b3c4f5fc936e18411a33f38a3c368f2c08a955645652831536f0e881dad89289d8ecf286bd84
SSDEEP 192:yAUFZzLrEFUEN+mVNjXvCOAqFjnc7NyEIYiYF80dmL4pUQaULc8pq8RuIQCFVH7N:JQZfKFjnc7NyEIYi2mL4/y8RLVH70IX
TLSH
T10B132C70C62B895DF77237301498193E1D2BBDE1A4F6F342A286A97496707025F4EF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

goopdateres_zh-CN.dll

Path C:\Program Files (x86)\BraveSoftware\Temp\GUM16C0.tmp\goopdateres_zh-CN.dll
Size 37KB
SHA256 1562c8f7734834f5895cd18ec8d9a315632d0cd559e22a51395f20dc82461940
MD5 056359379dfe627ab9bb589be7297e8c
SHA1 c327bf93d8139c6063c666a8f36724dda6fff0fc
SHA512 406cfcdd819ab4c110a4575dc4644c4803d02fdc4f5f1061198fc4cce6f5dbf08b1859997e75ecca5159999276dc0ea9a5d261c9f5d3e7e17bc2dc531084db46
SSDEEP 384:oopOyZshAWBuNyEIYi2mL4/y8RLVH/MS/:AZAWBjYiDLk5/p
TLSH
T1D803B47646904C4DEB333A3064D45E3E9A37B1D019D1B38671D4B435DAB0702ABAFE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BraveUpdateComRegisterShell64.exe

Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
Size 170KB
SHA256 1dd463192561e8953b0625618119d21f80bf1923828b3bdc97c3d70adaa39846
MD5 f15bffefa9b2f377a3a49d9dd147f67a
SHA1 c04a8590c4ab57ccb74d13dd4df4f2049e4aba07
SHA512 97932e461c250243b5d2e9cb086082c8f9a97d9dde664dffd080f5419693fb35213030eebefec4825b703040863b4c4aed293bcf252a9659355a69a26bc19966
SSDEEP 3072:vurxDqvsKxxDo4WVSWW/VaO7QAiOWdj/8lcVwvgB+cvt9:vMlKxxc4oIt97QAYxqoB+i9
TLSH
T12C045C1B73E430F9E1B78135C8924A16E7B2B8720B50E79F13A4477A1F336919D2EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download