Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    905s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-fr
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-frlocale:fr-fros:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 18:06

General

  • Target
    BraveBrowserSetup-BRV010.exe
  • Size 1.2MB
  • Sample260804-wpxvsaeg73
  • SHA256 5592d75e8e40f8379c598db99f402a6ebef26f5dd9b8659826852de1f67bd113
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file 2 IoCs
  • Drops desktop.ini file(s) 2 IoCs
  • Enumerates connected drives 3 TTPs 26 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Checks computer location settings 2 TTPs 10 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 4 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 25 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 18 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 10 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 14 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of SetWindowsHookEx 20 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe
    "C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV010.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1660
    • C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1832
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:1236
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4676
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:2336
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:1412
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:5204
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins3NzhGMjAxNy1GMEI3LTQxRDQtQkUyMy01OTVGRjVBODk3RUR9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7QzZFNEY4ODMtNkUzQy00QkRBLThFOEUtNTI5MTFGMzRBMDFEfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QjEzMUM5MzUtOUJFNi00MURBLTk1OTktMUY3NzZCRUI4MDE5fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjM2MS4xNTEiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iOTA2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3824
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{778F2017-F0B7-41D4-BE23-595FF5A897ED}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1228
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:5356
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:668
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:4028
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1104
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\brave_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\gui3E59.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5524
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\gui3E59.tmp" --brave-referral-code="BRV010"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4388
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.129 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff716db3368,0x7ff716db3378,0x7ff716db3388
          4⤵
          • Executes dropped EXE
          PID:3648
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\gui3E59.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:4196
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{AD1CC01E-5E1C-4CF0-BB4D-E8653CAE7263}\CR_BA276.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.129 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff716db3368,0x7ff716db3378,0x7ff716db3388
            5⤵
            • Executes dropped EXE
            PID:5384
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins3NzhGMjAxNy1GMEI3LTQxRDQtQkUyMy01OTVGRjVBODk3RUR9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7MEY5RDI4ODgtMjVEQy00MUFFLThEREMtNjY2REM5RTI1REFEfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QUZFNkE0NjItQzU3NC00QjhBLUFGNDMtNENDNjBERjQ1NjNCfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTUxLjEuOTMuMTI5IiBhcD0icmVsZWFzZSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3MDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIzOTAiIGRvd25sb2FkX3RpbWVfbXM9IjIwNzcwIiBkb3dubG9hZGVkPSIxNTYxMDYzMjAiIHRvdGFsPSIxNTYxMDYzMjAiIGluc3RhbGxfdGltZV9tcz0iMzYyMTMiLz48L2FwcD48L3JlcXVlc3Q-
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1332
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault15c14260hecebh481ah89b7h1e381661afe0
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5780
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault15c14260hecebh481ah89b7h1e381661afe0 --edge-skip-compat-layer-relaunch
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4456
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x2f0,0x7ffbc469c188,0x7ffbc469c194,0x7ffbc469c1a0
        3⤵
          PID:4696
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,2640278501485233670,1015986057859383546,524288 --field-trial-handle=3180,i,401691514169819569,3466427966547029547,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:3
          3⤵
          • System Time Discovery
          PID:2856
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,7989724288344871524,6894566853948239579,262144 --field-trial-handle=3180,i,401691514169819569,3466427966547029547,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:2
          3⤵
            PID:5248
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,10167443379204256091,4329685883529522536,524288 --field-trial-handle=3180,i,401691514169819569,3466427966547029547,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
            3⤵
              PID:2964
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=2860,i,3320042288485905879,7091920769986497110,2097152 --field-trial-handle=3180,i,401691514169819569,3466427966547029547,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:2
              3⤵
                PID:3900
          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
            1⤵
              PID:5352
            • C:\Windows\system32\control.exe
              "C:\Windows\system32\control.exe" /name Microsoft.BackupAndRestore
              1⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:5756
            • C:\Windows\SysWOW64\DllHost.exe
              C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
              1⤵
              • System Location Discovery: System Language Discovery
              PID:4016
            • C:\Windows\explorer.exe
              C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
              1⤵
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of WriteProcessMemory
              PID:2264
              • C:\Windows\System32\sdclt.exe
                "C:\Windows\System32\sdclt.exe" /configure
                2⤵
                • Enumerates connected drives
                • Checks SCSI registry key(s)
                • Suspicious behavior: GetForegroundWindowSpam
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:3784
                • C:\Windows\System32\control.exe
                  "C:\Windows\System32\control.exe" /name Microsoft.BackupAndRestoreCenter
                  3⤵
                  • Suspicious use of AdjustPrivilegeToken
                  PID:5772
              • C:\Windows\System32\sdclt.exe
                "C:\Windows\System32\sdclt.exe" /UIMODE /SHOW
                2⤵
                • Suspicious use of FindShellTrayWindow
                PID:5656
                • C:\Windows\system32\sdclt.exe
                  "C:\Windows\system32\sdclt.exe" /STOPBACKUP
                  3⤵
                    PID:2360
              • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe
                "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe"
                1⤵
                • Executes dropped EXE
                PID:5832
              • C:\Windows\system32\wbengine.exe
                "C:\Windows\system32\wbengine.exe"
                1⤵
                • Checks SCSI registry key(s)
                • Suspicious use of AdjustPrivilegeToken
                PID:4276
              • C:\Windows\System32\vdsldr.exe
                C:\Windows\System32\vdsldr.exe -Embedding
                1⤵
                  PID:5596
                • C:\Windows\System32\vds.exe
                  C:\Windows\System32\vds.exe
                  1⤵
                  • Checks SCSI registry key(s)
                  PID:892
                • C:\Windows\system32\vssvc.exe
                  C:\Windows\system32\vssvc.exe
                  1⤵
                  • Checks SCSI registry key(s)
                  • Suspicious use of AdjustPrivilegeToken
                  PID:5712
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k SDRSVC
                  1⤵
                  • Drops desktop.ini file(s)
                  • Enumerates connected drives
                  • Drops file in Windows directory
                  • Checks SCSI registry key(s)
                  • Suspicious use of AdjustPrivilegeToken
                  PID:3220
                • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
                  "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
                  1⤵
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:4592
                  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:5152
                    • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
                      3⤵
                      • Checks computer location settings
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Checks processor information in registry
                      • Enumerates system info in registry
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of WriteProcessMemory
                      PID:5864
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.129 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ffbc2efda00,0x7ffbc2efda10,0x7ffbc2efda20
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:412
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1792,i,10782106246052695107,14134223015976094679,262144 --field-trial-handle=1916,i,11226882894046831979,8798961499549163176,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=1920,i,18384244592241855277,4819933135337473277,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:2
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:1616
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2164,i,17460623524646048931,14339283548593524862,524288 --field-trial-handle=1916,i,11226882894046831979,8798961499549163176,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=1920,i,18384244592241855277,4819933135337473277,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1804 /prefetch:3
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Time Discovery
                        PID:3988
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2468,i,4462558967427728146,17440569727504912484,524288 --field-trial-handle=1916,i,11226882894046831979,8798961499549163176,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=1920,i,18384244592241855277,4819933135337473277,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2480 /prefetch:8
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:4600
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3384,i,3962383988463637178,14195205887488820480,2097152 --field-trial-handle=1916,i,11226882894046831979,8798961499549163176,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=1920,i,18384244592241855277,4819933135337473277,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3388 /prefetch:1
                        4⤵
                        • Checks computer location settings
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:1924
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3520,i,5985710760860871411,6210051472180514188,2097152 --field-trial-handle=1916,i,11226882894046831979,8798961499549163176,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=1920,i,18384244592241855277,4819933135337473277,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3508 /prefetch:1
                        4⤵
                        • Checks computer location settings
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:1220
                • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe
                  "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe"
                  1⤵
                  • Executes dropped EXE
                  PID:4332
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                  1⤵
                    PID:4532
                  • C:\Windows\system32\rundll32.exe
                    C:\Windows\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
                    1⤵
                    • Drops file in Windows directory
                    PID:5532
                  • C:\Windows\SysWOW64\DllHost.exe
                    C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                    1⤵
                    • System Location Discovery: System Language Discovery
                    PID:2460
                  • C:\Windows\system32\sdclt.exe
                    C:\Windows\system32\sdclt.exe
                    1⤵
                    • Suspicious use of WriteProcessMemory
                    PID:4168
                    • C:\Windows\System32\control.exe
                      "C:\Windows\System32\control.exe" /name Microsoft.BackupAndRestoreCenter
                      2⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:3080
                  • C:\Windows\system32\rundll32.exe
                    C:\Windows\system32\rundll32.exe
                    1⤵
                      PID:4392
                    • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                      "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"
                      1⤵
                      • Checks computer location settings
                      • Drops file in Program Files directory
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Checks processor information in registry
                      • Enumerates system info in registry
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                      • Suspicious use of WriteProcessMemory
                      PID:3240
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.129 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbc2efda00,0x7ffbc2efda10,0x7ffbc2efda20
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:4920
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1932,i,1615441182779439132,6891923444269351058,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:3
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Time Discovery
                        PID:3340
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1696,i,11051974286739896254,9926961691823475727,262144 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2040 /prefetch:2
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:4984
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,14462272886856771266,18406649994907590724,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2788 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5828
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3768,i,7521425556325406640,6231656787153210845,2097152 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3776 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5792
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3804,i,12628256186137738551,13761735470174935469,2097152 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3812 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:3500
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5220,i,8889563487612452660,6732263399447256000,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5224 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:3732
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,3009422170073901618,5361826563328088161,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5340 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5140
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4380,i,11772505005683494540,12718638941101287385,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5488 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:2228
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,4545238978843105931,16713799569300999649,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5576 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5516
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,17543433368605524314,4053092017273284343,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5460 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:5356
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,16393019527764234663,6395804200037620380,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5648 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:3812
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,3986049262099852973,12787876499037944262,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5780 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:4664
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,7753492875344466294,15170927435526169411,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5552 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:2996
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5980,i,1076547936383736131,11432790840973207024,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5988 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:2360
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4124,i,17683219747346581864,17847442086561398914,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5636 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:3560
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,15781719833358106861,2130115305103951845,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6080 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:2444
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,6686798297705826408,1476093240208722206,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5952 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:1016
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,6393895368799496703,11178976603965793499,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6008 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:4680
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5924,i,3107514464706728429,6500792056689593397,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5984 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:5372
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6100,i,12849575576653039659,8105775582220157194,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5620 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:740
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5924,i,11832385994669927903,8124754506311840559,2097152 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5532 /prefetch:1
                        2⤵
                        • Checks computer location settings
                        • Executes dropped EXE
                        PID:5332
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,2108281598840871411,5811303657899733042,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5900 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:5544
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4180,i,15061231663626381712,2062229661099881475,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5448 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:1948
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4020,i,9789004620010824549,8863365176941284525,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=4016 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:5684
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,17682078165492546646,3746977011579643448,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=3840 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:6128
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,2550546313338829522,4539086902198322493,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6096 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:2228
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,5208346404583613915,18124144285994833571,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5444 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:4300
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,127393757543700788,12169812235233303655,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=4996 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:5720
                      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
                        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,5659173528526590186,13333023863632232954,524288 --field-trial-handle=2044,i,17380631688709411577,8562760118219975899,262144 --variations-seed-version=main@3da77713ca0e1cefba28a0d4a34b5144325d2320 --pseudonymization-salt-handle=2008,i,1805154818590717247,11006875907401220687,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=5740 /prefetch:8
                        2⤵
                        • Executes dropped EXE
                        PID:1416
                    • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe
                      "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\elevation_service.exe"
                      1⤵
                      • Executes dropped EXE
                      PID:4340
                    • C:\Windows\system32\mstsc.exe
                      "C:\Windows\system32\mstsc.exe"
                      1⤵
                      • Enumerates connected drives
                      • Checks SCSI registry key(s)
                      PID:4300
                    • C:\Windows\helppane.exe
                      C:\Windows\helppane.exe -Embedding
                      1⤵
                      • Suspicious use of SetWindowsHookEx
                      PID:4932
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=528886
                        2⤵
                        • Checks processor information in registry
                        • Enumerates system info in registry
                        • Modifies data under HKEY_USERS
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        PID:160
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2f0,0x7ffbc469c188,0x7ffbc469c194,0x7ffbc469c1a0
                          3⤵
                            PID:6008
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,12151067548121125752,11123649031337253255,262144 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
                            3⤵
                              PID:1432
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,3985119466888320240,16336174445984366255,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
                              3⤵
                              • Downloads MZ/PE file
                              • System Time Discovery
                              PID:5416
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,3895308877315875788,9722854011573786036,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
                              3⤵
                                PID:452
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,6246278658562264360,11025787976602085162,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
                                3⤵
                                  PID:3896
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,772007080842683029,17099970914407261082,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
                                  3⤵
                                    PID:2952
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,16582359909154431628,9174771701109518143,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:8
                                    3⤵
                                      PID:6268
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,15239793883038450410,13829202783563064705,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
                                      3⤵
                                        PID:6404
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5180,i,14116714919437671187,9931537759630270465,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:1
                                        3⤵
                                          PID:6488
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,5739808374103793813,13474566038156334347,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
                                          3⤵
                                            PID:6584
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=fr --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,14376955421777615551,16151604435109323557,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
                                            3⤵
                                              PID:6692
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,1223402632014931094,16103201229059801465,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
                                              3⤵
                                                PID:6828
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,1223402632014931094,16103201229059801465,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
                                                3⤵
                                                  PID:6844
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5864,i,7153402860807485409,12595932516033274953,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
                                                  3⤵
                                                    PID:6848
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,15979496284046722972,5279899853299997957,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
                                                    3⤵
                                                      PID:6312
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,14630098686886591328,7716410299231308294,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
                                                      3⤵
                                                        PID:5252
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,4579215672316094183,12616547012456440309,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                                                        3⤵
                                                          PID:6628
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,13450108405340244407,1310305086828921568,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
                                                          3⤵
                                                            PID:6332
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,228090011755503608,11466840983001466865,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
                                                            3⤵
                                                              PID:6296
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,554535095877799345,12394617815123517197,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
                                                              3⤵
                                                                PID:3992
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=700,i,3128804081786956854,11899434371812207144,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
                                                                3⤵
                                                                  PID:3876
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,14088390701926645592,15186467518452454609,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
                                                                  3⤵
                                                                    PID:5520
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5920,i,1586255980074192607,6711544432045460205,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
                                                                    3⤵
                                                                      PID:4780
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6672,i,16474104251008073393,16385526987468521276,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
                                                                      3⤵
                                                                        PID:7096
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5952,i,10248697326311097246,15491761449321794630,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
                                                                        3⤵
                                                                          PID:3020
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5248,i,18334886141899477600,14739773667631726277,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
                                                                          3⤵
                                                                            PID:5976
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6940,i,12814660219350989704,11477726540631124796,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
                                                                            3⤵
                                                                              PID:4516
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5940,i,3277665873467726320,6860508802867524338,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
                                                                              3⤵
                                                                                PID:6324
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6380,i,15844302222141485886,9860164474003747117,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:1
                                                                                3⤵
                                                                                  PID:6444
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6492,i,8647343850948534151,10082192946743302897,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:1
                                                                                  3⤵
                                                                                    PID:2756
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3600,i,15738509813194063396,3101408696215297610,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
                                                                                    3⤵
                                                                                      PID:5728
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6456,i,996558593187776767,1357929978521117600,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
                                                                                      3⤵
                                                                                        PID:2932
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=3668,i,12034903131914468456,16354610214606376370,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
                                                                                        3⤵
                                                                                          PID:6300
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7236,i,4809808977592584467,18411210279298189919,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
                                                                                          3⤵
                                                                                            PID:4664
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7484,i,11401459632398250855,16190280694366531525,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=7420 /prefetch:1
                                                                                            3⤵
                                                                                              PID:5520
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=fr --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,4300594028264258381,4787304877824451443,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
                                                                                              3⤵
                                                                                                PID:6860
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=fr --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7736,i,6979861150823640395,6868273214098217612,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:8
                                                                                                3⤵
                                                                                                  PID:6972
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=5932,i,14585618338973205375,6190789702277708690,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:1
                                                                                                  3⤵
                                                                                                    PID:4512
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7228,i,10601296942253741472,5081831407058772881,2097152 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:1
                                                                                                    3⤵
                                                                                                      PID:1952
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,5807409520953836306,17296825934077024955,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:8
                                                                                                      3⤵
                                                                                                        PID:4360
                                                                                                      • C:\Users\Admin\Downloads\TeamViewer_Setup_x64.exe
                                                                                                        "C:\Users\Admin\Downloads\TeamViewer_Setup_x64.exe"
                                                                                                        3⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:2848
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsa8863.tmp\nsu8892\TeamViewer_.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\nsa8863.tmp\nsu8892\TeamViewer_.exe"
                                                                                                          4⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          PID:5164
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\nsa8863.tmp\nsu8892\TeamViewer_.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Temp\nsa8863.tmp\nsu8892\TeamViewer_.exe" /RUN
                                                                                                            5⤵
                                                                                                            • Checks computer location settings
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:1284
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\TeamViewer\TeamViewer.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\TeamViewer\TeamViewer.exe" --noInstallation
                                                                                                              6⤵
                                                                                                              • Checks computer location settings
                                                                                                              • Drops file in Windows directory
                                                                                                              • Checks whether UAC is enabled
                                                                                                              • Modifies system certificate store
                                                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:212
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\TeamViewer\tv_w32.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\TeamViewer\tv_w32.exe" --log --action hooks
                                                                                                                7⤵
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:6660
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\TeamViewer\tv_x64.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\TeamViewer\tv_x64.exe" --log --action hooks
                                                                                                                7⤵
                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:2952
                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msSmartScreenProtection,msWebOOUI,msPdfOOUI,ElasticOverscroll --lang=fr --mojo-named-platform-channel-pipe=212.3616.5494092317598675335
                                                                                                                7⤵
                                                                                                                • Drops file in Program Files directory
                                                                                                                • Enumerates system info in registry
                                                                                                                • Modifies data under HKEY_USERS
                                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                PID:2288
                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffbbb84b078,0x7ffbbb84b084,0x7ffbbb84b090
                                                                                                                  8⤵
                                                                                                                    PID:2840
                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1808,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1772 /prefetch:2
                                                                                                                    8⤵
                                                                                                                      PID:4324
                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:3
                                                                                                                      8⤵
                                                                                                                        PID:1000
                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2368,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
                                                                                                                        8⤵
                                                                                                                          PID:3788
                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=fr_FR" --always-read-main-dll --field-trial-handle=3548,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
                                                                                                                          8⤵
                                                                                                                            PID:6096
                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4488,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
                                                                                                                            8⤵
                                                                                                                              PID:952
                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4628,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
                                                                                                                              8⤵
                                                                                                                                PID:4008
                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4472,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:8
                                                                                                                                8⤵
                                                                                                                                  PID:7060
                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4440,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
                                                                                                                                  8⤵
                                                                                                                                    PID:4420
                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2188,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1176 /prefetch:8
                                                                                                                                    8⤵
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:4396
                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4576,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
                                                                                                                                    8⤵
                                                                                                                                      PID:6888
                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4084,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
                                                                                                                                      8⤵
                                                                                                                                        PID:4588
                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4404,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:8
                                                                                                                                        8⤵
                                                                                                                                          PID:4768
                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3844,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
                                                                                                                                          8⤵
                                                                                                                                            PID:6312
                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=944,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:8
                                                                                                                                            8⤵
                                                                                                                                              PID:3552
                                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4032,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                                                                                                              8⤵
                                                                                                                                                PID:5456
                                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="\\?\C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView" --webview-exe-name=TeamViewer.exe --webview-exe-version=15.80.4.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4408,i,2034888156179275957,4823309557303638938,262144 --disable-features=ElasticOverscroll,msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
                                                                                                                                                8⤵
                                                                                                                                                  PID:1584
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\TeamViewer\crashpad_handler.exe
                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\TeamViewer\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\TeamViewer\Logs\ErrorReports\GUI --metrics-dir=C:\Users\Admin\AppData\Local\TeamViewer\Logs\ErrorReports\GUI --url=https://errorreporting.teamviewer.com:443/api/2/minidump/?sentry_client=sentry.native/0.9.1&sentry_key=a22ee30ee0e542f6c295fa4f7c615660 --attachment=C:\Users\Admin\AppData\Local\TeamViewer\Logs\ErrorReports\GUI\0dd7a680-5dcb-4c90-37b8-3ccf42a820ca.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\TeamViewer\Logs\ErrorReports\GUI\0dd7a680-5dcb-4c90-37b8-3ccf42a820ca.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\TeamViewer\Logs\ErrorReports\GUI\0dd7a680-5dcb-4c90-37b8-3ccf42a820ca.run\__sentry-breadcrumb2 --initial-client-data=0xd18,0xd1c,0xd20,0xd14,0xd24,0x7ff73c0912f0,0x7ff73c091310,0x7ff73c091328
                                                                                                                                                7⤵
                                                                                                                                                  PID:6532
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe" --IPCport 6039 --Module 6 --ServerEnvironment global
                                                                                                                                                  7⤵
                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:1848
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\TeamViewer\crashpad_handler.exe
                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\TeamViewer\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\TeamViewer\ErrorReports\Desktop --metrics-dir=C:\Users\Admin\AppData\Local\Temp\TeamViewer\ErrorReports\Desktop --url=https://errorreporting.teamviewer.com:443/api/3/minidump/?sentry_client=sentry.native/0.9.1&sentry_key=954415e6171778f6d31e0ce31fa2a3d1 --attachment=C:\Users\Admin\AppData\Local\Temp\TeamViewer\ErrorReports\Desktop\0c17c09f-c829-4bde-ee16-a60feaf42613.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Temp\TeamViewer\ErrorReports\Desktop\0c17c09f-c829-4bde-ee16-a60feaf42613.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Temp\TeamViewer\ErrorReports\Desktop\0c17c09f-c829-4bde-ee16-a60feaf42613.run\__sentry-breadcrumb2 --initial-client-data=0x3b4,0x3b8,0x3bc,0x390,0x3c0,0x7ff68b3e3aa8,0x7ff68b3e3ac8,0x7ff68b3e3ae0
                                                                                                                                                    8⤵
                                                                                                                                                      PID:7068
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,13975350767149677843,12251246077253715923,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:8
                                                                                                                                            3⤵
                                                                                                                                              PID:5856
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7868,i,14876085248917408260,9845687030761811142,262144 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
                                                                                                                                              3⤵
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:372
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,1401194501362606576,2156436268755578317,524288 --field-trial-handle=2444,i,12180235907245885431,8069732024549613633,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
                                                                                                                                              3⤵
                                                                                                                                                PID:3520
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                            1⤵
                                                                                                                                              PID:4988
                                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource scheduler
                                                                                                                                              1⤵
                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:1748
                                                                                                                                            • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                                              "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /c
                                                                                                                                              1⤵
                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                              PID:4020
                                                                                                                                              • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                                                "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /cr
                                                                                                                                                2⤵
                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                PID:3356
                                                                                                                                              • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
                                                                                                                                                "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe"
                                                                                                                                                2⤵
                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                PID:4380
                                                                                                                                              • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
                                                                                                                                                "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe"
                                                                                                                                                2⤵
                                                                                                                                                  PID:3024
                                                                                                                                                • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                                                  "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource core
                                                                                                                                                  2⤵
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  PID:6796
                                                                                                                                              • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                                                                                "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
                                                                                                                                                1⤵
                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                PID:4212
                                                                                                                                              • C:\Windows\System32\rundll32.exe
                                                                                                                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                1⤵
                                                                                                                                                  PID:6988

                                                                                                                                                Network

                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                      Replay Monitor

                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                      Downloads

                                                                                                                                                      BraveCrashHandler.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveCrashHandler.exe
                                                                                                                                                      • Size 270KB
                                                                                                                                                      • SHA256 ea698af883bd96f1e4fb29b85785997420def8ec42e7f91fbbaf43f3db493582
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveCrashHandler64.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveCrashHandler64.exe
                                                                                                                                                      • Size 355KB
                                                                                                                                                      • SHA256 681d60a96bfb704c5a0d905c26f364f4869326c040319d3e9c706f3801e58963
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveCrashHandlerArm64.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveCrashHandlerArm64.exe
                                                                                                                                                      • Size 353KB
                                                                                                                                                      • SHA256 04d32a0f30fd2e685289814c709c15ba03096175f4638d1a4a3c49cb57748b1e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveUpdate.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveUpdate.exe
                                                                                                                                                      • Size 163KB
                                                                                                                                                      • SHA256 cef8c0af5f698a7665631844af423c8a09f63310520a4d3bebed4e4341fe1b6d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveUpdateComRegisterShellArm64.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveUpdateComRegisterShellArm64.exe
                                                                                                                                                      • Size 154KB
                                                                                                                                                      • SHA256 14e5f7d08369626c62a37f2d9920a9057653a007bf24d642d8c4c77cc4b1b00a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveUpdateCore.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\BraveUpdateCore.exe
                                                                                                                                                      • Size 195KB
                                                                                                                                                      • SHA256 d9ad02b89918d77763f133417f56b02349ee0b0f0f7d4f6e2409fbfaaefb167b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdate.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdate.dll
                                                                                                                                                      • Size 1.0MB
                                                                                                                                                      • SHA256 775f7d667acc1b117474d6dacce7ed83aa49ae2f7a92c5e50c11583cb88c2ac3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_am.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_am.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 e785d7058810a73e484ad0f7d5fcf55162d35180b79d8f3c06aadb75d80d56ea
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ar.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ar.dll
                                                                                                                                                      • Size 41KB
                                                                                                                                                      • SHA256 fe55a1546621d7f9405b0e4a29dbe7261599e6f94cd57fc310037fc43087e9b4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_bg.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_bg.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 46696c9da4526e22838e049d2e445f4ef47e5e755207c1113a595db28d1bb60e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_bn.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_bn.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 224ab75018f1a3744ca3b64e9ac031c8b628afbc5b767c94a8a7efbd2b8857f0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ca.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ca.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 e32bcf68448a40489f035c2dbdc5dd817554143e5900795e42dee85fb86287fb
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_cs.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_cs.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 7562edd2b97b8033eb89c14020d479d7ab092d3c487fcbab9b4b58663024d36d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_da.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_da.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 b8426493d7aed6d308f4ae5b93c0991784ee0a299cfd93d928bc8a96c2da3490
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_de.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_de.dll
                                                                                                                                                      • Size 45KB
                                                                                                                                                      • SHA256 9765c1efac552441deaf5bb6fef329e9e67ed65f540bb17cb1767718bd0c2349
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_el.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_el.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 e752f141dc7051b7d732c341d4879977a8be2c7e028fc8d745fa54cb7de5e61d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_en-GB.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_en-GB.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 f044b3a896cd6b97093c50608f52cd9d15a23038b1c878bc64a85a83c41dd635
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_en.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_en.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 43c7383c2b5463bb5e343268639aff19e676cf492e17ffc7633600a7de0ffb65
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_es-419.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_es-419.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 43360612616b2cc9690447812d6b9d024a9231c4723e7042711e544aa951e1a2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_es.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_es.dll
                                                                                                                                                      • Size 45KB
                                                                                                                                                      • SHA256 766c440504bd67564c1fe2acab7407393e5825af868590fe46280a5d35b7d520
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_et.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_et.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 0422309e1e82005b5ba9788caf01595f575f712c774a76654fc2437ce63d282c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_fa.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_fa.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 edd8c539f7ae7dce62f812f6f702929f07675eb5dfb06c0b932dedcba7bad212
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_fi.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_fi.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 32a2b19eb8b2d64b379a412021cd387940be07db4ad449d9ef4d92208c6bd8b7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_fil.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_fil.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 4ffdb92e9a53207df3dd8c4a2c335e80d676a8969e6851d5708c912577a801e6
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_fr.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_fr.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 8466d6fb5c8c40dfe9bf1c042b66b86e0bc0ab6f713d7a22a43db18707d2ac46
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_gu.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_gu.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 398b7f7bebd8aa48f6fe3a6754a2dc4f08c4bc46d12fbab2ec9e41c6ecc66cd7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_hi.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_hi.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 9826dcfcbfbaf6af4d05aa1080bef8b7107d2c694d26a1ea49367155936f5e12
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_hr.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_hr.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 59495d4298b764115706f4521f150e77fe0fe9e3faddaa4506e171c360337d7c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_hu.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_hu.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 9d8bb1be91832138417138e003e56ac61f3e0a1be6993753085335d5b6e1f97d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_id.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_id.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 1effc734b01c7180ed875a62ba258acd338f5c613123a1050ef0796224a5be84
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_is.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_is.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 c451d333bae1a3c1d2447894f8e3a3bf6b4ceed57b51a934e8462b00e793f7e5
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_it.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_it.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 fb92a3d4bf1fa5cda03447b3583e8770a0a8c47099b3eac7af595776404926e0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_iw.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_iw.dll
                                                                                                                                                      • Size 40KB
                                                                                                                                                      • SHA256 284d5960d302d20a8e7037d44bbf260d911ecba73919126aa50b6a3ad1765087
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ja.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ja.dll
                                                                                                                                                      • Size 39KB
                                                                                                                                                      • SHA256 f0451c7486530b549fe3fe5de9c74372511021c82e0a6216bcdce96382ca3d27
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_kn.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_kn.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 9d7e1b34d7b2dd20559ce9ecd55a0a8200d9d477c27a49502d4de191921990fc
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ko.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ko.dll
                                                                                                                                                      • Size 39KB
                                                                                                                                                      • SHA256 f70f67f28a4e11e343b4782768f2899e9c28451ed4038c65cf45fc5181c41588
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_lt.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_lt.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 19e071fe3d9174c82cbefa3bca6bc2b48f29d3efb70a6c3dd196e2fc58296ba7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_lv.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_lv.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 ced0da6882cdf05604e5f23b5a4f57ace6c4ee5ce8be4bded42b3cac75463c4a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ml.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ml.dll
                                                                                                                                                      • Size 46KB
                                                                                                                                                      • SHA256 cc3925d5c900e3be8f6fcf84dd0b325bcc3680abd1f64bc1a2c6f1b9fc3c3d68
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_mr.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_mr.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 fa3efe2998fbb476b083e4b5dd0db8c07b4c8a341918e188e875252b0aab4b0b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ms.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ms.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 ac4096f8ebfc348d21dd721f07e43794f76459039b95ceb58efb6310dc8e8c98
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_nl.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_nl.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 d31b89d3f05c60f6621d5dc320284b946f91f0a3519512f4f40008892c05ac02
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_no.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_no.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 c138bc33de535bc4c4084a6297a92ea4f8dcb477839b19f117ddf30c48e87e49
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_pl.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_pl.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 bdab9de34742748234dbd7edb07d30290835d88fefb3d5efec07c3a3fa2c1145
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_pt-BR.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_pt-BR.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 bc0200cf2aa39daf3f17def9f88d070875738a35f9c92a5147037ba4afaa51f8
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_pt-PT.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_pt-PT.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 11a9211b04f7b8f7b213c957d8c8af9543d60063b761f2c02392a8c872781a7e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ro.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ro.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 03aa2cfb87e018ffb00d43f02af28806b7230ce20375d7fc8722dc51446408b7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ru.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ru.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 86fbf734046ef4676f19fab3be40555de193b5604d2954ea59e2ce0c086fb92c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_sk.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_sk.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 b2943158a333968a6058748e187c376060a0b287e185db6bc9583e2322db8268
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_sl.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_sl.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 8a89f32bd23cf216bf8bf17f46b62af096d17d71f3105803b7897b982c1d66c2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_sr.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_sr.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 a7e61f272b12d806a3c62591658a84bc100d79c8bb24d85445b879d7e8e1134b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_sv.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_sv.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 5c3c4807aa80e4e6bc24a3e72d2a05de1e705450d3ea9418d7ee57e742336afc
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_sw.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_sw.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 27d25b3687e9734dae0525e9d719fe8ec798e1bd55bf8bc7aec153fae0f87f42
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ta.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ta.dll
                                                                                                                                                      • Size 45KB
                                                                                                                                                      • SHA256 0a701a4b7d31f0701c337ed4e78f2149918c529b25b97b7ed9f2c646dd54af3b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_te.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_te.dll
                                                                                                                                                      • Size 44KB
                                                                                                                                                      • SHA256 ce030efe866b7db36a75c04a078552429d7cf6d6e6b4bcd23402934d70638779
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_th.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_th.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 d6d780cc1649824c936eb3fa17c788b4024fcebc4a1080c909fb147b92e83066
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_tr.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_tr.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 813a15466aecf8bbb992e21f506a202d5d0be3cfe14e4208f80844a7ed6d1f92
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_uk.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_uk.dll
                                                                                                                                                      • Size 43KB
                                                                                                                                                      • SHA256 859b5c812028204282af314af0fe481939053d9a76f33502e7ee40e258f4003b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_ur.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_ur.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 7501b46601b16989def51a3bec5a6f275323d00d93e4b6f692abe00447c7ca73
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_vi.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_vi.dll
                                                                                                                                                      • Size 42KB
                                                                                                                                                      • SHA256 f403f637ced922caf83e7cf64ff78a110d3efe4af712427ad7965f2e223eec7c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      goopdateres_zh-CN.dll

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Temp\GUMC7B1.tmp\goopdateres_zh-CN.dll
                                                                                                                                                      • Size 37KB
                                                                                                                                                      • SHA256 1562c8f7734834f5895cd18ec8d9a315632d0cd559e22a51395f20dc82461940
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      BraveUpdateComRegisterShell64.exe

                                                                                                                                                      • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
                                                                                                                                                      • Size 170KB
                                                                                                                                                      • SHA256 1dd463192561e8953b0625618119d21f80bf1923828b3bdc97c3d70adaa39846
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_1044730164\manifest.json
                                                                                                                                                      • Size 95B
                                                                                                                                                      • SHA256 91c0538b49b0b2cc56f4f8314dd8a7b1a10cc06694cfb81dca76f522c9d7682f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_11110670\manifest.json
                                                                                                                                                      • Size 584B
                                                                                                                                                      • SHA256 04e1259680a80adfd0426bef6b17f8fc65d25989350a0ac9b3e49d2da52e3988
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_12524351\manifest.json
                                                                                                                                                      • Size 564B
                                                                                                                                                      • SHA256 c028cfdfc2b42d45c0ddeb867e54987a8fc1891ba0398efd6f1c93f932f04577
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_1525968447\manifest.json
                                                                                                                                                      • Size 86B
                                                                                                                                                      • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_160674851\manifest.json
                                                                                                                                                      • Size 581B
                                                                                                                                                      • SHA256 e9b2bef1e170dde425ab4e7a432b3ed9eeb71797035bbd1c4c8bac5054e8e39a
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_1665409095\manifest.json
                                                                                                                                                      • Size 594B
                                                                                                                                                      • SHA256 14ff5572db5b76f45d000506116c44f0e2247071644724c22bc57f0d0d52d6a0
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_1700174192\manifest.json
                                                                                                                                                      • Size 533B
                                                                                                                                                      • SHA256 55a0c0461cde1db922ebc586d54a8fe32eb18029fe463a896305256e0a9335a1
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_1783171181\manifest.json
                                                                                                                                                      • Size 580B
                                                                                                                                                      • SHA256 bfad155b88d1441588aed8777cd1548d05edbf513bfb6da5917a384db7e3acc2
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_2103618838\manifest.json
                                                                                                                                                      • Size 592B
                                                                                                                                                      • SHA256 8716d7b13188570f04e76da21bf2f14858fa5943881017179f2f34304c99352f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_260439865\manifest.json
                                                                                                                                                      • Size 591B
                                                                                                                                                      • SHA256 4fb0325523527dd4ce6bdfd48e539a7dc959fff0bbc8b963dc56452ee54c3a66
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_29354635\manifest.json
                                                                                                                                                      • Size 534B
                                                                                                                                                      • SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_465922253\manifest.json
                                                                                                                                                      • Size 587B
                                                                                                                                                      • SHA256 62ec2f8a55cb04d4d50660b7f2d30cb55ea860b09d740821dd47690c32ed6d57
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_52065673\manifest.json
                                                                                                                                                      • Size 517B
                                                                                                                                                      • SHA256 b3d527bd2acea9459725d3b147d8334034bd5e45acf0880f2ea119bf5dc5a6f4
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_577634459\manifest.json
                                                                                                                                                      • Size 512B
                                                                                                                                                      • SHA256 7a9156f3cfa8bcc9093a1868a3566096fbe2ea584a0855ffb1a66b1fe41ad119
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_588675749\manifest.json
                                                                                                                                                      • Size 558B
                                                                                                                                                      • SHA256 aa2aeecc64079c5dffbcb7031017b183c3d2f76a5378813002ee6d1e415f8987
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_750441337\manifest.json
                                                                                                                                                      • Size 546B
                                                                                                                                                      • SHA256 b1ef0a2c740ac12d0eb5bf0e1deeaf0135068dc4c2f0c225a29466f4dbd93eec
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_824917873\manifest.json
                                                                                                                                                      • Size 587B
                                                                                                                                                      • SHA256 82e9d13da276d20aa981b6ae470e6b09685d139b11e2061b2646d27973fb82ba
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      2dd3bf61-d5e7-409b-9d3d-50e3c745961b.jpg

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\3c2f7832-eeea-4d37-a587-1564c0956cc9\2dd3bf61-d5e7-409b-9d3d-50e3c745961b.jpg
                                                                                                                                                      • Size 417KB
                                                                                                                                                      • SHA256 f219514eb94ec57c320a3bbe6cb0afa6d70fc9312d9152fcf0b35b187a9e0399
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      45903185-12d0-40a0-b575-7cd1efbd949b.jpg

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\412e2691-d708-4558-9b1a-269f681564ac\45903185-12d0-40a0-b575-7cd1efbd949b.jpg
                                                                                                                                                      • Size 240KB
                                                                                                                                                      • SHA256 77e55dd2b71a195ab481d3dbc185d72179903dcfd4525a7fc99d1d1787eb1e39
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      2c8aa2cb-f950-4b79-aff3-da35a38dd690.jpg

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\4ba7cac3-3a7f-4634-b868-ca6da5683dca\2c8aa2cb-f950-4b79-aff3-da35a38dd690.jpg
                                                                                                                                                      • Size 368KB
                                                                                                                                                      • SHA256 17647f2b50a189001f0c62de4e91cef030fe577253e327f04072be7a4a8e30ce
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      verified_contents.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\brave_metadata\verified_contents.json
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 5f0b874eb115ca7359f5e4594ce1cf472760c75420f6e026a2f74755b0765a6f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
                                                                                                                                                      • Size 341KB
                                                                                                                                                      • SHA256 2a54364257349b6c145fa4dd7ec41d3e0b8ab3144205b6f0cd58578aa370e671
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      ask-brave-icon-DdJTJrmV.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\ask-brave-icon-DdJTJrmV.webp
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 3788d823c7714a2e36547bd5fe86c834b86cb6c182858e047789aee196f1f598
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp
                                                                                                                                                      • Size 89KB
                                                                                                                                                      • SHA256 e0b0cfe5973b946bb2919d87d875a34e2b525171f1bfa475c0deec0e2a044736
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp
                                                                                                                                                      • Size 84KB
                                                                                                                                                      • SHA256 3bb3d5f492e71d4ad79872906108125d4f01c2005ab27552eb3d5f52f428abda
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      de-de-wird-die-sonnenfinsternis-am-12-august-in-deutschland-zu-sehen-sein.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wird-die-sonnenfinsternis-am-12-august-in-deutschland-zu-sehen-sein.webp
                                                                                                                                                      • Size 66KB
                                                                                                                                                      • SHA256 e1930e71d842ad513c6c4faac354aad6a6cb80339633f89156034ac51bc673ef
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-ca-whats-the-tallest-free-standing-structure-in-canada.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-whats-the-tallest-free-standing-structure-in-canada.webp
                                                                                                                                                      • Size 64KB
                                                                                                                                                      • SHA256 83a011a9a26d8c47ee8e55d4c6af92e80f64a104166bac91f508615aa4c25716
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-ca-wheres-the-best-place-to-watch-the-perseid-meteor-shower.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-wheres-the-best-place-to-watch-the-perseid-meteor-shower.webp
                                                                                                                                                      • Size 63KB
                                                                                                                                                      • SHA256 7cd1aaa11e5ecdb89c3b1756f4d201d5fb4defa34a737a671c70f4ce39e16512
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-ca-why-do-loons-make-that-eerie-call-at-night.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-why-do-loons-make-that-eerie-call-at-night.webp
                                                                                                                                                      • Size 61KB
                                                                                                                                                      • SHA256 b4a4149a5d5820df9d290ae2b82138a5a86db000393feb74acfa0db0b65ad920
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-gb-whats-the-loudest-sound-ever-recorded.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-whats-the-loudest-sound-ever-recorded.webp
                                                                                                                                                      • Size 113KB
                                                                                                                                                      • SHA256 fa4536790374bde58f92fa2015544b893437c528ea2bc1e6935a419a3a7cc053
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-gb-why-do-robins-sing-through-the-night-in-cities.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-do-robins-sing-through-the-night-in-cities.webp
                                                                                                                                                      • Size 65KB
                                                                                                                                                      • SHA256 159ead72d2a82344869b7b2635e18188178b8550c94ae5dc1d426bb53f7f031b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-gb-will-the-uk-see-the-total-solar-eclipse-on-12-august.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-will-the-uk-see-the-total-solar-eclipse-on-12-august.webp
                                                                                                                                                      • Size 60KB
                                                                                                                                                      • SHA256 ec3633708525f629e39466e84946b74ace63b66fb36ba6fbdbe0a513e2c175ae
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-us-what-does-space-actually-smell-like.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-what-does-space-actually-smell-like.webp
                                                                                                                                                      • Size 80KB
                                                                                                                                                      • SHA256 0c40d0a8cbdb67b6fdb20aa4d0a01bec08f862fcda6058a759a2e479cfe736c8
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-us-when-is-the-next-total-solar-eclipse.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-when-is-the-next-total-solar-eclipse.webp
                                                                                                                                                      • Size 67KB
                                                                                                                                                      • SHA256 c14968bc2fac58ef7e825fb48e4df2031de1ac753058e923221d8c99a4f88da4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      en-us-why-do-flamingos-stand-on-one-leg.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-why-do-flamingos-stand-on-one-leg.webp
                                                                                                                                                      • Size 97KB
                                                                                                                                                      • SHA256 e6900ccbc3cfd91c5c8dd14ae66dfd46687c4b028b62b0c1c26a726ba8b380c0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      es-us-donde-se-puede-ver-mejor-la-lluvia-de-meteoros-de-las-perseidas.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-donde-se-puede-ver-mejor-la-lluvia-de-meteoros-de-las-perseidas.webp
                                                                                                                                                      • Size 80KB
                                                                                                                                                      • SHA256 59d78c615a13235834d28ca4aefeffb5805bd06ff6553058f84094fbb86b5acb
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp
                                                                                                                                                      • Size 66KB
                                                                                                                                                      • SHA256 7bdfc33b83981fe9ea30a7025b80e8526314d1d6c67f98cbfa02e892fd4ce8a3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      es-us-por-que-los-pulpos-tienen-tres-corazones.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-pulpos-tienen-tres-corazones.webp
                                                                                                                                                      • Size 74KB
                                                                                                                                                      • SHA256 98c8de5527043a62670cf1608d99ee8356392c68e049c1bcc2172f5c2a2a0151
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp
                                                                                                                                                      • Size 69KB
                                                                                                                                                      • SHA256 9f638f93fd61639a580d62c7fd9e5cc878cf625f6f0b5cf894b6d00ee4339483
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp
                                                                                                                                                      • Size 79KB
                                                                                                                                                      • SHA256 276dfce7d00b7446a0846a5729089335abc606c0a3c955b6a855833a10a8bd58
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-ca-pourquoi-les-aurores-boreales-sont-elles-si-frequentes-en-ce-moment.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-les-aurores-boreales-sont-elles-si-frequentes-en-ce-moment.webp
                                                                                                                                                      • Size 73KB
                                                                                                                                                      • SHA256 23f18315f7453efdffda5e41e1f273f00c41a2d7956472efc52cfe52c7ede866
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-fr-leclipse-solaire-totale-du-12-aout-sera-t-elle-visible-en-france.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-leclipse-solaire-totale-du-12-aout-sera-t-elle-visible-en-france.webp
                                                                                                                                                      • Size 72KB
                                                                                                                                                      • SHA256 0360522c1179aba33cb0e6b379d4014a8ed3d36afc31d3cc2cc789b29e85cea2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp
                                                                                                                                                      • Size 76KB
                                                                                                                                                      • SHA256 973af3bf072efde4b78d525386c860b54aa8059a340634e714fbbbc519ecb96b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp
                                                                                                                                                      • Size 81KB
                                                                                                                                                      • SHA256 23d5cbd6f35e51b7a6e140c588dc700fc603c4184260bebcdf90b99145cabcb3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      index-1ilobi2k.js

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-1ilobi2k.js
                                                                                                                                                      • Size 179KB
                                                                                                                                                      • SHA256 7481ea913dbba3b04d178b8e3757cf38c9e03f0a2cf4993d644fa4d6f83089a4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      index-C8g22OGQ.css

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-C8g22OGQ.css
                                                                                                                                                      • Size 30KB
                                                                                                                                                      • SHA256 19b099627396007cfcf21d64ed208361dce53926523439f3102fb7ee96323ad4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      index.html

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index.html
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 e64e0da634bbd8b22e6c8762f323bd8a556384523987e45488d8c05d6c65b162
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      logo.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\logo.webp
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 fbe1831f3abb9be1d5b81785055bac244f70553e51a25556f558c31cb2ac6e37
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      mouse-pointer-DSDsXotA.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\mouse-pointer-DSDsXotA.webp
                                                                                                                                                      • Size 136B
                                                                                                                                                      • SHA256 c53bc691edd32cbc245bdd461b5fc36ef21afc3d8e4304f0df49119204e0b0ff
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      search-icon-BD6Rfjhr.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-icon-BD6Rfjhr.webp
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 02f34d12e8f5f7a2838bde1be407fe1f9815dae8678cd6c77c7c031a6f41d8df
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      search-logo.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-logo.webp
                                                                                                                                                      • Size 5KB
                                                                                                                                                      • SHA256 3a1dec651528a4b789020b9bc240f7c7a1ffef36cc3024095cc6c6c73da7ec85
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      wallpaper.webp

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\ebec0987-c5ed-4874-8fbf-032c1cc6da91\wallpaper.webp
                                                                                                                                                      • Size 38B
                                                                                                                                                      • SHA256 2f9a4c22931833a8fc296bf89b86d94eec618752a62a1add43b753a77c80852b
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\manifest.json
                                                                                                                                                      • Size 546B
                                                                                                                                                      • SHA256 54c625cb73cb8e6adceceb1b6ca380102f125f95fab0f589a840cf2cb8f83ea2
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      photo.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\photo.json
                                                                                                                                                      • Size 50B
                                                                                                                                                      • SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      tiles.json

                                                                                                                                                      • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3240_957768086\tiles.json
                                                                                                                                                      • Size 30B
                                                                                                                                                      • SHA256 c79b6e5f6124ce0dc47ed10b897778a67b06bdc8d3db1b5d37ae119460df8fe0
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      setup.exe

                                                                                                                                                      • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.129\Installer\setup.exe
                                                                                                                                                      • Size 5.9MB
                                                                                                                                                      • SHA256 64e32a25723b51059df1f780dec066cfae5f9da1df05ad19a5fea899461dc650
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      fr-FR-3-0.bdic

                                                                                                                                                      • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\Dictionaries\fr-FR-3-0.bdic
                                                                                                                                                      • Size 1.0MB
                                                                                                                                                      • SHA256 6cffc13b549c33d44180a3a7b13943fe0eadfbe80bcdbccc76f67c55c2012968
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      messages.json

                                                                                                                                                      • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source4388_1332246125\Chrome-bin\151.1.93.129\resources\brave_extension\_locales\sr\messages.json
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping160_324628841\manifest.json
                                                                                                                                                      • Size 135B
                                                                                                                                                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping160_398181637\manifest.json
                                                                                                                                                      • Size 43B
                                                                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      hyph-as.hyb

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1035858450\hyph-as.hyb
                                                                                                                                                      • Size 703B
                                                                                                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      hyph-hi.hyb

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1035858450\hyph-hi.hyb
                                                                                                                                                      • Size 687B
                                                                                                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      hyph-nb.hyb

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1035858450\hyph-nb.hyb
                                                                                                                                                      • Size 141KB
                                                                                                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1035858450\manifest.json
                                                                                                                                                      • Size 82B
                                                                                                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1050990374\manifest.json
                                                                                                                                                      • Size 1002B
                                                                                                                                                      • SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Staging

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1437964722\Sigma\Staging
                                                                                                                                                      • Size 36B
                                                                                                                                                      • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1437964722\manifest.json
                                                                                                                                                      • Size 132B
                                                                                                                                                      • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_1568158566\manifest.json
                                                                                                                                                      • Size 102B
                                                                                                                                                      • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.fingerprint

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_176810339\manifest.fingerprint
                                                                                                                                                      • Size 66B
                                                                                                                                                      • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_2098062532\manifest.json
                                                                                                                                                      • Size 69B
                                                                                                                                                      • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_2930904\manifest.json
                                                                                                                                                      • Size 76B
                                                                                                                                                      • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_423546921\manifest.json
                                                                                                                                                      • Size 116B
                                                                                                                                                      • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_538651183\manifest.json
                                                                                                                                                      • Size 113B
                                                                                                                                                      • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      LICENSE

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_569019086\LICENSE
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2288_569019086\manifest.json
                                                                                                                                                      • Size 78B
                                                                                                                                                      • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      GlobalCatalog.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Catalogs\GlobalCatalog.wbcat
                                                                                                                                                      • Size 1.3MB
                                                                                                                                                      • SHA256 0c669eebedb3541976222c8de22c64510eb2c6eda50cf08f534aee9eed3d6b38
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 1.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 1.wbcat
                                                                                                                                                      • Size 167KB
                                                                                                                                                      • SHA256 c782948243fe7d01b2a2ab923e264ef0031e5f37c5a6a7bc77bc2bf513bef95f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 2.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 2.wbcat
                                                                                                                                                      • Size 225KB
                                                                                                                                                      • SHA256 5eaeac80f74462667abfa34e068d93c7e8c0866dec313be1028b9dda68068cfe
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 3.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 3.wbcat
                                                                                                                                                      • Size 40KB
                                                                                                                                                      • SHA256 c378b5924a8d795c0d9870cea16f6ba06e9ea251794878e97f4c8692eab9a314
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 4.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 4.wbcat
                                                                                                                                                      • Size 124KB
                                                                                                                                                      • SHA256 8b5a6a14a3c5c5cbfcb4817ef895c51177bc66eeb628f47eeb63e9c9f263fda1
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 5.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 5.wbcat
                                                                                                                                                      • Size 84KB
                                                                                                                                                      • SHA256 649f74318ed58434067beb0a721977f4aa10a400fd8ae7b12e09ebccb22ef4c6
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 6.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 6.wbcat
                                                                                                                                                      • Size 380KB
                                                                                                                                                      • SHA256 7a735af8fd4da66272600bb471d33c7f4d076d365c2dfd76b7de78153dd9be02
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 7.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 7.wbcat
                                                                                                                                                      • Size 216KB
                                                                                                                                                      • SHA256 949b55f170a7ff7e188e089141f05f89fcec5b8cd6c6aac80cd32df89625f1a9
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Backup files 8.wbcat

                                                                                                                                                      • Path C:\System Volume Information\Windows Backup\Staging\{D03CC750-DB18-4646-B221-55030EC7CD53}\Backup files 8.wbcat
                                                                                                                                                      • Size 192KB
                                                                                                                                                      • SHA256 20de54257c65454792edb15d652cec3cbfd32bb1a83b90f7b189bdfb5a93b605
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      crl-set

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\10693\crl-set
                                                                                                                                                      • Size 1.5MB
                                                                                                                                                      • SHA256 4c8e6315b4c3a923c0600684ca0c890849a7c5f2cfbf0ded2333a724af7958c1
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 40B
                                                                                                                                                      • SHA256 7cc3a6f11e21e1bfbf2802ef5571a2032cffbaa37c6d6d15d0f649631cd05109
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      0dc270ef-f547-4b7b-9dc8-f497be6afbe6.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\0dc270ef-f547-4b7b-9dc8-f497be6afbe6.tmp
                                                                                                                                                      • Size 165KB
                                                                                                                                                      • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      92ce5ef6-daa1-4c2b-933f-6b1216447a85.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\92ce5ef6-daa1-4c2b-933f-6b1216447a85.tmp
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 7a989fe8abc16510cd941b141b8dc91b7a7ec87ce1047d53c8e2ab50b27bb5da
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      data_0

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_0
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                      data_1

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_1
                                                                                                                                                      • Size 264KB
                                                                                                                                                      • SHA256 b24a282bdd0acc816869ec5195ff16d658e6d2e0168620ee22bfe7cd65c5edd0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      data_2

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_2
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                      data_3

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_3
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                      the-real-index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 6cd0d0d884d6c88fe46a6fad87d3bf4bf2d9f396de2182cd1998c0a6a1fcfa29
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      3ac2de50-fc85-4ab1-bc9d-831dd2c51b94.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\3ac2de50-fc85-4ab1-bc9d-831dd2c51b94.tmp
                                                                                                                                                      • Size 354B
                                                                                                                                                      • SHA256 9f668b16d6991ca4cead0fc70ae5ecf5165c771bb8ee969646f8cfc78fd47756
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Network Persistent State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 04cfc703d1a4f2380d2f7cb15d78163af85908b34415d8e3c27a6b5d1deb02b5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 4cac909eeb2bf5f3d453d46d0a89f071d1de0c023e7ab2bc300e0f3d2d57003e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
                                                                                                                                                      • Size 19KB
                                                                                                                                                      • SHA256 b2e7e04e97dbaf16b110cf3c30328d4b32eee380568350c8c416d55cccf6d9de
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Secure Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Secure Preferences
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 dac9aa37418cfa9d09dc0ec9fcbea6434b39b900a154ecf90c37df3cdb978876
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      CURRENT

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Site Characteristics Database\CURRENT
                                                                                                                                                      • Size 16B
                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      MANIFEST-000001

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Site Characteristics Database\MANIFEST-000001
                                                                                                                                                      • Size 41B
                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      f60bced9-9c0c-4c1a-8327-903c3a1655bd.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\f60bced9-9c0c-4c1a-8327-903c3a1655bd.tmp
                                                                                                                                                      • Size 6B
                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      download_file_types.pb

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
                                                                                                                                                      • Size 7KB
                                                                                                                                                      • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                                      • Size 15KB
                                                                                                                                                      • SHA256 2aeee37b52744ae4f3f3f6b4b508bf05ba1a8ad1a340cb55f9e0477e4aface01
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                                      • Size 55KB
                                                                                                                                                      • SHA256 f826124f69210932bdabf01ddff44fe4b2fa7ceff5158921dca8140402cc91c5
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                                      • Size 55KB
                                                                                                                                                      • SHA256 ca8973b1d8a3e8b1dd323cf8151303921fa9d8c2020fa8498eee0c28615866fd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                                      • Size 66KB
                                                                                                                                                      • SHA256 0300270633a6b4805b43e1fcd723f06363abca785277598161df2ddf368465db
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
                                                                                                                                                      • Size 53KB
                                                                                                                                                      • SHA256 0db5b0a5001ac5ef725707efd9f375f95958de0ae791089363d3065699b5d880
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      p3a_manifest.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig\1.0.5\p3a_manifest.json
                                                                                                                                                      • Size 437B
                                                                                                                                                      • SHA256 9f5f196db1a077339eb8c5eaec285bbf2d8645ff890985a808b3208ef5cb5ccf
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.474\list.txt
                                                                                                                                                      • Size 263KB
                                                                                                                                                      • SHA256 f5b89c2b025e874a12f0c6208267c10c462171e178093921b9d0047a2ae16ef4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      clean-urls-permissions.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1499\1\clean-urls-permissions.json
                                                                                                                                                      • Size 333B
                                                                                                                                                      • SHA256 ae19d4b67e3268d5739e35d0aade25c9a1389493a3d9d4f01234ff437350ba6b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      clean-urls.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1499\1\clean-urls.json
                                                                                                                                                      • Size 29KB
                                                                                                                                                      • SHA256 b464f77d0ebd5d67633ed264611374babf4fa55c08313a09f5356381e76c9c11
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      debounce.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1499\1\debounce.json
                                                                                                                                                      • Size 12KB
                                                                                                                                                      • SHA256 e5924b59ce1a3c3fec47e8dd9f9a6e38a43c8f05a8777767069085716c670dc4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      https-upgrade-exceptions-list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1499\1\https-upgrade-exceptions-list.txt
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 ec12bca633a18d9d3aed6d3e54a7da678f3d70e84e9bedd911e968fa912ad58c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      webcompat-exceptions.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1499\1\webcompat-exceptions.json
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 8eb6d20e4185ccbcdd162258aade6be5d10640c1d67aa62daac06f70e82a8d1b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      photo.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.24\photo.json
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 9076682324d3dae2c496ad99ee334b53ca1f44570332793a3142372f773941fb
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16874\list.txt
                                                                                                                                                      • Size 48KB
                                                                                                                                                      • SHA256 3ceb6f097d7a56fccd2414e85a3e375e7d23f89e5f63ee654bc0040582a73f56
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      resources.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog\1.0.62\resources.json
                                                                                                                                                      • Size 151B
                                                                                                                                                      • SHA256 d82ee302e1bae15a93f8ca5a04fb57943b4596d7d21fb47f0f50ca16be26dcff
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19892\list.txt
                                                                                                                                                      • Size 1.5MB
                                                                                                                                                      • SHA256 1155f138995cfb92a60f709be64280ae66ef75c8f0ec9a54b4ef4f7317a5d3bd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      manifest.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho\1.0.113\manifest.json
                                                                                                                                                      • Size 504B
                                                                                                                                                      • SHA256 cbbfc823da68ea0f426b8ad29af54b52091f028f774a84af6ace7d060d6f5773
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      query-filter.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho\1.0.113\query-filter.json
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 c7b7d0292dd5c1e0f00f7ff27d52621ae07f8dc6e76fc2fe8cebb4b92d614a0d
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      resources.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cmdlemldhabgmejfognbhdejendfeikd\1.0.110\resources.json
                                                                                                                                                      • Size 151B
                                                                                                                                                      • SHA256 c8bd3316903d4bef02c7dd68513b83e7efd1ba41ec71d12610778c0c211d5200
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                                                      • Size 11KB
                                                                                                                                                      • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
                                                                                                                                                      • Size 16.9MB
                                                                                                                                                      • SHA256 33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      34165ce7e02bc3cb2e3038de3d59de0d49db4458a649e4d03f83ec064b61d9e2

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\34165ce7e02bc3cb2e3038de3d59de0d49db4458a649e4d03f83ec064b61d9e2
                                                                                                                                                      • Size 178KB
                                                                                                                                                      • SHA256 34165ce7e02bc3cb2e3038de3d59de0d49db4458a649e4d03f83ec064b61d9e2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      619d31454cb82f8f7de80910d3151acd19e9af79dd95fa0ad20537ffc8e77a40

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\619d31454cb82f8f7de80910d3151acd19e9af79dd95fa0ad20537ffc8e77a40
                                                                                                                                                      • Size 3.0MB
                                                                                                                                                      • SHA256 619d31454cb82f8f7de80910d3151acd19e9af79dd95fa0ad20537ffc8e77a40
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      69c82bc03ad463df73f0adf15796a08b918b23d3a52e49199b654c2db9050df4

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\69c82bc03ad463df73f0adf15796a08b918b23d3a52e49199b654c2db9050df4
                                                                                                                                                      • Size 12KB
                                                                                                                                                      • SHA256 69c82bc03ad463df73f0adf15796a08b918b23d3a52e49199b654c2db9050df4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      6d7a4a96e2b56ce8f264b28b2d5027e4afd565f798cce03571545ba60fe600f7

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\6d7a4a96e2b56ce8f264b28b2d5027e4afd565f798cce03571545ba60fe600f7
                                                                                                                                                      • Size 1.5MB
                                                                                                                                                      • SHA256 6d7a4a96e2b56ce8f264b28b2d5027e4afd565f798cce03571545ba60fe600f7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40
                                                                                                                                                      • Size 264KB
                                                                                                                                                      • SHA256 72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      752d722a65dbd61ed2dbc07703f6c5b0b565ec7b5d333a59b78191406941a41a

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\752d722a65dbd61ed2dbc07703f6c5b0b565ec7b5d333a59b78191406941a41a
                                                                                                                                                      • Size 3.0MB
                                                                                                                                                      • SHA256 752d722a65dbd61ed2dbc07703f6c5b0b565ec7b5d333a59b78191406941a41a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
                                                                                                                                                      • Size 7KB
                                                                                                                                                      • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      8500527438f6697cff37f283193ae137b837c9b360d52bc7ea64d97abc88f605

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8500527438f6697cff37f283193ae137b837c9b360d52bc7ea64d97abc88f605
                                                                                                                                                      • Size 5KB
                                                                                                                                                      • SHA256 8500527438f6697cff37f283193ae137b837c9b360d52bc7ea64d97abc88f605
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      8ea6b448d3d3e9daf22e4d3982d8dc129e2b821ad20340cf2dce3f5570183d69

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8ea6b448d3d3e9daf22e4d3982d8dc129e2b821ad20340cf2dce3f5570183d69
                                                                                                                                                      • Size 475KB
                                                                                                                                                      • SHA256 8ea6b448d3d3e9daf22e4d3982d8dc129e2b821ad20340cf2dce3f5570183d69
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      99fa709e9f36ed8d826afeef1778ee8d770e231e565114e85677718bf99979c9

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\99fa709e9f36ed8d826afeef1778ee8d770e231e565114e85677718bf99979c9
                                                                                                                                                      • Size 88KB
                                                                                                                                                      • SHA256 99fa709e9f36ed8d826afeef1778ee8d770e231e565114e85677718bf99979c9
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      9cad77bfd7ae8d0fe404e6c974c1c98771ed76a7ea47d86d3187c5bc73592725

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9cad77bfd7ae8d0fe404e6c974c1c98771ed76a7ea47d86d3187c5bc73592725
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 9cad77bfd7ae8d0fe404e6c974c1c98771ed76a7ea47d86d3187c5bc73592725
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      acb05be22407fc4915b7412e4b9648f156e47b57203cd5ebc5deb7a2d65ef8ef

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\acb05be22407fc4915b7412e4b9648f156e47b57203cd5ebc5deb7a2d65ef8ef
                                                                                                                                                      • Size 479KB
                                                                                                                                                      • SHA256 acb05be22407fc4915b7412e4b9648f156e47b57203cd5ebc5deb7a2d65ef8ef
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      b7b07a18-ce0c-4ddc-a263-fc83cf5677c9.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\b7b07a18-ce0c-4ddc-a263-fc83cf5677c9.tmp
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 e2fc92042ba8e9c52cf3d806e00a26164db3fbb34b05d42ebc72d0e096857920
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      ba5e891f2001230698fa4a4796a42b4adb4982b05cef14015807f4a3b1c16cde

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ba5e891f2001230698fa4a4796a42b4adb4982b05cef14015807f4a3b1c16cde
                                                                                                                                                      • Size 1.6MB
                                                                                                                                                      • SHA256 ba5e891f2001230698fa4a4796a42b4adb4982b05cef14015807f4a3b1c16cde
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b
                                                                                                                                                      • Size 19KB
                                                                                                                                                      • SHA256 c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6
                                                                                                                                                      • Size 48KB
                                                                                                                                                      • SHA256 ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      fc608a02fc210508263947d934bfaf33f46cda7373e96fa0ce2fd8b83dc95ffc

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\fc608a02fc210508263947d934bfaf33f46cda7373e96fa0ce2fd8b83dc95ffc
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 fc608a02fc210508263947d934bfaf33f46cda7373e96fa0ce2fd8b83dc95ffc
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      metadata.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 8d5395e0a6526fcecd1257ce6ef957f42ffcf089a031e9d205af2ef548cf4563
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      d915ab4a-7235-4754-8e55-2deca777c958.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\d915ab4a-7235-4754-8e55-2deca777c958.tmp
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 0424766554388a690bf615cc50a956eefdd0ecc595479115b5021a198f62b397
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo\1.0.0\list.txt
                                                                                                                                                      • Size 82B
                                                                                                                                                      • SHA256 cb579177e0666f82bff258cd06520a74b51377ff80a3a537cc311ac926fdad98
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg\1.0.1831\list.txt
                                                                                                                                                      • Size 562KB
                                                                                                                                                      • SHA256 23ca7e94b75fcd34c7671c5d7efba09d31543f7b8251a16ec1a063d6ec3b1561
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      list_catalog.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.95\list_catalog.json
                                                                                                                                                      • Size 57KB
                                                                                                                                                      • SHA256 c672fe16368803183106c2b638062e0e0bef0e137ec2f5de8c0e620fee5c0a3c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.21363\list.txt
                                                                                                                                                      • Size 5.0MB
                                                                                                                                                      • SHA256 d2171c714ca8fae552447386c464b5b1056b2814ec85072559d5690e6ca38f51
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh\1.0.0\list.txt
                                                                                                                                                      • Size 350B
                                                                                                                                                      • SHA256 693bfe747e6e0b253544f81ff1bcfeabe775310872497e6ba324bd2c9e7efd1f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      list.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.6942\list.txt
                                                                                                                                                      • Size 1.6MB
                                                                                                                                                      • SHA256 191a7b0dc6bafaf25cbb7cb6e99c634b929870031b9335845ace97815a068265
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      cd51bf18-1293-49c8-b17f-2ae61bff4664.png

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd\1.0.2495\4ba7cac3-3a7f-4634-b868-ca6da5683dca\cd51bf18-1293-49c8-b17f-2ae61bff4664.png
                                                                                                                                                      • Size 41KB
                                                                                                                                                      • SHA256 93ea996e94f18cff0b61ea0314e7ea9b006fd15cd08b4092b1610eed484f4970
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      campaigns.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd\1.0.2495\campaigns.json
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 08eb3d7d991ce904b290a888664d1dec2926c6b3396975e494cc331e923ecc1e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      resources.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.151\resources.json
                                                                                                                                                      • Size 975KB
                                                                                                                                                      • SHA256 0575c0544522bd9534b2e7c5df2794629c3e83e09ca49c64956d6868f738b86f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      brave-checks.txt

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe\1.0.517\brave-checks.txt
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 8727cfd9428a028183ddf2435846c2175eb346c2af2bb38f1567e05a8706b296
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      protocols.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 ce21c4893164649e2a8d138d930312ff6e751c03f4114a0efd55e7cd95fd9779
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 ebe98ef140d8f148adb58316b037791e8c69861901cd97fabd5e03daa14697a5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      f_000065

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                                                                      • Size 60KB
                                                                                                                                                      • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_000066

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                                                                                                      • Size 68KB
                                                                                                                                                      • SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_000067

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                                                                                                      • Size 63KB
                                                                                                                                                      • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_000068

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                                                                                                                                      • Size 19KB
                                                                                                                                                      • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_00006a

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                                                                      • Size 38KB
                                                                                                                                                      • SHA256 c6055b57d5aee320d1e4334dbce0ee8afb0b5e006f0290bc41236930848c11db
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_000096

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                                                                                      • Size 26KB
                                                                                                                                                      • SHA256 85337ea547e087f11716940e5708d35d17b8439d1e39a14395f1caba204396c1
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f_000099

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                                                                      • Size 332KB
                                                                                                                                                      • SHA256 83369449537e50ffc43415d1a1ef34766da35a53e6de3e3807468d8d94d6dc9c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      883d8def98ea4d44_0

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\883d8def98ea4d44_0
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 fb01269c79a8499c94c038150b6760bc133ef17c25492a5baf3a8086885d8ab5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      the-real-index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 7KB
                                                                                                                                                      • SHA256 18393e18fef867cd8f955919a6ba71a31f0e484d4fe913818149b645b9bff04e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      the-real-index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 5KB
                                                                                                                                                      • SHA256 f27462d042462e347a3082487c8262304741682f2be238d625def6440c26b84e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      SiteList-Enterprise.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                      • Size 2B
                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      Edge Profile.ico

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                      • Size 70KB
                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Network Persistent State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 61B
                                                                                                                                                      • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Network Persistent State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 111B
                                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Network Persistent State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 23KB
                                                                                                                                                      • SHA256 75b9362bd0702b36d862bf74e221c1f07b89909c1a4ff320e37692fd6acb39a8
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      SCT Auditing Pending Reports

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                      • Size 2B
                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      Sdch Dictionaries

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                      • Size 211B
                                                                                                                                                      • SHA256 7d29b06556f2dfb89e65a5556b67537a62fcbf6c26c0f39df43d30e7b119890e
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Sdch Dictionaries~RFe5bd1b4.TMP

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5bd1b4.TMP
                                                                                                                                                      • Size 211B
                                                                                                                                                      • SHA256 3d983c73ecbb6d0353879406c529ef82bf553ae1ae0a7e7b2fcbe7fec4bd64c8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 7KB
                                                                                                                                                      • SHA256 b6a0eeba3346c35294877090c49b6bd6777fa8634d10431070cf2e60b1cd5c9e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 23KB
                                                                                                                                                      • SHA256 eb9cb31501f4715864b11fe18dc36fa912975b1de26ed8cedf6295d37847b908
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 13KB
                                                                                                                                                      • SHA256 e6d384b554ec1f86f80358eeb552cb566d68c33e8b53f6db6de25baa2615e995
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 32215f948cd2ed12dd7223f45005ccd5bc571e09337ca327a7557245e964c29d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 22KB
                                                                                                                                                      • SHA256 384feba486e7e8b4a2bea22eda61d64df9606f2a1e0f99f2a18bffe091eb854b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 14KB
                                                                                                                                                      • SHA256 c0541d731aa31b604f4dc979f31dba5b94d10ee70d3aceee8878b33aabd47433
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Secure Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                      • Size 26KB
                                                                                                                                                      • SHA256 8f79a1e223b1fe36bb11d020a8e9abad63d6f4af7a7d2101d71374581f6c054a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      sync_diagnostic.log

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 8beb12ce1cd73a0287dd5bbd4bab55f9cde9444692cb122d71f68b7e9d7a2727
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      d11e9907-f18a-403c-97e7-436338ed0461.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d11e9907-f18a-403c-97e7-436338ed0461.tmp
                                                                                                                                                      • Size 22KB
                                                                                                                                                      • SHA256 41d7425579d647887df4b3dcad99792016f6693f9de05ce3a861a12fcfcbdde4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 b7117aec6c9aa74ab76d675f88d7b92e704084573dbc39c37a6ac66681db321f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 b3b8c83f555121bdf3c34bd19b076852b268c08630259664b7923ff74a132722
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 d90537fcbdd11ed9c0984bfdc78241cb1aed60f3eb1a5bb49581a75a434a6e83
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 ee50fb273083cb158e7b16df5fa68425e763c9b203778be34230bf0d152baecf
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 c924eadc549ed9d81d3d31f9e9c9573a95eaf2fb738aa2ce1e23277b4ec15a0a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 30KB
                                                                                                                                                      • SHA256 5a3cc3d17c0ead62a10df222cac4898d0dc60cdc939496cc49f98dcee925e742
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 d508d4527e7e2393f25475752ee40b64ddaf3339d85e29de9de7e2ad12cd5992
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 3b09a80409d83f5426f72218b4d2e55c4f2eff4196209570b288ab5bb5955ef9
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 bba792a8bf106d69efbdbf4409ab3e55e760284890f85c41d4ab4f57873c9522
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 30KB
                                                                                                                                                      • SHA256 9519aecef1d0d2059ff73c6f08ce5988e4b7fce30bb57be88855a8ee0e2df78d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 30KB
                                                                                                                                                      • SHA256 d4bebec1ca2909523e1ad692d18c57e8ece62f7b4b81ea44935027a9645c69eb
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 30KB
                                                                                                                                                      • SHA256 b47169bb2ce800680cd998f76d6441845a361d37fc617e0c389a56f13d008da3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 7523cee2b5e5e7f6086cca3133c7447e7a18a40dca84d7d6e4bf8e96f80fbdf0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 36KB
                                                                                                                                                      • SHA256 0e4d0527fc9ac6b8200971f0b192a7a443eec1882ea7cf3eaafc3d716816ade7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      RevisitationBloomfilter

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                      • Size 392B
                                                                                                                                                      • SHA256 65fae94089d5f141ce527a3c366b9e663e415f78d2f537602fb3a092e95bf5bb
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      RevisitationBloomfilter

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                      • Size 392B
                                                                                                                                                      • SHA256 2c700c9d1859f5407b16640bf25932b37c4bf1850c51c72bc937b329e2b173d8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      RevisitationBloomfilter

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                      • Size 392B
                                                                                                                                                      • SHA256 e12fe296fcce3724c7276cddd93a8ceffacdb9422d984f31dea86c673d8f02d0
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      RevisitationBloomfilter~RFe5bbe99.TMP

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5bbe99.TMP
                                                                                                                                                      • Size 392B
                                                                                                                                                      • SHA256 64617c747ac4965cecb08930b929db16d7c1eac81683594c73458bb137372ae4
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      metadata.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                      • Size 132B
                                                                                                                                                      • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      metadata.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                      • Size 252B
                                                                                                                                                      • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      85eb857f-feca-4839-84c8-cfdb7bfa2878.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\85eb857f-feca-4839-84c8-cfdb7bfa2878.tmp
                                                                                                                                                      • Size 13B
                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 78c3a979d1ee50a8622da8875d738c349523c59a5a19fa62f1b28f981dcb2fbc
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      crl-set

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                      • Size 22KB
                                                                                                                                                      • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      settings.dat

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 5e49e5f0973d01430a3185e5b393f6e0035e97492f0db4d9870507069f13167f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      the-real-index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 48B
                                                                                                                                                      • SHA256 3b6deee2c128626cbdb3e33547c1b1f9afc91f09914bcb380d2a889056d96ede
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      the-real-index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 168B
                                                                                                                                                      • SHA256 990a7c756a27444795bf42fa27be6ded7c446c450e554e05252e4f8e7ac3cf23
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      index

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Code Cache\wasm\index
                                                                                                                                                      • Size 24B
                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      Network Persistent State~RFe5e1a5c.TMP

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Network\Network Persistent State~RFe5e1a5c.TMP
                                                                                                                                                      • Size 59B
                                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Preferences

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Preferences
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 71f2d4ec211c68a1eb13474885816ba0204f304813018cfacebc68da1ca51a97
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Preferences~RFe5d928e.TMP

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Default\Preferences~RFe5d928e.TMP
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 98f99c134de98b04b297d795af76c0ef74f2787ebc0b9cafcb11dfbc749f5c88
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 777bf06d649f19cf813e7fbfa65941038236820649aeeeaa378376fc5f8a2917
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 fbfce2b42ffe7f605ac5782b60dc18157d596c4ff2fba9c37852412769de0734
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 1e468e01c9ed798ce04b75414cf043d53a30449844e938aa774e58d7cbde7ed4
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 46740e47cfdf1c36735a929f57ad31327f7a31a805630b35aa81a061647fcd62
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 ea31f9ad0ead8854b1f904820abb673e45d9826d5675bc024b47f02655081bb4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 942cd84ad27b80830401464c426537e0297ca36d46ca4f6e8f9b41af26f1c0b0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Local State~RFe5cf3ce.TMP

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Local State~RFe5cf3ce.TMP
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 ab526ffd0702eba5c7c252504f23805377d6460c5b2aed3168b33c7235aa727d
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      crs.pb

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                                                      • Size 233KB
                                                                                                                                                      • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      ct_config.pb

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      kp_pinslist.pb

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Filtering Rules

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                                                                                      • Size 2.1MB
                                                                                                                                                      • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      LICENSE

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                                                                      • Size 24KB
                                                                                                                                                      • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Part-FR

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Part-FR
                                                                                                                                                      • Size 528KB
                                                                                                                                                      • SHA256 56e80041432156be4f08bac11e3494f2f06f65b61a60b7dcb61d15debb7b318c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Advertising

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                                                      • Size 19KB
                                                                                                                                                      • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Analytics

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      CompatExceptions

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                                                      • Size 689B
                                                                                                                                                      • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Content

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Cryptomining

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                                                      • Size 668B
                                                                                                                                                      • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Entities

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                                                      • Size 68KB
                                                                                                                                                      • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Fingerprinting

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      LICENSE

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                                                      • Size 34KB
                                                                                                                                                      • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Other

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                                                      • Size 34B
                                                                                                                                                      • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      Social

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                                                      • Size 754B
                                                                                                                                                      • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      TransparentAdvertisers

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                                                      • Size 105B
                                                                                                                                                      • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Advertising

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Analytics

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Content

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                                                      • Size 5KB
                                                                                                                                                      • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Cryptomining

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                                                      • Size 32B
                                                                                                                                                      • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      Entities

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                                                      • Size 106KB
                                                                                                                                                      • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      Fingerprinting

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      LICENSE

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                                                      • Size 66B
                                                                                                                                                      • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Other

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                                                      • Size 198B
                                                                                                                                                      • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      Social

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      manifest.fingerprint

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\Trust Protection Lists\1.0.0.34\manifest.fingerprint
                                                                                                                                                      • Size 66B
                                                                                                                                                      • SHA256 f96cf59ef5cdf10cdebb367e16c6736d188af934062a8721eb9d60539556a2a9
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      keys.json

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\TeamViewer\EdgeBrowserControl\Persistent\MainWindow_75AD616BF1F04DA9878FF44DD080A108\20260721T154510-a1853adf538a~fr\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      8b8924b0-21c7-4710-b3ac-68769c1d5755.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\8b8924b0-21c7-4710-b3ac-68769c1d5755.tmp
                                                                                                                                                      • Size 1B
                                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      TV15Install.log

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\TeamViewer\TV15Install.log
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 3b487eb8ef8d1e2cb0b55ee40212f00ef33480176f41d7160a8f5d431b8aa6d7
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      TV15Install.log

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\TeamViewer\TV15Install.log
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 347d739c72c8018f9f802abe0cc9fa462b65f8bdaa63e1caf6d47926b355e34e
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      TV15Install.log

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\TeamViewer\TV15Install.log
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 29f96dbe80e25714169ff932eb43b086f8059adad563237832a7b1ca3f547cfd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      f85739bd-b9c0-4c9d-9fff-beed1b577d49.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\f85739bd-b9c0-4c9d-9fff-beed1b577d49.tmp
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      TvGetVersion.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8863.tmp\TvGetVersion.dll
                                                                                                                                                      • Size 696KB
                                                                                                                                                      • SHA256 e35396c7d7e32a8fe771895ed9ea16bd85c8544410bf4dc70a42ccd2884cfd83
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      InstallOptions.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\InstallOptions.dll
                                                                                                                                                      • Size 15KB
                                                                                                                                                      • SHA256 44b1d70219f88564d94da9fc8a7ca4d25d103575519c84a44df3057b8af98f71
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      UserInfo.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\UserInfo.dll
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      advanced_unicode.ini

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\advanced_unicode.ini
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 ee116ba633bbfcc92e7d6473ad23586c83c2702d6f51074f72e9be9716c11d1f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      linker.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\linker.dll
                                                                                                                                                      • Size 56KB
                                                                                                                                                      • SHA256 7817f79bcdf54ef8617f15b5c0b9b92053549d5a51fa280722ee7179311b69a1
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      start_unicode.ini

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\start_unicode.ini
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 8f7c2db16d7783646dea9e5428b0d8221c7848833c96dd9e86028235c8b6491c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      start_unicode.ini

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\start_unicode.ini
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 8e2be76abf30067e2892205290532554bec102f7bbb5a169f489036f239596c8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      start_unicode.ini

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\start_unicode.ini
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 c6ee7da824bd6002f57a83671a275d7755f820663bf9136dcfa39a8d8477713c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      start_unicode.ini

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsa8A86.tmp\start_unicode.ini
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 7aaa9b5c2e3d1a6809ee8e9b41c599a501ae19328d24f331d5de18b01b5242de
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                      System.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsbA60D.tmp\System.dll
                                                                                                                                                      • Size 12KB
                                                                                                                                                      • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      UAC.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsbA60D.tmp\UAC.dll
                                                                                                                                                      • Size 29KB
                                                                                                                                                      • SHA256 b5bb8d301173c4dd2969b1203d2c7d9400ba3f7f2e34ee102905bd2724162430
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      nsArray.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsbA60D.tmp\nsArray.dll
                                                                                                                                                      • Size 18KB
                                                                                                                                                      • SHA256 8b8be21fa7bca491c93683c9f84bb49370ca7e1e864bd0658ff9e1d2809b67e4
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      nsis7z.dll

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsbA60D.tmp\nsis7z.dll
                                                                                                                                                      • Size 187KB
                                                                                                                                                      • SHA256 5d71aaeefbc81732017e9040c8087e6686a16dd54e6d9bcd5ba7a47af68cc925
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      content_new.js

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir160_1247568804\CRX_INSTALL\content_new.js
                                                                                                                                                      • Size 10KB
                                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      bbc35826-f108-4cee-9a8e-bf30d79cbc52.tmp

                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir160_240377330\bbc35826-f108-4cee-9a8e-bf30d79cbc52.tmp
                                                                                                                                                      • Size 153KB
                                                                                                                                                      • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 156662d73ea3574a58ef7fd41ed5997bf4d0a7373166adf279d92b8eccd8b639
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      kdnic.PNF

                                                                                                                                                      • Path C:\Windows\INF\kdnic.PNF
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 1c415b1af3c2cfde091550d0a622d3f39a7c3f89f5bc42a8955f9db09faf3b1b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      netrtl64.PNF

                                                                                                                                                      • Path C:\Windows\INF\netrtl64.PNF
                                                                                                                                                      • Size 46KB
                                                                                                                                                      • SHA256 beac62dfab7b4700a3a5fcf8be9df756ca94ef2c8ef45e73bdf03b9aa4595a8f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                      MediaID.bin

                                                                                                                                                      • Path F:\MediaID.bin
                                                                                                                                                      • Size 528B
                                                                                                                                                      • SHA256 3dbf5f308ad23ead872df0a9ee60717ac015fe91c98ef953a636f2b2a43514b1
                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                      memory/1284-4193-0x0000000074620000-0x000000007462A000-memory.dmp

                                                                                                                                                      memory/1616-1147-0x0000022F3F2E0000-0x0000022F3F76D000-memory.dmp

                                                                                                                                                      memory/3220-1161-0x0000016C8BA00000-0x0000016C8C4C1000-memory.dmp

                                                                                                                                                      memory/3648-4998-0x00007FF716830000-0x00007FF716E3F000-memory.dmp

                                                                                                                                                      memory/3788-4749-0x00007FFBE1AE0000-0x00007FFBE1AE1000-memory.dmp

                                                                                                                                                      memory/3788-4750-0x00007FFBE2230000-0x00007FFBE2231000-memory.dmp

                                                                                                                                                      memory/4324-4730-0x00007FFBE14C0000-0x00007FFBE14C1000-memory.dmp

                                                                                                                                                      memory/4324-5180-0x00000184E2BC0000-0x00000184E2BF0000-memory.dmp

                                                                                                                                                      memory/4396-5593-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5591-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5585-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5592-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5590-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5583-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5589-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5594-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5595-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4396-5584-0x00000289366A0000-0x00000289366A1000-memory.dmp

                                                                                                                                                      memory/4600-842-0x00007FFBE1AE0000-0x00007FFBE1AE1000-memory.dmp

                                                                                                                                                      memory/4600-843-0x00007FFBE2230000-0x00007FFBE2231000-memory.dmp

                                                                                                                                                      memory/5384-5004-0x00007FF716830000-0x00007FF716E3F000-memory.dmp

                                                                                                                                                      memory/6096-4800-0x00007FFBE14C0000-0x00007FFBE14C1000-memory.dmp