Overview

overview

6

Static

static

1

BraveBrows...15.exe

windows10-2004-x64

6

BraveBrows...15.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/08/2026, 04:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BraveBrowserSetup-BRV015.exe
  • Size 1.2MB
  • Sample260811-emwfhawake
  • SHA256 1a50ee45fe55f0c791ec46d0e713caaee1b821536682d08906213960e5a483cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 62 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 55 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV015.exe
    "C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV015.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1216
    • C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdate.exe
      C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdate.exe /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3340
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:5472
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:256
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4600
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:1132
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:5072
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1304
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{FF133942-2F16-4A03-9428-0604D60AF132}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:2552
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:4352
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:4100
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:5588
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\brave_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\gui4ED4.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2608
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\gui4ED4.tmp" --brave-referral-code="BRV015"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2600
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.134 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff714724368,0x7ff714724378,0x7ff714724388
          4⤵
          • Executes dropped EXE
          PID:3388
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\gui4ED4.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2996
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{E799690E-448F-478B-A4C2-6D4F22F0DBDB}\CR_B25C4.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.134 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff714724368,0x7ff714724378,0x7ff714724388
            5⤵
            • Executes dropped EXE
            PID:4456
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntGRjEzMzk0Mi0yRjE2LTRBMDMtOTQyOC0wNjA0RDYwQUYxMzJ9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7RkY2N0YwM0EtMzA2OS00MThBLUFFRjktRDA4NDg5NzhFNzI5fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yNjEwMC4xNzQyIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QUZFNkE0NjItQzU3NC00QjhBLUFGNDMtNENDNjBERjQ1NjNCfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTUxLjEuOTMuMTM0IiBhcD0icmVsZWFzZSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3MDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIzNjUiIGRvd25sb2FkX3RpbWVfbXM9IjIyMDk4IiBkb3dubG9hZGVkPSIxNTYxMDA2ODgiIHRvdGFsPSIxNTYxMDA2ODgiIGluc3RhbGxfdGltZV9tcz0iMzcwMjciLz48L2FwcD48L3JlcXVlc3Q-
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2108
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4804
  • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
    "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4392
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:704
      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
        3⤵
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:400
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.134 --initial-client-data=0x128,0x12c,0x130,0x100,0x134,0x7ff914d4ea00,0x7ff914d4ea10,0x7ff914d4ea20
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5640
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2012,i,1367902960351845801,2910766687708677483,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2032 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Time Discovery
          PID:1736
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1652,i,5786761803931657899,9853690844206152784,262144 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1876 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2840
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,8686624672846769424,11733965922751858927,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2624 /prefetch:13
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1116
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3404,i,11327636559101114449,1585291665469234686,2097152 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3412 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:200
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3448,i,4864625530476127442,17099488905123661344,2097152 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3420 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2864
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --extension-process --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4636,i,13508116289561837999,6722722037015422135,2097152 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4672 /prefetch:9
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6100
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,11879853630856451945,4252118176674171850,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5712 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5256
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,6165125081774421092,16279649406953023650,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5820 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4936
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,15526056109386313796,4939801053047320312,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5764 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6116
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5080,i,3575192146219487822,16329764170682144630,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5972 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5776
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5108,i,13472319393967932078,7033643718361718569,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6072 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4564
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,11948739918922723993,17383206439600097347,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6020 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6008
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,10882051862519329554,18128040903078167330,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=6264 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5804
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,3720843878415019473,8863928899249851743,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=6348 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3560
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1888
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.134 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff72f254368,0x7ff72f254378,0x7ff72f254388
            5⤵
            • Executes dropped EXE
            PID:4944
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
            5⤵
            • Executes dropped EXE
            • Suspicious use of WriteProcessMemory
            PID:4584
            • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.134 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff72f254368,0x7ff72f254378,0x7ff72f254388
              6⤵
              • Executes dropped EXE
              PID:4204
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6268,i,430873475209719831,7318637702307029374,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=6096 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:708
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,17433495275832987157,11938780114049675338,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5880 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5804
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6140,i,18187927816504477131,14610287614460674977,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=6112 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2260
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5108,i,11348507558330482492,10816043637435174001,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5760 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4984
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,4910197820958302242,5917694309904119718,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5904 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4868
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,2857898322685533219,14947924881986434813,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5804 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:3200
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6124,i,8135450328480333840,10011566773664009906,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5928 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:4780
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6392,i,810875301742688156,12885413377778430646,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5916 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:4800
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6252,i,5919806411434921373,15440378267995789184,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5104 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:5900
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6232,i,12270223342405911553,287309402776813033,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6060 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:5196
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6336,i,7096932569904873607,16953485051001288676,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5128 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:5484
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,9292700133842434474,4454867870391300244,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5964 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:2960
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,11646107501152592588,12602670778639855757,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6052 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:5188
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4676,i,11535415475110185366,6984218866533799231,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=4760 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:1976
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4960,i,13991848561970515134,16103901453729347004,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=4672 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:4172
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,6214083659335229579,2522721018881920353,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=4704 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:3508
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,14897930973407140870,7285823552816674721,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=5880 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:3620
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4624,i,16936434239810950923,174801592243518619,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=5128 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:6108
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4996,i,13935778351586654461,8016851343908297016,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=4712 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:3660
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4764,i,2386653061058038264,12490525121211013371,524288 --field-trial-handle=1880,i,11378796290788115089,12616643468710197590,262144 --variations-seed-version=main@df0482c6fbef161e09d01d70aea4cf8b45667e11 --pseudonymization-salt-handle=1888,i,13396156321894240075,16329940068154487305,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=4680 /prefetch:14
          4⤵
          • Executes dropped EXE
          PID:2740
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.134\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:5192
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:3928
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
      1⤵
      • Modifies data under HKEY_USERS
      PID:3628

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Persistence

          Boot or Logon Autostart Execution

          1
          T1547

          Active Setup

          1
          T1547.014

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Privilege Escalation

          Boot or Logon Autostart Execution

          1
          T1547

          Active Setup

          1
          T1547.014

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Defense Evasion

          Modify Registry

          1
          T1112

          Credential Access

          Credentials from Password Stores

          1
          T1555

          Credentials from Web Browsers

          1
          T1555.003

          Unsecured Credentials

          1
          T1552

          Credentials In Files

          1
          T1552.001

          Discovery

          Query Registry

          3
          T1012

          System Information Discovery

          4
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          System Network Configuration Discovery

          1
          T1016

          Internet Connection Discovery

          1
          T1016.001

          System Time Discovery

          1
          T1124

          Lateral Movement

          Collection

          Data from Local System

          1
          T1005

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          messages.json
          • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2600_2011525708\Chrome-bin\151.1.93.134\resources\brave_extension\_locales\sr\messages.json
          • Size 9KB
          • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          4011a409-2e0a-4d22-b166-6ec8a9f1e605.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\4011a409-2e0a-4d22-b166-6ec8a9f1e605.tmp
          • Size 165KB
          • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\BraveWallet\Brave Wallet Storage\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          75e5cedc-49ce-410a-8d6f-9bca1a90c210.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\75e5cedc-49ce-410a-8d6f-9bca1a90c210.tmp
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
          • Size 433B
          • SHA256 af137e8830fde75756ea486779f8b597c88b1920ae641acd5d44a99c558558e1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          SCT Auditing Pending Reports
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512
          Submit Download

          Preferences
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
          • Size 19KB
          • SHA256 21afd59a0e5ac379a1a3a31f614f1dcc384d5c19cab480ea2ea844a65fee6db5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Preferences
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
          • Size 19KB
          • SHA256 c9b063e8aeebe62ac576b4655828816d17404488e2129c2eed2f9e882163475a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de4232f3-d0a5-4262-aadc-0a3d7abfd0ed.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Service Worker\ScriptCache\index-dir\de4232f3-d0a5-4262-aadc-0a3d7abfd0ed.tmp
          • Size 48B
          • SHA256 da2ab095325775cdbd8ecadfd57dc795dc6e358261646ab15eff32d001d57790
          • MD5 SHA1 SHA512
          Submit Download

          the-real-index
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
          • Size 72B
          • SHA256 afed663a76f1d9a577c1496692b89cfeba401fc8557dcb34dbc18ef4de664517
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Sync Data\LevelDB\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          a44e5662-8564-4f1d-9d1a-3d402d013daa.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\a44e5662-8564-4f1d-9d1a-3d402d013daa.tmp
          • Size 3KB
          • SHA256 04df9b2fa26d913ccddf7772b554b911d3a3d2dbf1d267426b7bf484eb530f27
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 66KB
          • SHA256 2fba0a41bad06f2f6c453b51fc47892a6a16698b251c520efae1a9dc9042c3ef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 53KB
          • SHA256 a7edd8e32a592ad7ded627230483b8bbb13be91ea9266378ca62408f1175dd3f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 55KB
          • SHA256 b7bb419ecacdc4753056bf5ed503cdbb6f7ca056826dd6821181c1141caa9c54
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0a0b722fec4c62df8b9c473d8685f4290eb5ecb8bb478a59e872e4c333d07909
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\0a0b722fec4c62df8b9c473d8685f4290eb5ecb8bb478a59e872e4c333d07909
          • Size 416KB
          • SHA256 0a0b722fec4c62df8b9c473d8685f4290eb5ecb8bb478a59e872e4c333d07909
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          15f50f76f51e9c9da708f4c8f41a02e4195261577f7c9c8f7f0e1854915966af
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\15f50f76f51e9c9da708f4c8f41a02e4195261577f7c9c8f7f0e1854915966af
          • Size 1.5MB
          • SHA256 15f50f76f51e9c9da708f4c8f41a02e4195261577f7c9c8f7f0e1854915966af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          2012c02d6891e2698bbdc167da1d5ada3a9b86893d626681e6c8eabbcfc00fe7
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2012c02d6891e2698bbdc167da1d5ada3a9b86893d626681e6c8eabbcfc00fe7
          • Size 260KB
          • SHA256 2012c02d6891e2698bbdc167da1d5ada3a9b86893d626681e6c8eabbcfc00fe7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          22ded77ec93888ba06ae6bb51638156834f346c7c4adedc72c7395b0d50b316e
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\22ded77ec93888ba06ae6bb51638156834f346c7c4adedc72c7395b0d50b316e
          • Size 3KB
          • SHA256 22ded77ec93888ba06ae6bb51638156834f346c7c4adedc72c7395b0d50b316e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Size 7.6MB
          • SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Size 11KB
          • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          264120211307b39a9f9bf096fc986f70f00e9b4964e20daa9f382468b978d794
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\264120211307b39a9f9bf096fc986f70f00e9b4964e20daa9f382468b978d794
          • Size 476KB
          • SHA256 264120211307b39a9f9bf096fc986f70f00e9b4964e20daa9f382468b978d794
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • Size 3KB
          • SHA256 2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • Size 16.9MB
          • SHA256 33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • Size 5KB
          • SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Size 857KB
          • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          57d9bf290b4ab8fef3099861fb2bbe2c3c0e5b6a29a9ace6ecb7cf3e2197bb11
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\57d9bf290b4ab8fef3099861fb2bbe2c3c0e5b6a29a9ace6ecb7cf3e2197bb11
          • Size 1.5MB
          • SHA256 57d9bf290b4ab8fef3099861fb2bbe2c3c0e5b6a29a9ace6ecb7cf3e2197bb11
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          68992e4c9b4b47992b10f0e9eb112407b63ff26ee49229716fbf46b671aa1413
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\68992e4c9b4b47992b10f0e9eb112407b63ff26ee49229716fbf46b671aa1413
          • Size 88KB
          • SHA256 68992e4c9b4b47992b10f0e9eb112407b63ff26ee49229716fbf46b671aa1413
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          70975dc62383e19a146c11acafaa7ccebcd3d641c7aecb2a37e41c8f557d085d
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\70975dc62383e19a146c11acafaa7ccebcd3d641c7aecb2a37e41c8f557d085d
          • Size 12KB
          • SHA256 70975dc62383e19a146c11acafaa7ccebcd3d641c7aecb2a37e41c8f557d085d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40
          • Size 264KB
          • SHA256 72c4905c214e35ebb76e8cdd0eff88c3f699256d85613aa31684423c72d84a40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7ad06a1186601ae00fd94224d51acce66915915c6020ec511d34bff58f7ff3c1
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7ad06a1186601ae00fd94224d51acce66915915c6020ec511d34bff58f7ff3c1
          • Size 479KB
          • SHA256 7ad06a1186601ae00fd94224d51acce66915915c6020ec511d34bff58f7ff3c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Size 7KB
          • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          8608fead2c7aea078c3570cd97f13a8ff4880ee694b7c3ffcc42449bc4c77528
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8608fead2c7aea078c3570cd97f13a8ff4880ee694b7c3ffcc42449bc4c77528
          • Size 2.8MB
          • SHA256 8608fead2c7aea078c3570cd97f13a8ff4880ee694b7c3ffcc42449bc4c77528
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • Size 3KB
          • SHA256 925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Size 184KB
          • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Size 14KB
          • SHA256 acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b0f4d5ec7e6ae81a52a456e12387b656b320da6bab99c5e516d78673acca5d1a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\b0f4d5ec7e6ae81a52a456e12387b656b320da6bab99c5e516d78673acca5d1a
          • Size 2.8MB
          • SHA256 b0f4d5ec7e6ae81a52a456e12387b656b320da6bab99c5e516d78673acca5d1a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • Size 1.1MB
          • SHA256 c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b
          • Size 19KB
          • SHA256 c8135ab210c4837f6827290a655bef8c8148790a6106efb33466583f228a6d4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6
          • Size 48KB
          • SHA256 ccf200ecb56ced2a4e403ddc1db70ab6deeff64d846fad60e90d226d83e686c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Size 3KB
          • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          dc8078c08c2c856c66412f3adb1c5867130dba7117f3d8b25b584e59c5ed1ca1
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\dc8078c08c2c856c66412f3adb1c5867130dba7117f3d8b25b584e59c5ed1ca1
          • Size 5KB
          • SHA256 dc8078c08c2c856c66412f3adb1c5867130dba7117f3d8b25b584e59c5ed1ca1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f84babca-3eea-43bd-99e0-6776d95ac67c.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\f84babca-3eea-43bd-99e0-6776d95ac67c.tmp
          • Size 1KB
          • SHA256 b88dd8739c331b1f06b07fb3b2e9884a227e3a69a36fea593ec2752882c02da7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 304dbec1a29be717248b594f14d9dc5751392bf5b5a6c18c36b0a3177f8bf7a1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 8cdaa8400ed6a0dc15281469b5b87cd1d536f1f0e891036b97ea598f0cc13e12
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          f5c00732-2911-4ee1-8677-a36712e0ba0e.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\f5c00732-2911-4ee1-8677-a36712e0ba0e.tmp
          • Size 10KB
          • SHA256 965036b5104a60699165c2e87eeb6e6ddfe30324ba863de23f5663e757d7e7af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          6d2eb6fe-2b24-4ea0-bc30-3d5deeb3ce37.jpg
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\90d17402-52d6-445d-a9da-254312e32ed6\6d2eb6fe-2b24-4ea0-bc30-3d5deeb3ce37.jpg
          • Size 319KB
          • SHA256 a02ab36aee438b4b296f5fc2d45e58d085e75b6493bd6a5364ddd70c6bda7a46
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ef8ec2c2-c9ba-48a6-ba32-35eee5c7c2b7.png
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\90d17402-52d6-445d-a9da-254312e32ed6\ef8ec2c2-c9ba-48a6-ba32-35eee5c7c2b7.png
          • Size 17KB
          • SHA256 b9bcfeffbfe6761c71f13f17f00f8105fa49c9b216296379417fd6d7d950a1c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          verified_contents.json
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\brave_metadata\verified_contents.json
          • Size 8KB
          • SHA256 2add82fc2c3c2793b3b98c5529682973b2f1dfe681fd86a0e17e11018b404f69
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b7dee0b5-4f16-4f1f-8388-ff185a35b048.png
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\c3b9079c-61e5-4518-a8bb-928264fd56b5\b7dee0b5-4f16-4f1f-8388-ff185a35b048.png
          • Size 20KB
          • SHA256 723ead11fed4c43616c2df80dfdce43d2ad59453b394081275a3f4608eade992
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cdf40259-b0e9-4b3e-94b5-50cf800bd117.jpg
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\c3b9079c-61e5-4518-a8bb-928264fd56b5\cdf40259-b0e9-4b3e-94b5-50cf800bd117.jpg
          • Size 222KB
          • SHA256 f4997b0dcf75c4b575469c8f55eccb4af6f7ffa82bea527243aa2d1e9817af5d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          campaigns.json
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\campaigns.json
          • Size 3KB
          • SHA256 07c0240ad3172a7a02d46bd21b82dbe7dc83b0bbb571362589bd6d110ebefb31
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Size 341KB
          • SHA256 2a54364257349b6c145fa4dd7ec41d3e0b8ab3144205b6f0cd58578aa370e671
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ask-brave-icon-DdJTJrmV.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\ask-brave-icon-DdJTJrmV.webp
          • Size 2KB
          • SHA256 3788d823c7714a2e36547bd5fe86c834b86cb6c182858e047789aee196f1f598
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp
          • Size 89KB
          • SHA256 e0b0cfe5973b946bb2919d87d875a34e2b525171f1bfa475c0deec0e2a044736
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp
          • Size 84KB
          • SHA256 3bb3d5f492e71d4ad79872906108125d4f01c2005ab27552eb3d5f52f428abda
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-wird-die-sonnenfinsternis-am-12-august-in-deutschland-zu-sehen-sein.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wird-die-sonnenfinsternis-am-12-august-in-deutschland-zu-sehen-sein.webp
          • Size 66KB
          • SHA256 e1930e71d842ad513c6c4faac354aad6a6cb80339633f89156034ac51bc673ef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-whats-the-tallest-free-standing-structure-in-canada.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-whats-the-tallest-free-standing-structure-in-canada.webp
          • Size 64KB
          • SHA256 83a011a9a26d8c47ee8e55d4c6af92e80f64a104166bac91f508615aa4c25716
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-wheres-the-best-place-to-watch-the-perseid-meteor-shower.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-wheres-the-best-place-to-watch-the-perseid-meteor-shower.webp
          • Size 63KB
          • SHA256 7cd1aaa11e5ecdb89c3b1756f4d201d5fb4defa34a737a671c70f4ce39e16512
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-why-do-loons-make-that-eerie-call-at-night.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-why-do-loons-make-that-eerie-call-at-night.webp
          • Size 61KB
          • SHA256 b4a4149a5d5820df9d290ae2b82138a5a86db000393feb74acfa0db0b65ad920
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-whats-the-loudest-sound-ever-recorded.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-whats-the-loudest-sound-ever-recorded.webp
          • Size 113KB
          • SHA256 fa4536790374bde58f92fa2015544b893437c528ea2bc1e6935a419a3a7cc053
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-why-do-robins-sing-through-the-night-in-cities.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-do-robins-sing-through-the-night-in-cities.webp
          • Size 65KB
          • SHA256 159ead72d2a82344869b7b2635e18188178b8550c94ae5dc1d426bb53f7f031b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-will-the-uk-see-the-total-solar-eclipse-on-12-august.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-will-the-uk-see-the-total-solar-eclipse-on-12-august.webp
          • Size 60KB
          • SHA256 ec3633708525f629e39466e84946b74ace63b66fb36ba6fbdbe0a513e2c175ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-what-does-space-actually-smell-like.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-what-does-space-actually-smell-like.webp
          • Size 80KB
          • SHA256 0c40d0a8cbdb67b6fdb20aa4d0a01bec08f862fcda6058a759a2e479cfe736c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-when-is-the-next-total-solar-eclipse.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-when-is-the-next-total-solar-eclipse.webp
          • Size 67KB
          • SHA256 c14968bc2fac58ef7e825fb48e4df2031de1ac753058e923221d8c99a4f88da4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-why-do-flamingos-stand-on-one-leg.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-why-do-flamingos-stand-on-one-leg.webp
          • Size 97KB
          • SHA256 e6900ccbc3cfd91c5c8dd14ae66dfd46687c4b028b62b0c1c26a726ba8b380c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-donde-se-puede-ver-mejor-la-lluvia-de-meteoros-de-las-perseidas.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-donde-se-puede-ver-mejor-la-lluvia-de-meteoros-de-las-perseidas.webp
          • Size 80KB
          • SHA256 59d78c615a13235834d28ca4aefeffb5805bd06ff6553058f84094fbb86b5acb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp
          • Size 66KB
          • SHA256 7bdfc33b83981fe9ea30a7025b80e8526314d1d6c67f98cbfa02e892fd4ce8a3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-por-que-los-pulpos-tienen-tres-corazones.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-pulpos-tienen-tres-corazones.webp
          • Size 74KB
          • SHA256 98c8de5527043a62670cf1608d99ee8356392c68e049c1bcc2172f5c2a2a0151
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp
          • Size 69KB
          • SHA256 9f638f93fd61639a580d62c7fd9e5cc878cf625f6f0b5cf894b6d00ee4339483
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp
          • Size 79KB
          • SHA256 276dfce7d00b7446a0846a5729089335abc606c0a3c955b6a855833a10a8bd58
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-pourquoi-les-aurores-boreales-sont-elles-si-frequentes-en-ce-moment.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-les-aurores-boreales-sont-elles-si-frequentes-en-ce-moment.webp
          • Size 73KB
          • SHA256 23f18315f7453efdffda5e41e1f273f00c41a2d7956472efc52cfe52c7ede866
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-leclipse-solaire-totale-du-12-aout-sera-t-elle-visible-en-france.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-leclipse-solaire-totale-du-12-aout-sera-t-elle-visible-en-france.webp
          • Size 72KB
          • SHA256 0360522c1179aba33cb0e6b379d4014a8ed3d36afc31d3cc2cc789b29e85cea2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp
          • Size 76KB
          • SHA256 973af3bf072efde4b78d525386c860b54aa8059a340634e714fbbbc519ecb96b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp
          • Size 81KB
          • SHA256 23d5cbd6f35e51b7a6e140c588dc700fc603c4184260bebcdf90b99145cabcb3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index-1ilobi2k.js
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-1ilobi2k.js
          • Size 179KB
          • SHA256 7481ea913dbba3b04d178b8e3757cf38c9e03f0a2cf4993d644fa4d6f83089a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index-C8g22OGQ.css
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-C8g22OGQ.css
          • Size 30KB
          • SHA256 19b099627396007cfcf21d64ed208361dce53926523439f3102fb7ee96323ad4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.html
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index.html
          • Size 4KB
          • SHA256 e64e0da634bbd8b22e6c8762f323bd8a556384523987e45488d8c05d6c65b162
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\logo.webp
          • Size 6KB
          • SHA256 fbe1831f3abb9be1d5b81785055bac244f70553e51a25556f558c31cb2ac6e37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mouse-pointer-DSDsXotA.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\mouse-pointer-DSDsXotA.webp
          • Size 136B
          • SHA256 c53bc691edd32cbc245bdd461b5fc36ef21afc3d8e4304f0df49119204e0b0ff
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-icon-BD6Rfjhr.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-icon-BD6Rfjhr.webp
          • Size 1KB
          • SHA256 02f34d12e8f5f7a2838bde1be407fe1f9815dae8678cd6c77c7c031a6f41d8df
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-logo.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-logo.webp
          • Size 5KB
          • SHA256 3a1dec651528a4b789020b9bc240f7c7a1ffef36cc3024095cc6c6c73da7ec85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wallpaper.webp
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\ebec0987-c5ed-4874-8fbf-032c1cc6da91\wallpaper.webp
          • Size 38B
          • SHA256 2f9a4c22931833a8fc296bf89b86d94eec618752a62a1add43b753a77c80852b
          • MD5 SHA1 SHA512
          Submit Download

          54eb8809-2cd5-45a9-952a-fc3c137b93e8.jpg
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\feaf5609-bdc0-4d0e-9c44-e59b361ded4b\54eb8809-2cd5-45a9-952a-fc3c137b93e8.jpg
          • Size 337KB
          • SHA256 5ff1ed4c323c25e6ead03cb6edcebaceec03fce7164db622af2c604b13485204
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f20edd51-9098-4c35-bce1-a89030af25dd.png
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\feaf5609-bdc0-4d0e-9c44-e59b361ded4b\f20edd51-9098-4c35-bce1-a89030af25dd.png
          • Size 13KB
          • SHA256 7deeccb564ee0cd8bdf8ee121ee249332ac037c0d375625771d52de46cccc815
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          photo.json
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\photo.json
          • Size 50B
          • SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tiles.json
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_1400725150\tiles.json
          • Size 30B
          • SHA256 c79b6e5f6124ce0dc47ed10b897778a67b06bdc8d3db1b5d37ae119460df8fe0
          • MD5 SHA1 SHA512
          Submit Download

          hyph-bn.hyb
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_231534166\hyph-bn.hyb
          • Size 703B
          • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          hyph-mr.hyb
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_231534166\hyph-mr.hyb
          • Size 687B
          • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          hyph-nn.hyb
          • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping400_231534166\hyph-nn.hyb
          • Size 141KB
          • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandler.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveCrashHandler.exe
          • Size 270KB
          • SHA256 cd332cdaede7cb5fe9f16b3dae0cc5be052d0ab61b4ae9f5419e6d989b7dbaaf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandler64.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveCrashHandler64.exe
          • Size 355KB
          • SHA256 3f9e3013c06d6a03fdb2f32839242a913852ce1aa9a8d7d96c15ab8204458bb6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandlerArm64.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveCrashHandlerArm64.exe
          • Size 353KB
          • SHA256 9b2168cc2b7d22330e6a34e776c47ef48fe6262f98fbdc32f177abc36952d9ce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdate.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdate.exe
          • Size 163KB
          • SHA256 6c585742aa9ceba3237c7e45ec71af26f48ec87ba4bc3c3593ead6d8e6c99cc3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShell64.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdateComRegisterShell64.exe
          • Size 170KB
          • SHA256 576fc6a3c7dd82f8839f23fc27409c0c54af2c87ba5fc0c57d2f3905783a51ab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShellArm64.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdateComRegisterShellArm64.exe
          • Size 154KB
          • SHA256 2f27c310de1e0e3d1b4d4dc1eee39e042c0d29cbeda852d38e152567b8e17c21
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateCore.exe
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\BraveUpdateCore.exe
          • Size 195KB
          • SHA256 049731118929e743c4b912c4f9d4fb3231f73b7de6d476433ca503167858f978
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdate.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdate.dll
          • Size 1.0MB
          • SHA256 132ce70ef9bf60c25fcf89dc63fdc76480ac17a1de1874c709ebe8b29429b6d7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_am.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_am.dll
          • Size 42KB
          • SHA256 3016af061408002cda3ef9a43fb0836b3398ba8422c0928874acb0c4b4f4d839
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ar.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ar.dll
          • Size 41KB
          • SHA256 099cda372b7de49c671859115989130097e78ee3b6eb8579323cb4e4180d8265
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bg.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_bg.dll
          • Size 44KB
          • SHA256 9fc291ed34b0c0c1121939d13dc09c54aa60dfc6f1b8b0f015b7107810a3e79e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bn.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_bn.dll
          • Size 44KB
          • SHA256 6141ff36fa83bab13d2d0fb1b4c302ef5830906bc87587c37aa639468ff470a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ca.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ca.dll
          • Size 44KB
          • SHA256 1d9703db0b9a11578e2cf4c076278a983d485bdc4c3022433536b717ebaf4147
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_cs.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_cs.dll
          • Size 43KB
          • SHA256 d7614ff22ebef569d03bba9f413c23297545b5b71983dd4bee134bbd39c9d12f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_da.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_da.dll
          • Size 43KB
          • SHA256 c6c1e5e7ac38425c7428158e160510fb47261a2b052e7adb7527fc90f13ed315
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_de.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_de.dll
          • Size 45KB
          • SHA256 aa3df7650b40eb811d52eac2721fd8a025b6608dcffc2b82454873a846615033
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_el.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_el.dll
          • Size 44KB
          • SHA256 8911fe1d08491d56c0b41fb979448ef550e39ace0538c9016976e82bc0c06845
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en-GB.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_en-GB.dll
          • Size 42KB
          • SHA256 a953c7e455e5befe4ee9d71c9301c0056d32baf83a69891d5cb855a5a3504061
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_en.dll
          • Size 42KB
          • SHA256 334ffe7600dfd1e9cdbae7431f108c519aec4e34451fe797b1d0c7e2ceabb610
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es-419.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_es-419.dll
          • Size 43KB
          • SHA256 99b23107ee6590742edf1b90b03df827d7615544c6ec084ef96fc485bc8754a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_es.dll
          • Size 45KB
          • SHA256 c29fabfb0044eeadaecf70fbc04a2a716135390c401e403673740687adc1d454
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_et.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_et.dll
          • Size 42KB
          • SHA256 ac278465722efeeab0c46b013c77664b42884db5d6197f407d6d51e27cce681e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fa.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_fa.dll
          • Size 42KB
          • SHA256 8d8f646de77a17e5eac656ba37c1ad9ad9686864a6df65de82ef209f031512f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fi.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_fi.dll
          • Size 43KB
          • SHA256 6dbb79578e6854ec9cb2b6950bae9e3ea9765ab2ac3c3e930485435770ff323b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fil.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_fil.dll
          • Size 44KB
          • SHA256 1fdbd8b234bccdb6352caf2452c45f913559dea6016284c079ab4e1577c9b706
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fr.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_fr.dll
          • Size 44KB
          • SHA256 abe9db7f39fa245a1093e7339d34f42c4d93d2a7e918e8a1787855ac278ea45d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_gu.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_gu.dll
          • Size 44KB
          • SHA256 ab9e5e2b1841862e5e4410388f2bc0192768d2382de27615edf375a9802da112
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hi.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_hi.dll
          • Size 43KB
          • SHA256 7bb82853aa0ecffecda9a1668829d916fdbfbe1ca60c32517b15db60d938bd85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hr.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_hr.dll
          • Size 43KB
          • SHA256 aacd158471fb5193abc23b70358362ed34ccd5db63e5d305b41ffb975f5043cb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hu.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_hu.dll
          • Size 43KB
          • SHA256 048e79a4556cfe4a6841fbc9f5e19afe5d90ee41ff8582e2784ed9941907de47
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_id.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_id.dll
          • Size 42KB
          • SHA256 f2286b1bbb5f839c28b197ff38bc97b5dd8bef5a74895568ab136dda48e87aa5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_is.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_is.dll
          • Size 42KB
          • SHA256 3b3180ea16c98f1c65c9cc9c39664f224fcb406137e0722c9e516cc79f776dd7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_it.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_it.dll
          • Size 44KB
          • SHA256 28007bbc54c307b4e8dbba25e94e1745b36b15ee01e83c81af9ca4cf2e985a37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_iw.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_iw.dll
          • Size 40KB
          • SHA256 bf2f205aa779b560ec5a7491968a0acc9adcb798b9f0932fa47be1ce46fc9507
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ja.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ja.dll
          • Size 39KB
          • SHA256 5b1c8fda109e0b8678344a48b71d841e6e44e227fe2c9a5994195a2371df2c4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_kn.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_kn.dll
          • Size 44KB
          • SHA256 7d9d693b400acd85351d0c8cd3d2c0835c05467e741c15affe3a75043143195b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ko.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ko.dll
          • Size 39KB
          • SHA256 902de8ab2dcff1b15af4a3dc095a0da034bb60326d3e6719094c0630dda12a19
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lt.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_lt.dll
          • Size 42KB
          • SHA256 9226bffdc62fbc5cd79be77675ca79cc174ee1f40ff3f8e21a3c6fc9c0bfe067
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lv.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_lv.dll
          • Size 43KB
          • SHA256 9f21623ac4703ba21672a96864fe9ae3bdbd3b8d0a29242edca0a97b34f757a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ml.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ml.dll
          • Size 46KB
          • SHA256 781cf86b26f3790fb6364f6578a4c9a18b2962437024d31a1a1634f5ec7083fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_mr.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_mr.dll
          • Size 44KB
          • SHA256 d95efdb3d851bd56d5c1afc73fe216b32a76c125632765617856b6203901363f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ms.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ms.dll
          • Size 42KB
          • SHA256 baabc20d4a92f56e2cefb7bc83f76e0212231f573d0515d3f49c6c01ab951155
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_nl.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_nl.dll
          • Size 44KB
          • SHA256 294f73bb6f4760de444e4c9ce6df66f12409d9c4a74b78cddf88809fb8c05d40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_no.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_no.dll
          • Size 43KB
          • SHA256 d4704df2ee395a63acf140d450d8a47af30d62600efdc86cb19278265ccaf2f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pl.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_pl.dll
          • Size 43KB
          • SHA256 c54a3c6943df746360ce01c35e03f45969d736eca10db4e069d7cbf656ec6334
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-BR.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_pt-BR.dll
          • Size 43KB
          • SHA256 daea6eb6b84583b3b8b9d639893afb20da9bd52d638be21bed937e35de2dc21a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-PT.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_pt-PT.dll
          • Size 43KB
          • SHA256 44fadc03c01354c460e50544d812e30e93c852df76371a483a6219524fc35cda
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ro.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ro.dll
          • Size 43KB
          • SHA256 eb423a40d9e38d6acbaf69c7962a57bf79c5149df0d2bce764ffa42f48cc67f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ru.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ru.dll
          • Size 42KB
          • SHA256 b8c2441cff2e5de6c94ca23f9a4e48deb1add2bee8e5560a8954f034e02effee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sk.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_sk.dll
          • Size 43KB
          • SHA256 02747625623192ac5183537dfbe7106c65ed9f38370d57a5fbc6004686b82a23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sl.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_sl.dll
          • Size 43KB
          • SHA256 df43fba89b2f93d91b2ead5b62f36fa1215abf1cef27ba596fa35b12a4afa7dd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sr.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_sr.dll
          • Size 43KB
          • SHA256 ed5f49a1d217d859143993d121d2ef48bf6e798d9190a7c2292be13739810217
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sv.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_sv.dll
          • Size 43KB
          • SHA256 8b3b0e380a52c4450595d49e0dfce43d723ccd64a4fc2146067973e807d477d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sw.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_sw.dll
          • Size 44KB
          • SHA256 64afc9ea7675f0454f2a0f02a3ce12af7558ed69d4085098e3a71adb29cfe43c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ta.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ta.dll
          • Size 45KB
          • SHA256 597ca09b4d6d9b13a96e30f8e918f8fa8385a672056657bff29914f188ec137d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_te.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_te.dll
          • Size 44KB
          • SHA256 98507f7cc9a1996fdbff58e4f647c88428533289461a24cd8f1a518f5e7c3849
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_th.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_th.dll
          • Size 42KB
          • SHA256 20082e430a26087018868fe6261d5f06a0bbf1c18c7fce45dbbe6e483156b44c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_tr.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_tr.dll
          • Size 43KB
          • SHA256 d42d7ebbd658f6072b381b2a57c5191af29cbf392f4aaec8ad7d84256a17a8bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_uk.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_uk.dll
          • Size 43KB
          • SHA256 9689e8c4cc5d1e9d26ca5394960ae3175ec020ffb486885eb3160f105a1a0545
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ur.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_ur.dll
          • Size 42KB
          • SHA256 488265b07043da07779b5b6df0098cea802cb3c2f0ba2e3bdd64b94cf2f49caa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_vi.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_vi.dll
          • Size 42KB
          • SHA256 630639daa95c48d736c8117e9629bac9babf2f8e62e2f55a75ecfc5daa7077df
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_zh-CN.dll
          • Path C:\Windows\SystemTemp\GUMD0D9.tmp\goopdateres_zh-CN.dll
          • Size 37KB
          • SHA256 5d2b197b951532f06691b58adaba320d31f2d11f2f0358ea99eda9c62b14bd26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download