Overview

overview

8

Static

static

1

BraveOriginSetup.exe

windows10-2004-x64

8

BraveOriginSetup.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    595s
  • max time network
    592s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/08/2026, 02:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BraveOriginSetup.exe
  • Size 1.2MB
  • Sample260820-csfk5adn2y
  • SHA256 10d3765ad1ea932bf8bfc9a5313ddc701b8d048d24102a07f09a4c930a701ed2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalationtrojan

Malware Config

Signatures

  • Badlisted process makes network request 2 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

    discovery
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 18 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 11 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 45 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 50 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BraveOriginSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\BraveOriginSetup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4636
    • C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={F1EF32DE-F987-4289-81D2-6C4780027F9B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2468
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:4836
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:1800
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3260
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3312
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:1464
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9InswNTAwMDI0NS04Nzc4LTQzQjEtOTdENC1BQUEwMzUzMUUyMjN9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7MDk0MkYyNjAtOTIxQy00MDIxLUE4OUUtRkU3MTJCRjgxN0FCfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QjEzMUM5MzUtOUJFNi00MURBLTk1OTktMUY3NzZCRUI4MDE5fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjM2MS4xNTEiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iMTI5NyIvPjwvYXBwPjwvcmVxdWVzdD4
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1112
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={F1EF32DE-F987-4289-81D2-6C4780027F9B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{05000245-8778-43B1-97D4-AAA03531E223}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:936
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3736
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\brave_origin_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\brave_origin_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\gui73E5.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4036
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\gui73E5.tmp"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2896
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 "--annotation=prod=Brave Origin" --annotation=ver=151.1.93.137 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff78ab681a8,0x7ff78ab681b8,0x7ff78ab681c8
          4⤵
          • Executes dropped EXE
          PID:4344
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\gui73E5.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3804
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{8AF773A7-8BC0-4BCB-B317-7166C1791CA2}\CR_BB99B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 "--annotation=prod=Brave Origin" --annotation=ver=151.1.93.137 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff78ab681a8,0x7ff78ab681b8,0x7ff78ab681c8
            5⤵
            • Executes dropped EXE
            PID:3984
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5NjcwNyIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjEzOTAiIGRvd25sb2FkX3RpbWVfbXM9IjE0NDc3IiBkb3dubG9hZGVkPSIxMzY5MjI3MDQiIHRvdGFsPSIxMzY5MjI3MDQiIGluc3RhbGxfdGltZV9tcz0iMzMyNTUiLz48L2FwcD48L3JlcXVlc3Q-
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3868
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:2752
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:640
  • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4920
  • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
    "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3776
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1588
      • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
        "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --from-installer
        3⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3084
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 "--annotation=prod=Brave Origin" --annotation=ver=151.1.93.137 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ffd66b0ea00,0x7ffd66b0ea10,0x7ffd66b0ea20
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2364
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1736,i,3369009757703260758,10164704145481467845,262144 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2752
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2152,i,12471496436811716249,9414005648145643852,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:3
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Time Discovery
          PID:4332
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,12754591811294050892,7527718990429897549,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2488 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2492
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3656,i,8410862235585707875,13152049724493159798,2097152 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3688 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2408
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3664,i,3696945080475390534,2109961604093954495,2097152 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3724 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3148
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5232,i,9215229557873244304,9677923223442593493,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5240 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3488
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,11900119950166990529,17821870808874233449,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5344 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4504
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,14449389005131077108,15289465876154679615,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5328 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3260
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4344,i,1570732503655864954,5028640070684094961,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5368 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2348
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4532,i,10164213679212641199,16901950541424289942,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5448 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:416
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:936
          • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 "--annotation=prod=Brave Origin" --annotation=ver=151.1.93.137 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff6623781a8,0x7ff6623781b8,0x7ff6623781c8
            5⤵
            • Executes dropped EXE
            PID:3696
          • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Origin\Application\initial_preferences" --create-shortcuts=1 --install-level=0
            5⤵
            • Drops file in Program Files directory
            • Executes dropped EXE
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:5436
            • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 "--annotation=prod=Brave Origin" --annotation=ver=151.1.93.137 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x260,0x264,0x268,0x238,0x26c,0x7ff6623781a8,0x7ff6623781b8,0x7ff6623781c8
              6⤵
              • Executes dropped EXE
              PID:5468
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,12056130776793657432,11928369748866149385,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5460 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5420
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5928,i,12724885827943726347,8630923645117772049,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5376 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5756
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,1206696171545391317,1842039068240120711,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5912 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5352
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5888,i,4297136798193342502,16615703546555367800,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5240 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5568
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,7605203902342002045,6089799684174321030,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5864 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1456
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,8209411918105534946,1070416115135418443,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5252 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3040
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,15519903028459270068,13735610400695980194,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5840 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5884
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,8212324782271975014,3465097914933149738,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=4356 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6108
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,15755051527251853173,3194787310947673178,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5528 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5212
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5248,i,11161707038735696235,16743012135858921330,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5308 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1768
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5260,i,13164664008994660054,12630881632433639412,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5488 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5380
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,8475705578698705829,11221679414619808519,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5848 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5044
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5248,i,16968057487927128659,17359791692470676051,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5812 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:2092
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=204,i,598996130883740917,11094676444231696145,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=5328 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6028
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,1743690874072454211,14480214681953350315,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5756 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6360
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,16416395579662992334,6514876846026191884,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5820 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6540
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,2657427635872492800,17077345702350365482,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5364 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6704
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5232,i,2972633406428266623,12863892842409597360,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=5728 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6896
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,2443512020423148086,9254057398962055004,524288 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=5336 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:7092
        • C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Origin\Application\brave.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --metrics-shmem-handle=5844,i,9213834635262412620,7427969212297553721,262144 --field-trial-handle=1896,i,8568048861929014142,15342034282237838538,262144 --variations-seed-version=main@ae2d63b2fbefbf3e6d1b6a51f43560116ab0b7ae --pseudonymization-salt-handle=1900,i,14327356198896496239,10953763784467190867,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=5916 /prefetch:8
          4⤵
          • Network Service Discovery
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:5304
  • C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4740
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:5048
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5520
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd63f8c728,0x7ffd63f8c734,0x7ffd63f8c740
        2⤵
          PID:5636
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,2751567207661403371,15599677842661390867,262144 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
          2⤵
            PID:5688
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2272,i,15855721778574701333,255349421699232,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2276 /prefetch:3
            2⤵
            • System Time Discovery
            PID:5652
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,14250624442037526103,4569469319682196520,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2576 /prefetch:8
            2⤵
              PID:5808
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,7732319904865348621,6657995266442465157,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
              2⤵
                PID:5976
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,14143087797047259348,837715345060892639,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
                2⤵
                  PID:5760
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3932,i,5635485465380847249,782455748515605790,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:2
                  2⤵
                    PID:5996
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,7272651577340055047,6967375881242529717,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
                    2⤵
                      PID:2540
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,14313258992213565061,13379104913609675880,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
                      2⤵
                        PID:2148
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5840,i,16028055701731407334,17140833634581471504,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:1
                        2⤵
                          PID:5380
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5956,i,5383568584571162834,6315580433398992010,2097152 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:1
                          2⤵
                            PID:5508
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4832,i,9579144303028111991,14881213409475885479,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:8
                            2⤵
                              PID:1476
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4816,i,13836305230355538177,17434829879449541578,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:8
                              2⤵
                                PID:3112
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,8585787074472864633,15904709137976426017,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
                                2⤵
                                  PID:5212
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3284,i,8676241251375379477,1912080413627034097,262144 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:5324
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,7120141439021557040,1416612935494496484,524288 --field-trial-handle=1904,i,12050962014966376634,15773399122523217606,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4832 /prefetch:8
                                  2⤵
                                    PID:3288
                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                  1⤵
                                    PID:5744
                                  • C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Solitaire.exe
                                    "C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Solitaire.exe" -ServerName:App.AppXx8xn0rs58sab7mvbtxgdhw97cpm1dzhb.mca
                                    1⤵
                                    • Checks SCSI registry key(s)
                                    • Suspicious use of SetWindowsHookEx
                                    PID:6180
                                  • C:\Windows\System32\GameBarPresenceWriter.exe
                                    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                    1⤵
                                    • Network Service Discovery
                                    PID:3360
                                  • C:\Windows\system32\OpenWith.exe
                                    C:\Windows\system32\OpenWith.exe -Embedding
                                    1⤵
                                    • Suspicious behavior: GetForegroundWindowSpam
                                    • Suspicious use of SetWindowsHookEx
                                    PID:6708
                                  • C:\Windows\system32\svchost.exe
                                    C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                    1⤵
                                    • Checks processor information in registry
                                    PID:7092
                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
                                    1⤵
                                    • Badlisted process makes network request
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:7024
                                    • C:\Windows\system32\curl.exe
                                      "C:\Windows\system32\curl.exe" --ssl-revoke-best-effort -s https://dl.deno.land/release-latest.txt
                                      2⤵
                                        PID:1732
                                      • C:\Windows\system32\curl.exe
                                        "C:\Windows\system32\curl.exe" --ssl-revoke-best-effort -Lo C:\Users\Admin\.deno\bin\deno.zip https://dl.deno.land/release//deno-x86_64-pc-windows-msvc.zip
                                        2⤵
                                          PID:3516
                                        • C:\Windows\system32\tar.exe
                                          "C:\Windows\system32\tar.exe" xf C:\Users\Admin\.deno\bin\deno.zip -C C:\Users\Admin\.deno\bin
                                          2⤵
                                            PID:964
                                        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /c
                                          1⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          PID:6864
                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /cr
                                            2⤵
                                            • Drops file in Program Files directory
                                            • Executes dropped EXE
                                            • System Location Discovery: System Language Discovery
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:5704
                                          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
                                            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe"
                                            2⤵
                                            • Executes dropped EXE
                                            • System Location Discovery: System Language Discovery
                                            PID:5996
                                          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
                                            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe"
                                            2⤵
                                            • Executes dropped EXE
                                            PID:6132
                                          • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                            "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource core
                                            2⤵
                                            • Executes dropped EXE
                                            • System Location Discovery: System Language Discovery
                                            PID:6344
                                        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ua /installsource scheduler
                                          1⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:6852
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                          1⤵
                                          • Checks processor information in registry
                                          • Enumerates system info in registry
                                          • Modifies data under HKEY_USERS
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                          • Suspicious use of FindShellTrayWindow
                                          PID:3148
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ffd63f8c728,0x7ffd63f8c734,0x7ffd63f8c740
                                            2⤵
                                              PID:4576
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,4321912474772960292,14407429105023955454,262144 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=1996 /prefetch:2
                                              2⤵
                                                PID:6420
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2148,i,8555734889545198863,5593139658493557928,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2184 /prefetch:3
                                                2⤵
                                                • System Time Discovery
                                                PID:5940
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,3000264389223119833,4362806029661027289,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2568 /prefetch:8
                                                2⤵
                                                  PID:840
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,2386815662192464399,1323104409097001896,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3256 /prefetch:1
                                                  2⤵
                                                    PID:2460
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,10971245138882389664,10206185027272699939,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3276 /prefetch:1
                                                    2⤵
                                                      PID:4768
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,5977754688065825428,15105342255383669646,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=4580 /prefetch:1
                                                      2⤵
                                                        PID:6188
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5296,i,1718231831587538171,16190724312015865417,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5300 /prefetch:8
                                                        2⤵
                                                          PID:5500
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5572,i,17969076346388190095,9834196131585203332,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5600 /prefetch:1
                                                          2⤵
                                                            PID:7028
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3280,i,9312310456418071461,14787772895820404348,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5364 /prefetch:8
                                                            2⤵
                                                              PID:1104
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3300,i,14407334889975157508,14293677485383588114,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3348 /prefetch:8
                                                              2⤵
                                                                PID:896
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3496,i,4306022493627954060,14375246269945189004,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3360 /prefetch:8
                                                                2⤵
                                                                  PID:4888
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3472,i,16966744942695338531,2043813106741284099,262144 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3464 /prefetch:8
                                                                  2⤵
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:836
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3896,i,13311162948903972274,17847528106129485163,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=4464 /prefetch:1
                                                                  2⤵
                                                                    PID:1656
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5744,i,17930155101970311104,12064964895390920284,2097152 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5764 /prefetch:1
                                                                    2⤵
                                                                      PID:1812
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,13210957827703192554,15262640531280209567,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5360 /prefetch:8
                                                                      2⤵
                                                                        PID:3560
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,7501320538435488039,17657247640266117178,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=6000 /prefetch:8
                                                                        2⤵
                                                                          PID:6156
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,3936110666341033378,963067674030230254,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5788 /prefetch:8
                                                                          2⤵
                                                                            PID:6216
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,2864722230708176676,4225859044897102674,524288 --field-trial-handle=2000,i,17518659573522468368,12171933323144665197,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5652 /prefetch:8
                                                                            2⤵
                                                                              PID:924
                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                            1⤵
                                                                              PID:5036
                                                                            • C:\Windows\system32\svchost.exe
                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                              1⤵
                                                                                PID:5364
                                                                              • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
                                                                                "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
                                                                                1⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:4484
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                1⤵
                                                                                • Checks processor information in registry
                                                                                • Enumerates system info in registry
                                                                                • Modifies data under HKEY_USERS
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                • Suspicious use of FindShellTrayWindow
                                                                                PID:5628
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd63f8c728,0x7ffd63f8c734,0x7ffd63f8c740
                                                                                  2⤵
                                                                                    PID:2064
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1956,i,15407719486153592133,7028139357657423149,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2124 /prefetch:3
                                                                                    2⤵
                                                                                    • System Time Discovery
                                                                                    PID:1028
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,16835646622256195363,62091287530352910,262144 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2092 /prefetch:2
                                                                                    2⤵
                                                                                      PID:6088
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,563324637409495027,17067056849221716504,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2368 /prefetch:8
                                                                                      2⤵
                                                                                        PID:5372
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2800,i,3028962159540084764,6323070344497569775,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3088 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5568
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2940,i,1731871049989376744,9330200878427407444,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3112 /prefetch:1
                                                                                          2⤵
                                                                                            PID:7028
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4536,i,7246485584131844754,8834770465673743522,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=4540 /prefetch:1
                                                                                            2⤵
                                                                                              PID:3228
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5284,i,12407567406234160448,2839976035711820141,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=4684 /prefetch:8
                                                                                              2⤵
                                                                                                PID:4440
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5180,i,14377302805868138125,16695950470569473574,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5576 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6348
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3052,i,14531752273258403342,14821091865236362548,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=4404 /prefetch:8
                                                                                                  2⤵
                                                                                                    PID:5552
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4448,i,8742164249920618486,662428411595323842,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=208 /prefetch:8
                                                                                                    2⤵
                                                                                                      PID:1772
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3048,i,8322844685782182578,13314569730952949730,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3276 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:5332
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5764,i,11833992426234226843,10848945211309978717,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=2352 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:740
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3368,i,9052044682404218677,5237360545753117894,524288 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=3320 /prefetch:8
                                                                                                          2⤵
                                                                                                            PID:4788
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3212,i,7479276688771341430,15827743795772907323,2097152 --field-trial-handle=2096,i,13784900209804329311,6990516808351872354,262144 --variations-seed-version=20260819-090044.847000-production --mojo-platform-channel-handle=5740 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6308
                                                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                            1⤵
                                                                                                              PID:368
                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                              1⤵
                                                                                                                PID:6476

                                                                                                              Network

                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                    Reconnaissance

                                                                                                                    Resource Development

                                                                                                                    Initial Access

                                                                                                                    Execution

                                                                                                                    Persistence

                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                    1
                                                                                                                    T1547

                                                                                                                    Active Setup

                                                                                                                    1
                                                                                                                    T1547.014

                                                                                                                    Event Triggered Execution

                                                                                                                    2
                                                                                                                    T1546

                                                                                                                    Component Object Model Hijacking

                                                                                                                    1
                                                                                                                    T1546.015

                                                                                                                    Image File Execution Options Injection

                                                                                                                    1
                                                                                                                    T1546.012

                                                                                                                    Privilege Escalation

                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                    1
                                                                                                                    T1547

                                                                                                                    Active Setup

                                                                                                                    1
                                                                                                                    T1547.014

                                                                                                                    Event Triggered Execution

                                                                                                                    2
                                                                                                                    T1546

                                                                                                                    Component Object Model Hijacking

                                                                                                                    1
                                                                                                                    T1546.015

                                                                                                                    Image File Execution Options Injection

                                                                                                                    1
                                                                                                                    T1546.012

                                                                                                                    Defense Evasion

                                                                                                                    Modify Registry

                                                                                                                    1
                                                                                                                    T1112

                                                                                                                    Credential Access

                                                                                                                    Discovery

                                                                                                                    Browser Information Discovery

                                                                                                                    1
                                                                                                                    T1217

                                                                                                                    Network Service Discovery

                                                                                                                    1
                                                                                                                    T1046

                                                                                                                    Peripheral Device Discovery

                                                                                                                    1
                                                                                                                    T1120

                                                                                                                    Query Registry

                                                                                                                    5
                                                                                                                    T1012

                                                                                                                    System Information Discovery

                                                                                                                    6
                                                                                                                    T1082

                                                                                                                    System Location Discovery

                                                                                                                    1
                                                                                                                    T1614

                                                                                                                    System Language Discovery

                                                                                                                    1
                                                                                                                    T1614.001

                                                                                                                    System Network Configuration Discovery

                                                                                                                    1
                                                                                                                    T1016

                                                                                                                    Internet Connection Discovery

                                                                                                                    1
                                                                                                                    T1016.001

                                                                                                                    System Time Discovery

                                                                                                                    1
                                                                                                                    T1124

                                                                                                                    Lateral Movement

                                                                                                                    Collection

                                                                                                                    Command and Control

                                                                                                                    Exfiltration

                                                                                                                    Impact

                                                                                                                    Replay Monitor

                                                                                                                    Loading Replay Monitor...

                                                                                                                    Downloads

                                                                                                                    BraveCrashHandler.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveCrashHandler.exe
                                                                                                                    • Size 270KB
                                                                                                                    • SHA256 57394f3dc5778c4d88aa99c5bef9464f21d42114a15a482ef0e28636eea4a504
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveCrashHandler64.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveCrashHandler64.exe
                                                                                                                    • Size 355KB
                                                                                                                    • SHA256 283e9ab3a5b4184b59b4464190c526e0037ef1c56b739ad16552faffb74bee12
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveCrashHandlerArm64.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveCrashHandlerArm64.exe
                                                                                                                    • Size 353KB
                                                                                                                    • SHA256 aa274402979b65146f38d6aef4b475ffe5238d210b1d0ad555082a9203d887f4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveUpdate.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdate.exe
                                                                                                                    • Size 163KB
                                                                                                                    • SHA256 f9a5b5f6a660cb9f04c0735f5c3bf1e74776293d25132bc137d6a34b4aa63b7e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveUpdateComRegisterShell64.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdateComRegisterShell64.exe
                                                                                                                    • Size 170KB
                                                                                                                    • SHA256 6c2e8fd3a7b6c3e27d2ceb347080ada84d1c231ecd6b25a9f7c97b9a31d9c79f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveUpdateComRegisterShellArm64.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdateComRegisterShellArm64.exe
                                                                                                                    • Size 154KB
                                                                                                                    • SHA256 157b35b2d4d1da77e9df478f661ad45c27e3bac0ee212f70618e0a45f0d43e0a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BraveUpdateCore.exe
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\BraveUpdateCore.exe
                                                                                                                    • Size 195KB
                                                                                                                    • SHA256 73edc8a3c4312d739d289485692d5e4e30939bbfb1a5f337b89168e3d987e092
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdate.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdate.dll
                                                                                                                    • Size 1.0MB
                                                                                                                    • SHA256 7aae4e381308d8a90b522ddd2878c4a4a54c6750d9c60deb87092ca94e33f641
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_am.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_am.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 af7487311e0fc5014b6f2b0b7746800acc206ab17503bd9e92444100c81e9122
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ar.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ar.dll
                                                                                                                    • Size 41KB
                                                                                                                    • SHA256 00edb65175c77822504e6e44ed7e7e437cc9b51c142665d27eb5d6fab93bfa31
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_bg.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_bg.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 a9fb8efdae4497e104306978e7c2043c98d5ec763ffdee1cd672f38e49078c0d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_bn.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_bn.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 72f18efb0d382f9b9d0cf4b9c916045850030676a53a6a7e7a8c5b16dd78a447
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ca.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ca.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 bc45ba571ca46ed6f63832f920abad26e4d8022a38ae7fba7f3b4a93a077917c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_cs.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_cs.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 d49335992a3f80484c987341e1abfac4f7b9768a7e7fb9e5d5e582eb64d02cea
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_da.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_da.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 6fc1429dda2e08ca764a8e7686244a3e516f1f0da3522f6a77aeddfb1abe2e25
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_de.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_de.dll
                                                                                                                    • Size 45KB
                                                                                                                    • SHA256 b82d3cb8793455b9695697501b000369d40250b9655635b90bf082d79a4e5c6a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_el.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_el.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 0838a8a61294ea4b2a61ccae199b230bf6089512b6010078080edfa4adf4d86e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_en-GB.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_en-GB.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 c0701e6f7171ec87d0a63e7bafae9243024858a7f3978eb902e74405373e428c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_en.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_en.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 8736ff073854f5ab98936d2646700b267ed2c5e9b814559b0f69000c8c7e126e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_es-419.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_es-419.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 f9292eb23e1f17824e50cdb49315080f718fb49283e25962afdd19668b4cde02
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_es.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_es.dll
                                                                                                                    • Size 45KB
                                                                                                                    • SHA256 e4191d912824044ada3b151a4c30ff7dde62193294558c2413390a5f8026a143
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_et.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_et.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 0dbfaff412078939e6a84e9f880d2a9d2f12adb3358022beac6f3995f4053304
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_fa.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_fa.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 6936037ade85d04d2ed58387ecc74ecea152978b1cf2d41d4fc7bbf6d5394710
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_fi.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_fi.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 451e8fd48fe09844e33d9f2b0ea30395056a9bae6e14c0a164e9fdbb819d5a2d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_fil.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_fil.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 3ee16839cac68eda188cda149fef0b558dffe284414cab96c6a5f42ec235163f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_fr.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_fr.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 de5db85dda0195210e0c9a4d8a70799faed02272d4593b921caff873536abd66
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_gu.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_gu.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 e64de5f0243e9f7a82df2bcb9c578d7217e96d3eb5f610255ce06b4a56c5cf29
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_hi.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_hi.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 34bb215d1b9b7e69478b22581c6b34a4f85d03804dcffab3f10a4e60e636ebdb
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_hr.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_hr.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 9ab1ed827886c1f3bc7713aa0bb7ca5416025b56cbf7a07d1de1f9dd9feb7f24
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_hu.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_hu.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 8b77a76b7fd2bb0a7555da2367683d516476219b451ad19336ad5f9ba8938fd6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_id.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_id.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 e61c3e11e933fa1692dbb49853718a120e722c39100d12a56c3ec9c7b5e43a3a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_is.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_is.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 770a41c727fb2c6764b2968d2d1fa1418e0633d1e846f3e84010334d84112b83
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_it.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_it.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 0341bb6fb70a5347bcb927eea2d3ea9d20c415940bd03f53960bb3dff027d26c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_iw.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_iw.dll
                                                                                                                    • Size 40KB
                                                                                                                    • SHA256 ab428fd705d1634080ac87f49c196ebaf04caf203351cdb321250b8b4b12b307
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ja.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ja.dll
                                                                                                                    • Size 39KB
                                                                                                                    • SHA256 c12d8a3f0003b2ea4c9bc66bae5f64d494c77dfacb92b6f73a5a7ba4f36e167f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_kn.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_kn.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 768630ac6cf2fc6ac173a3a71034de5ce7f74a8a357449a4f88cf443917e9663
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ko.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ko.dll
                                                                                                                    • Size 39KB
                                                                                                                    • SHA256 e55d73014d680f31a231ae1baed2399e8234214ccba54ce601d68afc305a5c1b
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_lt.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_lt.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 74227e04db325e88e7b0ae4ed13653cc3b1c4ac75b7f16335d9501a46db6642f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_lv.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_lv.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 ab7feb1a24a192e91947e2554f76970c2d7840ddfc2086e9904307f26100cb51
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ml.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ml.dll
                                                                                                                    • Size 46KB
                                                                                                                    • SHA256 41dcdfdf17b6bfbbe4f9ac7d41e909e4b98b71432d169f4ed94e1a8e0389906c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_mr.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_mr.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 b68912b050473889cae75e41450b69f8a9ce6f048943ada18228107211f11c6d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ms.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ms.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 db39c9144170ecd4f60254fa4ee21a833f0a0a8cca300dabe14a08e2cf72b1a1
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_nl.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_nl.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 be739b81e1037cdc15cc4af374d6680659433101e08af00960f5a0d5f3b8f686
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_no.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_no.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 0e95adfd0d16c4fad872abf165f5fb8d97de8a09e38e831170d563191e86338a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_pl.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_pl.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 0de77a268a5822c6fb8c8a293ec594cad0189641bc905fe9f93984fe28a7bb05
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_pt-BR.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_pt-BR.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 40851228c75262c07a6249518c63c45dedeadbe7ac8f6d8c15fc8c10887ca556
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_pt-PT.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_pt-PT.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 e8c6eb7d332775cf79d792fc3cae8d1987ae4a36c52f14ae2641f5aa68b1829a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ro.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ro.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 ec6f279ff5cd9443aa07e6f1df9e1eceb38081a6993a840ab827330346e0f0cd
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ru.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ru.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 053e57773059e11c31591ab56e62abed689b488cb3db31458116e3ecee5daa63
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_sk.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_sk.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 a487cc53c3e93c735839f38dc97a96de6a431a30ae60abfee1b611fac916967c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_sl.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_sl.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 cce9ab3f85e402de58546b0d915488faf084c02ff2e33c8cd54e611c88738062
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_sr.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_sr.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 bca05dcd65ae6c383f3e178620001dca4d7b6870693454bbcc35bf9d98e5dcf6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_sv.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_sv.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 04ac2d922afd9298f9c6411fbadd3d8f3ab40058f73b4f5422549fc98b991e64
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_sw.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_sw.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 732b24e2a657c8efa73abe70d5d08914560d62a398c1d47681729834916cf40e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ta.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ta.dll
                                                                                                                    • Size 45KB
                                                                                                                    • SHA256 951fc679d819188272996f84120ead1db4b7258d7465de52dda74a16b2bc4c6f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_te.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_te.dll
                                                                                                                    • Size 44KB
                                                                                                                    • SHA256 671af89d7b0519740df4cc6ab09e55432a2be2ea51d869e4e6ceb3ae30d805e8
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_th.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_th.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 3b840851531e64dfbbad086c5943b3c2c707cba1347ee24c0f71d18711edb94f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_tr.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_tr.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 32453023dd1e19aed7a8395347d5b503139b40945670877989cb86acf6e7f1f0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_uk.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_uk.dll
                                                                                                                    • Size 43KB
                                                                                                                    • SHA256 6a3446bd01b638f51814a52d58f2a42d23d6e0329d0edc5cb346a0ede38b9915
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_ur.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_ur.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 b3c1a253282a17bf2480cb9083afbd3beb75f7938f029777bc3ef598d0b8cece
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_vi.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_vi.dll
                                                                                                                    • Size 42KB
                                                                                                                    • SHA256 94db7c9fed28e74cb14252d1f91d9299850c783ba8570a31453ea126acad48be
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    goopdateres_zh-CN.dll
                                                                                                                    • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM1374.tmp\goopdateres_zh-CN.dll
                                                                                                                    • Size 37KB
                                                                                                                    • SHA256 8bb7e9bd6090eee3a8057d2c2818580d855baa51f06516962188420e421291af
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1162564291\manifest.json
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1224103091\manifest.json
                                                                                                                    • Size 202B
                                                                                                                    • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_125471946\manifest.json
                                                                                                                    • Size 108B
                                                                                                                    • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1279617613\manifest.json
                                                                                                                    • Size 73B
                                                                                                                    • SHA256 d2eeb1338569604b2edd7ae94e7794a3aa2750be526e9dd92f252bfa929acb06
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1287740337\manifest.json
                                                                                                                    • Size 108B
                                                                                                                    • SHA256 073e4659ab87ddce65fcea787530005169802fd3d3418e9da756b856609a02e7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1328630392\manifest.json
                                                                                                                    • Size 580B
                                                                                                                    • SHA256 bfad155b88d1441588aed8777cd1548d05edbf513bfb6da5917a384db7e3acc2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_137160947\manifest.json
                                                                                                                    • Size 584B
                                                                                                                    • SHA256 9c6c3fb51b7531b7a51a29d0c8f815e2b32325d8fad072315ae6191a2e910bff
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1494580836\manifest.json
                                                                                                                    • Size 591B
                                                                                                                    • SHA256 145e0eb394c53f19a3f6c9534c3f0bc673feb581eee8389f8ec0418f16c1a401
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1520518427\manifest.json
                                                                                                                    • Size 86B
                                                                                                                    • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    hyph-as.hyb
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1586885088\hyph-as.hyb
                                                                                                                    • Size 703B
                                                                                                                    • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    hyph-hi.hyb
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1586885088\hyph-hi.hyb
                                                                                                                    • Size 687B
                                                                                                                    • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    hyph-nb.hyb
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1586885088\hyph-nb.hyb
                                                                                                                    • Size 141KB
                                                                                                                    • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1586885088\manifest.json
                                                                                                                    • Size 82B
                                                                                                                    • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1957769178\manifest.json
                                                                                                                    • Size 581B
                                                                                                                    • SHA256 e9b2bef1e170dde425ab4e7a432b3ed9eeb71797035bbd1c4c8bac5054e8e39a
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_1984299233\manifest.json
                                                                                                                    • Size 594B
                                                                                                                    • SHA256 602d3b851284028dbbce4792401e51a7f0ceef23c6e9e616852aab43ffbe1584
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_242672251\manifest.json
                                                                                                                    • Size 558B
                                                                                                                    • SHA256 1eddf1bd01e797b724be1fab828e10cb3b6f4195bc32dde85632661a3ab268b8
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_383633888\manifest.json
                                                                                                                    • Size 592B
                                                                                                                    • SHA256 8a2607f0c6e9f994b3b1d9363b57943746c10ed0d8d33bc22ce755d341110ebd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_432789870\manifest.json
                                                                                                                    • Size 504B
                                                                                                                    • SHA256 7d6992bf9b9f1ca1cfba208d2c73098a484846dae21f94461e3b832f2f370a46
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_476219143\manifest.json
                                                                                                                    • Size 587B
                                                                                                                    • SHA256 4baeb836df3232c3babfc06b262b7928eb9f4adac0fdc5c78ced7b539b23ce76
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_518036096\manifest.json
                                                                                                                    • Size 69B
                                                                                                                    • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_64767282\manifest.json
                                                                                                                    • Size 533B
                                                                                                                    • SHA256 55a0c0461cde1db922ebc586d54a8fe32eb18029fe463a896305256e0a9335a1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_744985161\manifest.json
                                                                                                                    • Size 76B
                                                                                                                    • SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_829118390\manifest.json
                                                                                                                    • Size 564B
                                                                                                                    • SHA256 788c4ba389c68e04e7c4424e7aa8a72a56343c2529f223dad31be6686e44e72f
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3084_924348270\manifest.json
                                                                                                                    • Size 96B
                                                                                                                    • SHA256 d46dd0b3a84b2a568b0f2f3d0fec26ac2947f4c9774d3dbb99f67ee7ad7bb6ed
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    setup.exe
                                                                                                                    • Path C:\Program Files\BraveSoftware\Brave-Origin\Application\151.1.93.137\Installer\setup.exe
                                                                                                                    • Size 5.9MB
                                                                                                                    • SHA256 5ad9c102bf2d75d91ddc0d0469d0cd195f369d24a4ac3c45284d7c9c24770bd4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    messages.json
                                                                                                                    • Path C:\Program Files\BraveSoftware\Brave-Origin\Temp\source2896_1614717397\Chrome-bin\151.1.93.137\resources\brave_extension\_locales\sr\messages.json
                                                                                                                    • Size 9KB
                                                                                                                    • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    crl-set
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\CertificateRevocation\10725\crl-set
                                                                                                                    • Size 1.4MB
                                                                                                                    • SHA256 a3462906675390dd7536c0401ec25d3e69413c65f4cd8abd9bb8b9715d069167
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preload Data
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Crowd Deny\2026.8.17.84\Preload Data
                                                                                                                    • Size 274KB
                                                                                                                    • SHA256 94dc79975b437f57ba3228c2064b2ae36e3f8087fabcbeae065a2a7aa0ce375f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    3801f66c-323f-4caa-8d99-00e9be6a1bd5.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\3801f66c-323f-4caa-8d99-00e9be6a1bd5.tmp
                                                                                                                    • Size 181KB
                                                                                                                    • SHA256 4ef93b727b703600f9ed557abfeef3916835db74def8835767a656dc5f3706fe
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    6ac41ce9-db17-455a-b9f6-fd33221dac24.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\6ac41ce9-db17-455a-b9f6-fd33221dac24.tmp
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 6855d2928149da29769d37cb8498e501e495d961e09525563049b655b151e7a2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    data_1
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Cache\Cache_Data\data_1
                                                                                                                    • Size 264KB
                                                                                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                    Submit Download

                                                                                                                    data_0
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\DawnGraphiteCache\data_0
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                    Submit Download

                                                                                                                    data_2
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\DawnGraphiteCache\data_2
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                    Submit Download

                                                                                                                    data_3
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\DawnGraphiteCache\data_3
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                    Submit Download

                                                                                                                    index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\DawnGraphiteCache\index
                                                                                                                    • Size 256KB
                                                                                                                    • SHA256 f01637a7a0885b35786635df795de9941ac038367cb0b81e00eeca796a0d1fb5
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 301B
                                                                                                                    • SHA256 46373b90071b626aedae536d116bc99f64b808bfa1f3f4f02c563b9a826debac
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    SCT Auditing Pending Reports
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    cbfe9933-681a-4de1-8623-4e60a7f2c80a.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Network\cbfe9933-681a-4de1-8623-4e60a7f2c80a.tmp
                                                                                                                    • Size 59B
                                                                                                                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Preferences
                                                                                                                    • Size 13KB
                                                                                                                    • SHA256 a2fbd1fdf8db84adb6285c63d4263554a2a8dd590b8c9e7529c827f91440ce4f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Preferences
                                                                                                                    • Size 13KB
                                                                                                                    • SHA256 ed006c79e1ba0ac2bf89a0e0a873ccbc09d161dddbb76fb3ee27f731bf523838
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Shared Dictionary\cache\index
                                                                                                                    • Size 24B
                                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    CURRENT
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Sync Data\LevelDB\CURRENT
                                                                                                                    • Size 16B
                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    MANIFEST-000001
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                    • Size 41B
                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    download_file_types.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 17KB
                                                                                                                    • SHA256 0581a6e5e086391d1f69bcf420f45a92d633971726233daba67ad4aa845eb887
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 e1892dbb6e152be8bc8a867f4cbc105f2bca714cc744dfbd80c3de9ced56c404
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 9f76f83e06bb11198b625fda18702251b2d60fe88394db099de05102515d04d5
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 17KB
                                                                                                                    • SHA256 b7cbe39683701191efe91c58f492295a41f22c50b885a5c34b9b7589fe493764
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 0cbda00b46da935cad9ad9101be027d642838ac04b897878d63a1c9ff35a0a0d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\Local State
                                                                                                                    • Size 17KB
                                                                                                                    • SHA256 787765bf411106c2de7e27b72e8fe8db80c7abedb09fb55339e78c0544412f17
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    preloaded_data.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\MEIPreload\1.1.0.3\preloaded_data.pb
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    crs.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\PKIMetadata\1748\crs.pb
                                                                                                                    • Size 344KB
                                                                                                                    • SHA256 4d604c5342cd4438e047f13d7349e0cd7888769449c280da1e8077157c157d0f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    ct_config.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\PKIMetadata\1748\ct_config.pb
                                                                                                                    • Size 52KB
                                                                                                                    • SHA256 a1146d6b7a04c58d7313b6952dc93e37a58b124fe956c27a40017061bfc2bff6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    kp_pinslist.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\PKIMetadata\1748\kp_pinslist.pb
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 bf88f865c337c3937f5cd08027aa526a53972fc58f75f641002fec49ce7a22c9
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    ssl_error_assistant.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    safety_tips.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\SafetyTips\3091\safety_tips.pb
                                                                                                                    • Size 180KB
                                                                                                                    • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    ranked_dicts
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\ZxcvbnData\3\ranked_dicts
                                                                                                                    • Size 865KB
                                                                                                                    • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.476\list.txt
                                                                                                                    • Size 263KB
                                                                                                                    • SHA256 b4044664f1a27c72a2e7ba519f27abd5250023bbe2530951b7c8a91a94b93c98
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    clean-urls-permissions.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\1\clean-urls-permissions.json
                                                                                                                    • Size 333B
                                                                                                                    • SHA256 ae19d4b67e3268d5739e35d0aade25c9a1389493a3d9d4f01234ff437350ba6b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    clean-urls.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\1\clean-urls.json
                                                                                                                    • Size 29KB
                                                                                                                    • SHA256 d75c032a3bc0ac2ad9aea30f42429560202b56ea3b27c203a60571db503c9bad
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    debounce.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\1\debounce.json
                                                                                                                    • Size 12KB
                                                                                                                    • SHA256 fb2396985a78983c8f88ee701100c5cb4681731239ac6624e86da1212645dbf8
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    https-upgrade-exceptions-list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\1\https-upgrade-exceptions-list.txt
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 ec12bca633a18d9d3aed6d3e54a7da678f3d70e84e9bedd911e968fa912ad58c
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    webcompat-exceptions.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\1\webcompat-exceptions.json
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 cc075d3a0454a25b2dd11e6a84d8d3227ef56c3946447cb1c7613173ad3f36bb
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\afalakplffnnnlkncjhbmahjfjhmlkal\1.0.1510\manifest.json
                                                                                                                    • Size 575B
                                                                                                                    • SHA256 bf64f3cc46e8d9d9c7e7dcc6d2d2f1272c322f00514262b142d19564f83ffbb1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    photo.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.24\photo.json
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 9076682324d3dae2c496ad99ee334b53ca1f44570332793a3142372f773941fb
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16877\list.txt
                                                                                                                    • Size 48KB
                                                                                                                    • SHA256 bd4d2d48f6b2bc46525ab51aebc344b9d1ee245eeffd7a1231eecb13a7115400
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19951\list.txt
                                                                                                                    • Size 1.5MB
                                                                                                                    • SHA256 f0c471a380188779173296768cae3d12f731ae515421232d96361cedd04ec968
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    query-filter.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\cemdlagocoimleflkfkjoihojfainiho\1.0.129\query-filter.json
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 c7b7d0292dd5c1e0f00f7ff27d52621ae07f8dc6e76fc2fe8cebb4b92d614a0d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    0f00f599331407c475b724e344180f211a4f9e70a78226d976d9cf0fb94dc023
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\0f00f599331407c475b724e344180f211a4f9e70a78226d976d9cf0fb94dc023
                                                                                                                    • Size 278KB
                                                                                                                    • SHA256 0f00f599331407c475b724e344180f211a4f9e70a78226d976d9cf0fb94dc023
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
                                                                                                                    • Size 7.6MB
                                                                                                                    • SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                    • Size 11KB
                                                                                                                    • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
                                                                                                                    • Size 16.9MB
                                                                                                                    • SHA256 33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    34246064b280b968e1634fddfe8da60e5b69558eb66bc80df7e46955ee9de882
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\34246064b280b968e1634fddfe8da60e5b69558eb66bc80df7e46955ee9de882
                                                                                                                    • Size 1.4MB
                                                                                                                    • SHA256 34246064b280b968e1634fddfe8da60e5b69558eb66bc80df7e46955ee9de882
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    35bcd42cec530dcb09017cee95973bdcfb7cd91ee6dd9fdb2aa3d27f7024718b
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\35bcd42cec530dcb09017cee95973bdcfb7cd91ee6dd9fdb2aa3d27f7024718b
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 35bcd42cec530dcb09017cee95973bdcfb7cd91ee6dd9fdb2aa3d27f7024718b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
                                                                                                                    • Size 5KB
                                                                                                                    • SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    457fab69-611d-42e9-8c22-bf8171b20248.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\457fab69-611d-42e9-8c22-bf8171b20248.tmp
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 872d93ac3a44eed3962e00f61e01e0b9ab92a7fb3d4758de74482d26ff82d452
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    4ea4a28ef822337c9c8ba94f5183202f105b4ce93eb59a8c70c18d7e861c2b53
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\4ea4a28ef822337c9c8ba94f5183202f105b4ce93eb59a8c70c18d7e861c2b53
                                                                                                                    • Size 88KB
                                                                                                                    • SHA256 4ea4a28ef822337c9c8ba94f5183202f105b4ce93eb59a8c70c18d7e861c2b53
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                    • Size 857KB
                                                                                                                    • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    57d139ba6ba3160287788817c3bf3228d44720b80144f66d583d4de0730a5d27
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\57d139ba6ba3160287788817c3bf3228d44720b80144f66d583d4de0730a5d27
                                                                                                                    • Size 416KB
                                                                                                                    • SHA256 57d139ba6ba3160287788817c3bf3228d44720b80144f66d583d4de0730a5d27
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    6f59d9483e2785f7696f2483c40bfffbfc0feea72fbf608e71e7063187315f2a
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\6f59d9483e2785f7696f2483c40bfffbfc0feea72fbf608e71e7063187315f2a
                                                                                                                    • Size 1.5MB
                                                                                                                    • SHA256 6f59d9483e2785f7696f2483c40bfffbfc0feea72fbf608e71e7063187315f2a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                    • Size 12KB
                                                                                                                    • SHA256 7b05c14dba04ed522210b733f004cb0e74d7679a653b19bd029f9bc0e6b19903
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                    • Size 184KB
                                                                                                                    • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
                                                                                                                    • Size 265KB
                                                                                                                    • SHA256 a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
                                                                                                                    • Size 1.1MB
                                                                                                                    • SHA256 c52c62a7c50daf7d3f73ec16977cd4b0ea401710807d5dbe3850941dd1b73a70
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    e3d6f43ac10a79e2306ad0bced12893ae5d904b416c55379fdccb194be1ec06d
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\e3d6f43ac10a79e2306ad0bced12893ae5d904b416c55379fdccb194be1ec06d
                                                                                                                    • Size 5KB
                                                                                                                    • SHA256 e3d6f43ac10a79e2306ad0bced12893ae5d904b416c55379fdccb194be1ec06d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    e9f035418f41a22ef415867004d5214c9c5fdb398be02ac753d1313a7fcfdc8b
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\e9f035418f41a22ef415867004d5214c9c5fdb398be02ac753d1313a7fcfdc8b
                                                                                                                    • Size 12KB
                                                                                                                    • SHA256 e9f035418f41a22ef415867004d5214c9c5fdb398be02ac753d1313a7fcfdc8b
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
                                                                                                                    • Size 48KB
                                                                                                                    • SHA256 ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
                                                                                                                    • Size 20KB
                                                                                                                    • SHA256 f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f85b0ef4f524415600780c7183e25b005f6e36b861f336eb9d5742daa7051290
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\f85b0ef4f524415600780c7183e25b005f6e36b861f336eb9d5742daa7051290
                                                                                                                    • Size 477KB
                                                                                                                    • SHA256 f85b0ef4f524415600780c7183e25b005f6e36b861f336eb9d5742daa7051290
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f9f6694ade92d23f4585b90326e0a24f6d2007eed5b0bb8618747d72cf4d8784
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\f9f6694ade92d23f4585b90326e0a24f6d2007eed5b0bb8618747d72cf4d8784
                                                                                                                    • Size 481KB
                                                                                                                    • SHA256 f9f6694ade92d23f4585b90326e0a24f6d2007eed5b0bb8618747d72cf4d8784
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 6d5f5d8909b774ad4f26cb2f81784a6532971b691c106e13b7d4384a6e12b639
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 724c430489340e58c09693dc0f0b50948b436dfd8728d200f7396c28d203c35a
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\dkpggglmbjhgjhachikgmohmecomjndo\1.0.0\list.txt
                                                                                                                    • Size 82B
                                                                                                                    • SHA256 cb579177e0666f82bff258cd06520a74b51377ff80a3a537cc311ac926fdad98
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    e81fc458-2cd8-4f26-9862-ce4ed5f8811b.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\e81fc458-2cd8-4f26-9862-ce4ed5f8811b.tmp
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 5b83b2d6a38184ef0e079216d5971f9ec9b61c493988bccd240ea4013b811cd7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list_catalog.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.96\list_catalog.json
                                                                                                                    • Size 57KB
                                                                                                                    • SHA256 935d2e77a192b0806ee2e6da49ff4913aa22d6e6763f01032c4d512cf4b58791
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.21711\list.txt
                                                                                                                    • Size 4.9MB
                                                                                                                    • SHA256 580898c378d99550c69468f2417e854628fab015b03718ff3ca6575c4f1f96e0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh\1.0.0\list.txt
                                                                                                                    • Size 350B
                                                                                                                    • SHA256 693bfe747e6e0b253544f81ff1bcfeabe775310872497e6ba324bd2c9e7efd1f
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    list.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.7288\list.txt
                                                                                                                    • Size 1.6MB
                                                                                                                    • SHA256 f0bc06ee264bcca15ce2c6626a650d1f184060c52ce97c1151e0de97efeb0a16
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    resources.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Origin\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.152\resources.json
                                                                                                                    • Size 977KB
                                                                                                                    • SHA256 25b4adc62009974560b8bfdd7ecd9be8285bb8bc6245e8a8598c7563e35e7eb8
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    8b0cdeb0-2868-4c67-b0c3-b0af2c12b133.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8b0cdeb0-2868-4c67-b0c3-b0af2c12b133.tmp
                                                                                                                    • Size 115KB
                                                                                                                    • SHA256 c9110a0026208c6641c90272bb72a36c9781fe2e031beaa222bd1ba9a37de072
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    settings.dat
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                    • Size 40B
                                                                                                                    • SHA256 934e8a2dd0b8fc2347eea4a5fcd1e0271ad9d5a2afa5dffa8aef017283231eb4
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    8966bb74-650d-465e-a6ac-d6a167a40e1a.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8966bb74-650d-465e-a6ac-d6a167a40e1a.tmp
                                                                                                                    • Size 6B
                                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    8aa82d71-7fe0-4ce1-ae7d-7d07138d6813.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8aa82d71-7fe0-4ce1-ae7d-7d07138d6813.tmp
                                                                                                                    • Size 12KB
                                                                                                                    • SHA256 d7c87a55d3910deefb3a6210e14bfcf1d247ffb43f1db1241cb025cd75f274b8
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    BrowsingTopicsState
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                    • Size 414B
                                                                                                                    • SHA256 ebc07f6643255f92dfa4966d48ea90c93c1720532587651fe725308534376dd6
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    f_00001b
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
                                                                                                                    • Size 335KB
                                                                                                                    • SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_000054
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
                                                                                                                    • Size 25KB
                                                                                                                    • SHA256 8b39320c501124f1f27f8e637e08911cad7ba5ed8ae13c77a9513bc2dfeed3c8
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_000055
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 8ac755d538f9ac1c43d270c1f7fb19657b8833f1184668d002bddcce48e9ac67
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_000057
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                                    • Size 134KB
                                                                                                                    • SHA256 fe307a9ff8bbe691bab9a3557d73562ad8c0aa04b8d7db526894726f300a48c4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 624B
                                                                                                                    • SHA256 32455b9832bb48b7a2c2a1b6c807db4c64f4e0cc72eae84587ef22ae2da2772a
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 5KB
                                                                                                                    • SHA256 fa792a5243cde04792adf7616461944a38110e7b06d39a29819180d1b736ead6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 696B
                                                                                                                    • SHA256 1962ca1999de0069748937e5146be526adb8ea18a329abcf804ef1fdf3f6e0be
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 48adb8756d355be3c074eceb0f50e8b82e9649d5d5878e6a459fb02e65bbdb0d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 ae3598ccb5088614acf99370aa70a3e41348cbea531a95a8dc9d1f28b3cf51b7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 921c391af863aebcd81207e294c29cddc48b356074fa1fce91996e10df57d26c
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 9053005c5222f81105b30252d6f521cbdcfef15b40fd9ea95deaa8280e13f4d2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 9e27603c0ab9f5a552e0226587a14fec249a6d1bf7516da1a9d462383f6dc8d2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 97dda319d3e34afd23898323d724ca16b7e00e9b1cf5e230a98c473a9b601063
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 6KB
                                                                                                                    • SHA256 d0b8605a1c250cb6f141cb84689fd396a46e09834512816d6a2309d858002072
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    TransportSecurity
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 258aaad8c893d0d12ffc2a9ee77d3e6d187d82f191aaaef7bdf04ef3965a8a27
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    TransportSecurity
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                    • Size 690B
                                                                                                                    • SHA256 12e88472be9fe9a60182eb368886b45bc7cf6ace7388a20fb3fe9ed5ffcd3fdf
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 14KB
                                                                                                                    • SHA256 a6541eb069e36bfa58147ef33173b6b5985b1ad8c848f41f59be79df76ca6bd9
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 13KB
                                                                                                                    • SHA256 9b1ce8b94fd9695090856d88de9ba504e70bb3f892721eb9bfd187c2871876c4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 12KB
                                                                                                                    • SHA256 c90e2b02d07ab5b68f0f03cb8e25072706e14b8a3a66da478a8483ad6822fa3d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 92780194176230699efafb0b1bfd17d801438ab047c28f9340b0424943ea54ab
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 672f17b2952d00a50d32d066f6583418653ed66b280f3d0c97359eff0db4ff14
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 aee055416659b75189b97a382c44845eeebb43bbb33683498b8f7e2e92128ef1
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 557d6038a26eb8756ad8b39fbd745608cf37e26829894e5cb3c183de175ecfca
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 14KB
                                                                                                                    • SHA256 d73523f3e2d0223703c5d92dc194216a5aab6a1e1b6644ae7dc76e09cada67de
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 13KB
                                                                                                                    • SHA256 e51046b48d5c8d5be8dbc4762ce8f7f3fb240e84b3715222b64e1d200ee65d1f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 fbb0fb87df95f147c4de119ab738a1fc9f08dc4e26ff00fd15f8c6bc14deb781
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Secure Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                    • Size 17KB
                                                                                                                    • SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                    • Size 120B
                                                                                                                    • SHA256 b8457ad588f634a400bb02f974f5f7c0940b2485e23aec5270f51663898d68ae
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe5985b1.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5985b1.TMP
                                                                                                                    • Size 96B
                                                                                                                    • SHA256 8bdcb3ff75ea51ce283853a03624582d218280f1da3a789463fd87da8c051838
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 240KB
                                                                                                                    • SHA256 5b7a9956fd2c976802b4be98e19cd3edcb4fbc6d6c6044213a241557ad53a532
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 240KB
                                                                                                                    • SHA256 0b512a5f5283498a17591edb16ee9da5cdfa1b474905e47c7410346f0131623e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 242KB
                                                                                                                    • SHA256 b128e4fd8961f8e1cc29097bcf2905695f675339d51159a4ed2a130fa4094466
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 146KB
                                                                                                                    • SHA256 594c127daa247a8da16a6a197e7de2bbd6f3a2b5ffdc7f18793df8bd4bc686b1
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 241KB
                                                                                                                    • SHA256 f6ffc9e620e6c48ba60e817da6826d0e558c68de2642b7e855b4cf96e9a3291d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 131KB
                                                                                                                    • SHA256 e5f481e0fc92387d2dfec293c8a9b8529ee585e83af244025ba1608a8751354e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 241KB
                                                                                                                    • SHA256 b36e836c92d597f0153010cbf8fb669861083d51b641076f0239f5713c741c55
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 131KB
                                                                                                                    • SHA256 6c3df8525784302259baff9566f64565fd477d82c5a4b4434d52dcb14a96598a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                    • Size 171KB
                                                                                                                    • SHA256 38332e346d0ddcfc38263c23044085161cdf6593b89bd14ac1bdc9f57e661d1c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    __PSScriptPolicyTest_mynlqljq.dkl.ps1
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_mynlqljq.dkl.ps1
                                                                                                                    • Size 60B
                                                                                                                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Brave Origin.lnk
                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave Origin.lnk
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 b625542939d5072cd6f3e34c93fd63d5117be1e5d73e78722b059209dd0660b8
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    default.dic
                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    memory/416-980-0x00000297B5D20000-0x00000297B5D4B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/416-878-0x00000297B5D50000-0x00000297B5D51000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1456-1215-0x0000021B4DB70000-0x0000021B4DB71000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1456-1222-0x0000021B4DB40000-0x0000021B4DB6B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1768-1354-0x0000026766A90000-0x0000026766A91000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1768-1374-0x0000026766A60000-0x0000026766A8B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2092-1692-0x000002ABD1920000-0x000002ABD194B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2092-1652-0x000002ABD1950000-0x000002ABD1951000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2348-979-0x0000020A1FEF0000-0x0000020A1FF1B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2348-876-0x0000020A23000000-0x0000020A23001000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2492-1322-0x0000023BBC2B0000-0x0000023BBC2DB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2492-731-0x0000023BBC2E0000-0x0000023BBC2E1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2492-730-0x00007FFD84F20000-0x00007FFD84F21000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2752-1300-0x000001CE02000000-0x000001CE03898000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2752-708-0x00007FFD83980000-0x00007FFD83981000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2752-1299-0x000001CE7ED10000-0x000001CE7EE3A000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2752-1548-0x000001CE02000000-0x000001CE03898000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3040-1237-0x000001C140EF0000-0x000001C140EF1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3040-1252-0x000001C140EC0000-0x000001C140EEB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3260-981-0x000002DE069C0000-0x000002DE069EB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3260-874-0x000002DE069F0000-0x000002DE069F1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/4504-849-0x00000198ACA50000-0x00000198ACA7B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/4504-843-0x00000198AFAB0000-0x00000198AFAB1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5044-1629-0x0000015A15E20000-0x0000015A15E21000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5044-1645-0x0000015A15DA0000-0x0000015A15DCB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5212-1332-0x00000281BB440000-0x00000281BB441000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5212-1347-0x00000281BB410000-0x00000281BB43B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2190-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2181-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2192-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2197-0x0000018A04440000-0x0000018A05CD8000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2193-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2194-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2191-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2195-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2196-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2182-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5304-2183-0x0000018A023D0000-0x0000018A023D1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5352-1171-0x000001EA51280000-0x000001EA512AB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5352-1165-0x000001EA51400000-0x000001EA51401000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5380-1390-0x0000024B9BCA0000-0x0000024B9BCCB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5380-1383-0x0000024B9BCD0000-0x0000024B9BCD1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5420-987-0x0000027D94D90000-0x0000027D94DBB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5420-950-0x0000027D94DC0000-0x0000027D94DC1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5568-1202-0x000002276C140000-0x000002276C16B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5568-1192-0x000002276C180000-0x000002276C181000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5756-1000-0x000001AD8C800000-0x000001AD8C801000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5756-1158-0x000001AD8C7D0000-0x000001AD8C7FB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5884-1259-0x000001D6BB920000-0x000001D6BB921000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5884-1274-0x000001D6B88D0000-0x000001D6B88FB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6028-1918-0x000001D997C20000-0x000001D997C4B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6028-1699-0x000001D997C50000-0x000001D997C51000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6108-1307-0x0000017638060000-0x0000017638061000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6108-1323-0x0000017638030000-0x000001763805B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6360-1941-0x00000158A92E0000-0x00000158A930B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6360-1925-0x00000158AC280000-0x00000158AC281000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6540-1975-0x0000020A348D0000-0x0000020A348FB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6540-1959-0x0000020A34A80000-0x0000020A34A81000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6704-2020-0x0000019DA9390000-0x0000019DA93BB000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6704-1990-0x0000019DA93C0000-0x0000019DA93C1000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6896-2027-0x0000025C3F190000-0x0000025C3F191000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/6896-2042-0x0000025C3F160000-0x0000025C3F18B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7024-2372-0x0000025C36040000-0x0000025C36202000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7024-2370-0x0000025C35DF0000-0x0000025C35E66000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7024-2369-0x0000025C35D20000-0x0000025C35D64000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7024-2361-0x0000025C1C930000-0x0000025C1C952000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7092-2090-0x0000021B02DF0000-0x0000021B02E1B000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/7092-2074-0x0000021B02E20000-0x0000021B02E21000-memory.dmp
                                                                                                                    Download