Overview

overview

10

Static

static

3

2026-08-24...yn.exe

windows10-2004-x64

10

2026-08-24...yn.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 12:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe
  • Size 1.4MB
  • Sample260825-ple28ssblc
  • SHA256 83738e36df501b87bd3f3cdbe735a9fea33ece9686132c25d82a0f711d146ce9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Modifies visibility of hidden/system files in Explorer 2 TTPs 2 IoCs
    defense_evasion
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 18 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 59 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:536
    • \??\c:\users\admin\appdata\local\temp\2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe 
      c:\users\admin\appdata\local\temp\2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe 
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4432
      • C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveUpdate.exe" /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
        3⤵
        • Event Triggered Execution: Image File Execution Options Injection
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1108
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:2768
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:5212
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:4720
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:4980
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:5624
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins0MUM3QUIxNi0wNDRDLTRDMjYtOEQ2RS02RDhEMkQ4QzIwQzd9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7Rjg5N0I1NjUtRTY0My00NTgzLTlCRDUtREVBMDAxRUM0RTYzfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QjEzMUM5MzUtOUJFNi00MURBLTk1OTktMUY3NzZCRUI4MDE5fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjM2MS4xNTEiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iNTc4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1428
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{41C7AB16-044C-4C26-8D6E-6D8D2D8C20C7}"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          PID:1972
    • C:\Windows\Resources\Themes\icsys.icn.exe
      C:\Windows\Resources\Themes\icsys.icn.exe
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3268
      • \??\c:\windows\resources\themes\explorer.exe
        c:\windows\resources\themes\explorer.exe
        3⤵
        • Modifies visibility of hidden/system files in Explorer
        • Executes dropped EXE
        • Adds Run key to start application
        • Drops file in System32 directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3204
        • \??\c:\windows\resources\spoolsv.exe
          c:\windows\resources\spoolsv.exe SE
          4⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4632
          • \??\c:\windows\resources\svchost.exe
            c:\windows\resources\svchost.exe
            5⤵
            • Modifies visibility of hidden/system files in Explorer
            • Executes dropped EXE
            • Adds Run key to start application
            • Drops file in System32 directory
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4916
            • \??\c:\windows\resources\spoolsv.exe
              c:\windows\resources\spoolsv.exe PR
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of SetWindowsHookEx
              PID:6088
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4512
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\brave_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\gui8375.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4936
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe" --install-archive="C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\gui8375.tmp"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2292
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.138 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff610ec5368,0x7ff610ec5378,0x7ff610ec5388
          4⤵
          • Executes dropped EXE
          PID:5960
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\gui8375.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1952
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{D2AD432A-FFB5-49E1-B736-D7E605F0DD7B}\CR_9A194.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.138 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff610ec5368,0x7ff610ec5378,0x7ff610ec5388
            5⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            PID:5148
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3MDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI3NTAiIGRvd25sb2FkX3RpbWVfbXM9IjE5OTY5IiBkb3dubG9hZGVkPSIxNTYyNzI3MjAiIHRvdGFsPSIxNTYyNzI3MjAiIGluc3RhbGxfdGltZV9tcz0iMzU2NDAiLz48L2FwcD48L3JlcXVlc3Q-
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious use of AdjustPrivilegeToken
      PID:3096
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:3276
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    PID:5684
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:332
  • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
    "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1776
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:696
      • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
        "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1468
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.138 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ffc7320fa00,0x7ffc7320fa10,0x7ffc7320fa20
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1196
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1808,i,1022533229597442700,2536601104612260546,262144 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1940 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5452
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2192,i,11075251289553342730,11304801671476152050,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2204 /prefetch:3
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Time Discovery
          PID:5412
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2512,i,16854586392228167575,4975242640884525410,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2524 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5384
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3412,i,1448491942731576419,3867777831723766910,2097152 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3420 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6012
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3460,i,4240565236636063312,1393072820215242484,2097152 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3424 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3352
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5172,i,16421698281263046629,16330209430865878942,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5176 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3096
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5264,i,11797160327956293282,13757118679497056913,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5288 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5404
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4780,i,16668127297700212110,9392175221671243318,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5456 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6120
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,6387294362475317599,5735763552591337169,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5480 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5184
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,8728317651806489012,17317627851016413538,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5744 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4624
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5884,i,75561220824734859,15421071881115255870,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5896 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2904
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3760,i,15314805962647399490,14853436418641381772,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6048 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3972
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:5612
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.138 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff76fc35368,0x7ff76fc35378,0x7ff76fc35388
            5⤵
            • Executes dropped EXE
            PID:5292
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
            5⤵
            • Executes dropped EXE
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:5952
            • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=151.1.93.138 "--attachment=C:\Program Files\chromium_installer.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff76fc35368,0x7ff76fc35378,0x7ff76fc35388
              6⤵
              • Executes dropped EXE
              PID:3960
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6200,i,2279038085986631242,4665254635686547916,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=6216 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1948
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,16635546376930342602,12533756903738118357,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5424 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5512
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,10561515453627416581,14657928821602433185,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5564 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5832
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,15214947147598297801,3528394958981133766,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5920 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3788
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,5854310744044324404,10312129945079067147,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5540 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4540
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6308,i,6162926096506008269,10808428339736826053,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5304 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5572
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,15873489515056568459,4753426250279684402,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6192 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5128
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5296,i,14146936568106844674,2714170738035581457,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6196 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3048
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5264,i,7818392013642575741,2756665613660677741,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6308 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:3792
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,7134141672025255330,156621307608648627,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6196 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:2072
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,888926154563231660,11107652034990066018,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5184 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5648
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,10246293034556918949,12790502335122772784,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6200 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5924
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,2997582568832831156,2428041873829473156,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5508 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:5192
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6204,i,12791561699730922764,13816858617079598225,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5604 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:1704
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5268,i,1989729745127442195,186351296464650504,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5832 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:4816
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5884,i,10701288099780652423,6839469226742356968,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=5488 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:4888
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,8228990020019795333,1660781063854885072,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=5316 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:6060
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,5799725084175811192,1581645900791247980,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=6564 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:4340
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6536,i,16686859841830200807,5600160232356124483,524288 --field-trial-handle=1948,i,14059209560613419013,9529269969130840881,262144 --variations-seed-version=main@d657b418d4931e3b85fcdf73a2cc116666b02d9e --pseudonymization-salt-handle=1960,i,17142787653087785413,18320789055210727158,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=6636 /prefetch:8
          4⤵
          • Executes dropped EXE
          PID:4104
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2588
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:4396

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Persistence

          Boot or Logon Autostart Execution

          2
          T1547

          Active Setup

          1
          T1547.014

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Privilege Escalation

          Boot or Logon Autostart Execution

          2
          T1547

          Active Setup

          1
          T1547.014

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          2
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Image File Execution Options Injection

          1
          T1546.012

          Defense Evasion

          Hide Artifacts

          1
          T1564

          Hidden Files and Directories

          1
          T1564.001

          Modify Registry

          3
          T1112

          Credential Access

          Credentials from Password Stores

          1
          T1555

          Credentials from Web Browsers

          1
          T1555.003

          Unsecured Credentials

          1
          T1552

          Credentials In Files

          1
          T1552.001

          Discovery

          Query Registry

          4
          T1012

          System Information Discovery

          5
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          System Network Configuration Discovery

          1
          T1016

          Internet Connection Discovery

          1
          T1016.001

          System Time Discovery

          1
          T1124

          Lateral Movement

          Collection

          Data from Local System

          1
          T1005

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          BraveCrashHandler.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveCrashHandler.exe
          • Size 270KB
          • SHA256 6e85741fea991a7ea51d7d495c3f2b182102e9fccf39e7753b14e27379fb716d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandler64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveCrashHandler64.exe
          • Size 355KB
          • SHA256 253105961cc7bc72888d4d3d7b23c9fc13792bf13e8e432c9b525e3763d8df91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveCrashHandlerArm64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveCrashHandlerArm64.exe
          • Size 353KB
          • SHA256 ff32c5a83781d8de0845ac19c18c2f2ec6aafdd1a7196ad57fb58fb04cb22cd6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdate.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveUpdate.exe
          • Size 163KB
          • SHA256 6fefa7b4213251765e680d31f1571dd663572e3d89135b93c7e0c1fa993d78cb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShellArm64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveUpdateComRegisterShellArm64.exe
          • Size 154KB
          • SHA256 ffb72f23968f78cf41ed9c8904d9d4ae557e0645c265c9cd6eab019cfa20f05b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateCore.exe
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\BraveUpdateCore.exe
          • Size 195KB
          • SHA256 2c2c66c37620bd7fbc96a1b9b94cb7ee12082f7bce8d9b85ea763c866afbf4f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdate.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdate.dll
          • Size 1.0MB
          • SHA256 7b90d5d5cc66d1cea04f7b1ee9bfe0783c1b2c57b79f501ceb62ec214161e640
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_am.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_am.dll
          • Size 42KB
          • SHA256 dc309fcd71f4f6a4dadbca1614399c0c96fb89fd0a756844bb80960376c922cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ar.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ar.dll
          • Size 41KB
          • SHA256 bb6429d879c0b9d1bf5e87cd1ab8e0f6cf170dfec39b03b1e86423b27f54aab6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bg.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_bg.dll
          • Size 44KB
          • SHA256 8b9a2a8a47c77f906274a9f29426a0e22bf829c0ce601a6ddd2d76b140b8fe99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_bn.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_bn.dll
          • Size 44KB
          • SHA256 dc8b7352d425c2d84f76ce0476d76f8b122c003386884b8c48115e31567dea99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ca.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ca.dll
          • Size 44KB
          • SHA256 d866e72f43510c0676ae6f6817d6333cc9d8ad61283d3aada0c02119f7ad3d8f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_cs.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_cs.dll
          • Size 43KB
          • SHA256 a230ac67cff71fe0dfb2cc5bb574e4ba84d9a1f2412f974d1be7d72337f3c70f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_da.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_da.dll
          • Size 43KB
          • SHA256 26031911a7600d8ca32cb37b6df03bfe157102a3ef6af037a5b64705e8520849
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_de.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_de.dll
          • Size 45KB
          • SHA256 78800662e96f49a981e7fb181df9889efc09882129ee0cb4763be11c468b78a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_el.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_el.dll
          • Size 44KB
          • SHA256 c412d10c3dea992664cbbd1a0b416a4721226ba8815c68582633776a3619327d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en-GB.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_en-GB.dll
          • Size 42KB
          • SHA256 49ca05468d3bc00adcd5f351da4e6e00d8b8ee8e42109ba0ffae646c94e4130b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_en.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_en.dll
          • Size 42KB
          • SHA256 456b5f890eebb017ff230ffba5f455305a4f36783e0921a4a7186ae1771215fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es-419.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_es-419.dll
          • Size 43KB
          • SHA256 a73ef7b56115a714225553248e76498984bfbed209dcd26ed91c80a098a7e8ee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_es.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_es.dll
          • Size 45KB
          • SHA256 4763aac796395e0c1aee96c6fba60ef884bcefbdb20f4c0a64e411fe65e91db8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_et.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_et.dll
          • Size 42KB
          • SHA256 92a7d0ccd38c065fdf9f0f164159e2d56604e771522b3daada5f370aede1bbc4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fa.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_fa.dll
          • Size 42KB
          • SHA256 51c1be89416838bc7bfec8c02ba4f717457d8b43f1673e55d6f07a76f948c1ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fi.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_fi.dll
          • Size 43KB
          • SHA256 1e051675bf55593d9b4cc2b0d3c87233d361e06e8c6d219af3956d9974389558
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fil.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_fil.dll
          • Size 44KB
          • SHA256 c4b0ac24dd91456e536231b0e344db3a0bd7193b51169b5262148f498b3598e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_fr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_fr.dll
          • Size 44KB
          • SHA256 1babb4e9cbf26110fa334ada66a5a2d7b62b406b4025cbf007fbc5ad92d46833
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_gu.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_gu.dll
          • Size 44KB
          • SHA256 1bcafddfef5cf61f8bca4e56f59f2ff140e72969058aa2e0c461719c5431304e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hi.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_hi.dll
          • Size 43KB
          • SHA256 f36fe09341fc31e58bb3e233184c054417e862d346cba6196cc868f77e682e8f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_hr.dll
          • Size 43KB
          • SHA256 d3e8b12b74a2ac43e6846ce69756dc779d8a86d2c68803511192468583e75096
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_hu.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_hu.dll
          • Size 43KB
          • SHA256 5de781890232cc84642d10b2668a9a5ec0e59f02db69e9bfe86e4fe869d85556
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_id.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_id.dll
          • Size 42KB
          • SHA256 d3f06413ef502b572a1de8ead6cd6e42b34bde08ac043a115819cf92ad591047
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_is.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_is.dll
          • Size 42KB
          • SHA256 2f59b0021ff2bc3642edd7d9dc2a9263bad75e7411fdc3000d1c768bbcc352e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_it.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_it.dll
          • Size 44KB
          • SHA256 17d5018627bd9ee7ad457fc5212c19acaaa788c72bb4ab9b865b6397f5550a17
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_iw.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_iw.dll
          • Size 40KB
          • SHA256 70bf026fb377c0bd5631e794adb0ba7083b9fd3e460a1fbe36a009343d0631e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ja.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ja.dll
          • Size 39KB
          • SHA256 84096719154c4e23101304ce59fddbd5bc5226a2b3ccb4e6669292e6a922494b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_kn.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_kn.dll
          • Size 44KB
          • SHA256 eacd559373a3c18da743ce1258f97e7621870a150011bc9479e27a73104a2213
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ko.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ko.dll
          • Size 39KB
          • SHA256 908a12eb82bf345d9a08c179028626cdbbfb3f68e0083e160e9ddc146976aa51
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lt.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_lt.dll
          • Size 42KB
          • SHA256 fcc37043b590dc8729a1d837077a90a409fbc6b7435bb38338045d0c4ef64166
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_lv.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_lv.dll
          • Size 43KB
          • SHA256 d6a8c35cfd895a7e3b99f362fbed46bec4592f7091cbf7952df80624c8fba891
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ml.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ml.dll
          • Size 46KB
          • SHA256 4c3f55afd4b4310449fdfbea900848c6fd4449bc6db493eb3233b634da10f474
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_mr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_mr.dll
          • Size 44KB
          • SHA256 4713d09c942ca8ef110ae67b0f4dced1e4ff3536627b04881a4127f3d172c788
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ms.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ms.dll
          • Size 42KB
          • SHA256 27001e89c892f00decb88985a43a43de49fcdb49d23472826abef6409701b062
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_nl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_nl.dll
          • Size 44KB
          • SHA256 f98d1c8fe43ad8f5a7ad3105f672053744082624c0b5dd92da9402d477fa7907
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_no.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_no.dll
          • Size 43KB
          • SHA256 888adccf00c0f08260a6114d2dce6385c2614afd565385c58728c9679e157706
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_pl.dll
          • Size 43KB
          • SHA256 f144d0f2463e93d82f31550c13d99814ad665172aa12ac385727332d6cd34d55
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-BR.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_pt-BR.dll
          • Size 43KB
          • SHA256 7bc3871b472d145f8990a99ea3c4b24c52be03ec5d802b6e3d384ab1b66937a2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_pt-PT.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_pt-PT.dll
          • Size 43KB
          • SHA256 66c380621747d86a204c16dc2ed20242686b40389caac43bed07c895a9753782
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ro.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ro.dll
          • Size 43KB
          • SHA256 97a94fe0e266485a627407d20a0adc96ab84ff48a31bf98190b34800d71bd3e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ru.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ru.dll
          • Size 42KB
          • SHA256 980a172b404b962811e3dc99fcf64fc30d0026afcfb60120a9ccbd234d7b1526
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sk.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_sk.dll
          • Size 43KB
          • SHA256 deab99b66dff7fb0df4c13d1abf9aa668fe8ecb60824ca026cdeaa82ad5f6ad0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sl.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_sl.dll
          • Size 43KB
          • SHA256 6f3ccdd906a2ef178cea13810dd26f1c3b0b937f8233fc98f6b43896ece2be55
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_sr.dll
          • Size 43KB
          • SHA256 411681de9ff08688eca277444b4f3361db897faa7d59995667b8c6f87cd46691
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sv.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_sv.dll
          • Size 43KB
          • SHA256 6b287347b0957a37f67de72014e7d0ae3ccafb1f632dcbc74dc623f9b31fde24
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_sw.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_sw.dll
          • Size 44KB
          • SHA256 90493aef083c84b04494f759ba904106a93a4a66766f0390998bb62e43ed255c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ta.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ta.dll
          • Size 45KB
          • SHA256 253610308cccba1c246c57f1251d0d54c5d4f303a7fe98ffa8bdd01679aa5e95
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_te.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_te.dll
          • Size 44KB
          • SHA256 d8a69319e89fa794c94d49815d772bea840d76c1e7ef1274ca932a24c2f3b946
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_th.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_th.dll
          • Size 42KB
          • SHA256 304876c7e0730a3fcf7f99808a234d775d98bfe12a01295c00178f96078cf2d2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_tr.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_tr.dll
          • Size 43KB
          • SHA256 81d39862f6869190928ed23e4cefecf1375f5f3560fc84b99942e082941af722
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_uk.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_uk.dll
          • Size 43KB
          • SHA256 9a5260caa3aa34ecf58a6457b361606cd70ff39799857f14f5a0fba7f88b7a24
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          goopdateres_ur.dll
          • Path C:\Program Files (x86)\BraveSoftware\Temp\GUM146E.tmp\goopdateres_ur.dll
          • Size 42KB
          • SHA256 70c41f1d900c59b0af91d04a3fa21ba12dfec2ce2be98d257b0ba4cc904e6146
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BraveUpdateComRegisterShell64.exe
          • Path C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          • Size 170KB
          • SHA256 8cf146038b3e54e59e48edd7a904e0fc40d9bf06485aed5216e94b6e2438fb5b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1113078364\manifest.json
          • Size 108B
          • SHA256 47ed5e02e5f0466b69bda8f70fd1b125e14622aa7323b20dea9f1525f5a03820
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1163458271\manifest.json
          • Size 95B
          • SHA256 d31ea64558301051aed8768c1f2bfbe0e3404f241e6ce31fe8edd3cc956e6617
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1273265723\manifest.json
          • Size 580B
          • SHA256 bfad155b88d1441588aed8777cd1548d05edbf513bfb6da5917a384db7e3acc2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1313920170\manifest.json
          • Size 584B
          • SHA256 a788bb9364beec3d17f41c6836ee77d2931af0fcf818775d6712ed08cb6d4b09
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1376786828\manifest.json
          • Size 587B
          • SHA256 4baeb836df3232c3babfc06b262b7928eb9f4adac0fdc5c78ced7b539b23ce76
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_144003864\manifest.json
          • Size 591B
          • SHA256 23fac637c48df11b7a46436936fa47a5dc8b3073994e55e99170eba9bdcec54e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1491944004\manifest.json
          • Size 581B
          • SHA256 e9b2bef1e170dde425ab4e7a432b3ed9eeb71797035bbd1c4c8bac5054e8e39a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1560554046\manifest.json
          • Size 504B
          • SHA256 533d3bff64e77d5a5d8056d7230dba7c07501e96a2decf445966ee8ed42b126d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          kkjipiepeooghlclkedllogndmohhnhi
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1639149756\kkjipiepeooghlclkedllogndmohhnhi
          • Size 50KB
          • SHA256 78de62079ca129345294077aa2dccb17d52827521dc6d29596d5cc005321be47
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1639149756\manifest.json
          • Size 518B
          • SHA256 bd48b847bebca109eed47e6c480bda994b91c574dbfc3ef4a58af07048304d7d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1643429137\manifest.json
          • Size 558B
          • SHA256 1eddf1bd01e797b724be1fab828e10cb3b6f4195bc32dde85632661a3ab268b8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_164891694\manifest.json
          • Size 546B
          • SHA256 94acd594b4e33e9146acccbcd7f2a38a6373ddc49bd5742f6df7679e1fb39922
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1836526548\manifest.json
          • Size 108B
          • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_1932538738\manifest.json
          • Size 69B
          • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          07b7dd41-6e94-47a5-a958-206287b150bc.png
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\635369fe-ff75-4f3f-b5de-7a36f8e060ab\07b7dd41-6e94-47a5-a958-206287b150bc.png
          • Size 24KB
          • SHA256 a0619fb189008b59edbb7d7cdeb5261c9e0c1b84666ad2ad97a1df1bc1b9d780
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\Inter-VariableFont_opsz_wght-BtFs5cFQ.woff2
          • Size 341KB
          • SHA256 2a54364257349b6c145fa4dd7ec41d3e0b8ab3144205b6f0cd58578aa370e671
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ask-brave-icon-DdJTJrmV.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\ask-brave-icon-DdJTJrmV.webp
          • Size 2KB
          • SHA256 3788d823c7714a2e36547bd5fe86c834b86cb6c182858e047789aee196f1f598
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          de-de-wann-startet-die-bundesliga-dieses-jahr.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wann-startet-die-bundesliga-dieses-jahr.webp
          • Size 48KB
          • SHA256 cda94e244df2fac6d5d65e3a5ecbaf6eb60be39a77db3179b6cd39dd271566c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-warum-haben-schnecken-ein-spiralformiges-haus.webp
          • Size 84KB
          • SHA256 a5dc0627f12d46d649a5a8645de289817219d33decb63ccd90c62606816dbad8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\de-de-wie-schnell-kann-ein-gepard-wirklich-laufen.webp
          • Size 89KB
          • SHA256 c929631f010d399d51ca89bc740083c0a137935911aedf02e0a4008524b70859
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-whats-the-tallest-free-standing-structure-in-canada.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-whats-the-tallest-free-standing-structure-in-canada.webp
          • Size 72KB
          • SHA256 6a7de6c8edbb772af058258f6e3adce84fe92d61567195b8de0cb4f50e95b01a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-when-does-the-toronto-international-film-festival-start-this-year.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-when-does-the-toronto-international-film-festival-start-this-year.webp
          • Size 43KB
          • SHA256 4f4a6804c7bc3955f7292d46ba0ed66898aaf7758006e819a92625940f0003ac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-ca-why-do-loons-make-that-eerie-call-at-night.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-ca-why-do-loons-make-that-eerie-call-at-night.webp
          • Size 61KB
          • SHA256 a8e25647b61e0d1114b4fb6af9e468075a135f5bdccbdfe11868ac722f846319
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-whats-the-loudest-sound-ever-recorded.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-whats-the-loudest-sound-ever-recorded.webp
          • Size 76KB
          • SHA256 41bad4cfeaabaf76016cf6eb5797e5a085528481d327835107d622f820ff75cb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-when-does-the-premier-league-season-start-this-year.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-when-does-the-premier-league-season-start-this-year.webp
          • Size 49KB
          • SHA256 3b08523ba0d43e17880a1b20133facd1cc0cd51c8d614cd46b81b04038eee255
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-gb-why-do-robins-sing-through-the-night-in-cities.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-gb-why-do-robins-sing-through-the-night-in-cities.webp
          • Size 57KB
          • SHA256 a518f23e09d722969d7169865d88583c162bd27b726bae6da10789e8568ad00e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-what-does-space-actually-smell-like.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-what-does-space-actually-smell-like.webp
          • Size 71KB
          • SHA256 db8aa465e313251ee5774a64a120f2fd4f37737c7145a9e9962d6875e6fb92be
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-when-does-the-world-series-start.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-when-does-the-world-series-start.webp
          • Size 64KB
          • SHA256 5d51df389ccc9882926ef2060e7472accc0308a491e85e7772778b0d0743dec2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-us-why-do-flamingos-stand-on-one-leg.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\en-us-why-do-flamingos-stand-on-one-leg.webp
          • Size 76KB
          • SHA256 27580a0fe4670481c120515e93b083330dd6ea8b95189021ef8888e9f2832fbe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-cuando-empieza-la-temporada-de-la-nfl-este-ano.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-cuando-empieza-la-temporada-de-la-nfl-este-ano.webp
          • Size 50KB
          • SHA256 86564282d966f425c6c1cb138ec06a0a6b23cc1ef50053dcc5de970781a88e8b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-delfines-duermen-con-un-ojo-abierto.webp
          • Size 65KB
          • SHA256 c1e4336c7bd35f10ecd87ff4c7b93dd05a866536b0b2d6e04387a279db548d25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-us-por-que-los-pulpos-tienen-tres-corazones.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\es-us-por-que-los-pulpos-tienen-tres-corazones.webp
          • Size 68KB
          • SHA256 57a6b0e5b96f37d383a1fedc0434ef44392f516f6cb49e1821323e99a1b4136a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-a-quelle-distance-un-orignal-peut-il-vraiment-nager.webp
          • Size 61KB
          • SHA256 d21c0d6b137229fec110165f5887229afb9427710f40e705f41f51d2719f66d3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-pourquoi-le-castor-est-il-devenu-le-symbole-du-canada.webp
          • Size 78KB
          • SHA256 8c79aad3d4e78c6599119763ec629d5b7ed89271fe8d9b2d98590daa54b6c2f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-ca-quand-commence-la-saison-de-hockey.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-ca-quand-commence-la-saison-de-hockey.webp
          • Size 49KB
          • SHA256 70d3ed0689d86c3684421b3a1232ad153e58415a0984e08c59eb18b93b92646a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-les-chats-ronronnent-ils-vraiment.webp
          • Size 58KB
          • SHA256 ffe3046976cf996fd44a01cdb7a91a4b8d1f87e2b80ff26bf94577134c854773
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-pourquoi-y-a-t-il-autant-de-boulangeries-a-paris.webp
          • Size 66KB
          • SHA256 3aa7c11dd44ed5011bbc8e907812771bb0b6712c645d63ae3e1b7d57a5cac134
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-fr-quand-a-lieu-la-rentree-scolaire-en-france-cette-annee.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\fr-fr-quand-a-lieu-la-rentree-scolaire-en-france-cette-annee.webp
          • Size 65KB
          • SHA256 223399d3acf101a7ee4fcce09c1d34d5903553674339b7b16cfbaeeea97932d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index-1ilobi2k.js
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-1ilobi2k.js
          • Size 179KB
          • SHA256 7481ea913dbba3b04d178b8e3757cf38c9e03f0a2cf4993d644fa4d6f83089a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index-C8g22OGQ.css
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index-C8g22OGQ.css
          • Size 30KB
          • SHA256 19b099627396007cfcf21d64ed208361dce53926523439f3102fb7ee96323ad4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.html
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\index.html
          • Size 4KB
          • SHA256 6b0152b6ab8cdda4593d98177f23e29a0b9079206648d883e91e387d40744e23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\logo.webp
          • Size 6KB
          • SHA256 fbe1831f3abb9be1d5b81785055bac244f70553e51a25556f558c31cb2ac6e37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mouse-pointer-DSDsXotA.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\mouse-pointer-DSDsXotA.webp
          • Size 136B
          • SHA256 c53bc691edd32cbc245bdd461b5fc36ef21afc3d8e4304f0df49119204e0b0ff
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-icon-BD6Rfjhr.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-icon-BD6Rfjhr.webp
          • Size 1KB
          • SHA256 02f34d12e8f5f7a2838bde1be407fe1f9815dae8678cd6c77c7c031a6f41d8df
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          search-logo.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\search-logo.webp
          • Size 5KB
          • SHA256 3a1dec651528a4b789020b9bc240f7c7a1ffef36cc3024095cc6c6c73da7ec85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wallpaper.webp
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\ebec0987-c5ed-4874-8fbf-032c1cc6da91\wallpaper.webp
          • Size 38B
          • SHA256 2f9a4c22931833a8fc296bf89b86d94eec618752a62a1add43b753a77c80852b
          • MD5 SHA1 SHA512
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\manifest.json
          • Size 546B
          • SHA256 bd9d2faeac2607e0c914db5333dc1c38263de815837d27c4cfdcb35ec94fa41e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          photo.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\photo.json
          • Size 50B
          • SHA256 c9b5c6de15d08254da3d561470114637abdf1715f2b24b4747152fd774d81bac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tiles.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_195603455\tiles.json
          • Size 30B
          • SHA256 c79b6e5f6124ce0dc47ed10b897778a67b06bdc8d3db1b5d37ae119460df8fe0
          • MD5 SHA1 SHA512
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_201316019\manifest.json
          • Size 534B
          • SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_2024999138\manifest.json
          • Size 512B
          • SHA256 6e9df032c4efa07b1d0d1eafd36eb6cd64bf2a05bff8fee74b413ff36ce37698
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_204303693\manifest.json
          • Size 533B
          • SHA256 55a0c0461cde1db922ebc586d54a8fe32eb18029fe463a896305256e0a9335a1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_423557295\manifest.json
          • Size 86B
          • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_452723105\manifest.json
          • Size 73B
          • SHA256 85300853dc04aef6e3197bb1bb82e77110b73c9f0aec20ee26da5f847f5699e7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_472510099\manifest.json
          • Size 72B
          • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_487821390\manifest.json
          • Size 592B
          • SHA256 a055b3a5a104e7d4a44da1ea23623df85b84fc55af42e2465a9cff83d4fd0829
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_590745894\manifest.json
          • Size 594B
          • SHA256 13ffa281ba58799e1add808becbe5870152fd21c1ac288e396cac275caf9c154
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          manifest.json
          • Path C:\Program Files\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping1468_771312139\manifest.json
          • Size 564B
          • SHA256 788c4ba389c68e04e7c4424e7aa8a72a56343c2529f223dad31be6686e44e72f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          setup.exe
          • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\151.1.93.138\Installer\setup.exe
          • Size 5.9MB
          • SHA256 48917cbb646e06a3773edfe3c1ac41d7fae6b41650f4f114e56b219ca117ea66
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          messages.json
          • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2292_28785006\Chrome-bin\151.1.93.138\resources\brave_extension\_locales\sr\messages.json
          • Size 9KB
          • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          crl-set
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\CertificateRevocation\10735\crl-set
          • Size 1.4MB
          • SHA256 e67bb1a4abd49cf0d819d245382ecf10cbb3a6f52728ed774e818ce57571147a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Preload Data
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crowd Deny\2026.8.24.61\Preload Data
          • Size 292KB
          • SHA256 93b4f3517488a2cc5f1553e2c1b1a7e2ba0555aedf3e31333077320666a45005
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          45eaeeaa-0a73-4fea-a098-34026a8c8880.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\45eaeeaa-0a73-4fea-a098-34026a8c8880.tmp
          • Size 165KB
          • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\DawnGraphiteCache\index
          • Size 256KB
          • SHA256 6c2d208ff7937920d99d0c53e90499f18605539dc3239d8358aa24211c6d7c5f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Rules\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extension Rules\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          86270a69-a9e7-4a1d-b4eb-0681edc8eaa9.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\86270a69-a9e7-4a1d-b4eb-0681edc8eaa9.tmp
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\Network Persistent State
          • Size 242B
          • SHA256 72c41101b0ec8c9dcaba5763eebdd9b19d54d325bc6f66a313cf28897ced286a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          SCT Auditing Pending Reports
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512
          Submit Download

          Preferences
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
          • Size 18KB
          • SHA256 a7595b89bb54d83549eebc8a02cf7f9e47dc33ae534c83fb414894716a9b2a26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Preferences
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
          • Size 18KB
          • SHA256 82307a1b94c0d56fe241894716a5cc7f1d2d7ab0ffa84f65e21c5ce075c162bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c9cf2ac0-adf4-45f8-9702-1e915d0e097b.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\c9cf2ac0-adf4-45f8-9702-1e915d0e097b.tmp
          • Size 3KB
          • SHA256 0767b09b8d939b0b0f737c9d5e669ee51eb0b87a1159ce4b48ba56e52dedca89
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          download_file_types.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
          • Size 7KB
          • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\GrShaderCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 56KB
          • SHA256 d9153b32d2591e9138197c332c4c3c766722352999c1bc8212c0f375267bc5ec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 53KB
          • SHA256 a62b7e8429d4ed7c0cae5b983aafcbf64f98701285d82c3ee24b3d1e3d7b630e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 55KB
          • SHA256 96fa5780559bf7974c2890b2a923b292af93172e6a862071afef0a13cc5a17bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
          • Size 54KB
          • SHA256 e15b8ee4af4f0ef4f497d878d6a437da9c39c860b5ead5a1d255f3bf7f00ca20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          p3a_manifest.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig\1.0.5\p3a_manifest.json
          • Size 437B
          • SHA256 9f5f196db1a077339eb8c5eaec285bbf2d8645ff890985a808b3208ef5cb5ccf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          crs.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1754\crs.pb
          • Size 344KB
          • SHA256 4d604c5342cd4438e047f13d7349e0cd7888769449c280da1e8077157c157d0f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ct_config.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1754\ct_config.pb
          • Size 52KB
          • SHA256 d75c6586655caaa85a674411a372b8731c36fc9490b49b2f15fcf8640372994b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kp_pinslist.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\PKIMetadata\1754\kp_pinslist.pb
          • Size 10KB
          • SHA256 6d45d290c8862c356df6afbfed8ee79974d57f03af591f431d9886836642fa4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          safety_tips.pb
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\SafetyTips\3091\safety_tips.pb
          • Size 180KB
          • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ranked_dicts
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\ZxcvbnData\3\ranked_dicts
          • Size 865KB
          • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei\1.0.477\list.txt
          • Size 264KB
          • SHA256 f1fdfabc7e0365783fe2cf9ea2f6e68de31eadb5c5b7c62ae8b902c879bedc5b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          photo.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel\1.0.24\photo.json
          • Size 10KB
          • SHA256 9076682324d3dae2c496ad99ee334b53ca1f44570332793a3142372f773941fb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b26584fa-74c4-4f74-ac36-65881d18ec9c.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\b26584fa-74c4-4f74-ac36-65881d18ec9c.tmp
          • Size 10KB
          • SHA256 b37ae3237a67e7f3da5a3c55abaaa41a78b0a58455014ea77269dd82a410a7ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb\1.0.16877\list.txt
          • Size 48KB
          • SHA256 bd4d2d48f6b2bc46525ab51aebc344b9d1ee245eeffd7a1231eecb13a7115400
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe\1.0.19973\list.txt
          • Size 1.5MB
          • SHA256 1cf37c2f1141315f22da1b88c378eb9e224469dbc278f2cbe8b1811dad1eeb61
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          query-filter.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho\1.0.134\query-filter.json
          • Size 2KB
          • SHA256 c7b7d0292dd5c1e0f00f7ff27d52621ae07f8dc6e76fc2fe8cebb4b92d614a0d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cmdlemldhabgmejfognbhdejendfeikd\1.0.110\resources.json
          • Size 151B
          • SHA256 c8bd3316903d4bef02c7dd68513b83e7efd1ba41ec71d12610778c0c211d5200
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          14b43b70bf4ce777aebf9bcc92b29b2b8feb0f33235839cc73f70c90bb36c7ec
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\14b43b70bf4ce777aebf9bcc92b29b2b8feb0f33235839cc73f70c90bb36c7ec
          • Size 478KB
          • SHA256 14b43b70bf4ce777aebf9bcc92b29b2b8feb0f33235839cc73f70c90bb36c7ec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          1927b3696842fd1dee161b31374fa22bac370312bdabc83b53e502ea4902808c
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\1927b3696842fd1dee161b31374fa22bac370312bdabc83b53e502ea4902808c
          • Size 12KB
          • SHA256 1927b3696842fd1dee161b31374fa22bac370312bdabc83b53e502ea4902808c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • Size 7.6MB
          • SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • Size 11KB
          • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          282752e4bde1120bcd4a03125daad940022069bc72cec411f73ab25abf41702b
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\282752e4bde1120bcd4a03125daad940022069bc72cec411f73ab25abf41702b
          • Size 1.5MB
          • SHA256 282752e4bde1120bcd4a03125daad940022069bc72cec411f73ab25abf41702b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • Size 3KB
          • SHA256 2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • Size 16.9MB
          • SHA256 33fa8d15806becd8c0926fb455ccb4b63942a7b41df8b0c0fded8acc97f3ef5f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          47970490d46b56e884c4a20fcbe3418f647dfc58f543edf378c5331502998c07
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\47970490d46b56e884c4a20fcbe3418f647dfc58f543edf378c5331502998c07
          • Size 5KB
          • SHA256 47970490d46b56e884c4a20fcbe3418f647dfc58f543edf378c5331502998c07
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          4a63df55bace51a9af029b0654f530dfc9ffa3b3773e22d566a75b3e284c9fac
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\4a63df55bace51a9af029b0654f530dfc9ffa3b3773e22d566a75b3e284c9fac
          • Size 2.4MB
          • SHA256 4a63df55bace51a9af029b0654f530dfc9ffa3b3773e22d566a75b3e284c9fac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • Size 857KB
          • SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          68d171933e851e9ef53dec06ba3ce8adeb209d57a0f9b8a8a34ea6e93de88ed5
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\68d171933e851e9ef53dec06ba3ce8adeb209d57a0f9b8a8a34ea6e93de88ed5
          • Size 416KB
          • SHA256 68d171933e851e9ef53dec06ba3ce8adeb209d57a0f9b8a8a34ea6e93de88ed5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7ab6c956c843242e9c6adaca06b1edb06f22bdb07a4f8ac52583fbe5f31d84b0
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7ab6c956c843242e9c6adaca06b1edb06f22bdb07a4f8ac52583fbe5f31d84b0
          • Size 3KB
          • SHA256 7ab6c956c843242e9c6adaca06b1edb06f22bdb07a4f8ac52583fbe5f31d84b0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • Size 7KB
          • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • Size 3KB
          • SHA256 925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • Size 184KB
          • SHA256 9bec6c2c0185d3305ac8495047a1aa01e725d58f8f18d219742a2988f07cd93a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          a0ab37c7182aa9b3c9ce720209bccb2e9769f906cee7bbde5d28c59010cde39b
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\a0ab37c7182aa9b3c9ce720209bccb2e9769f906cee7bbde5d28c59010cde39b
          • Size 88KB
          • SHA256 a0ab37c7182aa9b3c9ce720209bccb2e9769f906cee7bbde5d28c59010cde39b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
          • Size 265KB
          • SHA256 a3dd39d863537ae8c8871f4e92e5a93fa0b4a07d121048ed8ab7291baac4d698
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • Size 14KB
          • SHA256 acceb354266f9ed53a1b6ace9cb8261965ce0ca763badde74904298ef956bdc6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c3e0981747a623f016fb41b1f3827f62701913e45141639f5415bc4f63a59cf6
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\c3e0981747a623f016fb41b1f3827f62701913e45141639f5415bc4f63a59cf6
          • Size 1.4MB
          • SHA256 c3e0981747a623f016fb41b1f3827f62701913e45141639f5415bc4f63a59cf6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cc75793d-ff59-43ce-86bd-4bd9aba03a97.tmp
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cc75793d-ff59-43ce-86bd-4bd9aba03a97.tmp
          • Size 1020B
          • SHA256 64fa1fe047433737b9ba404d1967664a9d4c1112f411276224c9f779a00bfa8e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • Size 3KB
          • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          ce1a40913ab4cb0bc6014e86be4a5b360095a468c086e4c1628f1c0a03eb4b31
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ce1a40913ab4cb0bc6014e86be4a5b360095a468c086e4c1628f1c0a03eb4b31
          • Size 2.8MB
          • SHA256 ce1a40913ab4cb0bc6014e86be4a5b360095a468c086e4c1628f1c0a03eb4b31
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          df1ff014fae8ffae6a7193805c087bbc553c13bf7332ad785840846bccb9a462
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\df1ff014fae8ffae6a7193805c087bbc553c13bf7332ad785840846bccb9a462
          • Size 296KB
          • SHA256 df1ff014fae8ffae6a7193805c087bbc553c13bf7332ad785840846bccb9a462
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ea7abc319274ce433440306c747b2acd07172b6104803422f95b09581c4499ec
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ea7abc319274ce433440306c747b2acd07172b6104803422f95b09581c4499ec
          • Size 483KB
          • SHA256 ea7abc319274ce433440306c747b2acd07172b6104803422f95b09581c4499ec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
          • Size 48KB
          • SHA256 ed21bdf5a66371ea19f04f0193e695eec26b2ef963b78703a3a3d151ecb1ce40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
          • Size 20KB
          • SHA256 f143e4477756998c99a238fbcc87a68775f2249227efd7f8a6897f72fa2b4274
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 08b6ed506bc419117855d0350cc53b9d3667c01adc1d2634ddc8ed940530f7ef
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 d64b7b0a7bf26ff7a6dea0c73bead778b1bd8ce488d81d5ad8097d9fac0fae11
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 e8fb1dcf391eeffb1c0a8ba56a2cba64d670c2c5707a292053e1c74ad2180f22
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          metadata.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
          • Size 2KB
          • SHA256 b955cef523eb5c2048ce6534130dafe7e96e6e349a50643495b57d008520eeab
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo\1.0.0\list.txt
          • Size 82B
          • SHA256 cb579177e0666f82bff258cd06520a74b51377ff80a3a537cc311ac926fdad98
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          campaigns.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe\1.0.2577\campaigns.json
          • Size 1KB
          • SHA256 02cb7c7f57f5310343b0cbce5e9bde0f3a35d78e21696b87e7fc863a908d1a45
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          list_catalog.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc\1.0.96\list_catalog.json
          • Size 57KB
          • SHA256 935d2e77a192b0806ee2e6da49ff4913aa22d6e6763f01032c4d512cf4b58791
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iblokdlgekdjophgeonmanpnjihcjkjj\1.0.110\resources.json
          • Size 151B
          • SHA256 e63435b549ceb62bf8b2f4e0db54c7bde829fab704119dcc7fb295258c996f4d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo\1.0.21842\list.txt
          • Size 4.9MB
          • SHA256 b7a5962372e46e4b2101a15d4afb40aa522da80918e453a818dfbe6eae3056ab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh\1.0.0\list.txt
          • Size 350B
          • SHA256 693bfe747e6e0b253544f81ff1bcfeabe775310872497e6ba324bd2c9e7efd1f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          list.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf\1.0.7419\list.txt
          • Size 1.6MB
          • SHA256 255b27a07b97b05a78b828beb75f476a8d4f9acae4e5c103f16fb47bbf8c66dd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop\1.0.152\resources.json
          • Size 977KB
          • SHA256 25b4adc62009974560b8bfdd7ecd9be8285bb8bc6245e8a8598c7563e35e7eb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          campaigns.json
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mjpbonbjgpinifgnneajcbigekbpfige\1.0.2534\campaigns.json
          • Size 5KB
          • SHA256 20f303ec05da0030e6dcfbf43de3b7c08c84aba16a568ff0aa1cb0dc6c887e5c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          brave-checks.txt
          • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe\1.0.537\brave-checks.txt
          • Size 4KB
          • SHA256 05f2d69a52f8d145af96176598861186883988f17b3875cdc839c2152b77d0fc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe 
          • Path C:\Users\Admin\AppData\Local\Temp\2026-08-24_5df460b6bd37fdbc713c543d94a450c4_amadey_elex_hellokitty_luca-stealer_njrat_swisyn.exe 
          • Size 1.2MB
          • SHA256 68296736f0e8667fe45bde54ffdd887e34b2e49913ded8b0840dff015607e56c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Brave.lnk
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Brave.lnk
          • Size 2KB
          • SHA256 09ba109f7e9d00efe01151fc015253d9c9ca835b97a737439eae1a1076a45b25
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          explorer.exe
          • Path C:\Windows\Resources\Themes\explorer.exe
          • Size 135KB
          • SHA256 1bcde2e233b7d08ac1d8505f9749fbc2f1e692cf8f7f2d88c1e499dd4a585fb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/536-321-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/536-0-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/3204-1947-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/3268-342-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/4632-341-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/4916-343-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/5384-785-0x00007FFC90000000-0x00007FFC90001000-memory.dmp
          Download

          memory/5384-786-0x00007FFC8FB90000-0x00007FFC8FB91000-memory.dmp
          Download

          memory/5452-1287-0x000002353B570000-0x000002353B60E000-memory.dmp
          Download

          memory/5452-754-0x00007FFC8FAC0000-0x00007FFC8FAC1000-memory.dmp
          Download

          memory/5452-1938-0x000002353B570000-0x000002353B60E000-memory.dmp
          Download

          memory/6088-340-0x0000000000400000-0x000000000041F000-memory.dmp
          Download