Overview

overview

6

Static

static

1

BraveBrows...02.exe

windows10-2004-x64

6

BraveBrows...02.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/10/2026, 23:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BraveBrowserSetup-BRV002.exe
  • Size 1.2MB
  • Sample261009-3cs5dsdw4n
  • SHA256 61f8abd9fc84ecc74dbc0af76a984438f322abbaac5cbbe17966308fbf49d5b8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 53 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 26 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 48 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV002.exe
    "C:\Users\Admin\AppData\Local\Temp\BraveBrowserSetup-BRV002.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:996
    • C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdate.exe
      C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdate.exe /installsource taggedmi /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4888
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:5952
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2520
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4036
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:5836
        • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3416
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5964
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&installdataindex=default&referral=none" /installsource taggedmi /sessionid "{C2B92C98-1609-40AA-9D83-41E29E6C81DA}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:600
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\brave_installer-x64.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\brave_installer-x64.exe" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\guiDA99.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1548
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe" --mini-installer-path="C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\brave_installer-x64.exe" --archive-resource-name="CHROME.PACKED.7Z" --archive-resource-type="B7" --do-not-launch-chrome /installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\guiDA99.tmp" --brave-referral-code="BRV002"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:4136
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=155.1.97.56 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff674d90018,0x7ff674d90028,0x7ff674d90038
          4⤵
          • Executes dropped EXE
          PID:5476
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe" --system-level --verbose-logging --installerdata="C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\guiDA99.tmp" --create-shortcuts=0 --install-level=1
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:4184
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=155.1.97.56 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff674d90018,0x7ff674d90028,0x7ff674d90038
            5⤵
            • Drops file in Windows directory
            • Executes dropped EXE
            PID:5296
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntDMkI5MkM5OC0xNjA5LTQwQUEtOUQ4My00MUUyOUU2QzgxREF9IiBpbnN0YWxsc291cmNlPSJ0YWdnZWRtaSIgdGVzdHNvdXJjZT0iYXV0byIgcmVxdWVzdGlkPSJ7Q0JCRkFFRDQtQzk3Qy00QUFGLThCQzItOUM5MTIyQzgxQTNCfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBwaHlzbWVtb3J5PSIxNiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yNjEwMC4xNzQyIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7QUZFNkE0NjItQzU3NC00QjhBLUFGNDMtNENDNjBERjQ1NjNCfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTU1LjEuOTcuNTYiIGFwPSJyZWxlYXNlIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzA3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzY5IiBkb3dubG9hZF90aW1lX21zPSIyMzg2MiIgZG93bmxvYWRlZD0iMTYzNjk4MjU2IiB0b3RhbD0iMTYzNjk4MjU2IiBpbnN0YWxsX3RpbWVfbXM9IjQ2MDUzIi8-PC9hcHA-PC9yZXF1ZXN0Pg
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4844
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    PID:5916
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    PID:808
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1528
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5100
    • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe
      "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateOnDemand.exe" -Embedding
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1268
      • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
        "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ondemand
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2080
        • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
          "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --from-installer
          3⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • Checks processor information in registry
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:3504
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad" --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=155.1.97.56 --initial-client-data=0x130,0x134,0x138,0x10c,0x13c,0x7ff89f280ed0,0x7ff89f280ee0,0x7ff89f280ef0
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4344
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1680,i,10561875587044440862,2135895215487998033,262144 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:2
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1004
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1928,i,7892426620665961424,10478271729254078298,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2216 /prefetch:11
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Time Discovery
            PID:2356
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2488,i,13358210674099579535,2282271585773494509,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2688 /prefetch:13
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5596
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3552,i,4237254909292547206,8495762763201153158,1572864 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3584 /prefetch:1
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3520
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3504,i,8263147794564937424,17555572846487475047,1572864 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3524 /prefetch:1
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:704
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,2330758335356999080,16408950933528242679,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=5432 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            PID:1140
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,12243892674928095322,10167580447790310940,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5620 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5380
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4976,i,16072500480972915619,14875849030308697072,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5600 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5400
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,7309996684128106531,12584363080650373373,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5640 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5624
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4988,i,14263805408539426755,6208796589824836890,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5528 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4368
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,2019193496301760201,11513751780373274592,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6028 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4436
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6588,i,10547304023720655152,2659025321542898637,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6576 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3172
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6568,i,16808432130443556488,16044223639081788650,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=3500 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5656
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
            4⤵
            • Executes dropped EXE
            • Suspicious use of WriteProcessMemory
            PID:5156
            • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=155.1.97.56 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x290,0x2b8,0x7ff789f00018,0x7ff789f00028,0x7ff789f00038
              5⤵
              • Executes dropped EXE
              PID:4988
            • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe
              "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\BraveSoftware\Brave-Browser\Application\initial_preferences" --create-shortcuts=1 --install-level=0
              5⤵
              • Executes dropped EXE
              • Suspicious use of WriteProcessMemory
              PID:3448
              • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe
                "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=155.1.97.56 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff789f00018,0x7ff789f00028,0x7ff789f00038
                6⤵
                • Drops file in Windows directory
                • Executes dropped EXE
                PID:4396
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,2016090962785908627,11808514390316982736,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5732 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4696
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,968450058395721655,5313435871823545955,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5444 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4488
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5768,i,4224335752449064309,16412790681597218022,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6736 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3460
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6792,i,12976973291190747349,15621839674658058081,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5452 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5284
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6808,i,13597990883504857363,4451616376110215388,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6756 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2676
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6732,i,12876354464438142232,8193415618273066889,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5568 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5888
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6900,i,9485883475334632399,17114118269429514013,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6944 /prefetch:14
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5644
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,11968081335381233019,8411484695471057568,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5612 /prefetch:14
            4⤵
            • Executes dropped EXE
            PID:5108
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6756,i,15485805548066157518,4409292206994312334,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5572 /prefetch:14
            4⤵
            • Executes dropped EXE
            PID:3460
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6920,i,8205399579642583372,18208091004346296959,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6772 /prefetch:14
            4⤵
            • Executes dropped EXE
            PID:5284
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,14737676077981417987,10746520916277856120,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6780 /prefetch:14
            4⤵
            • Executes dropped EXE
            PID:5624
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5684,i,14502340127222195347,14625956726415360776,524288 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6944 /prefetch:14
            4⤵
            • Executes dropped EXE
            PID:3296
          • C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --type=renderer --enable-distillability-service --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4mpO6buLQ/QMd+zJmxzty/VQ6B1EUZqoCU04zoRU= --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6772,i,11701142038596038601,9475850164601654558,1572864 --field-trial-handle=2004,i,11229632892170044824,3312819947938262409,262144 --variations-seed-version=main@5a54118717fec842b9441634125bba7d32dc8163 --pseudonymization-salt-handle=2188,i,18409732321871358022,3722758080757022937,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6276 /prefetch:1
            4⤵
            • Executes dropped EXE
            PID:6012
    • C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\elevation_service.exe
      "C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:1884
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
      1⤵
        PID:5384
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
        1⤵
        • Modifies data under HKEY_USERS
        PID:2380

      Network

            MITRE ATT&CK Enterprise v16

            Reconnaissance

            Resource Development

            Initial Access

            Execution

            Persistence

            Boot or Logon Autostart Execution

            1
            T1547

            Active Setup

            1
            T1547.014

            Event Triggered Execution

            2
            T1546

            Component Object Model Hijacking

            1
            T1546.015

            Image File Execution Options Injection

            1
            T1546.012

            Privilege Escalation

            Boot or Logon Autostart Execution

            1
            T1547

            Active Setup

            1
            T1547.014

            Event Triggered Execution

            2
            T1546

            Component Object Model Hijacking

            1
            T1546.015

            Image File Execution Options Injection

            1
            T1546.012

            Defense Evasion

            Modify Registry

            1
            T1112

            Credential Access

            Credentials from Password Stores

            1
            T1555

            Credentials from Web Browsers

            1
            T1555.003

            Unsecured Credentials

            1
            T1552

            Credentials In Files

            1
            T1552.001

            Discovery

            Query Registry

            3
            T1012

            System Information Discovery

            4
            T1082

            System Location Discovery

            1
            T1614

            System Language Discovery

            1
            T1614.001

            System Network Configuration Discovery

            2
            T1016

            Internet Connection Discovery

            1
            T1016.001

            System Time Discovery

            1
            T1124

            Lateral Movement

            Collection

            Data from Local System

            1
            T1005

            Command and Control

            Exfiltration

            Impact

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            setup.exe
            • Path C:\Program Files (x86)\BraveSoftware\Update\Install\{359C2F63-30AB-4929-BAED-191971D71B39}\CR_30A41.tmp\setup.exe
            • Size 7.3MB
            • SHA256 3df292a83c64f639b36c95aa43b84e05367f81687f23fc2765e8d773d7e357a6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            af.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\af.pak
            • Size 709KB
            • SHA256 225be4d90d41be82944fe06552cdb0d38323dfb1de8e6d94c6d01e97bd1e92fd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            am.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\am.pak
            • Size 1.1MB
            • SHA256 86cd1cc2bc74271121b5bd5b1c2b59cc8910ffe52f3a85de6f5d5202141b8e0d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ar.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ar.pak
            • Size 1.2MB
            • SHA256 d1c39c04d560474c63598e9f875d9829f02d2b3846b204fe1d69293d2022acdc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            az.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\az.pak
            • Size 813KB
            • SHA256 d664679580f8681f70255718b10bf065db314190e11878ada1ecea9b3aca8c37
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bg.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\bg.pak
            • Size 1.3MB
            • SHA256 0596b076eefab813b2109c7a068b33c04270a5e968e609c51a843ff3678e28ce
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bn.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\bn.pak
            • Size 1.6MB
            • SHA256 f64763d3d1c5f0a910a49396475118a2716cd0c222e281cb64a5d7b5224d2807
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bs.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\bs.pak
            • Size 791KB
            • SHA256 7649e7ba88a39612a0cc407e8619809376dcfdd774db6ed940478d86fc6f31fc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ca.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ca.pak
            • Size 815KB
            • SHA256 5cd6b369a13e03162a254fd8422649e64a8e8bf4991fde1db1bc2df55016ec4c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            cs.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\cs.pak
            • Size 826KB
            • SHA256 9b2877b8655fea2ae9c7c1e36848e0e0232cd1172000c56e413263fd86157867
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            da.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\da.pak
            • Size 747KB
            • SHA256 0edf3a5df3e0f9d92ac98cce55815363de6f7e35057789ec6469b20ef4195d0f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            de.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\de.pak
            • Size 820KB
            • SHA256 c42f4591b600c83c805ad3fe6460aa62004420513f46e76762a67685e84394f4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            el.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\el.pak
            • Size 1.4MB
            • SHA256 3be290e49d5ffbbef1fb86db2d4b8f2e8da079211cf3671dfb1bf0d9e3a29cf4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            en-GB.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\en-GB.pak
            • Size 657KB
            • SHA256 bd322ca194f010d53fbe4d55279031c67124c416e7e24b55eb0e8da3c30ef147
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            en-US.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\en-US.pak
            • Size 663KB
            • SHA256 be3b3f54c767aec018d549b583f2e5294760a2b4d4cc1366beee3292425afb75
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            es-419.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\es-419.pak
            • Size 803KB
            • SHA256 75ca1c99049c501945464c19e2a4bf48459f115c042c2103861ae7f34968c7c4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            es.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\es.pak
            • Size 798KB
            • SHA256 d12f7516d31209021a00daf5850cdcf692e071db44f0ee9d6b47c2b335447ee1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            et.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\et.pak
            • Size 727KB
            • SHA256 3111314291859465ffc560d46c84339f06caab0f74efa0640d06c2b6a7e7e7d1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fa.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\fa.pak
            • Size 1.2MB
            • SHA256 f8486e31575ecbfedd65e274dd3faf600078a36a56adb4e9ea27069e511a6049
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fi.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\fi.pak
            • Size 744KB
            • SHA256 fc84af361b5a1a1184cee3bb1ba4d50572296a56219d71238ba165bc0a4cae16
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fil.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\fil.pak
            • Size 830KB
            • SHA256 afc1b59d5e675ff834e945b80410378a18f030e1a00e65fd86753e9f53517489
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fr.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\fr.pak
            • Size 863KB
            • SHA256 92e3b13d21c21b850c8d29fa62f237dce1309965a02aeba621fa96c7d45de6d6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            gu.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\gu.pak
            • Size 1.6MB
            • SHA256 8e97a79897839106951223725fda65571a26cf01f59dea29c15e73a211e71050
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            he.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\he.pak
            • Size 1021KB
            • SHA256 7609d16f619324a0e09ef6ff176cf416fc068566e181b2c71a439a918f33ab33
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hi.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\hi.pak
            • Size 1.7MB
            • SHA256 f34f7a61431db2714c035492a52708a76439793f2c525749d0419db898cd283c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hr.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\hr.pak
            • Size 801KB
            • SHA256 791b4fa1d02762fa466964791b43ed008e54acc6104ec1ad5b10f74d841f2cb4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hu.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\hu.pak
            • Size 859KB
            • SHA256 139935fc4c0cd782abba74339672e5633df0714da9ceec004e36500e70beaea0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            id.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\id.pak
            • Size 723KB
            • SHA256 009d708c6649eb4c775dd6765cb43c7fdaa7048d4153bd10e48b662b00f1e111
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            it.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\it.pak
            • Size 792KB
            • SHA256 af2cd000ae4bf83d260fc422011b9a1828c1a7be08ed46f3ac2d3101b7a07623
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ja.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ja.pak
            • Size 956KB
            • SHA256 202b321734db8158a4e38b68f5a0ff9af8eeaf36a073703ccfb736d29bd2d1ae
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ka.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ka.pak
            • Size 1.7MB
            • SHA256 b23c939f44d4f3c28143a7af5f12944c9537631c054695ff389d726614dfc307
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            kk.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\kk.pak
            • Size 1.3MB
            • SHA256 4e4518e8b378dae5a18805e7ad55a41bd7151e52b1a507cfb67b74da9bfef10b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            km.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\km.pak
            • Size 1.8MB
            • SHA256 45031a1fc163533c34517410314cf0b3ab3e1e47a98f315ca9c34ed5ee7c38df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            kn.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\kn.pak
            • Size 1.9MB
            • SHA256 bdab2ca97efdea851d6b43f8f668b452778f094ed30041509c53b89c4e309379
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ko.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ko.pak
            • Size 811KB
            • SHA256 b13da82fce45522e9b37c18e1b673aed9985676bdc156886560919ba3f242ee8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            lo.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\lo.pak
            • Size 1.5MB
            • SHA256 f20a6e134db445e8354a2646fecfc067bd58e32d5a600a729c7134c32184a196
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            lt.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\lt.pak
            • Size 858KB
            • SHA256 1a7047ed69cbfed305225bb849603b8040296b129bf4436781041afdbb4baaa8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            lv.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\lv.pak
            • Size 847KB
            • SHA256 e0a10c70832d54e2d34dabfe4240399ae6684831947d4db457e7d3297628af29
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mk.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\mk.pak
            • Size 1.3MB
            • SHA256 f4472738dd1f0cb5ef6cc8183bfb81f6d4c64d97ea51e3b7f330eeb4140ccca7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ml.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ml.pak
            • Size 1.9MB
            • SHA256 e0df383e19a077a829aa88d5847ebbd0b31a9cf8cc87a40ae2da8821cfe1a83a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mn.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\mn.pak
            • Size 1.2MB
            • SHA256 bef4c55a9cff9b81f9ed753ab379c26c46fdd88b2f06e545ae1dcb2ca332d72f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mr.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\mr.pak
            • Size 1.6MB
            • SHA256 ac21a47f80c875c3c6dd81fb579f294a841fa5c39308152572ef0cc0c7c1eb4c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ms.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ms.pak
            • Size 754KB
            • SHA256 266b8912882722a8afac611e47ba8616337b62a251f99eaa1aff07e98f5c3be1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            my.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\my.pak
            • Size 1.8MB
            • SHA256 253a3713cd806e6260cef017e6b83820159b213b6ad4b5a7e0674adb35fd7af5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nb.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\nb.pak
            • Size 719KB
            • SHA256 1d4dfbad1b9184d59e55dad7ba5ef506ef2ffcef9b2403fce6d79ed65bd28f91
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nl.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\nl.pak
            • Size 753KB
            • SHA256 f6a85ffba69bd3a5b8b94caa32a314151ea4a1f838f3385912d38c62a9ff5d51
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pl.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\pl.pak
            • Size 828KB
            • SHA256 b9d305caad2f91a4eaf96420ccd2549253725e42812964ecad41a84b2bde7783
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pt-BR.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\pt-BR.pak
            • Size 784KB
            • SHA256 91902645e01d9173437426d5d7aa8f129d1b52f618350f431cc006022365256d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pt-PT.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\pt-PT.pak
            • Size 790KB
            • SHA256 83d11ad210d5e2e5bb60bba8f496c19ead954faa39c5b1a243101f7226c60b07
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ro.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ro.pak
            • Size 819KB
            • SHA256 b7b583bd2afa96624a90df79f724ff42605e77ec634f3d1f034a005496e13d57
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ru.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ru.pak
            • Size 1.3MB
            • SHA256 6189b7b6202a1e60430dd92890898f2d764d7a29f3759cc8a8c9df0e31c4c563
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            si.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\si.pak
            • Size 1.5MB
            • SHA256 ec4870c0531b4e88d84f0a16a09921c1cf04e93f552f917d655135d6d1b1745e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sk.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sk.pak
            • Size 838KB
            • SHA256 b089860538c3fb5c09b0f31373cf7f694c6eb06bca77a81778b2a9a4ca051c07
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sl.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sl.pak
            • Size 797KB
            • SHA256 b80439f73184237d01596ba21065e04c5eaee675650cc929aa808383fd56d5b3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sq.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sq.pak
            • Size 811KB
            • SHA256 de2c06d4b9574354f003935b44d23819b0aeb0b1e070c797380d9c9442b010f5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sr-Latn.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sr-Latn.pak
            • Size 779KB
            • SHA256 0ecd35f9e066f9b7a2b8ef2164253bea0402ff0b50991211b8a90c81f1dda20c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sr.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sr.pak
            • Size 1.1MB
            • SHA256 0718944847c36c18145919f535a99bf1d1118349d3d5af8d889c4c807a324b49
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sv.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sv.pak
            • Size 731KB
            • SHA256 e0f52fa601c81747dda1138239a492afa4009773fb909909c401f55149a51393
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sw.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\sw.pak
            • Size 767KB
            • SHA256 d4f26316a03b3eae0d655bef370067bab5f549b70ee6675dbfab338a4a9b99df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ta.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ta.pak
            • Size 1.9MB
            • SHA256 4d72eb5ec24480cb5144128256102dbcea5c68deb6dcd889af07f54e86020d6c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            te.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\te.pak
            • Size 1.8MB
            • SHA256 f51d273f5476d12028db9370a08a691e2564dd24500469053c79224b7bba3584
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            th.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\th.pak
            • Size 1.5MB
            • SHA256 73a56ea04e378d0617d265837eb8f2999ee167d6828a188ed8e56fc7c51ff7d4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tr.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\tr.pak
            • Size 787KB
            • SHA256 1183034d44d2572caa855039ae4b0a6364d845a2c6821d443fe5515168fa610a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            uk.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\uk.pak
            • Size 1.3MB
            • SHA256 ba796832b07bebe4864a69d6dddd501489e4a77c81ec70bb742f86d255e6c5fa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ur.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\ur.pak
            • Size 1.0MB
            • SHA256 cc1ab33ea67c21b66d8818f270fcf2be868d4e7808788ba7e4b16297e68bdbd1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            uz.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\uz.pak
            • Size 764KB
            • SHA256 3fe36ec783292e63a627161881c908a0f845d0d2b30e9cb6052a5a96f616b306
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vi.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\vi.pak
            • Size 930KB
            • SHA256 c935380fe3f198830e283f14a1c19c0fe163856502c124fdd1ca90c0c69a4ad3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            zh-CN.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\zh-CN.pak
            • Size 665KB
            • SHA256 8e359de98cd340ef8b9c7c9664de248852dd6b91b3028a1cd1c89beb273d50b9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            zh-TW.pak
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Locales\zh-TW.pak
            • Size 659KB
            • SHA256 fa76cb62d047d38bab0756ad1e53399e047096353f73e66bd3723e2cd7215a7d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            brave.exe
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
            • Size 4.3MB
            • SHA256 3d39ecfeffb252c9ae291e877ab6c5e14a5fe8550a21eb858458b7dad47e1807
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_proxy.exe
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\chrome_proxy.exe
            • Size 2.5MB
            • SHA256 d5ca28afe74b7896e720f78f76076696d78097d35d69877446ddfb4b6f7f3369
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            messages.json
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source4136_1094601969\Chrome-bin\155.1.97.56\resources\brave_extension\_locales\en_US\messages.json
            • Size 9KB
            • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            messages.json
            • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source4136_1094601969\Chrome-bin\155.1.97.56\resources\brave_extension\_locales\hr\messages.json
            • Size 9KB
            • SHA256 bf4799a7899490a023cb617dba40e32f16748cb8c9dffc26e299e327a76375fb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            settings.dat
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Crashpad\settings.dat
            • Size 40B
            • SHA256 9092de39d840096e81597c234e578af7269a201c54b5b9de5a9754a785f8c551
            • MD5 SHA1 SHA512
            Submit Download

            MANIFEST-000001
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\BraveWallet\Brave Wallet Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512
            Submit Download

            data_0
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\DawnGraphiteCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_1
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\DawnGraphiteCache\data_1
            • Size 264KB
            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_2
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\DawnGraphiteCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_3
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\DawnGraphiteCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            Google Profile.icoe50df0d3-bf8e-41bd-ab1d-13216d81bd9e.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Google Profile.icoe50df0d3-bf8e-41bd-ab1d-13216d81bd9e.tmp
            • Size 165KB
            • SHA256 758b1c4881e371168047e53d2219d5262ecb96c6f0f26f2a83a553fe9cdb060a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SCT Auditing Pending Reports
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Network\SCT Auditing Pending Reports
            • Size 2B
            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
            • MD5 SHA1 SHA512
            Submit Download

            Preferences
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences
            • Size 3KB
            • SHA256 e512099a1ce40242d8c5dd153d831c965a1241f439f3500d2c35f5897390b6c9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Preferencesba0e31ed-1d3a-4bf5-9ba0-048200dddcbb.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferencesba0e31ed-1d3a-4bf5-9ba0-048200dddcbb.tmp
            • Size 19KB
            • SHA256 c8840080c5dc75f12ab45bcc6e9d8e71a78add46f3532f2b022d10e346d75e9f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            CURRENT
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Site Characteristics Database\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512
            Submit Download

            Local State
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State
            • Size 10KB
            • SHA256 21192efff3bf8a6971a3d2a08a00d3b23e326986f344ebe992a686612a63b685
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Local State395e63a4-09b2-4549-93bd-52e24a4365ad.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State395e63a4-09b2-4549-93bd-52e24a4365ad.tmp
            • Size 46KB
            • SHA256 f85256ccc16c7da71c003c86f38be09f341eaa3eeeb9248af059c920a4a369a9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Local State5cbb60ea-1e8e-4936-bbee-ba9f98e4dafa.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Local State5cbb60ea-1e8e-4936-bbee-ba9f98e4dafa.tmp
            • Size 44KB
            • SHA256 287ea6ecda02c3662a5d9e1a4030a738b57040b6393ee8f23e9b4862c76507c0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VariationsSafeSeedV2
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\VariationsSafeSeedV2
            • Size 19B
            • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
            • MD5 SHA1 SHA512
            Submit Download

            VariationsSafeSeedV281f34ee5-3a13-4c49-8f50-d69b83ab1562.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\VariationsSafeSeedV281f34ee5-3a13-4c49-8f50-d69b83ab1562.tmp
            • Size 7KB
            • SHA256 a4b0bcbbbf533756ca00fca37c22cf9f61112e9c4c04e4640727fa09a11f1862
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VariationsSeedV2
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\VariationsSeedV2
            • Size 6KB
            • SHA256 2eda8830d71c098f0c73265ae9b8f52077bd443b09f5941832b6e20e95327176
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VariationsSeedV24eb428aa-95ab-4473-bb20-def8aef05e2e.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\VariationsSeedV24eb428aa-95ab-4473-bb20-def8aef05e2e.tmp
            • Size 7KB
            • SHA256 aec88a3bfc67c34eded38f4a79e31f7fa4098be1ec595dad3c7380b6af99aef7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VariationsSeedV2f7f5a964-de84-4a95-9fd9-fa98d9f9ff21.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\VariationsSeedV2f7f5a964-de84-4a95-9fd9-fa98d9f9ff21.tmp
            • Size 170B
            • SHA256 0eb4a695ce58365ff11ca01964e2992e0bed5b2c8198ebe3cafeb168a74be3ae
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            1044a8a16ee09fe2ccc465b4da7e8d982282cef5f4054bb7278f106ec477ef1a
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\1044a8a16ee09fe2ccc465b4da7e8d982282cef5f4054bb7278f106ec477ef1a
            • Size 4KB
            • SHA256 1044a8a16ee09fe2ccc465b4da7e8d982282cef5f4054bb7278f106ec477ef1a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
            • Size 11KB
            • SHA256 261bea60d22ebca3a95ce335c03ec751a0b58b2b7bdbd6ea51dfa54381b07775
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
            • Size 3KB
            • SHA256 2ba4512806ea8eaa1a1363942a23e30b9c942665549c61f90e089ec4ce1aefa4
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            3febc617953b91891e2212b8252e7be381b2066dc6e24b42faa4940482edda61
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\3febc617953b91891e2212b8252e7be381b2066dc6e24b42faa4940482edda61
            • Size 271KB
            • SHA256 3febc617953b91891e2212b8252e7be381b2066dc6e24b42faa4940482edda61
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            4ca84012c268314f332850857a3eb8a8fd91dbbc818b2aad592765a93f36e859
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\4ca84012c268314f332850857a3eb8a8fd91dbbc818b2aad592765a93f36e859
            • Size 12KB
            • SHA256 4ca84012c268314f332850857a3eb8a8fd91dbbc818b2aad592765a93f36e859
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            4cc60dd5a0aac1f7541bd3734c5a6f69505d52db17c1604a9c528f350b9a993b
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\4cc60dd5a0aac1f7541bd3734c5a6f69505d52db17c1604a9c528f350b9a993b
            • Size 482KB
            • SHA256 4cc60dd5a0aac1f7541bd3734c5a6f69505d52db17c1604a9c528f350b9a993b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            567f1a24afa0070abec19f7883f3b2b435a0d36628ca5446698703e16ea66978
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\567f1a24afa0070abec19f7883f3b2b435a0d36628ca5446698703e16ea66978
            • Size 634KB
            • SHA256 567f1a24afa0070abec19f7883f3b2b435a0d36628ca5446698703e16ea66978
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            65391285d59f7a95d12be43b8a1459f498a50b50bd059b24e78e51fd117e26f4
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\65391285d59f7a95d12be43b8a1459f498a50b50bd059b24e78e51fd117e26f4
            • Size 1.3MB
            • SHA256 65391285d59f7a95d12be43b8a1459f498a50b50bd059b24e78e51fd117e26f4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            6e7c86271811a2b0e64fecc5afe5f043709a6b91bf98a7c5ba4d6bae328b4810
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\6e7c86271811a2b0e64fecc5afe5f043709a6b91bf98a7c5ba4d6bae328b4810
            • Size 20KB
            • SHA256 6e7c86271811a2b0e64fecc5afe5f043709a6b91bf98a7c5ba4d6bae328b4810
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7df1aaeccb0c7bef43249ccfc991ca260b9cce63b30500ec922d9fe7ad5022ce
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7df1aaeccb0c7bef43249ccfc991ca260b9cce63b30500ec922d9fe7ad5022ce
            • Size 18.7MB
            • SHA256 7df1aaeccb0c7bef43249ccfc991ca260b9cce63b30500ec922d9fe7ad5022ce
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
            • Size 7KB
            • SHA256 7eb099993dd4489cdc6a350a73065d8f0a532e8030266b536e3c97e12e6cdddf
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            8079ee13f17028be6fbc6a8b26a15a7b03c7e645831b5b4dccd9c022a9ee858b
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8079ee13f17028be6fbc6a8b26a15a7b03c7e645831b5b4dccd9c022a9ee858b
            • Size 48KB
            • SHA256 8079ee13f17028be6fbc6a8b26a15a7b03c7e645831b5b4dccd9c022a9ee858b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            8543e9d2ecedc48274edeb4fb2537b57b2ad5e6abb55ca4fb71138488985f5c4
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\8543e9d2ecedc48274edeb4fb2537b57b2ad5e6abb55ca4fb71138488985f5c4
            • Size 88KB
            • SHA256 8543e9d2ecedc48274edeb4fb2537b57b2ad5e6abb55ca4fb71138488985f5c4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
            • Size 3KB
            • SHA256 925faa0d68a91520e4762217f7addb7746c23f33ba83abd1739b5ec1c84dd520
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            b9b8100ac11fee77fb723002f8e753d37b1f5ffda79398def7e2645be32b5478
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\b9b8100ac11fee77fb723002f8e753d37b1f5ffda79398def7e2645be32b5478
            • Size 44KB
            • SHA256 b9b8100ac11fee77fb723002f8e753d37b1f5ffda79398def7e2645be32b5478
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            be1f18708d004b42cf7ee87278243e53fde0653d9fce87d0b6f1967b502aff5a
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\be1f18708d004b42cf7ee87278243e53fde0653d9fce87d0b6f1967b502aff5a
            • Size 1.5MB
            • SHA256 be1f18708d004b42cf7ee87278243e53fde0653d9fce87d0b6f1967b502aff5a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ca61af78794f6aa5351a489e9b167b80b5d9f1331b35b5327ddd0d672b377d53
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\ca61af78794f6aa5351a489e9b167b80b5d9f1331b35b5327ddd0d672b377d53
            • Size 489KB
            • SHA256 ca61af78794f6aa5351a489e9b167b80b5d9f1331b35b5327ddd0d672b377d53
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
            • Size 3KB
            • SHA256 cd90570f02ef6465d8e324fb9eb3729b08100f73cdd8c521e3c819b001526877
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            df193adc9b017f277c499ceda03448858120b0634089331a07b562c2d4587681
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\df193adc9b017f277c499ceda03448858120b0634089331a07b562c2d4587681
            • Size 3KB
            • SHA256 df193adc9b017f277c499ceda03448858120b0634089331a07b562c2d4587681
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            metadata.json
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.json
            • Size 1KB
            • SHA256 8c0c98fa625fbaf9ecc63af00da568a95628c46b55fe5840a8cdf43653acf707
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            metadata.jsond6dd130b-be94-4a0f-9830-02efb3990374.tmp
            • Path C:\Users\Admin\AppData\Local\BraveSoftware\Brave-Browser\User Data\component_crx_cache\metadata.jsond6dd130b-be94-4a0f-9830-02efb3990374.tmp
            • Size 2KB
            • SHA256 f96b11249c132703d4556bc96616216b38a45009c6c6c6edbb80193baa3c0f28
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            52c5eeb1-26f7-48ff-82d3-a92bedf3853c.png
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1064342029\47d5e2cb-9772-41e5-8e59-2bcee6b59cfa\52c5eeb1-26f7-48ff-82d3-a92bedf3853c.png
            • Size 34KB
            • SHA256 337df23726a55fad7346b96c358e5fbf8f232d1da59a4ea1881f6de234ac327f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1064342029\manifest.json
            • Size 546B
            • SHA256 74935c628c2bc9dc26af740627239d4313480278fe216271b1e605786c6d3b20
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1123736184\manifest.json
            • Size 584B
            • SHA256 042120e1ddf5889837f57fce77660b89441494be6f813069bcc18c0cb9626f3e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1151905726\manifest.json
            • Size 587B
            • SHA256 bbc9f8c4482873da0e115ecc04033f5561252d75938eb15886693e8dd51cd65d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1350682849\manifest.json
            • Size 591B
            • SHA256 7356d88fd1d27d3b30556e8847bf1655c8090639abc772ab6b7c9e51e374343e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1366623695\manifest.json
            • Size 594B
            • SHA256 a87744427cba70f418824772f1fbc54a0b8c234789d3f3327bf5650888ae0ba2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1373444913\manifest.json
            • Size 86B
            • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1601490154\manifest.json
            • Size 592B
            • SHA256 4db6f012cb440181ae18c59c2afcefd3965a7c2d52ceff39c2e723b18bf9f9f0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1658141565\manifest.json
            • Size 564B
            • SHA256 c90156b0befec33bd73c4501561b099a505886db8398680502b43515561121e5
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1739818847\manifest.json
            • Size 518B
            • SHA256 43ac09cee97c15a43c3d34458c36223e3108d8a2f04f7369fb4315af7e867a98
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1937723648\manifest.json
            • Size 533B
            • SHA256 cfb711300137c877ba9ac562dbabc18879f7494ecc1d182af8dd4909c29e9bb3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1983988185\manifest.json
            • Size 558B
            • SHA256 3152b43a7242220c00b363ba7ead4665b8b39010dc3e69136ee8edc63114e87e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_1994878257\manifest.json
            • Size 540B
            • SHA256 e66e402edd069ef0aa45e5f580e6241848d1c20fdc8bff99ab1ac79cc13cd758
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_262356718\manifest.json
            • Size 504B
            • SHA256 800deb1acb597d21b0c4e1b028dda159f19b79b1aa16d7721270c58ceacb626c
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_325635416\manifest.json
            • Size 95B
            • SHA256 70e3f3a0637bbf91f3a601863d46ca8ccde4461a8940df39c19b880f19fcdd0e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_544989751\manifest.json
            • Size 534B
            • SHA256 5418dd13c0d199a1ee2b0c492e198f346f9034ce484fb2de079f1b0795005b73
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_553657307\manifest.json
            • Size 512B
            • SHA256 f2d4f4ef6bb5a57a52406dd5ed439e48e1c6df12c6cd814409921f0c2e0b321e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_786531773\manifest.json
            • Size 563B
            • SHA256 8267a80e8b035b5cae713c63e329fc84dad4e0b723daf27120fee116fb595c60
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_798496431\manifest.json
            • Size 580B
            • SHA256 bfad155b88d1441588aed8777cd1548d05edbf513bfb6da5917a384db7e3acc2
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            manifest.json
            • Path C:\Windows\SystemTemp\BraveComponentUpdater_chrome_Unpacker_BeginUnzipping3504_826882117\manifest.json
            • Size 581B
            • SHA256 e9b2bef1e170dde425ab4e7a432b3ed9eeb71797035bbd1c4c8bac5054e8e39a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            settings.dat
            • Path C:\Windows\SystemTemp\Crashpad\settings.dat
            • Size 40B
            • SHA256 9861796d261df8333355675f9995b47a31e48936d51b81a8ee3ecfe8501f1d40
            • MD5 SHA1 SHA512
            Submit Download

            BraveCrashHandler.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveCrashHandler.exe
            • Size 270KB
            • SHA256 aefaa72622165c1d2530998e3f258bbe15b897189cea35dac80b65014bfb1ee7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveCrashHandler64.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveCrashHandler64.exe
            • Size 355KB
            • SHA256 5d233eba7c8f777b13265645905e0e28dac4b9838bec3c0a38ae4be03982d68a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveCrashHandlerArm64.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveCrashHandlerArm64.exe
            • Size 353KB
            • SHA256 f3bb274602e36389d3c2a27f7f691c2ca04f226d26f545a9c20da52e760d3213
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveUpdate.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdate.exe
            • Size 163KB
            • SHA256 b7c67e226969ab61cd7475ec4720059b04518d154f1fd9311030371ea7b5f333
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveUpdateComRegisterShell64.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdateComRegisterShell64.exe
            • Size 170KB
            • SHA256 be46b3281457ce236f2b916163d14f21066ccc971953a1a0d236bd30c8f03aba
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveUpdateComRegisterShellArm64.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdateComRegisterShellArm64.exe
            • Size 154KB
            • SHA256 102f423716beecdf82afef7d4e70f4f668e2882b8d224768aec932973e6f7f25
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            BraveUpdateCore.exe
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\BraveUpdateCore.exe
            • Size 195KB
            • SHA256 88c422ff1541db4d1b29359e0bb0fe071ec5974017f36ee3d3091c57d6f5fc22
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdate.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdate.dll
            • Size 1.0MB
            • SHA256 7a3cdac3832f0701c15186c67bf7a09c4886db0e37578ebd15763190d78bdc05
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_am.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_am.dll
            • Size 42KB
            • SHA256 4c965737ebe4c06f6f76942487315e3e6dbd5d0564e306a62465966545644e89
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ar.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ar.dll
            • Size 41KB
            • SHA256 4545bacf7ecacdcc3e5c3e3d993fdfac63c1e2e615e2c4cbb2e4ddb760c3b1d6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_bg.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_bg.dll
            • Size 44KB
            • SHA256 c20424f6b3dd84db9a201995a20a6c07adb8591ec62ffda101be442421fc4a66
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_bn.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_bn.dll
            • Size 44KB
            • SHA256 493a8c354edde874ff0b621c2abd76a7de4cf94ed616e62cb9512092fe1ffcae
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ca.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ca.dll
            • Size 44KB
            • SHA256 22bc8c65cf9fc78b789cde3d58192d12e57111b48a6054a550c95e91eefe5656
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_cs.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_cs.dll
            • Size 43KB
            • SHA256 a5c3c3de7994e782f7a35ece523d29fbbd1688f9387f923cec45ca84cdb3d4bd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_da.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_da.dll
            • Size 43KB
            • SHA256 e8726d6b081d0097d43552b508f45ca2bf8bd000af18b932f44e7ca1538fa8c6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_de.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_de.dll
            • Size 45KB
            • SHA256 18202ef8f2f65aea0db4329df5a16cb15f1cafce5a8640eca55b02b9e8d36b5a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_el.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_el.dll
            • Size 44KB
            • SHA256 b614ccedbd919cbf216d483931ffc87a09aca43e854be110177f7fa6edcf3401
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_en-GB.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_en-GB.dll
            • Size 42KB
            • SHA256 5db181aaddd0a2139e40bc3a35b09f4520a985e50ae6d7c5c41fd807d5861455
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_en.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_en.dll
            • Size 42KB
            • SHA256 aba335b23777ce809791092d0187d0988b6d2ee4eecf8fcad76ccaea4c7d7516
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_es-419.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_es-419.dll
            • Size 43KB
            • SHA256 62d20194da2efd721492220d73b336b6cd9743e61085363db534517249c209f9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_es.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_es.dll
            • Size 45KB
            • SHA256 f8faee7d9d2c82bf45e0d38dfeda1d2116d00f532df3abed6cef1307dfb87527
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_et.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_et.dll
            • Size 42KB
            • SHA256 cc981adf214176a0ff1e41f9977ec2b11ce466ee4c65583977986e95ecc73d80
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_fa.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_fa.dll
            • Size 42KB
            • SHA256 c7e61a1a163449577b98664389fd21ce43dd20217adc1c29ffef77c2bcd9b15a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_fi.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_fi.dll
            • Size 43KB
            • SHA256 0fc5c8b74b87ced53c136f492a258a02519e61256ebd07de8ae36e1b3216ed98
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_fil.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_fil.dll
            • Size 44KB
            • SHA256 8bce1e64e3b41ccf1cf83b2d641b8709c3f88700e5c7eba29778d417e958cc24
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_fr.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_fr.dll
            • Size 44KB
            • SHA256 b55f96e6427a62d6bb1171dffc8b2d6c455e6cf5ef31e651ad803682d544dd54
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_gu.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_gu.dll
            • Size 44KB
            • SHA256 d373b6ade55099bdb164843d583a246b9fd49c6e58506c5aa66c442a86a495f3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_hi.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_hi.dll
            • Size 43KB
            • SHA256 96c3ac1f71d2860c659df90f5702d82e4e039147e60b36a0886f10ff6f08e525
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_hr.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_hr.dll
            • Size 43KB
            • SHA256 aade18c63b12e70e721f5e2a73b19c39b32b71cc3b5f88a6f3a412e4eb78aa21
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_hu.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_hu.dll
            • Size 43KB
            • SHA256 8350bca6462c5df83f8e8e8baf4b56eff435b862724855af9242a4a8dfecdb63
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_id.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_id.dll
            • Size 42KB
            • SHA256 8c0ed2b376e7defc43f2e8224b97225ec776cdb4cc0a5bd04d92a250640a28a2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_is.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_is.dll
            • Size 42KB
            • SHA256 1cb7f9f844a079204b8468eb4dcd25e3346ea04746586901574bd2176d01b3fc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_it.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_it.dll
            • Size 44KB
            • SHA256 1de07c37badf4cfb0cd2e687e6b1a1bf78176b924868327077c0824e3e2dd1f4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_iw.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_iw.dll
            • Size 40KB
            • SHA256 eb20e73c30b368614db814d680f81e7ee1cddbd9771605802b862e4fc43f90ce
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ja.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ja.dll
            • Size 39KB
            • SHA256 de88ff1411fbae6c451863d906cdc8dda71f88c05a6e5aa593b481bd3a0f324d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_kn.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_kn.dll
            • Size 44KB
            • SHA256 9f834589f0472632f18cef84f41a96f144891b88368dfb5f3ddd9db8fb043743
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ko.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ko.dll
            • Size 39KB
            • SHA256 3e3b3021629d79f12e84cfb6f08b5bd8ac4807ced21145edd92e76aeef19301c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_lt.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_lt.dll
            • Size 42KB
            • SHA256 f92bd5dfe2ae1bc94e1e0dd6e01196f764fdb15bab1a4022de56963d22d9bc9b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_lv.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_lv.dll
            • Size 43KB
            • SHA256 b0cddb3989745ae8a4fe2521bbd1b0a834c3e6e6c5cf73f52949cbe2a6cd780d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ml.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ml.dll
            • Size 46KB
            • SHA256 4ca7e4195d4bac1b0973fbbf236329d8facc98ad38bb8b9bee9df8be7d4cdde2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_mr.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_mr.dll
            • Size 44KB
            • SHA256 5c257f513b8f44c42a165c22f622c6bd4aa0bc7d90f998369189d44a15de640c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ms.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ms.dll
            • Size 42KB
            • SHA256 d0527758a3eecd5e2a8496bcc5b7ad123f9acbdf917dad7747d32b6e181682e1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_nl.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_nl.dll
            • Size 44KB
            • SHA256 6201aea412010201a3498071bbb930d73cdd39b13cc971b1bbfe7d719ff0b5f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_no.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_no.dll
            • Size 43KB
            • SHA256 47aa10d8554d82a15b4abb64bdc8e62201706efbe7b1b2d1c96bf03b2763c73c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_pl.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_pl.dll
            • Size 43KB
            • SHA256 70e5aa7f098d5d27e035dbf365d88d95c7d0d361fb1fae1a21a78ab98109f119
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_pt-BR.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_pt-BR.dll
            • Size 43KB
            • SHA256 3d5f09c0a8074b8cc0c0134b200ed0063d6b3e9c8e19474526fc00d80b967b10
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_pt-PT.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_pt-PT.dll
            • Size 43KB
            • SHA256 a694d4cbee879e4a20f28a8525068127fe4a72ba691d44880dc41df2668d9317
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ro.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ro.dll
            • Size 43KB
            • SHA256 4e92b4f5d6b3fbefde5e36455e7d60e3e94115cf28aca0065d81f55a5dbbec5c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ru.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ru.dll
            • Size 42KB
            • SHA256 acecc7305d3c0f5d0558ff85f13a5075ea20f18455a0b0b6ff4b9dc406f9bbf0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_sk.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_sk.dll
            • Size 43KB
            • SHA256 87e8d356081dbfaf39a69bef278bc1c8ce49e75f05bb6f71238026baf49f298d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_sl.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_sl.dll
            • Size 43KB
            • SHA256 2c9a2885b5f0e1556a72e1d42c7c9b1e5342edab7862f299c70ececf6492db9b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_sr.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_sr.dll
            • Size 43KB
            • SHA256 74f123c8c53f870a55bbe7315a2f0e01c02b163e3597cd47292cc724088cad10
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_sv.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_sv.dll
            • Size 43KB
            • SHA256 1fc6221e28d5225d828492157cdcb159b52fc5f8cefa7e5fb5b274c71e6329bc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_sw.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_sw.dll
            • Size 44KB
            • SHA256 ecb0df45b81331e95330c7e0debddab96aee3840b55bf06f9e2afaa984e1fb3f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ta.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ta.dll
            • Size 45KB
            • SHA256 9ea7ad8a5df77b92bd94e08d61a22a91586aa34bbe3f48d6dc7314bb8d38d63b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_te.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_te.dll
            • Size 44KB
            • SHA256 11d3e5883f55b522a4b2c305bf9051bfedf2108652c22cf45497445a25d733ab
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_th.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_th.dll
            • Size 42KB
            • SHA256 5ecbdceb9a4faac86a15f5c79443b31824b37f7414fcc4a08fd7c702ac53d655
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_tr.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_tr.dll
            • Size 43KB
            • SHA256 2516ed97ea1efeecf1d4ebaa7d229cabc6f3773c728f73260b8742e00d92d803
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_uk.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_uk.dll
            • Size 43KB
            • SHA256 27c2c8df828f0b426eeee168c1b7571cf9668ab65b6cdaf430624bfc8f815878
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_ur.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_ur.dll
            • Size 42KB
            • SHA256 fb3e2ba43f846c470248c844d784bf913ec90a1f3d1a146c1913309e0c481f0e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_vi.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_vi.dll
            • Size 42KB
            • SHA256 5c2b888d7d698274494699694ab79bdc222a54f32cc025511a3c90124934a3a8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            goopdateres_zh-CN.dll
            • Path C:\Windows\SystemTemp\GUM57FB.tmp\goopdateres_zh-CN.dll
            • Size 37KB
            • SHA256 c2b75c45367b7c81f918651c97d9f79248893b6fedeea9a3c94dcb62a717987a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/1004-703-0x00007FF8C1240000-0x00007FF8C1241000-memory.dmp
            Download

            memory/5384-1323-0x000001278D190000-0x000001278D2B5000-memory.dmp
            Download