Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 09:27

General

  • Target
    ninite.exe
  • Size 423KB
  • Sample261024-le6d3ays5p
  • SHA256 419e079167012a6474a8231f585fb2f2e3820e8ae335f65e190c416621fe7286
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file 4 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 21 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ninite.exe
    "C:\Users\Admin\AppData\Local\Temp\ninite.exe"
    1⤵
    • Downloads MZ/PE file
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\330736~2\BraveBrowserStandaloneSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\330736~2\BraveBrowserStandaloneSetup.exe" /silent /install
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2668
      • C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdate.exe
        C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdate.exe /silent /install "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&referral=none"
        3⤵
        • Event Triggered Execution: Image File Execution Options Injection
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3956
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regsvc
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:5128
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /regserver
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:2808
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:3636
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:3612
          • C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe
            "C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveUpdateComRegisterShell64.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies registry class
            PID:3048
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjYxMDAuMTc0MiIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0IxMzFDOTM1LTlCRTYtNDFEQS05NTk5LTFGNzc2QkVCODAxOX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4zNjEuMTUxIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjE0MzQiLz48L2FwcD48L3JlcXVlc3Q-
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5136
        • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
          "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /handoff "appguid={AFE6A462-C574-4B8A-AF43-4CC60DF4563B}&appname=Brave-Release&needsadmin=prefers&ap=release&referral=none" /installsource offline /sessionid "{8A2ABA4D-6894-449E-A29B-60AA06A8D134}" /silent /offlinedir "{406F148C-04DC-41CF-A93A-6AFF05E99181}"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          PID:1900
    • C:\Windows\SysWOW64\msiexec.exe
      msiexec.exe /i "C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\46A101~1\target.msi" /qn /norestart REBOOT=ReallySuppress ALLUSERS=1
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:5528
    • C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\521F4E~1\target.exe
      "C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\521F4E~1\target.exe" /quiet InstallAllUsers=1 PrependPath=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2740
      • C:\Windows\Temp\{0C141F3B-A406-40F8-B2F0-F40A60A6D615}\.cr\target.exe
        "C:\Windows\Temp\{0C141F3B-A406-40F8-B2F0-F40A60A6D615}\.cr\target.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\521F4E~1\target.exe" -burn.filehandle.attached=752 -burn.filehandle.self=756 /quiet InstallAllUsers=1 PrependPath=1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4188
        • C:\Windows\Temp\{0A342CF9-00AC-45CF-A6B9-86A25F128908}\.be\python-3.15.1-amd64.exe
          "C:\Windows\Temp\{0A342CF9-00AC-45CF-A6B9-86A25F128908}\.be\python-3.15.1-amd64.exe" -q -burn.elevated BurnPipe.{98699428-092D-4155-9CBD-A43518E87BDB} {F08FDEF2-A657-4947-9AA0-03EAF3022625} 4188
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4560
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    PID:5836
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    PID:5524
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    PID:2476
  • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
    "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4072
    • C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\brave_installer.exe
      "C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\brave_installer.exe" --do-not-launch-chrome
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4332
      • C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe
        "C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe" --mini-installer-path="C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\brave_installer.exe" --archive-resource-name="CHROME.PACKED.7Z" --archive-resource-type="B7" --do-not-launch-chrome
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2940
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=156.1.98.60 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff719c54f98,0x7ff719c54fa8,0x7ff719c54fb8
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          PID:5752
        • C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe
          "C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe" --system-level --verbose-logging --create-shortcuts=0 --install-level=1
          4⤵
          • Drops file in Program Files directory
          • Drops file in Windows directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1360
          • C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe
            "C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://cr.brave.com --annotation=plat=Win64 --annotation=prod=Brave --annotation=ver=156.1.98.60 --attachment=C:\Windows\SystemTemp\chromium_installer.log "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater.log" "--attachment=C:\Program Files (x86)\BraveSoftware\BraveUpdater\updater_history.jsonl" --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff719c54f98,0x7ff719c54fa8,0x7ff719c54fb8
            5⤵
            • Executes dropped EXE
            PID:2976
    • C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
      "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNjEuMTUxIiBzaGVsbF92ZXJzaW9uPSIxLjMuMzYxLjE1MSIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins4QTJBQkE0RC02ODk0LTQ0OUUtQTI5Qi02MEFBMDZBOEQxMzR9IiBpbnN0YWxsc291cmNlPSJvZmZsaW5lIiB0ZXN0c291cmNlPSJhdXRvIiByZXF1ZXN0aWQ9Ins5RDI5ODc2Ri0yOENDLTQ3MEUtQTU5RC1ENDJBNDhBNTNBMzN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3MDciIHVwZGF0ZV9jaGVja190aW1lX21zPSIxIiB0b3RhbD0iMTY0OTg1NDI0IiBpbnN0YWxsX3RpbWVfbXM9IjQ5NzIzIi8-PC9hcHA-PC9yZXF1ZXN0Pg
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:2236
  • C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\elevation_service.exe
    "C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:3556
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4140
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding FB9E1EFAAC9D2350C6F4E10715B334A7
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:1860
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    PID:4988

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e5c5426.rbs

        • Path C:\Config.Msi\e5c5426.rbs
        • Size 103KB
        • SHA256 c7904370bc8866b5f1cbb3b67ec19424e2e8b0054d0e32b4af3404b6f5a392c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files (x86)\BraveSoftware\Update\Install\{A265D73B-C3CF-45AD-8CCE-FF04477E587D}\CR_7FFB0.tmp\setup.exe
        • Size 7.3MB
        • SHA256 b4e65284792ccd0af986e5dbf1344c4f2afe5b19c332cab58471ce2f4552f0b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\af.pak
        • Size 721KB
        • SHA256 8ca12c27695ce23a24516c6a5215c915daccebdecb91ad8d7d9bc2455e288dfd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\am.pak
        • Size 1.1MB
        • SHA256 cbf5eb089344c052b0c71d9156a0fca63d73af0b97e49288b418846112c3682c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ar.pak
        • Size 1.2MB
        • SHA256 bb4283fe10e8398f4b30e0dcec22a72999a002071e0152add18e4da012e119a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        az.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\az.pak
        • Size 828KB
        • SHA256 b334a1ac2c25d308d4ebc33a802100e078190b6055553bbfa68f79aa95b87c9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\bg.pak
        • Size 1.3MB
        • SHA256 ca08c68ca91cb9f45bcfd9a5344ffc366c8458da72436abdf2cdc315bc00d9b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\bn.pak
        • Size 1.7MB
        • SHA256 be0e441a139a34ee8815f22cf39549a9f51192f41b9b59886cc690d72c3fddb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bs.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\bs.pak
        • Size 805KB
        • SHA256 ba43b92b8f6bea4754bae08bab188a1e1048bf1e9e8052d7024411452d8b5188
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ca.pak
        • Size 828KB
        • SHA256 9a049bf540275dea85b4a6548e1f897ef1bc59729510be83d5d8995d940b1c9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\cs.pak
        • Size 841KB
        • SHA256 1c69dad39bc94d64dde5ba1a1007a3b063eafb8d6eb9433bb994b1da3138866d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\da.pak
        • Size 761KB
        • SHA256 099a68ff7be6d27e108635bbf03c17fc9864e87b81a8e97f3aac9687462bf9b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\de.pak
        • Size 836KB
        • SHA256 2412dee81fb469f246a018c320bdb3c07e6b2a70cfedb19b0290f35b0453f605
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\el.pak
        • Size 1.4MB
        • SHA256 19e26022e89b6cbdd43024ac393af84bd73c09968c27c5329493d292317a616b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\en-GB.pak
        • Size 668KB
        • SHA256 71851ac2953d09d3dde9d9bcc5cc670d86d25cb48a17a4b75af8e9c7f0638cf5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\en-US.pak
        • Size 674KB
        • SHA256 2f8ade0d185d011afbabb4d862282dcfabaf9ca24d11d896e4bb1cf36bade459
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\es-419.pak
        • Size 816KB
        • SHA256 ea9856b2c46c04b383f33e8a7fe3a8bd2eade248ef077a1093fb10e0a40535ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\es.pak
        • Size 812KB
        • SHA256 475f16c034b8ef5796efef958fa1e911f744a90c93e1b9ad4083e513c58f2034
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\et.pak
        • Size 740KB
        • SHA256 d71afb04d05b4fa94203b094d1f9215710a817855391ca16b341dc446248bc55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\fa.pak
        • Size 1.2MB
        • SHA256 a8197c64cc13c67e36b63cba1ae62e2b82b49178f315185bf428946c55ccd923
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\fi.pak
        • Size 757KB
        • SHA256 c6f2bab6a8d79ffe9834bea22c56482edfd3065158232f93f37298c2677e11b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\fil.pak
        • Size 844KB
        • SHA256 f127b5c080a7861f0fd8036c41e0b10e44939b15c7d236d5d9ccd02f60e96471
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\fr.pak
        • Size 878KB
        • SHA256 05a4a36a23f0dc415eb76048aa7efe3746bb0278ae8aaea13fb2df9e69efb1aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\gu.pak
        • Size 1.6MB
        • SHA256 57ecd768981003b58f365c4eafaacfa4dd0f2d76e041eb1b22d895278fe39f42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\he.pak
        • Size 1.0MB
        • SHA256 0a9a812d1c2f063a224f849561b3d2135527f8787f0fa48839b6137dcbeb73e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\hi.pak
        • Size 1.7MB
        • SHA256 08aee56bf7e87b027c28616380facbe27454a4fc1e724b5a9b62ea06856983e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\hr.pak
        • Size 815KB
        • SHA256 adc20d84a2a0d2f52fd07f4a779e513cf6291ecb964b1ec7c40568024c5f5f67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\hu.pak
        • Size 875KB
        • SHA256 0baadb56ee8bbb349d4d7fc16793f48aaebdc5dab4cede003b0e68b6d6a94eed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\id.pak
        • Size 736KB
        • SHA256 b19c10275e3505f73072b81774f19ab25b5274089735bdc893b05dc1b9e842dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\it.pak
        • Size 805KB
        • SHA256 f831127119b8dbe82ff11443c7b5280b72b708cee9dd4352fb00395119ae5bda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ja.pak
        • Size 973KB
        • SHA256 51dcee6c33f09edc6bc173ba798fd45c0f7a62103991e51d4bdcbf513c08aadd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ka.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ka.pak
        • Size 1.8MB
        • SHA256 108b24da2fa660324f42dd3b01819d7d64de60268b3eafc3440f28e4fe3fb1bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kk.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\kk.pak
        • Size 1.3MB
        • SHA256 1c799ebd77cf958de618eaa9f9f0033a44da7eb7828029648928a523ed5756fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        km.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\km.pak
        • Size 1.8MB
        • SHA256 7c7de22af0b1f83f1246d5b2dfc0fd5f05552d74e1cdb449ffd6f3bde09bf30e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\kn.pak
        • Size 1.9MB
        • SHA256 4d5ad12288499906ccf131c479e3566609f1916267e665525e2c643a04ed51bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ko.pak
        • Size 827KB
        • SHA256 16fd3ae33f030d9685e93a07a17c192ee741b73e96bc0d6c28a3e5c6a754c3f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lo.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\lo.pak
        • Size 1.5MB
        • SHA256 1b81a08b141a19bee92cb35c1440b7df86a0c0a39fd06714a4a80cc9c7394e9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\lt.pak
        • Size 872KB
        • SHA256 78398a7cf28e8a91e1d104c8fa8bf56ddfc5caa9103e90423f79aa978d92543a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\lv.pak
        • Size 861KB
        • SHA256 3fd43b69b553b2b451807de14c7e9f1114a072027e35f6c4bbda20b864b361f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mk.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\mk.pak
        • Size 1.3MB
        • SHA256 5bb2125b7492a0b175a6febd86ecc609a735466f8620e73d8a30d695ad8e1229
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ml.pak
        • Size 1.9MB
        • SHA256 385be976b6f6315fe30af236eb37eb802dc5dcd138678fa2451c92cc02b1ea6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mn.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\mn.pak
        • Size 1.2MB
        • SHA256 96d6db0471e84937f74ee3d14c38355ad5384e69f1a21bd47cb3208378d8e45f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\mr.pak
        • Size 1.6MB
        • SHA256 87744d5b433cbc3998a34e205b10659399514229e40fac921b54db207a7ce85c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ms.pak
        • Size 768KB
        • SHA256 d19461233c13fb8a87512e380540cd158ef791c64007dff338dffe1f0d8a1de7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        my.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\my.pak
        • Size 1.9MB
        • SHA256 c97d5acc478e72b3c9a4d755962db394375521a17cb56f01ae7bdef895b6d626
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\nb.pak
        • Size 730KB
        • SHA256 4b5a88e27eb6698314b436898c23d95fb5bd595e3e850b4eaa3a2593f378963e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\nl.pak
        • Size 767KB
        • SHA256 6f0bee2f64dda16390828ee06ed224914e5c55f79a31d5f85182afe4f918045c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\pl.pak
        • Size 843KB
        • SHA256 e58fb50282b8ee3264bed2ab3c45aab82673e24782584d7b68af2255a3f1c260
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\pt-BR.pak
        • Size 798KB
        • SHA256 ad232f128cc5fa00fa40842904ad084cc2a20d82a73b5a3e7dbe14ce32e3a448
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\pt-PT.pak
        • Size 804KB
        • SHA256 e579057e9caa69997223fa370dabaac41b1902f86a4d75454245708fe36ce659
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ro.pak
        • Size 832KB
        • SHA256 ba65b9bd1ed873931898648b79f5bc19fac9e0291e5791e0332fbd6a31a73a19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ru.pak
        • Size 1.3MB
        • SHA256 3fb62477aa4a48c2aec96fddab81f09ea5e9e22a7fde2cd3b2f58adde04c8eca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        si.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\si.pak
        • Size 1.6MB
        • SHA256 4700f8ed641de78559714041eabe1c4174c45d1d5da4b0b8630e41da7f804500
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sk.pak
        • Size 853KB
        • SHA256 5083e7b982a4b9dbdcb3bf02a576fbd08b437e5ebfbe8343bf836813cbe14f44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sl.pak
        • Size 810KB
        • SHA256 d608c9c7e474db8bc3ede2476d2c5651227c63b1fc04dd81e89f0a4db4810943
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sq.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sq.pak
        • Size 825KB
        • SHA256 746755a3cefce4012fbeb44ef7e0de6ebb342d572cbe1b3abd4555555598b0cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr-Latn.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sr-Latn.pak
        • Size 792KB
        • SHA256 7df3a1ca879c4f5550f2d2a9c794e7a5eac4f5b6b74f2a5390255464b93a4f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sr.pak
        • Size 1.1MB
        • SHA256 355431101e757af475663bcbaab09bfc271314573221abb2ab44cb7ee2219146
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sv.pak
        • Size 744KB
        • SHA256 86f2aba955b7208779cd039b638af19d56a6dd4d0ecfff337c435598d74e0ef0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\sw.pak
        • Size 781KB
        • SHA256 f8cae7ba61d075497c4197ebdc1d56604d1ac49a90e5e02b5cb9bfcfe169de71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ta.pak
        • Size 1.9MB
        • SHA256 f5ad91ee78d99096b4203b57a13dcffaff9ed4c0fa8f1b629b0b32c65c7d73ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\te.pak
        • Size 1.8MB
        • SHA256 a16bc4f809d7989e6ac12edfae8ae7f264bd22a2792e1cae089175798a95eb02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\th.pak
        • Size 1.5MB
        • SHA256 3366f346e3f52e289a70f2f36f17511ce7980650dce846ce7e4c95a88e01998f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\tr.pak
        • Size 801KB
        • SHA256 2f9cb40038e5006618dfe497741c24a373ba5c0d4e7ae680c1cd9552423a48b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\uk.pak
        • Size 1.3MB
        • SHA256 13c1be2398b360b0cbf0531a7ca05393645a021f5cec8cbeba9467611a16aaf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\ur.pak
        • Size 1.1MB
        • SHA256 3baf3dece1784bf24d85e68a7e40665d2ebe202b858dce13e2bab919afea1351
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uz.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\uz.pak
        • Size 778KB
        • SHA256 55823bef46b9c0f65e1bd3e52bcd9fd1dae2cc1ecf71451ed3f3bef8da52f8c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\vi.pak
        • Size 948KB
        • SHA256 ac4de46524f2d3ea98a0c58dc9f86939780beed9b3443fc07ad6def2c0839b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\zh-CN.pak
        • Size 676KB
        • SHA256 e604a67f7453e694affca4284effd33b3309fc9e8f840692b8e53d018d6b0635
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\156.1.98.60\Locales\zh-TW.pak
        • Size 670KB
        • SHA256 450b28c8f24c8e44c5c609cbeaa0db888b278528e17fb8c62dc8bec02c22ed12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brave.exe

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
        • Size 4.2MB
        • SHA256 70372e06eef532c7e89f13e17569d8f5793f13671b8607a242292f68d0a1cd25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_proxy.exe

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Application\chrome_proxy.exe
        • Size 2.4MB
        • SHA256 ab81d21ca59ae31fad514e67ec1d8363e2441b4c893963c8e8663f3ed59d6229
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am_FEMININE.pak

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2940_252362878\Chrome-bin\156.1.98.60\Locales\am_FEMININE.pak
        • Size 18B
        • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
        • MD5 SHA1 SHA512

        messages.json

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2940_252362878\Chrome-bin\156.1.98.60\resources\brave_extension\_locales\en_US\messages.json
        • Size 9KB
        • SHA256 d1c6f805d1e5501e39e20bbb84fc5311cbf93279488fc9f3c490cbe4752c5733
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages.json

        • Path C:\Program Files\BraveSoftware\Brave-Browser\Temp\source2940_252362878\Chrome-bin\156.1.98.60\resources\brave_extension\_locales\hr\messages.json
        • Size 9KB
        • SHA256 bf4799a7899490a023cb617dba40e32f16748cb8c9dffc26e299e327a76375fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ADDITIONAL_LICENSE_INFO

        • Path C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\legal\java.instrument\ADDITIONAL_LICENSE_INFO
        • Size 49B
        • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
        • MD5 SHA1 SHA512

        ASSEMBLY_EXCEPTION

        • Path C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\legal\java.instrument\ASSEMBLY_EXCEPTION
        • Size 44B
        • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
        • MD5 SHA1 SHA512

        LICENSE

        • Path C:\Program Files\Eclipse Adoptium\jdk-25.0.4.101-hotspot\legal\java.instrument\LICENSE
        • Size 33B
        • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
        • MD5 SHA1 SHA512

        Ninite.dll

        • Path C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\33073687-cf8d-11f1-be31-6ab3bf6be046\Ninite.dll
        • Size 2.0MB
        • SHA256 3bcc290f655cf97a3e617b5c89fc3a33eab53ce2856b99f91ee84c1eaa9c2b88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        target.exe

        • Path C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\521f4ea4-cf8d-11f1-be31-6ab3bf6be046\target.exe
        • Size 43.4MB
        • SHA256 8b23839c6b2f3076fdff44c78d219a5393c7205f666cd95bd0c9a562bf8ea5db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        target.exe

        • Path C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\521f4ea6-cf8d-11f1-be31-6ab3bf6be046\target.exe
        • Size 1.6MB
        • SHA256 fd99e86f57d8f429ef5ed045bf98315af962e2309b0f1ba87a147a44c71647d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        target.exe

        • Path C:\Users\Admin\AppData\Local\Temp\Ninite.tmp\582f2b76-cf8d-11f1-be31-6ab3bf6be046\target.exe
        • Size 1.9MB
        • SHA256 c42efad041d4c0bb4d4ac97ae7cbe89f153ec1fe078772392e749c7f5d5282d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveCrashHandler.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveCrashHandler.exe
        • Size 270KB
        • SHA256 3963ad3e863a0ca7893bf5a942ef5f1a66aac4b3e12801d03eb8727723163fc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveCrashHandler64.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveCrashHandler64.exe
        • Size 355KB
        • SHA256 f95270db85a886d170c18445f35e954fc806145a743d40dade33c7fe71f54774
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveCrashHandlerArm64.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveCrashHandlerArm64.exe
        • Size 353KB
        • SHA256 bc35f72d6d5b6da079c8f2a1b7336a2d378163942c3937d788415af7b35ae58f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveUpdate.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdate.exe
        • Size 163KB
        • SHA256 fc45c383a25ebaa676c70e0def336d5c3acf4ed249dcdc8c805dd45d864288a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveUpdateComRegisterShell64.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdateComRegisterShell64.exe
        • Size 170KB
        • SHA256 f147ea8989cc7d74e7fc5e64f2c82d31f079aa970a310ec6eafff05a69495389
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveUpdateComRegisterShellArm64.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdateComRegisterShellArm64.exe
        • Size 154KB
        • SHA256 b3e6e5b6a47480d776bf5728ba4f3c19f1a894ed04c9f259aa98d42307943ee9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BraveUpdateCore.exe

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\BraveUpdateCore.exe
        • Size 195KB
        • SHA256 650f8998f4608676dfed9e0004419545c7770c5c1efac1dd9c077f54b60f6b68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdate.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdate.dll
        • Size 1.0MB
        • SHA256 9132398643653e7415fc71dee2159d53c320171e71a15d5fc3347c81631cd665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_am.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_am.dll
        • Size 42KB
        • SHA256 e2f7659c6a67ccaf8fac4738ffc06c2fc250baf694e46bc3dc070e08968c803b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ar.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ar.dll
        • Size 41KB
        • SHA256 49800e93fe2016dcca5ec63feae9f0c7ab00a49e7c50ab6657ac45ce1c1db999
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_bg.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_bg.dll
        • Size 44KB
        • SHA256 46c772a86eb91ce7d9a0a5be4b2d7b1264ea32c4abd93a566ebd4603e4929e70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_bn.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_bn.dll
        • Size 44KB
        • SHA256 9c50e17bbec3961b75f05543a6475ffb6ebd09331054142eccd4346eb34fa5d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ca.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ca.dll
        • Size 44KB
        • SHA256 8af00a84ba54bc957f2bc31e95f82baeaa019c4b65dd3c71484a9eec4fd1cb2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_cs.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_cs.dll
        • Size 43KB
        • SHA256 6179cbbac503cfaddeb31b397ed578494048f3ad506ef19ceff4bbdefe72ed96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_da.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_da.dll
        • Size 43KB
        • SHA256 b1c7e46ce77712c983dc95b4bc9584339f9800dd42439bb9a2c65c362737a6be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_de.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_de.dll
        • Size 45KB
        • SHA256 327f214e93a271e61cd2305777fd3d62e46cfbd9de6a7307ee19150cfc1f951a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_el.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_el.dll
        • Size 44KB
        • SHA256 92d005cd89c81240e7594417b2ebc0f222c073f474da7cefc1c24f0771805550
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_en-GB.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_en-GB.dll
        • Size 42KB
        • SHA256 2d9da581eff69e9d1d812f088d296be7fc6efdf7b74d1430b68923baaa7b0c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_en.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_en.dll
        • Size 42KB
        • SHA256 3a3400cc45f1fbb873c9af751d7be30ef4273c7a074e88eb3f3267acd364cf15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_es-419.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_es-419.dll
        • Size 43KB
        • SHA256 c6982e48654c89d5168a17c344742062a2b4120bfde30bf307029c9e74b21a46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_es.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_es.dll
        • Size 45KB
        • SHA256 2fbba4fc7d228268864187ecb7d0e2b422666b4bfdd1362aea250080f9a67069
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_et.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_et.dll
        • Size 42KB
        • SHA256 ebcdb76b3b262bc50ec9d57664d5434d9fee4d1489948407a8ea00dcfc5a5dd7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_fa.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_fa.dll
        • Size 42KB
        • SHA256 918d8958af126e611160178ff3629bee14aeeb9ae3f8be699f40799cc00cdb22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_fi.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_fi.dll
        • Size 43KB
        • SHA256 2ac1a4655a90a14bbeb38f3f6a0cc7c548b97e6da8095ee8d99e927e6070812f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_fil.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_fil.dll
        • Size 44KB
        • SHA256 ac54bc8902d555c4d2a52bcc4f76dc747a2026fac2b244bc523889f8d9d63b3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_fr.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_fr.dll
        • Size 44KB
        • SHA256 9e98b56d419a5ff65e8a9211ecfc050f6f364de1a4bd2298a73b9869c236e258
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_gu.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_gu.dll
        • Size 44KB
        • SHA256 4cf64a129f68cfb8ab45673ba69cf7fc1204370ab4d16ccae68009719cdf555e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_hi.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_hi.dll
        • Size 43KB
        • SHA256 8f1fddf64837e4ab81556b9100270152392d8872c07368cbafaf898d7acf070f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_hr.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_hr.dll
        • Size 43KB
        • SHA256 a95e5d65d7e3c19a98156fddfbec8002195c5d3a1531fee1be5107737f0bde93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_hu.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_hu.dll
        • Size 43KB
        • SHA256 2d6cfa2394904a13b9d3396af945da430bd6efd25aee7df9d82f9054a30a9bab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_id.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_id.dll
        • Size 42KB
        • SHA256 c6f7c0b5883f54aa6219ba3dcf138fb733fe3e52f7473f6773e47427a31a8a56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_is.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_is.dll
        • Size 42KB
        • SHA256 d46ca1ec84b58ae466bd48640cff5b8b963dacd035e23ff22ecdfbe91ed274e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_it.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_it.dll
        • Size 44KB
        • SHA256 70dc992f6427e9c816edcebf0c6e897b18577ef42a0f712eff4a33f237c3b137
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_iw.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_iw.dll
        • Size 40KB
        • SHA256 c35efa99a02f31b6233b409844bb66e768813ff3d669e479c11c51791e738c44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ja.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ja.dll
        • Size 39KB
        • SHA256 c41892511fcc4e7dbd7feb5c3a2f62e6446aec6dec66cb89d971ee4e817e44e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_kn.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_kn.dll
        • Size 44KB
        • SHA256 31d8be4835ef78324b55e2754ff0de66203b71e4dce890d2559f611b8dae29cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ko.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ko.dll
        • Size 39KB
        • SHA256 37d6b57bd6faec1b0309580636fa209484df24fd1ec9c88e766167ab5eaa478e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_lt.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_lt.dll
        • Size 42KB
        • SHA256 6c875faf2b3512ec40eaa1fb5d4a6cedf9ced9667ce51d53ed8b611fa7fd5517
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_lv.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_lv.dll
        • Size 43KB
        • SHA256 1cace30b99709c9bbc9a9b54d8f1cb7417f11288ba612a0225404a1c15004b14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ml.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ml.dll
        • Size 46KB
        • SHA256 07adb80bfe507e0f6ba5f541e224f0e934d0108094ca6f64f37b25a899aa1fca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_mr.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_mr.dll
        • Size 44KB
        • SHA256 63dde7bad2506450ba9455ce223f3a64a25edfb214caef095664a9566565872f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ms.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ms.dll
        • Size 42KB
        • SHA256 7c47709a33cb6d125634d9c8220a02eb45f96151d4219eca3eadd6dc6a89957d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_nl.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_nl.dll
        • Size 44KB
        • SHA256 0f0f5e154c1688cbd77e5ea6d3d653f8e744498188b595e87466700d0ce4a4a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_no.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_no.dll
        • Size 43KB
        • SHA256 103654f6f1484ca7464dcbeddf35a1ecbbba4994ed3a36b9feced962ba0ac349
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_pl.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_pl.dll
        • Size 43KB
        • SHA256 cde72886e5c8a8b969b54b338d795464849891607167f69b22d7a103cb4c3195
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_pt-BR.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_pt-BR.dll
        • Size 43KB
        • SHA256 afbad1d7ecbe27d079b0dc6186fc2117b15579fc62ba6d701cee69ef89cbfe7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_pt-PT.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_pt-PT.dll
        • Size 43KB
        • SHA256 e46ec30789af20a190ee9b2b80037d9516c17024a08fdf1235c83986fed692b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ro.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ro.dll
        • Size 43KB
        • SHA256 1bddd53a6e82377809fc53d1cfbc34db4c78fce3ba02bd4bcdb93d3ea188adbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ru.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ru.dll
        • Size 42KB
        • SHA256 1fc32a049892dc1f0355ee36998307dff9c772faeb765af4c3fb6c59664c187d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_sk.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_sk.dll
        • Size 43KB
        • SHA256 f5ae209d26c4d050fba759163fdb34fe9d4768d28be3bd061839e561dcf92283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_sl.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_sl.dll
        • Size 43KB
        • SHA256 928851cfd63d07890dc71415681426a41d98bc9ad217bba0c8a0f75435d87e64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_sr.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_sr.dll
        • Size 43KB
        • SHA256 90900c70013e91ab82a5a15dc94b7d32918e306274f4ab4955a54f5ba3ca998a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_sv.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_sv.dll
        • Size 43KB
        • SHA256 f33ad18ac47147279d380489c7b462e1c996a6b47a02ca95cbc9302be279f406
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_sw.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_sw.dll
        • Size 44KB
        • SHA256 22055dfdfc1d802522e8f95801e334cc9e1c5fc3017513c88169aca9b295d334
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_ta.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_ta.dll
        • Size 45KB
        • SHA256 8831fd69edd5818493171107944d69dc2512767f250094a239559760e886b8ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_te.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_te.dll
        • Size 44KB
        • SHA256 47e435a76a6ebc0e4a0d05d735f6796bf5bb2dc399bfc723b0aaf7cf8f1ed63e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_th.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_th.dll
        • Size 42KB
        • SHA256 dd91daa472bbff5dd4364698e5ad4810d1f20dc38e46c497838c6be6038baf10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        goopdateres_tr.dll

        • Path C:\Windows\SystemTemp\GUM1AC9.tmp\goopdateres_tr.dll
        • Size 43KB
        • SHA256 b9f9b72473a7a0d9b0d6b546b0931e486a53e0cdea074a8120740fcd1c4c1e01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SideBar.png

        • Path C:\Windows\Temp\{0A342CF9-00AC-45CF-A6B9-86A25F128908}\.ba\SideBar.png
        • Size 50KB
        • SHA256 79434bd1368f47f08acf6db66638531d386bf15166d78d9bfea4da164c079067
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python-3.15.1-amd64.exe

        • Path C:\Windows\Temp\{0A342CF9-00AC-45CF-A6B9-86A25F128908}\.be\python-3.15.1-amd64.exe
        • Size 881KB
        • SHA256 2bfca3d4c84ee41663e8d51ec2bec99742211ebc38c34bc4efda5bb3aac5772e
        • MD5 SHA1 SHA512 SSDEEP TLSH