f6a03bb99cfa59741e8e6d7a4bb10a0309cfd4c6c1ee3cabe4a0dc59db4a50b4

Analysis

user interaction
yes
max time kernel
102s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 21:54

Target
Brave.exe
Size 72KB
Sample261029-1sb5psfs4s
SHA256 f6a03bb99cfa59741e8e6d7a4bb10a0309cfd4c6c1ee3cabe4a0dc59db4a50b4
MD5 1196f9d3cb8fe2a83dae6e69e9aabc36
SHA1 316b6ca81a61b3b0c06790af2bdb5ebb3f0ab9c6
SHA512 69cf69c31d71fe537ce37856a6993765186f79d5ed682a06678afa4002f9f0ceacfb51123c0751f777b99dad98507478a2803dccd4d1af772bbcda2e5fd6d32e
SSDEEP 1536:1t/v9dMjpP4j0/cb6/39a+ZeId6xHBCi4gZa:bFqjt4gke/ta+cNxHZa
TLSH
T156731942D99553ABC2294930C9672813DF51BC9A47A1ABCF8B90FCE61F735C0AF79342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 6 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1440	ShellHost.exe

C:\Users\Admin\AppData\Local\Temp\Brave.exe
"C:\Users\Admin\AppData\Local\Temp\Brave.exe"
1⤵
PID:5980

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2508

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F8 0x00000000000004D8
1⤵
PID:704

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:1608

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1440