18bd68b49e07e92503049bf430bc9afac09fa5ccb0f733a9acc9339cee6bfbdd

Analysis

user interaction
yes
max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 13:17

Target
PNGTUBER PLUS 1.4.5 WINDOWS.exe
Size 65.7MB
Sample260807-qjty2sen3x
SHA256 18bd68b49e07e92503049bf430bc9afac09fa5ccb0f733a9acc9339cee6bfbdd
MD5 6d4b62daee4f7287c12133b7c22747d1
SHA1 2ac922d8b31e9fe31d12a52c670c85269bbf5c34
SHA512 33ccbb8a5a6947dd0e209a56ba60f28fa710c61a395cb168c3682a380d655750606dfc062c8ad8b9c576baa914f13b340743f1d1a17937743f16b1bb067ef235
SSDEEP 786432:Cxfaj1Y4UcbWVSwemlDINxTuzR4Ds54sZFFZFmNO0QK:Cxfaj1nyemKrTabB0NO
TLSH
T1E4E75A03F6A360DDC4ABD57043AF6137B630F89911356A6F6A90DB781E61FB09B2CB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3472	PNGTUBER PLUS 1.4.5 WINDOWS.exe
3472	PNGTUBER PLUS 1.4.5 WINDOWS.exe

C:\Users\Admin\AppData\Local\Temp\PNGTUBER PLUS 1.4.5 WINDOWS.exe
"C:\Users\Admin\AppData\Local\Temp\PNGTUBER PLUS 1.4.5 WINDOWS.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3472

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2988