Analysis
- user interaction
yes - max time kernel
58s - max time network
1s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
18/04/2026, 02:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PhasmophobiaExt.dll
Resource
win11-20260130-en
2 signatures
60 seconds
General
- Target PhasmophobiaExt.dll
- Size 856KB
- Sample260418-cgtzdaey21
- SHA256 09335cadfdf5e5052bb60155252ee60bf5956959e27bd6808a67d9d555c56245
- MD5 eaf4336a5d15b3bf3cab1604e8bfd144
- SHA1 c39f342ffdefa485547842a88db72ecb267bb4fa
- SHA512 94facbdb0cb4a90915c98f4c03e10adefe670c565008ca01dd20cef66c81a0430c1bdcbc7dc48285c3435dac2f5e4e3e6d17b8fdac054166d9757a60df150683
- SSDEEP 24576:udXUzeryJMh7EM3S5jNMWh0lhSMXlFPiUn:uv7E1JMjwUn
- TLSH T19515BF42F7E881FDD02A9138CA976A0BEB727815076046DB23E445A93FA37F0577E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5212 rundll32.exe 5212 rundll32.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5212 rundll32.exe