3d30d701fb087416627321c60ab02f143718aefbb3ea7e2689b6fb658ab78ab6

Resubmissions

04-02-2023 21:43

max time kernel
153s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2023 21:43

Target

VSCodeUserSetup-x64-1.74.3/upl/locales/MessagingDataModel2.dll
Size

1.0MB
MD5

66f7d94678f6fed80c6b2ff642408d86
SHA1

b9da7cd717c7730dfc9ce047507dd165ad1efc84
SHA256

4e2153b7a82e1d1486eca39e9d77ac253b5ce091eb4b99ae631dbe2b65f93049
SHA512

8be925191d11493ee6041db113853e50dac69d831b6b7d95fd8102affc8d2f4a98c159c9693ae747aa22abb0263d55ff4bc4c8e577a40174a6d55a0e4b7a69f4
SSDEEP

12288:lUUn+EbQ1RrnnnSQLQwzcdQgwXYMGk7Mw5zSmSXfcoxYWzrwjDJ6a+froQs4hLNE:lU3/RrnnnSQ0nbCY9CSj0YDsZFW2

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

632 748 WerFault.exe rundll32.exe

pid	pid_target	process	target process
632	748	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\VSCodeUserSetup-x64-1.74.3\upl\locales\MessagingDataModel2.dll,#1
1⤵
PID:748

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 748 -s 412
2⤵
- Program crash
PID:632

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 748 -ip 748
1⤵
PID:4024