Microsoft.VisualStudio.Services.VSIXPackage
- SHA256 6d159c73f78d9289ec9004c5f8f4bee621561552d78f140a1f984ad9fb4c1b6d
Overview
overview
6Static
static
1extension/...ain.js
windows10-2004-x64
3extension/...ain.js
windows11-ltsc_2024-x64
3extension/...ort.sh
ubuntu-18.04-amd64
6extension/...ort.sh
debian-9-armhf
6extension/...ort.sh
debian-9-mips
extension/...ort.sh
debian-9-mipsel
extension/...ss.bat
windows10-2004-x64
1extension/...ss.bat
windows11-ltsc_2024-x64
1extension/...ass.sh
ubuntu-18.04-amd64
3extension/...ass.sh
debian-9-armhf
3extension/...ass.sh
debian-9-mips
extension/...ass.sh
debian-9-mipsel
extension/...ver.js
windows10-2004-x64
3extension/...ver.js
windows11-ltsc_2024-x64
3extension/...ent.js
windows10-2004-x64
3extension/...ent.js
windows11-ltsc_2024-x64
3extension/...ess.sh
ubuntu-18.04-amd64
3extension/...ess.sh
debian-9-armhf
3extension/...ess.sh
debian-9-mips
extension/...ess.sh
debian-9-mipsel
extension/...h.html
windows10-2004-x64
3extension/...h.html
windows11-ltsc_2024-x64
3extension/...aph.js
windows10-2004-x64
3extension/...aph.js
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
extension/dist/main.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension/dist/main.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
extension/dist/scripts/connectionReport.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
extension/dist/scripts/launchSSHAskpass.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
extension/dist/scripts/launchSSHAskpass.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
extension/dist/scripts/remoteServer.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
extension/dist/scripts/remoteServer.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
extension/dist/scripts/sshAskClient.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
extension/dist/scripts/sshAskClient.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
extension/dist/scripts/terminateProcess.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
extension/media/trafficGraph.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral22
Sample
extension/media/trafficGraph.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral23
Sample
extension/media/trafficGraph.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
extension/media/trafficGraph.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Microsoft.VisualStudio.Services.VSIXPackage
- Size 370KB
- Sample260717-pmxzfabs4j
- SHA256 6d159c73f78d9289ec9004c5f8f4bee621561552d78f140a1f984ad9fb4c1b6d
- MD5 0197015cf0ccd207f255579bac19c167
- SHA1 a4da7d00425e3560d85a6a8aa23503936ce9d0ca
- SHA512 624f02993958ce636783acacba061f9b229495178d6c6f48905618cc029cb55cbb0d3a6a7968dde5ca5b33c581b9bfda580df9da5baa4423344d97d5b6c15406
- SSDEEP 6144:s/5Xvyyug/FhwYb9q5PKAcpBdW1YhBxOKr20EDyMPVRiZhGwepRYZ:sxXKZgdNq5EpG1iOKC0EnHiZEwcYZ
- TLSH T18D842286F2CDD824F9E08173CDE5D445CC724AC5A6A942C98B0AF6B448CA39E0797D7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Microsoft.VisualStudio.Services.VSIXPackage.zip 370KB
-
[Content_Types].xml.xml 687B
-
extension.vsixmanifest.xml 2KB
-
extension/CHANGELOG.md13KB
-
extension/LICENSE.txt619B
-
extension/README.md6KB
-
extension/dist/main.js.js 1.1MB
-
extension/dist/main.js.LICENSE.txt157B
-
extension/dist/scripts/connectionReport.sh.sh 3KB
-
extension/dist/scripts/launchSSHAskpass.bat123B
-
extension/dist/scripts/launchSSHAskpass.sh.sh 92B
-
extension/dist/scripts/remoteServer.js.js 9KB
-
extension/dist/scripts/sshAskClient.js.js 1KB
-
extension/dist/scripts/terminateProcess.sh.sh 212B
-
extension/media/trafficGraph.css1KB
-
extension/media/trafficGraph.html.html 1KB
-
extension/media/trafficGraph.js.js 2KB
-
extension/package.json22KB
-
extension/resources/icon.png.png 13KB
[Content_Types].xml
- SHA256 3c0bae8dcda3fdd6ce7b7265f643dc6b9c528f1cbab07aeda4a20b8f14300c2e
- MD5 d402dbeb8b67f957a3595f77442c3324
- SHA1 cc59d6e20084de67421ee6e4dffb078bf3e0300d
- SHA512 0850df1137abbaee30337b7eb736a2d07ac56725fe0afdce44ba5c92e9c79ecd6781971fe53624d98d31204f5b41af770baa225e79b7ece5e40bd7d70a257203
- TLSH T138014FE5705ED8E04358D5FEDB965C4022391E1DF050BA4CB18E221FA1F6B8B016A3C8
- MD5 SHA1 SHA512 TLSH
extension.vsixmanifest
- SHA256 3662b406eb81ced6d33e576dc6c8074240271e826166d40017fa0d73ef89c591
- MD5 8d80111495d6e52c4a067b216b02824b
- SHA1 76020e71a54428a43035e49b0e1105a048a01b0a
- SHA512 4aca4c1a225e079444a847e2afddbc6bffab7d665b6f4ee6171cea6771e2367612528e7db81af352d091c914e49e483194c4551eca00289743f9468b36c8dd15
- TLSH T1C151880CF88CDE764A80B988EC896481763FD7C35379E59962E31424E5DA7B0897C4E3
- MD5 SHA1 SHA512 TLSH
extension/CHANGELOG.md
- SHA256 4587ec9af79e669962f42d02a6e7c29cc47e2382e58a5c3f9c30e12c679d4736
- MD5 782b1e6d448c9e73d2b11d49a29ecc6a
- SHA1 d787a4ef80af7e8cda19a852e967edf9cc18d4f9
- SHA512 b9ac09cb53394515412b3ece5ed51b80f17567716c2ee2a6a1610e0b54ec7f8aaa7c0558d488829563bdd769ca6082136ac01dc7598957c2303caf1b8f21d31d
- SSDEEP 192:RR+a4W8NLT+r7khoTnYDDAqsEjassTelzrFbpkFeHYx0UdtRvIqCsHChYUykRQM9:Ka4aoKTncDJZ9zxHkpS+UlRvNKk
- TLSH T1FD52B6127A0B332F0E130270065B31D16B69E2662347256845DBC15DE96E7ECF3BB6EB
- MD5 SHA1 SHA512 SSDEEP TLSH
extension/LICENSE.txt
- SHA256 f2ae90804ff74c993182066e700741521a2ce92c068b3190ed8e4eccfa7c0a31
- MD5 491901a25667532f78a0897219fd67bc
- SHA1 2ec62ac4c5a27e27570b790f205dd357b42eb4c6
- SHA512 3728282900f6f1a83b82800fee32295f7d44f90dcb2c4b3ca39299c1b2928f59a939d9a62f94aa6bf295ce51b27988e9db3c4c407f7ddb69a0f4684733c155e8
- TLSH T1F9F062882011E1FABE0CB356BF523C88948E39A3730BE6C44801F1C59FB6E4C01E682A
- MD5 SHA1 SHA512 TLSH
extension/README.md
- SHA256 e701387f69b5475bee8e2254a74bfcdf6e48c449db646921af310ee86ad19b43
- MD5 5ea92d5dd42dcf338ed435f8df955827
- SHA1 02b82b4a65d85e001cea577642e36d645f45faf2
- SHA512 6bce300358fdfcb59959b48432acb53381a87bf03554f052f7c458d7920c8dac1f66cf8b33bd1105e881f752ace95b49deac033b97e0010c23f4034e83f6254f
- SSDEEP 96:fc/QkAIs83yrfXlpIuRKeAIfo33MunRuo0kTjjBj6DksINpG+KUaBJWpLrWr/wPd:k/QhcStzUehQMwu7kT5j6mNpgrWn9l
- TLSH T1E2D11A17728A363B3C3101D2B745A595733BD63A235E299849EF41590EC9B58D3E2CF0
- MD5 SHA1 SHA512 SSDEEP TLSH
extension/dist/main.js
- SHA256 721e4fe0aa9069a6d31d78d92afbdaf6fac45ed9728efa03748aaa79a9d4ff18
- MD5 e4da529316943fb5b65bc0abf9dedb4d
- SHA1 f292d45b215461873a61cdad3ccaddc374c411c9
- SHA512 faf0a55e0389331ef48078a6d169888b1fa08a83c6bb062325b3aefc736e3beac209a9ccf03b4888194fb0033ba4907ea11ffac25b1eb6f46b097ee2087df16d
- SSDEEP 12288:SUwuzHJZW6c8s/984+bqPtdti1EK4fNZPOGJSy0arEFwir9:6oHONOwPtdtpNFOGJSyuFwix
- TLSH T111454AB1B2E2787203E381D594761002F77C1927750C88A8F76CDCD7AAA58C9A777B78
- MD5 SHA1 SHA512 SSDEEP TLSH
extension/dist/main.js.LICENSE.txt
- SHA256 61a820909372707238aa36a3c251159fc1630658d7f74382b2ae6bdb56502afd
- MD5 a1487251175eb99441d71bcb4a90b4de
- SHA1 6d14777b33c8382104794fa9bded8fda89fc8ba0
- SHA512 e66aba600ee8663142d2ec9e81a195f30ffed6ce4f775606c31a439b3a5566798a8434825ee90f2e6b733b644a6bd002a44431deacec6de2e49cd98cad156ef3
- TLSH T1B5C02B8574545557E78402C03A8B7077034DF86D809CF4C0871C631270AC7FAEDB8943
- MD5 SHA1 SHA512 TLSH
extension/dist/scripts/connectionReport.sh
- SHA256 0c82c10fa85c6085ba9966ef77fa5b81e4edb2e434348795939fe5725938dbe9
- MD5 e63a6b9fe2e06e153be6ad315e7a64cf
- SHA1 461f36d036b4e32dec3e6d9c7b84188639509855
- SHA512 41bf050e5c40ca9f850efb560444cab644685fa8dcc1599bf73e7a1ac77d6c51fd1fe1ec9eb54f65ed718801a072e9ceeecdd78de983b3eb5b89b85df90acb8f
- TLSH T170710D96B8405CB1100BC479A5A36020BB36430F15116C2D7C2EE879AF357E8A3EE7EA
- MD5 SHA1 SHA512 TLSH
extension/dist/scripts/launchSSHAskpass.bat
- SHA256 1165658cec3aad2f3e9b16cc63e47c9b44f764a79586fbeff78ba8c80e5f8fce
- MD5 a519e2864689d90b69c562a228d2db8d
- SHA1 3067e859a9c96c4198d165c1d07679b3d9ed0aea
- SHA512 5854307c9477dc609feb7909a520460f4a916920f93abb3306b57ab6b62c4ef7c65a2e9fd854704991dd14af9543b9de49145d21bfc3489e1de6bd34e52ddff3
- TLSH T1D7B02B8C8100A6C925200AA29CD00C514BFCB1CC2A4CA42240D08C4020151402B83889
- MD5 SHA1 SHA512 TLSH
extension/dist/scripts/launchSSHAskpass.sh
- SHA256 d27ec501f86584c39b132a026f41d4ec220b2e74d257e36608d66c9a6d7fe259
- MD5 af143c9ad2dab4f3bbfb2f1b36699d12
- SHA1 959c143d798df2c97676c65e3c07f48b82bd2120
- SHA512 bf13f281ba22cd812c91e3c231cd8fa423c57e90451ba633f6cf16bf804ae5128410200e316e5e21608f993677eadba73f76ec25b2fd9e7df7fa8c6cf79ae78f
- TLSH T167B012CE4251CDCF3C5838704CD00C344D6D92C4055801335262C4963828120F7131C4
- MD5 SHA1 SHA512 TLSH
extension/dist/scripts/remoteServer.js
- SHA256 7830933a776b87d774d68e629944b6beab2b11128488e8348286c8fb69e85182
- MD5 b8a57bc213706a9c539f7b41cb23993c
- SHA1 4772a95b143d6a1bf58f14943ec8517c1383dddb
- SHA512 1278375a16f14ce28f9fc692744ea51b4c02aa79e58f73655e39df0a71580c767762fd15abd9661fa9234175c702923785e2c3c6915292f139692337ff606b85
- SSDEEP 192:vCE628mj+0jJuOWD04aj/kzk+JYNylJtFf341:vFB1dJuT04aj8zk+aNylJtF/s
- TLSH T18C12D949F9CA202A13F721B1507F4117B6A6AA34A3149C60E927C5D63EF8C1DF2637B9
- MD5 SHA1 SHA512 SSDEEP TLSH
extension/dist/scripts/sshAskClient.js
- SHA256 8f315c9a71b206dd1fec88e6fb49e70b78f625bbb6b55a6901b5c5b81324d046
- MD5 f3943fa9413ce7b51be9b261dbe4b5d7
- SHA1 010d5f2cdef61d1aa5974f8e16c74b70c4a9ef7a
- SHA512 87ca23b3b9d18ffcb18ba659b17fa35346adec4a6bc43b426796e6bc4d6cb25143423bddc2bcdb04fd296c1ca2ba751b7240a6e2613f8a9c66942ddc05d28bf1
- TLSH T1B3212E8389495A15239B36F5DC0B8522FAE7DB3023109D31720096DD3EE0D64E31339A
- MD5 SHA1 SHA512 TLSH
extension/dist/scripts/terminateProcess.sh
- SHA256 3a059155d6e35d0fc28732681f4420549772411f0117f38cc36efffc787311a5
- MD5 8b0ea5e655d3276ad896fc515014548e
- SHA1 332e34520fda0de66efba0518306c6765eb14fec
- SHA512 52be9f537d047305d29d37225fcd007825f82bd1ec4e9457ef34245528f9d31d4fda95e7e685553b2bd871b9e3fd4446c68deeedcdfa7c82e02bd2dfb25cc364
- TLSH T124D0220C7C6A8FB27B413021C6A3830E27CB12A1487E3C0C1AD23838B420390F06E0F8
- MD5 SHA1 SHA512 TLSH
extension/media/trafficGraph.css
- SHA256 d8306f7b14a7223b58b730a1bb6dfd65fa064cec04381113b54cad12b91a487c
- MD5 ea0841dd883381b8ec5fc854ec777e25
- SHA1 60e31aca066c7f6b5c1dc2bc86f01accb8ff1931
- SHA512 3958fbc38aaed9ad456e60084be81124ca91b10f14bb7c9de897c5a890a211da78787386976336b863451d17b01fab9fdcb16babdd8267804dd2533cb2c6df7c
- TLSH T1BB115753695314BAF86BBA646FFB8F5032DD2143885CC9B53E883A68CF452E4112250D
- MD5 SHA1 SHA512 TLSH
extension/media/trafficGraph.html
- SHA256 acc3c14e259a3892f1fa4972dc9b93c870c47eb0f581eb42b2a4ffc2ea982173
- MD5 9269bec0e9e9d6e8d5c8778bdac50013
- SHA1 2f11350ab129533b821852dd9b27707b54598b15
- SHA512 c05f56f38a0c21c8f5a0e032df986df87786426df9c91e793e3a21ef9b6d65e7bf92c14c049109ad805b08d776b2004b14d10412d7a50cddd25d94f92da49fe0
- TLSH T18B21026548F0512A14E091953DB1924F2FC1EE07D98B418871FD46D54FC3EC6CE8B089
- MD5 SHA1 SHA512 TLSH
extension/media/trafficGraph.js
- SHA256 277297d9d630c41e4515d77e0e5859395982427acd4a34bef4053e12ab195915
- MD5 ef0322257ffdec95e5a30fd826278647
- SHA1 7f0a9deb268e25f1de0c9c48f36ec9609d1327ba
- SHA512 a3da2ea271ebb3e51103c554277282326f5f8f1e9bb8226b3e6876d1ad4371729a245c44450bcabf9e76816ad661b78f778a089933c8beadc94c8534989ca70f
- TLSH T1B351C8D272B1A82ED116C2890C5CC3816369CC723A47964F753C4EF9AC15E46716BB73
- MD5 SHA1 SHA512 TLSH
extension/package.json
- SHA256 325ead8334a68681b000afaf989922771f56e700f68dd334a67345d7fb778899
- MD5 45cae632596116701422dd4746a95461
- SHA1 7c5d5cd7a835d80b1eb1f23fa84b824a2f6d663e
- SHA512 c2abcfaa9c7787d5fab47d1e730e4b6d2cfa12719c74cbc33dde460e7214428ab816a255e38bbc5e984b49260ae1a1a9e042904db096794411e9ebfccd403b52
- SSDEEP 384:cdXMLIihelgPv7/u7JL/k5pY9VrpXdjyMiakynShEdaB/Jgb:cdoIUH7/u7FM5pYugb
- TLSH T175A23C04C8798C630C9A20669CDA4152BA31931F6E647C2D3BDE985C8F5C9EFC1B97DE
- MD5 SHA1 SHA512 SSDEEP TLSH
extension/resources/icon.png
- SHA256 256b003f99571e68bb361537f82a82beb8f66f4f967b540f7c872c5242198991
- MD5 a12dc299bbc040e69a351beab4808819
- SHA1 58f8b592fbad817991ca80bef8e1f05e9cd77db2
- SHA512 5399972ac605e3997901b92bd9545394ddaa1adc510c3579760d1023c13a6df97964382e2fd5a8a4e7c2f3ce21776ba798e2b9cfc691b2eac2e73e1d60efa7dc
- SSDEEP 384:SnYKkTj+GpXNP2rKYN+SK9EfgDoPUDEKf7UJ:OYXjVerKwKCfg7TDUJ
- TLSH T13852DFC9223474F9D35F23478CAC2CAEDE6A127FD5225185AEC7735200F189EBDB8198
- MD5 SHA1 SHA512 SSDEEP TLSH