vs_Community[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
vs_Community.exe
Size 4.2MB
Sample261027-pbb8lacy41
SHA256 f88a66f11051066d202c70a2405962be83767d53399a5616ef652c466f6c2005
MD5 001f2a38c9b3a5fe7a60ad3d9ff0a1ab
SHA1 32c1f6185384558f1fbefb648c364806d1301316
SHA512 c8d9679f63e38903715618115f467604b0715eb10c88b3276c067ad771a80c4c599a79c516eac54700315eac4d5119a7cab6a9ed9f15d9db057c67e7feb20c99
SSDEEP 98304:jE4hXChyqKfp4sYJLtTfRKcDpBTrRs4E4/79HFJfy2CdMy:2KB4dLtTfRKyp9G6/79Hzfen
TLSH
T1AE2622127DC4247FCC6F5935471FEAB2097A68D07B8109DE5B90362E8C3568284BEEE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

vs_Community.exe

.exe 4.2MB

vs_Community.exe

IMPHASH f7ac7099f7da46a6a84119e000454199
SHA256 f88a66f11051066d202c70a2405962be83767d53399a5616ef652c466f6c2005
MD5 001f2a38c9b3a5fe7a60ad3d9ff0a1ab
SHA1 32c1f6185384558f1fbefb648c364806d1301316
SHA512 c8d9679f63e38903715618115f467604b0715eb10c88b3276c067ad771a80c4c599a79c516eac54700315eac4d5119a7cab6a9ed9f15d9db057c67e7feb20c99
SSDEEP 98304:jE4hXChyqKfp4sYJLtTfRKcDpBTrRs4E4/79HFJfy2CdMy:2KB4dLtTfRKyp9G6/79Hzfen
TLSH
T1AE2622127DC4247FCC6F5935471FEAB2097A68D07B8109DE5B90362E8C3568284BEEE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

8f:f4:77:7e:e2:22:74:41:54:ee:d6:0f:f7:af:69:24:6f:10:d9:02:3d:f5:ff:4c:8a:6f:86:77:9b:94:30:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 24, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1c:fa:cd:c5:9b:e8:2f:7e:c4:00:00:00:00:02:1c

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

122976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\_work\1\s\bin\BoxStub\Release\Win32\boxstub.pdb

ole32

CoInitializeEx

comctl32

ord17

rpcrt4

UuidCreate UuidToStringW RpcStringFreeW

shell32

SHGetPathFromIDListW CommandLineToArgvW ShellExecuteExW SHBrowseForFolderW

shlwapi

PathRemoveExtensionW

user32

GetWindowLongW SetWindowLongW PostQuitMessage EndDialog SetWindowTextW DialogBoxParamW SendMessageW GetWindow GetWindowThreadProcessId GetTopWindow MessageBoxW GetDlgItem LoadStringW PostMessageW

advapi32

RegCloseKey CryptGenRandom CryptReleaseContext DecryptFileW RegOpenKeyExW RegQueryValueExW CryptAcquireContextW

kernel32

FileTimeToDosDateTime FileTimeToLocalFileTime MoveFileExW GlobalFree GlobalAlloc SetCurrentDirectoryW GetCurrentDirectoryW RemoveDirectoryW GetFileAttributesW DeleteFileW FileTimeToSystemTime GetSystemInfo CreateEventA GetModuleHandleW GetTickCount SetEnvironmentVariableW GetLastError ExpandEnvironmentStringsW Sleep GetProcessId WaitForSingleObject GetExitCodeProcess CloseHandle SetFileAttributesW InitializeCriticalSection CreateEventW CreateThread DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent GetCommandLineW lstrlenW CompareStringW LocalFree CreateDirectoryW LoadLibraryW GetProcAddress GetSystemDirectoryW SetDefaultDllDirectories FreeLibrary WaitForMultipleObjects ExitThread TlsAlloc SystemTimeToTzSpecificLocalTime GetSystemTime GetTimeZoneInformation FormatMessageW GetTempPathW lstrlenA GetComputerNameW GetLocalTime GetVersionExW CreateFileA SetFileTime LocalFileTimeToFileTime InitializeCriticalSectionAndSpinCount ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer FreeLibraryAndExitThread TlsGetValue TlsSetValue TlsFree LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc ReadFile DecodePointer CreateFileW WriteConsoleW DuplicateHandle FindFirstFileW SetEndOfFile SetFilePointer DosDateTimeToFileTime

cabinet

ord23 ord22 ord20

oleaut32

VariantClear SysAllocString

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

bcrypt

BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider

Sharing

General

Malware Config

Signatures

File Explorer

vs_Community.exe

ole32

comctl32

rpcrt4

shell32

shlwapi

user32

advapi32

kernel32

cabinet

oleaut32

version

bcrypt

generic