7db1c1f1392f84b88a5100af4042abfd72ee3a7708c67155ad3c6082b7cbd6f4
Classification: Malicious
7db1c1f1392f84b88a5100af4042abfd72ee3a7708c67155ad3c6082b7cbd6f4 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 21 antivirus detections
- 0 IDS alerts
- 25 processes observed
- 13 contacted hosts
- 14 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-09-09 16:30:14 | 2026-09-02 11:45:04 | malicious-activity | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-06 11:52:47 | 2024-09-06 11:52:47 | malicious-activity |
Tags
evasiveSample information
- Filenames
- 7db1c1f1392f84b88a5100af4042abfd72ee3a7708c67155ad3c6082b7cbd6f4, 7db1c. Trojan.exe, file
- File type
- application/x-dosexec
- Size
- 917504 bytes
- MD5
11bd4625b4c8f650d10bc4d758dc2f2d- SHA-1
07f5cf0a5dc7138c3d1d482e6b7fee6bc81915f8- SHA-256
7db1c1f1392f84b88a5100af4042abfd72ee3a7708c67155ad3c6082b7cbd6f4- First indexed
- 2024-09-06 12:20:18
- Last updated
- 2026-09-02 11:45:05
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Avira | TR/Redcap.obzri |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of Win32/Autoit.ORE |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/Redcap.obzri |
| FireEye | Generic.mg.11bd4625b4c8f650 |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Malwarebytes | Trojan.Injector.AutoIt |
| McAfeeD | Real Protect-LS!11BD4625B4C8 |
| Microsoft | Program:Win32/Wacapew.C!ml |
| Rising | Trojan.Injector/Autoit!1.1020D (CLASSIC) |
| Skyhigh | BehavesLike.Win32.Genericuh.ch |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Script.Trojan.Generic.Aujl |
| ZoneAlarm | HEUR:Trojan.Script.Generic |
Network contacts
142.251.163.84 142.251.218.227 142.251.218.131 142.251.219.170 142.251.219.46 142.251.152.119 142.251.218.110 142.251.179.84 142.250.72.195 20.75.60.91 142.251.214.142 142.250.189.164 23.38.113.9
DNS requests
accounts.google.com accounts.youtube.com detectportal.firefox.com fonts.gstatic.com mozilla.map.fastly.net play.google.com prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net www.google.com www.gstatic.com www3.l.google.com arc.msn.com
Process list
| Name | Command line |
|---|---|
| 7db1c.Trojan.exe | |
| msedge.exe | https://accounts.google.com/ServiceLogin?service=accountsettings&continue=https://accounts.google.com/v3/signin/challenge/pwd |
| msedge.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 "--annotation=exe=%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x158,0x7ff9ec15b208,0x7ff9ec15b218,0x7ff9ec15b228 |
| msedge.exe | --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1880 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:3 |
| msedge.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2212 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1725922029748488 --launch-time-ticks=1077960149 --mojo-platform-channel-handle=2980 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1725922029748488 --launch-time-ticks=1078218491 --mojo-platform-channel-handle=2988 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:1 |
| msedge.exe | --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=3416 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5064 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5236 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5248 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=entity_extraction_service.mojom.PageScreenshotProcessor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5536 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5984 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5388 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2492 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2632 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1720 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4424 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.16299.192 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5556 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3988 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5184 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3460 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2480 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5536 --field-trial-handle=1844,i,4087853738271879160,15231410630487757427,131072 /prefetch:8 |