7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43
Classification: Malicious
7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 16 antivirus detections
- 0 IDS alerts
- 40 processes observed
- 8 contacted hosts
- 13 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-10-05 05:41:27 | 2026-09-02 11:45:03 | malicious-activity | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-21 09:11:30 | 2024-09-21 09:11:30 | malicious-activity |
Tags
evasiveSample information
- Filenames
- 7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43, 7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43.exe, file
- File type
- application/x-dosexec
- Size
- 921600 bytes
- MD5
12680cc07b60fee49c247cbb24334dfb- SHA-1
d5c5b61932a5ab7bcc5a9959e839cc7985b62cb5- SHA-256
7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43- First indexed
- 2024-09-21 09:20:17
- Last updated
- 2026-09-02 11:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of Win32/Autoit.ORF |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.12680cc07b60fee4 |
| Fortinet | W32/Autoit.ORF!tr |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| McAfeeD | Real Protect-LS!12680CC07B60 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Sangfor | Trojan.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Genericuh.dh |
| huorong | Trojan/AutoIT.Agent.d |
Network contacts
142.251.219.170 142.251.40.238 142.251.163.84 142.251.40.227 142.250.80.99 20.99.186.246 142.250.80.78 142.251.41.4
DNS requests
detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net accounts.google.com arc.msn.com fonts.gstatic.com play.google.com www.google.com www.gstatic.com www.youtube.com
Process list
| Name | Command line |
|---|---|
| 7dc996f2b4239f3d887db701c7a7e0fc6e23b0d97a1bf3f79a183b03e0f6fe43.exe | |
| msedge.exe | --kiosk --edge-kiosk-type=fullscreen --no-first-run --disable-features=TranslateUI --disable-popup-blocking --disable-extensions --no-default-browser-check --app=https://www.youtube.com/account |
| msedge.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Microsoft\Edge\User Data Kiosk" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Microsoft\Edge\User Data Kiosk\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 "--annotation=exe=%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0xdc,0x7ff916ceb208,0x7ff916ceb218,0x7ff916ceb228 |
| msedge.exe | --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1852 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:3 |
| msedge.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2040 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:8 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2910512163 --mojo-platform-channel-handle=2988 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2910741735 --mojo-platform-channel-handle=3012 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2911000793 --mojo-platform-channel-handle=3496 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2911246566 --mojo-platform-channel-handle=3512 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2911512383 --mojo-platform-channel-handle=3564 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2911746483 --mojo-platform-channel-handle=3540 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2911976217 --mojo-platform-channel-handle=3704 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2912229084 --mojo-platform-channel-handle=3724 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2912470328 --mojo-platform-channel-handle=3740 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2912731315 --mojo-platform-channel-handle=3756 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2912971276 --mojo-platform-channel-handle=3532 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2913191119 --mojo-platform-channel-handle=3768 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2913409496 --mojo-platform-channel-handle=3792 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2913637177 --mojo-platform-channel-handle=3808 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2913882865 --mojo-platform-channel-handle=3832 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2914119975 --mojo-platform-channel-handle=3848 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2914340655 --mojo-platform-channel-handle=3872 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --extension-process --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2914603894 --mojo-platform-channel-handle=3888 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2914831115 --mojo-platform-channel-handle=4020 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2915063315 --mojo-platform-channel-handle=4064 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2915289060 --mojo-platform-channel-handle=4068 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2915518442 --mojo-platform-channel-handle=4092 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2915740196 --mojo-platform-channel-handle=5428 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-databases --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --time-ticks-at-unix-epoch=-1728128453763396 --launch-time-ticks=2915959832 --mojo-platform-channel-handle=5984 --field-trial-handle=1908,i,15396020116594036182,6600643656446929221,131072 --disable-features=TranslateUI /prefetch:1 |