7ef29faa083ee8b3cdefc199376db03176a3836893fc936d8577a9ff2cd6c638
Classification: Malicious
7ef29faa083ee8b3cdefc199376db03176a3836893fc936d8577a9ff2cd6c638 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.
Detection summary
- 0 antivirus detections
- 1 IDS alerts
- 37 processes observed
- 12 contacted hosts
- 19 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-10-23 03:15:11 | 2026-09-02 13:45:06 | malicious-activity |
Tags
windows-server-utility evasiveSample information
- Filenames
- 7ef29faa083ee8b3cdefc199376db03176a3836893fc936d8577a9ff2cd6c638, 7ef29. Trojan.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 919552 bytes
- MD5
9e021d4a1ade07659e330408b0a36832- SHA-1
3ba679d9886022c9275d7ab925e224e63d8a8700- SHA-256
7ef29faa083ee8b3cdefc199376db03176a3836893fc936d8577a9ff2cd6c638- First indexed
- 2024-10-23 02:52:35
- Last updated
- 2026-09-02 13:45:06
Network contacts
142.251.219.170 142.251.111.84 142.250.80.99 142.250.176.206 142.251.32.110 142.250.65.227 142.250.65.163 142.250.80.42 142.251.40.142 142.251.40.238 142.251.32.100 172.217.165.138
DNS requests
d156sk07toobyl.cloudfront.net detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net accounts.google.com accounts.youtube.com clients1.google.com clientservices.googleapis.com content-autofill.googleapis.com fonts.gstatic.com optimizationguide-pa.googleapis.com play.google.com www.google.com www.gstatic.com www.youtube.com youtube.com
Process list
| Name | Command line |
|---|---|
| 7ef29.Trojan.exe | |
| taskkill.exe | taskkill /F /IM msedge.exe /T |
| taskkill.exe | taskkill /F /IM opera.exe /T |
| taskkill.exe | taskkill /F /IM brave.exe /T |
| chrome.exe | "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --start-fullscreen --no-first-run --disable-session-crashed-bubble --disable-infobars |
| chrome.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=122.0.6261.112 --initial-client-data=0xb0,0xb4,0xb8,0x8c,0xbc,0x7fff304cdc40,0x7fff304cdc4c,0x7fff304cdc58 |
| chrome.exe | --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1828 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:2 |
| chrome.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=2948 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:3 |
| chrome.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=3052 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1729674661752236 --launch-time-ticks=2522069631 --mojo-platform-channel-handle=3612 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1729674661752236 --launch-time-ticks=2522315298 --mojo-platform-channel-handle=3948 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --time-ticks-at-unix-epoch=-1729674661752236 --launch-time-ticks=2523687315 --mojo-platform-channel-handle=4124 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --time-ticks-at-unix-epoch=-1729674661752236 --launch-time-ticks=2524761298 --mojo-platform-channel-handle=4068 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --mojo-platform-channel-handle=4460 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4608 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5348 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4864 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5440 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5732 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4876 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5716 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4320 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4860 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5676 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5728 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5724 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5732 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5720 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5816 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5820 --field-trial-handle=1832,i,11659066997142532598,4567506484006713963,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |