80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b
Classification: Malicious
80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.
Detection summary
- 34 antivirus detections
- 1 IDS alerts
- 37 processes observed
- 10 contacted hosts
- 19 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-10-23 09:30:03 | 2026-09-02 16:45:06 | malicious-activity |
Tags
windows-server-utility evasiveSample information
- Filenames
- 80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b, 80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 919552 bytes
- MD5
042ca8acf27d1431e029b2aa0bb19dfc- SHA-1
ed98f75a1ecbf95f5e25f8736a488a548b2770b7- SHA-256
80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b- First indexed
- 2024-10-23 09:20:05
- Last updated
- 2026-09-02 16:45:07
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AVG | FileRepMalware [Misc] |
| Avast | FileRepMalware [Misc] |
| Avira | TR/AutoIt.idbhe |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen29.49197 |
| ESET-NOD32 | a variant of Win32/Autoit.ORL |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/AutoIt.idbhe |
| FireEye | Generic.mg.042ca8acf27d1431 |
| Fortinet | AutoIt/Agent.ORL!tr |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Kingsoft | Win32.Troj.Unknown.a |
| Malwarebytes | Trojan.Injector.AutoIt |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfee | Artemis!042CA8ACF27D |
| McAfeeD | Real Protect-LS!042CA8ACF27D |
| Microsoft | Trojan:Win32/CredentialFlusher.CCJG!MTB |
| NANO-Antivirus | Trojan.Script.Agent.ksrqww |
| Rising | Stealer.Browser/Autoit!1.10428 (CLASSIC) |
| Skyhigh | BehavesLike.Win32.Genericuh.ch |
| Sophos | Troj/AutoIt-DHF |
| Tencent | Unk.Win32.Script.404787 |
| VBA32 | Trojan.Autoit.Flush |
| Varist | W32/AutoIt.ABS.gen!Eldorado |
| VirIT | Trojan.Win32.AutoIt_Heur.K |
| Webroot | W32.Trojan.Script |
| ZoneAlarm | UDS:DangerousObject.Multi.Generic |
| huorong | Trojan/AutoIT.Agent.f |
Network contacts
142.251.121.95 142.251.111.84 142.250.176.206 142.250.80.99 142.250.65.227 142.250.65.163 142.251.40.234 142.251.40.142 142.251.40.238 142.251.32.100
DNS requests
d156sk07toobyl.cloudfront.net detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net accounts.google.com accounts.youtube.com clients1.google.com clientservices.googleapis.com content-autofill.googleapis.com fonts.gstatic.com optimizationguide-pa.googleapis.com play.google.com www.google.com www.gstatic.com www.youtube.com youtube.com
Process list
| Name | Command line |
|---|---|
| 80ede1824d66c38aaccff7459cbf5a12b4e6799041f1db1817cbdc7016f8e67b.exe | |
| taskkill.exe | taskkill /F /IM msedge.exe /T |
| taskkill.exe | taskkill /F /IM opera.exe /T |
| taskkill.exe | taskkill /F /IM brave.exe /T |
| chrome.exe | "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --start-fullscreen --no-first-run --disable-session-crashed-bubble --disable-infobars |
| chrome.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=122.0.6261.112 --initial-client-data=0xb8,0xbc,0xc0,0x94,0xc4,0x7ff973ecdc40,0x7ff973ecdc4c,0x7ff973ecdc58 |
| chrome.exe | --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1948 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:2 |
| chrome.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=2772 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:3 |
| chrome.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=3608 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1729698341765372 --launch-time-ticks=2092754962 --mojo-platform-channel-handle=3768 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1729698341765372 --launch-time-ticks=2092938360 --mojo-platform-channel-handle=3916 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --time-ticks-at-unix-epoch=-1729698341765372 --launch-time-ticks=2094496056 --mojo-platform-channel-handle=4264 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=renderer --enable-chrome-cart --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --time-ticks-at-unix-epoch=-1729698341765372 --launch-time-ticks=2095415446 --mojo-platform-channel-handle=3920 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:1 |
| chrome.exe | --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --mojo-platform-channel-handle=4432 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4584 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5348 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5600 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5612 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5728 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5664 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5656 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5280 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5744 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5724 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5716 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5776 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5416 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5872 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5708 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |
| chrome.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5676 --field-trial-handle=1952,i,9648609063296092380,4973896124048299377,262144 --variations-seed-version=20240307-180129.405000 /prefetch:8 |