javascript- detected in chrome cache, but not sure what it does.

[Nirv5668]

Hopefully I am posting in the right place. I posted some of this in Comodo thread, but thought I should post actual file here...how do I do that? Can I not upload .zip?

here is VT:
https://www.virustotal.com/en/file/...e7ddafb104c3ba077ca6fbfe/analysis/1430055611/

Comodo detected "TrojWare.JS.Agent.PD" during scheduled scan in Chrome cache stream file. Shortly before that, there was a bitcoin related pop-up, which was strange b/c I haven't seen a pop-up in years. I wish I could remember URL's, but I had since used ccleaner. Just got stream file out of quarantine. I extracted it, looked at script, appears to be some java script? HMP.A did not alert, which I thought it would, but maybe the javascript did nothing but open new window rather than being trojan. Is there any way to tell/recreate?

 

[LabZero]

You can post your sample here, filling in the required fields :

http://malwaretips.com/forums/upload-malware-samples.126/

 

[Nirv5668]

You can post your sample here, filling in the required fields :

http://malwaretips.com/forums/upload-malware-samples.126/

I am not able to analyze at hybrid-analysis because it is a text file (java script code).

 

[LabZero]

I am not able to analyze at hybrid-analysis because it is a text file (java script code).

I see that you create the thread

 

[Nirv5668]

I see that you create the thread

Yes, thank you for your help! I just posted the link to the hybrid analysis error- hopefully this was ok

 

[LabZero]

Yes, thank you for your help! I just posted the link to the hybrid analysis error- hopefully this was ok

I downloaded the file but it is not a Windows executable file, so I think it's a false positive.

 

[LabZero]

Report : https://wepawet.iseclab.org/view.php?hash=8216ae583863e34d6eb3d389c750be7a&type=js
No malware.

 

[Nirv5668]

Report : https://wepawet.iseclab.org/view.php?hash=8216ae583863e34d6eb3d389c750be7a&type=js
No malware.
View attachment 55552

Okay, great. Thank you! I didn't know about this tool. I am book marking it. Glad to know I didn't visit some completely sketchy website