Analysis date (UTC): 5 October 2025, 22:53Analysis environment: Windows 10 Pro, build 19044, x64

mixdrop.vc

MD5:29D3D5F8E9A9DE47E208E0B30F135B2E
SHA1:F9B668169760276EDC55B743F57891742468B125
SHA256:1DF09848A5BAC95376A0CEB01AEEAA2FC53300516403631F8C08859A0C1A5589

Analysis result

Threat level:Malicious activity
Tags:
phishingwebsocket

Behavior activities

MALICIOUS

PHISHING has been detected (SURICATA)

  • msedge.exe (PID: 2120)

SUSPICIOUS

No suspicious indicators.

INFO

Application launched itself

  • msedge.exe (PID: 5888)

Reads Microsoft Office registry keys

  • msedge.exe (PID: 5888)

Checks supported languages

  • identity_helper.exe (PID: 8808)

Reads the computer name

  • identity_helper.exe (PID: 8808)

Reads Environment values

  • identity_helper.exe (PID: 8808)

Threats

PIDProcessClassMessage
2120msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Suspected Phishing Domain (daleelerah .info)
2120msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Suspected Phishing Domain (daleelerah .info)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Tag Manager analytics (googletagmanager .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
2120msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Tag Manager analytics (googletagmanager .com)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN