hxxps://www[.]selyn[.]lol/api/download

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 18:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.selyn.lol/api/download
Sample261107-w9ly1set4x

Score

3^/10

discovery ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{BA25326F-F8FF-4223-9DC6-C9EED7BC1D59}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	msedge.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
4724	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4724	NOTEPAD.EXE

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4528 wrote to memory of 4352	4528	msedge.exe	85
PID 4528 wrote to memory of 4648	4528	msedge.exe	86
PID 4528 wrote to memory of 848	4528	msedge.exe	88
PID 4528 wrote to memory of 848	4528	msedge.exe	88
PID 4528 wrote to memory of 4160	4528	msedge.exe	87
PID 4528 wrote to memory of 4160	4528	msedge.exe	87
PID 4528 wrote to memory of 4160	4528	msedge.exe	87
PID 4528 wrote to memory of 4136	4528	msedge.exe	89
PID 4528 wrote to memory of 3800	4528	msedge.exe	90
PID 4528 wrote to memory of 4136	4528	msedge.exe	89
PID 4528 wrote to memory of 4136	4528	msedge.exe	89
PID 4528 wrote to memory of 3800	4528	msedge.exe	90
PID 4528 wrote to memory of 3800	4528	msedge.exe	90
PID 4528 wrote to memory of 1708	4528	msedge.exe	94
PID 4528 wrote to memory of 6028	4528	msedge.exe	95
PID 4528 wrote to memory of 1708	4528	msedge.exe	94
PID 4528 wrote to memory of 6028	4528	msedge.exe	95
PID 4528 wrote to memory of 5328	4528	msedge.exe	96
PID 4528 wrote to memory of 4084	4528	msedge.exe	97
PID 4528 wrote to memory of 5328	4528	msedge.exe	96
PID 4528 wrote to memory of 4084	4528	msedge.exe	97
PID 4528 wrote to memory of 4084	4528	msedge.exe	97
PID 4528 wrote to memory of 5608	4528	msedge.exe	98
PID 4528 wrote to memory of 4844	4528	msedge.exe	101
PID 4528 wrote to memory of 3180	4528	msedge.exe	106
PID 4528 wrote to memory of 3180	4528	msedge.exe	106
PID 4528 wrote to memory of 3180	4528	msedge.exe	106
PID 4528 wrote to memory of 5148	4528	msedge.exe	123
PID 4528 wrote to memory of 1872	4528	msedge.exe	124
PID 4528 wrote to memory of 2140	4528	msedge.exe	125
PID 4528 wrote to memory of 3372	4528	msedge.exe	126
PID 4528 wrote to memory of 3372	4528	msedge.exe	126
PID 4528 wrote to memory of 2476	4528	msedge.exe	135
PID 4528 wrote to memory of 2476	4528	msedge.exe	135
PID 4528 wrote to memory of 3056	4528	msedge.exe	139
PID 4528 wrote to memory of 3056	4528	msedge.exe	139
PID 4528 wrote to memory of 3936	4528	msedge.exe	161
PID 4528 wrote to memory of 3936	4528	msedge.exe	161
PID 4528 wrote to memory of 3136	4528	msedge.exe	162

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.selyn.lol/api/download
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff3d11c188,0x7fff3d11c194,0x7fff3d11c1a0
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,5821288136673462819,10944230593015072488,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,6111834452692838658,3762010350885338765,262144 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,18071486544622483357,13551660867233937387,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5612978522495930664,1694242632206528009,2097152 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,2749185966875872045,5635928388572453380,2097152 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,4188245997300265966,10315562055518901864,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,6641336169689294318,15859645769780980227,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,6814365688240965096,12335523052397066240,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5552,i,6513335128725614198,9293060984716209774,2097152 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,9417652540150987344,3413071540257851461,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,5752817834759222502,13840449206754474962,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,5752817834759222502,13840449206754474962,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6672,i,2193825674073281179,710458157747099993,2097152 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,10557585170746681635,1735241997309046825,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,14334268673085024608,16609535412982375817,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=140,i,4176822021343858082,11780547782307765439,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,13801634859867370091,15224711788309864752,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,47486410128943778,340056988463546396,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,13443718331639966984,14072813075643771134,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,1741086371016078521,9151119780875660199,524288 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,15631070530659957312,8125929672870236612,262144 --field-trial-handle=2252,i,16428985652340348840,3361331467369387734,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5584

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4220

C:\Users\Admin\AppData\Local\Temp\Temp1_SelynLauncher.zip\SelynLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_SelynLauncher.zip\SelynLauncher.exe"
1⤵
PID:4320

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:2608

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:3856

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
1⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow
PID:4724

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:2940

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:2236

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:4780

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:6036

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:5928

C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe
"C:\Users\Admin\Downloads\SelynLauncher\SelynLauncher.exe"
1⤵
PID:4496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

14d3ff54-6411-4702-a653-fd7f76dfd3e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\14d3ff54-6411-4702-a653-fd7f76dfd3e9.tmp
Size 25KB
SHA256 635f1ded1fd35891f32ef31ec4eaa29f71ef17afd06477ad6f0fdb76bcd33cc8
MD5 f5ab80f93ab698e4c13842f6c3ff36d3
SHA1 0f3d386ec2b0c9d2b89f037213c4967c12624b5b
SHA512 0db40ab8fab6f1709ae5be2c5343d1c0b8be7dd59568f7b3bc054e4de88182fde88e7698f85f2bb7f115dafe5762a201ed86a999f9350d04722f509b5d3bab55
SSDEEP 384:n/iFiZcI63sN38TUNTUlIm2aKMi34w2f0BChCAQP4XG7O6R2FeoZgL/7IzEoj:KFQ63WwgcUZBChFQwXG7TRrg
TLSH
T174C25C32EC98CAABECFA4F9AA74E3A47EEF00163949C5AC4D9D81D1D009359D1707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33813861-04ec-423f-b1dd-cfe3c360629d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33813861-04ec-423f-b1dd-cfe3c360629d.tmp
Size 25KB
SHA256 2ae5a44a9857e4ae7f150475cf5d5328c7c6235f3f6b5a540ffea5c7913d4d5c
MD5 033ae3afcb312f30e4060a72452efba0
SHA1 23567f2a4c2551fdb3dec0ee4ea4856755ed9170
SHA512 90820b74b278d01ff59b8398a7a6151a2d95022f3b51156b63843e04348ff6447d60dbb7c136be20a88490c85e7558e1c7428ff08f2703fa915958e04e413d48
SSDEEP 384:n6iFiZcIj3sNz8TUNTUlI4saKMFTaw2f0BChCAQPwuikOOHjgL/7Izcoi:xFQj3ywg4HfBChFQYZkO35
TLSH
T1FAC25A72D8A8C9ABFCEA8BD9E74A3603DDF04123D59C9AD4D9DD2D1D009719E030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c12fdeb-3304-4a43-8b81-8ed2aa131ea8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c12fdeb-3304-4a43-8b81-8ed2aa131ea8.tmp
Size 27KB
SHA256 353946379b9609ad7dac832265df1791fdd12bca0377298e40bc8581170afa26
MD5 b993604a03d0303377323620ec4a4c17
SHA1 07a45cf61e1a1822c4dd0dca68d307278974eb75
SHA512 5978a1bfd281eb72542f282c3aba238ec32b24a25e47418ebd33fcbf43c19aa5948e0741a0d6026addb4d1582fba034ac89fe0ece189bbd7dd8a06146e6f7f0c
SSDEEP 384:nviFVQkUSvGsNz8TUNTUlI4qaKM6Taw2f0BChCAQPwudkOH7vBEnaOgL/7IzeII/:6FvGywgqufBChFQYckOH75EaHL/
TLSH
T17FC24A72E898DAABECE64B95E34E3647EEE04253D99C5AD4D9CD1C1D00CB1DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4405ba68-2aba-4bca-a0a7-e062b097ed8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4405ba68-2aba-4bca-a0a7-e062b097ed8e.tmp
Size 26KB
SHA256 d2be2b47650012e4e52b3c2efce9968eddbce03a7d0a2b365691f3b0ff088c7a
MD5 19a2384bc3468faf7a08038fd652b270
SHA1 5f3c14ad2ed1156ce63318d456ef294a96155a9c
SHA512 1a7400ff1445d5d02c8b00cd8e60a3f5e58ec5a0dca20ebbbd29663b4f55e93d4b75d35ca37fb65485a1c3bf704eb8b8bffa031b201175a0832c78f57262f1dc
SSDEEP 384:n9iFiZcI63sNX8TUNTUlIm2aKMIM7w2f0BChCAQPwuCkO7O6R2FeoZgL/7IzEoj:0FQ63CwgcDOBChFQYHkO7TRrg
TLSH
T13CC25B72E898C9ABFCE64BD9A74A3A07DDF04263D58C9AC4D9DC2D1D009B59D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

603446b7-6637-466f-8e93-26e316241b2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\603446b7-6637-466f-8e93-26e316241b2c.tmp
Size 26KB
SHA256 a75d206b064974d65a3c9751a3d522c0fc62e9d4b22060e88f6bf3a2aa774abd
MD5 5f9a026b7832273f68a65112637d0871
SHA1 ae253449f074cefa6f2b507f00a1d2a09f82c2c3
SHA512 2a6405361a9a8e9b813df02b493a5a922b32c868be54ba1d8e481cd8b767ebeb7d8f81c0fd550d4e173a5f095a42c1f55d8b09bfcdfe3230cf2734e34e1aa40a
SSDEEP 384:n6iFzQkUSvGsNz8TUNTUlI4GaKM6Taw2f0BChCAQPwudkOH7vBEnaOgL/7IzeII/:xFdGywgWufBChFQYckOH75EaHL/
TLSH
T15EC25A32E898DEABECE64B95E34A3A47EEE04253D89C5AD4D9CD1C1D00CB1DD130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

0dcec85d-687f-400b-b5c3-4463f1d837d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dcec85d-687f-400b-b5c3-4463f1d837d9.tmp
Size 11KB
SHA256 6b49f151a8c56d82d61b79fae9d423f0bbd363dcf188d2484e3876f3c37dfa9a
MD5 29e90cc3899ed74a580ef5254f9c613a
SHA1 1cb61cff2844a6736158cf40b0eebe765bddbc3a
SHA512 3638731f2cbb30e66f770cc708b7dcf9ea7e285e436c5aed61fbfb9e39c68a21cbfefd61378011c9f42e935bdfa036cb56829ae92025a813adf752a938b86654
SSDEEP 192:sxZzRt96b/fzshaQZLK84zodpLHW6+WNGYoF2SSHtaIg5mt9J:sxZzl6b/fzsUO9LLHbG1SkYtH
TLSH
T1BF42D8166E28A93B9CC7D219FB557F53E3F9503290D11E48AAFC9A1C05E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38a6e05f-a347-4237-b901-cdd5cc931ffd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38a6e05f-a347-4237-b901-cdd5cc931ffd.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59cf6505-4aa8-4043-a58b-507549dde130.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\59cf6505-4aa8-4043-a58b-507549dde130.tmp
Size 414B
SHA256 0e06d95bc29d7268c23e17e8b763cd21f21d4ec815b718d03f9c9eaee353f24a
MD5 d1f378c4e41bf1e6dcbc3420c6bb4011
SHA1 713a311c69bc9ce176e2c5ed6808bd8fc16501f7
SHA512 7316e02d78328481c62d8272d032a318eaa99ca2ffafa30d0aa8897537a6d7b2936524e4663d116071cd948c6eb60a6de1700a61caa57033b6f9f5ca0a092fcf
TLSH
T140E022BAC921EC3B1CFE0B7C64940685FB10232B2A91A94B3B3D85088FB07374186D6C
MD5 SHA1 SHA512 TLSH

Submit Download

94384b14-6350-4211-a6ac-f2d0da60a02e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\94384b14-6350-4211-a6ac-f2d0da60a02e.tmp
Size 11KB
SHA256 5a8abe6a14014b06699661d02f9e440d2fbefe27c1162f901f8e650f193dfe10
MD5 476ae054d4bced71d8f159174786ea47
SHA1 7f541ff35ddf9d353bf56b3cde5cfda4d45f64c3
SHA512 62ae03cc0e4a67315b2982ee98264f22e2cbb64060b36b237351d775da9222cce739b4ccb1cf86142ecb99c0f7576959613e3dd42d97bf997889cbdcb29ec622
SSDEEP 192:sxZzRt96b/fzs5aQZLK84zodpLHW6+WNGYoFLSSHtaIgjt9J:sxZzl6b/fzssO9LLHbGmSkjtH
TLSH
T11532D7166E28A93B9CC7D209FB55BF53D3F9503295D11E48AAFC8A1C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 caf9b46f28cfd449e57b3a441ab95c211394094fcc8e4675d10d0eb9f72e16af
MD5 335e85cea1125b6a4657aa1f9d44615a
SHA1 1716580f75f9c7f50ddd722891c6d86d52c9c340
SHA512 18416965f1e760c00d5fccb5aa2c8c63c182ac53c2f11bff9b1f4b0620c2d144473c06eff94f2abda98c629646161d1cf6ec17a9898de8297b81ed8825b0709e
TLSH
T15DE026D815CCC32EB648A88B02A8774CC2C0361AE3C0AA0F5F4CCD9C7683080A2A67B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d029cd4e391b97df3232b8de86509058ce543fd60bc001943beb3af5f972075a
MD5 0188ecc3b37e56c59fe45487677f9c25
SHA1 1f75e4f0c63af9d2e8c4b6d94da04c57d8150545
SHA512 23543479d10d873c20f1e5f97115dcb09c8bef9f430844737e20912b9a06b0ffb838ee5244cf14423c7bffc3604ab06a8fc55e6d3f70ac2b1eaf294232b82648
TLSH
T16BE0CDD405CDC62FA60DA54B02E8774C82D0361EF7C4BF5E1798C48D7643944B3D76A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2cd164320a94011d48b264b821beec14741975deb3693640c9ccbd5126d002a3
MD5 14c585ed4a2a9a9d955596f125d4a0f4
SHA1 a732a17dbe7d6422dfe9c5b23b97ea025f8cefcd
SHA512 466ec6f9eb8f37f6803464b0b4ff3915527596f4f21da3921d06b765461647681589c060ef0527a7bfb759284b2b34682478de55c5296766430fcc92de242c02
TLSH
T120E07DC544CECA2EA648665B41E8730CC3C03A2FE3C0FA1E174CCCCA7603A40B2C76A0
MD5 SHA1 SHA512 TLSH

Submit Download

6b603c8d-12ed-462e-bd5d-57167d5a44dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6b603c8d-12ed-462e-bd5d-57167d5a44dc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3e498452-3368-48fd-a1c8-484a57ec2fb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3e498452-3368-48fd-a1c8-484a57ec2fb1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7275a717-be21-427c-8141-c6a24f1bc532.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7275a717-be21-427c-8141-c6a24f1bc532.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a4f93e7e-f4a3-40b8-a8b0-25dd16c10cbb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4f93e7e-f4a3-40b8-a8b0-25dd16c10cbb.tmp
Size 1KB
SHA256 af61b2c9bfbcdb8f25bcf1096b1725440c7872577e00ed95bb99740860b72e81
MD5 0c5695009c3d05737a491ab95b1bc79d
SHA1 5fc43d8491b0f52b7bedb9608692640d6d51e4c4
SHA512 2e0f9f8b891e4d91e62043795622127945be703574b481c48d5c4d31da3175e9aa9973a83fa0d788e658cd5374501e0119effda45f49af77a559439253dbac15
TLSH
T14E31AEF787F4856E8A0196F0AA18EE2FCE5D0514832C7DA9C4E4AE2B93E3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 86e24df7ef00fe0d67fb549ff3339071ce358a79f1c4d5c573c74d5d1c43f58d
MD5 f4ab90347f769af621514d9926538b22
SHA1 a60ecfea04edb585e99837f8106a56dd123307f9
SHA512 c3b3291969a0d2d5b457fa4d0278ffef284da4f5991243c402f6d2afd49c769a6d69f1a05d0ceb40b1cbff5131c3f88f7342fa39c503944537ca620cb17fd304
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdg4:ST/2dXOJhJlpfnpp3tNXVrN38I5pE
TLSH
T186B2111571BB425039FE291891B69B2E064231B33119E67B7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a9ab0184-a27f-4fa1-9739-bbcc45483b8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a9ab0184-a27f-4fa1-9739-bbcc45483b8a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

b3341628-67c1-4c3e-9545-5941a450a746.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b3341628-67c1-4c3e-9545-5941a450a746.tmp
Size 11KB
SHA256 425aefe1753aaa4a515842517601bd2578c0cf193996abdcc1ac484f514e0865
MD5 3c539e6fcd72143aff5e70cf9a4ceca3
SHA1 93a41743493650f5d776ed930ac96d1a98e15099
SHA512 b94a4da51b105c5c7a848122e0369ab260cc83fd1a3f6421fe354f3e0b6a7f6ebf930819f63c1e15dd817fde084375123413720f75ec6f70a80b0483c7892482
SSDEEP 192:sxZzRt96b/fzsAQZLK84zodpLHW6+WNGYonB2SSHtaIg5mt9J:sxZzl6b/fzsAO9LLHbGNSkYtH
TLSH
T11C42D8156E28693B9CC7D219FB557F53E2F9503290D11E48AAFC9A1C05E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4bc96a8-aabc-480e-b770-8c7c1a642617.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4bc96a8-aabc-480e-b770-8c7c1a642617.tmp
Size 27KB
SHA256 d2415559cd11d185233b8167d9c43c08a69be7755179cc2ee8a0fedb4eee7853
MD5 1aac6d34d7f6bc3ac94a975b8bf361a6
SHA1 35cdf912eedc8064b10510754fa0fdeaac12b2e7
SHA512 e243650ab07e52f1e01398b8ecf7e03e68fc2c48d3696199f3a1791918a129a5dcdf2b6b8964962c1cc3a942d9a26d9acb1b340c3e2a4c0af3efc63a09a3e0a2
SSDEEP 384:n6iFVQkUSvGsNz8TUNTUlI4qaKM6Taw2f0BChCAQPwudkOH7vBEnaOgL/7IzeII/:xFvGywgqufBChFQYckOH75EaHL/
TLSH
T13EC24A72E898DAABECE64B95E34A3647EEE04253D99C5AD4D9CD1C1D00CB1DE130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d529b422-775b-40ea-b311-b64a57d6d465.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d529b422-775b-40ea-b311-b64a57d6d465.tmp
Size 27KB
SHA256 a92b115ffc13ff48167d162d5c0fa82d4e2aaa0435b5aa80c4b91bb6de07bf1e
MD5 6bfb3c0e39ffefa72fa71fb3e173f32a
SHA1 406aa26042aa533d3aa3879cd4b2640847c6b69b
SHA512 6e953664687d4ea63a80c534ba4ec87bd6a772f289c87bddcc8b3483fa5838313657f84b36ace488f253586439e1bb7fdef74714f0a54e96dcb2e3634a4005e6
SSDEEP 384:nuiFVQkUSv8ZsNz8TUNTUlI4qaKM6Taw2f0BChCAQPwu1sOH7vBEnaOgL/7IzeIk:FFvKywgqufBChFQYksOH75EaHL/
TLSH
T143C24A72E898DE6BECE64B95E34E3647EEE08253D99C5AD4D9CD1C1D00C719E130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9e0f494003838d86f9461c4d2f27b4ca4e1eb4f6d52d2f68647d951997113f1f
MD5 f90615e5bb64d6620886f15353b0f9ef
SHA1 c2abef02b5d5de9bf9f0b4f5486bad2069ab38ad
SHA512 94f1a613d7a6f476f22835b7f034f831342988aa9bcb8372a514c7780ed306a718102d946063a2a4011d003cc1de1ce9fda73cd665a30ba6ae96ec61fad8c4ff
TLSH
T15041486CA7E91108B3B77E169BF6A86E487B79372E4AD4AD10110E4F0662B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

SelynLauncher.zip.crdownload

Path C:\Users\Admin\Downloads\SelynLauncher.zip.crdownload
Size 364KB
SHA256 947c135af5ccc825ef7635ab1915af70a958a61623b61883eddbf28a422113c8
MD5 b850ab36d470961af44348b9726cc982
SHA1 d15e8b2f2d60d772f6dbc69b23f11ca609a9c8c6
SHA512 ff8663f495c4983e27b58d93d00821dc9ee6e28d8d55a573980b8c29f0410e6a0f847e8c66906d65f62ffcfb1bda2039bad15d9e57fbb4fd6f740c4f83677cf1
SSDEEP 6144:OGmbsftFGjDxEcd9CELa0L3pi0D6uS9P2hZYV06ZRwAYiIQq/4cPwHuj32:Ot41Fo6cnCu3pD49PLq6pHLYPbG
TLSH
T130842358D9AFCEB5AF2CCD0AD914C709EE5918EE4C5087490901FC19A49DF8EA4F2CD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelynLauncher.zip.crdownload

Path C:\Users\Admin\Downloads\SelynLauncher.zip.crdownload
Size 364KB
SHA256 947c135af5ccc825ef7635ab1915af70a958a61623b61883eddbf28a422113c8
MD5 b850ab36d470961af44348b9726cc982
SHA1 d15e8b2f2d60d772f6dbc69b23f11ca609a9c8c6
SHA512 ff8663f495c4983e27b58d93d00821dc9ee6e28d8d55a573980b8c29f0410e6a0f847e8c66906d65f62ffcfb1bda2039bad15d9e57fbb4fd6f740c4f83677cf1
SSDEEP 6144:OGmbsftFGjDxEcd9CELa0L3pi0D6uS9P2hZYV06ZRwAYiIQq/4cPwHuj32:Ot41Fo6cnCu3pD49PLq6pHLYPbG
TLSH
T130842358D9AFCEB5AF2CCD0AD914C709EE5918EE4C5087490901FC19A49DF8EA4F2CD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 48B
SHA256 3c7b743c4d300722473388ce56d8584637ac63a5224d6deb8504d01e6c0c1ee9
MD5 1761efccadb5b537a50ea0200701d051
SHA1 fab40f9f1fe507d66ed933a110d8273da850550b
SHA512 e3cb4bdc5b3f3f3d2710c1a62f7f96581aa89d456fdbb055667054ee8ff26a9643f5e4141ef68883853ec1a3a4d6644eebf20ebc06d1b83409c566e71a2a30a0
MD5 SHA1 SHA512

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 96B
SHA256 2c1ed0ad315f561ab748a45d1a6e2873afc2c26b448b5835a542796d7f410856
MD5 edfaf97ab8b4b9b8eeb4866500479231
SHA1 1e95a4a5047cc2e47c95f6bc2cecceae3003b2bc
SHA512 4ef079719ea295f6ad774e0ade1d04ce0375ce6eace188dff148f272eeb4dde62569e885da23a3115e6f5056e829c5c4fe7f3eaa8b3f2685418f19b2cf8a489b
TLSH
T10AB002B9154B15714F8953DC4C355D0154457078B638D17D538CDC3551475DADC15105
MD5 SHA1 SHA512 TLSH

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 192B
SHA256 afe7452e1a2495bc074257e21c9502f1ea3d30ecf7b0f106b0107a807916263a
MD5 55783cbe508b0775064059d5ac043c6b
SHA1 07d47b24c25104683a35dfc0ddcaa031bf9bc588
SHA512 d75cfa492c140bb10dba11a325ac46e06ef9b8b921d42f183d23c315ed64eab0bb5c5f59c7cb4816f887389676e76a256e1dae75a0cec90e306bc064f7c547f0
TLSH
T1FAC002B8144B11718F8E63EC4D359D00A44570B8B73CD17E638CDC3A51439DBDC15106
MD5 SHA1 SHA512 TLSH

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 240B
SHA256 ea423ae797c04a5016653c50821128491ee5e68c45aef21103e9bc41e8f9b52c
MD5 08b04609dfb2e31f83f5f8ed4cdff3f3
SHA1 ff13d4cecd153433381ea766f5f4400467482e5a
SHA512 6529d5d86b9fa9e3bb4a647ef830b1ad3d9c8f1f7d71f59c9400959b676ab46b87d88037777a77979b3ac67497fac53a38c00b4ab7ce8cc6f0525c698ccd150c
TLSH
T18DD0CEB8148B11758F8E63EC4D359D00A44570B8B63CD17E638CDC3A51439DBDC15106
MD5 SHA1 SHA512 TLSH

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 336B
SHA256 5c525869245947eedf97f0d05e3daec98aa91bce78c1443c9593e61a30920d0d
MD5 32cb19a07db1d68f15acc18633cb1789
SHA1 6f6d65d53b970d8716d47ed3057f91bcd395801a
SHA512 a4b44a93f07479c140fca3c1358069b65c9a06e89faa6f8a2c738bc0355cf450e1eb091b44184c78d67c8df68d194d89f1b309f5250509a69b3b54311d8a5ab0
TLSH
T179E0A6B8148B11759F8E63ED4D359D00A44570B8B63CD17E738CDC3A51479DBDD15106
MD5 SHA1 SHA512 TLSH

Submit Download

loader.log

Path C:\Users\Admin\Downloads\SelynLauncher\logs\loader.log
Size 384B
SHA256 4a72c982f59f4bce53ecbb38560984d0e743d2152093b07fae607a807c32fd55
MD5 9ecb051b8ac811a8d41da29f6a017345
SHA1 1bd377f7022a0af30395df132b119e2f7dd36551
SHA512 3884c04421ae218dc48792a95cf85a03223b69daafd3e33fbe66a4f2089caaddb714fc03c2aa2eba3cefed1bc55428d8540b21496046a1fdac11a72787788435
TLSH
T1DFE098B9148B11759F8E63ED4D369D00A44570B8B63CD17EB38CDC3A51879EBDD15106
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4844-202-0x000001E861F50000-0x000001E862F50000-memory.dmp

Download