Find similar analyses in TI Lookup
Analysis date (UTC): 6 January 2026, 20:05Analysis environment: Windows 10 Pro, build 19044, x64

https://helicopter-edt-patrol-furnishings.trycloudflare.com/social/?ssa075

MD5:B549FA85F2C19A1BB3A09380F20D1D2B
SHA1:BD5211618418307E1471E7EDC1C25AAE8FF454AA
SHA256:B43CCA6D12C465623AA26ABAA509D245B26B511E70E3E74BCEC23F15863C9A0C

Analysis result

Threat level:Malicious activity
Tags:
telegram
Full analysis:Analysis https://helicopter-edt-patrol-furnishings.trycloudflare.com/social/?ssa075 Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Developer hotkeys prevention is present

  • msedge.exe (PID: 7488)

Checks supported languages

  • identity_helper.exe (PID: 2368)

Reads Environment values

  • identity_helper.exe (PID: 2368)

Reads the computer name

  • identity_helper.exe (PID: 2368)

Application launched itself

  • msedge.exe (PID: 7488)

Threats

PIDProcessClassMessage
7832msedge.exePotentially Bad TrafficSUSPICIOUS [ANY.RUN] Cloudflare Tunneling Service observed (.trycloudflare .com)
7832msedge.exePotentially Bad TrafficSUSPICIOUS [ANY.RUN] Cloudflare Tunneling Service observed (.trycloudflare .com)
7832msedge.exeMisc activityET INFO Observed trycloudflare .com Domain in TLS SNI
7832msedge.exeMisc activityET INFO Observed trycloudflare .com Domain in TLS SNI
7832msedge.exeMisc activityET INFO Observed trycloudflare .com Domain in TLS SNI
7832msedge.exeMisc activityET HUNTING TryCloudFlare Domain in TLS SNI
7832msedge.exeMisc activityET HUNTING TryCloudFlare Domain in TLS SNI
7832msedge.exeMisc activityET HUNTING TryCloudFlare Domain in TLS SNI
7832msedge.exeMisc activityET INFO External IP Lookup Domain (ipify .org) in DNS Lookup
7832msedge.exeMisc activityET INFO External IP Lookup Domain (ipify .org) in DNS Lookup

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED