Find similar analyses in TI Lookup
Analysis date (UTC): 7 March 2025, 07:57Analysis environment: Windows 10 Pro, build 19045, x64

kbjfree.com

MD5:1C2E912827A70BFE59554CE1A64B0675
SHA1:0A2ABF4A3118753FD607EE62541FE279E5EAFD5C
SHA256:F2C90653FF1BC05B6BCD54BF34A282196B9F6E7CD8CA3CACDCDCFB203B226820

Analysis result

Threat level:Malicious activity
Full analysis:Analysis kbjfree.com Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Reads the computer name

  • identity_helper.exe (PID: 3300)

Checks supported languages

  • identity_helper.exe (PID: 3300)

Checks proxy server information

  • BackgroundTransferHost.exe (PID: 8636)

Reads Environment values

  • identity_helper.exe (PID: 3300)

Reads security settings of Internet Explorer

  • BackgroundTransferHost.exe (PID: 8384)
  • BackgroundTransferHost.exe (PID: 8636)
  • BackgroundTransferHost.exe (PID: 9040)
  • BackgroundTransferHost.exe (PID: 8808)
  • BackgroundTransferHost.exe (PID: 6372)

Reads the software policy settings

  • BackgroundTransferHost.exe (PID: 8636)

Application launched itself

  • msedge.exe (PID: 4880)

Creates files or folders in the user directory

  • BackgroundTransferHost.exe (PID: 8636)

Threats

PIDProcessClassMessage
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)
7408msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Web apps custom Builder (.my .id)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED