File name:

Netflix (1).rar

Full analysis: https://app.any.run/tasks/ebe17da5-a1af-458d-956e-c493b6866f61
Verdict: No threats detected
Analysis date: December 28, 2019, 16:19:59
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
MIME: application/x-rar
File info: RAR archive data, v4, os: Win32
MD5:

41E28E200809331FC8ED66EEDA104F96

SHA1:

D5B19A4BB008C13604EF0BB4BF797932C34E6F26

SHA256:

6D5196CEFB2E435D3E78AFBC475AE15477AB7A49590193102C88077AA019C764

SSDEEP:

24576:e/SksduatNQVcN4hXOkKXKLKJZGBduZbn1C3rrgMfazwHstMvN0TMDWAR6eLg73U:9ksduati3hXLKXJGBGQrrxfowHstMrpH

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    No malicious indicators.
  • SUSPICIOUS

    No suspicious indicators.
  • INFO

    • Manual execution by user

      • NetFlix GC Checker by xRisky.exe (PID: 1896)
      • NFGenerator.exe (PID: 1608)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.rar | RAR compressed archive (v-4.x) (58.3)
.rar | RAR compressed archive (gen) (41.6)

EXIF

ZIP

CompressedSize: 43584
UncompressedSize: 118272
OperatingSystem: Win32
ModifyDate: 2019:02:19 16:26:03
PackingMethod: Normal
ArchivedFileName: Netflix gift code pack\Netflix Gift Card Checker by xRisky\Leaf.xNet.dll
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
38
Monitored processes
3
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe no specs nfgenerator.exe no specs netflix gc checker by xrisky.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1608"C:\Users\admin\Desktop\Netflix gift code pack\NFGenerator.exe" C:\Users\admin\Desktop\Netflix gift code pack\NFGenerator.exeexplorer.exe
User:
admin
Integrity Level:
MEDIUM
Description:
NFGenerator
Exit code:
0
Version:
1.0.0.0
Modules
Images
c:\users\admin\desktop\netflix gift code pack\nfgenerator.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
1896"C:\Users\admin\Desktop\Netflix gift code pack\Netflix Gift Card Checker by xRisky\NetFlix GC Checker by xRisky.exe" C:\Users\admin\Desktop\Netflix gift code pack\Netflix Gift Card Checker by xRisky\NetFlix GC Checker by xRisky.exeexplorer.exe
User:
admin
Company:
NetFlix GC Checker by xRisky
Integrity Level:
MEDIUM
Description:
NetFlix GC Checker by xRisky
Exit code:
0
Version:
1.0.0.0
Modules
Images
c:\users\admin\desktop\netflix gift code pack\netflix gift card checker by xrisky\netflix gc checker by xrisky.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
2600"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\Netflix (1).rar"C:\Program Files\WinRAR\WinRAR.exeexplorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Exit code:
0
Version:
5.60.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
Total events
444
Read events
425
Write events
19
Delete events
0

Modification events

(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(2600) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\Netflix (1).rar
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:mtime
Value:
100
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\MainWin
Operation:writeName:Placement
Value:
2C0000000000000001000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF42000000420000000204000037020000
(PID) Process:(2600) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\General
Operation:writeName:LastFolder
Value:
C:\Users\admin\AppData\Local\Temp
Executable files
0
Suspicious files
0
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\Leaf.xNet.dll
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\MetroSuite 2.0.dll
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\NetFlix GC Checker by xRisky.exe
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\Read before using.txt
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\YouTube 2.lnk
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\Netflix Gift Card Checker by xRisky\YouTube.lnk
MD5:
SHA256:
2600WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa2600.2655\Netflix gift code pack\NFGenerator.exe
MD5:
SHA256:
1608NFGenerator.exeC:\NetflixGenerator\codes.txttext
MD5:9C77EE4270198D5A7E8DD42C7FEADBE0
SHA256:8C7D0D0E74E24E9998A397DCC6E11FFAC7E4530C3CCB1BA218FDFC25477BD7C4
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

No data

DNS requests

No data

Threats

No threats detected
No debug info