File name:

Universal IPTV Scan v2.0.rar

Full analysis: https://app.any.run/tasks/d8d57440-af33-4291-83be-9987e9533f12
Verdict: Malicious activity
Analysis date: November 13, 2020, 17:53:07
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-rar
File info: RAR archive data, v5
MD5:

EA346F6DDC69CEB33D8DCD3ECA86076A

SHA1:

B75796B5544B4D58FA15EB73E37462E2D2924453

SHA256:

A344F87A8CAE58F4D14E26C1AE8117E8D86ADC5D6F503163BE235385E12EDDAF

SSDEEP:

393216:DsU3zp4zUzrpreJMtKUVnReJgHrIYeleK:DjDVHpKJMtdhL/eleK

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • Universal IPTV Scan v2.0.exe (PID: 1196)
      • Universal IPTV Scan v2.0.exe (PID: 2236)

    • Loads dropped or rewritten executable

      • Universal IPTV Scan v2.0.exe (PID: 2236)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Universal IPTV Scan v2.0.exe (PID: 2236)

    • Reads the BIOS version

      • Universal IPTV Scan v2.0.exe (PID: 1196)
      • Universal IPTV Scan v2.0.exe (PID: 2236)

  • INFO

    • Manual execution by user

      • Universal IPTV Scan v2.0.exe (PID: 2236)
      • Universal IPTV Scan v2.0.exe (PID: 1196)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.rar | RAR compressed archive (v5.0) (61.5)
.rar | RAR compressed archive (gen) (38.4)
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
37
Monitored processes
3
Malicious processes
1
Suspicious processes
1

Behavior graph

Click at the process to see the details
start winrar.exe no specs universal iptv scan v2.0.exe universal iptv scan v2.0.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1196"C:\Users\admin\Desktop\Universal IPTV Scan v2.0.exe" C:\Users\admin\Desktop\Universal IPTV Scan v2.0.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Description:
Universal IPTV Scan
Exit code:
0
Version:
1.0.0.0
Modules
Images
c:\users\admin\desktop\universal iptv scan v2.0.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
2236"C:\Users\admin\Desktop\Universal IPTV Scan v2.0.exe" C:\Users\admin\Desktop\Universal IPTV Scan v2.0.exe
explorer.exe
User:
admin
Integrity Level:
MEDIUM
Description:
Universal IPTV Scan
Exit code:
0
Version:
1.0.0.0
Modules
Images
c:\users\admin\desktop\universal iptv scan v2.0.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
3052"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\Universal IPTV Scan v2.0.rar"C:\Program Files\WinRAR\WinRAR.exe—explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Exit code:
0
Version:
5.60.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
Total events
990
Read events
940
Write events
49
Delete events
1

Modification events

(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3052) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\13B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\Universal IPTV Scan v2.0.rar
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
(PID) Process:(3052) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:mtime
Value:
100
(PID) Process:(1196) Universal IPTV Scan v2.0.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Operation:writeName:NodeSlots
Value:
0202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202
(PID) Process:(1196) Universal IPTV Scan v2.0.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Operation:writeName:MRUListEx
Value:
0100000000000000020000000B000000070000000A000000090000000800000006000000030000000500000004000000FFFFFFFF
Executable files
1
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
3052WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3052.34202\key.txt —
MD5:—
SHA256:—
3052WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3052.34202\Universal IPTV Scan v2.0.exe —
MD5:—
SHA256:—
3052WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3052.34202\urls.txt —
MD5:—
SHA256:—
2236Universal IPTV Scan v2.0.exeC:\Users\admin\AppData\Local\Temp\b99b1e0c-aae1-45b6-bf25-ac74246646c8\Br4uNTr@Ck.dllexecutable
MD5:105E678E6EE84E0FA7FBE34DF1F9639C
SHA256:4EF4551D44FDE6E46C470314B0B89F6418A54EEE3F1AD9EB7456B2A20E3065A2
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

No data

DNS requests

No data

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Universal IPTV Scan v2.0.rar