File name:

IDM All Products KeyGen v3.6.zip

Full analysis: https://app.any.run/tasks/09e07bce-d144-4c73-801b-91c87f81cec8
Verdict: No threats detected
Analysis date: September 21, 2019, 11:20:25
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract
MD5:

8B4A597E1B1A9775A37521F28226EBD6

SHA1:

E25206F1F864ED54E04C89CB7DBDE85B600C303D

SHA256:

EA04EDE9AB1A16F7B2CD92B2B9F2741BB6039E0A9E01EF6E174A3C60AC3D0ABC

SSDEEP:

3072:MhRjnSf9lDJi72ejwNM5yAQCR6Zp8vtFPjfV5IVA91mtajovHKvr2+TBEL51wleW:GRStIyywN8KCML8X+A3masvHm2GcW

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Loads dropped or rewritten executable

      • IDM All Products KeyGen v3.6.exe (PID: 1168)

    • Application was dropped or rewritten from another process

      • IDM All Products KeyGen v3.6.exe (PID: 1168)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 2496)
      • IDM All Products KeyGen v3.6.exe (PID: 1168)

  • INFO

    No info indicators.
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: 0x0800
ZipCompression: Deflated
ZipModifyDate: 2014:12:24 14:59:14
ZipCRC: 0x0f22dfb9
ZipCompressedSize: 174369
ZipUncompressedSize: 180224
ZipFileName: IDM All Products KeyGen v3.6.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
35
Monitored processes
2
Malicious processes
0
Suspicious processes
1

Behavior graph

Click at the process to see the details
drop and start start winrar.exe idm all products keygen v3.6.exe

Process information

PID
CMD
Path
Indicators
Parent process
1168"C:\Users\admin\AppData\Local\Temp\Rar$EXa2496.34875\IDM All Products KeyGen v3.6.exe" C:\Users\admin\AppData\Local\Temp\Rar$EXa2496.34875\IDM All Products KeyGen v3.6.exe
WinRAR.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221225547
Modules
Images
c:\users\admin\appdata\local\temp\rar$exa2496.34875\idm all products keygen v3.6.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
2496"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\IDM All Products KeyGen v3.6.zip"C:\Program Files\WinRAR\WinRAR.exe
explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Exit code:
0
Version:
5.60.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
Total events
447
Read events
435
Write events
12
Delete events
0

Modification events

(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(2496) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\72\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\IDM All Products KeyGen v3.6.zip
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:mtime
Value:
100
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
0
(PID) Process:(2496) WinRAR.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
1
Executable files
4
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
1168IDM All Products KeyGen v3.6.exeC:\Users\admin\AppData\Local\Temp\Test.dat —
MD5:—
SHA256:—
1168IDM All Products KeyGen v3.6.exeC:\Users\admin\AppData\Local\Temp\wlMvnHNAgR.DLLexecutable
MD5:E4EC57E8508C5C4040383EBE6D367928
SHA256:8AD9E47693E292F381DA42DDC13724A3063040E51C26F4CA8E1F8E2F1DDD547F
1168IDM All Products KeyGen v3.6.exeC:\Users\admin\AppData\Local\Temp\YAmzXqVkMnBNuznZNnjK.DLLexecutable
MD5:76A9565C5F51775719EEBDA1F25530A5
SHA256:A1A7C4F74D4FE7784ED03709E5F946B94CC10A64E3AE0AD5A9A3BECE9A8A2C0A
1168IDM All Products KeyGen v3.6.exeC:\Users\admin\AppData\Local\Temp\ukWijekegZqvQLVdsjnr.DLLexecutable
MD5:E6144FB36C1FDC6BA1D1AFA9632588F8
SHA256:B141412D0611571DF381C26186B3FC438C725D6E45AD66FD76413322C17A9AC6
2496WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$EXa2496.34875\IDM All Products KeyGen v3.6.exeexecutable
MD5:8FB45F99C48601F22BE914A02CCA3EEA
SHA256:480B4D81D98FDE3AEA16703757FE9EF0B0A3B014FBB50514FCD573CD87CDB4E5
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

No data

DNS requests

No data

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
IDM All Products KeyGen v3.6.zip