We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
2 December 2024, 18:12
Analysis environment:
Windows 10 Pro, build 19045, x64
Bandicam 4.5.2 Crack With License code Free Download (2).7z
MD5:
4BD1C9E08659217C507F6EC4FAD28E06
SHA1:
997B6083534CE27E7FE11C291EA09812908BB91C
SHA256:
4B1E86F00A1147DA3794C3347782BCF9D7F8BA4CC50DEF362410BE1B3D1A27CE
Analysis result
Threat level:
Malicious activity
Tags:
autoit
autoit-loader
lumma
Full analysis:
Analysis Bandicam 4.5.2 Crack With License code Free Download (2).7z (MD5: 4BD1C9E08659217C507F6EC4FAD28E06) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
LUMMA has been detected (YARA)
Deviation.com (PID: 6012)
AutoIt loader has been detected (YARA)
Deviation.com (PID: 5916)
SUSPICIOUS
Get information on the list of running processes
cmd.exe (PID: 7104)
Using 'findstr.exe' to search for text patterns in files and output
cmd.exe (PID: 7104)
Starts CMD.EXE for commands execution
bandicam 4.5.2 crack with license code free download.exe (PID: 7060)
cmd.exe (PID: 7104)
Executing commands from ".cmd" file
bandicam 4.5.2 crack with license code free download.exe (PID: 7060)
Application launched itself
cmd.exe (PID: 7104)
Executable content was dropped or overwritten
cmd.exe (PID: 7104)
The executable file from the user directory is run by the CMD process
Deviation.com (PID: 5916)
Starts the AutoIt3 executable file
cmd.exe (PID: 7104)
Starts application with an unusual extension
cmd.exe (PID: 7104)
INFO
Creates a new folder
cmd.exe (PID: 5880)
Manual execution by a user
bandicam 4.5.2 crack with license code free download.exe (PID: 7060)
Deviation.com (PID: 6012)
The process uses the downloaded file
WinRAR.exe (PID: 6732)
Threats
No threats detected