Manalyze report for df3bd290e284b15ab2368c1b2e87f8420bda6c11997b9b5f626751ec58cd15eb

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-Sep-01 15:26:47
FileDescription
FileVersion	`0.0.0.0`
InternalName	LumiaPortableCrack.exe
LegalCopyright
OriginalFilename	LumiaPortableCrack.exe
ProductVersion	`0.0.0.0`
Assembly Version	0.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to security software: rshell.exe` `Contains another PE executable: This program cannot be run in DOS mode.` `Miscellaneous malware strings: System32\drivers\etc\hosts` `Contains domain names: https://188.114.96.5 https://v2.theflzz.site https://v2.theflzz.site/uploads/icons/a8499e48b5d770e039a04f203cb3918b50cde7185bca3442.png`
Malicious	VirusTotal score: 28/70 (Scanned on 2026-09-02 11:50:15)	`ALYac: QD:Trojan.GenericKDQ.8DA190C89B` `APEX: Malicious` `AVG: Win64:MalwareX-gen [Misc]` `AhnLab-V3: Trojan/Win.Generic.C5817777` `Arcabit: QD:Trojan.GenericQ.8DA190C89B` `Avast: Win64:MalwareX-gen [Misc]` `BitDefender: QD:Trojan.GenericKDQ.8DA190C89B` `Bkav: W32.Malware.C49916C` `CTX: exe.trojan.generickdq` `CrowdStrike: win/malicious_confidence_70% (D)` `Cylance: Unsafe` `DeepInstinct: MALICIOUS` `Elastic: malicious (high confidence)` `Emsisoft: QD:Trojan.GenericKDQ.8DA190C89B (B)` `GData: QD:Trojan.GenericKDQ.8DA190C89B` `Ikarus: PUA.VMProtect` `Malwarebytes: Malware.AI.4203470577` `MaxSecure: Trojan.Malware.300983.susgen` `McAfeeD: Real Protect-LS!A7CCF12AEC27` `MicroWorld-eScan: QD:Trojan.GenericKDQ.8DA190C89B` `Microsoft: Trojan:Win32/Wacatac.B!ml` `Rising: Trojan.Kryptik@AI.80 (RDML:ynVRjxT/Qtv6HFgT//HAqw)` `Sangfor: Suspicious.Win32.Save.a` `SentinelOne: Static AI - Malicious PE` `Sophos: CrackTool (PUA)` `Symantec: ML.Attribute.HighConfidence` `Trapmine: malicious.moderate.ml.score` `VIPRE: QD:Trojan.GenericKDQ.8DA190C89B`

Hashes

MD5	`a7ccf12aec2745f73c28f6d5a2ef18fc` 🔍
SHA1	`de1ec5f0d45b5d2e0834bbd055060be572ee582f` 🔍
SHA256	`df3bd290e284b15ab2368c1b2e87f8420bda6c11997b9b5f626751ec58cd15eb` 🔍
SHA3	`13406271fd283586eec3b91e85d3baff568d3c08266da05ef947ec3ccf944aa7` 🔍
SSDeep	`393216:rwbZdiw0459I+BU61NfNE74bQGn18C0QpG8:0bZdS4c10lEXGn18C0QpG8` 🔍
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-Sep-01 15:26:47
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`11.0`
SizeOfCode	`0x142c800`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0142E5FE (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x1430000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x1434000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`d2698f89ac87895bdd9280ade943b5df 🔍`
SHA1	`7fd34d594476c21d75e15beb3cf744cbca253ac3 🔍`
SHA256	`3686997d1c177c979141ee0ba6fbd2e797341e79513a16fc72f536e30c9d2ece 🔍`
SHA3	`ba1252373e11363e391580c5e01a847ef97bd24ce310ac5e19b6c2846a494f6c 🔍`
VirtualSize	`0x142c604`
VirtualAddress	`0x2000`
SizeOfRawData	`0x142c800`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.85412`

.rsrc

MD5	`a46abf7006db6ee433c551a80f0a7c19 🔍`
SHA1	`772b2ca712f6a2da19885b1abb838512aeb57a3a 🔍`
SHA256	`93aa9a5423f63dec85c49d00fe4d5ee2d461cffbcaa3f5af359848e9e9b466ba 🔍`
SHA3	`021918f1e6e5baffadc558d16930d3fed05a90c3f2a2b5ab6dcd7f9e24f2308f 🔍`
VirtualSize	`0x498`
VirtualAddress	`0x1430000`
SizeOfRawData	`0x600`
PointerToRawData	`0x142ca00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.37769`

.reloc

MD5	`4b97a652af29492a0294b5c1b5c208d7 🔍`
SHA1	`23842b4d28e5a0ab6fa7d1ab37820c4fc9f35894 🔍`
SHA256	`0db37c2c548f961281a7b8f685155fb2b0488fd82f893b56b15c4bc351e56987 🔍`
SHA3	`2a6c9d395ef6fbb6b95c617aeed5a7c5686fe1417704086244d0d4050efee374 🔍`
VirtualSize	`0xc`
VirtualAddress	`0x1432000`
SizeOfRawData	`0x200`
PointerToRawData	`0x142d000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x274`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18934`
MD5	`6057b7cfcd13e9c362cb715d7cbbe6b5 🔍`
SHA1	`ca9816a61aabe889f12b6b0840a36b5bfc6ba8bc 🔍`
SHA256	`a27d6eeebddaedf24274be36bb07b87bab8664bccff448f7a58924dd186d9955 🔍`
SHA3	`dcbfb7844d16f895054d678338d474632045801ee1142cedda3303138c6ece41 🔍`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x17e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.8258`
MD5	`4c95ce3366e916fb03f5259fa12285dc 🔍`
SHA1	`7ca66f4fe130cf42147678dce410eae31e6411f1 🔍`
SHA256	`cdfd94d676e194a42d9ba1d0b061e99b93e6079a8cc39933a515ce2fa84b690e 🔍`
SHA3	`8c8034990c6dbce339eb727b89fbfcecc10f9b972e8712365c3933b0f3a6fb7a 🔍`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	0.0.0.0
ProductVersion	0.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
FileDescription
FileVersion (#2)	0.0.0.0
InternalName	LumiaPortableCrack.exe
LegalCopyright
OriginalFilename	LumiaPortableCrack.exe
ProductVersion (#2)	0.0.0.0
Assembly Version	0.0.0.0

Resource LangID	UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.