11eba074da438e2de3f25f2a965aa215ed88cef4cebc9080fba82567dbac1adf

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2023-Oct-16 21:40:53
Comments
CompanyName LumenTrace Logistics Software GmbH
FileDescription Freight tracking and route optimization platform for global logistics operators with fleet telematics, customs documentation, and ETA prediction.
FileVersion 38.9.2.6802
InternalName LTLS_FleetRoute_2026_v38.9.2_x64_setup_win64_hotfix5
LegalCopyright © 2026 LumenTrace Logistics Software GmbH. All Rights Reserved.
LegalTrademarks LumenTrace, LumenTrace Logistics Suite are registered trademarks of LumenTrace Logistics Software GmbH.
OriginalFilename LTLS_FleetRoute_2026_v38.9.2_x64_setup_win64_hotfix5
ProductName LumenTrace Logistics Suite
ProductVersion 38.9.2.6802
Assembly Version 38.9.2.6802

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • schtask
 Looks for VMWare presence:
  • vmware
 Looks for Sandboxie presence:
  • SbieDll.dll
 Accesses the WMI:
  • root\Security
Malicious VirusTotal score: 51/69 (Scanned on 2026-08-30 06:51:26) ALYac: Generic.AsyncRAT.Marte.B.9E95CDD4
APEX: Malicious
AVG: MSIL:AsyncRat-E [Pws]
AhnLab-V3: Trojan/Win32.RL_Generic.R358277
Antiy-AVL: Trojan[Backdoor]/MSIL.Crysan
Arcabit: Generic.AsyncRAT.Marte.B.9E95CDD4
Avast: MSIL:AsyncRat-E [Pws]
Avira: TR/AsyncRat.E
BitDefender: Generic.AsyncRAT.Marte.B.9E95CDD4
Bkav: W32.Malware.E85AEF3B
CAT-QuickHeal: Trojan.IgenericFC.S14890850
CTX: exe.unknown.asyncrat
ClamAV: Win.Packed.Razy-9625918-0
CrowdStrike: win/malicious_confidence_100% (D)
Cylance: Unsafe
DeepInstinct: MALICIOUS
DrWeb: Trojan.Siggen9.56514
ESET-NOD32: MSIL/AsyncRAT.A trojan
Elastic: Windows.Generic.Threat
Emsisoft: Generic.AsyncRAT.Marte.B.9E95CDD4 (B)
F-Secure: Trojan.TR/AsyncRat.E
Fortinet: MSIL/AsyncRAT.A!tr
GData: MSIL.Backdoor.DCRat.D
Google: Detected
Jiangmin: Backdoor.MSIL.gguk
K7AntiVirus: Trojan ( 005678321 )
K7GW: Trojan ( 005678321 )
Kaspersky: HEUR:Backdoor.MSIL.Crysan.gen
Malwarebytes: Generic.Trojan.MSIL.DDS
MaxSecure: Trojan.Malware.300983.susgen
McAfeeD: Real Protect-LS!617BFC11A56D
MicroWorld-eScan: Generic.AsyncRAT.Marte.B.9E95CDD4
Microsoft: Backdoor:MSIL/AsyncRat!atmn
NANO-Antivirus: Trojan.Win32.AsyncRAT.lhhviy
Panda: Trj/GdSda.A
Rising: Trojan.AntiVM!1.CF63 (CLASSIC)
Sangfor: Suspicious.Win32.Save.a
SentinelOne: Static AI - Malicious PE
Sophos: Troj/AsyncRat-B
Symantec: Backdoor.ASync!g2
Tencent: Trojan.Msil.Agent.zap
Trapmine: suspicious.low.ml.score
TrellixENS: Fareit-FZT!617BFC11A56D
TrendMicro: Backdoor.MSIL.ASYNCRAT.SMXSR
TrendMicro-HouseCall: Backdoor.MSIL.ASYNCRAT.SMXSR
VBA32: OScope.Backdoor.MSIL.Crysan
VIPRE: Generic.AsyncRAT.Marte.B.9E95CDD4
Varist: W32/Samas.B.gen!Eldorado
VirIT: Trojan.Win32.MSIL_Heur.A
ZoneAlarm: Troj/AsyncRat-B
huorong: Backdoor/MSIL.DcRat.a

Hashes

MD5 617bfc11a56dfe853ec776d7214b2a25 🔍
SHA1 54caab1d7ddf5eea2535d346a638091aed9b06ee 🔍
SHA256 11eba074da438e2de3f25f2a965aa215ed88cef4cebc9080fba82567dbac1adf 🔍
SHA3 952d2140054ee85514d71c1c929119e2b262334f0be341d176fd3e4f7c6d4430 🔍
SSDeep 768:GuKXpTt2/9bNWU5fGrmo2qrT+gMHnqjPI9zjb1gX3i9cCoUJ5x69PLBDZz3A:GuKXpTtyC2/fHqs93bSXSuCXStddjA 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2023-Oct-16 21:40:53
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0xac00
SizeOfInitializedData 0xe00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000C9FE (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xe000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x12000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d942cf8455a7561ce3a1380dfa68c372 🔍
SHA1 d4ccefd7f5b44c627ba002f1ba0335dbd187e7c0 🔍
SHA256 66afdf3f6324bfc5914c4774ab270ef383b0ffaee36433ad5f7c0a4feb1bf20b 🔍
SHA3 cda4fac85c78aa8a28c88814c3ff3b6f4cf1cd4085854a726737e06c1d086766 🔍
VirtualSize 0xaa04
VirtualAddress 0x2000
SizeOfRawData 0xac00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.47176

.rsrc

MD5 63cb38bce249045abd2b4dd190c3ec11 🔍
SHA1 02f83d66b718baf2dc6cb343b3ac9306cc6a072f 🔍
SHA256 9cfb1cb0ffc50f66d1b2cb362a07265d5397da1aab54966396ebf05140dd3de8 🔍
SHA3 5228c2955b070dea559126a1918b886d28fe28167472345e1e67d34837b188d4 🔍
VirtualSize 0xbb0
VirtualAddress 0xe000
SizeOfRawData 0xc00
PointerToRawData 0xae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.73441

.reloc

MD5 7d09a9cfb7f6f4658c9d795acc4f1685 🔍
SHA1 2d39692f3f4e3f6d3d14f7186b37635c9fd18965 🔍
SHA256 7cc10d89b948c77abfd16f509849d021e8a0f89325a35a76efbbb816b26ca8a8 🔍
SHA3 930efcb9048a7b897f8ee15323a9da8d11101a98eb45f2b0c20200927881f149 🔍
VirtualSize 0xc
VirtualAddress 0x10000
SizeOfRawData 0x200
PointerToRawData 0xba00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0611629

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x67c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53454
MD5 fe8c66a21370fa099583a4af40b318c3 🔍
SHA1 7b0ad4138bcfef7b587daa5500bbab2210bc2f39 🔍
SHA256 44bc325b99b2f5f6ea66cbf158d64effa2e2d50595f891eda22a09b3f66ee28f 🔍
SHA3 35eeb12d7ec650050fc3bcafb4fcf59cd7f3ec944a310e1e3e369b1d611fd3db 🔍

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x493
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.22615
MD5 f3d7095de1636559aa56ad81b25bbff9 🔍
SHA1 6a55e1445c1c915664fba385828c5a0078fe460d 🔍
SHA256 4ff1c75a93b2280dabe75acecade82d644388c9f4412565d846aeb396bfdc133 🔍
SHA3 66d420e8633fd20ebea3048e5ed6afe3cf66dcb6d5041729ab7c7faa44b0a1b0 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 38.9.2.6802
ProductVersion 38.9.2.6802
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments
CompanyName LumenTrace Logistics Software GmbH
FileDescription Freight tracking and route optimization platform for global logistics operators with fleet telematics, customs documentation, and ETA prediction.
FileVersion (#2) 38.9.2.6802
InternalName LTLS_FleetRoute_2026_v38.9.2_x64_setup_win64_hotfix5
LegalCopyright © 2026 LumenTrace Logistics Software GmbH. All Rights Reserved.
LegalTrademarks LumenTrace, LumenTrace Logistics Suite are registered trademarks of LumenTrace Logistics Software GmbH.
OriginalFilename LTLS_FleetRoute_2026_v38.9.2_x64_setup_win64_hotfix5
ProductName LumenTrace Logistics Suite
ProductVersion (#2) 38.9.2.6802
Assembly Version 38.9.2.6802
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment
🔒 Transfer # E0855 from Coinbase. SIGN IN => graph.org/Bitcoin-M 16 hours ago
🔒 Transfer # E0855 from Coinbase. SIGN IN => graph.org/Bitcoin-Mining-08-27?hs=6e8ed7152b81f55cee7b515e11a7a4bf& 🔒