2cd68e4da021d5b0fdd1e48f3f8c76aea0b7d97c1009ec42fa614f54c4e04c84

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2023-Oct-16 21:40:53
Comments
CompanyName QuantiCore Data Solutions Inc.
FileDescription Unified data warehousing and streaming analytics engine for hybrid cloud environments with pipeline orchestration and data lineage.
FileVersion 8.9.1.5227
InternalName QCDP_Stream_Ingest_2026_beta_8.9.1_x64_installer_dev
LegalCopyright © 2026 QuantiCore Data Solutions Inc. All Rights Reserved.
LegalTrademarks QuantiCore, QuantiCore Data Platform are registered trademarks of QuantiCore Data Solutions Inc.
OriginalFilename QCDP_Stream_Ingest_2026_beta_8.9.1_x64_installer_dev
ProductName QuantiCore Data Platform
ProductVersion 8.9.1.5227
Assembly Version 8.9.1.5227

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • schtask
 Looks for VMWare presence:
  • vmware
 Looks for Sandboxie presence:
  • SbieDll.dll
 Accesses the WMI:
  • root\Security
Malicious VirusTotal score: 53/70 (Scanned on 2026-08-23 04:29:31) ALYac: Generic.AsyncRAT.Marte.B.54F07888
APEX: Malicious
AVG: MSIL:AsyncRat-E [Pws]
AhnLab-V3: Malware/Win32.RL_Generic.C3558490
Antiy-AVL: Trojan[Backdoor]/MSIL.Crysan
Arcabit: Generic.AsyncRAT.Marte.B.54F07888
Avast: MSIL:AsyncRat-E [Pws]
Avira: TR/AsyncRat.E
BitDefender: Generic.AsyncRAT.Marte.B.54F07888
Bkav: W32.Malware.220F79EF
CAT-QuickHeal: Trojan.IgenericFC.S14890850
CTX: exe.unknown.asyncrat
ClamAV: Win.Packed.Razy-9625918-0
CrowdStrike: win/malicious_confidence_100% (D)
Cylance: Unsafe
DeepInstinct: MALICIOUS
DrWeb: Trojan.Siggen9.56514
ESET-NOD32: MSIL/AsyncRAT.A trojan
Elastic: Windows.Generic.Threat
Emsisoft: Generic.AsyncRAT.Marte.B.54F07888 (B)
F-Secure: Trojan.TR/AsyncRat.E
Fortinet: MSIL/AsyncRAT.A!tr
GData: MSIL.Backdoor.DCRat.D
Google: Detected
Jiangmin: Backdoor.MSIL.gguk
K7AntiVirus: Trojan ( 005678321 )
K7GW: Trojan ( 005678321 )
Kaspersky: HEUR:Backdoor.MSIL.Crysan.gen
Kingsoft: malware.kb.c.990
Malwarebytes: Generic.Trojan.MSIL.DDS
MaxSecure: Trojan.Malware.300983.susgen
McAfeeD: Real Protect-LS!E1D3E42C7DF8
MicroWorld-eScan: Generic.AsyncRAT.Marte.B.54F07888
Microsoft: Backdoor:MSIL/AsyncRat!atmn
NANO-Antivirus: Trojan.Win32.AsyncRAT.lhhviy
Panda: Trj/GdSda.A
Rising: Trojan.AntiVM!1.CF63 (CLASSIC)
Sangfor: Suspicious.Win32.Save.a
SentinelOne: Static AI - Malicious PE
Skyhigh: Fareit-FZT!E1D3E42C7DF8
Sophos: Troj/AsyncRat-B
Symantec: Backdoor.ASync!g2
Tencent: Trojan.Msil.Agent.zap
Trapmine: suspicious.low.ml.score
TrellixENS: Fareit-FZT!E1D3E42C7DF8
TrendMicro: Backdoor.MSIL.ASYNCRAT.SMXSR
TrendMicro-HouseCall: Backdoor.MSIL.ASYNCRAT.SMXSR
VBA32: OScope.Backdoor.MSIL.Crysan
VIPRE: Generic.AsyncRAT.Marte.B.54F07888
Varist: W32/Samas.B.gen!Eldorado
VirIT: Trojan.Win32.MSIL_Heur.A
ZoneAlarm: Troj/AsyncRat-B
huorong: Backdoor/MSIL.DcRat.a

Hashes

MD5 e1d3e42c7df8186f364891445a61ba7e 🔍
SHA1 32829b0de0d55938e6f0038d3cbfcd0cf6fcf247 🔍
SHA256 2cd68e4da021d5b0fdd1e48f3f8c76aea0b7d97c1009ec42fa614f54c4e04c84 🔍
SHA3 142dba3e8874ac3766f7dd774167c72552928ab98c8e501b51f1b8f949061516 🔍
SSDeep 768:/uKHJTwU6NkWUGnaSmo2qAMNdpzVpacJiUoxPI3zjbnrgX3idTi8efE/5ogJNBD:/uKHJTwRf2eGafou33bUXSdiKaSd0Y 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2023-Oct-16 21:40:53
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0xaa00
SizeOfInitializedData 0xe00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000C91E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xe000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x12000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 509e0de008854f505acfea851e0be682 🔍
SHA1 7490d4cb750145a6c13447094d462a42cdb2c4cf 🔍
SHA256 de2ebd14ce5092453b1d98d193d2167c46f4d305fd1f82087cafea11c302b717 🔍
SHA3 36edcfc5d1b9e3e9ef7d61794bc4ade65efd32b5253049b3f873753f5909b419 🔍
VirtualSize 0xa924
VirtualAddress 0x2000
SizeOfRawData 0xaa00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.50037

.rsrc

MD5 287236672730d9b04f0ebaa5c61acdbb 🔍
SHA1 5108a29a552aafc7b23790d354b72f99d0639b5d 🔍
SHA256 c1e0e44a88ea7ae38ced37cd60f76057b75826ff974c5e8e0e7a2fd4f6f180cc 🔍
SHA3 a304ff901f83fcc31b1449e1f5d509fbe152c69fb4ffd678ae6f79ad8268c528 🔍
VirtualSize 0xb70
VirtualAddress 0xe000
SizeOfRawData 0xc00
PointerToRawData 0xac00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.76904

.reloc

MD5 e5154e29a679b66fdafac72c9ad87c30 🔍
SHA1 ba187eb9e997dc9e61572f3f0431c953d0e603e4 🔍
SHA256 02d3980e6d2564fcf9aaae287aae03355f5c0c4da8a422b459f783681d5d595e 🔍
SHA3 776f1c67ba3b0b57846c9fa217628276b2bcb6b98e85a83115b4cc5dd6b7ed45 🔍
VirtualSize 0xc
VirtualAddress 0x10000
SizeOfRawData 0x200
PointerToRawData 0xb800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0815394

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x63c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47228
MD5 85f59e0fae0d72f6bd2113fb6f3ff358 🔍
SHA1 79ecf05d5b86abe47439a0547d30c968c8e60565 🔍
SHA256 d25143bb4f0d7239fcf8181a332888db91075eac7ebed85cf3e6f6e5369bcc9d 🔍
SHA3 b4d16e61b3658bf7cf0c57723c58d3437e168b2b3479191c09559bbbced0b19b 🔍

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x493
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.22615
MD5 f3d7095de1636559aa56ad81b25bbff9 🔍
SHA1 6a55e1445c1c915664fba385828c5a0078fe460d 🔍
SHA256 4ff1c75a93b2280dabe75acecade82d644388c9f4412565d846aeb396bfdc133 🔍
SHA3 66d420e8633fd20ebea3048e5ed6afe3cf66dcb6d5041729ab7c7faa44b0a1b0 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 8.9.1.5227
ProductVersion 8.9.1.5227
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments
CompanyName QuantiCore Data Solutions Inc.
FileDescription Unified data warehousing and streaming analytics engine for hybrid cloud environments with pipeline orchestration and data lineage.
FileVersion (#2) 8.9.1.5227
InternalName QCDP_Stream_Ingest_2026_beta_8.9.1_x64_installer_dev
LegalCopyright © 2026 QuantiCore Data Solutions Inc. All Rights Reserved.
LegalTrademarks QuantiCore, QuantiCore Data Platform are registered trademarks of QuantiCore Data Solutions Inc.
OriginalFilename QCDP_Stream_Ingest_2026_beta_8.9.1_x64_installer_dev
ProductName QuantiCore Data Platform
ProductVersion (#2) 8.9.1.5227
Assembly Version 8.9.1.5227
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.