| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2023-Mar-12 16:16:39 |
| Comments | |
| CompanyName | PrimeForge Financial Software Ltd. |
| FileDescription | Advanced accounting and financial reporting software with multi-currency support, tax automation, and real-time analytics. |
| FileVersion | 41.4.7.0 |
| InternalName | PrimeLedger_Accounting_Enterprise_2026_fullsetup_x64 |
| LegalCopyright | © 2026 PrimeForge Financial Software Ltd. All Rights Reserved. |
| LegalTrademarks | PrimeLedger, PrimeForge are registered trademarks of PrimeForge Financial Software Ltd. |
| OriginalFilename | PrimeLedger_Accounting_Enterprise_2026_fullsetup_x64 |
| ProductName | PrimeLedger Accounting |
| ProductVersion | 41.4.7.0 |
| Assembly Version | 41.4.7.0 |
| Info | Matching compiler(s): | .NET executable -> Microsoft |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Contains references to system / monitoring tools:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to MD5
Uses constants related to SHA1 Uses constants related to SHA256 Uses constants related to SHA512 Uses constants related to AES Uses constants related to Blowfish Uses constants related to RC5 or RC6 Uses constants related to Twofish Uses constants related to TEA |
| Malicious | VirusTotal score: 46/66 (Scanned on 2026-07-17 03:36:07) |
ALYac:
Gen:Variant.Application.fca.3927
APEX: Malicious AVG: MSIL:Quasar-A [Rat] AhnLab-V3: Backdoor/Win32.QuasarRAT.R341693 Antiy-AVL: Trojan/MSIL.Quasar Arcabit: Trojan.Application.fca.DF57 Avast: MSIL:Quasar-A [Rat] Avira: TR/Quasar.A BitDefender: Gen:Variant.Application.fca.3927 Bkav: W32.Malware.7EB0E90E CAT-QuickHeal: Trojan.Generic.TRFH927 CTX: exe.unknown.generic CrowdStrike: win/malicious_confidence_100% (D) Cylance: Unsafe DrWeb: BackDoor.Quasar.299 ESET-NOD32: MSIL/Agent.CLQ trojan Elastic: Windows.Generic.Threat Emsisoft: Gen:Variant.Application.fca.3927 (B) F-Secure: Trojan.TR/Quasar.A Fortinet: MSIL/Agent.BPH!tr GData: MSIL.Backdoor.Quasar.A Google: Detected Jiangmin: Trojan.MSIL.aogzw K7AntiVirus: Trojan ( 005b1c021 ) K7GW: Trojan ( 005b1c021 ) Kaspersky: HEUR:Trojan.MSIL.Quasar.gen Malwarebytes: Quasar.Backdoor.Rat.DDS McAfeeD: Trojan:Win/QuasarRAT.AA MicroWorld-eScan: Gen:Variant.Application.fca.3927 Microsoft: Backdoor:MSIL/Quasar!atmn NANO-Antivirus: Trojan.Win32.Quasar.lelzaq Rising: Backdoor.Quasar!1.E5F1 (CLASSIC) Sangfor: Trojan.Win32.Save.a SentinelOne: Static AI - Malicious PE Sophos: Troj/Quasar-AF Symantec: ML.Attribute.HighConfidence Tencent: Backdoor.Msil.Quasar.16001301 TrellixENS: GenericRXLX-DS!655CCE16FE03 TrendMicro: Backdoor.MSIL.QUASAR.SMTPTPI TrendMicro-HouseCall: Backdoor.MSIL.QUASAR.SMTPTPI VBA32: Trojan.MSIL.Quasar.Heur VIPRE: Gen:Variant.Application.fca.3927 Varist: W32/MSIL_Troj.BTX.gen!Eldorado VirIT: Trojan.Win32.MSIL_Heur.B ZoneAlarm: Troj/Quasar-AF huorong: Trojan/MSIL.Obfuscated.g!crit |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2023-Mar-12 16:16:39 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 8.0 |
| SizeOfCode | 0x31c600 |
| SizeOfInitializedData | 0x1000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0031E5DE (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x324000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| mscoree.dll |
_CorExeMain
|
|---|
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 41.4.7.0 |
| ProductVersion | 41.4.7.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | PrimeForge Financial Software Ltd. |
| FileDescription | Advanced accounting and financial reporting software with multi-currency support, tax automation, and real-time analytics. |
| FileVersion (#2) | 41.4.7.0 |
| InternalName | PrimeLedger_Accounting_Enterprise_2026_fullsetup_x64 |
| LegalCopyright | © 2026 PrimeForge Financial Software Ltd. All Rights Reserved. |
| LegalTrademarks | PrimeLedger, PrimeForge are registered trademarks of PrimeForge Financial Software Ltd. |
| OriginalFilename | PrimeLedger_Accounting_Enterprise_2026_fullsetup_x64 |
| ProductName | PrimeLedger Accounting |
| ProductVersion (#2) | 41.4.7.0 |
| Assembly Version | 41.4.7.0 |
| Resource LangID | UNKNOWN |
|---|
No comments yet.