home

ltcmClient.exe

LTCM Communications Client

Leader Technologies Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LTCM Client’.
Publisher:
Leader Technologies Inc.  (signed by Leader Technologies Inc)

Product:
LTCM Communications Client

Version:
1.19

MD5:
29a3641950bb003552fbe4c3deca51e3

SHA-1:
7af7e40f5addadf684c28385361637e5e25bda91

SHA-256:
a308bf5b5c94980d01b05d3442fe33415066253921d7061bdc264994530df06a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:49:43 PM UTC  (today)

File size:
1.6 MB (1,643,200 bytes)

Product version:
1.19

Copyright:
Copyright © 2007-2009 Leader Technologies, Inc. All rights reserved.

Original file name:
ltcmClient.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ltcm client\ltcmclient.exe

Digital Signature
Signed by:
Leader Technologies Inc

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/16/2009 6:18:19 PM

Valid to:
7/8/2012 6:07:05 PM

Subject:
CN=Leader Technologies Inc, OU=Secure Application Development, O=Leader Technologies Inc, L=Albuquerque, S=New Mexico, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
406C28C26793D8B06A7F0651A73C7B78

File PE Metadata
Compilation timestamp:
12/21/2009 5:51:06 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:1B4GyTbMyrxSeV/E6hRSsAydzV3JXnqC2zV2SI3Ugxr9Izkg5DVxiG8VT:12GycyrxSM8sAuJXnz2zV2SRoakaDVI

Entry address:
0x71501

Entry point:
E8, 55, 90, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, D0, 95, 55, 00, 75, 02, F3, C3, E9, D7, 90, 00, 00, 8B, FF, 51, C7, 01, AC, 0A, 53, 00, E8, CF, 91, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 81, EB, FC, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, A0, 67, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 2B, 45, 08, D1...
 
[+]

Entropy:
6.4419

Code size:
1.1 MB (1,203,712 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LTCM Client

Command:
C:\Program Files\ltcm client\ltcmclient.exe \startup


Scan ltcmClient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.