home

Qget.EXE

Qget Application

QNAP Systems, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QGet’.
Publisher:
QNAP Systems, Inc.  (signed and verified)

Product:
Qget Application

Version:
3,1,9,0810

MD5:
4163088d8498b3fdb967412e7c709185

SHA-1:
c7a36babd44095bf431b066f1e7d0625dec525a6

SHA-256:
a9ffa598d08a5e90f5b83b9207832ce841b035075bf42ff14fa9fab3b363fbee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/4/2024 4:58:33 PM UTC  (today)

File size:
6.9 MB (7,198,928 bytes)

Product version:
3,1,9,0810

Copyright:
©2004-2015 QNAP Systems, Inc. All rights reserved.

Original file name:
Qget.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qnap\qget\qget.exe

Digital Signature
Signed by:
QNAP Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
12/3/2012 12:00:00 AM

Valid to:
12/31/2015 11:59:59 PM

Subject:
CN="QNAP Systems, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="QNAP Systems, Inc.", L=New Taipei City, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
02269C49DD793C7E49BCDD804E9C0865

File PE Metadata
Compilation timestamp:
8/10/2015 4:17:23 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x23FBFC

Entry point:
E8, 47, ED, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, A0, F4, 95, 00, 75, 02, F3, C3, E9, CE, ED, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 61, 83, 7D, 08, 00, 75, 13, E8, BC, 46, 00, 00, 6A, 16, 5E, 89, 30, E8, 38, F0, 00, 00, 8B, C6, EB, 48, 83, 7D, 10, 00, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, CA, 2A, 00, 00, 83, C4, 0C, EB, C7, FF, 75, 0C, 6A, 00, FF, 75, 08, E8, D8, 4A, 00, 00, 83, C4, 0C, 83, 7D, 10, 00, 74, BB, 39, 75, 0C, 73, 0E, E8, 72, 46, 00, 00, 6A...
 
[+]

Code size:
4.4 MB (4,591,616 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QGet

Command:
"C:\Program Files\qnap\qget\qget.exe" \min


Scan Qget.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.