home

qremoteserver.exe

FLEXquarters.com Limited QODBC

FLEXquarters.com Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QRemoteServer’.
Publisher:
FLEXquarters.com Limited  (signed and verified)

Product:
FLEXquarters.com Limited QODBC

Description:
FLEXquarters.com Limited QuickBooks ODBC Driver

Version:
1.0.0.312

MD5:
0d4a51cc70cdfeb2fbbccb5ec06c2ffe

SHA-1:
8791aa18ed688cc6f4fefb77f54205497be461e8

SHA-256:
bc688dfa29b051e520221d14ddbda0573b34677481d746309624fa66f8341567

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 6:59:00 PM UTC  (today)

File size:
419.8 KB (429,872 bytes)

Product version:
1.0.0.312

Copyright:
Copyright © FLEXquarters.com Limited 1998-2014

Trademarks:
QODBC(TM) is a trademark of FLEXquarters.com Limited

Original file name:
QODBC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qodbc driver for quickbooks pos\qremote\server\qremoteserver.exe

Digital Signature
Signed by:
FLEXquarters.com Limited

Authority:
VeriSign, Inc.

Valid from:
8/21/2014 8:00:00 PM

Valid to:
11/21/2015 6:59:59 PM

Subject:
CN=FLEXquarters.com Limited, O=FLEXquarters.com Limited, L=Tsim Sha Tsui, S=Kowloon, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3BD25528A6F12A98933A289E2C562E41

File PE Metadata
Compilation timestamp:
7/30/2015 7:35:29 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:zTf2yyCsM4n73n7ABw7QbOKpIDMj5AAAwt:zCLMK3n7ABAMjeA

Entry address:
0x26B9C

Entry point:
E8, 94, 04, 00, 00, E9, 63, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, C0, 29, 43, 00, 89, 0D, BC, 29, 43, 00, 89, 15, B8, 29, 43, 00, 89, 1D, B4, 29, 43, 00, 89, 35, B0, 29, 43, 00, 89, 3D, AC, 29, 43, 00, 66, 8C, 15, D8, 29, 43, 00, 66, 8C, 0D, CC, 29, 43, 00, 66, 8C, 1D, A8, 29, 43, 00, 66, 8C, 05, A4, 29, 43, 00, 66, 8C, 25, A0, 29, 43, 00, 66, 8C, 2D, 9C, 29, 43, 00, 9C, 8F, 05, D0, 29, 43, 00, 8B, 45, 00, A3, C4, 29, 43, 00, 8B, 45, 04, A3, C8, 29, 43, 00, 8D, 45, 08, A3, D4, 29, 43...
 
[+]

Entropy:
5.6354

Code size:
157 KB (160,768 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QRemoteServer

Command:
C:\Program Files\qodbc driver for quickbooks pos\qremote\server\qremoteserver.exe


Scan qremoteserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.