home

qremoteserver.exe

FLEXquarters.com Limited QODBC

FLEXquarters.com Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QRemoteServer’.
Publisher:
FLEXquarters.com Limited  (signed and verified)

Product:
FLEXquarters.com Limited QODBC

Description:
FLEXquarters.com Limited QuickBooks ODBC Driver

Version:
1.0.0.319

MD5:
1413720b7e167a3fd884d98cf73ac01a

SHA-1:
d89388656e6bfc948c6a6209f22762888c5a4fe1

SHA-256:
7daa471a96f177ce95c7e8e39711ce2bcc5f863a13ccee9f7fdab82ae99df051

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 4:32:53 AM UTC  (today)

File size:
581.3 KB (595,296 bytes)

Product version:
1.0.0.319

Copyright:
Copyright © FLEXquarters.com Limited 1998-2016

Trademarks:
QODBC(TM) is a trademark of FLEXquarters.com Limited

Original file name:
QODBC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe

Digital Signature
Signed by:
FLEXquarters.com Limited

Authority:
Symantec Corporation

Valid from:
8/29/2015 6:00:00 PM

Valid to:
11/28/2016 4:59:59 PM

Subject:
CN=FLEXquarters.com Limited, O=FLEXquarters.com Limited, L=Tsim Sha Tsui, S=Kowloon, C=HK

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6F8BF5B831A24045B406E6CB912B22C9

File PE Metadata
Compilation timestamp:
8/22/2016 6:33:53 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:QrTaMspcieb5fntkIzsgvYk8K2A5+/ZdSDgIDMj5AAa:QXarpcZZtkIvAtl++m9Mjeb

Entry address:
0x3091F

Entry point:
E8, 9F, 9A, 00, 00, E9, 89, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, C4, 55, 45, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, C4, 55, 45, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
6.0173

Code size:
265 KB (271,360 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QRemoteServer

Command:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe


Scan qremoteserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.