home

qsr.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
a5c40ecb35c17ed80bca029c11c549e0

SHA-1:
31e4836ba1d821dbbfff6ec0c607912dc7e6c535

SHA-256:
b148a1e4519212e3f59b828911ec34c2b6d06c4caa8e7d10d1e195e2fc7d6feb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 4:39:44 PM UTC  (today)

File size:
576.1 KB (589,918 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:4Vc8PWZEyPmV6aobqDEkNDFFTATJQPo8kWVOSxmh7KK/cUr8P5T:4VBPWZEvPoyEkNzTA9pWOMI/nQP5T

Entry address:
0xBF98

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, BC, 89, 45, B8, E8, B3, 70, FF, FF, E8, 1A, 85, FF, FF, E8, 25, A7, FF, FF, E8, 6C, A7, FF, FF, E8, 5B, A8, FF, FF, E8, E6, FA, FF, FF, BE, 24, FF, 40, 00, 33, C0, 55, 68, C8, C5, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 58, C5, 40, 00, 64, FF, 32, 64, 89, 22, 8D, 55, F0, 33, C0, E8, 87, F2, FF, FF, 8B, 55, F0, B8, 88, FC, 40, 00, E8, 6E, 71, FF, FF, 8B, 15, 88, FC, 40, 00, B8, 8C, FC, 40, 00, E8, 43, 7B, FF, FF, C6, 05, 33, F0, 40, 00...
 
[+]

Entropy:
7.9446

Developed / compiled with:
Microsoft Visual C++

Code size:
46 KB (47,104 bytes)

The file qsr.exe has been discovered within the following program.

Quick Screen Capture 3.0  by Etru Software Development
Publisher's description - “!Quick Screen Capture provides complete flexibility when capturing images from the screen. You can grab the full screen, active window, active window client, or any window, button, or control on the screen.”
www.etrusoft.com
11% remove it
 
Powered by Should I Remove It?

The file qsr.exe has been seen being distributed by the following 24 URLs.

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1481608110&Signature=Prc-JHEx8hQqHEBuodEeEbBCGU-YMUSGZdml6j3SoBi5~RB0fEcni0dV2rXzgnKFwKrM5zLfgdddDQed706Dg2raumIPeWzEhhv9ncX4a31VpbA-DGce7l0ZkmE-kKSKQxCfpKRds-fyoq-3MHSg4GecZopmSjXmfDJWioY~8zw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1444283645&Signature=JdCKiOKgDL9S86pD7I~4iwIjXCA2QLYwSAW18KvYtGtnJsA~IGfYJVoGgNb38FeqKYS2F5~iTfla3RkP96QVcSQSpHkbLsVnCOVbIYA5H19Sszcqjx~GjGCpsxFKAoEbgKvXpCL1N5BmM8hMhZHEVYhrZNBl4OvUFTRPpLrVmqI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1466740267&Signature=MzeoazsDWeKupQA0dZNqL2xatYcEuRiUx6Sn~w54nHKqnGE4wrdDXrjGTqUC6UBX7ADOgfNsInTvv3RJOiXH~O5IG0ymXXCy~wBOORns4jD0Wfl3yBth4V960bmcp8Uv~NbT9qVZedL9Tk3IMRNlyhs093GtXme8nVZY~gl871Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://dw.uptodown.com/dwn/KzacCTdRjepgcyGV2H5sLwc8eXhtOTRL2kfbym-ddHJZduCJrd1PjsfirjQ5zXIrucE9SFfHfqOjR9lJ_lSsV9mpAMO-dXr7CEKSrCrFfWUG0GFb5LMYDFMObl0Npaeq/DOCiarj8fiEwtCgYtjA4Z1RyUFcvBRajofTTPllYO38EfPMZeYDo5ej6BCWM6KK8eUnotznhWGovi04bgkvs2bWuUcZmEibYUYbS9zTNafyZsiMY8BSSQ221Gs7XXD7Q/2DxyXhAvjCe-h1y3QqNukzCvMvbr2jIPJfJS_8bKKhkuwJTuFP0L9giabN3hLP86ZGSIygNv4-DHzW3QIC5FSmrg6gb_6yVReOIwHJrRSvhlMA0YLIdqMng2fNgza-AY/.../

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1475441767&Signature=TXEZ9PHmtClZReUQUA7CKRs7v~73KQ64xQzJVfCjOUBHpZXAl31619ER7B6GROx0Ic~tWuWcKfFDtLYijMr-1jNpYCNSYI-zlXCm4Vrqqad9tpkDZ0oJ62S6aCeXTdLm0xKflpgNoro94IgTe7VTX3~h~lyFXV49Om8qEY9J07o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1441855752&Signature=GnF3Hv0weGHWGfxyyrxhFhGhQ0ZBF7Lrk--PvegPmg9aEfq2meE607RHfe4k0SuWmD9yEnxDAcVAV7GXB1m9iJiHjn7KccQZoIW-ps3RAgxQ3zsvarTJkKCeDwIoXpRNmOGtlOOAUrHw61n1U~K7SolUZ9RAfOAMlgZMv5D35vs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://files.downloadnow.com/s/software/25/16/.../qsr.exe

https://quick-screen-recorder.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMKxv52evrozujdTvKxKXgMPwIY3ATujtFoMZAeoTC3WYlBJ1TqOJkKeJbBgHdKCGJTSwvdrWSEgV9jZFg9Wazf

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1474522211&Signature=UEVprmenj3lR0s92krELMyc8sI75ckcIr~jM30QdaWpslEBYi8CGcSE83GP7yD16KIN1D5E4Cu4obQgJjYSKf9OuRXflX~gaW0A6sC8j~8ZgZ0FOc9GGF4LQjBbUHGGdTsrv0MVtidpFxDWGlLfBkCu9GrtRbgBZUi3vR6ntaN0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1480031535&Signature=fhZiBdR0AYJamw~Z4ZXkndsXzL58S9zpO-wDbToktUg3IqA528TpJJdbtDzv~gBS1nwkgJjjF~Psu5hqQGzl0wVNyhEGykVf4JkTxkMFRXD1nVPLmbwu6I2mE6HwYxynVyW4MzOGo~1S~5wrOcUMqV5uqUrzGmHURimd55iEvcU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://download982.mediafire.com/j7hf7qkdaqqg/.../qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1473991667&Signature=W5pri-a8-wA9UiGPrM9ZdYffeanIr3rckMQGql7eyZcasvMrplXC9vRbSKk6yAknSu7M6ssJo4lSvtkEWYk-RaeIGrPQ5EkxiU4h18AZmVJ7NIF7nOpuaEHNIMJe1sd0xdPaNtUNCt6aa3GgsfmzFhZjQqCYDFMzvJQfb0rm0bw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://www.vins.co.il/.../ScreenRecorder

http://soft.mydiv.net/win/dlfilec2f79_221140/.../qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1467342546&Signature=fRYvZXhGgiNGSgcH5bLIzNcxoniUyi5Sw2MfEnCHyWdw-pZGqHHROkU6krNSLrdndp4LPA635Rbg4BH0lkZpIb9OV6eeGMv36N9KJlPooITZveRpHdBPqmedKpD4SsPLZQ9QpPebK~2s09E8imcZ8KhDdYTz~~e0I5E9vvrQkgU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1467008774&Signature=IWTlo0RVtAfKDlcF4hTxB-iWp8doHuRP94UI9nfyUXk13dpxFOSX2iF~rI7mZF0H4QGpuVIBThzQTTpuNoWsETauPqNS-8m~RUlgoSlLxxf6rOBawywS2P~QEYk-2N~PaBwRawQjKYvQmLwNB9l45exMBi9x82t3xRq1Z92JC-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://gsf-cf.softonic.com/31e/483/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35751&instance=softonic_en&type=PROGRAM&Expires=1465835965&Signature=EW-oK3zwtDI5G2Xl0CT5~nkDTY4cMcJ2dk4MyzPoDYhP~JewlCRQ06zM~TvnLRUUEvSLS0CrfaRtIHsBwGJzRQ-IIZZ-~Amhqhf2ZJyPjUvGFLr7PgHvfmQy60KpsDDn-e4PKaCwh1QLErkiPj0J9kJftDAt4y2DxGOiBGtTYQc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=qsr.exe

http://dw.uptodown.com/dwn/DnC4Vnztn5bxUmU4wiY3V5X9GUSwpx_rJcLnyV9D0ggrLk2fI5fxNGpDx1nUKaPxle5VZU2O8VKjTGHSjrcgrxYWjPR_0Ia1ysONOMRSShRvsBm_F5W0w66QbL3eJVtS/.../

http://dw.uptodown.com/dwn/bLOVVzg89CPZ6VKRiNR7ITTExK-7X7DbnmYdlcPzZ7DKV8SsXYlW4IPj75b3IsqJKvNiU00wkF1qEJUr1PCgr5VNhZuyIm_zFsjrZ5d967OiVqL6yaeBYRH4lX7KW5mJ/O04sW5wNv6M1GUS71D_Q1ba9FPw4HptdITLdloT_RvSf6jioMq899CdTj-E0bdFupe_CjZcs2UUoghNRyiqzq7QhSHSMDw0hOkEbtxPsP3K2v1N4ryXwHS8KPKy_bWgq/.../

http://download1580.mediafire.com/avdilwjx9atg/.../qsr.exe

http://dw.uptodown.com/dwn/LJrDNiPtZDwwFl-LiyKlCpsipCv6oteQyr-BcSznovHqswTtFuh23C1Ti3x2cqk7C9silMjMFyHNgSmcu6-Pj-JMbdMMUFbp6tah84DtsxM_34lTl0-cA1YoaR2dxwg9/pblVn6meiyD_MJhjnCvg88kc6_pEg0eoH0eNS2-mecPMVOa2sZGUwBDjOTuN6LGD6CY7htxM9fvd7l6UipsoBYPMwkQwZXr8VdnfvqALXZ0V1yQ7Hb_Vk4tAxl5EL9Dn/.../

http://quick-screen-recorder.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMKxv52evrozujdTvKxKXgMPwIY3ATujtFoMZAeoTC3WYlBJ1TqOJkKeJbBgHdKCGJTSwvdrWSEgV9jZFg9Wazf

http://www.vins.co.il/.../ScreenRecorder

http://www.etrusoft.com/qsr.exe

Scan qsr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.