home

gqrdmonitor.exe

Connection Monitor

Quanta Computer Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GQRDMonitor’.
Publisher:
Quanta Computer Inc.  (signed and verified)

Product:
Connection Monitor

Version:
1, 0, 0, 978

MD5:
43adeb6a131b05a4bd615c36e3f3aa38

SHA-1:
4b766e4cb00ca1921fc2626a8afed7fdefdb8120

SHA-256:
b7b0a66133700f57c772f15096527ca7e8bbb85d0e5cb276a4f179d94cec7180

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/7/2025 1:50:25 AM UTC  (today)

File size:
370.8 KB (379,720 bytes)

Product version:
1, 0, 0, 978

Copyright:
Copyright c. All rights reserved.

Original file name:
ConnMonitor.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\dwm-158 connmgr\gqrdmonitor.exe

Digital Signature
Signed by:
Quanta Computer Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/23/2010 3:36:50 PM

Valid to:
3/23/2013 3:36:50 PM

Subject:
CN=Quanta Computer Inc., O=Quanta Computer Inc., C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001278A0F4810

File PE Metadata
Compilation timestamp:
4/30/2010 2:10:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:+vMeyYpN/JQahOnJ9w5Ttj/PqrM2wsubrby8tboNtmNptsuroTuFJO:+Eey1acJMyFXunby8tJPOMY

Entry address:
0x26105

Entry point:
E8, 84, 41, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 16, 18, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 61, 46, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, D9, 41, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 48, 18, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, C7, 17, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD, 6A, 16...
 
[+]

Entropy:
6.2642

Code size:
244 KB (249,856 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
GQRDMonitor

Command:
C:\Program Files\dwm-158 connmgr\gqrdmonitor.exe start


Scan gqrdmonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.