home

megafonmonitor.exe

QDLMonit Application

Quanta Computer Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘MegaFonMonitor’.
Publisher:
Quanta Computer Inc.  (signed and verified)

Product:
QDLMonit Application

Version:
1, 12, 7, 27

MD5:
ee6ff6bfc7c77b19e82508541a88d756

SHA-1:
7006192db36676ee0fb026f5e366a877fb028402

SHA-256:
eed98a39e46144e8a8d3333235c80490a81399c51e006b9d2ffb91d5c5cc6ee4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:48:59 AM UTC  (today)

File size:
110.6 KB (113,240 bytes)

Product version:
1, 12, 7, 27

Copyright:
Copyright (C) 2012

Original file name:
QDLMonit.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\megafon-mifi\cm\megafonmonitor.exe

Digital Signature
Signed by:
Quanta Computer Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/23/2010 10:36:50 AM

Valid to:
3/23/2013 10:36:50 AM

Subject:
CN=Quanta Computer Inc., O=Quanta Computer Inc., C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001278A0F4810

File PE Metadata
Compilation timestamp:
8/23/2012 7:40:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:dsUic2pIlSRLav54+QhL3KVm8oawgRKNPhr7QKNVGpQp9350er:QcrlSROKrhLaVvVWPhr7Qfo50er

Entry address:
0x2172

Entry point:
E8, FF, 35, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, F0, 40, 00, 89, 0D, 44, F0, 40, 00, 89, 15, 40, F0, 40, 00, 89, 1D, 3C, F0, 40, 00, 89, 35, 38, F0, 40, 00, 89, 3D, 34, F0, 40, 00, 66, 8C, 15, 60, F0, 40, 00, 66, 8C, 0D, 54, F0, 40, 00, 66, 8C, 1D, 30, F0, 40, 00, 66, 8C, 05, 2C, F0, 40, 00, 66, 8C, 25, 28, F0, 40, 00, 66, 8C, 2D, 24, F0, 40, 00, 9C, 8F, 05, 58, F0, 40, 00, 8B, 45, 00, A3, 4C, F0, 40, 00, 8B, 45, 04, A3, 50, F0, 40, 00, 8D, 45, 08, A3, 5C, F0, 40...
 
[+]

Code size:
37.5 KB (38,400 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MegaFonMonitor

Command:
C:\Program Files\megafon-mifi\cm\megafonmonitor.exe start


Scan megafonmonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.