home

qdlmonitor.exe

QDLMonit Application

Quanta Computer Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QDLMonitor’.
Publisher:
Quanta Computer Inc.  (signed and verified)

Product:
QDLMonit Application

Version:
1, 12, 7, 27

MD5:
4ab0f1868504890b16fa4bca0963494e

SHA-1:
8a88208b5e2c6e6f5da6d58e8d82e32dd5722f37

SHA-256:
b38f2d450c0490a29f2ac60668eb1cc53d9093a41eb0cbb45fee45122092920e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:36:51 PM UTC  (today)

File size:
110.6 KB (113,240 bytes)

Product version:
1, 12, 7, 27

Copyright:
Copyright (C) 2012

Original file name:
QDLMonit.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\quanta mifi\cm\qdlmonitor.exe

Digital Signature
Signed by:
Quanta Computer Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/23/2010 3:36:50 PM

Valid to:
3/23/2013 3:36:50 PM

Subject:
CN=Quanta Computer Inc., O=Quanta Computer Inc., C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001278A0F4810

File PE Metadata
Compilation timestamp:
7/28/2012 2:46:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:pxVycWpIlSRLav54+SLHKu2s4aQQkKNPhr7A6NHGpNp9350evn:4cLlSROqlLquvljPhr7AJd50ev

Entry address:
0x2172

Entry point:
E8, FF, 35, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, F0, 40, 00, 89, 0D, 44, F0, 40, 00, 89, 15, 40, F0, 40, 00, 89, 1D, 3C, F0, 40, 00, 89, 35, 38, F0, 40, 00, 89, 3D, 34, F0, 40, 00, 66, 8C, 15, 60, F0, 40, 00, 66, 8C, 0D, 54, F0, 40, 00, 66, 8C, 1D, 30, F0, 40, 00, 66, 8C, 05, 2C, F0, 40, 00, 66, 8C, 25, 28, F0, 40, 00, 66, 8C, 2D, 24, F0, 40, 00, 9C, 8F, 05, 58, F0, 40, 00, 8B, 45, 00, A3, 4C, F0, 40, 00, 8B, 45, 04, A3, 50, F0, 40, 00, 8D, 45, 08, A3, 5C, F0, 40...
 
[+]

Entropy:
4.2865

Code size:
37.5 KB (38,400 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QDLMonitor

Command:
C:\Program Files\quanta mifi\cm\qdlmonitor.exe start


Scan qdlmonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.