» QPR.exe
Overview
Analysis
File Details

QPR.exe

Quick Image Resizer

DzSoft Ltd

File name:

QPR.exe

Publisher:

DzSoft Ltd (signed and verified)

Product:

Quick Image Resizer

Version:

2.7.1.6

MD5:

c61b2d57abf4cbaa92c124097cfbd7e8

SHA-1:

58dbd255571ddf1a93097c6f879404cdf32c8c5b

SHA-256:

da9f89edfe5027ba0f9d68b6a87f029f2a8b2d6a8e8823d139de8eb47cc2e2f5

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 6:20:49 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

File size:

2.2 MB (2,302,648 bytes)

Product version:

2.7.1

Trademarks:

DzSoft® is a registered trademark of DzSoft Ltd.

Original file name:

QPR.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\dzsoft\quick image resizer\qpr.exe

Digital Signature

Signed by:

DzSoft Ltd

Authority:

The USERTRUST Network

Valid from:

5/15/2008 3:00:00 AM

Valid to:

5/16/2011 2:59:59 AM

Subject:

CN=DzSoft Ltd, O=DzSoft Ltd, STREET="Gogolya, 12/21, k.9", L=Kremenchuk, S=Poltavska oblast, PostalCode=39605, C=UA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0089757E55BA07F3A4ADB9DA4C14A3E6B4

File PE Metadata

Compilation timestamp:

12/14/2010 3:11:39 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:1Ly9CaDRkMyrKaaN9Yxp9pJJNCHYWPjt8xLbtFlqMmVu/SWZTVrsDXTBtiroN5DZ:1LHnlRNxmKL5FlqMmVu/SWZTVrsDXTBx

Entry address:

0x1000

Entry point:

68, 01, C0, 9B, 00, E8, 01, 00, 00, 00, C3, C3, 2A, AA, BA, 42, 98, 31, AD, D9, D4, 05, 88, ED, 80, 9A, 90, 7B, 07, 26, 8C, 7A, 06, 08, AB, 4A, 20, EE, EF, EF, CB, 2E, 71, 8F, 5A, 1A, 5B, 37, 1E, 44, 52, 93, F0, 50, 19, 16, 06, C1, AB, 91, 46, 13, CD, 4B, C4, 02, 81, ED, 72, FA, 80, 6C, A0, 85, 46, 1C, 66, C2, 31, CC, 8D, 80, 17, 8E, 35, 8B, DF, 7B, F7, 72, D4, 10, 43, A9, A2, 90, 81, 14, 4A, 3D, 34, 65, 92, 09, 21, 51, 17, CC, 59, FB, E0, 28, 86, 11, E5, 40, A5, 94, 09, 80, DC, E8, 76, D8, 75, 45, 83, 95... 
[+]

Entropy:

7.7826

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.5 MB (2,598,912 bytes)

Scan QPR.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.