home

qremoteserver.exe

FLEXquarters.com Limited QODBC

FLEXquarters.com Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QRemoteServer’.
Publisher:
FLEXquarters.com Limited  (signed and verified)

Product:
FLEXquarters.com Limited QODBC

Description:
FLEXquarters.com Limited QuickBooks ODBC Driver

Version:
1.0.0.318

MD5:
2357dc13588d9036c7cf7adfef470a36

SHA-1:
8be84ebe6117ab13a04c5e5da16c5f9d1f1d61e0

SHA-256:
2e3b1913c835ef603ad708c73cef97a63611ab9e633d4ca031121949c000fe29

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 5:19:15 AM UTC  (today)

File size:
550.8 KB (564,064 bytes)

Product version:
1.0.0.318

Copyright:
Copyright © FLEXquarters.com Limited 1998-2016

Trademarks:
QODBC(TM) is a trademark of FLEXquarters.com Limited

Original file name:
QODBC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe

Digital Signature
Signed by:
FLEXquarters.com Limited

Authority:
Symantec Corporation

Valid from:
8/29/2015 5:00:00 PM

Valid to:
11/28/2016 3:59:59 PM

Subject:
CN=FLEXquarters.com Limited, O=FLEXquarters.com Limited, L=Tsim Sha Tsui, S=Kowloon, C=HK

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6F8BF5B831A24045B406E6CB912B22C9

File PE Metadata
Compilation timestamp:
5/31/2016 7:13:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:Xtw2Q5qE6/CQniv1OHtTaVWk192DHnHuQrKNIDMj5AA:XW7kXaQivcHY0kr2jn9BMje

Entry address:
0x2DD5F

Entry point:
E8, 9C, 9A, 00, 00, E9, 89, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, C4, D5, 44, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, C4, D5, 44, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
5.9489

Code size:
254 KB (260,096 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QRemoteServer

Command:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe


Scan qremoteserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.