home

qremoteserver.exe

FLEXquarters.com Limited QODBC

FLEXquarters.com Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘QRemoteServer’.
Publisher:
FLEXquarters.com Limited  (signed and verified)

Product:
FLEXquarters.com Limited QODBC

Description:
FLEXquarters.com Limited QuickBooks ODBC Driver

Version:
1.0.0.8

MD5:
58e74164920b97c7ff5dafb96d874516

SHA-1:
96e39a88a85cb89bf21b94bd81e5ebf8012d3aa1

SHA-256:
f14f804ca7329d0f1d7cf70bed3e491035a7ee305260e6e51e21a32967d18341

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 1:50:27 PM UTC  (today)

File size:
356.9 KB (365,472 bytes)

Product version:
1.0.0.8

Copyright:
Copyright © FLEXquarters.com Limited 1998-2012

Trademarks:
QODBC(TM) is a trademark of FLEXquarters.com Limited

Original file name:
QODBC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe

Digital Signature
Signed by:
FLEXquarters.com Limited

Authority:
VeriSign, Inc.

Valid from:
8/27/2012 5:00:00 PM

Valid to:
8/28/2013 4:59:59 PM

Subject:
CN=FLEXquarters.com Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FLEXquarters.com Limited, L=Tsim Sha Tsui, S=Kowloon, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
431C0C27AFF4D16808ADBD83A8DCC331

File PE Metadata
Compilation timestamp:
11/15/2012 3:14:05 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:SgRRLdONqkZLV5hikl/0NK2SOFdIDMj5AzqUz:S2RJON9LVX81SMjeV

Entry address:
0x1A338

Entry point:
E8, 96, 04, 00, 00, E9, 63, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 10, 46, 42, 00, 89, 0D, 0C, 46, 42, 00, 89, 15, 08, 46, 42, 00, 89, 1D, 04, 46, 42, 00, 89, 35, 00, 46, 42, 00, 89, 3D, FC, 45, 42, 00, 66, 8C, 15, 28, 46, 42, 00, 66, 8C, 0D, 1C, 46, 42, 00, 66, 8C, 1D, F8, 45, 42, 00, 66, 8C, 05, F4, 45, 42, 00, 66, 8C, 25, F0, 45, 42, 00, 66, 8C, 2D, EC, 45, 42, 00, 9C, 8F, 05, 20, 46, 42, 00, 8B, 45, 00, A3, 14, 46, 42, 00, 8B, 45, 04, A3, 18, 46, 42, 00, 8D, 45, 08, A3, 24, 46, 42...
 
[+]

Entropy:
5.4732

Code size:
106 KB (108,544 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
QRemoteServer

Command:
C:\Program Files\qodbc driver for quickbooks\qremote\server\qremoteserver.exe


Scan qremoteserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.