home

telsecmonitor.exe

QDLMonit Application

Quanta Computer Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TelsecMonitor’.
Publisher:
Quanta Computer Inc.  (signed and verified)

Product:
QDLMonit Application

Version:
1, 12, 11, 29

MD5:
3e0f6cb5a72fde3c6dea312d89e8a4b2

SHA-1:
ad940736a5aa96b6cd8d3f586b15264f5283ca38

SHA-256:
735b9c9447dd857ff158a8c30d5d0bd7813efd6573b69cb78ef01f24d1411f37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:38:39 PM UTC  (a few moments ago)

File size:
110.6 KB (113,240 bytes)

Product version:
1, 12, 11, 29

Copyright:
Copyright (C) 2012

Original file name:
QDLMonit.exe

File type:
Executable application (Win32 EXE)

Language:
Taiwanese

Common path:
C:\Program Files\telsec 4g router\cm\telsecmonitor.exe

Digital Signature
Signed by:
Quanta Computer Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/23/2010 4:36:50 AM

Valid to:
3/23/2013 4:36:50 AM

Subject:
CN=Quanta Computer Inc., O=Quanta Computer Inc., C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001278A0F4810

File PE Metadata
Compilation timestamp:
1/29/2013 6:27:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:NWWUic2pIlSRLav54+QhL3KVm8oawgRKNPhr7QKNXGprp935oyKc:wwcrlSROKrhLaVvVWPhr7QBj5oyKc

Entry address:
0x2172

Entry point:
E8, FF, 35, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, F0, 40, 00, 89, 0D, 44, F0, 40, 00, 89, 15, 40, F0, 40, 00, 89, 1D, 3C, F0, 40, 00, 89, 35, 38, F0, 40, 00, 89, 3D, 34, F0, 40, 00, 66, 8C, 15, 60, F0, 40, 00, 66, 8C, 0D, 54, F0, 40, 00, 66, 8C, 1D, 30, F0, 40, 00, 66, 8C, 05, 2C, F0, 40, 00, 66, 8C, 25, 28, F0, 40, 00, 66, 8C, 2D, 24, F0, 40, 00, 9C, 8F, 05, 58, F0, 40, 00, 8B, 45, 00, A3, 4C, F0, 40, 00, 8B, 45, 04, A3, 50, F0, 40, 00, 8D, 45, 08, A3, 5C, F0, 40...
 
[+]

Code size:
37.5 KB (38,400 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TelsecMonitor

Command:
C:\Program Files\telsec 4g router\cm\telsecmonitor.exe start


Scan telsecmonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.