home

qimlsrv.exe

IM Lock Professional

Comvigo Inc.

Publisher:
Comvigo, Inc.  (signed by Comvigo Inc.)

Product:
IM Lock Professional

Description:
Service Monitor

Version:
3.00.0001

MD5:
fc8e4fb660da9e34219b7d5a5f4448ba

SHA-1:
4b32b47522f17818563ef4c4c0e13483fdd45c2a

SHA-256:
1a45d395dab20c76fc540a16006e30882579024da27960758e79595c00943b2d

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/24/2024 7:17:22 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BACKDOOR.Trojan
9.0.1.0288

File size:
238.1 KB (243,776 bytes)

Product version:
3.00.0001

Copyright:
Comvigo, Inc. 2007 All Rights Reserved

Trademarks:
Comvigo IM Lock

Original file name:
qimlsrv.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\qimlsrv.exe

Digital Signature
Signed by:
Comvigo Inc.

Authority:
The USERTRUST Network

Valid from:
1/24/2010 9:00:00 PM

Valid to:
1/25/2011 8:59:59 PM

Subject:
CN=Comvigo Inc., O=Comvigo Inc., STREET=15W675 82nd Street, L=Burr Ridge, S=Il, PostalCode=60527, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
5A656AF3856956BBA9711D191E9ED0E3

File PE Metadata
Compilation timestamp:
6/5/2010 8:25:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:gDBPDBqc3Z0KwlxXja7vS0rLnH7G7mKi2weKliUr:gDBLlZoXOrjLnHi7KeKliA

Entry address:
0x360C

Entry point:
68, 90, 36, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, FA, 53, 64, AE, C4, D4, 13, 4A, 9E, E5, 4E, 7F, B1, 30, 68, D9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 6D, 73, 6E, 71, 70, 00, 30, 30, 00, 00, 00, 00, 01, 00, 06, 00, B8, 59, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 2C, 5B, 40, 00, B8, BB, 44, 00, 01, 00, 00, 00, 8C, 36, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 8C, 36, 40, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
220 KB (225,280 bytes)

Scan qimlsrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.