home

qimlsrv.exe

IM Lock Professional

Comvigo Inc.

Publisher:
Comvigo, Inc.  (signed by Comvigo Inc.)

Product:
IM Lock Professional

Description:
Service Monitor

Version:
3.00.0001

MD5:
c36b4942ea0080c89903b845b9fea00d

SHA-1:
c6866d3e5bf9f000e65504f1d427e3701277cfe5

SHA-256:
bd729555cbc4c63df900767179de026ff9c10bea81b4bb7a1356dedd8c583d53

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 7:32:32 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BACKDOOR.Trojan
9.0.1.0219

File size:
238.1 KB (243,776 bytes)

Product version:
3.00.0001

Copyright:
Comvigo, Inc. 2007 All Rights Reserved

Trademarks:
Comvigo IM Lock

Original file name:
qimlsrv.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\qimlsrv.exe

Digital Signature
Signed by:
Comvigo Inc.

Authority:
The USERTRUST Network

Valid from:
1/24/2010 6:00:00 PM

Valid to:
1/25/2011 5:59:59 PM

Subject:
CN=Comvigo Inc., O=Comvigo Inc., STREET=15W675 82nd Street, L=Burr Ridge, S=Il, PostalCode=60527, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
5A656AF3856956BBA9711D191E9ED0E3

File PE Metadata
Compilation timestamp:
6/24/2010 12:04:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:9z9RARcYpWKVhEIwl6H9/vlNhVsxRNZaPQPc3PsP9WKH9mPhXF2N:9PlYprh/H93BVOR7ZPaPsP9tH+hXFI

Entry address:
0x373C

Entry point:
68, C0, 37, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, C1, B0, 59, 0C, C6, 5C, 66, 4B, 82, D8, 8F, 32, 9C, D2, 84, 04, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 6D, 73, 6E, 71, 70, 00, 30, 30, 00, 00, 00, 00, 01, 00, 06, 00, E8, 5A, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 5C, 5C, 40, 00, B8, BB, 44, 00, 01, 00, 00, 00, BC, 37, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, BC, 37, 40, 00...
 
[+]

Entropy:
5.8767

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
220 KB (225,280 bytes)

Scan qimlsrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.