home

SoloCfg.EXE

Solo Scheduler

SRN Micro Systems

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SoloSchedule’.
Publisher:
SRN Micro Systems

Product:
Solo Scheduler

Version:
14, 0, 0, 0

MD5:
64b4461abb5e0504dddbbd22d3a1913f

SHA-1:
d26a4b5b13d1f38cbe6001eb310f6ceec139c40b

SHA-256:
5b9a14fef289aea5ab74bfa087feceb756475709edea6462e45fa1224b7ac7fc

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/16/2024 5:54:03 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
UnclassifiedMalware
18144

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.3923

Qihoo 360 Security
Win32/Trojan.e6d
1.0.0.1015

Trend Micro House Call
TROJ_GEN.F47V0109
7.2.123

File size:
296 KB (303,104 bytes)

Product version:
14, 0, 0, 0

Copyright:
Copyright (C) 2014 SRN Micro Systems

Original file name:
SoloCfg.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/28/2013 4:53:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:bfSng0R/R4njUA0A2bmphl07EzTEPbuQBjKsQ6jre8Vevn2KoklVgFacK1yHao4f:DhP7Bhl07UMBGsQWov5nqD84aJia

Entry address:
0x12BBF

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 56, 43, 00, 68, 5C, 97, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 9C, 21, 43, 00, 33, D2, 8A, D4, 89, 15, E0, 82, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, DC, 82, 44, 00, C1, E1, 08, 03, CA, 89, 0D, D8, 82, 44, 00, C1, E8, 10, A3, D4, 82, 44, 00, 6A, 01, E8, D9, 6A, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 4D, 38, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.0889

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
196 KB (200,704 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SoloSchedule

Command:
C:\srnmic~1\solocfg.exe


The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to host.soloantivirus.net  (207.58.165.252:80)

Scan SoloCfg.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.