home

SrvGen.exe

beIN Generator

MOHAMED\Mohamed

Publisher:
MOHAMED\Mohamed  (signed and verified)

Product:
beIN Generator

Version:
1.0.0.0

MD5:
7d1037d51e69e908500b7cbcf944946f

SHA-1:
c38166833aee5dbd60cf0a3d8ef1ab4f82611b93

SHA-256:
ac8acd33e184ffe3b34888824da51f2180ebe075896681e641232d485e0ac3bc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 6:30:48 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM03.0.0000.Malware.Gen
1.0.0.1120

File size:
267.6 KB (273,984 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
SrvGen.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\srvgen.exe

Digital Signature
Signed by:
MOHAMED\Mohamed

Authority:
MOHAMED\Mohamed

Valid from:
3/5/2016 4:57:03 AM

Valid to:
3/5/2017 10:57:03 AM

Subject:
CN=MOHAMED\Mohamed

Issuer:
CN=MOHAMED\Mohamed

Serial number:
3BF2D64498A147B44E104E6BD1E0078F

File PE Metadata
Compilation timestamp:
4/4/2016 10:37:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:wDO2No/VMJC96klSFzE3j3ZRliHortI4atCws/iUaahtMkOfPG0eaR9AZ53aMV+C:6iWmRMzE1RliKtRa9TahtMkf05OiI7MW

Entry address:
0x3265E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1248

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
194 KB (198,656 bytes)

Scan SrvGen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.