home

lifesignmini.exe

Astro-Vision LifeSign Mini

Astro-Vision Futuretech Pvt.Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from downloadstam.indianastrologysoftware.com.
Publisher:
Astro-Vision Futuretech Pvt.Ltd.

Product:
Astro-Vision LifeSign Mini

Description:
Astro-Vision LifeSign Mini Setup

Version:
1.0.5.1

MD5:
6dafbe142ee53637d0da6e01dc73bc16

SHA-1:
fb96ce729760a9763a2721f1df9678f211ba557a

SHA-256:
51fb86210e066be1f4771540a9fd42f6cab0e1d7e4c60a310c751a40076f730b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:27:02 AM UTC  (today)

File size:
22.8 MB (23,929,680 bytes)

Product version:
1.0.5.1

Copyright:
Copyright © 2012 Astro-Vision Futuretech Pvt.Ltd.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\lifesignmini.exe

File PE Metadata
Compilation timestamp:
12/20/2011 9:16:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:be+I1HwSNrPF+IA0YkNDNI65VcaQS5nyxTjLUSLoF2dWTmF5yQ/zw8SvpGP5:be++H15QIAB65Vcan5EjpsF2dJbLwb8B

Entry address:
0x16478

Entry point:
69, CE, 00, D5, 35, 0B, 0F, BE, C0, 8D, 05, 86, E2, BC, 5D, C7, C2, 54, F0, 9A, C7, 81, FB, CE, C7, 00, 00, 70, 05, BA, 08, C7, E2, EC, 3B, EB, C6, C3, 87, 74, 02, 87, E8, 0A, D3, E8, 0D, 00, 00, 00, 0F, B6, D0, 69, F9, 0D, 18, 5F, 55, B0, 3D, 3B, EB, 12, FA, 3B, D2, 4B, C6, C6, 1E, C6, C7, E2, F7, D1, 68, A3, 00, 00, 00, 85, F8, 5A, 81, F2, 2D, 00, 00, 00, 8D, 2D, 5F, 23, BB, ED, 70, 0E, FF, C9, 8D, 2D, 6B, A1, 3E, 86, 8A, F9, 0F, CD, 11, EE, 81, FF, 62, 70, 2D, AC, 8B, C2, EB, 0D, 69, F5, 8E, 5B, 94, 2C...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
84 KB (86,016 bytes)

The file lifesignmini.exe has been seen being distributed by the following URL.

http://downloadstam.indianastrologysoftware.com/free/tp/1051/.../LifeSignMini.exe

Scan lifesignmini.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.