home

vali-xcs.exe

MD5:
658df3357f5af7cea33e55c344a89e55

SHA-1:
de2b215d2e6384a1e48565908aff45f31844e212

SHA-256:
6781fda92b588bf42409686419a3cca423089c26cae3f6cfd07fbf466f9cdcad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:35:22 PM UTC  (today)

File size:
122 KB (124,928 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.26

CTPH (ssdeep):
3072:G86UD63cbh9lbm9rPRV7lYAaKmC9UAW9:kUMcbh9lC9rPRV9J9UAc

Entry address:
0x1510

Entry point:
48, 83, EC, 28, 48, 8B, 05, D5, B5, 01, 00, C7, 00, 00, 00, 00, 00, E8, 9A, D8, 00, 00, E8, 85, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 53, 48, 83, EC, 20, 48, 89, CB, 48, 89, D1, 44, 89, C2, 45, 0F, B7, C1, E8, 01, 43, 01, 00, 89, 03, F7, D0, C1, E8, 1F, 48, 83, C4, 20, 5B, C3, 41, B9, B6, 01, 00, 00, 45, 31, C0, EB, D1, 90, 48, 83, EC, 28, 8B, 09, 45, 31, C0, 31, D2, E8, D0, 42, 01, 00, 85, C0, 0F, 94, C0, 48, 83, C4, 28, C3, 48, 81, EC, 98, 00, 00...
 
[+]

Entropy:
6.0634

Code size:
92.5 KB (94,720 bytes)

The file vali-xcs.exe has been seen being distributed by the following URL.

http://download.xcsoar.org/releases/6.8.3/.../vali-xcs.exe

Scan vali-xcs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.