home

vistart.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.vins.co.il.
MD5:
d848c69c2b80191e0c16295e41a834bc

SHA-1:
6a8ddc2660f57ff7196b36b584e4bda3a964ec60

SHA-256:
c4898e82f2c6ddcebb9b6aee180ad05eaed59ddae0f0ac11fc6b9b5d01609c1f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:11:37 AM UTC  (today)

File size:
1.2 MB (1,272,891 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\vistart.exe

File PE Metadata
Compilation timestamp:
9/29/2046 2:34:07 PM

OS bitness:
Win16

CTPH (ssdeep):
24576:Sn3dNJJnwTmUkRPFkqOADFSmNxDN4K5KGhZL0tIeO2YiqOESvYeNi24NM:S3ETXkcwDFSmNNN41GhB0tIt6bEKYe71

Entry point:
CE, 9F, EF, CE, 38, 94, 4C, 3E, DC, B9, 9B, 84, 2E, 0F, 21, DB, 12, 63, 48, 49, E6, 71, 73, 3D, C6, BC, F7, 77, 6C, CF, A2, BB, C8, AD, ED, BB, 41, 9E, CD, 48, 4A, AA, DB, 85, E7, BD, B6, C6, 46, 9E, FA, 0E, 75, 97, 6B, 49, 6B, 5D, 09, 9F, 7E, 20, D1, BC, 38, 6C, 09, 7F, 64, FF, 7B, E6, CA, 13, 27, 87, 9A, B0, DE, AB, 2E, 2A, D0, D1, FD, 29, 48, 53, 3D, DC, DD, C7, 83, 53, 66, D1, BB, DB, B6, 37, 5D, 44, DD, C6, 47, 03, C6, 07, 77, 5A, 4D, 2D, 75, 97, 78, 62, A8, 27, C5, 5F, E5, 90, E0, DF, 07, 93, BC, 8C...
 
[+]

Entropy:
7.9717  (probably packed)

The file vistart.exe has been seen being distributed by the following URL.

http://www.vins.co.il/.../ViStart

Scan vistart.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.