home

shine stesser.exe

Server crash

This is a setup program which is used to install the application. The file has been seen being downloaded from download1511.mediafire.com and multiple other hosts.
Product:
Server crash

Version:
1.0.0.0

MD5:
0fe422cee7c930b104ab180171081b8d

SHA-1:
d64c5c232522c582ed43ede3880c7ddb7a187ebb

SHA-256:
e7a1129b082897c19cdeda819f981fc8b189e32043afea5de71913bd1a3f7891

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:55:39 PM UTC  (today)

File size:
128.5 KB (131,584 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
Server crash.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\shine stesser.exe

File PE Metadata
Compilation timestamp:
10/12/2013 7:22:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:ARwnwe0hX1lSbVWvq+s7S7qo+DntvyoYWmKawI:AqRWvMDntUfH

Entry address:
0x5C5E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.7122

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
15.5 KB (15,872 bytes)

The file shine stesser.exe has been seen being distributed by the following 3 URLs.

http://download1511.mediafire.com/wazbaxwgzbyg/.../Server crash.exe

http://download1691.mediafire.com/74kinsb3y8og/.../Server crash.exe

http://download1691.mediafire.com/0kzy889a73ug/.../Server crash.exe

Scan shine stesser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.