home

StarMade-starter.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
26ceef9b9fe30a2430266b0e085a6ede

SHA-1:
8901d39c707d6de0473f64120a39821522feba07

SHA-256:
68464342b13f571e9fd6368919b64113c61721b5c43c63a2356132a798e6fb2f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:55:01 AM UTC  (today)

File size:
1.1 MB (1,148,298 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\starmade-starter.exe

File PE Metadata
Compilation timestamp:
6/25/2013 2:31:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
24576:0DR9lQW7yCNb5NCfqv607CsPRlSxhlwApe/9C5:0DRXvN5afXC8xhlwAgFQ

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 37, 40, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.9170  (probably packed)

Code size:
18.5 KB (18,944 bytes)

The file StarMade-starter.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_es&type=PROGRAM&Expires=1448761547&Signature=SnlY6IgNwcdW78ZfABJrm13ZbTwZyPONcx-v6GFlPDDZLpVIhsMXQm2YJ5jJWE0LnAEdoJBJTUJBGLgOe90IGttWQ7fOcM7qD8VmKF-IEVlJAvdqQA8dyfad~iyNK4FeUIuEbkVIr1KBBcKHlQNDGSmIAy7AZ8Inws5lb91pbCM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1449562514&Signature=CZ-W-rqRgMncI5-og0ndzaXmZQMyQvWSteYjUFNPU5pym6TiVx038bw-AFGSX-v1ogGWZ0vFjFuk30FAx6OAT3JEhPzu4uilf0w8enckoqQcn09tMflraJ4X0DgIlMusG47mdxcfvSnTuQvDxXShJmHCKNjwneKQLQ88vRFtaik_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1442273754&Signature=Y1vUbRHPueM9yPvQkPI9fFYS5Ffj9~yfPDeNTMy9q5Z~SYKm1z8jVQMDQyMLv1QlBL36ZrJmWPGpdcGzfO9t4QyHbK-36wtM1V4mFcGfoyFExjmum9JhSk0gDr-k874ehXbUMZTfmS0r1Sh9iqBl4uzO5pGfsUnw41faXFnd~TU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1447162827&Signature=YaCZ2buzfDmGaXLsvs3iqqfhp8ZYybXSkEq6toHUxp2LGbqLTWAX-hje3ThoofOEmZQg49W3cvFEmNHlu0lIxlofR5HXwlREGBaGnuIcCeHKhvHf69r3HsJ5hhFI2VNi8-3nFMEAq25-ZF6AoWTcoy4oAsJq29LO7JdhnrBu3rA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1455785178&Signature=g~FvoWEfFRA8MXwGC0bJ8tK73BDIaLrGlUEKr-YYFFGW770LYJSxG7pZedRVTTIOUM-D6qhEbloOyI-QcinOIBH-VVUYwHkIzA4wFxLTmab0xQlh4vKPeRepaqdmmiRTDhYemOplpRrXa1qPDS6X8qDApeRRqoC5AqvRGrC92Rc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1453046858&Signature=LOAAU7lxZMy4AOFlL6i-ZVyk-M8TwB7R-bIT2wfbnqoJNg3RIoqlY5QUlTqE1QbTkkQg5OgdrxmrCTzM6-VgK0G9Z1qR0cRpFyewCokpYzQo4HW4QvHFqh244H3hmVYH9zekJnAyB82~lXv3gxpD2P03CFUttN~5l63nxChRl3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=StarMade-starter.exe

http://gsf-cf.softonic.com/890/1d3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69666477&instance=softonic_en&type=PROGRAM&Expires=1434990557&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=P68qr201tee17FsmmaaCMVlgQdobT8TLadajR0EXC9Ta9YK7J6lfnnTWkayzYbhgnIbDiU0ZKoxryDbpqdhf0j7mfOWdFnBBAm7vTjjPxw9KwmMlA9xjVn5dIOa7KCsHX8cVfSVl1Jct5D5xIsJ88NVlu43zALfTjBJvVUfKYVo_&filename=StarMade-starter.exe

http://files.star-made.org/StarMade-starter.ussafe.exe

http://media1.gamefront.com/moddb/2013/03/.../StarMade-Starter.exe

http://files.star-made.org/StarMade-starter-v9.exe

http://files.star-made.org/StarMade-starter.exe

Scan StarMade-starter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.