home

stealthnet_879setup.exe

StealthNet

The StealthNet Team

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
The StealthNet Team

Product:
StealthNet

Description:
StealthNet Setup

Version:
0.8.7.9

MD5:
a5831f8578d1f92989ccf61601d2ee1a

SHA-1:
45ae701c556524d69cd8f9c11b4d65b0ebf5e35c

SHA-256:
37cff1c3c9e8cf26acdf9d83356ef14da804d737f7af47204bab145d563934c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:38:19 AM UTC  (today)

File size:
1.2 MB (1,270,015 bytes)

Product version:
0.8.7.9

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\stealthnet_879setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:/20lCfWYHVjcwgkFNHskR0DtRQ0+yxT8zVYUkvYu:/2jjHdr7tskStq6xcVXM

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, EC, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, EC, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file stealthnet_879setup.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1470536025&Signature=Abt7UIk9GeXmNBYVsA87osWMRL28xgcJ~06dlk7f9kUl9BBuf2XnfFv9wNvo45eVASDbrRxb1uY24HR38u50o1J5BlJjk6lfLjkGU8RDmUurINwZwzSQe9~DjTIGosepqHOud8wupt78ttlyf7RXJL6ELRrPdgc3oLIzCW5witg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1469098746&Signature=LcwaTh5BHEft-4TIqupFdbKWpifUuDVibK3KcaO4KCN7p5HaLfcX7Ma3pkNqjFxdWvSqf27WNcDvmgpmYe6rSy0Q5YzwZY184f6HkwMdTnQpIlWV2eoRQicY0fWd0F6pERe~NB2ziFttYdsYi9vDGKiA4I0m8Fijtkq0M4NFtQQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1460906106&Signature=gS5C4DTTBNUuAESlKajPZD-3NgHa~EkhEgQT29MZtYsz7B~UkWJh6Vc~vk2HfhBUoEX~zVbBlfN~DRBMfnOMAX06arwAWSx~X80YCD69y3hlfy1yr-QUKHhUfclw9j0yw7dn0gW-OX3BBNkHTKICNSEHPrdmpVi0m0tJTDQv03Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1462014520&Signature=UVLi0NxcHmy-CPcpwhDUhuhCpnV8cwU5egad4dwkchLSta9qIxfKO-qen~0XCo9VOApGAoYEM~OGAxOwT2ReO8GVmc5XdGoPWAzS9makfk7PpQKj9jst5~bNmXkXi7SInVJXHZ4Ybgk7LZLP4TS1mQpzB1MflQxzXaUQAXVTCaY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1461921274&Signature=GantlSZMNFLbJlLy9iJ2N7uO93kyEMa3d8aZTxp2Fmn5vrF~31fIZh2GQIIOtmrplbvB4QZxTLXccrlADT-ehQjkvE1FqSCiFTTW2cGVx2XTXgn8fQDYylVcRKmE4F4-2HmNBrh8RG7g4zLPZBDw2FtiaMdRAJz-WIvR1X~0UHY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://gsf-cf.softonic.com/45a/e70/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86012&instance=softonic_es&type=PROGRAM&Expires=1461246205&Signature=MwFq-2UR4UJrIJCTHUBVT3qOj4Otj6atwnDxoBNifYKSJQgKwZFQFT7Tz5VYFxQU7wNSC5DEMUHJoweoppMntdm5iGTEAJGwhz0DlMBSOM0X0L386Do~orMVsDQYgRh~M7fwEQXNt551t08iZXPJPi5AB6Dz4AZbLkUW4XKXs6s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=stealthnet_setup-0.8.7.9.exe

http://www.stealthnet.de/download/.../stealthnet_setup.exe

Scan stealthnet_879setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.