File scan report
Verdict Safe
Is Stellar_
Unsigned MSI installer with zero engine detections and medium prevalence across 78 sources.
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The file shows consistent clean signals and can be considered safe for installation from a trusted source.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 62 flagged
- Flagged 0
- No detection 62
- No result 13
- Code signing Unsigned
- Test run Completed
- First seen 1mo ago
Chapter 02
Why we think so
0 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 62 antivirus engines that checked it returned clean results with no major detections. The file is an unsigned Windows Installer package that showed only benign behaviour in one sandbox run and has been submitted by 78 sources.
Zero malicious detections across 75 engines including 17 major antivirus engines reporting clean is a strong safety signal. The file is an unsigned MSI installer, which is common for legitimate software distributed outside major vendor channels. Sandbox execution revealed only routine system-discovery techniques with no malicious indicators or files it created. Medium prevalence with 78 unique submitters over two days suggests legitimate distribution rather than a targeted campaign.
What We Detected
75 antivirus engines scanned the 20 MB Stellar_2.1.3_x64_en-US.msi file; none flagged it as malicious. 17 major antivirus engines explicitly marked it clean. The package is unsigned and contains no code-signing certificate.
Threat Behavior
One sandbox execution recorded standard MSI installer activity: writing temporary files, accessing system directories, and creating benign program markers. No offensive MITRE techniques, no network connections, and no dropped malicious files it created were observed.
What To Do Now
The installer can be executed with standard precautions. Keep Windows Defender and other security software enabled during installation. Verify the download source matches the expected Stellar software vendor.
- Zero detections across 75 engines
- Medium prevalence with 78 sources
- No malicious sandbox indicators
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 4sandbox rule tags
- 3spawned processes
- 0network contacts
- 12filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
4MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1082· System recon
- T1083· Scans your files
- T1091· USB spreading
- T1120
Observed activity
Processes started
3Programs the file ran, with their command lines.
msiexec.exe"C:\Windows\system32\msiexec.exe" /I "C:\Users\<USER>\Desktop\setup.msi" /qb ACCEPTEULA=1 LicenseAccepted=1msiexec.exe"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\installer.msi"msiexec.exe"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\Stellar_2.1.3_x64_en-US.msi"
Files
9Files the file created, changed or deleted.
- Written
C:\MSIe6e8d.tmp - Written
C:\ProgramData - Written
C:\ProgramData\Microsoft\Windows\Templates - Written
C:\Windows\Fonts - Written
C:\Windows\system32\catroot - Written
C:\Windows\system32\catroot2
Show all 9 entries for files
- Written
C:\MSIc9b51.tmp - Deleted
C:\MSIe6e8d.tmp - Deleted
C:\MSIc9b51.tmp
Mutexes
3Named locks a program uses so only one copy runs; malware families often reuse them.
Global\_MSIExecute\BaseNamedObjects\Local\SM0:6520:304:WilStaging_02\BaseNamedObjects\Local\SM0:6216:304:WilStaging_02
Sandbox background — not the file
1The analysis machine's own processes and connections, recorded in every run.
- VM process
msiexec.exeC:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Chapter 04
Technical details
None of the 62 antivirus engines that checked it flag it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 3, 2026, 11:20 PM UTC
- SHA-256
58cfcd6b767f4ea3a2e4f6d31bc9c38079b8c45e568de91bb5b744690c8813c8- SHA-1
c49ab1e8ce0f5ac82d2ecd0e0ca2b260608c8d06- MD5
2a95b1ea14c7754ce9e87f9bfa0f6bd9
About this file
Stellar_2.1.3_x64_en-US.msi is a Windows Installer file of 20.9 MB.
- Type and size
- Windows Installer · 20.9 MB
- Signer
- UnsignedNo code signature.
- First seen
- Sep 1, 2026On VirusTotal.
- Submitted by
- 78 distinct sources
First scanned
Antivirus consensus
0 of 62 engines flagged this file
13 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-233 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Stellar_2.1.3_x64_en-US.msi safe?
What is Stellar_2.1.3_x64_en-US.msi?
How many antivirus engines detected Stellar_2.1.3_x64_en-US.msi?
What is the SHA-256 hash of Stellar_2.1.3_x64_en-US.msi?
Is it safe to install Stellar_2.1.3_x64_en-US.msi?
How up to date is this analysis of Stellar_2.1.3_x64_en-US.msi?
Community
Member reviews and reports for this exact file hash.