home

mvsm.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from sandbox.yoyogames.com.
Version:
1.0.0.0

MD5:
61054478fddeacfe13069393c4903c51

SHA-1:
0c670276fca6b7244deee6f3d38f0378972257b0

SHA-256:
1e837a336a3ad1eab30a41e79c0a11a7bb2f7f67d34d958316cb0946f72b7af6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 11:14:40 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7133

File size:
19.8 MB (20,802,523 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mvsm.exe

File PE Metadata
Compilation timestamp:
4/14/2011 6:24:35 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:YKNdIywr0AF211kAu84GrAFaW7Cnh//QrxhhjJpkKbs/4f4HD:5Ndvwrh2Awrx8gh/QrDdJ1Tf2

Entry address:
0x23E7C8

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 04, 03, 63, 00, E8, 07, D2, DC, FF, 8B, 1D, 64, A1, 64, 00, 8B, 03, E8, 3E, 9C, EA, FF, 8B, 0D, B8, 9A, 64, 00, 8B, 03, 8B, 15, 54, 45, 5E, 00, E8, 43, 9C, EA, FF, 8B, 0D, B0, A4, 64, 00, 8B, 03, 8B, 15, 3C, 69, 56, 00, E8, 30, 9C, EA, FF, 8B, 0D, 58, 9B, 64, 00, 8B, 03, 8B, 15, CC, 03, 59, 00, E8, 1D, 9C, EA, FF, 8B, 0D, 04, A1, 64, 00, 8B, 03, 8B, 15, FC, 69, 57, 00, E8, 0A, 9C, EA, FF, 8B, 0D, 44, A0, 64, 00, 8B, 03, 8B, 15, C4, D5, 5C, 00, E8, F7, 9B, EA, FF, 8B, 0D, 10...
 
[+]

Entropy:
7.8124

Developed / compiled with:
Microsoft Visual C++

Code size:
2.2 MB (2,347,520 bytes)

The file mvsm.exe has been seen being distributed by the following URL.

http://sandbox.yoyogames.com/games/.../send_download?code=a1ae701e9ba472bf0c3bf455b61fe24da24a5e63

Scan mvsm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.