home

sonic_untamed_v.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from sandbox.yoyogames.com and multiple other hosts.
Version:
1.0.0.0

MD5:
53dd23fb90849d320aa4d4ed8b4dfd3e

SHA-1:
3e41259c569502f79330d5252498daac6b9f5308

SHA-256:
a7a312fae6cb75aa074eb587adc079906be05babf775de148f8e59ee34a1ea1b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 12:33:06 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7383

File size:
16.2 MB (16,984,818 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sonic_untamed_v.1.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:nVm3Sp2dXbM86HjVH/PiG/1FX/5pmK6e7WVn:ECUGiGtFXhpmK60WVn

Entry address:
0x188750

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 6C, 32, 58, 00, E8, 2F, F5, E7, FF, 8B, 1D, 44, F9, 58, 00, 8B, 03, E8, 2A, 88, EE, FF, 8B, 0D, 84, F3, 58, 00, 8B, 03, 8B, 15, 78, 4D, 54, 00, E8, 2F, 88, EE, FF, 8B, 0D, 28, FC, 58, 00, 8B, 03, 8B, 15, BC, DA, 4C, 00, E8, 1C, 88, EE, FF, 8B, 0D, 1C, F4, 58, 00, 8B, 03, 8B, 15, 9C, 6C, 53, 00, E8, 09, 88, EE, FF, 8B, 0D, F4, F8, 58, 00, 8B, 03, 8B, 15, 78, E0, 4C, 00, E8, F6, 87, EE, FF, 8B, 0D, 54, F8, 58, 00, 8B, 03, 8B, 15, D0, 2D, 51, 00, E8, E3, 87, EE, FF, 8B, 0D, BC...
 
[+]

Entropy:
7.9582

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 MB (1,602,560 bytes)

The file sonic_untamed_v.1.exe has been seen being distributed by the following 7 URLs.

http://sandbox.yoyogames.com/games/.../send_download?code=388bc3609c6acf66d7cd568c51a22e954aa0a35d

http://sandbox.yoyogames.com/games/.../send_download?code=249ab96c2baab9f71bc6894ab3b758191281f41e

http://sandbox.yoyogames.com/games/.../send_download?code=13dc450e5784ac6baf4d39ec811c9f48837674c8

http://sandbox.yoyogames.com/games/.../send_download?code=58d04a9f16abfed01ea9780e2580d159c3e53687

http://sandbox.yoyogames.com/games/.../send_download?code=1512f46c77553c392f50fc4fb41e464f76b8b168

http://sandbox.yoyogames.com/games/.../send_download?code=b74c26f34aae8d32af54441de0840b9c239c244a

http://sandbox.yoyogames.com/games/.../send_download?code=581a530bd104f96d37c87b3446e9922bd554ba72

Scan sonic_untamed_v.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.