home

mariobuilderv11-4.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from sandbox.yoyogames.com and multiple other hosts.
Version:
1.0.0.0

MD5:
96d792d63b9b7ee370a889fd56eace2f

SHA-1:
0c8f15231a660caf3f5bc1e03af2de29b9e27098

SHA-256:
c44dea02a257f7d661a5946800e40a8148578b0bcb84fa9de30757cf5b22bc2b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:21:16 AM UTC  (today)

File size:
13.5 MB (14,140,981 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mariobuilderv11-4.exe

File PE Metadata
Compilation timestamp:
1/18/2012 10:33:17 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:qMlbsn7PYy8meJL9Mkf+NwBWwyIig3AjCymhQiGvTxIwy1w7KcI3ezm:qYC78R9e2kVIifIh9+xK1w7+/

Entry address:
0x27AE44

Entry point:
55, 8B, EC, 83, C4, E0, 53, 56, 57, 33, C0, 89, 45, E4, 89, 45, E0, 89, 45, E8, 89, 45, EC, B8, 9C, B5, 66, 00, E8, 93, 11, D9, FF, 8B, 3D, 7C, 91, 68, 00, 33, C0, 55, 68, AF, B0, 67, 00, 64, FF, 30, 64, 89, 20, A1, 40, 8E, 68, 00, 66, 83, 08, 04, A1, 40, 8E, 68, 00, 66, 83, 08, 10, E8, FC, 5E, EE, FF, B2, 01, A1, E4, 0F, 56, 00, E8, 10, B1, D8, FF, 8B, 15, 24, 8A, 68, 00, 89, 02, A1, 24, 8A, 68, 00, 8B, 00, 8B, 17, 89, 82, F4, 00, 00, 00, C7, 82, F0, 00, 00, 00, 50, 18, 56, 00, 33, D2, 55, 68, 67, B0, 67...
 
[+]

Entropy:
7.7558

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 MB (2,596,864 bytes)

The file mariobuilderv11-4.exe has been seen being distributed by the following 23 URLs.

http://sandbox.yoyogames.com/games/.../send_download?code=89f6a2ab8525ef56c01fcbb5aa8f4e035b28c399

http://sandbox.yoyogames.com/games/.../send_download?code=9e542d3868047e796a55ac25780ba71fb7546954

http://sandbox.yoyogames.com/games/.../send_download?code=f19a71ae710d3c5c368e77137889b0303d28dece

http://sandbox.yoyogames.com/games/.../send_download?code=70efbdac20055d57b2fcc29b4f57bbb3e0f7969d

http://sandbox.yoyogames.com/games/.../send_download?code=0caead4c156e97a82c7895946aa77d44eab8b84a

http://sandbox.yoyogames.com/games/.../send_download?code=b9eda5f5cc3a178539853cbab27e47883e8a9792

http://sandbox.yoyogames.com/games/.../send_download?code=023bcecbe32961c3d4e78ff63e20123c52ba0e24

http://sandbox.yoyogames.com/games/.../send_download?code=b8ffccf495d7f64b2abfddba995ef9dba95e9600

http://sandbox.yoyogames.com/games/.../send_download?code=ac1ee0d8beec27e6c354140f030d7e8ab4b0536b

http://sandbox.yoyogames.com/games/.../send_download?code=1d21f69fc390da6f83a7447cd40be9a8f691539f

http://sandbox.yoyogames.com/games/.../send_download?code=4a926d68a8860f4e8fd1c5784973f15752dd76e8

http://sandbox.yoyogames.com/games/.../send_download?code=dd292ec9c735be8dbdb1610658d1fc98c397ee4a

http://download.instalki.org/programy/Windows/Programowanie/.../MarioBuilderV11-4_www.INSTALKI.pl.exe

http://sandbox.yoyogames.com/games/.../send_download?code=50a55515b7e1596e1bfe419f98d3e3b21502603f

http://sandbox.yoyogames.com/games/.../send_download?code=65ba16ad1a0a2d0a049b05bccfbc2378ac76214e

http://d.gjcdn.net/data/games/0/135/2385/protected-files-cdn/.../MarioBuilderV11-4.exe

http://sandbox.yoyogames.com/games/.../send_download?code=fe8779ba3e4b2e327923f5228b739e4eb91f9950

http://sandbox.yoyogames.com/games/.../send_download?code=61eb0c9ba708dd4aad713fdbea8fa1e60d40cf9a

http://sandbox.yoyogames.com/games/.../send_download?code=47e0af617591bb8d029c72ae15e94c0ecaf36ca0

http://d-cdn.gamejolt.net/data/games/0/135/2385/protected-files-cdn/.../MarioBuilderV11-4.exe

http://data-02.gamejolt.net/data/games/0/135/2385/protected_files/.../MarioBuilderV11-4.exe

http://sandbox.yoyogames.com/games/.../send_download?code=cf55d4a9599aee1f89f15375fc5a72832a384c5b

http://sandbox.yoyogames.com/games/.../send_download?code=18138504ca4b75752e7f1157fee41307bf16dff5

Scan mariobuilderv11-4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.