home

sonic_cd.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download.fileplanet.com and multiple other hosts.
MD5:
333ab3426f42135dd1b0ccdaa3c04c56

SHA-1:
34a2478fa632f7babadbb4cbf6b4e089701eaaa5

SHA-256:
84485abba08dbb567d459d3b45cb6bc16c69f34c98a292ab4c8767e51074a097

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:18:33 AM UTC  (today)

File size:
4.9 MB (5,133,625 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\sonic_cd.exe

File PE Metadata
OS version:
277.14361

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
3.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:sHXOb/hRCi6Cr9xkrJ3orDxjONBLPpX7y+eDkiyGyvKXakhEx:sHojCpCEVYrDxqNFRGgQakhEx

Entry address:
0xAD00A3

Entry point:
4D, 5A, 01, 01, 01, 00, 01, 00, 05, 00, 00, 00, FF, FF, 00, 00, 14, 00, 00, 00, 00, 00, 0A, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 10, 01, 00, 00, 04, 00, 0A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 54, 68, 69, 73, 20, 69, 73, 20, 61, 20, 57, 69, 6E, 64, 6F, 77...
 
[+]

Entropy:
7.9982  (probably packed)

Code size:
320 KB (327,683 bytes)

The file sonic_cd.exe has been seen being distributed by the following 6 URLs.

http://download.fileplanet.com/ftp1/gamedemos/.../sonic_cd.exe

https://web.archive.org/web/19961220034547/http://www.sega.com/segapc/downloads/.../sonic_cd.exe

http://dnlimit3.simfile.uplusbox.co.kr/cgi-bin/.../Zi1MVTRzSlQ1b0xQTjFKT08xS09EMUxQOTg=

http://files.downloadnow.com/s/software/85/99/.../sonic_cd.exe

http://download.gamezone.com/uploads/download/file/.../sonic_cd.exe

http://software-files-a.cnet.com/s/software/85/99/.../sonic_cd.exe

Scan sonic_cd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.