home

yandere simulator-jan 15th.exe

Lite program

AgileMax (New Media Holdings Ltd.)

The application yandere simulator-jan 15th.exe, “Lite program Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.presenttagcycle.com and multiple other hosts.
Publisher:
AgileMax (New Media Holdings Ltd.)  (signed and verified)

Product:
Lite program

Description:
Lite program Setup

MD5:
2adf593111d125e1d85aaf653542e40e

SHA-1:
852340858c24cae6403de525fbd2ef3fd5d8627e

SHA-256:
4636c1a94d1012e6d4e2c45859d57e4d294a650cd19ea71da303857c13c15ed9

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/27/2024 7:20:30 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
16.1.18.14

File size:
899.9 KB (921,456 bytes)

Product version:
4.7.1

Copyright:
Web Software

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\yandere simulator-jan 15th.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 1:04:31 PM

Valid to:
10/30/2016 4:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:kzhBGljMymVcqdbQvVLjegGA2yKe4iTvqKEAdTGJ:k1BQjOcqcEg3/4qaJ

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file yandere simulator-jan 15th.exe has been seen being distributed by the following 39 URLs.

http://www.presenttagcycle.com/c?x=85qt4YiLpvM RoViwgarHqHW4QLP0C 99zDDGOX dAE=&c=gQTyIx3bCU03RtmV9y3JtsxLC3l4C2Ik c6G28CTw6Qnmvnv8WgdyI85uwVrH6RRZSlGPL28a 8GpFGU/q25vW2ipQbA5Sf/Mt AmSM 9Dy8z628uee Kj5uUNFsKQcB&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=deypUfcmkNzz9c7JR7k0SUanIfAcJshnbyFpZHGzjBU=&c=CP RWqr5CksYmfZvNIHFRWB3Wx4Opf0nmNgxtHWsRQ5Qo8EHYe/rmuUb1QR6A5z/sHB/F6rRIhgGpxh6iGQR8WSEGzt3Q2ttEfeDXpNA5qjCGSTqBDYuLPj O6 CeL44&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=Kgt1Q1BtAipLYIW2vo3F4QmqZ1/YTyIJJlL1Iuh6hJQ=&c=D6wnA2iBlISRtvtxEnvZ7yOJ eYF1eb4ER2SHi9ZDTMQzxbzXnmCNMrppa6Pit4o2I9tdrEItbdxf1PencqhZpuBgu1VtcyaaBu0RkiANqom y16qjUFqeLiOEhEEAdG&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=/PopfW1QMX2yXhiPpOZb4Y59ROWIh1NRNouE61xjMkE=&c=130KAhRUb2K8SWl/X3PVHqoB/6ScWICN6V kBFzLv2j2RoFSpVmWvlV RkRecbZvRlhnSWJXpqqOZvliT9mngOPIbELjnrzAJGWLcZMBHlyWm3OwGsqGS1x6qXD0sOfN&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=1kiN2bFPHE5QQOwdTVhBo3Tx79L10K7C69Vrd7uhYTA=&c=MxNLI9NNPiUC0Xhhz6tT8GK2TLjezaWIhDghFDe Hnqcu5OSdFYiqBVPfh5vfFBbNaNN7h3DSdX7eJ9SdjmM3BQyskzR0GCimd5s3DgfP0sryAjqacZq6mx9Kaysn Pb&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=lU138QJNHqN2hb/KzBYUdaE hVcMbkT6a2eZgE/4WGg=&c=eGj6uPPqBwiLcqSHJaINX3t3igMyHiGjmh4mImPS4nNNE3aLDXuQyGGZU9BWbJcDZa2/jyMhne4hS2ZowFAtBoCBKogCeM ES 6Nrbn8I5Bn6ft3Gc6NUFggTNmvHguE&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=iqLqqsMVhjw1Mma/zLwuXaCMykuK2ikVGvtn/AGXCrY=&c=iz9IwLz8nzOicMiByq9EOZ7igdrTS5kyXCeRaL70J2mufuTAj1Ms2Mz/OKL6gWiQvk9DEfvLqiWvRMNbPVGJ/1izQrUxjySy09wbE7CIGpYch8 MDvx6p hkBhz/IcHn&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=P/PvKBX7zaSEVyWBZE6va8sqvZjFZz Zvi63DawsqMI=&c=SkPqwbQrASlIgtYG7th/K1xOwdc4qeOrv4I2ytNvwQWHtd 9Zh9u3j4Z0qhAxRwuDDdvRSU/o e6ObPhHkMl1vZudBYTPdPX0URtRjOMGOWtMcl4rNqL5nG58T0CHiZS&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=dBarJNtgU3anVsJyVa2QO7jCb6VFKZAmpspBDXgt08w=&c=cAyxKliQpLQ7UrtiaQRTVyDuFrNcbm8yAsea/DgbQO0V2ObmLgdX10MRdEMJaXHu9vBoVF8sjEnlHCl5aYvnkUhdIg08T4hAg64xFu4Yii0Mfq7ShaP4Jsl8YsiHy7hO&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=cAutLtNFWN3lSNl82Bk XPlmeoYPEv0S8SuVun1C/Pk=&c=eH0ZrW4g8UvfMBog 1GqACpEU183yFcb2uxbJdRhTt EkCVKFbfjlkT2SlC25fXZTIFo304M/ZSnwiwaYqjc0ABLGzTW2UJkKimDS0qHmibonfCJ/A5MEug5wEaGtlbL&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=KNIyb75v6CdSfbMCqw4AaH9HqLje55E4Gm/F5NzYyv4=&c=uiEAIrW/hSos73qSh2mFlQfB/rxO 0MCINrKqAEpGBB2h5oct1wo/O59twx3oAmI0eW0HwxGSZBHMGOVONYgFy7Z4IY/1lEJ7ZhRK5uPSaijwE/V0sGmP nDL/3Mk50c&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=/1zQTo/HPY/VSo953lTEYpw 0m7S8yyVRRIRwtUROEA=&c=wfTQ02 o8juCJ7ATbdQSrhXHajIjevKEfoMlNFxZB/xY2UUE5y06faCQHa1KYCHBmdn7B88 2F7ImqmxUCAnDWShQT2u3dqK/HiFK3pBiWI15qgdNJPN6vxAsJIsf3RX&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=RoTlevAB FONVpxJa Mr6CVTTHIviyXd1 nXUMX3mmM=&c=OoguovN83Urf9vc7MGhgvyxehc6wWWpo9ayR C hWExiWeJRA3cGy4Yrg8aPONaJxYwevhCsTMe2RRAc7nVFZZrxlJpEKMhXGOKTcxwuIYhs9w9WX77YQQripO1YiU47&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=ZTK0lGG711PCu2oETEz5RYJM0kQ1YkLqNfvSXCNJWUI=&c=Cx7gjl/x9bLSp0MfT1kMqYTnfoBcn58lCPj eoYgYZvyyl/I37dH1oNV/d/2yVdWT0tSt5xR7DRqBn3BART11HJVR jQyzjZeLmylYkrhnGWzCpFsbRd1C 5CnrGKC0L&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=vh1fjCcTlEXWizJ0alTrTSo9oPWMoEt/A7vanhDomWs=&c=mECf4SfdMcjV3GkEXluhj6SWKV4eKpD5SwE3/d1YEvTXgKKa2hkp6qYSKrmdHBnGWfaWDyEJuct 6nA1PmqIxaXP8dEvSRmKbyiBaJ9F ibnezMZ ao/sr/y0wKhreZN&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=Ozxs08Zsl4fLZ4Bo2n 9ZUXc/ZFHg5VUgqp7O8ZTURw=&c=8MPNLb6DVYBFT3/othlcVUMDV/ziJgjZXUWLnaGK2r49ukz XPfFR7HOYy JBSNIpDNJUQbUXkKS5Akp7YKWt/G1bIC2QaM1DX/hq4FsdxMZJ532I3xW2NR9grXLUDV2&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=Udkixr2Bm1wdqqa9bGnWZlEF snySPJOljTM6D02kKs=&c=QlRlVocC4MJqJ02MWNQxvvkPfBJ8aCwhYH6DeitSEGPggMoyytOSNZGZqhFY0BW0W/zTY0fry3yZ3OGw4LcLCv1w/7ekMBZvVard4iFUaMvN4dJvtiM2XD0gjYK4eLBh&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=tT105gyKObuUotcGOI5YeYfN0JUDItb8SPB4t54z39U=&c=6Ab7ZabjU619IcogY8uBi2OiTMkBhLQ0j gUkAB7Tc4GzlZsq0xfes kWZ9QejfKQWsILh27igIehSLMo7oLtpnaEdWemILqO3BgkkEvHV yDSZ6F6tSspg3wyQ9uDFA&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=9IBjzt63QRpYJTku3VAhFK/qf GTKIscx70o6lq7hKs=&c=yTRBMiTYOZzJLQ5WzH8QFt3umkRHqX1YtvKT6E8QG0gvB3hZIqTnivI9PCkXjg3ECit8GoAIg3pQLwKcnDMX/fKoap6qhLHZVE/MpuoNFmOExIGYg5oC/BAZHcJCRiwy&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=uaQMc785wKwLvQeHe3Fd yMxEMAIqiyM Gf45CPXZqY=&c=RLPGrYqX52iFux/UM4J19HlUjFonOPaRDRvfLfmgafHF4 pcY0O5Ix/zrDZyC wsE684X4DHAoZ3ElC9hGmQvzLFEPWkOM phKmehV6tCHduquDnrMuQ6cvGN/a 0fzo&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=rCMxe3dNk7aenlJD0mxDUPY2otXzM9uGAv/T1P8apk8=&c=Jq nouJUEO olkKiMUp1DvIfoYb2BSy 92CZ1J8QQKePTloxHDSj9o56A2EzqoQwVl69UeCI4DX3CA3TrcaZ7lQgT1fTx7aIAxBGD7svgZt7Es3YLnrgfYI9nfVvzT8l&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=v 3Ny 1nvdtOa8naeSOpMzmao69Gjgh6u5MtZFsNYgk=&c=V67TBI1lpBe7gtCiYLeVmMeKP/nde49E7nDAwXd2c0YnhMMhYWe0jOxQwqnIaFxqSc2tY8T2nPuztwLFmrpFCqnAiTth3iJMTmRYURD1BON0sDiLp64uQUBA3AmWmhvR&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=n2Fv3 M2ZE95G3pLvgztn10r52BrN7zfFxP3YgpSbuQ=&c=wBQrU9NvYg8ISXKgBYCK9t4qkNxS6DgchJRkSLY1SZsHaNXwsay9cQJ6a6BXHygAAe6kPk/MIAZBXnh/ioZiEZtmAAzIEDcwE0NBsZ5fZDfWNcB9lhpVUm3QR 1YnYKL&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=5Ccx/TNLCI4PdPIh7C8AvUkkO/OZ n/3pk8VnBju510=&c=/F591WvFee/TGFzGcXyR87vf2sNVX7KUa0cCL6JF0KjY4cvOjFIpAm6vWtyssflQNiadSjOk1dWEjLpa IRnnXdn3tABnLeufroz8xQZsHr7DQBxiGr4HV9f8G8EFsS4&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=1RxUphyFjsA52LDDA1wNk1AUrw21Z9eW9uva6UIppnU=&c=fvFqII5AXfukQzSSWProFXQhYOPucB0Dq B1CFB0ACqRelZ/j/vtIjfudT523BZmaJw40nIvfGbiX3qFbRkNgfgjzy1z9xvWDufF4J6snIbdufwYXEnikmnrYWVNi0Jx&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=Omse1tyk69aSX3plZpgf/3loNIAVwyFgOnmC3UaLumo=&c=OLWlBEEiepAQYkCx7Wzgxlw UJTi9qAdwepgZ4jp SXH7K8TQqRO 1E H5sKJKPJNF/xRFysX5Xj5L4g1/swVct1Gg9l9rAxMLOjLfTt5nWqB78zWX5OqRNABWhb1l8g&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=G/wFBeG8mMhfEF/aJgbKVoHZJzSx AbUBEzdtNA8Z4Q=&c=HZBDN3bcd5KqmthiZqY0NMDepohf1J9moIdi1zBeW0VI4w3Gtr kr1bV51/XEO0C8g5xFDlLdcDbidOi5S MYbMSkBCLE DlRvVb3A4LQqZmhAW87D7/wauFKTHlhmYb&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=7NTmopFEw1aP3Gt7JfYXfoEsKL354x8hpJOO85 Z6hU=&c=veP9ys2eHOKKekZjl2SJx6P/XXsU4iaILkiNRTRQNlL4K T3tqLoRzTfAQPMXqFqE4Rhcik6Oz7GEBD/lqr4iE0fepXUNGCgEwXW4OsBsURfnsxjC1XE9XU FihTxEib&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=wzlOBNQ/znpExy6jruzDPETjTqRg3Nw3fHv/jhMXe3Y=&c=is/ZFbqubiVKiFoobCIZNS/u7NJp1 khE6MFnylgdeTqRI6yUJlkCHZoHBTv3MygEvuw9r462ACKiz/R9i SYxS7a LnhMstbkuhRQikwsIN4Isf7iEyFh9Ho2sC1U6O&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

http://www.presenttagcycle.com/c?x=kJQOLKR vf 7dfVVf l0SZKnH8NEizWoaXsWsFHM5JI=&c=qT8KjfGxBoOlZN4V8GK7W6WeSDpG2Fy03URCJbm2KUd 3VQ3hwQoe35Zs7GDfVmLNYSZ8d3/cP0kW2ag37gfpbDPmVWlatvo8dkOuT0RWaR3/BOc/dTsdDxuF uvoh/m&downloadAs=Yandere Simulator-Jan 15th.exe&fallback_url=http://.../rockybytes?rockybytes_id=1134

Latest 30 of 39 download URLs

Remove yandere simulator-jan 15th.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.