home

yandere simulator-mar 15th.exe

The executable yandere simulator-mar 15th.exe has been detected as malware by 1 anti-virus scanner. The program is a setup application that uses the Self-extracting archive installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.presenttagcycle.com and multiple other hosts.
MD5:
04c13d6827c629c084f47b34c8f7a5cb

SHA-1:
345e70c2f6b12bb5b8e2d9f9df84369fc9471513

SHA-256:
7baafbca91c04295908096280e1df3a70245b6e467fa05e139542739826e461b

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/27/2024 7:07:06 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.5.15

File size:
566.2 MB (593,707,012 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Self-extracting archive

Common path:
C:\users\{user}\downloads\yandere simulator-mar 15th.exe

File PE Metadata
Compilation timestamp:
2/15/2015 8:00:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:tWCFYE6GG6HPNjzO5Z0CvQjiohZ8ntSTnoGn5LTdDesrKhu:tWnE6C45tw58tSBn5PdDjrn

Entry address:
0x1D7CB

Entry point:
E8, 85, 63, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 82, FC, FF, FF, C7, 06, 20, B2, 42, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, 20, B2, 42, 00, E9, 37, FD, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, 20, B2, 42, 00, E8, 24, FD, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 52, CA, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
162 KB (165,888 bytes)

The file yandere simulator-mar 15th.exe has been seen being distributed by the following 6 URLs.

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.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

http://www.presenttagcycle.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

Remove yandere simulator-mar 15th.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.