home

yandere simulator setup.exe

Bopihir

Hodo

The application yandere simulator setup.exe, “Bopihir Setup ” has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.vaultstowersmega.com and multiple other hosts.
Publisher:
Hodo

Product:
Bopihir

Description:
Bopihir Setup

MD5:
ea9062de00cc6a97ff48b82f3c2880e8

SHA-1:
52deabc77152c9ebb4892bf8b65f091ca87186c0

SHA-256:
f1da6026327de9a872023054303b48163db3f31916578ff4851aad8281bc3859

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/30/2024 12:28:39 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
8.0.319.0

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.3.7.23

File size:
1006.5 KB (1,030,634 bytes)

Product version:
2.3

Copyright:
web

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\yandere simulator setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:V03Onnm+bnUv8gy/Xlx8a0qhL8bwrASEV1hOvrJiEAWw:Vcgn9giUa0q+k8eJhA/

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9082

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file yandere simulator setup.exe has been seen being distributed by the following 5 URLs.

http://www.vaultstowersmega.com/c?x=yJytd6Kc8Qv2oCYfc/OqEBT/Wll7M IkTRPnptwVfQo=&c=CtJfcNrnfveTgM3mYKFzZ wQsoTpf8XOWcOAlMFPnTcYhHsEw/dZrGZaTspPoSeY0LDITN6dXVtd9jOKOv roe7qkxPBJKXF9znkDOD3DaOXBrqLho/ZxbBLnxBx2noLEHdKpVBdkrviDWlTVDn INy3W1iWbfGUzfKgjRe/OO5OnzHPMBm5c2uboQkQCg/Z&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php

http://www.currentbinariestoday.com/c?x=d7xGRvKbqi5X8VbyOioB66VHvyUtAqZQfIP4fmldf3Q=&c=x0GJV3KBTLMz0a5Uh4Xblv3iiSBCNAZZrZLfgqItmQcUynAXDCMu7zStxKUPM 3H0fbyI11 oE3Bb077EWxC9TwEGfw3bGUgwJ 4aVdLs gYj6d/4BKbz6ocm/amzsee6RTctBfQP20HbN9MT3k0N3qKntEB N7rdg7w0kcNuVUQ1Coz3y3a7tbxLrsDVEmR&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php

http://www.currentbinariestoday.com/c?x=jFgtg/rMCEo0t215iUR17KLUILDKqWJ8y0 5ZtPNb7g=&c=ufLLeCtlndfb2mRXmvcSnXDyGgl2Q5 6jziRprOxp5NHd7MSXy7A2OjAHiZ3 vLqox5sDokH8Xfs4F7fwhjox2Bj5VCcZdOzT6GY9A4 cJPYOBzjICrg/Z1u Oss0hW0bQdj7bKc77MsGr5qlvoWG4OxIr6uKa55fqJyXpZB0nCVkrarGfxEoAdtXZgnsjzs&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php

http://www.currentbinariestoday.com/c?x=33KtNwwHpEdNX 3mAgXZFVx1 UK/ajHpEQcRt4xZXzg=&c=NYF48uNhOkOgAGbh/zVynnVn2vGUYl8Wn9e7oCqSFfboWwtIil51szA9NWA9kRWsTXeC8MB6gzsqzu0LIbgtyScPwWVmiwGTmp7Bxqyszm0uSeXxu1e6hk79lTWi4/VYSHyn94yMuUJPUUHAk/Y8DM3vVPZlTd9KTQhn93Ki3iuQ2tlyp6983OCgozGLAN09&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php

http://www.vaultstowersmega.com/c?x=99dyZMWGUG0dlxilYJGuDF5cz/2LfFykQ36X1MAC0fQ=&c=93cy5ig/le1DMBw8wJ86B7FakILIM NVRFPvxJFVT9L9axSvD9WXWG8EYZiikKPKKjXp9ZIqi3/xD/DgOnKsiDIsqbCz8i42wqVk7dkqTkjm8 OtwyRjYP9Kqed6f3qe2s6MA42aepkHZht5Pj Y1f9EfOJEYKtyxvq8WVtp BiMybJGr0avz5yBLizcvz5t&e=0&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php

Remove yandere simulator setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.