home

Yrik.exe

Yrik

DDGroup

This is a setup program which is used to install the application. The file has been seen being downloaded from docviewer.yandex.ua.
Publisher:
DDGroup

Product:
Yrik

Version:
1.0.0.100

MD5:
93ba0b9cecf5f98aa07bf1c9c16a3b92

SHA-1:
a6922745eaa44bf9d7f866ca46a06cee5e8aa679

SHA-256:
b923bd907c06ac831fb2654c6e56e7c28b2d8cdc1c40707981a7a7769663ff94

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 9:23:12 AM UTC  (today)

File size:
111.5 KB (114,176 bytes)

Product version:
1.0.0.100

Copyright:
Copyright ©Temoin 2014

Original file name:
Yrik.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\yrik.exe

File PE Metadata
Compilation timestamp:
7/20/2016 2:05:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:S1QYz85NtV+eq7EWh+Pawgoz6ytWyF+sv+mh763YKx6wgWWipRiRlz26QhUpRiRL:Lzqp+PawB6NyF+sj03YsFgVhlQJlQa

Entry address:
0x1971E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
94 KB (96,256 bytes)

The file Yrik.exe has been seen being distributed by the following URL.

https://docviewer.yandex.ua/source?id=5dxa-rtxlnc2nfzbbe93m187h27seiuxqg0w90sqclvorw9a3cgjnsvmxh947e2g525h4lltgeyfa7uxkbvfqjxz55qgi7sv3ztb8m1&archive-path=//Yrik.exe&ts=15623ec53fd&token=5W9NIebDcvG9V4QgWyvq Q==&name=yurik.zip

Scan Yrik.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.