home

wyd_installer.exe

Who's You Daddy Alpha

Joe Williams

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.senddeliveryshare.com and multiple other hosts.
Publisher:
Joe Williams

Product:
Who's You Daddy Alpha

Description:
Who's You Daddy Alpha Setup

MD5:
cb6724a96aeaf4d8e91a471090308561

SHA-1:
03d4559d00d12db0a61a30b7916c59156a8271d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 6:36:09 AM UTC  (today)

File size:
164 MB (171,948,098 bytes)

Product version:
V0.2.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3145728:Y2Vrq004A+WF4JbervHynRpjYhOZC2u5Fn2cp+BmjhJQcdUmkCJ9ScV:tnlleTyjSau5pnpNjha9y04

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file wyd_installer.exe has been seen being distributed by the following 15 URLs.

http://www.senddeliveryshare.com/3Ov73wt2QKQejQAPd9t 3N7 e2_n8DM9_vWkY94ZPX02I5U SAjHQLkBr8F78uCAydwd A5BxdOQIfvobjq1usWDcYdSwx1KSnetutO8dUuqnrlcrQWsbTYCmHPiesoAH6ml3yfcMsgb4PycU1Pny3T7xkG1eNxaO94UvCeITBMO7FF680hTkLfzRMz7I2IrhU_48UIzEMWZDVAcrvqgH7aRl8krHHuwZVtkmjA24H2iaLG7om0Num01WUm3dpM_BHwwCgvI8Oa52qXVFvT5MxhmKkBfa5iToKGCtSj5pUoG5_7vC0epBInJBJqxlinzfmvST8S PXSyhZPwUZv4C8RUnNK6AwFu4Lga2djKkSDdSN9FhMkC2a_Ax55UjgoSE0fEZ9NbZOdtCbw2OxkvwIYIVyOazp0bpOaVUbOd0fpEtK1ZDwVtmcRp1yXJcv5vP4sc_M6paoBd2tUsDyVKvXIpxlIsQ==-G0sAAETd1qLJv5SDGNIxyeUDiwq qFMOWJOCtEUSAP7gMczzLVE XGOBGkR2tgJlIOav2EKwzpPiO3GLuX_WJr3uKH5wCQ8=

https://0b56830cb0f507bd4c286751927532013ed22416.googledrive.com/host/.../Windows.exe

http://dpcdn-s11.pl/.../WYD_Installer.exe

http://www.senddeliveryshare.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

http://www.presenttagcycle.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

http://www.senddeliveryshare.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

http://download843.mediafire.com/qlsr5n2s1gdg/.../WYD_Installer.exe

http://gsf-cf.softonic.com/d3d/370/.../WYD_Installer.exe

http://www.indiedb.com/downloads/mirror/94592/.../9d2e8f152a3a1faae640c98c39e95110

http://www.indiedb.com/downloads/mirror/94592/.../4cde600e973397e3c30a2ea3bbbba051

http://download2030.mediafire.com/q2ku8lhka2wg/.../WYD_Installer.exe

http://download934.mediafire.com/imu7q3e5h7rg/.../WYD_Installer.exe

http://lnkr.us/get?sourceId=5&uid=50313x1031x&format=go&host=icontent.us&out=https://s3.amazonaws.com/whosyourdaddy1234523456212341265436346547456/V0.2.0/WYD_Installer.exe&ref=http://www.alphabetagamer.com/.../

https://steamcommunity.com/linkfilter/?url=https://s3.amazonaws.com/whosyourdaddy1234523456212341265436346547456/.../WYD_Installer.exe

https://s3.amazonaws.com/whosyourdaddy1234523456212341265436346547456/.../WYD_Installer.exe

Scan wyd_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.