home

wme_devkit_191.exe

Wintermute Engine Development Kit (January 1, 2010)

Dead:Code Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Dead:Code Software

Product:
Wintermute Engine Development Kit (January 1, 2010)

Description:
Wintermute Engine Development Kit

Version:
1.9.1

MD5:
983ccb037650a7be905befdcc918ba4a

SHA-1:
66c679c438b2d624985bdcac733e268471812b26

SHA-256:
01303a1e491cd72058e4613f4c06bad0e41a025c8ec8501825d325aa5b6a9536

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:48:27 AM UTC  (today)

File size:
16.3 MB (17,052,498 bytes)

Product version:
1.9.1

Copyright:
Copyright (c) Dead:Code Software 2010

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\wme_devkit_191.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:J+jNm9b93okWxycLlwbpSXOwG8Cm+X9ucITa6pSFgDSCpA5B+:J+yB3ok6yUapSXq8Cr492qzuCpA5c

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file wme_devkit_191.exe has been seen being distributed by the following 5 URLs.

http://dw.uptodown.com/dwn/eZMuJP4AetaTKaDlSzfCDkTE5mFzC0zUhqmy3OqYIfAra2X2wi-Srn-bxoULH40ozI3Cbl9rRc90O7DOICy0M3KSXVhg0nZOzbLSq7CEdgOxGxOI1fZU9aZg-hQO8mwi/O6ff5w-zLe1uFrE8n4meqpaAWWYojKVg3v9mMo8IL9uBhmvN_f4AbbKbkbH-3c2c4klX-8E9V3TvvkOjC7dQvh2TvyfdkloNaVwBqIcv6Vz77XJ9UhfoFR7tS3XKuBtI/nYVb3CTzFAWpaxJZIToAznzCOX_P9dnzRfiwnY54Z3l_iAOSP-o37kqXoPJxgN4wK3CNx8jSKKN4HuXqjaKyrPyWcYuaXPBs2L-3HpSvOmZy6r0BuiDfm9uBEDb2wVVN/.../

http://dw.uptodown.com/dwn/vtB-vyviZeAaQqI6oUtXbPP-xjp2RHx-VzQgWmO_GUgf8CManY3wGQyaA3GlSoyZTveynSxS28Y2TwIQTp_tiIFG6um5n4zvJL42MLUsSHIrv5RkBN4NKKTTYkyb9tJR/wGTBF-Y76-KxRgGApBXWzdw7f8EPMgjGGnzgJZBaG_PRs5jSpKzrd6ee935WlIBbUDDtnSZ2T78JJYYrg71bJBlJGQinFiN0wlzZOpfjgr4lZ5zNKMo1xvkryHXK0FPy/uM3TWYOlX5lpStrwryhUE1V1jnp3QBll-_2_g5P_5-wJTwwGGZcC2G4BRZwjPJIIiLn9VNYXsjTxGi0EEzNiKTiJxu56pad3m-M8_BVDA4enYeopS_RIDyEP4laJMduu/.../

http://dw.uptodown.com/dwn/5L7Syl1kNS0r9ec1FO1rf1dGgh_KsoEt3p-RIQsoSZOgFcXbYcVAFcAXCzLNGADUaSWJC-ulrhase2nLzuNLI_yX5nWIxmwP3NbMdUTRKkVq0x4k27_C1B-zS2-uG2Oc/eyo4kxnqkh-S1BAaycnuK5uPeTAa3oCHAeyWO8xGIPA_NdQHxNF3TmrlwFI3RfT_w-bZhRjnnbYoa1kf6ekv9LJPu8kho1iPTqyTzOxwKJ4w3b8RVmzK0pW4jdm9ogEy/MXXt7rqHhut1mvbCR7hMKWjes9D2B5n-6YRIL_g6Q44M_SA_ETnm7SYLGeH7_cXg-uglZQbIN90L5D9W201Ohi8y-p2ZyAWuUX3oeDgixymt-mOA7W2Zap3C4Hqn35F2/.../

http://www.dead-code.org/.../wme_devkit_191.exe

http://www.dead-code.org/.../download_wme.php

Scan wme_devkit_191.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.