home

ywriter5full.exe

yWriter5

Spacejock Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Spacejock Software

Product:
yWriter5

Description:
yWriter5 Setup

MD5:
292f28c3c0606c36e0040b8b9ca940eb

SHA-1:
e7d924cda7b3ea5024a60061bfaf5deca102383d

SHA-256:
ce32fa34e5882483d38970a0d63db76f023de9a4154203ac4b8ade77903ed0fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 8:22:45 PM UTC  (today)

File size:
2 MB (2,146,973 bytes)

Copyright:
Copyright © 2001-2011 Spacejock Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ywriter5full.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:C9dyqzK934jgKNOj9XF/CGSsJ1MK2p/txlkJ8Fk4361pQ1tWpZssqq:Mdyq0T9V34/NFk4q1u1Ipusqq

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9948

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file ywriter5full.exe has been seen being distributed by the following 20 URLs.

https://dw.uptodown.com/dwn/1jeAZRNzxsqdWj5OIcQOfRTRFrx8sN5QPkVczXk3HMhhBECfs97gPdsQfaLBwtbFkhQYYJlK65tAXgHIN_7XDdiNN5Z9KZZVpO7_uIYg7Sj9n3eG6BEgnA3wpY8mTc4R/TqxjN1pFQbgPHJNlK9wFYMZ1_w9ugcbTTRnUvkRvosYCqxZl8cFZjHoyKaROh6BtPuAw_Om16M8xzKQltyVcAp0keA_s6FgwO9pJpkrUWG9yZRvHd4dKKvC2838Vhb8C/FhNb-qBz133YQxolYPgf7ZjzP7pPLFb6JOieGSzHX-MB06fsVd1i0j54dIwaXDBs4u_k_B5XLPhfWsA3nwx1UNjCN7lsbnRHk8MyFHaPPjIFiWa1rqhOOG717NwcN20c/.../

http://dw.uptodown.com/dwn/Q_XBrL6lXgFUiDAEEfz4vhPYRJ9U53EQpDOEAzOFhXjaHpN7sEYRsCUDkSueI8ECYViEgCpxUeGmuzFe-0aNUrG1-romKm1mDywrMJoXKswm0dV1kWmzP5Ffp1Z1qvTu/TxfAlEg2M-DnUzl_b4glHRFGqNbXj8Z5FOyc_vvdDCVbl9q708RLQxwuI6LcHibSIN3ogYBgzhvLxyScjrdOzHMnJAlByr4mZfBIybBqW7ftssUoIJSvaxBm3P_FYeBN/BOBNgcoUOIBhacG1ISex55fryX5vE9rUCHQk4tj2eBZAeHaukcNNHqt_p3PcIcWTYnDRjEhCG0KqDqha7vKXJlac2TDv1hh1GmoSMdDZKLstF43VXq7R67rAO_ko_VV6/.../

http://dw.uptodown.com/dwn/2JfPetOEkchfbPrZx2PuGIzZuri1PDULAI-cfy2OFD7l88MvwbVoXJy5ATvjaO71BaTJDcIi5XKl6J7CLwvh7EbXqAOaj-D2_aNvCmwSqfUGfch_Kmbjg7T7R5o1a4ix/nTknpWVgRK5SnnlRqoe4ZzcMEkcds959iMtBlSLLFe7bJ614iH4STJ9P4AUiwsdUHt93BadI5GoLb2e2YiZGpC4YfQ7WRPJBHXgczjxZ6rC-gbJ4pNJoErfIQWmVKtwh/.../

https://dw.uptodown.com/dwn/NQcKh4LsNpBiqaoc_saIkAi5ngxw2pvkxBUMZTXX00Ft7ghCxzZdTRtzI7AGLZHJbKnDFDN52QuBgNBuZGTvF-BOdYrCoYny5c3kZrk22sJM32e7nkjo8i6D-4C1Kqvq/CFa2EhRZkeCjufHeUWKpU8n7vINOPAt-9IgBnLemixrC1SEfwDJiwedrX-RoLLzcI6fCaksnBRfrDEq-X0u5si9Rjv5xbSYG773B0cIPSO6AZqPkdqpdO24TfEnFT0U9/RWIgS5IHEdMCTSs7lQneZlSgY-YhnJ96RPypOl-EJ5didXYW1VxkzGyz_V7bQKorZtkMLK8lFE7ecxs6z-b6Ofto_V2XXCD9Dd7zDb37tKp48yc3bqxnCC_KaZI7yuyx/.../

http://dw.uptodown.com/dwn/8iZMvvGvLq58klUSjS9vfhULgjJYBah09EhFjge4KkDn5q0w2L4AJnSJJWuyDxP2FQ_9Q7uSPqwWyigTfoyMKGOvKaZTg44WZo3HeteENnrtbuf73Q_0i6CIEt9bF5D4/Cjb0c3HAZU7Zcp_ehb72oDJgxErgvFh7vHem04jkmj_l8fCXnjXz0vE5W-BTECjDZLtp-13dfK0pmqBpoRdX5A4VjzeWgMQ471JCaCnSwxwpLzwqzfsuEvzbB2o8dVDW/O-QdmaNi_16n1BjqEO-FprFurefdF96A9jvhTp-h5lyEkwDHwsUlcanZxnVDDnSaWqFRUKm5qMt9zkSdRNZfstsbnSJHAASXmT6Ud4VFjdfEP9ewjxjcLwQmBosp0Aer/.../

https://dw.uptodown.com/dwn/3yOi2mhoeSMAvl-K--7szqi6Ru4Hx7CRPsbY1gkz74qbR-dfqAlK7filyT9ibRXey4aJ4LTM2kBNjQD3NktJnZWhT9-HORbdpqqZYqCGFmzCNV1wUSRu2jqhjowIFAtu/m_mzqCrJCIEr7czXEnxQo0GQ7Nai-H8GWipcnCiPPI6OlpWBXHYkt5UqRLz3egoFRPr_P90Bf6i-JHBOexNXdoFnCjhthyWM1B_VQLeVJ6-sXrPwfNy_lNz2Vh1HhuVN/45hroZ7nXP-9bF5XPys5W4gh1qCizMQ8g1KfHm02NlBxfUh5TwAhj-u5smWiWf5oWJuvSNORljBg7tEi6NE-SMgTNCDb-mYSirmyjgYAhK24P7OZEpgQBs7cpstWz-7b/.../

https://dw.uptodown.com/dwn/BlxjVjsAoUBvfKBtqGlcN15j6vvpI2WFxijQ8XmWhirg6GfmuBlTfB5W9ANREYXBlMPP5i1hU9aZKYIgxPU3QxSED03WT6QnmioARLQ0y4fA-his8iFI8Q_8x9J5AwEc/1GyOF8cOR3AqPWpy8gNlecL6a60Nxgu2Tcs3cOl6X5ruJSA-Co6S2WxMXl-qjmAZFYAfi9q6DOZEtfgP75myYKWvEzfeEbv-oJlOFJ6bbPhed0tBJpj6l4-a_WoyS3uA/XM3Wo9ZtYyk8xKCYx_YdYZH2oH63vKfHNvNOZE5WIH1TnveZ-pBmcR3u1BJv9WfZuHlLc_QyrZ_86QwU_v8WhQT_xlPq-QlqHjfdCIAy-We_3fEu0MyTs6EhwivZ02rR/.../

http://dw.uptodown.com/dwn/p7Km5sj0EUfYo8HOCeHJakhHMTjPXOpVbFxJk3sUxYox_LxZQNtuiEuaKllWI1GTihyO1z308kElhLls8Z7HnT0JilWLSPRhRilXr2oEfG4PaebeqGEVlEjPV8cPYjz1/p4LRudqt75QzsC6Vvt9tAZ33ucmr6e-7yP2yubbqwNJZkgfPmiOgiVWZvWXNmwAzr_rem2o_U5EudaDYRUm_Bs9XbgprFKbeDsj8cm1VcuJdhMpyHMesX2GpOpVo1j3a/.../

https://dw.uptodown.com/dwn/EvIa0upHjwa7VfMXTDVi6fjL14d_K8ymtsfKSSKBWEF1ldp4l5LcVaUMVXPvYzoOerkyijPICJBMII4uLFXvyq8ia8JxTCceRhJPP5_ROHYCVN5GvJ4UDjvvvrw9gjLE/GCOGeBVVVB9Posa_WOICiWZfW2irHza2TgS9RqFZjr4hKfpEVjwA8Jx7K8AsenGLAFBKPNwCcWAA3TWW6jNihT_2d4F-0QqWpz3L68czkoqJYgEFbviOxWcftgiIS-FM/.../

https://dw.uptodown.com/dwn/O1FVngiPZCWFhiIRD1pzKlI6x-eLFXhQxuquOiZ3EELG6sQRr7jB56k5gbLM9ZYvzPZaGL6spbe787Vd6QNeHCMQhzM3__5VJ26R0a3K8G2N0B9i2KnBUhcl7DOGtGzC/d3-FzmGKc7UDXxYHkAllaeuRlC7lk-3lSjB2tJCCIqmQ0KhTjm5k546mYvxfvP0aV2KeC99R59OE8WrqqVC09Ob-9U29yG21mWNjFMvy98gBNJjqFZX-gu2W9e3b2Ljb/DGRaeIpowOB9U2LCuE6pxNNOW2hSMI7_k37daPSkJQaaXIxKN6KeLyOtMzzVIC3-O-b_lf5_rDxysf8kKCihiiXdj39-3EUGHjqazIwJc3luKe4fuv1AVqlGLLDhYnab/.../

http://dw.uptodown.com/dwn/HN7XS-B_gaRxi9rOzTuz90j3KSMfoGVz_G1p5K9LTk7HqduysnRqIqtNAhGsTtPm57HXtE568aWF7LIkzQJgS8OeFwqjwozTy0zTMKNQamZtb04_nb1GK-Cassvd2h_4/_NR2FbwqPr53Za0sJAPa4VnMtpvgbkCSuWlMBrqfmxBNjA-hapSjlBWQx8glkXP0Bw2swRNvX6dl6T7o3OTfsGWVb1obuKhnuyv6t2OOXV26JCgkUsodoKC28yTk4_U5/.../

https://dw.uptodown.com/dwn/PqCrpShybA-EBo7tp_j6pDaZx8nB_CCGwnjNhHcKi-dKKPhGu7h8DHndwc0roBpGdpsBx30QSyxsY2ceL627Vc00a9TsUDqSQvVhp0yAp5QWa6s4zXBOVbOIDvOLiamb/n7rSyMdFifFNovX7ct2Is7hC_7DihwMr8s1b2I4WiTmjNWxo0-nXjzCjLrjl3K9enIyAWxqbWRsupXPu6QogcPgS-jEDZZ1Dqfe4MSyszglDC26ozH_3Z87Kt6AcclSq/r2VIkpni7WVX14VqsS2FK_OV2FvuTi4wYw1shR4UXrbdJnQftCbep5aQC-QjKWIRSB5o_AJddb6kpECfkYxMguEILyUKLlR4E83FbyzuavAPTPrZPVtuSJXER-Ug57Wn/.../

https://dw.uptodown.com/dwn/cwBETwk-2LFuAzKXr83O3bkprEsYmL8nu3h4j6UZYnAyazqRht0Z-dPNeur8XYpIx9_3-lq6VFJt0eS3izEkGCRgBt09cP41c64gvu_f011hR1wc3YWv6tLfyUB2UaKH/bOOhpb14nkglWlRqhXmx6fWs46QEvN6gJV5Pp8DxpI4AwDMnbX-9lTwBPv-KQXupD-EEbvcmTnS12biYlOf9mfctVwjTrBE5o2VSwCxCUxdVmjVjKbQg-vQd_iy9oP1N/9MHLrglr61IBfkwWKAUYBAkpGgD3QguHd0GnJFgBISvHPdfsGFQMbodsoCvvu3Vw5QJfKtsPSWHWU8C_CqtOSMs1uXryD4uYqQD6mIUW8hxLtmvBA9c6QoaCoOqR6YyJ/.../

https://dw.uptodown.com/dwn/TZu_RU-6Su0b6SNywM1rd-6sGiKGwlkAypURb7s9Yc_bG9r45VuVdfb48ytzZ3MeBgaLQKe_znoSTNXkAaQpHLdnjNCHDerf9R09ktRXZMMCqA2pgL9EVt48v4k0__0z/HTXLwvAwXIVOWfrDvYSEe8X6D_oFmulEhRYgeYhCwUsH6d57_-JmUWvMV6VpzT4EZnozyPLXeTIuGUoh4_Gy5MpGO7znQIAplj2k6NK72yjGhFXBEO-4-z-DdZLqpYC-/g5rHmS2-2cEg34EUV3auVKSyBJAr8BV-O_TymcLyGERBc5XupsO-0KTGnXbm8NI8gMxk95AU0dOUFsOMNHX4ygBxdB-smaiyzU1KEBfP_pHtBNO0PAP2BhFCgObJ9wfI/.../

http://dw.uptodown.com/dwn/6VX4VO7jrdrUikcCd5lxfM3A8N_4Iwk_L0i0CdQTLN3wbYA9hSnrADKtbDDCmTH7L1z9zgzcQK-IZdpq4XYDhokxKW_LFwC3aLhJ5pUnlIW7fw5U0ONjGqAA3R1Zmw2b/n7rsAU8ZdsHO_88-23TYrRWlYQq7sjdMeTEteVLVMYuB2T3JwYwisGwwpLA9t7SaxmoYN6ev3vKsoKpyB0gNeqT2uozdSBGv6xQWtbdnj5Z8xRbVmBpnp_VRuqHtgjJf/.../

http://www.downloadcrew.com/?act=software.download&id=21263&t=1466451029&c=b2d165aa3db84e3ea11a72ebd2da7d5341de715c

http://dw.uptodown.com/dwn/gsDBwVc8Tq6uLSoFzO5Yd4_3fMiU9Ga1SR-ITgCAHOCAkjh2nsJaMuMQCEE7SPWzAOQ90uVBKRGBmx0QngwF6Sikl5CBeC0xnqL0OnvOU7-KEntET0xraI8I8JsUyYrp/3C5EPhngbGWJbeDUXlbtaBlLxmgoYdudei6iTKkZ68pZIDknLo45HkHeUBBr4ndtTmC7qJ2bT6jsRKO99zh8Nzch9FNjxtvKcdHQj0gB6X39W_KqcOv3BIQlYmurrpRZ/.../

http://software.thaiware.com/download_url.php?id=10155

http://ywriter.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuQNUg8DX 42E9y4ATashVeq0rbaoc7M5Dv2pt8I EYQz8Hg7p5OUsRCa2cBreTjgEcbiR87/.../8NRavVoGfS1QOeLu1x6H3tWl4 Q1Tlsxl45h9cE=

http://www.spacejock.com/.../yWriter5Full.exe

Scan ywriter5full.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.