home

cake_queen.exe

Cake Queen

Media Contact LLC

The program is a setup application that uses the Inno Setup installer. This is installed with Cake Queen. The file has been seen being downloaded from cake-queen.software.informer.com and multiple other hosts.
Publisher:
Media Contact LLC

Product:
Cake Queen

Description:
Cake Queen Setup

MD5:
02786bc6d139e3f0a1d6c2bfd0051006

SHA-1:
d3eb07d3fa5a5981a7aa7884a39f82c9def84bf5

SHA-256:
fc43ea9bc0d580788c4cf130242a87af6f247072f16145ea41723a05e064a13c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 11:04:29 AM UTC  (today)

File size:
11.9 MB (12,497,937 bytes)

Copyright:
Copyright (C) Media Contact LLC

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 7:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:MhFUeY2JIm8wx/DxGJAKK5UAqqtgB3DNtc5yvTfK3EpyoyX3QkvRClp9:MhFhIm8OcJA/5U8gxJHbfKm3yXgk0B

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9998

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file cake_queen.exe has been discovered within the following program.

Cake Queen  by Media Contact LLC
Cake Queen is a casual video games distributed through the GameTop.com download portal. The trial verison of the game in some cases drops an icon on the user's desktop 'Online Free Games' which links to a partner portal such as onlinefreegames.com.
www.GameTop.com
3% remove it
 
Powered by Should I Remove It?

The file cake_queen.exe has been seen being distributed by the following 2 URLs.

http://cake-queen.software.informer.com/.../

http://e.gametop.com/.../Cake_Queen.exe

Scan cake_queen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.