home

cheat engine setup.exe

Soft Installer Program

Media Theory (New Media Holdings Ltd)

The application cheat engine setup.exe, “Soft Installer Program Setup ” by Media Theory (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.dldeliverygrab.com and multiple other hosts.
Publisher:
Software Installer Web   (signed by Media Theory (New Media Holdings Ltd))

Product:
Soft Installer Program

Description:
Soft Installer Program Setup

Version:
2.6.5.3

MD5:
2739f6882926535b1d6a1eb2c7ef2371

SHA-1:
b633a9d9f1a60e7c664dde1fb824e4906cc99567

SHA-256:
bb2f6972d091ae32e79e8f91c468382db64b621307d05b2a44b0f490f7cd6097

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/6/2024 10:36:04 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.Installer.Installer (M)
15.12.24.14

File size:
959.7 KB (982,776 bytes)

Product version:
2.6.1

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\cheat engine setup.exe

Digital Signature
Signed by:
Media Theory (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
5/25/2015 7:37:49 AM

Valid to:
5/25/2016 7:37:49 AM

Subject:
CN=Media Theory (New Media Holdings Ltd), O=Media Theory (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA944A31E4793A274CC4ADECFF1E7349

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ezUYA+88/qxmNIqyIHgVRP0zKfyxHQr98X:ezZANMgmuvIu8w

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9334

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file cheat engine setup.exe has been seen being distributed by the following 13 URLs.

http://www.dldeliverygrab.com/c?x=Hoattm nmL3cQcBUZmUn PUIRVCp9AegbdUvPkkBI5w=&c=T335AljMcmEG2p/OsnbR0eprRBVnq71xnGWWJaRN3DrkoU1NlUzXhQovUwW4z7Rf/7zj7Skm7nMRX7MG21XEWxGiOH1IrVEZM/zaxDYyDTkOK2rjVJfqcy/kxffTme9KAUvKC91n6H9goLxp RHrrg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.applicationstodayvault.com/c?x=UXEMTWrkpzfZQecgWs6UC0G6ynmekETUE2IYmGIumRY=&c=FECJ9q0yPlJQtxRZJ9F/Lq4AA51syq50U3cIn/cG8SJAlC7eYDeJSQnQT73QjDW5yq9d1Z9DcCmDjDti m7hr6/fJhyxqvinSPWPMkS8clyNt 4QFJp01Orw5E3T/050dNuJizSqtOvF4J1gFYToSA==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.megatourapplications.com/c?x=VNb3dC0UzSIWQFO6rRgIY4oF/I6AiptJduuWkiWveo8=&c=MdgatwAVxfyDDdb4YO4ozNZi/MSLlw6Drl7lLC3aOOtDSmsAnohH2Aj5YuZK QII6dpHR1Dw8lalZcxt6qIqsWy2zq9lSIxkeIBqt7OTkXEtEkil27g6q rkp2JeM7e8VVZ3XnvBy2s/bt/8QOkDXg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.dldeliverygrab.com/c?x=sinGSWAjwrveu6qp4xneSm3OGPqfUqqcFvKaAFzDuew=&c=mLEiMVE69PBL1h9SFE/58oi11TKPGjlatQiW3xDiLmNhInEeuUnntu5AK8rPCjWg0avMFeqgRy37TqOg8UdjhGWkV4/UWOoYQCh0B7ED63kc7xiYv0wPNjyez25Xg459TUUWiyF7cVZgGj4vMk0aoQ==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=OzczoFHPkgkZBhuclEj7NksSd8ehcflL0EiT5RDZjas=&c=ojTSclwlI1kLyTWHviIQ68WFYSKkj9OX9qxwFsIbDp/127MkB8Bp68E034HT01FDtYLXnvhg2d/plArlRiTaKFlg3fjeBQ9I08vJxaTpcQzgpIP1JP7Vw97esdVMQOg3t05IeJn7I9X/vlY1YRSr3w==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.dldeliverygrab.com/c?x=z6ASrdaCanA6YOgvyW5/VMNMrvdVfeKOW2wM/uvuINs=&c=s4qMH5g/dcf8Ka8a6Qenlv21XCVrrRbC1X4mEZLDE9Odlsvk7SsFp1Oc1MP/10K34g/44cFNJ1adGZPvRvyumQL/QUEfKcb47HhhHr0J1nyKdXq5FQpTUwUhQB04JsSRRi8iLuKnRdedRWNhhuZ4mg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.contentpresentfactory.com/c?x=fL/oN9gZjq7RaWstMAqpm5pESVm7Xc43lqgIPSnRPvU=&c=ohrZdIeyiIcr4pxpfnSMeqbG3wzcvsNx D2BnVwqFZQzvMx/Q717i1HJHDEso1r8gaWZzw5OExpyXk2k1yGOCoGYSf70q4oBxSv5emCYEH0K0AqaE2m4S9JxPd86QQd5HHnDWXgXidEbwbj/V 815w==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.megatourapplications.com/c?x=a1sITdXYrzUV0Y2H8ZGd aT5ZLOoAnY7EkZOOXrFeSM=&c=ipIo3xmQaN3fy2YgIZCXKHLwYGmZSCbUanJzxvfLCPTfhI2nKrhC65fa9CENmm5Bt5unwe/u7GW4fkdknOcy2fCFZ4QR3rb97mMaGUkPambYzNFZhZ9FzviRPTkgNaLhUCmeAMS8/if0nRhpwzdwAg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bodyranchtag.com/c?x=ljDZJdskt4wQ7YfJBv/ejA193Xdw/dPQS/tGytPZ23I=&c=bvfZobqT3UnRsIgoGl5KvOqdQFmGukXB3jU6OxOKlPBhmQM2yLgESmz4DzevAwLeuN/Z0btQDgM4Vt6 6wh5jJzNsalf5MKHVnNuRZ5667y VXkkn6NlE3pzXLgq9jahQJat2jaOAmanf7VbNsCENA==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tagsignsclear.com/c?x=ZykdsBKy2J2gmbvJnl3pa6 BVLYPXEFYZonXrFB5f5E=&c=cM wTpp/GRF ZFO96RyAOVQ2lnl1W0mnPnIXEnm3Rq2ijImYLLHFXcbgzC61AkvJkCg8UU/uVsm56we9zJrKOQVE40LzL 5Ka97BO05pl2YLx8tSuO8SRccEwo0Re5wAfolLTdaGaJFbrm RgNujIg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.dldeliverygrab.com/c?x=0snRuWJLo44q1MoEojstlpV2HJFo7hBRPeKROJL1Xzo=&c=0Uo4jSqdd/HnRjh5ZUkDM9IrZOMURCfuGIQ8T/kExj2wViEihRFSu4BFk82PX5P6WDQJNq/UuaYEsFCv9ARakf9WlWFbp zrL1xs04f0xkOQiXgS4wYaJVM4pe9CSZ5yOh/Pa1dZxhCI76/wHayOUg==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.grabpresentapplication.com/c?x=yHzU3BHBMJNuTtJraB4bCk pMulK2EEFh5PueGhk/fA=&c=5y7gEhT4hRyKY0MB97PMR3sZ8rKwS6z4 rKDa4DnrQFLO3EJjo80hhWt1QgYdl8nS4CAxWF60WaibMwK53WM7AA9rA54GKsXSFqujbpoeZ1dGQvLWFLB710TnQXskRAuFrPDu7zfylvWj9B3kw2xew==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.applicationstodayvault.com/c?x=hlm0QM/eqH4p fjDMRl6YG7r6Io97uZ663RWVPQzquw=&c=FUzNCKBMCsWhi17DbvRolpUkGR4mkDeUddiS akwAvPw5UCsF4h6M90ttPaDExE 9NX4N9iqkvnSy1h9hWIt1djaI/9ZCjfw4bR/UjQ3MPtZIW1bm7oSu10MFai4KIuDPz6FZwHiK4sVd60/B0EloQ==&downloadAs=Cheat Engine Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove cheat engine setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.