home

cheat engine.exe

The executable cheat engine.exe has been detected as malware by 4 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from download1666.mediafire.com.
MD5:
1b30be5b5326d0a4ba9447ef1cd4cd78

SHA-1:
e65ef6f3caa54650da61b3c295b830b55f16e05c

SHA-256:
f4da46b9a56fa6ca5f40330543c5dc04e9d20487f67eba4343edf2041fea8ea0

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
11/8/2024 3:10:43 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Malware-gen
160518-2

ESET NOD32
Win32/HackTool.CheatEngine.AA potentially unsafe application
8.0.319.0

F-Prot
W32/Backdoor2.HKCC
4.6.5.141

VIPRE Antivirus
Threat.321452
50318

File size:
3.3 MB (3,416,400 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cheat engine.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:87ISgE6H3wB3w81lc0AVT/yotcpWLUmfF7Ch6b2SBOfV612Si4+mImgEnoSE5u:SGWP2VT/yotcpWwmfF7CagEnoSE5u

Entry address:
0x20CCAC

Entry point:
55, 8B, EC, 83, C4, EC, 53, 33, C0, 89, 45, EC, B8, 24, C4, 60, 00, E8, E6, A9, DF, FF, 8B, 1D, 58, 43, 61, 00, 33, C0, 55, 68, 6A, CE, 60, 00, 64, FF, 30, 64, 89, 20, 8B, 03, E8, 53, 03, E9, FF, 8D, 45, EC, E8, 33, D4, FD, FF, E8, EA, B0, FD, FF, 8B, 03, BA, 80, CE, 60, 00, E8, 32, FF, E8, FF, 8B, 03, 83, C0, 50, BA, 9C, CE, 60, 00, E8, B3, 83, DF, FF, 8B, 0D, E8, 3E, 61, 00, 8B, 03, 8B, 15, 64, C2, 5E, 00, E8, 30, 03, E9, FF, 8B, 0D, C8, 3D, 61, 00, 8B, 03, 8B, 15, 60, 44, 55, 00, E8, 1D, 03, E9, FF, 8B...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 MB (2,146,304 bytes)

The file cheat engine.exe has been seen being distributed by the following URL.

http://download1666.mediafire.com/2nmmd79aobwg/.../Cheat Engine.exe

Remove cheat engine.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.