» hello hero cheat.exe
Overview
Analysis
File Details
Downloads (1)

hello hero cheat.exe

Project

This is a setup program which is used to install the application. The file has been seen being downloaded from s6374.chomikuj.pl.

File name:

Product:

Project

Version:

1.0.0.0

MD5:

e7dee5cf78d71bdc57739e5e3cddc23d

SHA-1:

ef402d0de4060327613fd0ca061694ec5ced6cdb

SHA-256:

79b951ef8cdaa1251085d8d8825fbceebed78ef3eaf5ebb96eeace107227ab39

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 10:54:14 PM UTC (today)

File size:

10.2 MB (10,709,034 bytes)

Product version:

1.0.0.0

Original file name:

Hello Hero Hack.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\hello hero cheat.exe

File PE Metadata

Compilation timestamp:

9/16/2014 4:25:26 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

3072:brVMmNF71+qD9Y6+pTwLe6DPGHGAZzq2Y0VL3I+mhUxlegOl49k/n22y9y:bumNF71jD9Y6ycK6rGHGAZW2Y0Vpp+1

Entry address:

0x34C5E

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

203.5 KB (208,384 bytes)

The file hello hero cheat.exe has been seen being distributed by the following URL.

http://s6374.chomikuj.pl/File.aspx?e=41lkJDq6waApq6-o7RRAvlh9lIwh-0i6o-0iqC3kqoyLRaCRXyDTUsRW4n8xH3v-UIH77UQ4Zo3BC-uYZJjwX_EsigWxDf0OA_zhlG4LpPI4rl8KFkUrtJkscNHGxcWrLt8N2xEAw0mZz3MiL6goqWx2IUCSa_pYYFVxP0ktE6z1QzOVa1bak4RxQ6YIJ4oXmVT2T2_CduVvnLM5cSWJibaFYG1-Gxe7wmCIOqlgwAfjyYbxQTgupb-I0lcFqhoEzeGgiherngyHbvpkVkGR6lig7r0tGm9lr8IMkyduXRI5SOOw6tYBgNV4lukfex6Zy-hbG2rZ-PNR8a59Srr1q_5qD9U9M75O2Qd6v3Mgu7exwrIxbWfhBH6poZ7pTI0pXoD6qZvASiWKSAJLL625RA&pv=2

Scan hello hero cheat.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.