Analysis

  • max time kernel
    129s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    08/02/2023, 02:58

General

  • Target

    Setup Project64 3.0.1-5664-2df3434.exe

  • Size

    4.2MB

  • MD5

    04d2dc906ad885c53f6eb7ca15ca984b

  • SHA1

    e8a12d0d4964ad5f2fff90af29dcf5243a87b354

  • SHA256

    93f3db8dc5642d39fcc44eaf43811cdbdf912690f95041e924e038e76f36f921

  • SHA512

    8462ce5dece3dc66bdfa44e8a3b504e1de8436d1d18e09a06c95c6efb43dcef5909707eedd5a85706f7451a7e0336dd97876a3d1b24a23ee93aad3e4a936ca22

  • SSDEEP

    98304:MyCRiQWZ7fEGfzKOL0pU3qvsuawsGFWC4ks44dAZZ2uhWo5:bGiQIDz6U3q0ufgAOw

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup Project64 3.0.1-5664-2df3434.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup Project64 3.0.1-5664-2df3434.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1648
    • C:\Users\Admin\AppData\Local\Temp\is-DSLN0.tmp\Setup Project64 3.0.1-5664-2df3434.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-DSLN0.tmp\Setup Project64 3.0.1-5664-2df3434.tmp" /SL5="$70122,3837868,227840,C:\Users\Admin\AppData\Local\Temp\Setup Project64 3.0.1-5664-2df3434.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2032
      • C:\Program Files (x86)\Project64 3.0\Project64.exe
        "C:\Program Files (x86)\Project64 3.0\Project64.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        PID:1636

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Project64 3.0\Config\Audio.rdb

    Filesize

    1KB

    MD5

    d88851d12847b1f0194aa056363485e9

    SHA1

    c979ca448e9e8fabf0a2ec469a1450ae99c3dbc7

    SHA256

    a704762f8513f74884d4886369c1044d146c4adbcb4a5c098891a059316fd435

    SHA512

    e5f3e8fc8b438a1c9820fb7c3fbcd6e458d865b79d8c50fcea54e1743c6c10bcec74b3f432ab808e999fd9f513e63387dd8dff896ec42b69cecaed5347d650b5

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\007 - The World Is Not Enough (E) (M3).cht

    Filesize

    801B

    MD5

    b77cf602f050ad1847b364f28689d668

    SHA1

    c295510809997bc31f4aeb130e93e367a07a1478

    SHA256

    de9cd297e9909e5fda0947a3e9889adda02e5c225daaca4d9fec1b08a3ea40c7

    SHA512

    66f2f83de76b65f196f9862925a770156ce07a70679c2deb0212d259d96e5ab4214d5310a897b0f02172a9b76981c722393e66a3adb6f029a0881ea679ce078d

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\007 - The World Is Not Enough (U).cht

    Filesize

    2KB

    MD5

    aaa937e0de37c9fb916ed41bac4678bd

    SHA1

    a5b1236e25fb4fdfdecb330b79ea0a0de0fdec70

    SHA256

    2a7ff42d671803dfdc8c9de607f45d80070d8f1d1b2889a4e0d9d5b8e12f4fae

    SHA512

    31127ac112a9ce281ac664af839d169da5670255b8aedc9267dcb72e1cdae8766e05378196a32cfedd18a8458669f73a12b85c9ebade32f312b4b8833066336e

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\1080 Snowboarding (E) (M4).cht

    Filesize

    1KB

    MD5

    fb25707659f594c5b6404c1333acd202

    SHA1

    69b45e0ac2c1f6580cd44a024ae9bab2092d8c78

    SHA256

    760305239cf32b586d72acd10ccc8572d3309fbda9a0e3d13ec6757154ae4b23

    SHA512

    01f97520cdaee105e0a95c8fb1187dbe25f2e5b3d40b22271a455f4dfdf973ef5d451a6e478e7692907e98402cf595e3e46ac94ed83a9dc404034c743e1469a1

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\1080 Snowboarding (JU) (M2).cht

    Filesize

    2KB

    MD5

    5c82522bc53a87d0c4732d6287d8da9e

    SHA1

    6e20470151c9acc8c6cd6c7f18830728e98eafb6

    SHA256

    ce809ca27931e7827c96e26c017bb111bf26087943da9d096d43be74f166cdfe

    SHA512

    7bf97241cbfae9b4f21fbc4d5895b58013cd7a6dd7761d1a0ee88a7edc65efa635168998957a49617af61dd7380cbedc826b0f6866478da67d997d6adcbd601c

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\40 Winks (E) (M3) (Prototype).cht

    Filesize

    1KB

    MD5

    a3f4e79e2db2420a19a86188ceaef6fe

    SHA1

    66863be2a05bdc384b7d8554f7f6099c3777fb9a

    SHA256

    affe9d2da8bef506b1a2657fac938a40e47d0702dbfb73df4ddfeb612761b5ad

    SHA512

    e54150eeee202bc4a72a8c43a398786ff6ea8ab1849845052d2969c81fd96b8e8bf590f9d65ab2dec6baeeaef4db10a1b5e2c31ebac47067968fc83d2b1ce5e6

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\64 Oozumou (J).cht

    Filesize

    335B

    MD5

    fde74b26157cc82193809941e8ad80ee

    SHA1

    7283e81638c769a0296614c3a2735ef18b957794

    SHA256

    6c8359df3b67d255fe66001483484ab8454311c785aadbb48c75c1b2d9bb9d72

    SHA512

    e51808aa28c47ce31b1c3229fb79181f9f9684e118f346ac9d59a9319f067580f499db03dceaefdd6fe61084edddbaf7d076a70b683ff207ecfc0be630f532f9

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\64 Oozumou 2 (J).cht

    Filesize

    325B

    MD5

    797aa63b83052aeeb810cae245c5ff3f

    SHA1

    d5d73cb99b3c2d07b2221ef85cc784dd1c5ad21e

    SHA256

    4e4366057592447bf465f8cb3bdb15a818e543d97cf18e916f4c30fa6ceb211e

    SHA512

    1674a1692d0143691194d44fd8a345c6988bf4fd7ecb92518d9500c8b49c5622cce5a495e86ecce342c6306be3fe1d9a075033ef3ee88cafa96cf0b64a354089

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\A Bug's Life (E).cht

    Filesize

    1KB

    MD5

    4100474c05e7a80d6a1e3d9559a26de0

    SHA1

    64800875e8b04ece1e241cb1f84153beaa5d84f0

    SHA256

    8b3a56ad7f063a3262eff55a7cceb9b971f151af5a0258c1fcd897ab86a49f30

    SHA512

    2db74ffadc913a45d2cbd1897fefe7fd86ffb2b707b9f19667fe7771d84ecde5515d4bbe97e569841668cd985e3e47e79074ee2dc102e5c99132ddc1f542914d

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\A Bug's Life (F).cht

    Filesize

    625B

    MD5

    ae99b631262afe6deb7baa737b0a7dcd

    SHA1

    5518ae46da6746dec184712cbd04ea275242cb1e

    SHA256

    ffaea961faf4f83e161ca6a99d307a08b336020f8dd4d7dfaf444af74d615963

    SHA512

    7ebdab496c9113e248a47eb2ebeae68c6489adcf572fff64869db4701497073a5267748b9e71c49e0f1c6396651683fe240205983140d8caa63cff14c5a6777a

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\A Bug's Life (I).cht

    Filesize

    625B

    MD5

    9274066f9c0594427334232b50d4b46d

    SHA1

    b29d57457c7191c7e21703f9c0e6d9c22a31a0d0

    SHA256

    83b1b604fe6793cf4002b0e04c93a91a58ac3f75ab067415ffbb949dd89d6a0d

    SHA512

    c6709a584511266e2d372a8524b13c2d57d9751dd3056fdc6b99ea4c53489903f4dcd9f583c4e5c5d17c2e76a8f9a65b5fb88df04b335f4a3bcf8453767153cb

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\A Bug's Life (U).cht

    Filesize

    550B

    MD5

    262190b89a60b3adbe749e3858f350c7

    SHA1

    557b22fefd1c5e420c3d30b4c0b28cf89bce5626

    SHA256

    091445e80a0ea36191161cfe3cdb6feb66934113a0d1bbbadb420cdd4886fe80

    SHA512

    cc9caf4aed1cdc289576cd02fcff2ce94b60dd7262a343e64b3c2534523f69a6462366aabf53053d4192dc9f089779fc1269bfac508b047f8c5ddf44563d9722

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\AeroFighters Assault (E) (M3).cht

    Filesize

    1KB

    MD5

    7a3ef4f5119173e9fd2725dab5808197

    SHA1

    7b70ff085e3894a39f4407e1e231b834221745cc

    SHA256

    63cf56ba1db58a137b683a89f03ff825d814cf5613a470135f5983b7e63a8771

    SHA512

    06f99cceed4934e1e436365e13a90cfca6d4481a48e701adcf9f182c4ac886380f660de79125a883238d89eafd69354adfe84b693dc6d374a710399e1f3a7cfa

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\AeroGauge (E) (M3).cht

    Filesize

    1KB

    MD5

    21ca5cd1fc1ead44aecd482328fe52ca

    SHA1

    eb2114236d8d6787b47db06b54a5c55c92d0001d

    SHA256

    abf2ce3150a07c33d1ac368513965f22a4762d7b2c3a19c7f345e9242fad4c06

    SHA512

    811b5e2781e66cb9acdac4dbb80ec7a0ad789b52cae0ce1bea352a0e051ecb14536999621dff32adfeed338b059242b9c673fc6f3972214255489b983dca5f6a

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\AeroGauge (J) (V1.0) (Kiosk Demo).cht

    Filesize

    1KB

    MD5

    a8892fe15d4ee3edb1e77191c6649150

    SHA1

    74a0905324503b8f7681baef1cccf1b1e8e5fe3f

    SHA256

    41eb25dee34a5ccd38b5076866b64a60de974b06086a20a8d00cf8416126fb97

    SHA512

    57e8fef533f3e412fc71244fbbf103ebe3dce27df7a11a9172e3ff2bbceb8e253ddcd5c7f91205f49a8164185706feb8de7c19ef39e1d432ec14a8606f537fb4

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\AeroGauge (J) (V1.1).cht

    Filesize

    1KB

    MD5

    a23610c13cc3c8205d4b730290c5887f

    SHA1

    93068822b326c619f5847fe020ce9c00b085dcc1

    SHA256

    089ca8d051bce29ba7d390ca9cb4def48c026e88d8ff05bff5ab97b7e5a46c0b

    SHA512

    d9211c1a1074e06f934e7a3d22a05c58d6fdd9890d2ce552533b4016033daabc9cac59b5ca83af15f7c5d91ad0e0291ab20c5878950890b7a9ce2c28a71cd5bc

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\AeroGauge (U).cht

    Filesize

    1KB

    MD5

    67c9a3e70139f30b5ec7700082433384

    SHA1

    48be30c455ddcd3546a576bd6bdd6b48f173ec58

    SHA256

    b1e2f55504858d3e84f537565d4aeb77de645847a4708c9865dd3c73f0391f84

    SHA512

    be4e573f9ce733958ffa76eb942a5580d1368eea92907cdba6b036a1a6b742a43c693ccfa44eb2baa3244db83f4d45fb4cc1f4af89341da17dcf6b5f65930a6b

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Aerofighter's Assault (U).cht

    Filesize

    901B

    MD5

    c62ebaffdf2408f67daf73ee07030f30

    SHA1

    cfdd2bd0ed3f070ed12d2fb7d75b00cb00d24a97

    SHA256

    cf0d32850706ad495e8da4a684a3c7ec5b6706ea17793b67db44520201346a42

    SHA512

    4aeee4a74997edf556a8ae9198df80429d60e880edd11738d4c4707bc74d56a1e3b9dd9943084a4b1a00b862f41119851ad0905548089b3ad4ebc3502bd38581

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Aidyn Chronicles - The First Mage (E).cht

    Filesize

    623B

    MD5

    a6b73f5021b848db4c793b52bc163a00

    SHA1

    aa80fefa38f562df854d50a043dc77636ea403b6

    SHA256

    b4c351deeb089cac90d62ccfadaabd2d2e8e03ab403931447ed92992c7f5985b

    SHA512

    2f9e9fa539848514cb197160198794e579d9a9f486623344d47d23d1b729b9ad427385849bec74621bc56a0f05307f298e9af8928f424bd3ec22c489389916db

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Aidyn Chronicles - The First Mage (U) (V1.0).cht

    Filesize

    634B

    MD5

    1b5dccf09c14c9fdc7abbd36b8348f20

    SHA1

    a3f54b3c4c74e1bc2a5a6b9bf51bb01550f9504c

    SHA256

    057084634d635a08ce2bd810b13f4871418082d3f29496eab550cb1803eb9bc5

    SHA512

    16a4cc6f9a081896fe80cac1c38589f510c42c5d950fc040afd29ee5125237d5666949959cb1633047eb8d595ddfbe5ffddfd72e5b9f701c287e72cf1669f313

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Aidyn Chronicles - The First Mage (U) (V1.1).cht

    Filesize

    634B

    MD5

    411a3f339d41d8089622b708699bdb22

    SHA1

    95da94f04e9a8a976c258eb189cd553aa4ee2eb8

    SHA256

    43c9a783ecaaf507004dc1f22c892799d150885dd02303c833a289d3fcd0b930

    SHA512

    a39630bac3c0da8e08f480fe175097126d1ddd0988bdf500215dbe714d5e51aae274f7cf3e51299a4a0669b27d8d44de490307f0e3e80b75ce20a24243f37b17

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Air Boarder 64 (E).cht

    Filesize

    1KB

    MD5

    089a17b9f5bd9a76638baca01e10dcad

    SHA1

    ded3183f171b024e439d798fa0b63bc9bc61f4e7

    SHA256

    fff761da05f5819ddd5c7317a31f3222a3bf8fb1da5bf7ab15c4475bac149ab5

    SHA512

    45787a9bd5c0ce284e72ec5cbe113826ea37db89813a739cf1ee88d544ae37ccdd06903aa11cc5a9993d91193b6e676c69561a3a4da1d51e2e2e33c66ac915e2

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Air Boarder 64 (J).cht

    Filesize

    4KB

    MD5

    6189ebb78e77754718b25d83003b35cc

    SHA1

    f80bc257e3b90a9b640605f44f5103803170e7b7

    SHA256

    faeee64f7b8b711a534f977f4410b2d4f71c210cb832bb6fe4393e0477b24bca

    SHA512

    1bdffad9b0d20262f6552112c7b00762055f42d919a2562fcde0f3c02fefb1ddb07dd7560f05e59936c98b42773cc6dbf62d247d068baf0d3cf05cf53f686e9d

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Akumajou Dracula Mokushiroku - Real Action Adventure (J).cht

    Filesize

    2KB

    MD5

    853c730986249158052d5f15d553f82e

    SHA1

    a20733c35942ad5f328769d24a6c0c8fe1864d88

    SHA256

    8633b69c46b3298a00d54152b6803eaa25c363261961fe63180c5d86613680f1

    SHA512

    5da8e40807f41f40be24a3adba0283b71bda07c4f8e4760cf7fefeaa0a040e1aa987e21434cc7c50e5c6bc2fe848b93aaa2700402de34cbabb0303586d5206ab

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Akumajou Dracula Mokushiroku Gaiden - Legend of Cornell (J).cht

    Filesize

    7KB

    MD5

    725f2a2f8e1ddd7695b21502c42f07a2

    SHA1

    7bbe9b0ed96fbda004929da605e47d196797f521

    SHA256

    6ddb470f14814e7c35d73b13ec8d9a4c1a30817e6e34302434db624c4cacde37

    SHA512

    9ccf66bb74f99e230488e8aecbcb227e44874a05553dd612a798ab952c68a8135444b60c8441eddf8458b57d4a69b61bd47a5f84ece751061463bdfa093784b5

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\All Star Baseball '99 (E).cht

    Filesize

    152B

    MD5

    8487d827fde97b6a844524882cad03e8

    SHA1

    c2d5b818216db1a913d0a0470615b0d1147354a3

    SHA256

    1e911294deb131be56f61332fabf88dba8a89a64b973c8eedbaad33337afbd4f

    SHA512

    e51df5314de84dc105a9b1805f0b54ecbdc6c71dd7746441b5984dc32371f655dbbbec1f92637a299804dcb4965ed552ddb992b2dda1f7a4b63637fd065d47ac

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\All Star Tennis '99 (E).cht

    Filesize

    1KB

    MD5

    04a063cd6e2238c053bd5a95663bd65b

    SHA1

    9c9e48dcc39bf885cc4f46b7ff27c1c0b73a8cb4

    SHA256

    d188fd4e6c9ee50404dd5edc1faa4284f657695737ee12b1d55d5ec20a4a76bd

    SHA512

    2d77e385ebf17c900b9313c377b0fce02edebead221e51696504df0359323d88fd5d76416f35f24077c81e90db093c4c5c1bc7f9f6df0b41868321a6abfbb85d

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\All Star Tennis '99 (U).cht

    Filesize

    1KB

    MD5

    928f262c680b00f9ef9a872d3b507b37

    SHA1

    d14fc7becf170b87f80ccd284da678d19aee1d48

    SHA256

    7c2392c535b7b2f65ef20475ee8bd066290e1d931aa2c12b7419cc962a380962

    SHA512

    40b3a7f1ff800711ff36940f6c3e278c710ba087d74247b3bc7312e08c46174c40f4325097650cd5c682db64c179407fe2b7aee9128e4429e5468b88a89113b6

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\All-Star Baseball '99 (U).cht

    Filesize

    914B

    MD5

    4fee746ed715691dca7500d3dd6f2090

    SHA1

    c16aff8c859a148946764c9b9930d2f1c4039fc0

    SHA256

    5e43090005de24ad4d1d2b96586091b11511bcf54d4dd6d864c24d5643ea1a3a

    SHA512

    ba1356d1dae56bc9f60eb6699fbf7ee30daecd675d07f5bd7e92916fb2e8283b0244bcbdcfccf1c82af54323832e60ea289f022c2e3e5febe6f19799663835b0

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\All-Star Baseball 2000 (U).cht

    Filesize

    978B

    MD5

    d9f6afb99e83968319c554b7753cb02c

    SHA1

    336eddba0e9572ce9555c6ec3b26b2f5b43792af

    SHA256

    e4ea90038c29edf4228b320c896f4b1b3cbdf222361e04aa7009655f7012d744

    SHA512

    2a91dd1b0158535b00cca7f141d9195cb278f91d768c6ff9188713492e77c53b3009c468201c3d268da2bcee31008d1367871396d3e6e16802e0bcda0f59ce3f

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Animal Crossing (T-Eng).cht

    Filesize

    1KB

    MD5

    6fe49619b96f14d8f2673cb09611ed9d

    SHA1

    b47c1f7b8c61bfed49185e7f3b7843b7c5134f67

    SHA256

    d315a11ca4280f3681037d3642c780dfdef3c2252e881ab3b5e24de5f23fc87e

    SHA512

    9633a428f50eb420fbb2c65c0bab705dd625978a5e2d6b28c29b5d91cdc1f460f0ec1e736a71220e7ba3a976bba4dbfa583c78b6cc2041b6c5a754e8d713f850

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Armorines - Project S.W.A.R.M. (E).cht

    Filesize

    876B

    MD5

    9b4aff1ae35893cbf097e3e2a097fc8d

    SHA1

    c61787d237bcfbab0f31cf7d9a32b6a1667ad1d6

    SHA256

    0ace4a4a45cd820f200f79f512f08d3e9c8a075bc92eace5f5cc3c5180f47127

    SHA512

    d69f4aeed5bbcad929e0e59cb6b03a822475d452670b9acb33539fce0d3f121fec800cd6612c4e37ad919601efe782fb235a7a670fcceef76c964d36dfcf3a1d

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Armorines - Project S.W.A.R.M. (G).cht

    Filesize

    791B

    MD5

    32b7ec85256886e85922adc2301b5998

    SHA1

    68357d4861897a42d4cfc68828d9590349847727

    SHA256

    15ef47c9d04171b50a6fc3d7766af38f3e1d9720ac629426155863fdcb6b08f7

    SHA512

    d1c3a2a54832ba0e59744a0d7214968f69434edc91c0751bc76bc529d8cc3b1508cf1b17dd3e0081645f278f8b2483bc30ce2d87aba939bf2ef4be2988137a40

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Armorines - Project S.W.A.R.M. (U).cht

    Filesize

    876B

    MD5

    6c445be9de7c43a11c8a392e347df234

    SHA1

    afb03b61a13e60cae4d97cbca280ca9856fec9d9

    SHA256

    abf090e0e8775b76ff076d135418b4622af8ffc91574990c4700f2c2cd6c693a

    SHA512

    df30b3e999d634685e9616b366792b3db5f070f000dd1f92765c4ebde4436ca69bbfa8bd21652e9caad990517a20603b41ffccaaa744e71d21704491e18670f2

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Armorines Project S..cht

    Filesize

    777B

    MD5

    57aa1f3373a44f22f3524ecd9aa73cc4

    SHA1

    c1e6f0e71b4879357aace450aaf5d6198c2fc807

    SHA256

    b1f3bb7c3baecb882edf70cf0289bc91b92c4cf0bd0a3aecd4aaf33f570471f9

    SHA512

    0dce6071024a927362b64972e7745a7741ae42ebab6cc31ec953a59109a0afdc53ee3bb05c90a0c6e55e1a4e641e0662a44d69fcb6539473742814154d8c7de9

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Army Men - Air Combat (U).cht

    Filesize

    2KB

    MD5

    5c74a6c96fe224dc0924daa5b7a71101

    SHA1

    d85cde22a1b9eef2070adde11a9a605e57b2edf8

    SHA256

    ed0398ce90e3125a9806eab0ec17836ea1bcb0170cd3a7b715ad25728c953989

    SHA512

    1885d8d6c9f4e5755c261fd2f4c59db01f1428f9d0c660a51493da8f9be06deb33b61ef56917bc5f3edcbd79d34911fdec1df821871b4c3e5fc4031164886557

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Army Men - Sarge's Heroes (E) (M3).cht

    Filesize

    1KB

    MD5

    57a99e5ab10a21dd128c5a58318a5177

    SHA1

    301e594fdc3ee50b1f9016c2a3637cf0d7f3a04c

    SHA256

    25a82fba86720363fd87497420038af1abd9cad67e82ca4c2b1aba6d26f0815a

    SHA512

    2adb2848237dc35cdcb209de21d077605796e777a42b7b24e1f71ae1d8cec7d0eb588309133878ce0b5caac2e9ef8090f276d0076b1084f92ed0e506b6dbd49f

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Army Men - Sarge's Heroes (U).cht

    Filesize

    1KB

    MD5

    47dc7f252da51c3f764d2946d41f376e

    SHA1

    57d2a4402c78c97716cd646bc3634d44873e3a2e

    SHA256

    1a7093e5b7224ee6da656086d9d9ae7f36b275895372cd3d7c0d4efda7df165f

    SHA512

    8c15ad919d22fdb55ff1ea60f3aef9164b8580d897ac5ab36fd2868d78d790e123b5e1089d5a5f1180451a410a275e01217dc54933f79dcb0e856b09a66beb07

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Army Men - Sarge's Heroes 2 (U).cht

    Filesize

    941B

    MD5

    42deaaca672bdc16b2385cfd5a0e6a8b

    SHA1

    14a2e8b5b839ee869baa3c6874c31e83b831dcff

    SHA256

    10645c0f1e34196e2396cc96faca12f77218b02f04d651aed471e782493654c2

    SHA512

    75cf7abbbec446b5db18addeeabd39a064c700ac2696cd700bcaf570d8b7d5b0b14d352b81fb8075a6d3f296eb89b2232570d7a175c7b421cd65f9336c345de1

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Asteroids Hyper 64 (U).cht

    Filesize

    531B

    MD5

    9bdabef7743bb4d8d7cdfa8436c9cbc2

    SHA1

    0f0e221990bbca633d3c76af0a39be978cd72ad6

    SHA256

    84362444554d3e742370140fd1f0c3452190cb6cea5088f22ee8e0f5714e2397

    SHA512

    cd8d422b289a8993458a680e0a9cacc26aaba79b1c3f6d6a9c8825914afdeebe20238ee5ff294ca77b2cd5599279c162fa2dec75f248cceb738008b8872e07f9

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Automobili Lamborghini (E).cht

    Filesize

    507B

    MD5

    a76efd4b51c8aef7f1d9890b63c49e95

    SHA1

    5331c4fef78f8e97ce59e1a186317f18d0db9829

    SHA256

    03bb04b91a58d609bb86a326e14ce3ac3d89295e23d5b47d0e0abe41c9c2a80a

    SHA512

    e830b8e132b89ffa9a354ce770cd3b23f9eec14e7543c40b168dccd694774978b7a083db6dc7dea2f1809544e5a96358cae96ea949730302f967009af1581e38

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Automobili Lamborghini (U).cht

    Filesize

    507B

    MD5

    c605cfb1a2ba9a029dba2d2f2ac0d680

    SHA1

    910d86aea930f8e3add984d78aa7a1e98bfa40ac

    SHA256

    b0da19a234dbd6df0a87988714f1ed0b88411d2833f2747cc126d968ac190c50

    SHA512

    22a4695cd24ee7ba3d21da1e3c095d5e0fe6d42124ba92d0889989f749395a7f8e88428998f17ff39e34a80c8449835daa200d5336c03b74689e3534a304041e

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Baku Bomberman (J).cht

    Filesize

    497B

    MD5

    3bbac13fac2697b0fe5dcc15d81a711c

    SHA1

    2ec5a09166d7935d17f18ad99c657c1aeffca78a

    SHA256

    f0c3b50c6935eec997aca9b5480131215994ccc2edf1acf4779b77264afa479a

    SHA512

    5667238c02466de6ee40099e0104130196e5b3bf2df8f67d52a77b5990aa4b9a0735343ead1e1170712039c4c9460cd3306e09873e37ed11edf25d5b942105cc

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Baku Bomberman 2 (J).cht

    Filesize

    554B

    MD5

    bf5ff0d1c0f0907c605879a9b2c08040

    SHA1

    874791a9c80fc69d546a0da921d3b5922a7aebad

    SHA256

    178a34b8234b4e73a9ba0d031bd820d56f2f3ae83b62dc60cb17318851a880f2

    SHA512

    97788ad1676a1e06b0ca2ffdf848a8d8a09994f2d49c07443f9506c04096c5c091e533701322c2faf2c843d1d13d8806e77e1f3e1087121f99b88a18de11287c

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Bakuretsu Muteki Bangaioh (J).cht

    Filesize

    7KB

    MD5

    bb202d63cf7599fc443468cbaec9cbe8

    SHA1

    0241058d1ede174678d155716ca73712ebd04d0d

    SHA256

    9b339de27516701481c32e1732c963bf3c9f30b835f5eb91b1f409bc47e12b35

    SHA512

    c77bcf93aa2204f46f5c577cde0064f3385d81f1a9e5e09021f8f441e2999300db253dbf5b8f2d2622838ecac20b1b406e5eadc71aff7e63fd90c764da56f5f3

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo to Kazooie no Daibouken (J).cht

    Filesize

    596B

    MD5

    79ab6c5c056683283c0720f72e50f77b

    SHA1

    4f16837b1aed4a6c828d5b78992e63b3abae487b

    SHA256

    b42885ffb64556166498274d87e6ffcb6e057cc9a29b4852f9951cb0922ed5f1

    SHA512

    d2354d213f054bc224a9bf4d835805f045f9fbe7addfb77d5f08d5ae6033e1cba41b2d991fa5f1dfa185af927529d82ba01c6fed4bfc1232b92fefab688069f4

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo to Kazooie no Daibouken 2 (J).cht

    Filesize

    10KB

    MD5

    db4ad905b826326195310d4fe6ff798e

    SHA1

    108cfec94d058e4994ad1818ff574ca6d447a8be

    SHA256

    229e9705c88e695b435708c150068f5b8d4db5c85e6a7e4cdb54f574ce7ce88a

    SHA512

    f636c80eee2fd4e2d6250a75db2b677e69ea232fb81fa11c7f484a7fca58f046eb9de3ee09da6f60961bd438b6243c71dd3cca031fca24327e23e9dbb8949dc9

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo-Kazooie (E).cht

    Filesize

    1KB

    MD5

    50ed74e280fb50d7f5d0943af57a241b

    SHA1

    89019eb8fc2cda793f6d7c8417674c67194c8891

    SHA256

    4650c8db801fb21e2247f3ad342f48a85ab8d09623aa91ef396f8e808e52c0a9

    SHA512

    97f610a3451be0b5915c1820c0cfbba5ba9e69672bf68477c6a9502657a0f636c86c3984709ddfe0315fb3744d5dc7052bc511b500b6a4bfced5b0bed30e055b

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo-Kazooie (U) (V1.0).cht

    Filesize

    1KB

    MD5

    9d0408009d06af00910a70206b0d4fe8

    SHA1

    1c8127cc511767197b275d0009fb7249820d0e76

    SHA256

    1eb09e1995f3ee3c288201a03245d54ca3b53828487fb2e80a1b3ccec6721e26

    SHA512

    edc32325c58b4d0b56b693d0049fd65b24733af42a2a4a7bedb318ac6355018859c907eaf366e4e722832c2e9ca796a37b28fb7f896bb6fe63eddc7142af0d67

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo-Kazooie (U) (V1.1).cht

    Filesize

    1KB

    MD5

    94af2ff12d0d6b4515c5ebb675363d74

    SHA1

    08e53cc6011c8da5883e1a64c56a9e97b3b93af5

    SHA256

    9ada7afdcd9adde7d8af533e864ad3ca87898a6b9ff56b6a2e3d4989557c3814

    SHA512

    ad35e9921a695e348a7afdb73cb730001e06a257eb52f8fa8df1a780ad16688f1756256e6468e33340eb9f20928a6afcdd680f8418447a03828f0bfb0c6e4b70

  • C:\Program Files (x86)\Project64 3.0\Config\Cheats\Banjo-Tooie (A).cht

    Filesize

    10KB

    MD5

    08c9e7cf72e2c1e4663d4c400a440e70

    SHA1

    ab70d29074e0761e840d65d6069d8f2c0ab64ae6

    SHA256

    e5e9fad761decb014f0f5e8b3a16a43a997ff6750eab6e6c8924ac4b2f53155b

    SHA512

    3da8e4bb016c3e321271acd631f7612017f4cc4db37580484e178fcbad03eda016e361744289afdb9560d5a110c259535e4ed5f5a9c28abd0d030873eda7f23b

  • C:\Program Files (x86)\Project64 3.0\Config\Project64.rdb

    Filesize

    223KB

    MD5

    43a3b5eebeeac924462c2bc19f5ba030

    SHA1

    ffa4990600e34b79edcccd6a407f33348f40561a

    SHA256

    e8b0109ecb7add3cfa53aef30002168f2f218f171705090e4741992d4b10ca54

    SHA512

    e1bae855882094205b752ed0220bd5ace0fc6e4c319f4dc64080bb8ec75e7d902b57016a8d581cc215b715492da12df01a2275f7f4fe5ebe7fc2f86d2381f1b6

  • C:\Program Files (x86)\Project64 3.0\Config\Video.rdb

    Filesize

    79KB

    MD5

    1f960b4c8496629941c6483eb9d514b1

    SHA1

    554100ea1c2cd3eeb9667b762e7212b0da5a90ef

    SHA256

    66b88e63215e3bbe303e40a0934a0d57839ddb81dcf163931c924c8d7e6ef453

    SHA512

    5c78dc3f7996388af405cf09c16c5a0c5c8f26c1c45a014606f3a628fa01d03ddc08d89b55f199866c60a3ab6adcd9f0888e5af378f83b8c255138711ce41212

  • C:\Program Files (x86)\Project64 3.0\Plugin\GFX\Project64-Video.dll

    Filesize

    1.0MB

    MD5

    659d752ba967bc23aed416ce842b22bd

    SHA1

    eb3c390eac05972071d0bab59b8e2474e3d9ca5a

    SHA256

    4c486267de8f5b7f77ca0e256985b36bfe7958af67b9b2e26bb3c9af84ca4b27

    SHA512

    346a9964c3a53201ab040654dded17a03ae1f9fa3cda48580f29b2e6ab7aeec9dd3ef0f4eebf81e25658293509b5625550012f24e6f974c001ed63e34651d90c

  • C:\Program Files (x86)\Project64 3.0\Project64.exe

    Filesize

    2.2MB

    MD5

    ec5b993905b89f85bb6a9bb718fdc603

    SHA1

    b987720421d6dfa87a8c9ef6b3aec028fc4e7739

    SHA256

    0c0bb03936cf6106bb7131ec362f212f762715caae7995b492f44808819001e1

    SHA512

    34bf75da6af5831a25f69392d18c6da8f675d8704f198ea17644943a723b8ddb172b4c3bf2134e666fecb19d894dbe0d4f6d9899c5c8aa4abb7bb757f4121446

  • C:\Users\Admin\AppData\Local\Temp\is-DSLN0.tmp\Setup Project64 3.0.1-5664-2df3434.tmp

    Filesize

    1.2MB

    MD5

    1260d8315aa453164cd5325d9d83acc1

    SHA1

    12b73c135a94e33b959a5753f6e5ea6736febc4d

    SHA256

    65f9bf91580ae4327b0101dee18e5fbb86b1c6bb0c76010bc9ff858774d32551

    SHA512

    afdc4d908b7aeb3434359184c4c32ee4b8281965565bb66a36b9dfb57fa1a9f271a88201a481c43d7922a025ba43b51fdd692f70d89e2b6b52a78278abf89715

  • C:\Users\Admin\AppData\Local\Temp\is-DSLN0.tmp\Setup Project64 3.0.1-5664-2df3434.tmp

    Filesize

    1.2MB

    MD5

    1260d8315aa453164cd5325d9d83acc1

    SHA1

    12b73c135a94e33b959a5753f6e5ea6736febc4d

    SHA256

    65f9bf91580ae4327b0101dee18e5fbb86b1c6bb0c76010bc9ff858774d32551

    SHA512

    afdc4d908b7aeb3434359184c4c32ee4b8281965565bb66a36b9dfb57fa1a9f271a88201a481c43d7922a025ba43b51fdd692f70d89e2b6b52a78278abf89715

  • \Program Files (x86)\Project64 3.0\Plugin\GFX\Project64-Video.dll

    Filesize

    1.0MB

    MD5

    659d752ba967bc23aed416ce842b22bd

    SHA1

    eb3c390eac05972071d0bab59b8e2474e3d9ca5a

    SHA256

    4c486267de8f5b7f77ca0e256985b36bfe7958af67b9b2e26bb3c9af84ca4b27

    SHA512

    346a9964c3a53201ab040654dded17a03ae1f9fa3cda48580f29b2e6ab7aeec9dd3ef0f4eebf81e25658293509b5625550012f24e6f974c001ed63e34651d90c

  • \Program Files (x86)\Project64 3.0\Project64.exe

    Filesize

    2.2MB

    MD5

    ec5b993905b89f85bb6a9bb718fdc603

    SHA1

    b987720421d6dfa87a8c9ef6b3aec028fc4e7739

    SHA256

    0c0bb03936cf6106bb7131ec362f212f762715caae7995b492f44808819001e1

    SHA512

    34bf75da6af5831a25f69392d18c6da8f675d8704f198ea17644943a723b8ddb172b4c3bf2134e666fecb19d894dbe0d4f6d9899c5c8aa4abb7bb757f4121446

  • \Program Files (x86)\Project64 3.0\Project64.exe

    Filesize

    2.2MB

    MD5

    ec5b993905b89f85bb6a9bb718fdc603

    SHA1

    b987720421d6dfa87a8c9ef6b3aec028fc4e7739

    SHA256

    0c0bb03936cf6106bb7131ec362f212f762715caae7995b492f44808819001e1

    SHA512

    34bf75da6af5831a25f69392d18c6da8f675d8704f198ea17644943a723b8ddb172b4c3bf2134e666fecb19d894dbe0d4f6d9899c5c8aa4abb7bb757f4121446

  • \Program Files (x86)\Project64 3.0\unins000.exe

    Filesize

    1.2MB

    MD5

    642ed22efefe32872ccc496e445c56b3

    SHA1

    05e178906337c8a6ce4776eb8bff18aa7fad0f2b

    SHA256

    3c2751060dd103a71cd77715894bb7666bd63baafa99cf4d3bbdf6d607171872

    SHA512

    2ca2821d47f86f69051b780b047484cb084abb6ace7f927ba0f9da7b67feb4f61a1b3798a97c98eaeb04f593d2b6aa55a85fbc78d4b7893e667deac851fc0069

  • \Users\Admin\AppData\Local\Temp\is-6DR37.tmp\_isetup\_shfoldr.dll

    Filesize

    22KB

    MD5

    92dc6ef532fbb4a5c3201469a5b5eb63

    SHA1

    3e89ff837147c16b4e41c30d6c796374e0b8e62c

    SHA256

    9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

    SHA512

    9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

  • \Users\Admin\AppData\Local\Temp\is-6DR37.tmp\_isetup\_shfoldr.dll

    Filesize

    22KB

    MD5

    92dc6ef532fbb4a5c3201469a5b5eb63

    SHA1

    3e89ff837147c16b4e41c30d6c796374e0b8e62c

    SHA256

    9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

    SHA512

    9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

  • \Users\Admin\AppData\Local\Temp\is-DSLN0.tmp\Setup Project64 3.0.1-5664-2df3434.tmp

    Filesize

    1.2MB

    MD5

    1260d8315aa453164cd5325d9d83acc1

    SHA1

    12b73c135a94e33b959a5753f6e5ea6736febc4d

    SHA256

    65f9bf91580ae4327b0101dee18e5fbb86b1c6bb0c76010bc9ff858774d32551

    SHA512

    afdc4d908b7aeb3434359184c4c32ee4b8281965565bb66a36b9dfb57fa1a9f271a88201a481c43d7922a025ba43b51fdd692f70d89e2b6b52a78278abf89715

  • memory/1636-131-0x0000000000290000-0x00000000002DC000-memory.dmp

    Filesize

    304KB

  • memory/1636-127-0x0000000002110000-0x000000000216A000-memory.dmp

    Filesize

    360KB

  • memory/1636-129-0x0000000002270000-0x00000000022CA000-memory.dmp

    Filesize

    360KB

  • memory/1648-63-0x0000000000400000-0x0000000000442000-memory.dmp

    Filesize

    264KB

  • memory/1648-133-0x0000000000400000-0x0000000000442000-memory.dmp

    Filesize

    264KB

  • memory/1648-54-0x0000000075A31000-0x0000000075A33000-memory.dmp

    Filesize

    8KB

  • memory/1648-55-0x0000000000400000-0x0000000000442000-memory.dmp

    Filesize

    264KB

  • memory/2032-64-0x0000000074321000-0x0000000074323000-memory.dmp

    Filesize

    8KB