9202280eadb90a3c8c13034a932cc9b0327d1f79134f0dba11363f5131571295

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-uk
resource tags

arch:x64arch:x86image:win11-20260513-uklocale:uk-uaos:windows11-21h2-x64systemwindows
submitted
02/07/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cheat Engine/ceregreset.exe
Size 302KB
Sample260702-rydfaads5m
SHA256 9202280eadb90a3c8c13034a932cc9b0327d1f79134f0dba11363f5131571295
MD5 36f8edfc5bcbab5395d1f799d6dc7f3f
SHA1 1f5e85338809ccd44bed58195d2ca7c624c336c2
SHA512 d5ae51b616458fafaf14c2257c334d3a6ff12254c5c0eb3c3897499f3c5076f3a348c08ae2577c44eee55911315ad49e40f2244d30fd09aaeb55b1a46d9bc207
SSDEEP 6144:RDwf7I4zq0ZDVQ5uIqp5rkenPajp8jt8I:R0f7Bz/G5uImQaPajpm
TLSH
T1316408A2E951C237C17229B8CAA5B2F16974BD20D9674097F7F63F4A36316903B2F305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ceregreset.exe

C:\Users\Admin\AppData\Local\Temp\Cheat Engine\ceregreset.exe
"C:\Users\Admin\AppData\Local\Temp\Cheat Engine\ceregreset.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads