Analysis

  • user interaction
    yes
  • max time kernel
    40s
  • max time network
    55s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 01:04

General

  • Target
    CheatEngine77.exe
  • Size 6.6MB
  • Sample260703-bfannses8n
  • SHA256 eec3a6b49159bf6894cd1c716d035e12dc2f52663883dec0aebc5bb97ed1abc0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Executes dropped EXE 8 IoCs
  • Loads dropped DLL 4 IoCs
  • Modifies file permissions 1 TTPs 2 IoCs
  • Stops running service(s) 4 TTPs
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Launches sc.exe 3 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 7 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 16 IoCs
  • Runs net.exe
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 20 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe
    "C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4728
    • C:\Users\Admin\AppData\Local\Temp\is-DXNXEVMW9Z.tmp\CheatEngine77.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-DXNXEVMW9Z.tmp\CheatEngine77.tmp" /SL5="$502C0,5592098,893952,C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks for any installed AV software in registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2448
      • C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\CheatEngine77.exe
        "C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1636
        • C:\Users\Admin\AppData\Local\Temp\is-O0885.tmp\CheatEngine77.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-O0885.tmp\CheatEngine77.tmp" /SL5="$9026C,32420729,869888,C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
          4⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4828
          • C:\Windows\SYSTEM32\net.exe
            "net" stop BadlionAntic
            5⤵
            • Suspicious use of WriteProcessMemory
            PID:5460
            • C:\Windows\system32\net1.exe
              C:\Windows\system32\net1 stop BadlionAntic
              6⤵
                PID:2432
            • C:\Windows\SYSTEM32\net.exe
              "net" stop BadlionAnticheat
              5⤵
              • Suspicious use of WriteProcessMemory
              PID:1928
              • C:\Windows\system32\net1.exe
                C:\Windows\system32\net1 stop BadlionAnticheat
                6⤵
                  PID:2600
              • C:\Windows\SYSTEM32\sc.exe
                "sc" delete BadlionAntic
                5⤵
                • Launches sc.exe
                PID:3364
              • C:\Windows\SYSTEM32\sc.exe
                "sc" delete BadlionAnticheat
                5⤵
                • Launches sc.exe
                PID:1176
              • C:\Windows\SYSTEM32\net.exe
                "net" stop vgk
                5⤵
                • Suspicious use of WriteProcessMemory
                PID:480
                • C:\Windows\system32\net1.exe
                  C:\Windows\system32\net1 stop vgk
                  6⤵
                    PID:2792
                • C:\Windows\SYSTEM32\sc.exe
                  "sc" delete vgk
                  5⤵
                  • Launches sc.exe
                  PID:1924
                • C:\Users\Admin\AppData\Local\Temp\is-URVAU.tmp\_isetup\_setup64.tmp
                  helper 105 0x3C4
                  5⤵
                  • Executes dropped EXE
                  PID:3968
                • C:\Windows\system32\icacls.exe
                  "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
                  5⤵
                  • Modifies file permissions
                  PID:5896
                • C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
                  "C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe" /SETUP
                  5⤵
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  PID:1736
                • C:\Program Files\Cheat Engine\windowsrepair.exe
                  "C:\Program Files\Cheat Engine\windowsrepair.exe" /s
                  5⤵
                  • Executes dropped EXE
                  PID:3708
                • C:\Windows\system32\icacls.exe
                  "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
                  5⤵
                  • Modifies file permissions
                  PID:1176
            • C:\Program Files\Cheat Engine\Cheat Engine.exe
              "C:\Program Files\Cheat Engine\Cheat Engine.exe"
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:1484
              • C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
                "C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe"
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Drops file in System32 directory
                • Drops file in Program Files directory
                • Drops file in Windows directory
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                PID:2028
        • C:\Windows\system32\sihost.exe
          sihost.exe
          1⤵
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4764
          • C:\Windows\explorer.exe
            explorer.exe /LOADSAVEDWINDOWS
            2⤵
            • Boot or Logon Autostart Execution: Active Setup
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            PID:3304
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\EnableDeny.svg
              3⤵
                PID:1952
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffe018fc188,0x7ffe018fc194,0x7ffe018fc1a0
                  4⤵
                    PID:5728
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,1737160727090379970,15112054283975896764,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
                    4⤵
                    • System Time Discovery
                    PID:1360
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,15576934007150523012,13618719766266967129,262144 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:2
                    4⤵
                      PID:2108
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17707085746158500519,14702004886799823958,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:13
                      4⤵
                        PID:6056
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,14209954301384338813,4332717363416557309,2097152 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
                        4⤵
                          PID:3048
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,7138400077605119345,5910850966802669723,2097152 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
                          4⤵
                            PID:2416
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,12309068186067077307,15985391258430566215,2097152 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
                            4⤵
                              PID:4080
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,15685288827506895612,13498174693983301478,2097152 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:9
                              4⤵
                                PID:4864
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,16330703413323663449,3764644682893928845,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
                                4⤵
                                  PID:4560
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,12630919860010299103,1189439011477333286,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
                                  4⤵
                                    PID:460
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,15926689190934582340,1124530727110123053,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
                                    4⤵
                                      PID:1788
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,2397562943445124277,3384762796391956231,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
                                      4⤵
                                        PID:5788
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,2397562943445124277,3384762796391956231,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
                                        4⤵
                                          PID:2164
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,15358845904912413990,741358837171400706,524288 --field-trial-handle=2876,i,2313731899049741730,1814325200750410040,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
                                          4⤵
                                            PID:5128
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                            4⤵
                                              PID:4076
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ffe018fc188,0x7ffe018fc194,0x7ffe018fc1a0
                                                5⤵
                                                  PID:3596
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,5827416656658686474,9880641367249818757,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
                                                  5⤵
                                                  • System Time Discovery
                                                  PID:2328
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,8265549799457536788,9193134492212439292,262144 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
                                                  5⤵
                                                    PID:4128
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,8414068754600110826,3422102397657505619,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
                                                    5⤵
                                                      PID:1984
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,4795636850692058555,99953710624892044,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
                                                      5⤵
                                                        PID:6120
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,4795636850692058555,99953710624892044,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
                                                        5⤵
                                                          PID:5320
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,11415554600151886715,6204037155243638729,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
                                                          5⤵
                                                            PID:5376
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2712,i,8807047229790824909,10756521317985487450,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
                                                            5⤵
                                                              PID:2864
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13331952947065588115,14501954563725256286,524288 --field-trial-handle=2488,i,16362150926922833622,17598839703559733650,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
                                                              5⤵
                                                                PID:1036
                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                        1⤵
                                                          PID:6100
                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                          1⤵
                                                            PID:4744
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                            1⤵
                                                              PID:1064
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                              1⤵
                                                                PID:5600
                                                              • C:\Windows\system32\svchost.exe
                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                1⤵
                                                                  PID:3944

                                                                Network

                                                                      MITRE ATT&CK Enterprise v16

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      Cheat Engine.exe

                                                                      • Path C:\Program Files\Cheat Engine\Cheat Engine.exe
                                                                      • Size 397KB
                                                                      • SHA256 5313618d93640bb29b66baadf2339de85e593a51715290dadece6d58e039a75e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Kernelmoduleunloader.exe

                                                                      • Path C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
                                                                      • Size 236KB
                                                                      • SHA256 65fa2ccb3ac5400dd92dda5f640445a6e195da7c827107260f67624d3eb95e7d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      allochook-i386.dll

                                                                      • Path C:\Program Files\Cheat Engine\allochook-i386.dll
                                                                      • Size 328KB
                                                                      • SHA256 b96469b310ba59d1db320a337b3a8104db232a4344a47a8e5ae72f16cc7b1ff4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      allochook-x86_64.dll

                                                                      • Path C:\Program Files\Cheat Engine\allochook-x86_64.dll
                                                                      • Size 468KB
                                                                      • SHA256 8422be70e0ec59c962b35acf8ad80671bcc8330c9256e6e1ec5c07691388cd66
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      addtonewgroup.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\addtonewgroup.lua
                                                                      • Size 1KB
                                                                      • SHA256 96e4429192f9ab26f8bf9f9429f36b388aa69c3624781c61ea6df7e1bca9b49b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      android.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\android.lua
                                                                      • Size 311B
                                                                      • SHA256 74e872b33c20fde9ed01cb47f8aac0bf085e861e3a376472c21d89f7e267e874
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      autosave.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\autosave.lua
                                                                      • Size 9KB
                                                                      • SHA256 fa7122783d550ae6eee45f88d3671c9ed34541ccf788be64d939150abe8c5d1a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      bigendian.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\bigendian.lua
                                                                      • Size 7KB
                                                                      • SHA256 091e65aaa8649f5a7a195b3e9c355e55edcf2de7551e3775743153b52a7bd277
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      celib.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\celib.lua
                                                                      • Size 2KB
                                                                      • SHA256 5871f4e9f6c06b5811c1f4b208b5d6869c5191e7cb5540f2b463d01e5541fac2
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      ceshare.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare.lua
                                                                      • Size 13KB
                                                                      • SHA256 54ff612618d16a79f46e890e85db8e3f201a0363f50ef8c549954e1bca7c708d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_account.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_account.lua
                                                                      • Size 6KB
                                                                      • SHA256 ac5396dbb58a9b7d1e4e11b18f01c8eb3e3b3a5e2985a4eb706891079d1a0bba
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_comments.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_comments.lua
                                                                      • Size 3KB
                                                                      • SHA256 89c8fccc16d2aa0a3004dc1b477a5c1dcbba539769b2a4558f7c7d9b9809b133
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      ceshare_fulltablelist.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_fulltablelist.lua
                                                                      • Size 12KB
                                                                      • SHA256 514d5df319e6cd2ea5a5c8c454f7dfe7f88554d3968b9af180b8683939986d2e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_permissions.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_permissions.lua
                                                                      • Size 3KB
                                                                      • SHA256 15b0c7682e5e8d2e2c2b8cb00c0c03b7dfa9439ac80c37f8e96a4f86652246f9
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      ceshare_processlistextention.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_processlistextention.lua
                                                                      • Size 10KB
                                                                      • SHA256 efcbfef089c26928a983686d82794cc566a1a8b6c43e76b0d017eb043e1e994e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_publish.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_publish.lua
                                                                      • Size 20KB
                                                                      • SHA256 6bfd35aa64ab566ddb68d0675ad3b4a093649010a9c30df3a30a7f9dc2ed7702
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_querycheats.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_querycheats.lua
                                                                      • Size 25KB
                                                                      • SHA256 658479b6fe955d715f398edab3900130d83e4dcb974ffb184eac0d47cccba59e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ceshare_requests.lua

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_requests.lua
                                                                      • Size 5KB
                                                                      • SHA256 e9d57acb17502ac169deb37f211e472f68cd6e8a69e071d384b989fa45e9fa7f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      BrowseCheats.lfm

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\BrowseCheats.lfm
                                                                      • Size 19KB
                                                                      • SHA256 527a90a44fd25e47b953431d7eb36fe314a01c156b2ab9f3cbc71a1bf1fe230c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CommentsOrRequests.FRM

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\CommentsOrRequests.FRM
                                                                      • Size 1KB
                                                                      • SHA256 d8de8120c14da094feddb24c46c3e729d99696ccce9c2d479797ffbbf34bd20b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      InitialSetup.FRM

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\InitialSetup.FRM
                                                                      • Size 1KB
                                                                      • SHA256 d5786540891c411bc34a5505a6cee0e747df2e5cd410abfeb94e6d4169c85069
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Permissions.FRM

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\Permissions.FRM
                                                                      • Size 1KB
                                                                      • SHA256 44e9bc08a3f919da8689c4703e77324568f3902e95f8f3f92ccf234bcf7bf649
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      PublishCheat.FRM

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\PublishCheat.FRM
                                                                      • Size 2KB
                                                                      • SHA256 a8611471651393e17090167c5b6cade46eae9fee8841db0816bf36a4f43fbe16
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      UpdateOrNew.FRM

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\UpdateOrNew.FRM
                                                                      • Size 936B
                                                                      • SHA256 bd3e07decc17007796403191246ab0f3585f51532fbf16d496e541c3107d7e0e
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      link.png

                                                                      • Path C:\Program Files\Cheat Engine\autorun\ceshare\images\link.png
                                                                      • Size 1KB
                                                                      • SHA256 a85170d26b9344dca793c3b2326ec709d2f2d01578e78b855e82b14795b0025c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Lua files in this folder get executed automatically as well.txt

                                                                      • Path C:\Program Files\Cheat Engine\autorun\custom\Lua files in this folder get executed automatically as well.txt
                                                                      • Size 85B
                                                                      • SHA256 308c1d972eae5fc20b034f480d3786d384888fe369ac15ff64cae16c49e1871b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      CEJVMTI.dll

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\32\CEJVMTI.dll
                                                                      • Size 49KB
                                                                      • SHA256 7bd0d77fd790215bb67337f9f210b05aaab0193d105b8ff86ec422e9875eb033
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CEJVMTI.dll

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\64\CEJVMTI.dll
                                                                      • Size 60KB
                                                                      • SHA256 f107dd69b4115864d289f364fafc0e045fd3e9fc4bde5586ce8c1bcf59cc65a7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      DotNetInterface.dll

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\DotNetInterface.dll
                                                                      • Size 41KB
                                                                      • SHA256 9f361c38f6dc0b313ec19ca55b6a010f932d1651e70e1da3bf71f58a0e522ecc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      MonoDataCollector32.dll

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\MonoDataCollector32.dll
                                                                      • Size 550KB
                                                                      • SHA256 3c2bbd5bcabd43209d1eb17474568b10a758c488c4bf8282999aafa01f3b8eb4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      MonoDataCollector64.dll

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\MonoDataCollector64.dll
                                                                      • Size 738KB
                                                                      • SHA256 9eee42e7102ed1bc1b9843cf917d7ddc3be3a8ac7cfcc234b8dfa5846674a973
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Pipe.cpp

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Common\Pipe.cpp
                                                                      • Size 1KB
                                                                      • SHA256 38ef8b43484c14de225e2b94912e5d39a4538d070543dbd484be1122aa525f93
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Pipe.h

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Common\Pipe.h
                                                                      • Size 601B
                                                                      • SHA256 28aae61e678f91ea67627ff994ed41906e7f7bbf2d0745ac9195f8c046c95ca7
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      CEJVMTI.cpp

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\CEJVMTI.cpp
                                                                      • Size 4KB
                                                                      • SHA256 c9ef523d9abcac32bc86cc5e316c03749b64ec4bce0343289c05e9366639696d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CEJVMTI.h

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\CEJVMTI.h
                                                                      • Size 836B
                                                                      • SHA256 18c5fb7cb71eb7b2d1835ce44b24e09213aa885c1407e4e2401fbd2d74970d8e
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      CEJVMTI.vcproj

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\CEJVMTI.vcproj
                                                                      • Size 9KB
                                                                      • SHA256 cafe34e86117a15c4e0b40f12bcbb79cb6ef8f0ab8ed10def567357ab11637cd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      JavaEventServer.cpp

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\JavaEventServer.cpp
                                                                      • Size 8KB
                                                                      • SHA256 e3795c3b94c84491a368c78fcbc4076bfadca038afe74da2fa7fab7415945658
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      dllmain.cpp

                                                                      • Path C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\dllmain.cpp
                                                                      • Size 410B
                                                                      • SHA256 542e67d6247001859b6bb38c2aa085f5446371eb2f2385546e12d0bf275de503
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      scoreboard.png

                                                                      • Path C:\Program Files\Cheat Engine\badassets\scoreboard.png
                                                                      • Size 5KB
                                                                      • SHA256 a8d8227b8e97a713e0f1f5db5286b3db786b7148c1c8eb3d4bbfe683dc940db9
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d10hook.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d10hook.dll
                                                                      • Size 128KB
                                                                      • SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d10hook64.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d10hook64.dll
                                                                      • Size 140KB
                                                                      • SHA256 a2ac2ba27b0ed9acc3f0ea1bef9909a59169bc2eb16c979ef8e736a784bf2fa4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d11hook.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d11hook.dll
                                                                      • Size 137KB
                                                                      • SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d11hook64.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d11hook64.dll
                                                                      • Size 146KB
                                                                      • SHA256 6f505cc5973687bbda1c2d9ac8a635d333f57c12067c54da7453d9448ab40b8f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d9hook.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d9hook.dll
                                                                      • Size 124KB
                                                                      • SHA256 fd2a2b4fe4504c56347c35f24d566cc0510e81706175395d0a2ba26a013c4daf
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced3d9hook64.dll

                                                                      • Path C:\Program Files\Cheat Engine\ced3d9hook64.dll
                                                                      • Size 136KB
                                                                      • SHA256 8783f06f7b123e16042bb0af91ff196b698d3cd2aa930e3ea97cfc553d9fc0f4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      d3dhook.dll

                                                                      • Path C:\Program Files\Cheat Engine\d3dhook.dll
                                                                      • Size 119KB
                                                                      • SHA256 e2a7df4c380667431f4443d5e5fc43964b76c8fcb9cf4c7db921c4140b225b42
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      d3dhook64.dll

                                                                      • Path C:\Program Files\Cheat Engine\d3dhook64.dll
                                                                      • Size 131KB
                                                                      • SHA256 7d82694094c1bbc586e554fa87a4b1ed6ebc9eb14902fd429824dcd501339722
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      _mingw.h

                                                                      • Path C:\Program Files\Cheat Engine\include\_mingw.h
                                                                      • Size 3KB
                                                                      • SHA256 478ca3b81e7442b00b29ad67ed6ff30656aaf1e83402f5d47c803b6641a88a81
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      assert.h

                                                                      • Path C:\Program Files\Cheat Engine\include\assert.h
                                                                      • Size 1KB
                                                                      • SHA256 3ab7edec5e55840c35be252bad52236955c3b4f9143810cdb1f09c34510eb8c4
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      celib.h

                                                                      • Path C:\Program Files\Cheat Engine\include\celib.h
                                                                      • Size 264B
                                                                      • SHA256 0d37951ce5445917bdb6fe062cf18bafe458a9f361abf8ec11382ef7f6653e1f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      celog.h

                                                                      • Path C:\Program Files\Cheat Engine\include\celog.h
                                                                      • Size 1KB
                                                                      • SHA256 9373d6ce49de335c64d591e6b8e8f362a2768f474ae761b5fa4ec6a893e635e8
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      cesocket.h

                                                                      • Path C:\Program Files\Cheat Engine\include\cesocket.h
                                                                      • Size 1KB
                                                                      • SHA256 6184170fe0d4f8c8ada1299caf0e34d435962c288686578436b2251c3909f050
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      conio.h

                                                                      • Path C:\Program Files\Cheat Engine\include\conio.h
                                                                      • Size 10KB
                                                                      • SHA256 de7161f85835d98b38fe6a19ef8973dcaf58ec237b1c91cf05ac535b2ff3845f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ctype.h

                                                                      • Path C:\Program Files\Cheat Engine\include\ctype.h
                                                                      • Size 9KB
                                                                      • SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      dir.h

                                                                      • Path C:\Program Files\Cheat Engine\include\dir.h
                                                                      • Size 952B
                                                                      • SHA256 84064b17e501d691c43d47e45b112c2884db467417910b5fa1482b72342badfb
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      direct.h

                                                                      • Path C:\Program Files\Cheat Engine\include\direct.h
                                                                      • Size 1KB
                                                                      • SHA256 179c3204312d7cf8032102773629bcb3e5fff792d1d808931cb6619a431d2435
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      dirent.h

                                                                      • Path C:\Program Files\Cheat Engine\include\dirent.h
                                                                      • Size 3KB
                                                                      • SHA256 88c1f767fdcd6d51b991ee3234792da48c8576f5f8816f17a42344f9c8bbb1c1
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      dos.h

                                                                      • Path C:\Program Files\Cheat Engine\include\dos.h
                                                                      • Size 1KB
                                                                      • SHA256 3afea4ae85c68987fe59f40592ac5ea3ef1049b4fb72612bb185358d628e2dec
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      errno.h

                                                                      • Path C:\Program Files\Cheat Engine\include\errno.h
                                                                      • Size 1KB
                                                                      • SHA256 7c8494fe57d944773861c4c1cc1f2b46b3111144a24bf505b3d47b32f0ac1e8a
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      excpt.h

                                                                      • Path C:\Program Files\Cheat Engine\include\excpt.h
                                                                      • Size 3KB
                                                                      • SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      fcntl.h

                                                                      • Path C:\Program Files\Cheat Engine\include\fcntl.h
                                                                      • Size 1KB
                                                                      • SHA256 fbd94f945a57165ac897bdbacd2a861b1351e7850fa76752703c0a622e0646fa
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      fenv.h

                                                                      • Path C:\Program Files\Cheat Engine\include\fenv.h
                                                                      • Size 3KB
                                                                      • SHA256 67a827acf4e09653afb5d18f2ecaa5fcdfb7471d8a5b8197c2f33d06e8462f84
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      float.h

                                                                      • Path C:\Program Files\Cheat Engine\include\float.h
                                                                      • Size 1KB
                                                                      • SHA256 7b8c84c49d28439ed7415e88c5131551b3c3f68305c51d3d81b8ec42e6b25013
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      inttypes.h

                                                                      • Path C:\Program Files\Cheat Engine\include\inttypes.h
                                                                      • Size 5KB
                                                                      • SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      io.h

                                                                      • Path C:\Program Files\Cheat Engine\include\io.h
                                                                      • Size 12KB
                                                                      • SHA256 5da97c850e8e2ab608c42947a33411f556f6d75b8264e1e5cf29ca7ba7b96256
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      is-ABV73.tmp

                                                                      • Path C:\Program Files\Cheat Engine\include\is-ABV73.tmp
                                                                      • Size 15KB
                                                                      • SHA256 63b57b15239c54c2ff7a0c64097e9d69dd0c1bfd65611f3ac14b1d6249cf4203
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      is-VDHFF.tmp

                                                                      • Path C:\Program Files\Cheat Engine\include\is-VDHFF.tmp
                                                                      • Size 19KB
                                                                      • SHA256 5bba095a2d22a6bc0670f73bfebba63cfec65f8b7c248e84e36b3d7ede0a4f3c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      jni.h

                                                                      • Path C:\Program Files\Cheat Engine\include\jni.h
                                                                      • Size 52KB
                                                                      • SHA256 bbfdf8435eb3bf257808755066eb267f77f2677af1333c32d8d42476f3cde845
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      limits.h

                                                                      • Path C:\Program Files\Cheat Engine\include\limits.h
                                                                      • Size 2KB
                                                                      • SHA256 39c0761f0e43d7b936b9b81c85673dd82896ebfa66e9f1b9a19b45f34e4cd52a
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      linux-x86_64-ExceptionHandler.c

                                                                      • Path C:\Program Files\Cheat Engine\include\linux-x86_64-ExceptionHandler.c
                                                                      • Size 6KB
                                                                      • SHA256 6ee47c69e8af14257387e4ea025b5c8df832ee751745ea21e91e90c79e4352a6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      locale.h

                                                                      • Path C:\Program Files\Cheat Engine\include\locale.h
                                                                      • Size 2KB
                                                                      • SHA256 882626fa25dbc1b5903e6fd98cc8516f1e54c4e06945026653f05b38125dff2c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      is-A60N4.tmp

                                                                      • Path C:\Program Files\Cheat Engine\include\lua\is-A60N4.tmp
                                                                      • Size 200B
                                                                      • SHA256 a7a47ce4cd19f703b8025696f0631c09a664d54cfa831be4538d10441aebb48d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      lauxlib.h

                                                                      • Path C:\Program Files\Cheat Engine\include\lua\lauxlib.h
                                                                      • Size 8KB
                                                                      • SHA256 1a47911ab8c28536b35b83e9887729b06b00e10ded9c1bdb417ece7657a6c73a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      lua.h

                                                                      • Path C:\Program Files\Cheat Engine\include\lua\lua.h
                                                                      • Size 14KB
                                                                      • SHA256 8aef3fa9669bdc5e7659389e276f31ec779ca4bdf96e2c9ada07dd9458a47416
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      luaconf.h

                                                                      • Path C:\Program Files\Cheat Engine\include\lua\luaconf.h
                                                                      • Size 20KB
                                                                      • SHA256 0c5d09a7908f99b80377b3157a0bd37c6322cdc0af437e99501ae746037408ec
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      lualib.h

                                                                      • Path C:\Program Files\Cheat Engine\include\lua\lualib.h
                                                                      • Size 1KB
                                                                      • SHA256 3890f6ce73f70f6eb67ec42a74f7c8cef40fa184659934906648c8acadb53fbf
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      luaclient.c

                                                                      • Path C:\Program Files\Cheat Engine\include\luaclient.c
                                                                      • Size 6KB
                                                                      • SHA256 a18a985a32b8627847278c41012d200c0db1b4368e6204fd6157f6e29281d9e3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      macspeedhack.c

                                                                      • Path C:\Program Files\Cheat Engine\include\macspeedhack.c
                                                                      • Size 5KB
                                                                      • SHA256 3385883dfeeda6d10867ad5e942a90e3a86e1a51ae4621ac19d14f8ef92dc000
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      malloc.h

                                                                      • Path C:\Program Files\Cheat Engine\include\malloc.h
                                                                      • Size 5KB
                                                                      • SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      math.h

                                                                      • Path C:\Program Files\Cheat Engine\include\math.h
                                                                      • Size 22KB
                                                                      • SHA256 0bc33882bd2af1e7d33c38c0160e2a0ae737836815360765750cdc7e98e5dfc5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      mem.h

                                                                      • Path C:\Program Files\Cheat Engine\include\mem.h
                                                                      • Size 345B
                                                                      • SHA256 43956946aefee50e01fdd4d54a6c597418abcb02251f9d7695ed7039fd7a5ff6
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      memory.h

                                                                      • Path C:\Program Files\Cheat Engine\include\memory.h
                                                                      • Size 1KB
                                                                      • SHA256 b4341e188913a819fa3bf101078a95ca077780219373f424c39ad86c94e04b6f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      process.h

                                                                      • Path C:\Program Files\Cheat Engine\include\process.h
                                                                      • Size 8KB
                                                                      • SHA256 6947c954f2af676e66cc38d64b1a165428734000e2e272f883c2d74a85b82020
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      conio_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\conio_s.h
                                                                      • Size 1KB
                                                                      • SHA256 f7375e816739491fbab39531c1d60a77b78ff9a162aba17f817c773bf75f6508
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      crtdbg_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\crtdbg_s.h
                                                                      • Size 461B
                                                                      • SHA256 03630ee83e7c921446a0790853fcadeb5a308553dd3c4ecddd568cda3167c0f1
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      io_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\io_s.h
                                                                      • Size 881B
                                                                      • SHA256 6e02f4ae50d30629af7df34785b6c32642b12d94addd56606f6fc4ab668250ff
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      is-P63QQ.tmp

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\is-P63QQ.tmp
                                                                      • Size 4KB
                                                                      • SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      mbstring_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\mbstring_s.h
                                                                      • Size 3KB
                                                                      • SHA256 d962ab8070958953f48b24c9ea068b345b158237826fb71b9a76d36cf2e8a32b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      search_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\search_s.h
                                                                      • Size 796B
                                                                      • SHA256 96174e09f1c573c7faea85a6d568225a1b946e133c6c04a7bd6aa865c58896a2
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stdio_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\stdio_s.h
                                                                      • Size 11KB
                                                                      • SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      stralign_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\stralign_s.h
                                                                      • Size 824B
                                                                      • SHA256 b23f0cf79d5455e232d92792e2b2be38125a02808bc005049367bab68da1300b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      string_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\string_s.h
                                                                      • Size 1KB
                                                                      • SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      timeb_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\sys\timeb_s.h
                                                                      • Size 653B
                                                                      • SHA256 d153417ec64eb7b1504749bca6477efd51b4b22de670518f4fdc2701080145c0
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      tchar_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\tchar_s.h
                                                                      • Size 8KB
                                                                      • SHA256 a5318cceb241962769169c32a3ce5bfb9a075a52edbac31aad33b0d7b897b544
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      time_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\time_s.h
                                                                      • Size 2KB
                                                                      • SHA256 9ae9cb7a3164ad0093e3887b0ca09bb67498da51bb44e9be500b60e72a385dc0
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      wchar_s.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sec_api\wchar_s.h
                                                                      • Size 7KB
                                                                      • SHA256 5a470ac358b2d951202182f9ec1f945331c23a8d79629ad4edb08b7d73cfaee4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      setjmp.h

                                                                      • Path C:\Program Files\Cheat Engine\include\setjmp.h
                                                                      • Size 3KB
                                                                      • SHA256 b6164eb7fae4a12163251492f7f4e56cc50d146ec7a2f5640d86eca4d095046f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      share.h

                                                                      • Path C:\Program Files\Cheat Engine\include\share.h
                                                                      • Size 639B
                                                                      • SHA256 6de922c1bd7eedc33308304785c212945064d763eedfb373c09cbbb5cb933dde
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      signal.h

                                                                      • Path C:\Program Files\Cheat Engine\include\signal.h
                                                                      • Size 1KB
                                                                      • SHA256 045a031b376733ed7a685bc01709f5281403729ff7c601b913b2aca2fe1493bb
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stdalign.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdalign.h
                                                                      • Size 354B
                                                                      • SHA256 7612d46571099ccaa7616a510f78f180cb1e91671e6e5e9223a2e297b84b789d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stdarg.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdarg.h
                                                                      • Size 335B
                                                                      • SHA256 a38f8d34f5e09658cc3a8892b3a7e80ff566eaeedc194e5a85ece0b675993137
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stdatomic.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdatomic.h
                                                                      • Size 7KB
                                                                      • SHA256 5bc89ea6aff1edabaf7f5830ad589cf8d9d8245211ac4f9e1440cf53c0eb8d18
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      stdbool.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdbool.h
                                                                      • Size 176B
                                                                      • SHA256 5252824225ddc486b0460677f765e4157af5d3ed7acd65b310a4045eafb56af7
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stddef.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stddef.h
                                                                      • Size 1KB
                                                                      • SHA256 a2eeaa997ab8f1d3b3ff35612aa61f8d53e61bdabffcd5bbd21c68bc41ab0db5
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stdint.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdint.h
                                                                      • Size 6KB
                                                                      • SHA256 33c6c8da7d564b5702af8c6ff45c00a16842ba3ffe3f95f7f6232752f63c5afd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      stdio.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdio.h
                                                                      • Size 14KB
                                                                      • SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      stdnoreturn.h

                                                                      • Path C:\Program Files\Cheat Engine\include\stdnoreturn.h
                                                                      • Size 125B
                                                                      • SHA256 ec64d8fbf7fb2e800df9784b2efca0a99fc25a3eb5e8da56e4df098937f787f2
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      string.h

                                                                      • Path C:\Program Files\Cheat Engine\include\string.h
                                                                      • Size 8KB
                                                                      • SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      fcntl.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\fcntl.h
                                                                      • Size 359B
                                                                      • SHA256 2b4f660ffd8994afa0387407051e3ca7ecc8fe44beb2add2d431cd52ce8ad9c4
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      file.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\file.h
                                                                      • Size 367B
                                                                      • SHA256 b6e779c53140c117bc36bd335c64bfcb13ae4c2c486b94783b32149a6eb2d320
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      locking.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\locking.h
                                                                      • Size 648B
                                                                      • SHA256 29786145e9af34a1f96e7368855b19e8879fc80d35a172d9ba97d3c7fc2f6311
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      stat.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\stat.h
                                                                      • Size 6KB
                                                                      • SHA256 4dc126ab4b3177da85e40ed56a7d4516105e436a4624272992816b23e03915b5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      time.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\time.h
                                                                      • Size 1KB
                                                                      • SHA256 518741f286545434df676572e53bf8553b0496a7138942dc6b20ff252b4293e4
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      timeb.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\timeb.h
                                                                      • Size 2KB
                                                                      • SHA256 ef43f9f51660ab8282707f7169cc3d977878e623743d23ec565663fe2b4e9782
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      types.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\types.h
                                                                      • Size 2KB
                                                                      • SHA256 f1c3f9e5c811a63bebae5229042c09cb5e057f4117fd31b45aacbb4c3a626df8
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      unistd.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\unistd.h
                                                                      • Size 351B
                                                                      • SHA256 1f595a85caeeef7385a0bda94af51896b214ee26056484af50353e9393de1929
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      utime.h

                                                                      • Path C:\Program Files\Cheat Engine\include\sys\utime.h
                                                                      • Size 3KB
                                                                      • SHA256 524312e3e8a325f7d5afc21ddb8fcbceb85d451175e07ef1beadb7f82fa368b3
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      tcc_libm.h

                                                                      • Path C:\Program Files\Cheat Engine\include\tcc\tcc_libm.h
                                                                      • Size 5KB
                                                                      • SHA256 758e0585edfbce44bf27e0bb44d9b22af53b86c9c265e4303df9b270194ed4ff
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      tccdefs.h

                                                                      • Path C:\Program Files\Cheat Engine\include\tccdefs.h
                                                                      • Size 12KB
                                                                      • SHA256 0d59ca4ed0be71f3b2d494612ca26fa7e901af30b2b37f0b4c5adf33df8f19cd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      tchar.h

                                                                      • Path C:\Program Files\Cheat Engine\include\tchar.h
                                                                      • Size 30KB
                                                                      • SHA256 7fe5fde028ff8f69d2bda910664e2c169e7b92c6e7f2cf7915eb72054a9746ff
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      tgmath.h

                                                                      • Path C:\Program Files\Cheat Engine\include\tgmath.h
                                                                      • Size 3KB
                                                                      • SHA256 e60c66ff9017f13ab18ee38824792ca771b9235bcb4df57688fec582739524a5
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      time.h

                                                                      • Path C:\Program Files\Cheat Engine\include\time.h
                                                                      • Size 8KB
                                                                      • SHA256 453793a2d6c6fc772d1cdd60e701fb3d393d752937c1d6b2ca64d5f1cec9fd36
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      vadefs.h

                                                                      • Path C:\Program Files\Cheat Engine\include\vadefs.h
                                                                      • Size 304B
                                                                      • SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      values.h

                                                                      • Path C:\Program Files\Cheat Engine\include\values.h
                                                                      • Size 126B
                                                                      • SHA256 fa3758847b33f59abe99b023be00d8a027c391ecd0580a1fe755497c11e0c723
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      varargs.h

                                                                      • Path C:\Program Files\Cheat Engine\include\varargs.h
                                                                      • Size 355B
                                                                      • SHA256 07858857f4eed0a61df94beb1a9d678b53fc3d67a0b0e8936155f85ddbcd1dcc
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      wchar.h

                                                                      • Path C:\Program Files\Cheat Engine\include\wchar.h
                                                                      • Size 33KB
                                                                      • SHA256 c9bf12e02a2ab0783ed1c66dfe43de43c402b33906cada9b1157502a82c7c3e4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      wctype.h

                                                                      • Path C:\Program Files\Cheat Engine\include\wctype.h
                                                                      • Size 4KB
                                                                      • SHA256 e12d9c5bcbe4dfb96ea6c75410ea287917b3c24bff9cd2e716d35e00c1d4906c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      basetsd.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\basetsd.h
                                                                      • Size 5KB
                                                                      • SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      basetyps.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\basetyps.h
                                                                      • Size 2KB
                                                                      • SHA256 34842ee3389cb13a72a2b87ec930aadbffce8906eb31480180cff541c7f44134
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      guiddef.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\guiddef.h
                                                                      • Size 4KB
                                                                      • SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      poppack.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\poppack.h
                                                                      • Size 282B
                                                                      • SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      pshpack1.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\pshpack1.h
                                                                      • Size 285B
                                                                      • SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      pshpack2.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\pshpack2.h
                                                                      • Size 285B
                                                                      • SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      pshpack4.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\pshpack4.h
                                                                      • Size 285B
                                                                      • SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      pshpack8.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\pshpack8.h
                                                                      • Size 285B
                                                                      • SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      winbase.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winbase.h
                                                                      • Size 155KB
                                                                      • SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      wincon.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\wincon.h
                                                                      • Size 14KB
                                                                      • SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      windef.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\windef.h
                                                                      • Size 5KB
                                                                      • SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      windows.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\windows.h
                                                                      • Size 2KB
                                                                      • SHA256 3b0d80e4b27e099c8af543d6d9cca295c68e115a0fba7cd79cc0e76d1c3a5c11
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      winerror.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winerror.h
                                                                      • Size 146KB
                                                                      • SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      wingdi.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\wingdi.h
                                                                      • Size 118KB
                                                                      • SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winnt.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winnt.h
                                                                      • Size 189KB
                                                                      • SHA256 f43cca894862a7311f5f4fd4789efdecd86563113b374e4f04f23ceb524472a3
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winreg.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winreg.h
                                                                      • Size 13KB
                                                                      • SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winuser.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winuser.h
                                                                      • Size 175KB
                                                                      • SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winver.h

                                                                      • Path C:\Program Files\Cheat Engine\include\winapi\winver.h
                                                                      • Size 5KB
                                                                      • SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      windowslite.h

                                                                      • Path C:\Program Files\Cheat Engine\include\windowslite.h
                                                                      • Size 2KB
                                                                      • SHA256 4510fe31e609755c5e27a0e04474f1a6a0fed6bf1ee5aeb227b7d7c2f422368d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      language.ini

                                                                      • Path C:\Program Files\Cheat Engine\languages\language.ini
                                                                      • Size 283B
                                                                      • SHA256 4aa4f0b75548d45c81d8e876e2db1c74bddfd64091f102706d729b50a7af53a5
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      libipt-32.dll

                                                                      • Path C:\Program Files\Cheat Engine\libipt-32.dll
                                                                      • Size 157KB
                                                                      • SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      libipt-64.dll

                                                                      • Path C:\Program Files\Cheat Engine\libipt-64.dll
                                                                      • Size 182KB
                                                                      • SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      files here are in the lua searchpath.txt

                                                                      • Path C:\Program Files\Cheat Engine\lua\files here are in the lua searchpath.txt
                                                                      • Size 142B
                                                                      • SHA256 3a21d77f86dc718e449c9690035362ea971d55e6ce1bb31f5ec032cb42d02940
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      forEachForm.lua

                                                                      • Path C:\Program Files\Cheat Engine\lua\forEachForm.lua
                                                                      • Size 364B
                                                                      • SHA256 218b459887d23819336482890c2b6a0ad3f2f4ad3359423297f5e46c18ffe071
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      json.lua

                                                                      • Path C:\Program Files\Cheat Engine\lua\json.lua
                                                                      • Size 10KB
                                                                      • SHA256 d937f80c47d79b1a4eccca3bdd8b260ce56bd42dee592e69771fd2c078b19d8b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      luaclient-i386.dll

                                                                      • Path C:\Program Files\Cheat Engine\luaclient-i386.dll
                                                                      • Size 197KB
                                                                      • SHA256 dd07117ed80546f23d37f8023e992de560a1f55a76d1eb6dfd9d55baa5e3dad6
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      luaclient-x86_64.dll

                                                                      • Path C:\Program Files\Cheat Engine\luaclient-x86_64.dll
                                                                      • Size 260KB
                                                                      • SHA256 253d18d0d835f482e6abbaf716855580eb8fe789292c937301e4d60ead29531d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      overlay.fx

                                                                      • Path C:\Program Files\Cheat Engine\overlay.fx
                                                                      • Size 2KB
                                                                      • SHA256 c4d23db8effb359b4aa4d1e1e480486fe3a4586ce8243397a94250627ba4f8cc
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      vehdebug-i386.dll

                                                                      • Path C:\Program Files\Cheat Engine\vehdebug-i386.dll
                                                                      • Size 326KB
                                                                      • SHA256 cb716753fe77bc54cd42477be9bf4b5bd8120b4255756855f33e4684bdaff6c0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      vehdebug-x86_64.dll

                                                                      • Path C:\Program Files\Cheat Engine\vehdebug-x86_64.dll
                                                                      • Size 415KB
                                                                      • SHA256 8dfae450e6de868c3b2b5db4483b979216db5d3af46fe57e1d432c198c2c5414
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      windowsrepair.exe

                                                                      • Path C:\Program Files\Cheat Engine\windowsrepair.exe
                                                                      • Size 262KB
                                                                      • SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winhook-i386.dll

                                                                      • Path C:\Program Files\Cheat Engine\winhook-i386.dll
                                                                      • Size 201KB
                                                                      • SHA256 3cdb85ee83ef12802efdfc9314e863d4696be70530b31e7958c185fc4d6a9b38
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      winhook-x86_64.dll

                                                                      • Path C:\Program Files\Cheat Engine\winhook-x86_64.dll
                                                                      • Size 264KB
                                                                      • SHA256 e08b035d0a894d8bea64e67b1ed0bce27567d417eaaa133e8b231f8a939e581d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                      • Size 280B
                                                                      • SHA256 3a958178f477b8cf0f18d83e0835916167b3eaf95d859728b647bc0100a82efc
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                      • Size 280B
                                                                      • SHA256 48b0127c48894e5c8e42b14bcc7f6b1f91ca5d97355f42d22391fb602568bb1d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                      • Size 280B
                                                                      • SHA256 6561844dd5e43dacb436c61ec1cd8e4be628e15a2c74e5d20e5005592aa1ba4a
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                      • Size 280B
                                                                      • SHA256 081398d7bc32ee529427ba904b53da9950418dcd43950f098085b1c2338d5e7e
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      500e673b-e78c-451e-9c84-727b52cb8489.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\500e673b-e78c-451e-9c84-727b52cb8489.tmp
                                                                      • Size 1B
                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                      • MD5 SHA1 SHA512

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                      • Size 2KB
                                                                      • SHA256 5d4632103b8a8339c2316c4a7f2fe00769912e1b58e2cf56db9cff3cf43ab042
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      the-real-index~RFe59d96e.TMP

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d96e.TMP
                                                                      • Size 2KB
                                                                      • SHA256 93708df04d2267ba137100e9dae35309d6f870e01a91e2e7ad9c26d710fdf970
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      SiteList-Enterprise.json

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                      • Size 2B
                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                      • MD5 SHA1 SHA512

                                                                      Edge Profile.ico

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                      • Size 70KB
                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Network Persistent State

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                      • Size 2KB
                                                                      • SHA256 5b6bb14e91d1728b028ace762e3dcd4e114a9eeb70701ffe012b971c9beab3ae
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      SCT Auditing Pending Reports

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                      • Size 2B
                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                      • MD5 SHA1 SHA512

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                      • Size 12KB
                                                                      • SHA256 96f44deb2d611d70959366335d126b2fd801ce16fb9cb34a0a54ed5dbb80e7e0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Secure Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                      • Size 27KB
                                                                      • SHA256 06c8d702ec509fe4c7cafe5b1bd1cbce3f8e91fbf5fc68837b61db1034e98e96
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      sync_diagnostic.log

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                      • Size 4KB
                                                                      • SHA256 dac6d1a92b71a78c69b71bef466896563b7fa198f572f0794a4b472a1dc2f6e7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      c4b147ce-b69f-4286-8e6e-c83f7c5f7b1f.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4b147ce-b69f-4286-8e6e-c83f7c5f7b1f.tmp
                                                                      • Size 6B
                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                      • MD5 SHA1 SHA512

                                                                      Local State

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                      • Size 45KB
                                                                      • SHA256 4bfd6b880b74f5fb4552127ade98f1a590f3bf67aa1716d3da28088e83fc8fea
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Local State

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                      • Size 38KB
                                                                      • SHA256 4e5736804fdbb918b952d72b264a9460db661321ebb35af46e27bf1190b303d1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      data_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                      • Size 264KB
                                                                      • SHA256 a7726c2bc63d9bfd8765e0b8e0f776dd0bd07ab07cd36da8657a964e6caa236e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      3192347f-408c-4ca0-8e6c-a6f762f448e1.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3192347f-408c-4ca0-8e6c-a6f762f448e1.tmp
                                                                      • Size 13B
                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                      • MD5 SHA1 SHA512

                                                                      prep_Activatable Class_Hermes_perf.cache

                                                                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                      • Size 607B
                                                                      • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      prep_Activatable Class_Hermes_perf.cache

                                                                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                      • Size 599B
                                                                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      90bb3c88-7d59-4c5d-acf2-e12dc0b0a836.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\90bb3c88-7d59-4c5d-acf2-e12dc0b0a836.tmp
                                                                      • Size 10KB
                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CheatEngine77.exe

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\CheatEngine77.exe
                                                                      • Size 33.1MB
                                                                      • SHA256 cf0f4b6002555677984233c95856683959be83a5def3dc12175a8296eb22676b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      WebAdvisor.png

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\WebAdvisor.png
                                                                      • Size 47KB
                                                                      • SHA256 0c430e56d69435d8ab31cbb5916a73a47d11ef65b37d289ee7d11130adf25856
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      finish.png

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\finish.png
                                                                      • Size 248KB
                                                                      • SHA256 41031efc4f7e322dc5ffacc94b9296fb28b9b922b1ce3b3da13bf659a5fd2985
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      logo.png

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\logo.png
                                                                      • Size 248KB
                                                                      • SHA256 8c5c80bbc6b0fdb367eab1253517d8b156c85545a2d37d1ee4b78f3041d9b5db
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      zbShieldUtils.dll

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DR6A7THJCB.tmp\zbShieldUtils.dll
                                                                      • Size 2.0MB
                                                                      • SHA256 976d070339c1ecd80d0d2ded8f2c3fd1c6ec03f408053470f696066c2bb2b738
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CheatEngine77.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-DXNXEVMW9Z.tmp\CheatEngine77.tmp
                                                                      • Size 4.2MB
                                                                      • SHA256 07eea42af4d565d09ce6c8723211e96a835400060dc90e53a6bac21b2fd3da42
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CheatEngine77.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-O0885.tmp\CheatEngine77.tmp
                                                                      • Size 3.5MB
                                                                      • SHA256 ce70cab18db2e2038dcec0edceb1038a37d3851bc3d77dee3dd7e583ac37792b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      _setup64.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-URVAU.tmp\_isetup\_setup64.tmp
                                                                      • Size 6KB
                                                                      • SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      content_new.js

                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4076_293880199\CRX_INSTALL\content_new.js
                                                                      • Size 10KB
                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      memory/1636-44-0x0000000000D40000-0x0000000000E24000-memory.dmp

                                                                      memory/1636-1000-0x0000000000D40000-0x0000000000E24000-memory.dmp

                                                                      memory/1636-1181-0x0000000000D40000-0x0000000000E24000-memory.dmp

                                                                      memory/2448-31-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/2448-51-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/2448-39-0x0000000000400000-0x000000000084B000-memory.dmp

                                                                      memory/2448-34-0x0000000003230000-0x0000000003231000-memory.dmp

                                                                      memory/2448-32-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/2448-1187-0x0000000000400000-0x000000000084B000-memory.dmp

                                                                      memory/2448-1185-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/2448-6-0x0000000003230000-0x0000000003231000-memory.dmp

                                                                      memory/2448-26-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/2448-25-0x00000000066F0000-0x0000000006830000-memory.dmp

                                                                      memory/4728-38-0x0000000000020000-0x0000000000109000-memory.dmp

                                                                      memory/4728-1188-0x0000000000020000-0x0000000000109000-memory.dmp

                                                                      memory/4728-0-0x0000000000020000-0x0000000000109000-memory.dmp

                                                                      memory/4744-1764-0x0000020C17660000-0x0000020C17CF1000-memory.dmp

                                                                      memory/4828-1146-0x0000000000720000-0x0000000000AA8000-memory.dmp

                                                                      memory/6100-1200-0x00000286801E0000-0x00000286802E0000-memory.dmp

                                                                      memory/6100-1225-0x0000028683240000-0x0000028683260000-memory.dmp

                                                                      memory/6100-1199-0x00000286801E0000-0x00000286802E0000-memory.dmp

                                                                      memory/6100-1262-0x0000028693870000-0x0000028693890000-memory.dmp

                                                                      memory/6100-1237-0x0000028683380000-0x00000286833A0000-memory.dmp

                                                                      memory/6100-1228-0x0000028693460000-0x0000028693560000-memory.dmp