ec0a8cceb14dcb6c71d4c16ee9b98773d844c1e5856a5a3538928460f48b6c01

Analysis

user interaction
yes
max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CheatEngine77.exe
Size 6.6MB
Sample260714-rm83taet7n
SHA256 ec0a8cceb14dcb6c71d4c16ee9b98773d844c1e5856a5a3538928460f48b6c01
MD5 1d4e22bd822c5da9506b4c993328b2fc
SHA1 e37b868a5c3de10b2bb38088e61ca576c910b1de
SHA512 8fc651731dcacfe1daf90f37cad42e1a7ac91f399c0728f3f5fb7c15c910931eea2944a971391ca6a64da09c4853b680712ea9d6a3d858d80c17de3a25ac2a34
SSDEEP 196608:IV92TlYbckURXNYKzogqQtAwKLD2WYxaQF1uujtx0:I2TKckqYKMghyLqTBFUujc
TLSH
T15E66123FF28B613EE46A1A3539B2A210593B7A6164178C4696FCF44CCF691B01D3E787
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution installer persistence privilege_escalation spyware stealer trojan

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 16 IoCs

pid	Process
1384	CheatEngine77.tmp
2536	saBSI.exe
2472	CheatEngine77.exe
2756	CheatEngine77.tmp
2396	_setup64.tmp
5012	saBSI.exe
4464	Kernelmoduleunloader.exe
800	windowsrepair.exe
6024	installer.exe
4428	installer.exe
5920	ServiceHost.exe
4796	servicehost.exe
1700	UIHost.exe
3272	Cheat Engine.exe
4360	cheatengine-x86_64-SSE4-AVX2.exe
416	updater.exe

Loads dropped DLL 13 IoCs

pid	Process
1384	CheatEngine77.tmp
5012	saBSI.exe
4428	installer.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
1700	UIHost.exe
4360	cheatengine-x86_64-SSE4-AVX2.exe
4360	cheatengine-x86_64-SSE4-AVX2.exe
4360	cheatengine-x86_64-SSE4-AVX2.exe
1700	UIHost.exe

Modifies file permissions 1 TTPs 2 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
3092	icacls.exe
4552	icacls.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Stops running service(s) 4 TTPs
defense_evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002

Checks for any installed AV software in registry 1 TTPs 9 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\SOFTWARE\AVAST Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\SOFTWARE\Avast Software\Avast	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	CheatEngine77.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4046655672-1449839301-2197395821-1000\SOFTWARE\AVG\AV\Dir	CheatEngine77.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\shcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wsock32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\rasadhlp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\CRYPT32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcrt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\GDI32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\shell32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\inputhost.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\NTASN1.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\atlthunk.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\psapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\GLU32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wintypes.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DPAPI.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNEL32.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcp_win.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\RPCRT4.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\hhctrl.ocx	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\oleaut32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\advapi32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\opengl32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\uxtheme.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\PROPSYS.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\Xinput1_4.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DUser.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntmarta.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CFGMGR32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\SspiCli.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\fwpuclnt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\ncryptsslp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ws2_32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\imagehlp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\msimg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\combase.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\dxcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\schannel.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ncrypt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\version.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreMessaging.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\winmm.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\kernel.appcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\explorerframe.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreUIComponents.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DEVOBJ.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\webio.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\sechost.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\windows.storage.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\MSCTF.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\textinputframework.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\NSI.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\mswsock.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\comdlg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\win32u.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ole32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\dwmapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\MSASN1.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CRYPTBASE.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DNSAPI.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNELBASE.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\clbcatq.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\WINNSI.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\bcrypt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ucrtbase.dll	cheatengine-x86_64-SSE4-AVX2.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-shared-sv-SE.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-duckduckgo-sr-Latn-CS.js	installer.exe
File created	C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\transport_event_hub.js	ServiceHost.exe
File opened for modification	C:\Program Files\Cheat Engine\ced3d9hook64.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-228TO.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-DP2GG.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\badassets\is-600NJ.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages\nps\wa-controller-nps-checklist.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\main_close.png	installer.exe
File created	C:\Program Files\Cheat Engine\is-M6NIA.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-E8LB9.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\tcc\is-AUEA4.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\servicehost.exe	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages_web_view\webadvisor\wa-ext-install-toast.css	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-overlay-ja-JP.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-webboost-it-IT.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-webboost-nb-NO.js	installer.exe
File created	C:\Program Files\Cheat Engine\tableobfuscator\src\EncodeDecode\is-KJ6DG.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-BMNSQ.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\dlls\src\Mono\MonoDataCollector\is-5C36S.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\Temp1553997325\jslang\wa-res-shared-fr-CA.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-ss-toast-variants-fr-FR.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-duckduckgo-fr-CA.js	installer.exe
File created	C:\Program Files\Cheat Engine\include\is-HO02P.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\lua\is-6GG5S.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\Temp1553997325\jslang\wa-res-shared-ru-RU.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-adblock-nb-NO.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-adblock-tr-TR.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-uninstall-nb-NO.js	installer.exe
File created	C:\Program Files\Cheat Engine\is-8760N.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\sec_api\is-FPNSH.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\Temp1553997325\jslang\eula-cs-CZ.txt	installer.exe
File created	C:\Program Files\McAfee\Temp1553997325\jslang\eula-sr-Latn-CS.txt	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-checklist-zh-CN.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-dialog-balloon-zh-CN.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-bing-sk-SK.js	installer.exe
File created	C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\engine.js	ServiceHost.exe
File created	C:\Program Files\Cheat Engine\is-9TBL9.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\Temp1553997325\jslang\eula-nb-NO.txt	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\ss-toast-dark-mode-checkbox-checked.png	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages_web_view\webadvisor\wa-ext-install-toast.html	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-checklist-it-IT.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-uninstall-pt-BR.js	installer.exe
File created	C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\profile.json	ServiceHost.exe
File created	C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\rules.js	ServiceHost.exe
File created	C:\Program Files\Cheat Engine\languages\is-ISSOI.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-O6S9T.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-overlay-fi-FI.js	installer.exe
File created	C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\dictionary.json	ServiceHost.exe
File opened for modification	C:\Program Files\Cheat Engine\win32\nethost.dll	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\winhook-i386.dll	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-dialog-balloon-pl-PL.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-uninstall-pl-PL.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\events\npssurveysubmission.luc	installer.exe
File created	C:\Program Files\Cheat Engine\tcclib\is-4V1SH.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary .NET 8\is-LAM9C.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-pps-cs-CZ.js	installer.exe
File created	C:\Program Files\Cheat Engine\include\winapi\is-2S0S4.tmp	CheatEngine77.tmp
File created	C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\icn_mshield.png	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-oem-ss-toast-variants-sr-Latn-CS.js	installer.exe
File created	C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-adblock-sv-SE.js	installer.exe
File opened for modification	C:\Program Files\Cheat Engine\vehdebug-i386.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\win32\is-6QNHQ.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\win64\is-57N9R.tmp	CheatEngine77.tmp

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.1591_none_3e0fac18e32dc903\comctl32.dll	cheatengine-x86_64-SSE4-AVX2.exe

Launches sc.exe 3 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
4704	sc.exe
2896	sc.exe
1464	sc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1248	1384	WerFault.exe	87
3220	1384	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	saBSI.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Kernelmoduleunloader.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	saBSI.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cheat Engine.exe

Inno Setup is an open-source installation builder for Windows applications. 6 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/4628-1-0x0000000000380000-0x0000000000469000-memory.dmp	innosetup
behavioral2/memory/4628-13-0x0000000000380000-0x0000000000469000-memory.dmp	innosetup
behavioral2/files/0x000c00000001c5a9-104.dat	innosetup
behavioral2/memory/2472-105-0x0000000000E80000-0x0000000000F64000-memory.dmp	innosetup
behavioral2/memory/2472-1080-0x0000000000E80000-0x0000000000F64000-memory.dmp	innosetup
behavioral2/memory/2472-1259-0x0000000000E80000-0x0000000000F64000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	CheatEngine77.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	CheatEngine77.tmp

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	ServiceHost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	updater.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	updater.exe

Modifies registry class 25 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	cheatengine-x86_64-SSE4-AVX2.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine\DefaultIcon	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon\ = "C:\\Program Files\\Cheat Engine\\Cheat Engine.exe,0"	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32\ = "C:\\Program Files\\McAfee\\WebAdvisor\\x64\\WSSDep.dll"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\ = "McAfee SiteAdvisor MISP Integration"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command\ = "\"C:\\Program Files\\Cheat Engine\\Cheat Engine.exe\" \"%1\""	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\ = "McAfee SiteAdvisor MISP Integration"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.CT	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine\shell\open\command	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32\ = "C:\\Program Files\\McAfee\\WebAdvisor\\win32\\WSSDep.dll"	installer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.CETRAINER	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER\ = "CheatEngine"	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CT\ = "CheatEngine"	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\ = "Cheat Engine"	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell	CheatEngine77.tmp

Modifies system certificate store 2 TTPs 3 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E	saBSI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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	saBSI.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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	saBSI.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
1384	CheatEngine77.tmp
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2536	saBSI.exe
2756	CheatEngine77.tmp
2756	CheatEngine77.tmp
5012	saBSI.exe
5012	saBSI.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe
5920	ServiceHost.exe

Suspicious use of AdjustPrivilegeToken 16 IoCs

description	pid	Process
Token: SeDebugPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTcbPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTcbPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeLoadDriverPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeCreateGlobalPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeLockMemoryPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: 33	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeSecurityPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTakeOwnershipPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeManageVolumePrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeBackupPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeCreatePagefilePrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeShutdownPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeRestorePrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: 33	4360	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeIncBasePriorityPrivilege	4360	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
1384	CheatEngine77.tmp
2756	CheatEngine77.tmp
4360	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 1384	4628	CheatEngine77.exe	87
PID 1384 wrote to memory of 2536	1384	CheatEngine77.tmp	90
PID 1384 wrote to memory of 2472	1384	CheatEngine77.tmp	91
PID 2472 wrote to memory of 2756	2472	CheatEngine77.exe	92
PID 2756 wrote to memory of 2304	2756	CheatEngine77.tmp	93
PID 2304 wrote to memory of 1140	2304	net.exe	95
PID 2756 wrote to memory of 2288	2756	CheatEngine77.tmp	96
PID 2288 wrote to memory of 5344	2288	net.exe	98
PID 2756 wrote to memory of 1464	2756	CheatEngine77.tmp	99
PID 2756 wrote to memory of 2896	2756	CheatEngine77.tmp	101
PID 2756 wrote to memory of 4352	2756	CheatEngine77.tmp	103
PID 4352 wrote to memory of 5276	4352	net.exe	105
PID 2756 wrote to memory of 4704	2756	CheatEngine77.tmp	106
PID 2756 wrote to memory of 2396	2756	CheatEngine77.tmp	108
PID 2756 wrote to memory of 4552	2756	CheatEngine77.tmp	110
PID 2536 wrote to memory of 5012	2536	saBSI.exe	112
PID 2756 wrote to memory of 4464	2756	CheatEngine77.tmp	113
PID 2756 wrote to memory of 800	2756	CheatEngine77.tmp	114
PID 2756 wrote to memory of 3092	2756	CheatEngine77.tmp	115
PID 5012 wrote to memory of 6024	5012	saBSI.exe	118
PID 6024 wrote to memory of 4428	6024	installer.exe	119
PID 5920 wrote to memory of 1700	5920	ServiceHost.exe	123
PID 1384 wrote to memory of 3272	1384	CheatEngine77.tmp	125
PID 3272 wrote to memory of 4360	3272	Cheat Engine.exe	126
PID 5920 wrote to memory of 416	5920	ServiceHost.exe	132

C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe
"C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Users\Admin\AppData\Local\Temp\is-0MQUOOZX98.tmp\CheatEngine77.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-0MQUOOZX98.tmp\CheatEngine77.tmp" /SL5="$400A8,5592098,893952,C:\Users\Admin\AppData\Local\Temp\CheatEngine77.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks for any installed AV software in registry
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1384
- - C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\prod0_extract\saBSI.exe
    "C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\prod0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1demfsF9OyBiLgWmxRgeJ7zKJBkVNQlPn8sVBxV0UrUU7HcX9aTXwv0OljpTsaKLYdjt8QPxxJJnerZ
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2536
  - - C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
      "C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1demfsF9OyBiLgWmxRgeJ7zKJBkVNQlPn8sVBxV0UrUU7HcX9aTXwv0OljpTsaKLYdjt8QPxxJJnerZ saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:5012
    - - C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
        
        "C:\ProgramData\McAfee\WebAdvisor\saBSI\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        Suspicious use of WriteProcessMemory
        
        PID:6024
      - C:\Program Files\McAfee\Temp1553997325\installer.exe
        
        "C:\Program Files\McAfee\Temp1553997325\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in Program Files directory
        Modifies registry class
        
        PID:4428
- - C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\CheatEngine77.exe
    "C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2472
  - - C:\Users\Admin\AppData\Local\Temp\is-98IS8.tmp\CheatEngine77.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-98IS8.tmp\CheatEngine77.tmp" /SL5="$90170,32420729,869888,C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
      4⤵
      Executes dropped EXE
      Drops file in Program Files directory
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2756
    - - C:\Windows\SYSTEM32\net.exe
        
        "net" stop BadlionAntic
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2304
      - C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop BadlionAntic
        6⤵
        
        PID:1140
    - - C:\Windows\SYSTEM32\net.exe
        
        "net" stop BadlionAnticheat
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2288
      - C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop BadlionAnticheat
        6⤵
        
        PID:5344
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete BadlionAntic
        5⤵
        Launches sc.exe
        
        PID:1464
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete BadlionAnticheat
        5⤵
        Launches sc.exe
        
        PID:2896
    - - C:\Windows\SYSTEM32\net.exe
        
        "net" stop vgk
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4352
      - C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop vgk
        6⤵
        
        PID:5276
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete vgk
        5⤵
        Launches sc.exe
        
        PID:4704
    - - C:\Users\Admin\AppData\Local\Temp\is-KSM39.tmp\_isetup\_setup64.tmp
        
        helper 105 0x3BC
        5⤵
        Executes dropped EXE
        
        PID:2396
    - - C:\Windows\system32\icacls.exe
        
        "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
        5⤵
        Modifies file permissions
        
        PID:4552
    - - C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
        
        "C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe" /SETUP
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:4464
    - - C:\Program Files\Cheat Engine\windowsrepair.exe
        
        "C:\Program Files\Cheat Engine\windowsrepair.exe" /s
        5⤵
        Executes dropped EXE
        
        PID:800
    - - C:\Windows\system32\icacls.exe
        
        "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
        5⤵
        Modifies file permissions
        
        PID:3092
- - C:\Program Files\Cheat Engine\Cheat Engine.exe
    "C:\Program Files\Cheat Engine\Cheat Engine.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:3272
  - - C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
      "C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops file in System32 directory
      Drops file in Windows directory
      Modifies registry class
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      PID:4360
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 936
    3⤵
    - Program crash
    PID:1248
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 936
    3⤵
    - Program crash
    PID:3220

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5920
- C:\Program Files\McAfee\WebAdvisor\UIHost.exe
  "C:\Program Files\McAfee\WebAdvisor\UIHost.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1700
- C:\Program Files\McAfee\WebAdvisor\updater.exe
  "C:\Program Files\McAfee\WebAdvisor\updater.exe"
  2⤵
  - Executes dropped EXE
  - Modifies data under HKEY_USERS
  PID:416

C:\Program Files\McAfee\WebAdvisor\servicehost.exe
"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
1⤵
- Executes dropped EXE
PID:4796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1384 -ip 1384
1⤵
PID:4492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 1384 -ip 1384
1⤵
PID:4316

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

T1569

Service Execution

T1569.002

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

File and Directory Permissions Modification

T1222

Impair Defenses

T1562

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

Cheat Engine.exe

Path C:\Program Files\Cheat Engine\Cheat Engine.exe
Size 397KB
SHA256 5313618d93640bb29b66baadf2339de85e593a51715290dadece6d58e039a75e
MD5 0c84c800533ae5dee5923d5351da9923
SHA1 b454dec7e2091712fa9ca8909dbc176d1f104c17
SHA512 93974a559392c1ac37095d0b60239e16c2caefeb893c10ee726060a8f6a42c41fb7b72ee032e01c0d47ab350072e80d4bd1f9c892112418e2992f32154a6c4d9
SSDEEP 12288:h010wHrzPcHFQjL2CVpGzJ+44EZ8B+gugEnoSE5f6:TwLTclQjL2CVpGzJvZ8B+gugEnoSE5f6
TLSH
T1E3846C21FA01D237C0627DBC4FA995E52A60F9202CA594CB73E71F4F1A79AE03D79709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Kernelmoduleunloader.exe

Path C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
Size 236KB
SHA256 65fa2ccb3ac5400dd92dda5f640445a6e195da7c827107260f67624d3eb95e7d
MD5 9af96706762298cf72df2a74213494c9
SHA1 4b5fd2f168380919524ecce77aa1be330fdef57a
SHA512 29a0619093c4c0ecf602c861ec819ef16550c0607df93067eaef4259a84fd7d40eb88cd5548c0b3b265f3ce5237b585f508fdd543fa281737be17c0551163bd4
SSDEEP 3072:Bj9mOBuELLZXBJPCR6ygny56rs+iO2AwCNCtALb44TPk3Ap1rleY/DptNH/P0uHV:fn7LhBJ9W56A+iOlfN/LbZnbptN0uZH
TLSH
T174346C6ABA818277C1633DFD4ED6C4E66F60FA202C6580DA33D60B4F9A35BD03E65345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

allochook-i386.dll

Path C:\Program Files\Cheat Engine\allochook-i386.dll
Size 328KB
SHA256 b96469b310ba59d1db320a337b3a8104db232a4344a47a8e5ae72f16cc7b1ff4
MD5 19d52868c3e0b609dbeb68ef81f381a9
SHA1 ce365bd4cf627a3849d7277bafbf2f5f56f496dc
SHA512 5fbd53d761695de1dd6f0afd0964b33863764c89692345cab013c0b1b6332c24dcf766028f305cc87d864d17229d7a52bf19a299ca136a799053c368f21c8926
SSDEEP 3072:6LYEDJlXw5pAnHp2ukwTX6N8B4A84zMtEl1knxgaPZ3nbanlYZn2l1S2CAYOpIOs:6LYEDJAAnHp2uk2KNO0tEQV+b3n6
TLSH
T1AD643C52AE419333C6AE273402C3839CF534DB14676B97D6B8D96EBE2EE17D06E31112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

allochook-x86_64.dll

Path C:\Program Files\Cheat Engine\allochook-x86_64.dll
Size 468KB
SHA256 8422be70e0ec59c962b35acf8ad80671bcc8330c9256e6e1ec5c07691388cd66
MD5 daa81711ad1f1b1f8d96dc926d502484
SHA1 7130b241e23bede2b1f812d95fdb4ed5eecadbfd
SHA512 9eaa8e04ad7359a30d5e2f9256f94c1643d4c3f3c0dff24d6cd9e31a6f88cb3b470dd98f01f8b0f57bb947adc3d45c35749ed4877c7cbbbcc181145f0c361065
SSDEEP 6144:Tch6UtcJYg8yRAkB+vsoqOvfkv+y3ilZkaCeMG:e6Utc6gdcfkv+KIR
TLSH
T131A4F7B679918A67C1DFCB3500C386A8F234FE1413AF579584D523BA2EE67C0BE7501A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addtonewgroup.lua

Path C:\Program Files\Cheat Engine\autorun\addtonewgroup.lua
Size 1KB
SHA256 96e4429192f9ab26f8bf9f9429f36b388aa69c3624781c61ea6df7e1bca9b49b
MD5 3e20f1013fb48a67fe59bede7b8e341b
SHA1 8c8a4cb49c3b29db2c47f84aafd0416101722bfe
SHA512 99cf3f88c8b06da0dbe8085dee796bec7a9533990a55fbce7524a4f941b5ecf0e8ec975a4b032eb2aaabd116c0804995a75036c98a5e4058f25d78d08a11f3f2
TLSH
T10841A0061B16617524F98BA1DCD33886D31200DB488D092677ACC25F2FF42EDD9B63D5
MD5 SHA1 SHA512 TLSH

Submit Download

android.lua

Path C:\Program Files\Cheat Engine\autorun\android.lua
Size 311B
SHA256 74e872b33c20fde9ed01cb47f8aac0bf085e861e3a376472c21d89f7e267e874
MD5 1adcafe78b55825ed7b895ee7b3b783c
SHA1 dc3ad07c9a954e9c214cf449aee7604dcd861e74
SHA512 45bf54d7247231fa6bdd22744b893acfe2c070f7853f884d4861ba3989f063701789e3a4196bf927023fe34104e2366cc236b3f8c05b1441ef1172157a01244c
TLSH
T18CE08C81B277E19008E51AC6B0D00C807870A101613D95F1D4C14534EE93B3600B43FE
MD5 SHA1 SHA512 TLSH

Submit Download

autosave.lua

Path C:\Program Files\Cheat Engine\autorun\autosave.lua
Size 9KB
SHA256 fa7122783d550ae6eee45f88d3671c9ed34541ccf788be64d939150abe8c5d1a
MD5 867f93a039e8bc1f6056ee29eab26194
SHA1 16df0cf5303ce4191dc07eda301adb8e8a4efa54
SHA512 6a14ea8a9799f6e977c4f03965a75d6fd3c9b08b522f8a626a510569fe52af6175389c076240404bd1c27a92d9114b784e24fd14fd025ff5fde34bb928c2675d
SSDEEP 96:C64/mddXTcKgZFTNXhpw0KmLRy3azyIT6Q4bLWKxhwAWJ:C64/8dXYKgLNhpwHmFUazyI+Q4OK/wAW
TLSH
T1BF1273367A03116C7C7A9376B48B4916E222114B18339E78F5DFA0803FB465C56FEBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bigendian.lua

Path C:\Program Files\Cheat Engine\autorun\bigendian.lua
Size 7KB
SHA256 091e65aaa8649f5a7a195b3e9c355e55edcf2de7551e3775743153b52a7bd277
MD5 0f2981f8ad602c0f106a8e0d0afd564c
SHA1 c832df75c02dc2e92281945b257661dafcd11f31
SHA512 0c058dd000c8d1f30198f0954904d465dfd76879b02500782a879253f17335b64612be04468d2eb8c4d8ed5efb64cb6cf64dd362b4fc5c46fec368a5de0550f6
SSDEEP 192:UXRQJpltyKlR4ZtoOQ9pttWKlR4vtGTQPpMlyFuVCQc600RhBmg:UtKY59KYQ5BhUg
TLSH
T19EF199B93E50A6FD0731A7FA588E9DC75241D4A520F4078934DE4C3A0BF18AE4E7A7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

celib.lua

Path C:\Program Files\Cheat Engine\autorun\celib.lua
Size 2KB
SHA256 5871f4e9f6c06b5811c1f4b208b5d6869c5191e7cb5540f2b463d01e5541fac2
MD5 32b7d4a723e25334ca4ef93286b8927b
SHA1 a646175bea39b0a13fa4fefecd91478e05755264
SHA512 e7bb29fe2294bdcc992c18bf4f02067cdc3345839808e352c1da2e7faf124d12a36e9c7c23ecd8e521e121615f7c6b582056b6935bdbcb53b4d55968db97c46c
TLSH
T1784150132B3113B6AA728776FE476351E601906B26B20C207CFDC2202F7C25497B5FB6
MD5 SHA1 SHA512 TLSH

Submit Download

ceshare.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare.lua
Size 13KB
SHA256 54ff612618d16a79f46e890e85db8e3f201a0363f50ef8c549954e1bca7c708d
MD5 a95d097e652bf0fffa24b1fe9e6d9cd5
SHA1 f3efe14c5d0f8f7f3aef3675a59128fd4f575f21
SHA512 454ef5fc87d343ab390436da4013302732eb55b1f9fa64c2eaf84d64c7f58a34cbdb0ba301e2c773ec80a509c784c9dba364a5b9b91978c19155313f7396cd4a
SSDEEP 192:7Xa0mWfPg5ThWRMzvQa7Hh/U6stplX7ZbaFYBY6tZZX:/fPQysQlkKW6tL
TLSH
T1B5523E677101627D64F1CFF6F8D74502E215804321B698797ACC404A3FB268CEAAEAFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_account.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_account.lua
Size 6KB
SHA256 ac5396dbb58a9b7d1e4e11b18f01c8eb3e3b3a5e2985a4eb706891079d1a0bba
MD5 44ac46ef8eff866d202c14baf77154ff
SHA1 fc769ba811a72db25ada7d959c0b00ac1930406e
SHA512 cdf0e1c3a2309c4a5947aabf1c01005832378406e88de06f9bbcdf7988ec6a3b7ca54c1967b9db6876cc696948bf73dfe988be23bce45d845c62db5d485c13e0
SSDEEP 192:2m3dOvyXANbHC7jmHmQr2LHymHG21h5rSTFOO/S4XHhOLOxInDLnrTH2n8ruHqhE:2m3UvyW9mL/N5yDYFCoKmo
TLSH
T151D1CC33D1264E656EB5DABA38970844E546D9031701D8AD38ED92483F73B4D8CE98FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_comments.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_comments.lua
Size 3KB
SHA256 89c8fccc16d2aa0a3004dc1b477a5c1dcbba539769b2a4558f7c7d9b9809b133
MD5 0d4d1b597712015ef1b0ec8adc26495f
SHA1 3584779c06619f545b47a27703aa2f47455d50de
SHA512 ae26bbb2c3f74c143a01ec3b296a26699c679d51bc68c8c7b8c460616d1a0aa065500ebca83e972a720bd7a3c5a7b63a673eaecef1391a2e717208ef8da0796f
TLSH
T12B81E27631E5626C80B06F6E3AD7260BE6D1132B1106284E71AC518E7FB1F6968BC39D
MD5 SHA1 SHA512 TLSH

Submit Download

ceshare_fulltablelist.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_fulltablelist.lua
Size 12KB
SHA256 514d5df319e6cd2ea5a5c8c454f7dfe7f88554d3968b9af180b8683939986d2e
MD5 9d574f5eb712ab15642f1789ef003103
SHA1 cffefbf00c01d67a7356376c2fd08171af2d045b
SHA512 839231d7a2c988c3d29a2e767fcf231103c086cb95dcfad5266e163a4ce302f14cd16282e338c00cfa4fec4821d95f86aca2536f3c8e897139bc2438d11ae69a
SSDEEP 192:08NVYz/SCrsKrYrygrL5UHsCYBv2S5OVhxPSidLGFHWZHHYzHuxN5FoXQuHNVcbp:Xod1grbuz9GFHWJaQCHnC
TLSH
T15C420F26B61A511CD1F28FEAB4771E06E792901353871C2DB6DC414A3FB168DA8ED3F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_permissions.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_permissions.lua
Size 3KB
SHA256 15b0c7682e5e8d2e2c2b8cb00c0c03b7dfa9439ac80c37f8e96a4f86652246f9
MD5 65c8d4eddfe05267a72eae3ddb2cf02a
SHA1 eef2928d355c8b669f8854da37162ba1fe32740a
SHA512 1c151d5a44482362430fbc6ed4550671ad96e768942e4ec2a4c487182bed9d0326a0d40a1ac43f2c8a3de1e18e33b055ce7126d80fee9b5b7091ed83a22a41ad
TLSH
T121715963AA1D037464F5CB36347718C5EE25001331961D3DF67D129A3F7128AAAB9BD8
MD5 SHA1 SHA512 TLSH

Submit Download

ceshare_processlistextention.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_processlistextention.lua
Size 10KB
SHA256 efcbfef089c26928a983686d82794cc566a1a8b6c43e76b0d017eb043e1e994e
MD5 def79c0c77db6c0bd0c7a1e81b627097
SHA1 5ad816d2e97b42c7798e972162567aba605dc039
SHA512 8dfb9b83b937fe60a598f1b5e75c38bcbd28fe4e13246c23c8de50120546ede1eae025c2b2e4188dcbed6feaf9cf0730520b15925cf828070a9f2ca6e27307f3
SSDEEP 192:bKOw1mF/p71aHe768zxSnLuvd42QRDwdmxst8mHWVZyjqb/9rPj4Y8JYs5Rjkc:bKOVTeeBeZhbN0X1R
TLSH
T1FF22FD26721A516D60F59F7AF8474D43D792801316B7483979ACC28B3FB138D98BC2FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_publish.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_publish.lua
Size 20KB
SHA256 6bfd35aa64ab566ddb68d0675ad3b4a093649010a9c30df3a30a7f9dc2ed7702
MD5 87cd08b16891e0dbe3d47bb71ca91691
SHA1 55d98338b4aa0df3566cd2e721b3d3f86a3836aa
SHA512 847becf1d3066a3e185001035b68496b91876bdeb323734782c41fc9b2bdf665bf33c728cebbe78e820654d87b1969c09b5d1faed7498538cb5f761984108614
SSDEEP 384:K3KK7BDUUhaWlvyDep8IcDsfUPrBUpJRg:K3hDUUh3Kqp8X9UpPg
TLSH
T108A29D373614116DF4BF9FB4B957180EE799408321AA081DB9CC86693F7A21897BD2FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_querycheats.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_querycheats.lua
Size 25KB
SHA256 658479b6fe955d715f398edab3900130d83e4dcb974ffb184eac0d47cccba59e
MD5 70dc4718168018f3a0e7752cb95a08cf
SHA1 6a150cc3604f782176f8522ee6a16b1fe8b898d6
SHA512 bf21a6565e57486d3e5edc8373b1e227d6bd19b193c9eefd09e9e85c2b3c184abfad2d24f9aa3a600f7cf9d3ffa8a1f38bcea91e0813a10edd933b80b9f0decf
SSDEEP 384:R+DUUh6NWvSrwcllytSv5ooI0/r5cCAn9zfeff4gybrby15VZ3faxLao0rqrWpeO:UDUUh60arbBKGNU63
TLSH
T1F7C20E367615223A64F7CFB8B8874902F6121093215B092D7D8D82953FB268DA2FD7FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ceshare_requests.lua

Path C:\Program Files\Cheat Engine\autorun\ceshare\ceshare_requests.lua
Size 5KB
SHA256 e9d57acb17502ac169deb37f211e472f68cd6e8a69e071d384b989fa45e9fa7f
MD5 6cf99831e2aaafb97e975eae06a705ff
SHA1 b6e71f7d3c779575598b65a6e4fb341344a3ddd2
SHA512 f6467c4c9dcab563dbb5a337c76616208d1a1058d704b222e616e5a0809a156b1a29198919f4bf0d40c55a6e972439722c02aac8a156c53572b6d7ef80986405
SSDEEP 96:5cHxYq8COheJHVFvNmAYVL9rAaDu+WYtUX8T794B:5cLJHVF0AGBli+LtcYSB
TLSH
T1BFC1EC73201512BCD0B48FBABE57AB29F96112233207343F75AC998C7F7035965AC699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowseCheats.lfm

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\BrowseCheats.lfm
Size 19KB
SHA256 527a90a44fd25e47b953431d7eb36fe314a01c156b2ab9f3cbc71a1bf1fe230c
MD5 77154f32507846f45593edc51d110cb6
SHA1 45109248222adcd06a967cec982c60771399c746
SHA512 4241e737d5715d4ce1633528284a86adb112255293039aec012d62e1a16154cd5034ac3dff60f407762f853f4ff72eb52ebfa617c285077a7ee0733e0f945d42
SSDEEP 384:RlLpslacAolE6VHV5V3r0O6FSA5fLcolwv8b03cQXQESqH3kY:LdsllE6FLV3rmXfwv8QQESA3kY
TLSH
T14B922A66F500E7A4FCB6D35269186E05E661332342C32C29378FD5885FF2B84A2DB6D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommentsOrRequests.FRM

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\CommentsOrRequests.FRM
Size 1KB
SHA256 d8de8120c14da094feddb24c46c3e729d99696ccce9c2d479797ffbbf34bd20b
MD5 cd4d7aee15163ab407b4f18d8f93dcc3
SHA1 676e3eea53646f221dcb4c9b7dcc2cb5315f36bc
SHA512 17ede3db62a9d2abfb8d2715e5ed816a7badf1eb7ead79e5b48ab6db7dcd8215b40cdd03d4a3cfd5ede4567fa5092d9f7406fb25bc82dcaa26cbea57c2207f69
TLSH
T179210A6E8B8CF0B8D9681465A3EF64964CB3F31214500E081CA9EF214A1C78170FADED
MD5 SHA1 SHA512 TLSH

Submit Download

InitialSetup.FRM

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\InitialSetup.FRM
Size 1KB
SHA256 d5786540891c411bc34a5505a6cee0e747df2e5cd410abfeb94e6d4169c85069
MD5 23cc858da49a7bda9e9fe3abf8d86d1d
SHA1 9d869496104acfff0c5cb572628085666dc53486
SHA512 b5650ab1ae463f97f5681dd3fdff7015c963703a7437ac5f71a158f3e0bdc045e69151897d0ec75aa9dd4ccac5475e6e492ce46a296bcab8c4c329720e3c002a
TLSH
T1FB21C83C5EFE8C2257A80F764B571F1683D8B9133E5910E8515072C7A54DA9174D9B28
MD5 SHA1 SHA512 TLSH

Submit Download

Permissions.FRM

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\Permissions.FRM
Size 1KB
SHA256 44e9bc08a3f919da8689c4703e77324568f3902e95f8f3f92ccf234bcf7bf649
MD5 7ffd1e1b425636cfa08cda89429c69a6
SHA1 ec6a75fca2bc4f2e8cb7ab9644d1bedb1d686221
SHA512 dba72b7a8f1a3d72101e4f735e0cea1be8e72236a81e6fc2ce18e7f93715b5c1f21aa384790c7e0097a23aeb6d52e954ce7c7adf7c6189a855dcd6fadade7c9b
TLSH
T140219823A266E23365000DA4BE77C6350FD8F369F605178AE44BF2E193ED40815A7A29
MD5 SHA1 SHA512 TLSH

Submit Download

PublishCheat.FRM

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\PublishCheat.FRM
Size 2KB
SHA256 a8611471651393e17090167c5b6cade46eae9fee8841db0816bf36a4f43fbe16
MD5 d6fcb383a27920083054dd42003bec4d
SHA1 3941a986929680d50b8b74e61323d1d6c20aec27
SHA512 405cbb3823344bc321e135c8084710352506a342ff22a2c356b0629eb6e929ac44c0098bd6e90256bc0814a7693d367e6e4aea8bf277b122654e19a185d52938
TLSH
T177416D41A8539CF652805614ED3683DCC24E920A31B2FC007FD79E22112D83334CA37E
MD5 SHA1 SHA512 TLSH

Submit Download

UpdateOrNew.FRM

Path C:\Program Files\Cheat Engine\autorun\ceshare\forms\UpdateOrNew.FRM
Size 936B
SHA256 bd3e07decc17007796403191246ab0f3585f51532fbf16d496e541c3107d7e0e
MD5 5ad30685c039c115c346d24223c3eae4
SHA1 814c5b02040e87906e7a64f4355b8a35101bdacf
SHA512 de29c279573c7cc542e8a9ac427594e067d47de390a7d41ac2e7ccddd646550b5ed6d2ecae39b2c7b798649b6d61ba5bd259fd0a8814d35b508d3ae96dd19bc1
TLSH
T1C711C8487CC8887635189D231062299CB900749D2C4134A08FAADA57F16C1F6F76FF0C
MD5 SHA1 SHA512 TLSH

Submit Download

link.png

Path C:\Program Files\Cheat Engine\autorun\ceshare\images\link.png
Size 1KB
SHA256 a85170d26b9344dca793c3b2326ec709d2f2d01578e78b855e82b14795b0025c
MD5 0212208fd406500388f08bc4189cc57e
SHA1 79a82f1ac86d6c4be3c3e4b0a790bfd4e2f6b27e
SHA512 33e7e2ae0b3d36d8e909cffc993e6b36923e8775e780832f5d689c15d04712ea412b62cc709c53128d9acad34f1922cb9fee90304da2f879bebeb4f3a67b9523
TLSH
T13C11B9E39E408D56C30C21846811F564C973B0BB196A0959C672E8DC29CC17F949984D
MD5 SHA1 SHA512 TLSH

Submit Download

Lua files in this folder get executed automatically as well.txt

Path C:\Program Files\Cheat Engine\autorun\custom\Lua files in this folder get executed automatically as well.txt
Size 85B
SHA256 308c1d972eae5fc20b034f480d3786d384888fe369ac15ff64cae16c49e1871b
MD5 1dca89c3bdc766f7c64cf6d45518810f
SHA1 ea82ae79196abab20e8953cc84d3dc513f9e9f58
SHA512 3be5cd676734c4cb25a941a98ad48c57e5c1703904d2cb29ebc0cc230100fd16576a70c1c5c40cd56becfe5205946e07045f24608447e56a9113d1a033f90f17
TLSH
T1C6A01246A942A2700474814D12041CC0330A85A1C051C009ACBC407D90929CC0932CD9
MD5 SHA1 SHA512 TLSH

Submit Download

CEJVMTI.dll

Path C:\Program Files\Cheat Engine\autorun\dlls\32\CEJVMTI.dll
Size 49KB
SHA256 7bd0d77fd790215bb67337f9f210b05aaab0193d105b8ff86ec422e9875eb033
MD5 b02fa5c8eefbcd010aaac97a94ff62bb
SHA1 fd88f2fc529515252cbcab507f322b080853c38b
SHA512 1d18cb2cffbf83ef949c2a34fa28c4e011c623c62ce743c7f320db1acfbd41bea2ea6d3f0d93a34874973fc43367d6562c630f8b7912b22be7ccc61851001a18
SSDEEP 768:+B4cf1fqCWPiiyDf+TTmhX2cnX3/OtC2MD0OK9BRbAlQ4z:El38CfKmhXv/Ott20OKvR
TLSH
T16A330943A7064CB3E55A277870A2E376846EF96973CC09C75F222F0D47912F1B6B835A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CEJVMTI.dll

Path C:\Program Files\Cheat Engine\autorun\dlls\64\CEJVMTI.dll
Size 60KB
SHA256 f107dd69b4115864d289f364fafc0e045fd3e9fc4bde5586ce8c1bcf59cc65a7
MD5 cefc5c56720ca850ccb20faf47733bd2
SHA1 55f25cf4a7de12607b085e8cfdba0383f0207e9d
SHA512 1b6fba56feac4f4345b2f6ced82a3dddacc3c0cb6f49c1d30105a8156b8de851e34b9e31478c658c60d907c9f26237d2efb7c2ab85adb49905fdcca6349a4dee
SSDEEP 768:wm0hfdOrlHVzBkzORZN2UE0TjwNwqGN4cOlA/eQ4z:wNuVBaOohMFOlA/
TLSH
T13A531509F61554E0D86BE47CC257AAB3E67270D99B68A7CF4F204BAA1F173F0B130619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetInterface.dll

Path C:\Program Files\Cheat Engine\autorun\dlls\DotNetInterface.dll
Size 41KB
SHA256 9f361c38f6dc0b313ec19ca55b6a010f932d1651e70e1da3bf71f58a0e522ecc
MD5 7c87bafb8475a721e290aae7e4ebd2ae
SHA1 2fc9cdcc57a55ab902eaf58124c516a30eff882d
SHA512 bcde914173ccfd4cbfd6301d2cdd052a64a7ad02075aaf0267aa9fe88d5a9413354fe9e0095976ab928d52e8b3f967a36652e9ef3d48fa876612273d900837fe
SSDEEP 768:NCEWLJgNUEhAbr21T5sSTV+wWr21T5LOTV+wXKR:NCEWLJoUxvwkw2wLLwi
TLSH
T13E136D8F1B2D5103FF8E8EBEE0C690225D34E6836DDED44BD49B55682D443D23BA912E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MonoDataCollector32.dll

Path C:\Program Files\Cheat Engine\autorun\dlls\MonoDataCollector32.dll
Size 550KB
SHA256 3c2bbd5bcabd43209d1eb17474568b10a758c488c4bf8282999aafa01f3b8eb4
MD5 159850d5b62b997a2a95ba363b0da584
SHA1 8e8bd270e0d878582228525d69085c7878819d18
SHA512 a76fb690b80dcaa9dc9dae08917049927da63e8689e7db44eeccffc9d5c53eff5901927e098f3a091051215fe7fea585a7cf60b7f8c8de7775b5aca018a78a54
SSDEEP 12288:7emWpt5o4YLKp39BT92vn7XegtE7JTREl5oBuwiSDLqz4VdG9k:KmOo4YLKp39BsXegt2JSl5dX4S9k
TLSH
T186C4CF6279C1C073D86E463059E4E72905BEB9210B7898DB77E59E3E1FF05C26B32A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MonoDataCollector64.dll

Path C:\Program Files\Cheat Engine\autorun\dlls\MonoDataCollector64.dll
Size 738KB
SHA256 9eee42e7102ed1bc1b9843cf917d7ddc3be3a8ac7cfcc234b8dfa5846674a973
MD5 7f0b067f69716eea750a69fa2184ae39
SHA1 d869fdd4c8b14ef11e496cdabb7b4053a0f6ee92
SHA512 bebf27225a6efe7b09aabb5f9ce405a69e4072481f82dacec5c967039b0b8f7a163cc3b1b893c3b4f337b9881637bc3a6cc31e5f6f022ec0b9eccad700bda404
SSDEEP 12288:upFBAQBXEiYK0icvYJ6Z9yjOnZcBMzroo8ijrqzUI5AkWEk:u9AQBXEiYK0icus9yjOZcB0rolr5ZWJ
TLSH
T1F3F47C1ABB9842B9E067D17AC4838557F7F178051A30F78F4390477E6F2B7A14E2A722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Pipe.cpp

Path C:\Program Files\Cheat Engine\autorun\dlls\src\Common\Pipe.cpp
Size 1KB
SHA256 38ef8b43484c14de225e2b94912e5d39a4538d070543dbd484be1122aa525f93
MD5 0455b1ca2a38a4f09aa457cda2167ccb
SHA1 a8f11c95017fa2619e76631d3d94628f04caef14
SHA512 324af022399c5562405dd027f1f718ae9b9d22a7ca399344b52af6ddff38d1f847226174aa18b8a441cea1e167735f1b693343e9cb01cf48bc8707f107ecd63f
TLSH
T1A24103DA502B74FA5B33D556B3F1C00D860BB02B896A3F14B5C58E86B631968D37476C
MD5 SHA1 SHA512 TLSH

Submit Download

scoreboard.png

Path C:\Program Files\Cheat Engine\badassets\scoreboard.png
Size 5KB
SHA256 a8d8227b8e97a713e0f1f5db5286b3db786b7148c1c8eb3d4bbfe683dc940db9
MD5 5cff22e5655d267b559261c37a423871
SHA1 b60ae22dfd7843dd1522663a3f46b3e505744b0f
SHA512 e00f5b4a7fa1989382df800d168871530917fcd99efcfe4418ef1b7e8473caea015f0b252cac6a982be93b5d873f4e9acdb460c8e03ae1c6eea9c37f84105e50
SSDEEP 96:9fJTvp2iAJf329FCfsjYsvEG56SyjfEa186J70Lhvxg+NVE:9dvpPA129FC0WSyj06t0LNx3NVE
TLSH
T1F8C18DFD0E4B3E1A968C45F3BB4F4D654C05F382A1129B8BAC2D81E098AD19CCD91C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d10hook.dll

Path C:\Program Files\Cheat Engine\ced3d10hook.dll
Size 128KB
SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
MD5 43dac1f3ca6b48263029b348111e3255
SHA1 9e399fddc2a256292a07b5c3a16b1c8bdd8da5c1
SHA512 6e77a429923b503fc08895995eb8817e36145169c2937dacc2da92b846f45101846e98191aeb4f0f2f13fff05d0836aa658f505a04208188278718166c5e3032
SSDEEP 1536:jRXPVJPMo10+PfXl/IRTlsfQstLh66crJWeWyPCUpfrCWV13P1+CUOEvCvOEMI7:BdJPMlMb1g6e0dU9rf3P7UObvOja
TLSH
T119D39E127620C072CA4A597D8096C7726FBAA6719BDC40C7FB661B3D9F203D16B7930A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d10hook64.dll

Path C:\Program Files\Cheat Engine\ced3d10hook64.dll
Size 140KB
SHA256 a2ac2ba27b0ed9acc3f0ea1bef9909a59169bc2eb16c979ef8e736a784bf2fa4
MD5 0daf9f07847cceb0f0760bf5d770b8c1
SHA1 992cc461f67acea58a866a78b6eefb0cbcc3aaa1
SHA512 b4dda28721de88a372af39d4dfba6e612ce06cc443d6a6d636334865a9f8ca555591fb36d9829b54bc0fb27f486d4f216d50f68e1c2df067439fe8ebbf203b6a
SSDEEP 3072:Kd3u82FbW5v1B9omLKfBbYWFhFCsfa5z8saPFZ1sL3OD1Ow:Kd+NFbWUMKfBTjFxfa5a1y4N
TLSH
T1CCE37C5B737540B7C60ADA7DC9C39A47EBB0B0420BA4538F4366865A1F177A0AE2F325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d11hook.dll

Path C:\Program Files\Cheat Engine\ced3d11hook.dll
Size 137KB
SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
MD5 42e2bf4210f8126e3d655218bd2af2e4
SHA1 78efcb9138eb0c800451cf2bcc10e92a3adf5b72
SHA512 c985988d0832ce26337f774b160ac369f2957c306a1d82fbbffe87d9062ae5f3af3c1209768cd574182669cd4495dba26b6f1388814c0724a7812218b0b8dc74
SSDEEP 1536:onOLYqoZQBD3m7bmVLcuVGpGXlWXQznQN8erRxQEmsYOT1GlERbo3iV8n/7DkCWy:o4YqoZNHi7VBAXvXMZ7ll3iyn3WOR3Oc
TLSH
T188D38C12B661C433CA4A0C7D809AD7266F7EA6715BE844C7FB5A173D5F203D06B3A31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d11hook64.dll

Path C:\Program Files\Cheat Engine\ced3d11hook64.dll
Size 146KB
SHA256 6f505cc5973687bbda1c2d9ac8a635d333f57c12067c54da7453d9448ab40b8f
MD5 0eaac872aadc457c87ee995bbf45a9c1
SHA1 5e9e9b98f40424ad5397fc73c13b882d75499d27
SHA512 164d1e6ef537d44ac4c0fd90d3c708843a74ac2e08fa2b3f0fdd4a180401210847e0f7bb8ec3056f5dc1d5a54d3239c59fb37914ce7742a4c0eb81578657d24b
SSDEEP 3072:/20T06lYodB6ZcnHgSFulvfV0tYP/ipaQ8PFRBIiOBNOW:1Y6bdB6uHgSwtfV0+P/is1BIpD
TLSH
T12BE36B4773B540B7D606CA7DC9D3A657EBB070450BA5838F4726862A6F233A0AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d9hook.dll

Path C:\Program Files\Cheat Engine\ced3d9hook.dll
Size 124KB
SHA256 fd2a2b4fe4504c56347c35f24d566cc0510e81706175395d0a2ba26a013c4daf
MD5 5f1a333671bf167730ed5f70c2c18008
SHA1 c8233bbc6178ba646252c6566789b82a3296cab5
SHA512 6986d93e680b3776eb5700143fc35d60ca9dbbdf83498f8731c673f9fd77c8699a24a4849db2a273aa991b8289e4d6c3142bbde77e11f2faf603df43e8fea105
SSDEEP 1536:yq8Iw0TnMfrUEuKo+w/lT35oBqhSw3kmuqW3Crf0d3N1NsCeOEy6jCMpOEsC:yq8IdTMTyXUR2JJry3NreOnMpOu
TLSH
T131C39E123224C073CA8A597D80D5E7766F7EA6A18BE848C7F77907795F203D07B3921A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d9hook64.dll

Path C:\Program Files\Cheat Engine\ced3d9hook64.dll
Size 136KB
SHA256 8783f06f7b123e16042bb0af91ff196b698d3cd2aa930e3ea97cfc553d9fc0f4
MD5 61ba5199c4e601fa6340e46bef0dff2d
SHA1 7c1a51d6d75b001ba1acde2acb0919b939b392c3
SHA512 8ce180a622a5788bb66c5f3a4abfde62c858e86962f29091e9c157753088ddc826c67c51ff26567bfe2b75737897f14e6bb17ec89f52b525f6577097f1647d31
SSDEEP 3072:6UoPePVhoZB34/UWFdQomnRepTPFn35eoONSO2:j8ZBvWrnmnR2Un+
TLSH
T13DD37B5B777900B7C94AC67DC9D39687EBB0B0424BB5938F4326865A2F133E06E3A315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dhook.dll

Path C:\Program Files\Cheat Engine\d3dhook.dll
Size 119KB
SHA256 e2a7df4c380667431f4443d5e5fc43964b76c8fcb9cf4c7db921c4140b225b42
MD5 2a2ebe526ace7eea5d58e416783d9087
SHA1 5dabe0f7586f351addc8afc5585ee9f70c99e6c4
SHA512 94ed0038068abddd108f880df23422e21f9808ce04a0d14299aacc5d573521f52626c0c2752b314cda976f64de52c4d5bcac0158b37d43afb9bc345f31fdbbc0
SSDEEP 1536:QyfNvGKKZVGcuasOKQBBTff07PSZHCSVKOCDCA32XQaOCKnOEPChMOE6:lNvG7vGcIiBTMS18RD7325YO/hMOr
TLSH
T127C39F123FA0C073DA8A5D3D8096C7627E7EB1719FD948C7B62907A95F103C06B7A25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dhook64.dll

Path C:\Program Files\Cheat Engine\d3dhook64.dll
Size 131KB
SHA256 7d82694094c1bbc586e554fa87a4b1ed6ebc9eb14902fd429824dcd501339722
MD5 2af7afe35ab4825e58f43434f5ae9a0f
SHA1 b67c51cad09b236ae859a77d0807669283d6342f
SHA512 23b7c6db0cb9c918ad9f28fa0e4e683c7e2495e89a136b75b7e1be6380591da61b6fb4f7248191f28fd3d80c4a391744a96434b4ab96b9531b5ebb0ec970b9d0
SSDEEP 3072:ZGrrgbU27p/nFdpF/vwFLUjh2v5VjObfSVMPFtE8PdYO3kOc:crk3ZFdpRYUjh2verh6
TLSH
T197D36B5B772900B7D94A867CC9C29687EBB1B0468BB553CF1225875A1F133E07E3E325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_mingw.h

Path C:\Program Files\Cheat Engine\include\_mingw.h
Size 3KB
SHA256 478ca3b81e7442b00b29ad67ed6ff30656aaf1e83402f5d47c803b6641a88a81
MD5 f972824227a6f696024e54fe892f66cf
SHA1 51a33727b6732ba8435f2bd732fdf2302387458d
SHA512 43c2e22dec75e66a209907c67797d26436c2bd9b10788009626ed8952bd89436f7d32fa7c5a1f24d1b249449388c1fe15fda97d1c6b3135d30950c639100dc8c
TLSH
T10B81BD305CC8F2E254369821A14D45BE455EEEFB2A92A4ECF0626D3D5D6367081F8ECD
MD5 SHA1 SHA512 TLSH

Submit Download

assert.h

Path C:\Program Files\Cheat Engine\include\assert.h
Size 1KB
SHA256 3ab7edec5e55840c35be252bad52236955c3b4f9143810cdb1f09c34510eb8c4
MD5 9c022d741996db6d32411bfef4eadb41
SHA1 4ba93d77927eb8cfdcfe07f56d6edade180af1dd
SHA512 e448608bfecb770a087cb19934a1b45a5c564ea10bdf5a40bbb250f472830ecee4990c669e90e495ecb5d4e48c3871cc2a33ce84f2d38524449fc9f5fd501da0
TLSH
T1CF215731C1CD2AB28110A177F62C4366505EFBD27760C530DD8FB66A5B73C6067B7A60
MD5 SHA1 SHA512 TLSH

Submit Download

celib.h

Path C:\Program Files\Cheat Engine\include\celib.h
Size 264B
SHA256 0d37951ce5445917bdb6fe062cf18bafe458a9f361abf8ec11382ef7f6653e1f
MD5 266012020647e22d8feadb675115c202
SHA1 761c2554f1c3be29f1578e171eb1abab5e8bef90
SHA512 bfc02150272256e3e23e5c57301e88358ba9ccf07c9efaed2c3de9820a5f61602c9cf4755c576763b2ac23e0b2e9fd236cb935f04ebae6aa4ab876c52b0b0c39
TLSH
T11ED02B5368F959E1C9B0E2A4E97EB0C00001B4808362558CFD17D2370F08C04C23E64F
MD5 SHA1 SHA512 TLSH

Submit Download

celog.h

Path C:\Program Files\Cheat Engine\include\celog.h
Size 1KB
SHA256 9373d6ce49de335c64d591e6b8e8f362a2768f474ae761b5fa4ec6a893e635e8
MD5 227f5ddc9953417d86c600c9bd2d3cbb
SHA1 7c0570515b6ca3e8f511cb6e3617551410539d7f
SHA512 9caee401a3bdf8e0b217d148c7f9757e180eb4f3b1b46e222824e8349ccc12639c1b2edee647ceb6d028724a9ee1e0be85a21c33c62e896ace3ffc337acfb70d
TLSH
T1CC31FE24E50F789604B536A3D6460368DB1BDC1332FA77E8B94E34885727C8190F6B9D
MD5 SHA1 SHA512 TLSH

Submit Download

cepipelib.c

Path C:\Program Files\Cheat Engine\include\cepipelib.c
Size 15KB
SHA256 63b57b15239c54c2ff7a0c64097e9d69dd0c1bfd65611f3ac14b1d6249cf4203
MD5 0bbc430197c107c3b52db693aafb842e
SHA1 8c8a80023dd689f7621a88997edf18343f615f1b
SHA512 689468308fb44691dc86b9925c314f831751f9dcd5751809485fa61eb49c10a00fe89052f379f9fc0e3d6605adfa789b0c9da699fbb63721442691a6eb27b9c5
SSDEEP 192:YLnYl7CvFh3cYmwYR0iZFU/IuMREFLpUA3ssZ5:1qTmHRN27FLpUYx5
TLSH
T126622B99075E34527773D7B28B464428D375A89B1AB36F00B1CD8AA16F30274E2B5FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cesocket.h

Path C:\Program Files\Cheat Engine\include\cesocket.h
Size 1KB
SHA256 6184170fe0d4f8c8ada1299caf0e34d435962c288686578436b2251c3909f050
MD5 e6244c0081bde736f10ef1c41e1550b8
SHA1 85a10961a164f3ccd193c188f8f4c7af4c585439
SHA512 c428786cfbcaf6043b75dc3c14e33173a31743592b1303740557104de0bf84c3ad0b2fb83ad8e4503db17340f5ae29df02f51929d1b8642e707c86fc9d1d553c
TLSH
T198319D95ADB76052E0700F52437E4F15921AEA5337C930BAB80CE9E85F529C0E3F66AC
MD5 SHA1 SHA512 TLSH

Submit Download

conio.h

Path C:\Program Files\Cheat Engine\include\conio.h
Size 10KB
SHA256 de7161f85835d98b38fe6a19ef8973dcaf58ec237b1c91cf05ac535b2ff3845f
MD5 6a61e54ad2614ba528414c7b69147caf
SHA1 242479133484e15a2af816d95ddb053835bf4c64
SHA512 468702a606e20ffa893054f676c56dfe6eb3d28a002bae143298422ab388a2f2f78e318714f5274bc9ebd243863f5228d5ebead5f31d892e96d8742c8e6846a1
SSDEEP 192:R9IFnJJzpoJItwJ+Y31t1d1uF8sFX9B17lHLQWq4QcHyQA3sG1:XI4IJ2WzPw
TLSH
T14032348AF45CC462A27745A36A134699514BE89330CCECA5B81F096C5F03D4AF7FCAE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ctype.h

Path C:\Program Files\Cheat Engine\include\ctype.h
Size 9KB
SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
MD5 22e5a00491e32d15b40b196397ad01c1
SHA1 b0db6fcbf4abd2f4fdea2771399c1e502d9f8106
SHA512 28839104776441738233334a20de6ce3ada51179fb50366c27ab60432949fc78e1ccf735d2e80216f8779d84328634005c322d0010875e8fe0ff33d699ecc114
SSDEEP 192:aK0sBzLLoy8q3JHZDrs+UAt0g7WnBeaIlzjD:EALLb8ars+Flzf
TLSH
T15F12AC255ADAD1D220790991B103024175C3CDFE6ACAEAAAB8E7DE388F5356CD1FC58C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dir.h

Path C:\Program Files\Cheat Engine\include\dir.h
Size 952B
SHA256 84064b17e501d691c43d47e45b112c2884db467417910b5fa1482b72342badfb
MD5 ef5c7267df270272bfa8f8ebd1b516f2
SHA1 1e3f8a9afd814efa8cf7c88dc480e9914a5bc570
SHA512 8ca2b0e08b66eaa843fc7ad0f8f4063450a469914819a637aa3f8cac39dd38e32cc0403f2b04f767ae486934026585b56f93544c8a1f5d92cce32ce84a4506f4
TLSH
T1F611ED64C6C1C7F2181246F2AE84DBCA5309749F7363B645341EA2686F0AFE4832AD40
MD5 SHA1 SHA512 TLSH

Submit Download

direct.h

Path C:\Program Files\Cheat Engine\include\direct.h
Size 1KB
SHA256 179c3204312d7cf8032102773629bcb3e5fff792d1d808931cb6619a431d2435
MD5 83679da78aaf8f8352acb1883b9ef868
SHA1 fd89079636571a93755120120ab4f03b91076478
SHA512 13af1f2c118e898e6055ca61286c9766df75366ff4f30708f613193cd8f89afc4a4cc2fd31fc3ac6dce5d577ee83e203f79aca3b739d9d9e9e60b42cd9c7036e
TLSH
T1364167295988EAA281331743F34313B52086D66B36D4F465A51F2B38AF67908F3E6D54
MD5 SHA1 SHA512 TLSH

Submit Download

dirent.h

Path C:\Program Files\Cheat Engine\include\dirent.h
Size 3KB
SHA256 88c1f767fdcd6d51b991ee3234792da48c8576f5f8816f17a42344f9c8bbb1c1
MD5 afbe32ee6ded8cbad33d6fe3fbbf077d
SHA1 a7f0d3edee5f49e127575eb25e64e2747108e7c3
SHA512 f655a40f8c87a0cb43a34ae47612d5cef2cf7814fd2ae9ce1c8566f97f45e91470364bd87e8c12861cce44fb8cca54717546baacc6ccbdace51d0d15206304dd
TLSH
T18C613F42A9F996F340A10632F7067AAAD60BF14F33946114BD8E13782F52F1E62699DC
MD5 SHA1 SHA512 TLSH

Submit Download

dos.h

Path C:\Program Files\Cheat Engine\include\dos.h
Size 1KB
SHA256 3afea4ae85c68987fe59f40592ac5ea3ef1049b4fb72612bb185358d628e2dec
MD5 3b6fbc94238df0fd001b04d55bc899db
SHA1 231e18ce6a5488b2353fb9ef052fd6677c2cf555
SHA512 28ba3ed6cc9511f17798822fa81a2d16da17ca4af9da64f3edc9170fbb883801bf07390214c54b58a32251e6a1c3bb359cb76e892ddb77fbf8c1bf3985e13e5e
TLSH
T12411F03D4ECCD6F082365903A30857E90049E5AF7A64E4B8F407693DAE17924B3E9ADD
MD5 SHA1 SHA512 TLSH

Submit Download

errno.h

Path C:\Program Files\Cheat Engine\include\errno.h
Size 1KB
SHA256 7c8494fe57d944773861c4c1cc1f2b46b3111144a24bf505b3d47b32f0ac1e8a
MD5 b81e5a965abd076fb52de6dfa22a78c4
SHA1 dc11acf6a38871e60d79108dad6c3156715f05e7
SHA512 8f3057882753150fefa734897ecfd8dc4082580e856947910fcd891d744651706338a7df78c1dcf1c7e54ee79ea2a6e8d2646be9dac92ef301d7347801f04273
TLSH
T13F21ABA26DC88370C2320102637C85E011A5EDBB9974A5DE74593EFD9E6D32212F99CF
MD5 SHA1 SHA512 TLSH

Submit Download

excpt.h

Path C:\Program Files\Cheat Engine\include\excpt.h
Size 3KB
SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
MD5 d236372cba09e14c37b4e48f81baef83
SHA1 11a3bffaacedfa1caa4b4bb836cd95297a4ecc6d
SHA512 d7c22525fbb97bf8950db69645511420f1198abe33f5d0fe07a5ee8dd6b5cda07038b6db71a2995c6f5ec1b85d8b98e4370330193132e95f2a65e3a847f04408
TLSH
T107711E50BFBCD6E1E6A1149191180A9AC1EB9D2B11FCC8929486C77C1F8722C91F66FB
MD5 SHA1 SHA512 TLSH

Submit Download

fcntl.h

Path C:\Program Files\Cheat Engine\include\fcntl.h
Size 1KB
SHA256 fbd94f945a57165ac897bdbacd2a861b1351e7850fa76752703c0a622e0646fa
MD5 478add63d2c741d03a60a11bdc4fc0d3
SHA1 e9e0c857d2c409f23c346d81b77c5634f1c395ab
SHA512 bccc563718b1a03e93e5bf8cf0d79bb3128a3fc1fdd6fbc17792cbaf3c5de70de06ec2f88d8eed7105ff62056e32e9a79570f5890e75f4443033421d283b2fec
TLSH
T18421DE227EC1C26398B20384301D66647109FCFB629916EDB014BC4EFE8727411F99DE
MD5 SHA1 SHA512 TLSH

Submit Download

fenv.h

Path C:\Program Files\Cheat Engine\include\fenv.h
Size 3KB
SHA256 67a827acf4e09653afb5d18f2ecaa5fcdfb7471d8a5b8197c2f33d06e8462f84
MD5 deec7c35f77ec8e22074667641ca8851
SHA1 8cce6b663a9a04b3c13aa6621b0798e487a8a88e
SHA512 8de2b82b0579e6c37546a26bc1ab5d7603090e815d8ce728474b1405339ab4ef4f0794df19ff4cc3780aa7259288d4d93fd50b0e9c63d413ff22ad5e72bfcbe5
TLSH
T19B51661939D8E2B7157B5023E3252039D206FE7730C0E9AAA48C9E2D1D83D66B3E51DF
MD5 SHA1 SHA512 TLSH

Submit Download

float.h

Path C:\Program Files\Cheat Engine\include\float.h
Size 1KB
SHA256 7b8c84c49d28439ed7415e88c5131551b3c3f68305c51d3d81b8ec42e6b25013
MD5 f1b2dad415f00af7a859d6933c4123fb
SHA1 94e99217a1d7ed2925af7f9090a8c779d9dddf0b
SHA512 a59382a2588117bc1329bf60aa65a9130f59ad1bec0b5e8b630b91569705f5b3d647b13f1d5053c8ad2c3a2b3542f9ff70ee26013a8da736a9882171d4a3b382
TLSH
T18441A0C85EC524B2C072B1255A1F8E29B52CEC73B11918ED7152AC7C7D4E2905DF46FE
MD5 SHA1 SHA512 TLSH

Submit Download

inttypes.h

Path C:\Program Files\Cheat Engine\include\inttypes.h
Size 5KB
SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
MD5 6bb72461c8c72cc3b96f78c73fa803ba
SHA1 4506fb8bfa1622d4533db176b3dcfab0ae021672
SHA512 5f6d95651183fbce7490a619d37672f2d3bac516319d0edcd4e782a77632b457632eb83ab54b67132752649fbbfbd1d4eb2b4aba2622bdf729f0c4bd7509db2b
SSDEEP 96:a0GgtlRUn9ZpD5AgcpqdvDp/pwZzSAGkKTskBkbBpbwlHrhchgM2bRBhuYBbV3VU:a0GgJUn9ZpD+gcpqdvDp/pwZzP1iskSX
TLSH
T110C166038FDC60A82132BA97A66D52580063FDBB5384A0EC3679DD3D9EA149181F6CDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

io.h

Path C:\Program Files\Cheat Engine\include\io.h
Size 12KB
SHA256 5da97c850e8e2ab608c42947a33411f556f6d75b8264e1e5cf29ca7ba7b96256
MD5 4ac0744ef16453febed8de4242997946
SHA1 b092c9006de0a8dbe7f0ff568b6caafb00b4c90a
SHA512 1ec9947c6fe0160954f3922d6990863865d274874c31355f0838ccbb1bbf6650a9a3f0d3590537a189afbf80e33cde5393260fdd5f3ea5a736a066cdcc5ff815
SSDEEP 384:Y8Bx8BjP8BJPKf37Rw8z/hI9B3mpv6O3O8iONUO5OG0xLIJ8SNgVSAMczPO8cONU:r02oxz7vX+8fNxIG0S8SNgVxz28ZNU
TLSH
T170421255789D895260B61367B64B0275324BCD7B31C1E8E2AB6BAB316F03241F3F66CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-28HME.tmp

Path C:\Program Files\Cheat Engine\include\is-28HME.tmp
Size 1KB
SHA256 a2eeaa997ab8f1d3b3ff35612aa61f8d53e61bdabffcd5bbd21c68bc41ab0db5
MD5 9046abc90d479e324b95e99f8c871cdf
SHA1 b74d7a314dae76b3304f2d57fd052fa351add75c
SHA512 6dd7827908eb176ca4b0bc666a000c207e9aaa0a51478376e9705195e72b8ebcf52668162019696b42427bb8a1cb454982623ca6317da0a13ddf4b76ce2bfad4
TLSH
T18C21FE278E893690B8125472920B14AE114FC27377D2EAE11546F46C2C2393464EDED7
MD5 SHA1 SHA512 TLSH

Submit Download

jni.h

Path C:\Program Files\Cheat Engine\include\jni.h
Size 52KB
SHA256 bbfdf8435eb3bf257808755066eb267f77f2677af1333c32d8d42476f3cde845
MD5 45146adf8e7b855a3a71d4e89139bd1c
SHA1 a8a5aab92ad76174793afeb96f40c29b83c8ca51
SHA512 f2fca690c025f69bf1914861d6f3edab2a3ed9f14e6d4158f77a9b77f9b4cc7a156f397d3f551dd397a1bf8075152b945790d9087278c73dc471173443f42c1a
SSDEEP 1536:3XgZkPGo+QWLK+rxnPkpzWRT3Cn5ldQoIiRdx5BRhJRNZRFr73ueUAq2YhpaQeo+:3Xg+PuT3Cn5ldQoI0XWcDtX
TLSH
T19D3310815AC3F3E56C73A75DC947944DCA90F003342EEA90BEFC9D954F398058866EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

limits.h

Path C:\Program Files\Cheat Engine\include\limits.h
Size 2KB
SHA256 39c0761f0e43d7b936b9b81c85673dd82896ebfa66e9f1b9a19b45f34e4cd52a
MD5 21ce377183014c3535643c9050306a33
SHA1 41b25206edd6309884312fd70026096c35a6dbeb
SHA512 3b0fa5d6ebb7ac47694c7d04b4835af6c089344f7f8337db74b34e3b46a1792295224dc232fac1fd0db482fc32c8a6a4bfcaf4f39c35dccd98600181c314b43d
TLSH
T181518BAB9EE87091B1316015AE2FCB51001BDDB7B665B2DDB002DEBC2E9615040F9AEC
MD5 SHA1 SHA512 TLSH

Submit Download

linux-x86_64-ExceptionHandler.c

Path C:\Program Files\Cheat Engine\include\linux-x86_64-ExceptionHandler.c
Size 6KB
SHA256 6ee47c69e8af14257387e4ea025b5c8df832ee751745ea21e91e90c79e4352a6
MD5 323b7ac872ff1eab2b0f1166e394e55f
SHA1 e11e451f5ae40c416d496904fe53a15ab77e68e4
SHA512 9ab29ad69bf264cb39d081cb3256cb8a46d94b4fe7e385eeccb692fae816cc21a8db4e5a2f29a0e06f444519a8c39a1c29bab1450b1350255933b7b1353fe80c
SSDEEP 96:T1WYLfTkh729N8VtjJ3t0N6SLXdzC4dzz4h6gH+hzmFSVAPW3DMfzwGp:T1WWfgumbjJ3YLkkgHKzmFPWTMfzwGp
TLSH
T142E1549D2A3E61E173F2316147A21E06D72281531289FED2702FC36C5FB646097E6F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

locale.h

Path C:\Program Files\Cheat Engine\include\locale.h
Size 2KB
SHA256 882626fa25dbc1b5903e6fd98cc8516f1e54c4e06945026653f05b38125dff2c
MD5 5f6a3e42f8eb297b888b498d93437c3c
SHA1 09729d7892a1ed36afaddec40674aceb62b5fa88
SHA512 587bb7be57dda7db0bf8c454a78dd67d850342d97bc7c99a9804d53fa7929eb42c1194e13456170c0902ca7a15c028a6c635879889f0af6a9ed833c2e046b9ec
TLSH
T1E741CE200EAF91E391311B826A3B614A5187CA6F3115C6ECB583FE284F0369CA1F9DDC
MD5 SHA1 SHA512 TLSH

Submit Download

is-G49NO.tmp

Path C:\Program Files\Cheat Engine\include\lua\is-G49NO.tmp
Size 8KB
SHA256 1a47911ab8c28536b35b83e9887729b06b00e10ded9c1bdb417ece7657a6c73a
MD5 414752bf38e58bd6c662587ca7b4291a
SHA1 5a82403a8d90d09e9b487af738ecbcbc0feee297
SHA512 1dc2a3c45c7fc8f8a1c5a59d6907bb03cce53ea1e24225118190873ae8c3d28a7c4e287505d6beec9bb5ac28077576ceaef04a1e2c48a0e6cbad8ddfe8fc71d2
SSDEEP 192:AG3SKmwE5ZD7lq4TJpTPx9W1HPHthPRHroDAtZdJ3/L:AnfEvGAr
TLSH
T1D102624EA8663442DB30634440090A4499EBECABB6E4E6DD365F6817E7513ADC1FF6CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.h

Path C:\Program Files\Cheat Engine\include\lua\lua.h
Size 14KB
SHA256 8aef3fa9669bdc5e7659389e276f31ec779ca4bdf96e2c9ada07dd9458a47416
MD5 555a7140bbd46a1b5bfd5bac4a9a9f10
SHA1 457cee5851a018909d1bc96824e99c0c775166ee
SHA512 34b85999aa982de19630dfa2100c60618758a4247fe5cdb3320e04904415619aa437a72e97b5e67ad287e47c66e73c7fd04da6786dc1fcfa981207541043f3fb
SSDEEP 192:e0NdvtffvT5GDazPCagC/3hJiOY4k1gN3glwkp7MYTG26nRRT46lQHTa:lf4Dg6agC/3h8OBk7wkJMYTG1Rxqa
TLSH
T1B062DD5DE5823480D9317310462D4AC499F6E96B31D4A1E8365EFC188B95BBF42FEECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.hpp

Path C:\Program Files\Cheat Engine\include\lua\lua.hpp
Size 200B
SHA256 a7a47ce4cd19f703b8025696f0631c09a664d54cfa831be4538d10441aebb48d
MD5 5d2dd4ff9f4c38d14220bb0e425b796c
SHA1 2fd297c467ffcd72cf9cd21450e5bead0ae23962
SHA512 c84ec5c6f867df99c9c8c4f57af4795e2faca7d81f111f7aecc568cd5a28de3971a1bfcfef9950181ff2fa67b82542840488de718d95f87877f51b0709ce10d6
TLSH
T148D0222EC41E8052685372F0A7818873C49CB5A85FC8749702112DCE60C31CC9FEB273
MD5 SHA1 SHA512 TLSH

Submit Download

luaconf.h

Path C:\Program Files\Cheat Engine\include\lua\luaconf.h
Size 20KB
SHA256 0c5d09a7908f99b80377b3157a0bd37c6322cdc0af437e99501ae746037408ec
MD5 fe4f0ba514434b7f01983b97f6e517e0
SHA1 7057fb0bcc204ac4e65aaddbda350bf8f7488a3e
SHA512 bebb3a5c5384d0a08955a95970a40509d2ece40feefb0a7c80bbfd4f9cf02e88aed69b5bf05ba6fffabdd88d364bbb717ad4f59e3a1b6999bcd1cdebdd410d53
SSDEEP 384:AmA+N/G+woUL8m7ETjv68AaMNZjXrQvLXF2ZsgcoGkR3lY6TKhaokMC5:++zbTr68AaMNZjXrQvLXF2ZsgcoGkR3T
TLSH
T11192534DAE9222A202722311520C0A4ED27DFEF7476266FD781DCC5C2916B6742FBEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lualib.h

Path C:\Program Files\Cheat Engine\include\lua\lualib.h
Size 1KB
SHA256 3890f6ce73f70f6eb67ec42a74f7c8cef40fa184659934906648c8acadb53fbf
MD5 d763a23012a8dafd2d76ce4a0609cc17
SHA1 b7c2040f6ef844048a1b17e204658ad0f5c6957e
SHA512 9ac100782422e02809f5a63a42b9787f97c9ff292cc3ebb7e2dc39b5e40e671c566a74dec8d1a748b7d4e8666499f045fdee6ed4ddb0207ff7856145cbfd294e
TLSH
T17921F3ACE443384AD722F542400C263429EFE93B644691D5335C6E4CC5D05AE44FE6ED
MD5 SHA1 SHA512 TLSH

Submit Download

luaclient.c

Path C:\Program Files\Cheat Engine\include\luaclient.c
Size 6KB
SHA256 a18a985a32b8627847278c41012d200c0db1b4368e6204fd6157f6e29281d9e3
MD5 fa29c1499bd4e51eadcb7c3462188430
SHA1 62708f95554b438320eb558267da8efc66593686
SHA512 988eadeb061b30c67a4427532f4f7c095a675d708615960af36a7ca5c3d69339db534e6fd5c109402ab201bf9c8e96a858961b813e029dcf2fd7c267f1f445f7
SSDEEP 96:ZRUrVghQMcaVetgHaQjZGmXVv1JBcZHSdP2LYehVqjcdtHEOYL:QrVg5aVs9dP2LYefftjk
TLSH
T180D1651C018E30B61230D734C3934143F6B6986376C7BE48B65EE5942F73462EAE9EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

macspeedhack.c

Path C:\Program Files\Cheat Engine\include\macspeedhack.c
Size 5KB
SHA256 3385883dfeeda6d10867ad5e942a90e3a86e1a51ae4621ac19d14f8ef92dc000
MD5 af4c02a56cf272a13bf45c40545b575c
SHA1 67b6772487a2eef1177179b09b2e951703fd9a92
SHA512 246293147867b6d5cd4b4d7bef13722a3a020afed34831b4cf7136f74277d2ec7f8ca200e5613eebd61502a839be90e2ccbb0fcaef0edc7a6881991491ad4c15
SSDEEP 96:fFtVKSWx2Mgi5OvfQFF8FWscDuL3dSZBKGQkVuDy5AGaPFi9bPeASF7V:a8m5Ovysck3dWLtez
TLSH
T11CC1FB86304F44B39A35B4638B3720E9D74B480356A56660BAEFC78E2F39411E4A7FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

malloc.h

Path C:\Program Files\Cheat Engine\include\malloc.h
Size 5KB
SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
MD5 537bc027e86f7252d88b6bf2fe5b2f35
SHA1 7f3361d220f96ad1b93669254937929f267cc333
SHA512 3d7693f46fe1272decba8efb6a01853786419055cf338cc900c9fe3ec1b795ba25e16878a5d53261bf3bc3bab7525110b6f1844501d5fb6be45c57b5d277f625
SSDEEP 96:y4bSZjA6r8VdQINtNy6XVqB4/mLErYQ015U/dIuvwQRbZBq35jU:9urrSXIzGdIuvwQR9YJo
TLSH
T153B1002218AD936164739196F99F0360308BE67B7BA0DF64F9F76AE82F0311403F465D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

math.h

Path C:\Program Files\Cheat Engine\include\math.h
Size 22KB
SHA256 0bc33882bd2af1e7d33c38c0160e2a0ae737836815360765750cdc7e98e5dfc5
MD5 631f16c4a65cf2f47fa49c9220d9c500
SHA1 330eadf08fdcb31747bf7c84182f2a5eecfa3fab
SHA512 92eb690ca7d563269ceaeffac1f0ffba6d010568431843f2dd82dca7a1aca0e6634c3335202ed5559fe631b0ed7c585dc1c3f5bb248fe3d571ba754b22b6ad5a
SSDEEP 384:lpwI012C9/SKSP4qROW8JuWucZBFRzWhHONMLPik9OeY:lpq2C9/FA4OOJr
TLSH
T101A21F1C3598BE839D7630B0B587868DD2C559D2134CD8EDF45E83660F23C2AA5B9CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mem.h

Path C:\Program Files\Cheat Engine\include\mem.h
Size 345B
SHA256 43956946aefee50e01fdd4d54a6c597418abcb02251f9d7695ed7039fd7a5ff6
MD5 534517144e5b9ed662526771bb5d7e13
SHA1 2d1801e4179e2a6e5914764d944a9c472bf65e99
SHA512 533f30d3288c2b827d29210c6890d600678db4f67b9ffab27046e5ca3931bc119de4af93ffa63929dcd9d7c0babd69a25e7f52e697272f3226ed198c93a9a8cd
TLSH
T121E02064CBC843F341151A439309D3D2411CA0EFF2F35256381705997F09D700326DCC
MD5 SHA1 SHA512 TLSH

Submit Download

memory.h

Path C:\Program Files\Cheat Engine\include\memory.h
Size 1KB
SHA256 b4341e188913a819fa3bf101078a95ca077780219373f424c39ad86c94e04b6f
MD5 29f62b1add26dc1aed3faad03fac030d
SHA1 6f605b9a153a987f2939ae6500d6391fdc107332
SHA512 3d98e9f039dda694a660ba7d2f7906fcd60016dc6a8fed78ceb7b191618318a68d34169b9480ba5727730f6bd6357a13fd02e0cdca5439a45e06d2f0d61dabe0
TLSH
T12A219A378348D6609073C9C2F6101281603AA24D7440FB56FADBC5763E93420A5E9BAA
MD5 SHA1 SHA512 TLSH

Submit Download

process.h

Path C:\Program Files\Cheat Engine\include\process.h
Size 8KB
SHA256 6947c954f2af676e66cc38d64b1a165428734000e2e272f883c2d74a85b82020
MD5 f06edaf6ab750607c33c37bfe50b2eb2
SHA1 ca3afc7781760d84432b06567afbda24587757dd
SHA512 9926b19fbd4b30ecf6682ae5945401e4387d2b5ce02d7643b51c660462b761b08f52a99f2b7da73b574c7bc6388cd23ca3ed8451a3cf2b3501ad217925a503eb
SSDEEP 192:kVIYQ03tIPjxoNimr4mJ6hIO0XtcsQQ05vQTcsBOdFS3b6dyntql+:kVIYQ03tIPjxoNimr4mJ6hIOmcsQQ05E
TLSH
T1B0121C09629C4556D27313E6FA8712086083B63275A5ECF5DE6F7B788F238C2B7A1D4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

conio_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\conio_s.h
Size 1KB
SHA256 f7375e816739491fbab39531c1d60a77b78ff9a162aba17f817c773bf75f6508
MD5 5bc78aa26af6ce836f322cd5a432e368
SHA1 1e99298161f0adb4f7244eb5a067364dc5b47e91
SHA512 f1bfd5ef34a97e72ec474b2a2fecf4ac5fa1931e08845489623a7c699954b549fede1e4f93c815c0a9944a7d79601a9ed1342d47694528dab54adeaa5bbab443
TLSH
T18C317A16290CCA9295651782F30603D1D94791BE34F2F912AD2F7F202F63E00A3D5A4E
MD5 SHA1 SHA512 TLSH

Submit Download

crtdbg_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\crtdbg_s.h
Size 461B
SHA256 03630ee83e7c921446a0790853fcadeb5a308553dd3c4ecddd568cda3167c0f1
MD5 f0c359a5aa08a907a23d2c0c5aa68e5c
SHA1 b487788ec6aa32458df18f6d10f67573de8fa16e
SHA512 71bd41e6bd84bffe34beb8ef1b49c63358cb5d8e520972d57046d58e9d9fb6deae512e4cf5554337da2510d6f3afcd6c6d58124a30c4003f9e3a8f60c2ffa896
TLSH
T1CDF02711DBD6C7B2A0680611431CB3E20118AAAFA561A25CB98156C9AE0393047B7DDD
MD5 SHA1 SHA512 TLSH

Submit Download

io_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\io_s.h
Size 881B
SHA256 6e02f4ae50d30629af7df34785b6c32642b12d94addd56606f6fc4ab668250ff
MD5 aaf6330564dc2b4b413908ef435956af
SHA1 ea59272194493914f4b0cd1375210053a34cfdc2
SHA512 3fd60615b2dfc257a0cacf1f985af5aa765583db7de6b8e474de52369219da5d2276362add9875a820f0a424a259fe976ebfa1e18fcd7b70008ab8ff70eba03f
TLSH
T1D911E331BA4CC3B190312312F30943D1404ED6FFBDE0D864D9666B6B6F3790073A6AA9
MD5 SHA1 SHA512 TLSH

Submit Download

mbstring_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\mbstring_s.h
Size 3KB
SHA256 d962ab8070958953f48b24c9ea068b345b158237826fb71b9a76d36cf2e8a32b
MD5 ededeec78fa33c84025495013a88bf1a
SHA1 7cb95b9b6df8927222625ea101a72389b8a5318f
SHA512 b32e7891109560b4df8bbbd1b3bb6d2acec9158c35743eb97a88f3b1237114979057b00acd2cbb594cb1db555e5af5ddcaa610fe13c141a20494ca47319f65b0
TLSH
T1FF719C632899CB22687FA75679070284094F539F39D0EF324FDB222D3D7355897CAA2D
MD5 SHA1 SHA512 TLSH

Submit Download

search_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\search_s.h
Size 796B
SHA256 96174e09f1c573c7faea85a6d568225a1b946e133c6c04a7bd6aa865c58896a2
MD5 e0c3256d4be1ad2a506755eb847c2d39
SHA1 236108eeed6afc8156950dae94a055b90f8d169e
SHA512 501e4c147aba8cc08d3195bba9328d3ed6186e8bfe60ef4de65f09441f708abdaac9d7ed4c84ccd4ce21075f45d0c8b60b2bf8a927ad8a449c11ef6b2711032a
TLSH
T15701B131238C427011B742E3E32463C6703DF1ADB150F66156DB938F3E53E50126A7AA
MD5 SHA1 SHA512 TLSH

Submit Download

stdio_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stdio_s.h
Size 11KB
SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
MD5 3c28755c2186dabae016938e1308b77f
SHA1 9437b43cd64ed70638df695b1b9eab34c1b04f57
SHA512 9d89fe5e5b8396998a552e443970f45c8e9f2f04f180d14f1cbbdc56a1fd5ae0f2c9f81b8e25d0dcb20fb1437d9bd178a6dad68a323aa0e9eaef31b6b6d40f33
SSDEEP 192:nzXsE4vla8LmEtTcbA4MfaEU0zwyp0WEP9fF2V:8
TLSH
T1DF32D905690DC94299B71B86F34307C1A843957E34E2FA625D7F6E202F73E59E3C4E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdlib_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stdlib_s.h
Size 4KB
SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
MD5 ae13bd6218c4840eacac71f31c45b2bc
SHA1 e05d796ce8f5aeaa629ca9f1e3f6d4ac154148a2
SHA512 689808a64c20260f3091e94dce6eaabf8662ba627b4de4c43ed685390565186e69ff229cb4755e9d3bd12b5c46e16ccfd848652703572e790df7bbab3824ff9a
SSDEEP 96:1ICzd9hzhSzms1NOsG1/zl1EzQm2pppJptakhplumHNNmeN4mfNaAqk58ikTNBkm:tp9hFS6s1gsiB3fnjhTVS24Y4LN
TLSH
T198815911A5085F52A5333393B303028184DF437B35A4DB71CE9E6E297E33985F6C6DA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stralign_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stralign_s.h
Size 824B
SHA256 b23f0cf79d5455e232d92792e2b2be38125a02808bc005049367bab68da1300b
MD5 c46db571cfdb29ea8f977222b4bda152
SHA1 727f853fe74015580ae152b7da8e1958b19fe22b
SHA512 747fefa9b6dc0b5b1de13acffbeccdbd7542a1241dee3299f584fd08d65eae8d1814305c44fc5ad580d865cf73ae9a8072f5ad7fd5e8439de034ee82fd789ca7
TLSH
T13701C27579DD4271961B0073861C93865018D5FFBB219538F0E2E8FF7F51920236E5BA
MD5 SHA1 SHA512 TLSH

Submit Download

string_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\string_s.h
Size 1KB
SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
MD5 544899f39ca616ae07d97a2fee8de3d4
SHA1 2f95831d27cc918e633e8d711087ccf7c3da918b
SHA512 20dbf6c25ff2270402bb4eb99430b83128f66d577b7c9277cacbf8cdb5438ec58b6b1ea468499d1f48338cf4f2433a1a0e59e242f812b419c6afc637340c86ab
TLSH
T179314A22760C9B5328B22396F307428108DF576F7461EB21DD8B9A123F33904A6D5F59
MD5 SHA1 SHA512 TLSH

Submit Download

timeb_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\sys\timeb_s.h
Size 653B
SHA256 d153417ec64eb7b1504749bca6477efd51b4b22de670518f4fdc2701080145c0
MD5 001fd701688e91d3781d43714b993275
SHA1 a1825995271fe96dc766421cedc606384cd92201
SHA512 f4f4a8d796e74cb0ad2a06dd153ebaf4cd16c431fdc67b7c2fbbdc4466147593421ae0f60a620503b21dc3c05c6480ca483bd077afb10daca46529996b4391b6
TLSH
T142F09E3179CD53F320510563920843D1665DE6EFFEA08015A52177EA2F12E2002EBCDD
MD5 SHA1 SHA512 TLSH

Submit Download

tchar_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\tchar_s.h
Size 8KB
SHA256 a5318cceb241962769169c32a3ce5bfb9a075a52edbac31aad33b0d7b897b544
MD5 1c3243d5951ccf4c4007e89fd366631d
SHA1 48fe81cea21230097c39ffc92c9b5bcab3b4d0b1
SHA512 f6d25b5532745933f4320280ac21dd02cd12872639333b3ad04f4efbbb42cfe51f5ad828f6cb2134968f5503979029ac38ad208572ad3fd298bdcc97677ecedd
SSDEEP 96:bQGkyRvKPf4e80QgHRySdrCcNNXe1FcNNFe1d6O1yv61ycNNue1ccNNYe1e1O1e3:c11WgJ17OBBapWcEqJ
TLSH
T1480206202DDCCC22653A0674920DD290A95B8E73E4D4B2BAF95AAD0C1D235F187F1DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

time_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\time_s.h
Size 2KB
SHA256 9ae9cb7a3164ad0093e3887b0ca09bb67498da51bb44e9be500b60e72a385dc0
MD5 edc9cc4a2a0b921d3167f19d2d162f0b
SHA1 424e2246a5b852cc80ac043f681a12f4ed95882b
SHA512 3c81d4917e9a47307393ea6af3c6e945f6f6acc1baefa764e500054f84bbaedda83b7ccdbac3a1ec526e389ec7a095b0a6676ae09ceea63ef1e95b5de004b018
TLSH
T18141C021B5587B7111B11B5A720302F1A69F76AB3DA4D650DBCA2F326E33A01C1CBD67
MD5 SHA1 SHA512 TLSH

Submit Download

wchar_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\wchar_s.h
Size 7KB
SHA256 5a470ac358b2d951202182f9ec1f945331c23a8d79629ad4edb08b7d73cfaee4
MD5 37c52897cbb44a15bd22203cf8882566
SHA1 27a8f810adb10bcfd84db971163c98ed81c3bdf9
SHA512 5217c9246a458eab5657b219d136cec221ef0539cb5c5d02bf9e1fe88159a758b247e2d925312636aa8be4665b9d52641a9d3f2613256c3ff88985ed1d50ca05
SSDEEP 96:2s3ligWmjN2JcabAOrco1/x+pxJrx8NxDhW21TUSBL/jCh3HzTxpppJptakhplFY:lUEU0zwyx3fnjhTtj7P9AJbfYFa
TLSH
T1B2F14812B60C9B4129B23797F343028188CB566F34A5EB61D9AE6E103F77D04F3C6E5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setjmp.h

Path C:\Program Files\Cheat Engine\include\setjmp.h
Size 3KB
SHA256 b6164eb7fae4a12163251492f7f4e56cc50d146ec7a2f5640d86eca4d095046f
MD5 8bf97dc43b347cbcf622768ef43090ef
SHA1 e6be2c1b1fe50c19bcd2814e3827c7d94680e51b
SHA512 f2f1a16a1d719b10a20b8be8b5046e151c50792d8d07a2e7f6bc8eb0d53ffce7e66e53934e688fd1c3fdfe00545bf203267fb59cbd289ad92f3786e473f8198f
TLSH
T1A681BCD9429E92E270A5808A473C079A872ED1BB3982FCA33913055D5F03D9AD3E5CE6
MD5 SHA1 SHA512 TLSH

Submit Download

share.h

Path C:\Program Files\Cheat Engine\include\share.h
Size 639B
SHA256 6de922c1bd7eedc33308304785c212945064d763eedfb373c09cbbb5cb933dde
MD5 540ef403878ddbe2d4682540da20095f
SHA1 4e3230df4b7a906cdc3b6e3e1a5cc768cc79c327
SHA512 7c27842cb6f3d2b9707a5df55b45bcc5dd613cda8c550f0232f0cb9df8b59013f428ec3fc07fb002dff80d26bb9941ce76caadd22bd4b539c9f11ea13fe12ef5
TLSH
T10EF0F4A3CEC5C2B4783405194508A280611AE9BB75B6539DF40C2D9EAE56DB851F7CCD
MD5 SHA1 SHA512 TLSH

Submit Download

signal.h

Path C:\Program Files\Cheat Engine\include\signal.h
Size 1KB
SHA256 045a031b376733ed7a685bc01709f5281403729ff7c601b913b2aca2fe1493bb
MD5 a106c85866bf88a68510029349149b52
SHA1 989f8bf922cac5beb03905a0e35c3c7b4b125c85
SHA512 205611a36897d5a87eb54da5c2c193680dad95dda01a55dcef61665ed09efd322a20f276d9419a64144941cf0b59339ff9d15c1a7a9c86da60f140364eacff73
TLSH
T11D311C209F9856FAC3363181986C4A69C567FC3FE85081EE79596E4DAE065A003F36CD
MD5 SHA1 SHA512 TLSH

Submit Download

stdalign.h

Path C:\Program Files\Cheat Engine\include\stdalign.h
Size 354B
SHA256 7612d46571099ccaa7616a510f78f180cb1e91671e6e5e9223a2e297b84b789d
MD5 aac7eff03c8fe0affdc4de59add194ea
SHA1 f8914611b61057134e280c21efc90da9d00f4443
SHA512 579d6b523237e71d2d35acda01fae823a2bb087cac2e513a9b83ca35995098813a93c1e510418d8deb73d1b1c8da406ffb245933abcf60324e08a086dd4bd787
TLSH
T1D7E0922219D58995C22A4052940F35A15595DDF736E220E7F0035C2C0E0B0B06AE45AE
MD5 SHA1 SHA512 TLSH

Submit Download

stdarg.h

Path C:\Program Files\Cheat Engine\include\stdarg.h
Size 335B
SHA256 a38f8d34f5e09658cc3a8892b3a7e80ff566eaeedc194e5a85ece0b675993137
MD5 7b52fb5e54fdff4c741f5180844cb24a
SHA1 b2d080a82d0d365cf563c685da15f6094e004054
SHA512 db442c6d0778e97fd00ca42804bd668dcb00db10418af54106c7302a140cd47973ab3859d119ae8e2413fbba0ea233c60d05d786a84f27e539247f98e16dcfc6
TLSH
T130E04F159DC2F0A9A1243873E1AD1379E0BDCCBF2A45199CFF541C5D685345424E49ED
MD5 SHA1 SHA512 TLSH

Submit Download

stdatomic.h

Path C:\Program Files\Cheat Engine\include\stdatomic.h
Size 7KB
SHA256 5bc89ea6aff1edabaf7f5830ad589cf8d9d8245211ac4f9e1440cf53c0eb8d18
MD5 b40534e5988a8d694a9e6584abd364e7
SHA1 d400751f924d005d89959e05e33b0a048ea5c796
SHA512 fa8d6c1e9b0c1fc7846f84f14f27ef63f948e76c717096de0b6c049a9bdc3096d0a96e6beb7d6857520e719980ead501093cceae988aca6fe429dda0d97a9ffe
SSDEEP 96:GoyQEOuZs5HxDqft+GLtWMYZKmu22DMTzx4FT6wGVO:GwqJYZKmhRHx4FGO
TLSH
T13AF1E0802E44F11111AFC575D66CA4BBC4D682FB0942ABB771ACD8DC8F1716E09DC9EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdbool.h

Path C:\Program Files\Cheat Engine\include\stdbool.h
Size 176B
SHA256 5252824225ddc486b0460677f765e4157af5d3ed7acd65b310a4045eafb56af7
MD5 7d294f4ec2c9640974803a61153ef3dd
SHA1 3bc244518f863b754a97ca1b756580974c0d4356
SHA512 ff09177dcd695a185d66afa8405eb7bf0883d4c1e6507f00a12cd958562e2f0444867f6dabdee6e50cd5977897e4d878f31cb51888ba6878829c96cbf80fb283
TLSH
T129C08C236EE2A979C0346743A88C18B0000CEDBBEA1508EFF2103CAC2C0F2B819F04CC
MD5 SHA1 SHA512 TLSH

Submit Download

stdint.h

Path C:\Program Files\Cheat Engine\include\stdint.h
Size 6KB
SHA256 33c6c8da7d564b5702af8c6ff45c00a16842ba3ffe3f95f7f6232752f63c5afd
MD5 90c1945afa014fc0f8d17078c51502ca
SHA1 f3a15dc3e32ed97b8cc34c1afa2c66ecba3b3be4
SHA512 be8557bda158662acc18cbd4445d4d2e6787fb5c78a67f0d0e4a62ffc9d2b1173c30c66ca5c6a247da8fe7c38b7c57aff050bd4a35b0120bd95400cfb4c2c2b6
SSDEEP 96:Od4Q69/YQhMgPRVQzD+5VO7wRUNsNwxzMD2eT:Ou/f3Riz65VO7wRUNsNwxG
TLSH
T133D1A7042EC471E112762223888DCB2D821FDC7BBAD6A5F931558C7D1D29E4952FAFEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdio.h

Path C:\Program Files\Cheat Engine\include\stdio.h
Size 14KB
SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
MD5 f4948adea7d9f60748de8b427ab85684
SHA1 101ad5424e182236eb7f537f17ce846c917ced27
SHA512 49847ca1a78bc100739b3afc8a0d607ac37e340cebbb0c04b2c067cdbdd6ed33ac5557214282699a89e39f4b8bb3a8b6383fc0a25c19265089e09b08765ea693
SSDEEP 192:VgGovkt8YzcfdLDQgPVj85xhpp0DghdWRUeuzIDcDW40aMsGQLZX9QLbiR:KGr8ocfdL0w5shpwf40lsGQ6biR
TLSH
T1A562BB257A9C8941A1731386F347126105CBD9B331A0ECE4AAAF6A345F33C15B2F5E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdlib.h

Path C:\Program Files\Cheat Engine\include\stdlib.h
Size 19KB
SHA256 5bba095a2d22a6bc0670f73bfebba63cfec65f8b7c248e84e36b3d7ede0a4f3c
MD5 53d74bf044942015fec4afd293d2f9a8
SHA1 010ab014e3b81b3a7e2d1d87ff0281a8736a4abc
SHA512 64b66f0d610d37e6f55702130fad39f39d30f44d33221c6a985cd03948968d4c4cafb7676402a9a4a029c8539efbfa5801c0d1bcbf667b876f3e7bb08f9bf89f
SSDEEP 384:X5I7a44IVaadf7trkr6vrRcbCGX8XnaTjWb5:Uvf7trkr6vrRHaTjWb5
TLSH
T161922F245118DAA3B0735392F707425641DB825736D0EEB0AE9F7B281F63884F3F9E89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdnoreturn.h

Path C:\Program Files\Cheat Engine\include\stdnoreturn.h
Size 125B
SHA256 ec64d8fbf7fb2e800df9784b2efca0a99fc25a3eb5e8da56e4df098937f787f2
MD5 4163443c81ed0b6beed89487a9471f03
SHA1 48c03d1418cdfefa18d8b14f6740c95db322e0b8
SHA512 7471d9381df0ccbff3fc01c4a27fd5512c2da7a5b6c0d04c52e47417559509610f313b3711a5955ffcf137338dc5992fd2da183c456bfa22b87ecc58e007e505
TLSH
T1ACB0929AF8F290C2C334052588880076E00C4FB319A8A389F8022C2C683307C88F4ECD
MD5 SHA1 SHA512 TLSH

Submit Download

string.h

Path C:\Program Files\Cheat Engine\include\string.h
Size 8KB
SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
MD5 7e3ac3220bf883da2db8cdc7b8100d0b
SHA1 666e6f91306ef6412ae912fa386b3decc6332ad5
SHA512 1e27e9e73c5d3fbec7ce41cb3b5fd6615bacc416991321bce22b599150902352cf60078cd447bbbbd49f3106254c5e88e3fb01ca7de62da9a4dedb6fd60f9b7a
SSDEEP 192:9SahrQ/tJUaRaV/f7WtxfeiZDHy6U4diocGLIvHKLhfyW7Ja0+8:9sJlS6H
TLSH
T19F023813A3299953A4735BE6F303824244D76B673054DAA1AEDF7E301E63485F9E8F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcntl.h

Path C:\Program Files\Cheat Engine\include\sys\fcntl.h
Size 359B
SHA256 2b4f660ffd8994afa0387407051e3ca7ecc8fe44beb2add2d431cd52ce8ad9c4
MD5 26dac89b148799164d02ac701aa67e91
SHA1 018db361295e5c140de8131bb148a09aba0e3532
SHA512 94bcf1a20d11adf422b9a83521a5d6950eca35144cdd719c9cbb483bfb9fc0e57d1ba02d29347a9006b25b1dac746fdee952bfded1e55139586bb9d50386b8b3
TLSH
T1F8E09A649AC8C3B341121A539308E3D28219B4EEB2A3621A380212B96F09DB0031AFCC
MD5 SHA1 SHA512 TLSH

Submit Download

file.h

Path C:\Program Files\Cheat Engine\include\sys\file.h
Size 367B
SHA256 b6e779c53140c117bc36bd335c64bfcb13ae4c2c486b94783b32149a6eb2d320
MD5 da489932c3143982e94284f464f835cd
SHA1 78fc0cce2b7b047712b753af6df40258623d2620
SHA512 02ece23c55d9c425f2b53c4d3aafb7ce12b15995ab276cefa9254c37499b0735faf43ee32b67bf6a542eec5147294bd5c16dfe51caefec6c5b1c7807a4fd5858
TLSH
T15AE0DF64DBC8C3F341121A539308E3D38219B4EEF2B3621A380212B97F09DB0035AECD
MD5 SHA1 SHA512 TLSH

Submit Download

locking.h

Path C:\Program Files\Cheat Engine\include\sys\locking.h
Size 648B
SHA256 29786145e9af34a1f96e7368855b19e8879fc80d35a172d9ba97d3c7fc2f6311
MD5 28bd6385b1c6af18f7b2b2fa7f66827a
SHA1 ad01251c9d742578f2962d71a17969da842c5a2a
SHA512 04df92a3257b4a87fc1a00c65f700c6a9f4897ff3e258fbd27a3b3ad5426a35faa7371735f829f4da40e622e75a8259d4022f0f54bf8f52ca5acfd234ed75cbe
TLSH
T128F0D3614EDFCAB250210C12355D62855204ECB76A21D4DE7D50DD5F7E1157C40E5ADE
MD5 SHA1 SHA512 TLSH

Submit Download

stat.h

Path C:\Program Files\Cheat Engine\include\sys\stat.h
Size 6KB
SHA256 4dc126ab4b3177da85e40ed56a7d4516105e436a4624272992816b23e03915b5
MD5 c03d618d6697b5e3992feea86a9c4cb8
SHA1 4536ccd81aaef11cf7480649b8b99836c8b32291
SHA512 236235aa9b16b4ceb82c05bf526eca702cb7d8c542f88d0bdb2416ac3be8214688e6ba47bd253aaa877e173197035fd1ea7bf88aae6c72c907e898182a5593c0
SSDEEP 192:1Roa8xTSS9V89V0B9V69VP9VCJQI99wMupDGi+dpq+p:UdTSE44GPkfyDGi+Lq+p
TLSH
T17FE121157DEFD944FC606862E24911B40BCB88BB29D6C95AF60D2E7CCF6322161EC5CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

time.h

Path C:\Program Files\Cheat Engine\include\sys\time.h
Size 1KB
SHA256 518741f286545434df676572e53bf8553b0496a7138942dc6b20ff252b4293e4
MD5 d8bdddb8a0b2e59371ce79ef056873c5
SHA1 25f481b63f4343dcd56d2f15fe205f16bf008cb1
SHA512 4e009938eb6499f59022d1c2227a7e10fde44c1cc4a38de415b9e2c4e932e302c25845d68c6b2107cc037ab8053fe43350b2312a70130880004881e53edb8f16
TLSH
T1F231E3355C7C82A144620C63D61935E4A7A888AF7F4594D83855EEFA5F0373082F72CC
MD5 SHA1 SHA512 TLSH

Submit Download

timeb.h

Path C:\Program Files\Cheat Engine\include\sys\timeb.h
Size 2KB
SHA256 ef43f9f51660ab8282707f7169cc3d977878e623743d23ec565663fe2b4e9782
MD5 19e8a20458a7627517ad83c0be798773
SHA1 fb12989d8b6b899f89f10e39559a46d79addec65
SHA512 4c21638910d0c87097e2ffc7b28b1011601e7b187297f9b9c2c3db52596f84a0cfe089ef172a0dcda0dcbe0b5b5dc94f36401a233cf7b903520c98b826a769dd
TLSH
T13251D1367CFDF1F114800C23A3042BF06B5EA29B6F59C470A912A7B9AF5372140EE98D
MD5 SHA1 SHA512 TLSH

Submit Download

types.h

Path C:\Program Files\Cheat Engine\include\sys\types.h
Size 2KB
SHA256 f1c3f9e5c811a63bebae5229042c09cb5e057f4117fd31b45aacbb4c3a626df8
MD5 c8f3b2f1fcf386398b5f130f0599a72e
SHA1 242163a76e04f20ce4b3d5d0a959d66b978f43ad
SHA512 3239360e2f810ebbb853581e01657a69ba9a56f6bbb29288011d6f842ce2c405d27a7d818c5e4809ae053481723dfa7dc37e4778edfe6b6392884eb32804aa03
TLSH
T1154155395C9CF0F041555D23E2082AF44D8FD6EF2FA6E4B49805B539ADE622181ADBE8
MD5 SHA1 SHA512 TLSH

Submit Download

unistd.h

Path C:\Program Files\Cheat Engine\include\sys\unistd.h
Size 351B
SHA256 1f595a85caeeef7385a0bda94af51896b214ee26056484af50353e9393de1929
MD5 244c135562d0b700d037299e0052a855
SHA1 59f8a3b33c5cc8bbf95e4b57300628e7599df682
SHA512 1f5def177331b0e4dd86b5fc38fc9cf4f679bca644c26c993d2a911dcf39db452d084bf29d76430f5704e218cbccd86d68f11d38c07b93a818ee446ba249eb53
TLSH
T1DDE02669DBC983F381120A539314D3D65228E0EEF6B3921A381312A97F85EB0031AECD
MD5 SHA1 SHA512 TLSH

Submit Download

utime.h

Path C:\Program Files\Cheat Engine\include\sys\utime.h
Size 3KB
SHA256 524312e3e8a325f7d5afc21ddb8fcbceb85d451175e07ef1beadb7f82fa368b3
MD5 0fd455848e3b07648883ff0c890ba3b6
SHA1 22430c3ca7a2fabf95297ba72ca5fb175e37e996
SHA512 53adbb9316b7ad49bef5018e3c32c10272a2d4a5ccf9a91d818d48c94c4dc4650acc2ad462c2154e010e666b762b0b7f57bad1a471830a0c5bb7422afc62f840
TLSH
T14861862534ECE5B392901D22B20117E42BCED5A23F99DC509979B7709F93E20D2F9B8D
MD5 SHA1 SHA512 TLSH

Submit Download

tcc_libm.h

Path C:\Program Files\Cheat Engine\include\tcc\tcc_libm.h
Size 5KB
SHA256 758e0585edfbce44bf27e0bb44d9b22af53b86c9c265e4303df9b270194ed4ff
MD5 7166d4b47303e4dc38ebeae8b204075f
SHA1 fa0341b00479d682c8a398e8ec1c6d4d7fc2d05a
SHA512 4a4df260266b6f17da29e71254969dbe377cc11bade3513bab1f3b767ce049c9bbe1b0656263763bfb5d10c9d325b425364f000baa4342572556716b857e796d
SSDEEP 96:jlnbfJdTPPut0CQHXOiNZIZvYx6G5Pcz3mZqZ9VZ59uxS34n3C3:NfJdSbQHXVNiVYx6G5Y3UO9VFuxS34A
TLSH
T1E4C1DC4C7CD57E076645E0B1298AD4CAF05E468205DDAE8CF42EB3201B2E873A1BDDE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tccdefs.h

Path C:\Program Files\Cheat Engine\include\tccdefs.h
Size 12KB
SHA256 0d59ca4ed0be71f3b2d494612ca26fa7e901af30b2b37f0b4c5adf33df8f19cd
MD5 237a68741ad0bc974cc53b8278839e54
SHA1 96b212050be6063233c33c89ce83ce409fc58035
SHA512 a81da5f88d1833f25d5874caf7f50c1cd0c4c862e5d3c9e1d1ba7f02e56bfdff01713ad5103ea5e614b572dc5fd326705bcae3fda4621942673b4a7613aaff5b
SSDEEP 192:cw4bLJIanJMSEI8ejpTGOLui4NIhIbIXP3qt:cw4bGaGSzNj9G24NIhIbIf3e
TLSH
T148420D214CC4F08854326262A52A0A19D718ECB773E235ECF85EE9AC9F37021E1FD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tchar.h

Path C:\Program Files\Cheat Engine\include\tchar.h
Size 30KB
SHA256 7fe5fde028ff8f69d2bda910664e2c169e7b92c6e7f2cf7915eb72054a9746ff
MD5 e237270733edc1cb97b10870a3d50a69
SHA1 c2406d465b5e8d94e1cb61c6c3f312bdb018ac80
SHA512 8df9add42ad3c8c378e93af4bec69489d59b8088974a40ec04fb91749dc050e3000674c9388fae9937f87d6abb60199b13d179bf0a8654370a66db64cdd2e1b1
SSDEEP 768:ngntwzzdfQQbqvoRFCM/CVwLn4wyQoPUQ:PzdfQQbqvo1UwNoPUQ
TLSH
T1D2E299216CD8C46244B652A6E50E8681E007CE7379D0F6FEFA5A6D2C4D630B6D3F09ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tgmath.h

Path C:\Program Files\Cheat Engine\include\tgmath.h
Size 3KB
SHA256 e60c66ff9017f13ab18ee38824792ca771b9235bcb4df57688fec582739524a5
MD5 2c46f8198e41891c15c0f55b09097737
SHA1 7cee399ff86fdf638d230a1ced76d9e22f3068b2
SHA512 c7c8745a00743b28d10242be553d39c6bbf7a1e4e4d8ae86717d446d935e86d1b1b8812e757fa380aa972c67d9c3c44bd6aeb1aa27c61c3a324805e764dd1d25
TLSH
T1548160102C95D005182672A0975DEB1A6B01A9779B581CFD305CDE8DFBCB466AEFC8FC
MD5 SHA1 SHA512 TLSH

Submit Download

time.h

Path C:\Program Files\Cheat Engine\include\time.h
Size 8KB
SHA256 453793a2d6c6fc772d1cdd60e701fb3d393d752937c1d6b2ca64d5f1cec9fd36
MD5 698ea0c0196ba07e9b949406dbb9ffd7
SHA1 7296cfe82fab54f08d44ce9cbab92bef7d96c96e
SHA512 49984ddd4866060d8e310ca6a2bd53dea87aba70778202c5efed126c35b244df90c42d61477775f327b30597138a73fb2b2ee2e1050dc6732faeb766e870c146
SSDEEP 192:0ih8Bf8Bx8B6qwyKg758H898Bc8BQGDL2XMR6fm4RFeU6sxhE2JFE:0G8Bf8Bx8Bxwyz58O8Bc8Bv208m4RFeD
TLSH
T1EA0224313C2CB1A110A019A6F30645F4EB8BAA473F84D8D47597AB767F23114D2E6F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vadefs.h

Path C:\Program Files\Cheat Engine\include\vadefs.h
Size 304B
SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
MD5 dda4463da15121ed7ad4f091fbf61dff
SHA1 84b4c4973306ef725c3f61446ab891cac6aa66a4
SHA512 d3417cf7702a17f0f327cbaf8d167d7830a2955c19d553893329696cdf2312707595cf0f6ddaa36ea18d0cea41f24e6fa9c15ac14d5bc567bc25a1cc81b733fe
TLSH
T139E0CD508FC5C7B2541219028305E7D6520990EDE9639145381345957F659740669ECE
MD5 SHA1 SHA512 TLSH

Submit Download

values.h

Path C:\Program Files\Cheat Engine\include\values.h
Size 126B
SHA256 fa3758847b33f59abe99b023be00d8a027c391ecd0580a1fe755497c11e0c723
MD5 621045ae9ca57fe30c8a99dd52ac5703
SHA1 39b1e30a678eac4df1b78c0ef9d315a18df4f156
SHA512 aade260048487d82f129a9a51fbdea949793465c33dc147b31943d22523fb1a63c48f80fca370d5929bcca76b89cd15d9786c439a65c396bb4a5416d387e3f3a
TLSH
T12BB02B19563D51067004001117F322C8760E36DD20408851000C000C5C04799C11CC7D
MD5 SHA1 SHA512 TLSH

Submit Download

varargs.h

Path C:\Program Files\Cheat Engine\include\varargs.h
Size 355B
SHA256 07858857f4eed0a61df94beb1a9d678b53fc3d67a0b0e8936155f85ddbcd1dcc
MD5 8c659fcb5ba111c2a40716a84a2540d8
SHA1 20069af3a3805cf4cb05339f7a7a860f04a1e4b9
SHA512 d1b19dec523c79320bb3380f29981a49efb178f06c0538bce0a5b36afeabec9be0f2a9d02436edf2ac0970cb14b175b3387bbb14a1e5f62eec9971c0c7648a99
TLSH
T1F0E02632DED283F200060A029719E3D64209E1DFE6B7150E3C16226D7F55AB14669DAE
MD5 SHA1 SHA512 TLSH

Submit Download

wchar.h

Path C:\Program Files\Cheat Engine\include\wchar.h
Size 33KB
SHA256 c9bf12e02a2ab0783ed1c66dfe43de43c402b33906cada9b1157502a82c7c3e4
MD5 d6b25f8e3068967751493431b36c4248
SHA1 3145ed71f286525d1ff492ae920b30694123259e
SHA512 02a480389cecc909978130585609f57d03728726e72e5fee89874acca4122d971d74fc615949f8675513edcfe3198201ad0118f795b147c6fca10d28e8856645
SSDEEP 384:2186Orc7LIJ8SNgVx6eG17k8MGOHlE4eGP0+aILsGQ86jWIwF2iiEYbS:2IcE8SNgVx61JC6jry2E
TLSH
T135E2CC16A76DD99210B327D3F303025155C38A6B3495E9A5BDAF6E300F63914F3E8E8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wctype.h

Path C:\Program Files\Cheat Engine\include\wctype.h
Size 4KB
SHA256 e12d9c5bcbe4dfb96ea6c75410ea287917b3c24bff9cd2e716d35e00c1d4906c
MD5 c238cfa11a44926becd364ab35bfc821
SHA1 54d68b8ef71d277bd5173e0aac794d6ebdb00360
SHA512 c64f6a3b18d84c8498a2270e7152c4001d6d7ee1acd04169f616a7808a05a02f34e2876ba0cb8d979ae75752109b50a65a66207c86fe936402bda39ac93833c0
SSDEEP 96:4+KnaNsLsNwnSTOXNXgXXXVX+1XPXmXIX6QXJX9XZXdwUSv:4+KA6O6XNXgXXXVXkXPXmXIXfXJX9XZK
TLSH
T1E1A17C667BE9D5E0923410F1B2055845748ACDEF2BC0E8ACF291DA78DF97994C1F838E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

basetsd.h

Path C:\Program Files\Cheat Engine\include\winapi\basetsd.h
Size 5KB
SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
MD5 4bf8483ca6a55237b88b3fb04917c9b4
SHA1 1d5a57a8af15ff88521335970f6c547eb2bda403
SHA512 7c4e012ef32a9529a0fa648320796d2abb287c3c37f22d2cfefe62fd0851cf68b5d373316ad70b51d09f0d0f1f48843a5d6e430c12367b5363648eeff1160466
SSDEEP 96:xOYJhN+GRWlYdGmc0/5ZLURGFVwae+NmZLaVkGMGMRRMhHmdd7sAKGU1LRlw+4i7:xO8hIGRWl6Gmc0hw8Vre+NmcVk5rSHIQ
TLSH
T1CBC1F4861E84E2D5D871E033DCA80192811FED673AE4FDAA949755BC0D32047B2FD6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

basetyps.h

Path C:\Program Files\Cheat Engine\include\winapi\basetyps.h
Size 2KB
SHA256 34842ee3389cb13a72a2b87ec930aadbffce8906eb31480180cff541c7f44134
MD5 09dfc50c697476fdc240969717c514ce
SHA1 c9d444c897a96a4b475379c7c6b826fdf2dff2e5
SHA512 de3e258d4df8e046a131110fadac12572ca14a7359f1c44c41debc7e8f1424a93bec6300e3ca21beeb55ff4b3ab572f0b3059d9399c89cff27d154dcc90238f7
TLSH
T1CE41ED2D9DDAF9BF11745A5A59DCD9868047EC3339225AED78464FFCBC0810A00F22CE
MD5 SHA1 SHA512 TLSH

Submit Download

guiddef.h

Path C:\Program Files\Cheat Engine\include\winapi\guiddef.h
Size 4KB
SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
MD5 d65fffb282c1f60ccbfc4dcf1410be1f
SHA1 2be8badb6c6fb0db0b023bfbc7b6842e0ab73a8f
SHA512 e7f9554980671dcb14c62ff462ae34961c01e0dd1afa9f8e010370b0941e22ba619abea98dce090762888a1e485586baaa0917167ff6373c8309374ebce8054f
SSDEEP 96:lVeZAP1SQySDz25/rPjEgE+2VPYFjrQUnL:lVe01S9kNcH
TLSH
T1FA81E0360EC9E1F124258173780C9B15A88DC9EBFBB0E1FC70466679DC5721A96FA6CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

poppack.h

Path C:\Program Files\Cheat Engine\include\winapi\poppack.h
Size 282B
SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
MD5 584ebd620b89c671805eb5917278c46f
SHA1 645dca8a4775e323eed290eb1262a898e3bd8df3
SHA512 f80c37df443967189b8b3e246e860e854a65283b9e7dbbfd87fe30e6e8285c785df2d6f74ac9d7d59cdf655e543b830042a51574fedcf5611714946da2d1d542
TLSH
T12CD02B65EFC543F2829206028318C3DA520CD0FFB5F15159781105EE7F01A300656D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack1.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack1.h
Size 285B
SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
MD5 f7ce406b57af97c8ba95eeb9d7840c1d
SHA1 ed211a37e0efca13a0146f9fe775875d32db3496
SHA512 b7ee10fbfe60f4f6e998d48d88c36095dfa70524b9e24a6e3bdd6c0a62fbfcd66725e28f227da1469448c909d08dc57add7484d7feeca35b2ff3a4f526756256
TLSH
T1C7D02B51EFC543F2429206028714D3DB520CD0FFA5F15159791206EE7F01A300256D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack2.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack2.h
Size 285B
SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
MD5 5f9ba2a3122f6963219bdd95eff0d63b
SHA1 fc7ef1dbf2d51d9e38e79bc4d2dfe7f89107263e
SHA512 4339e932da337fc33cb8544fad3065f82f689e17ae9cfd6a3035a0a1c62271ed0efc44553a75c29207e97555e55ff8f76d42fbef57b46b0e117b087a367a5d1f
TLSH
T125D02B51EFC543F2429246028314D3DB520CD0FFA5F15159B81105EE7F01A300256D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack4.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack4.h
Size 285B
SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
MD5 9e2e16a461b193bae9e69c59c9a3e040
SHA1 17aaa9161d3f9d7270edb80bc850b3ad1cd9151a
SHA512 37c580b406eb30fc66b0135d91d8dc743a9f2abbf830a58272ecf910e4f4bde10ed9a1cf07a8c0f24bfa2d8e86883af76c5a7805fc70a2ae69f1a9d8225774df
TLSH
T1AFD02B51EFC543F2829206028314D3DB520CD0FFA5F151597C1105EE7F01B300356D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack8.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack8.h
Size 285B
SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
MD5 4fa6301a9105c4442fcd8181b17bf100
SHA1 cd49157fa734af5ecb57bde0e7c57b9bc425ce98
SHA512 ec6c5d061c788463d3e262e69ed74f5a21022007f4e3bc5dcdaa64ed641d0c4953a60a465e7972756e427e3b9ac71103aa36ef298f8e5d8fc946210152612599
TLSH
T104D02B61EFC543F2429206028314D3DB520CD4FFA5F16159781105EE7F01A300356D89
MD5 SHA1 SHA512 TLSH

Submit Download

winbase.h

Path C:\Program Files\Cheat Engine\include\winapi\winbase.h
Size 155KB
SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
MD5 18908ace3445091e5966cc99f9d4b5b9
SHA1 130d1cfa2d8a8a17fa2afa4ddf4fe3dfba4542d5
SHA512 0e63d752b56051057c4e553307a708c2359eac58ea96ea0077931642482eb8b6e0b28984a278663d85c6b1739564cab6ffed3d9582306473841a355bd0cbee61
SSDEEP 3072:p8iWoUKAVEvTQ/BUNRB+NNKjxyfmTcFqTPj:p8iWoUKAVEvTQmcFqTPj
TLSH
T18FF38316AA9A10E8E53B8E9104DF54C91DC6C6730739C7C97BB44ACA2E2D54321F1FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wincon.h

Path C:\Program Files\Cheat Engine\include\winapi\wincon.h
Size 14KB
SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
MD5 a7eac92053e54e029dc3b8356a49df4a
SHA1 475df5425a60973ca79c1b0d5fa05dfd59e99e6a
SHA512 1a1f5032e2ba7a837fb043fc7b3dc15796b27fa481b2d8593f8012d503d1aab5c82ab54404898fed81418ffc3b64712476dbc89acaf92aacac051ff40dd3f7cd
SSDEEP 192:T3LK2osQDITqQWDVvRwPhOotRrwAIPmNLd1mBTVuRthEVPQKyybPki7wanag+4+M:lcio4tzIuhEVPQKyybrwan1+4+M
TLSH
T11852EC238EDA11F095266E501CCF48D85D89ED73825EB68937388CCE6E2D64211F2FED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windef.h

Path C:\Program Files\Cheat Engine\include\winapi\windef.h
Size 5KB
SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
MD5 4149cf07a0fcb5fafab7f58bcc951d8c
SHA1 dbf6f1002b67da30ce63be5d41e0eaa76263ac9f
SHA512 1bc969d3700c3beb6416eed13942142315efee5f929c55f539e11fb9196c8865ca05be0a39094c6e7457b671ba33299d3861aec6161dd0429e8a375f378659a9
SSDEEP 96:l4nmx67GjIz13BkHelji9aF7e4KmCtnLK0kO5Ol60V:4mxbjYkHi+IM4OAO5gv
TLSH
T138C1CA686DCCE0E44237AA33929F1A8470DFCEA35F95ECEC381165B90D9919041FDACC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windows.h

Path C:\Program Files\Cheat Engine\include\winapi\windows.h
Size 2KB
SHA256 3b0d80e4b27e099c8af543d6d9cca295c68e115a0fba7cd79cc0e76d1c3a5c11
MD5 437b745f448ba343620fef2015b72e78
SHA1 6e95b00a515154faedb95606f9aa429afe40807e
SHA512 43ee580b0d94f5556a6d4227b103c52678ceece4566a7ce3a9a494e8f19bcf3b33a3e765e10d62c53cc54552532c3b0b2828241354c4c14df13cc7f90d6ed8ae
TLSH
T1DA412778DDBC10B2C13318A2621E9527114DEABF5B52C5BC620979ECFC5419C25EFACC
MD5 SHA1 SHA512 TLSH

Submit Download

winerror.h

Path C:\Program Files\Cheat Engine\include\winapi\winerror.h
Size 146KB
SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
MD5 8a51f06df0cb380eb7e944203bfede79
SHA1 92b3f5d7ebbaa0f35f30f5fa68698d93a708b0b5
SHA512 e50c7d2391c84b3f975f5e6e732691102595bbb857987ad0577b370c34d9c9c32de3fea64dc8dd45608320eb0e7455ee306ca50b1f19d4b209bfe1618ef9b22a
SSDEEP 1536:fAOSurpB+BkRymeRfJOj/7AL1YxEilv+y2aUs/gtvyEmZ1m6tDLiSgF:RHu7LSqiQakytxtDa
TLSH
T1B4E323515FD867A561B1684670AC30620D34EE3B764CB6EC70AEAFAC1E1DE0119F8ECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wingdi.h

Path C:\Program Files\Cheat Engine\include\winapi\wingdi.h
Size 118KB
SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
MD5 fd80383f6f92379e074379ba54d68bdc
SHA1 0a4d4926df853e126fcc52150c84822af1ef8035
SHA512 4ed6c5508c77a8a3272835c6ae1323514e42d015f3cb53168382ffd78fb1a73d806af5421378d1430ed344ba1200e3006d5aaf4150e925c1f2267a8d637a50a4
SSDEEP 768:mmN0oz+ODr15Ye92/rvZVXkRs4pItxtv7OosWBkEwJaYygZtk+tUtwtmtDlwsigp:nuPn7z57mW7T1QFYLCOdKSbuo8Sl
TLSH
T196C395054DC7A1E8E4B65D11266F31842886FDB309D8E9CE37762DAE0F5D14D28F0AEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winnt.h

Path C:\Program Files\Cheat Engine\include\winapi\winnt.h
Size 189KB
SHA256 f43cca894862a7311f5f4fd4789efdecd86563113b374e4f04f23ceb524472a3
MD5 280a1360d58d4c3e56418e807fdc9622
SHA1 3b1ddc5e74e3977d7d88ce80345b4ebbe785d6f9
SHA512 6c4b76ebb45168789d166e133fadb08a653c9139deec602f8589f83c2fcfb54bc6e461c448a6adff32f439a89dca1dcb25ea1fe2c46b605a36534e2cfa6b82b0
SSDEEP 1536:mgqyl7JPZPZWFLvC3b+tc55bLqkI66qJ+bOaCIzxlWLp9EhxSKAMimiAg9+38w8q:FvTTAw+39O8+NQkK9t/k7In
TLSH
T1181471462DEB60D4E176102973ACF0011846FE7709D8CACD389E2EAD8F9916449F6BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winreg.h

Path C:\Program Files\Cheat Engine\include\winapi\winreg.h
Size 13KB
SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
MD5 0f0e5cb60e379839ac67467a6fd5280f
SHA1 0783bec9c6f621aedd45d2f1010740d9a6152b0a
SHA512 06c87ae227bf6d9c00e8404c728cc77de9840237647605aabf197a85131e4835ff6ee96d7bee24fd7b423c86f64d673669d2d2e8061f03473b2b0a1e10dd8bca
SSDEEP 384:CVb+C+ikI8n1W8l12X3ufMfkebe+XxeceAUgnhicr7Df0ff8uc/1uA1uFZNz6deF:q+C3kI8n1W8l14VzPBAf
TLSH
T11E522E11DEC251FAD57A8A105A9ED1891AC2DDAF2A42CD843B603DC6AE5C90F33F4DDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winuser.h

Path C:\Program Files\Cheat Engine\include\winapi\winuser.h
Size 175KB
SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
MD5 3243b7c1189cc2c02075c2b175592ea9
SHA1 b520f45e195a50ab00acc161efec7e6620e652af
SHA512 cdaa9d91f80127028dc877924d2e41b4ef55714485536c4b64955195c94e8ebfbecf9a0d7545df535cbf4c1977ca53c14379b96abcebf7aec461bcbb87ef040e
SSDEEP 3072:jgie2EUSlwrMbtENbSJGDN4tSUez2pUQkR:jgie7wrMSSJGDfUe++
TLSH
T1090483419EC650A8F43E1D1425AE34802816FD3352E8D4EE36642EDEDE7D19325F8BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winver.h

Path C:\Program Files\Cheat Engine\include\winapi\winver.h
Size 5KB
SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
MD5 f0ef1b8ee3a22c3fa3ca4dd26012e309
SHA1 4d78773275154677a5bb66d6393636ca2418ee69
SHA512 7b230b6be986e12c639dee195198ee87ff1e9e0895fe3c101a3e8553d272986b9800c3c74b53a89128821d2d8d439a4968e48c29b2eda43096e48f51b871b18c
SSDEEP 96:EtGsCwPV1Ihot5C5snyv5vdQSZWVvc22c26T9Dd1s4S/BwS9BYwJw3+wIwV4mDVC:oC4V1Ihot5CFQjs4S/BwS9BmwJp9q1PK
TLSH
T184B144005FC804A4E66E261420EC38586951FBBB56C494DF72664DAEEE1E52239F0DCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowslite.h

Path C:\Program Files\Cheat Engine\include\windowslite.h
Size 2KB
SHA256 4510fe31e609755c5e27a0e04474f1a6a0fed6bf1ee5aeb227b7d7c2f422368d
MD5 0b2420ded126fe6ce8c9d03e5e0fba6a
SHA1 fc55276a325d1b6e077f873e436acc1dacf4d939
SHA512 0c78ebe87b7bbc596dae65b89736be67f49ee47cdd817a7479d4450fc2de85e10a6f375f661ef727198a363467cf545c877766b8e2bef0872719a6d37a89b200
TLSH
T1F941332BA9A21CE9F531B2B8154A31D9845F746749D0AE1174DF6A182F690C090F3FDF
MD5 SHA1 SHA512 TLSH

Submit Download

is-9TBL9.tmp

Path C:\Program Files\Cheat Engine\is-9TBL9.tmp
Size 3.5MB
SHA256 79389ed71f2b3ed486bf25c8939a7d9b54341389df037094fd2daf20ab0d0f6b
MD5 8aa7a1f2da9e1632514c70ede000f8df
SHA1 9a2a7b3b934f45246dd4d93f5b7d5efb6cdbebe9
SHA512 479723195a1992dbef5368392065d5816f0b875ebc975da72048436949d27f8cb12cc5d0588aacf420f100e33fc9c322965e3bcfea18553ab01d70727ddb0809
SSDEEP 24576:3ZjQ6/qw1wFndXLIwRkrmh52g9kDJa/333TOOzHu:21XXs2krmh52guo/333TNC
TLSH
T1F3064D13E385A13AE06A973ECE76A380467E79206817BC17B6DC37CC8E3D9411E6535B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

language.ini

Path C:\Program Files\Cheat Engine\languages\language.ini
Size 283B
SHA256 4aa4f0b75548d45c81d8e876e2db1c74bddfd64091f102706d729b50a7af53a5
MD5 af5ed8f4fe5370516403ae39200f5a4f
SHA1 9299e9998a0605182683a58a5a6ab01a9b9bc037
SHA512 f070049a2fae3223861424e7fe79cbae6601c9bee6a56fadde4485ad3c597dc1f3687e720177ab28564a1faab52b6679e9315f74327d02aa1fb31e7b8233a80f
TLSH
T1D7D02B1A2294033438B81179708C9A46B60882291A707E803BCA1909F68BDE923E0EB5
MD5 SHA1 SHA512 TLSH

Submit Download

libipt-32.dll

Path C:\Program Files\Cheat Engine\libipt-32.dll
Size 157KB
SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
MD5 df443813546abcef7f33dd9fc0c6070a
SHA1 635d2d453d48382824e44dd1e59d5c54d735ee2c
SHA512 9f9bea9112d9db9bcecfc8e4800b7e8032efb240cbbddaf26c133b4ce12d27b47dc4e90bc339c561714bc972f6e809b2ec9c9e1facc6c223fbac66b089a14c25
SSDEEP 1536:K3uc99F6AOdjfTOZztxlGWGXLQbcpNk6FowD6QcEY7Xjl5hf8keDQa/c7usWjcd6:K3ukXTNGp7+6zaEY7Zf/a0ye3ZoOvKOS
TLSH
T118F38D12FAD1C131EA9A067991FC9A138F7D7951CFB888D7B794055CC8203D26F3AB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libipt-64.dll

Path C:\Program Files\Cheat Engine\libipt-64.dll
Size 182KB
SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
MD5 4a3b7c52ef32d936e3167efc1e920ae6
SHA1 d5d8daa7a272547419132ddb6e666f7559dbac04
SHA512 36d7f8a0a749de049a830cc8c8f0d3962d8dce57b445f5f3c771a86dd11aaa10da5f36f95e55d3dc90900e4dbddd0dcc21052c53aa11f939db691362c42e5312
SSDEEP 3072:XMTS4QqrM7BqUHEwXDVT6B8AF6aBBcFkLODeYJObCkEjOUkOG:XIQqrc7V5Trw6aBBcFk6CtbID4
TLSH
T1BE046B8BF2A400BAEA53DA38C8D74506EB727452C7A49BCF4254027ADF573D25E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

files here are in the lua searchpath.txt

Path C:\Program Files\Cheat Engine\lua\files here are in the lua searchpath.txt
Size 142B
SHA256 3a21d77f86dc718e449c9690035362ea971d55e6ce1bb31f5ec032cb42d02940
MD5 53ff72c3b19d1c9416567aa03721c7d9
SHA1 78a04c4c6bc4a7c5ca094667b38f9d36198b00e9
SHA512 2a2f6ff1a3c912c3d78f4afe297dab3da29670446cc1d547f6455eb1254e3c4846cc0a295c9e534714161ba103e7ca84f7b49c6a5ccc81bcee31195f4123409f
TLSH
T1D3C02BD938C3B32031C1E3D220402904D3C7D8591300A112F480B06ED0D16D69A3E0F5
MD5 SHA1 SHA512 TLSH

Submit Download

forEachForm.lua

Path C:\Program Files\Cheat Engine\lua\forEachForm.lua
Size 364B
SHA256 218b459887d23819336482890c2b6a0ad3f2f4ad3359423297f5e46c18ffe071
MD5 9642579175a8378a876dc7223d22b6e4
SHA1 808c8543f2d75b37fcf93059f2cb578e1c6115e7
SHA512 efe9702a3c40371859b5c16f4f574d938bafe8fc3476632b3fad1118f998005ff9598230e35c3e61fde0c49fa0b317ea8ed0fa689bbd8f9936f411ee8473b9d1
TLSH
T193E020397E4252F59CF3F2ADDC5F1405E21301235DA5242176EC30C11F3155C966277D
MD5 SHA1 SHA512 TLSH

Submit Download

json.lua

Path C:\Program Files\Cheat Engine\lua\json.lua
Size 10KB
SHA256 d937f80c47d79b1a4eccca3bdd8b260ce56bd42dee592e69771fd2c078b19d8b
MD5 73968620592450f5b8632196bf52a948
SHA1 e2c1609e176a3832e9a438411e743216c558f276
SHA512 e3ff2f936a064266f6ce6dd5e0cb475dfffbedb2fac067d524a9c9f314eccc32b724e9e4a4fc488f83616e8fb21263abf0ab54622883c2df737b69100386e9ea
SSDEEP 192:QsQHCs3xNCcX7RgH+OKeMV81OGQuTS6Nmx/6OEHN6q4n/uGsOdGChHihZ72X42gx:Qs1sBNCcXdgHIevOG7S60x/6cXuGDdGR
TLSH
T1DA221106AD9381B11AF3C362DC9B1616F37921422324146B78ED11A46F35AAC96FFF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luaclient-i386.dll

Path C:\Program Files\Cheat Engine\luaclient-i386.dll
Size 197KB
SHA256 dd07117ed80546f23d37f8023e992de560a1f55a76d1eb6dfd9d55baa5e3dad6
MD5 9f50134c8be9af59f371f607a6daa0b6
SHA1 6584b98172cbc4916a7e5ca8d5788493f85f24a7
SHA512 5ccafa2b0e2d20034168ee9a79e8efff64f12f5247f6772815ef4cb9ee56f245a06b088247222c5a3789ae2dcefadbc2c15df4ff5196028857f92b9992b094e0
SSDEEP 3072:fr03mcDwt5b2+z615yQ7SLVTnyJYpgerOEmgsRBZnwO4oO8:fg3mrHb2+z615yQ7GnyOpFOEFKD2G
TLSH
T1F6145B57B5019277C7472EB8464A4A956A74E62038F2E0E77ECB0E4F9A74FA06F34307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luaclient-x86_64.dll

Path C:\Program Files\Cheat Engine\luaclient-x86_64.dll
Size 260KB
SHA256 253d18d0d835f482e6abbaf716855580eb8fe789292c937301e4d60ead29531d
MD5 dd71848b5bbd150e22e84238cf985af0
SHA1 35c7aa128d47710cfdb15bb6809a20dbd0f916d8
SHA512 0cbf35c9d7b09fb57d8a9079eab726a3891393f12aee8b43e01d1d979509e755b74c0fb677f8f2dfab6b2e34a141f65d0cfbfe57bda0bf7482841ad31ace7790
SSDEEP 3072:KK2iOI60nWU4NJ4twEywGLOJQbcOL9z32fY8iV1OQfkz5w4Q7hk1D2oOyPOP:KKu0WU4J0w6xJkBAY8i7fkaThkA4g
TLSH
T1D3441B6B7612CEBDC0CFCB75448A86E2D230FE500DF5974622C12B1B9E76A906FAC54D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.fx

Path C:\Program Files\Cheat Engine\overlay.fx
Size 2KB
SHA256 c4d23db8effb359b4aa4d1e1e480486fe3a4586ce8243397a94250627ba4f8cc
MD5 650c02fc9f949d14d62e32dd7a894f5e
SHA1 fa5399b01aadd9f1a4a5632f8632711c186ec0de
SHA512 f2caaf604c271283fc7af3aa9674b9d647c4ac53dffca031dbf1220d3ed2e867943f5409a95f41c61d716879bed7c888735f43a068f1cc1452b4196d611cb76d
TLSH
T14441ABCA6E5690230F36C6AC2B7B4D48E7094987CA7A4A10714C53671F7246D4BADFCE
MD5 SHA1 SHA512 TLSH

Submit Download

vehdebug-i386.dll

Path C:\Program Files\Cheat Engine\vehdebug-i386.dll
Size 326KB
SHA256 cb716753fe77bc54cd42477be9bf4b5bd8120b4255756855f33e4684bdaff6c0
MD5 6350e0918f6f7996b43b91988858cba4
SHA1 341ce5fd4ce05ec1d121c1659175bbff3454b053
SHA512 69f078c5c7eb57b09dbe8641233a179ee74904ab3d3f12d68e6245c501cce94b0da2181c880253a6a8ce602dee6679517ecc533a0bd7a9bfb276fa6a9a1d1e15
SSDEEP 6144:BokW02RSGoXT3agNiXms6200zr3MEgst84IuH3jyyIf:+kW02RsXjag8mspAEgst84IuXe
TLSH
T11B645C52F9428237C4663DBC5A4B55D95DA4F92038E2D1C6BFEF0F8F5A31A903E6430A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vehdebug-x86_64.dll

Path C:\Program Files\Cheat Engine\vehdebug-x86_64.dll
Size 415KB
SHA256 8dfae450e6de868c3b2b5db4483b979216db5d3af46fe57e1d432c198c2c5414
MD5 c648240edbe4ce3166914013e70081cc
SHA1 9b403d8cd8d88bcce22d1403e950848d76642d51
SHA512 34c86d16e61153e0007c93615a7c4782f9142fde74ac3d786452c58a74af5e54d4d888fb2438f34642b1981732803d8f3114062a22a36c87b17fd0228bcf68a7
SSDEEP 6144:yLJXTQOWZyX1UoQRMYRLlif0bVMmC/lSHmwjhGG:uIZyXWtRXLlif0bVM0Gu
TLSH
T130944B2BF622CA7CC0CFC778449287A29730FE5019F5A78773C5671B4DB1AA06EA854D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowsrepair.exe

Path C:\Program Files\Cheat Engine\windowsrepair.exe
Size 262KB
SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
MD5 9a4d1b5154194ea0c42efebeb73f318f
SHA1 220f8af8b91d3c7b64140cbb5d9337d7ed277edb
SHA512 6eef3254fc24079751fc8c38dda9a8e44840e5a4df1ff5adf076e4be87127075a7fea59ba7ef9b901aaf10eb64f881fc8fb306c2625140169665dd3991e5c25b
SSDEEP 6144:0drkqKo/nt7PrwnoK0M6EZgugEkkoSE5O7Z3LLr:6rkm9mP6EZgugEnoSE5OB
TLSH
T167446D56AA13C37BC5837EF84BC486F157B1EA142D3590DB32C60B2E6A75FE02F25219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winhook-i386.dll

Path C:\Program Files\Cheat Engine\winhook-i386.dll
Size 201KB
SHA256 3cdb85ee83ef12802efdfc9314e863d4696be70530b31e7958c185fc4d6a9b38
MD5 de625af5cf4822db08035cc897f0b9f2
SHA1 4440b060c1fa070eb5d61ea9aadda11e4120d325
SHA512 19b22f43441e8bc72507be850a8154321c20b7351669d15af726145c0d34805c7df58f9dc64a29272a4811268308e503e9840f06e51ccdcb33afd61258339099
SSDEEP 6144:ZyuXZus0fJ34+UZQ5IvR2diworEdVpRmY:nXZgV4dkIJfrEdVt
TLSH
T179145C86E602C333EA5F2EBD464C45A16574E7202CE2C0DF7ECA4E5E5BB4FA05F64246
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winhook-x86_64.dll

Path C:\Program Files\Cheat Engine\winhook-x86_64.dll
Size 264KB
SHA256 e08b035d0a894d8bea64e67b1ed0bce27567d417eaaa133e8b231f8a939e581d
MD5 f9c562b838a3c0620fb6ee46b20b554c
SHA1 5095f54be57622730698b5c92c61b124dfb3b944
SHA512 a20bc9a442c698c264fef82aa743d9f3873227d7d55cb908e282fa1f5dcff6b40c5b9ca7802576ef2f5a753fd1c534e9be69464b29af8efec8b019814b875296
SSDEEP 6144:XcxPVJy83/NkY56owwouBQGsyTfkaiX6P0a:XkPV483FB56wsyTfkOJ
TLSH
T19E440ABB7612CEB9C4CFCB3549C687E29670FE5009F1A74611D0271BDEB6A906E6C10E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dataConfig.cab

Path C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab
Size 79KB
SHA256 953708c221f4508bf6dad28e4221d3dc1f0d8b5b3e23600c187acee3803a45f6
MD5 b227f9f832673658423871ea9df95563
SHA1 7370120147da7cb94aa66290aaf32477318b32f0
SHA512 bf4dc351012c94012189ba16c48570915787419e7a9a0bb30b9a576d167e9ce5936cbc5dc6d7ff0c627a2d7547afa9ed16a8bcbad2b57da3c2243931819060cb
SSDEEP 1536:KHcDqgVhiUuNjTCxHG8JQDgtgnbZk+n2OGtfgstZ9v56jMs2+g2mIGPHCqCEuFaR:KHcDqgVhBuNjTCxlm16+2OAYsJv56jM3
TLSH
T1468301439D683853CE46EC75B1C8FCA36DB0A2A718C484D35215C49D6E493E2ABEA12D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt
Size 1KB
SHA256 6baf335aec47620fe824ce209819622332cb2d2e238cab8da7dff3858ea03f1a
MD5 da4c79a098cdcfe6afbe5dab8082025b
SHA1 8507b2bc89e9ed125047f4b2e78202a9c4ed8d78
SHA512 3bd67d7530480b21c6db5ad6c90c1bb6b7a565398da4ce655d7059950ae1909911caf60fb38ebbad247e1e92050cc1385e0c5e00ece4d072da396bdc39f52650
TLSH
T1B93162AA33CB242E60178271F1B1C3B932B5B4AC5B5EEDF6512D056CC158F7672EB980
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt
Size 4KB
SHA256 5079c66826ae5fe22b86d26c1ecd2551fa426cbd770e03f551d622acfac4ba92
MD5 f10f80236aa548467fc16cb3e41052be
SHA1 a9e6635dfd37fd32fa5283308296421907d3c194
SHA512 4b06cf8ebb08a5f2d50b4bf8aae3676ccf3e38d592209d03bb17ea59e85609a37483c5a9fb8a383c76376c2655c9df3817b44f90426613a1e44ca794a6eba2e4
SSDEEP 48:LLo8Lg8LgFL0FLH+DLBDLBDLIpGdpULFULSH8SLyS1LLS+8LLtSgL6L7S3Lwx+Lh:e558MyEiGV/
TLSH
T1AF91C89A33CB243E60138271F1A1C3B876B5A4AC5B4FEDB6613D0568C558F7671EBAC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 508B
SHA256 764a963c19f1852069ea9236f7eafc18c544857f602a19a0f5fd2d116bb65cdf
MD5 13bb71835a9588de76e793479a91dec3
SHA1 3cb29b05f9730273441134e692ddb4b8c7823ba1
SHA512 6f2af0e5dcfc68cca17f375cd9745d9bc444afdbd395d5cd73000bda612b212e0981504c645dfc0371f228189275b951c1bfb78e1815d99b088a27e86a137ce7
TLSH
T12CF0244E39DD0A3FB4D0CC7095D1043C152913286C9BEF8AA87C868085057AEF26EBE0
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 2KB
SHA256 dae811baa1343795bc50924fe7e7bd5df8d563da843b0a6946993f8086ffdf78
MD5 89526fd25fc0db7c44d83a3bc966c346
SHA1 a54ce22f411f06d5decd19bc80c9bb5612794c29
SHA512 37d88cbdaf1c7bc0205cd5e3c039f6a9dcd220ffd0be6408821980cbe6e94b92759e7d8c21f77dda646196bcbdd1ff050378c8248b1be6b43a6b26c2624d433f
TLSH
T1C551054E39DD093FB5D0CC74AAD1447C06291728AC9BEF95A87C86C0C5057DEF269BE0
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 3KB
SHA256 bc6c8ec916d4087fef1d0fce142147ec760c25eaf5f56baa472147a08a44af6f
MD5 3abece70e3c9527e017b395b076eb7f3
SHA1 36db3d1c7dbfdf50b0967d565b4ae5b809a80081
SHA512 e0b8977966d9d0347b61678cab3805f6d6309c0b60a220f5da3901448734f7cdc55822042866a81ac2c4589377ea8816f7f8644338719e91652aebeeee177633
TLSH
T1CF81364E39DD0A3EB5C0CC74AAD1047C06291728AC9BEF95A87C86C1C5457DEF26EBE1
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 4KB
SHA256 5ece302ed6f0ce483ab9aa238098bc80205205c5d151d7334bc15912ae0e969b
MD5 e17030e929261bb8b202b21057abfcff
SHA1 3336b1c27c2719b0bbcb760a8ba191b5b138040b
SHA512 e2ea92ccf36094e965fa34fef05435b3688375211e1cfe52baf7eafad51d5e2c443a1c1fbf4e5bd49d1b5e814768b7d7bbaedd03e8ad232ddffef789e363b9b0
SSDEEP 24:KF4F7FCzVxjF2FCYFCJVZGDFmFnF0VmkFhF9KFJVDtFUFXFfVFXFEFNFSVIHFYYU:irpmF/g6
TLSH
T14A91364E29DD0A3EB5C0CC74AAD1047C06291728AC9BEF95A87C86C1C5457DEF26EBE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\saBSI.exe\log_00200057003F001D0006.txt
Size 570B
SHA256 393746f690c95c8b887257c66c806a246f05f0fac4a833d232a0a79d39730a4c
MD5 b59ecb703f50eaa5d88f942213cfa82f
SHA1 edaee80fb66f5ab6328ea4ddb8287d27331e3fe2
SHA512 5637f4e00da528545c54aaa6ecc774df7dbc5c4306683ec70a2e194c3b29d14cf266f0197f5d640ccd43f30c3d6ac3576fbbd8eee8bc166da95593ad1f81949e
TLSH
T1F5F0F659B80C7B6510B6D032F2D885B94EEE904D8AABC9FD112CD0525F88B36F88F400
MD5 SHA1 SHA512 TLSH

Submit Download

installer.exe

Path C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
Size 33.5MB
SHA256 000e31921a46aa4d198bb6d3ca6c695780ddd4a4aafe0a6909b072a27b056217
MD5 46e2cd9e7a3224d3e49ff41087495453
SHA1 a8e24f6a7c421698b80c3543ff6361bb14b9d294
SHA512 e98046d2f33d0a6e87011f809fb0dedb0c4351053bb150ebf2228e08343da2617413fb9eb6963a567d130eb80e41f1a2edd6f02bfffb75237372197249400fd1
SSDEEP 786432:4nk9D1uMJGqmZoZ2qiKMXr+qaO+FuUHVzzs/HSba+Eo1jsuN:JsMJ/x2PKMb/aO9UlssPY6
TLSH
T1A077339E616649FBE00648346E14231DE3753D3603855FDFBA98A2AF6EF71900EB7E40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

saBSI.exe

Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
Size 1.5MB
SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
MD5 7a1b6316d5d64a740b847d8261ea3e83
SHA1 e130deed179693218679e09f0eef6fb33c369146
SHA512 355f190eb5c83b14ea7ca19c901ff9124962a25f78ff03f1bc9f09387751f8def203e47f017ac0bd295c70ace8efbdc5f193d92d67207329aa1db4dbd0cc7183
SSDEEP 24576:8Vxe28BXUGuG2bjI+O5IRumwloSRB0nPUa6xDuC4d+bk+2miTwX/yQw01:8Vxeyk+tWoS/0PUa6xDv40bk+BiTwXF5
TLSH
T142757C133283C031EC6211B08969DFAB86ADB4345B6148DB67D06E6ED8F22D15E35B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\servicehost.exe\log_00200057003F001D0006.txt
Size 4KB
SHA256 1b81c8bed1165682069043e2e0705caa7cbdb74b38fed50a5bacb6833aa9561c
MD5 0b9a5155ac011158b69df966d8b89b98
SHA1 2cb72b79fa7389db61aa7bdbaaef650f282c2ab1
SHA512 d6eb2b16c9209a08a5092d9624f270043b4dca17ce8a7dc07952bc3103ae56898d7f647ed0ae28fb6680256e68f20799ecc019d6a9260b8a384758bb0cd8de7a
SSDEEP 48:9FPLa0MwoGwLSS9LGSb/Lt2J7mL4SlLMALvSYLqSqL3SqLISDLRSY6LyaSsLqSGo:9Fe0XoZZIs636t+4ECQtgwyVPJn/
TLSH
T1D5A1FCE633CB242E60138271F260C3B976B5E0AD5B4EEDB6712C1529C668F7671EB580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheatEngine77.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-0MQUOOZX98.tmp\CheatEngine77.tmp
Size 4.2MB
SHA256 07eea42af4d565d09ce6c8723211e96a835400060dc90e53a6bac21b2fd3da42
MD5 af498a69fb53fc1ad081c0c884e4822a
SHA1 b35902fd0a6b1acb19bfb3002f4c0c44a44bdbaa
SHA512 7523307016fd0b58208cf4bb3aba539866bf59d3f154a95084384ad78512fd76380187ad1fbe1ca86043fe0e7384c858174417e2e5d90c57e11921b5e36b7de5
SSDEEP 98304:5YU5hnuOajWwMPdCpepI3GrwrA+Js333PZ:7xuHjWfZIzeZ
TLSH
T177268F03F388753EE4571A3A583FA280983F7A213915CD4B6BFC295C8F396416D2A797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheatEngine77.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-98IS8.tmp\CheatEngine77.tmp
Size 3.5MB
SHA256 ce70cab18db2e2038dcec0edceb1038a37d3851bc3d77dee3dd7e583ac37792b
MD5 278ba21e452cc6820832666c1152b220
SHA1 1fd2f5177b0148fbcc30972ab0eae7d9dc4835d4
SHA512 c912b801e4569373092e4027fa8ff9ff435ace99a543585585a4071cb724218e43d8099aac92cb6778cc1267a38ce695e243a9ecbdde5dfe0988a17ba7201cfb
SSDEEP 49152:21PRegPynt6Si8zZebYZOHiGXs2krmh52guo/333TNC:2peHl8YQfsGduw333TI
TLSH
T103064B13F345653FD06B2B3A8D279384953BB66029139C177BEC3A8C8F395812E2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_setup64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-KSM39.tmp\_isetup\_setup64.tmp
Size 6KB
SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
MD5 e4211d6d009757c078a9fac7ff4f03d4
SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
TLSH
T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheatEngine77.exe

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\CheatEngine77.exe
Size 33.1MB
SHA256 cf0f4b6002555677984233c95856683959be83a5def3dc12175a8296eb22676b
MD5 d48171f08532e46643a785b1c47a5589
SHA1 ab010b87ab95b7e05a4f40fab135f814df0abbf4
SHA512 df857c9cd7f965371fde76af13c8ac8a795eff920f56b79d04ad3c6439b7aa6e7defc437067653911af7613577800f05c5a4f66856a96e6e0e0b6612accd2736
SSDEEP 786432:iFzT3psOc+Cjh6+DdfTfzVn3mlZQzPUIl5H:idiXd6cfjxn3mu8Il9
TLSH
T100773317F387903FF57A6A3A49B6D122853B9A2065068C66A7FC785CCE386D44D3F603
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaGX.png

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\OperaGX.png
Size 152KB
SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
MD5 4e2421d76f1b0c5627f732d4e945a023
SHA1 89e3de5bcbfe50c18f17b5ee731dd24213f1812d
SHA512 13c97b5ec52344b605d1b9658dbe15ca05841fdb786f2e06ab52a4f80ca6398adfa7c0dda304ec343ab733df85d9a9da29012ac21d96e680a19ecbbfeb0b9001
SSDEEP 3072:zkL8PqE1l4NJoxLiog7R+1tNx+ZEaLbplAfkFO/lb95N:zFowWo7tv8bpyp9j
TLSH
T138E3121A702324BAB44EF4D6F1DB65C2EC22AAFD214D10A7D79A5C7428C0B66FC5D2C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAdvisor.png

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\WebAdvisor.png
Size 47KB
SHA256 0c430e56d69435d8ab31cbb5916a73a47d11ef65b37d289ee7d11130adf25856
MD5 4cfff8dc30d353cd3d215fd3a5dbac24
SHA1 0f4f73f0dddc75f3506e026ef53c45c6fafbc87e
SHA512 9d616f19c2496be6e89b855c41befc0235e3ce949d2b2ae7719c823f10be7fe0809bddfd93e28735b36271083dd802ae349b3ab7b60179b269d4a18c6cef4139
SSDEEP 768:RtwR1Dy4rQznr1GYfvLn6froelhVNSyCPtSOeVlTTqYueg:zwR1DybhPwhvSyClSOk/geg
TLSH
T18623F1618E36D41ED38BE69B1F1D9824277AF197F59C1673866879230C039ADCC1DCAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

finish.png

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\finish.png
Size 248KB
SHA256 41031efc4f7e322dc5ffacc94b9296fb28b9b922b1ce3b3da13bf659a5fd2985
MD5 b24e872bd8f92295273197602aac8352
SHA1 2a9b0ebe62e21e9993aa5bfaaade14d2dda3b291
SHA512 f08ac681abc4e0f6d7a1d1f2303169004e67c880f9353c0ed11dfab3eb511ddf841fa056f4090da8201c822c66ae55419c48cd87f11b9866feb46a3fe2c2af99
SSDEEP 6144:1QdvglrmnluatdNn508GtXT3YoTkT1ZLw9p2Hpsx/F:2dvglo/nX67HW1ZL8EJ2/F
TLSH
T104442222E202F589DB5295234F58BB64BF7E17B3F4850A2931F8541B07815BE4CF9ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\logo.png
Size 248KB
SHA256 8c5c80bbc6b0fdb367eab1253517d8b156c85545a2d37d1ee4b78f3041d9b5db
MD5 9cc8a637a7de5c9c101a3047c7fbbb33
SHA1 5e7b92e7ed3ca15d31a48ebe0297539368fff15c
SHA512 cf60556817dba2d7a39b72018f619b0dbea36fb227526943046b67d1ae501a96c838d6d5e3da64618592ac1e2fa14d4440baa91618aa66256f99ea2100a427b4
SSDEEP 3072:d9rAhuSnngAZK0u2vGWTbQ8VreGWVQx1RiiHs0dfo5yk5BRFOYfKa5ubF3/hlKHV:U/HJGWPQ2wV01RPQ5FoBJc+uHtjdhd3
TLSH
T13444122A9260C885D35201230725B4787F78264B7A1CACE6F5F77C1B4A0A67E2D86FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prod0.zip

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\prod0.zip
Size 515KB
SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
MD5 f68008b70822bd28c82d13a289deb418
SHA1 06abbe109ba6dfd4153d76cd65bfffae129c41d8
SHA512 fa482942e32e14011ae3c6762c638ccb0a0e8ec0055d2327c3acc381dddf1400de79e4e9321a39a418800d072e59c36b94b13b7eb62751d3aec990fb38ce9253
SSDEEP 12288:ib5kasT/hWZEu58IbccPqwozk/2rYJb69+J2W:M5kzT/hWZjfbccPOzk/aIb3J2W
TLSH
T1C8B4237E2323A734A201E7A425373B520A1E63C6733C15EB7EC1AB927D3053D76A456B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

saBSI.exe

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\prod0_extract\saBSI.exe
Size 1.1MB
SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
MD5 143255618462a577de27286a272584e1
SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9
SSDEEP 24576:WF66IUpqM/XAl0drYaL6NFEXXN6abiklqOYadJ0CbmpV4CsCa0wDisO4qG:k/M0drYaIaXXOAqOYadJ0Cbmrhq0wTb5
TLSH
T1D2458D317586C031E1A211B219F9EBA585ADB8359F7244CBB7C05F2ED930AD25E36F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zbShieldUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\is-UVJJL73CTK.tmp\zbShieldUtils.dll
Size 2.0MB
SHA256 976d070339c1ecd80d0d2ded8f2c3fd1c6ec03f408053470f696066c2bb2b738
MD5 ea1aa2927ea58dfb8f57ae5f7dae0c74
SHA1 f1c1eca6070f82cd7c7918eeda144a207a53bb09
SHA512 20b10a4289bfaea9fe25bdeee636a07303799a78f0a732b65a182728bca9f48cf9802f32c833315e7d71a4816fcb9b7b09370c62867421824d554a87b6ea1559
SSDEEP 49152:y4yxp/wFOn9xRo3HVCEi2ynjsPAXkp4K0x8BFuchAFotKLIk:yJTwo93o3UEi2ynjs4Up4KI8BFucOE
TLSH
T103959E613556446FF21B12355A38B729F2BEA3700BF547C73ED4AA1C39334428E266AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mwaBAB6.tmp

Path C:\Users\Admin\AppData\Local\Temp\mwaBAB6.tmp
Size 135KB
SHA256 926061fc6a92079aa227cc2e426bd5b2130501422a95e6a8984f15f05dee2e70
MD5 32528f494643e0e05625d5a5b8e61263
SHA1 701eb330c5f29b2178c6196404f3bc53e297987e
SHA512 80979203400fde66bc2f5567c2cc5a60448b8336dca93b8ef7d2d77033a063a9c581b9acdb99f81c1affae5fe159f2b4bc74b842104ffbb05172cb4656ab561b
SSDEEP 3072:ppIo/Z/nT74FOGNcO7/exDn/1ISZ3kHoh3I42H01Vqx:ppb7tpssD/1IQ332H2Vqx
TLSH
T1FFD38D01B090C072E5BE19390864DF725B7EB874DF906DCB63A50B7A9E703C19E35A7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1384-6-0x0000000002F10000-0x0000000002F11000-memory.dmp

Download

memory/1384-29-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-41-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-35-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-39-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-34-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-43-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-42-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-28-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-1263-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-14-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-1270-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-15-0x0000000002F10000-0x0000000002F11000-memory.dmp

Download

memory/1384-44-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-46-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-47-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-49-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-89-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/1384-2544-0x0000000006430000-0x0000000006570000-memory.dmp

Download

memory/1384-109-0x0000000000B80000-0x0000000000FCB000-memory.dmp

Download

memory/2472-1080-0x0000000000E80000-0x0000000000F64000-memory.dmp

Download

memory/2472-105-0x0000000000E80000-0x0000000000F64000-memory.dmp

Download

memory/2472-1259-0x0000000000E80000-0x0000000000F64000-memory.dmp

Download

memory/2756-1230-0x0000000000840000-0x0000000000BC8000-memory.dmp

Download

memory/4428-1444-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1550-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1427-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1428-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1431-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1430-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1429-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1432-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1435-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1447-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1438-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1446-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1445-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1424-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1443-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1442-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1441-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1440-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1439-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1434-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1433-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1437-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1436-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1561-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1563-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1426-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1542-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1541-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1511-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1510-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1494-0x00007FF688490000-0x00007FF6884A0000-memory.dmp

Download

memory/4428-1475-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1458-0x00007FF6BB0D0000-0x00007FF6BB0E0000-memory.dmp

Download

memory/4428-1454-0x00007FF69C9E0000-0x00007FF69C9F0000-memory.dmp

Download

memory/4428-1449-0x00007FF6BA590000-0x00007FF6BA5A0000-memory.dmp

Download

memory/4428-1546-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1533-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1530-0x00007FF6C83A0000-0x00007FF6C83B0000-memory.dmp

Download

memory/4428-1521-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1464-0x00007FF699000000-0x00007FF699010000-memory.dmp

Download

memory/4428-1425-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1423-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1422-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1418-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1419-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1420-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4428-1421-0x00007FF652C00000-0x00007FF652C10000-memory.dmp

Download

memory/4628-13-0x0000000000380000-0x0000000000469000-memory.dmp

Download

memory/4628-1-0x0000000000380000-0x0000000000469000-memory.dmp

Download