9388f18cb98989e9a71d7a9ed770f3337dc5f7d50ceb805a96b141f7990ac04c

Analysis

user interaction
yes
max time kernel
78s
max time network
64s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 12:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cheat Engine 7.6.0 Repack & Portable.exe
Size 15.3MB
Sample260728-p56djaxybw
SHA256 9388f18cb98989e9a71d7a9ed770f3337dc5f7d50ceb805a96b141f7990ac04c
MD5 17ffa830a97cfee9bc0ca0af0c1b8f70
SHA1 ac8421f29b4c97907fa3c4c09169b2715ac97739
SHA512 7bfc388a895fffcd41c0bb7da6e723fb336c8297a5db52be72a0f02ed4baaab98c3ef221fafadec4b6eb8de68c6ada95641ad420161ddcae519beaab710b5722
SSDEEP 393216:5d+FD9vTMOeTlgn2ZuvUvboE+aWpORRwLJcePLVTEjW:5diMHTlgn24s/jRwWmLlEq
TLSH
T1BAF63382B2C3057AF3FA123C948543D84DA136F835E872237CBDD62F80B55D52977AA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Executes dropped EXE 4 IoCs

pid	Process
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
4436	windowsrepair.exe
1544	Cheat Engine.exe
6116	cheatengine-x86_64-SSE4-AVX2.exe

Loads dropped DLL 4 IoCs

pid	Process
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
6116	cheatengine-x86_64-SSE4-AVX2.exe
6116	cheatengine-x86_64-SSE4-AVX2.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 55 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SYSTEM32\wininet.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\windows.storage.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\PROPSYS.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntmarta.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\SHLWAPI.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\psapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\hhctrl.ocx	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\kernel.appcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\TextShaping.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcp_win.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ole32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\opengl32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\bcryptPrimitives.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreMessaging.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\atlthunk.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNEL32.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ucrtbase.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\combase.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\MSCTF.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\Dbghelp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\Xinput1_4.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\inputhost.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\textinputframework.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\RPCRT4.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcrt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wsock32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\winmm.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\clbcatq.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CFGMGR32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreUIComponents.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\user32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\GDI32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\advapi32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\sechost.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\shcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\version.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\GLU32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\explorerframe.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNELBASE.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\comdlg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\uxtheme.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\dwmapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DEVOBJ.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CRYPTBASE.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wintypes.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\win32u.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\gdi32full.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ws2_32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\msimg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\dxcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\DUser.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\oleaut32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\shell32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\imm32.dll	cheatengine-x86_64-SSE4-AVX2.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Cheat Engine\include\is-7DR7T.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\lua\is-BVAFP.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\winapi\is-AI22K.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\example-c\is-BPOK4.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\win32\is-RFS59.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\is-J9262.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\is-ISC6S.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-9UP4A.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\lua\is-IK8IV.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\is-A43TV.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\pl_PL\is-CTENC.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\pt_BR\is-2M19A.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\ru_RU\is-D5UV1.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-N6QV2.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\is-LH6FT.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\dlls\src\Mono\MonoDataCollector\is-9U10B.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\badassets\is-AIVTC.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-DT3CB.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-APTM9.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\ru_RU\is-VMAQQ.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\c# template\CEPluginLibrary\is-3F4BV.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\tcc64-32-linux.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\c# template\CEPluginLibrary\Properties\is-0B2TR.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\c# template\CEPluginLibrary\SDK\is-FLL14.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\ExceptionAutoSave_noname.ct	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Program Files (x86)\Cheat Engine\Tutorial-i386.exe	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-LNNC1.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\is-TM6EE.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\forms\is-TIMV4.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\lua\is-7FMC4.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\is-270B3.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\c# template\is-PTN34.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\unins000.dat	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-P6J67.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\vehdebug-x86_64.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\tcc32-32.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\unins000.dat	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-KTQ8M.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-M2OBA.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-7SK2G.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-UKFMD.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\ced3d11hook64.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\lua53-64.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-FL4BQ.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-U1EIH.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\ceshare\is-THB1E.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-G900H.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\sec_api\is-3SCR7.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\plugins\example-c\is-27IFH.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\badassets\is-P34PO.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\winapi\is-UEI4J.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\es_CL\is-CFVIG.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\tableobfuscator\src\EncodeDecode\is-QEAU6.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\ced3d10hook.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File opened for modification	C:\Program Files (x86)\Cheat Engine\tcc64-64.dll	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-HN6TS.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\is-FTBMG.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\ceshare\is-V3L7G.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\java\is-4GHQG.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-H8QGH.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\languages\is-4H11N.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\is-SR6OT.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\is-E4O7D.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp
File created	C:\Program Files (x86)\Cheat Engine\include\is-JDH2R.tmp	Cheat Engine 7.6.0 Repack & Portable.tmp

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.1591_none_3e0fac18e32dc903\comctl32.dll	cheatengine-x86_64-SSE4-AVX2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cheat Engine.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cheat Engine 7.6.0 Repack & Portable.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cheat Engine 7.6.0 Repack & Portable.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Kills process with taskkill 4 IoCs

defense_evasion

pid	Process
1304	taskkill.exe
4348	taskkill.exe
2492	taskkill.exe
4576	taskkill.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon	Cheat Engine 7.6.0 Repack & Portable.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon\ = "C:\\Program Files (x86)\\Cheat Engine\\Cheat Engine.exe,0"	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell	Cheat Engine 7.6.0 Repack & Portable.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command\ = "\"C:\\Program Files (x86)\\Cheat Engine\\Cheat Engine.exe\" \"%1\""	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER	Cheat Engine 7.6.0 Repack & Portable.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER\ = "CheatEngine"	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.CT	Cheat Engine 7.6.0 Repack & Portable.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\ = "Cheat Engine"	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	cheatengine-x86_64-SSE4-AVX2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CT\ = "CheatEngine"	Cheat Engine 7.6.0 Repack & Portable.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine	Cheat Engine 7.6.0 Repack & Portable.tmp

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
6116	cheatengine-x86_64-SSE4-AVX2.exe
6116	cheatengine-x86_64-SSE4-AVX2.exe
6116	cheatengine-x86_64-SSE4-AVX2.exe
6116	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious use of AdjustPrivilegeToken 19 IoCs

description	pid	Process
Token: SeDebugPrivilege	2492	taskkill.exe
Token: SeDebugPrivilege	4348	taskkill.exe
Token: SeDebugPrivilege	4576	taskkill.exe
Token: SeDebugPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTcbPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTcbPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeLoadDriverPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeCreateGlobalPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeLockMemoryPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: 33	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeSecurityPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeTakeOwnershipPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeManageVolumePrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeBackupPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeCreatePagefilePrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeShutdownPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeRestorePrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: 33	6116	cheatengine-x86_64-SSE4-AVX2.exe
Token: SeIncBasePriorityPrivilege	6116	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3400	Cheat Engine 7.6.0 Repack & Portable.tmp
6116	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4856 wrote to memory of 3400	4856	Cheat Engine 7.6.0 Repack & Portable.exe	89
PID 3400 wrote to memory of 1304	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	90
PID 3400 wrote to memory of 4348	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	92
PID 3400 wrote to memory of 2492	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	93
PID 3400 wrote to memory of 4576	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	95
PID 3400 wrote to memory of 4436	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	100
PID 3400 wrote to memory of 1544	3400	Cheat Engine 7.6.0 Repack & Portable.tmp	102
PID 1544 wrote to memory of 6116	1544	Cheat Engine.exe	103

C:\Users\Admin\AppData\Local\Temp\Cheat Engine 7.6.0 Repack & Portable.exe
"C:\Users\Admin\AppData\Local\Temp\Cheat Engine 7.6.0 Repack & Portable.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4856
- C:\Users\Admin\AppData\Local\Temp\is-D9E0J.tmp\Cheat Engine 7.6.0 Repack & Portable.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-D9E0J.tmp\Cheat Engine 7.6.0 Repack & Portable.tmp" /SL5="$60192,15529087,145920,C:\Users\Admin\AppData\Local\Temp\Cheat Engine 7.6.0 Repack & Portable.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3400
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /f /im Cheat Engine.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    PID:1304
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /f /im cheatengine-i386.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4348
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:2492
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64-SSE4-AVX2.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4576
- - C:\Program Files (x86)\Cheat Engine\windowsrepair.exe
    "C:\Program Files (x86)\Cheat Engine\windowsrepair.exe" /s
    3⤵
    - Executes dropped EXE
    PID:4436
- - C:\Program Files (x86)\Cheat Engine\Cheat Engine.exe
    "C:\Program Files (x86)\Cheat Engine\Cheat Engine.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1544
  - - C:\Program Files (x86)\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
      "C:\Program Files (x86)\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Drops file in System32 directory
      Drops file in Program Files directory
      Drops file in Windows directory
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      PID:6116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Cheat Engine.exe

Path C:\Program Files (x86)\Cheat Engine\Cheat Engine.exe
Size 397KB
SHA256 5dd11f2b6321f2485cd1ade053930bbff4e773bb32937b014dc05b8e10b59dbd
MD5 adbb093a99f498cd12b18bd0b9b5339d
SHA1 9db13290514a143657f65af8c84859773264b55c
SHA512 815fb63d684ab58a9137fd0ebe22c8dddd0ad50a9fb407c0c2ebb43e3470c28ffb76b6f7074f76993c984673b5d330448ebb2ebb76a703aadee1b48ca8d7278b
SSDEEP 12288:2010wHrzPcHFQjL2CVpGzJ+44EZ8B0gugEnoSE5ju:cwLTclQjL2CVpGzJvZ8B0gugEnoSE5ju
TLSH
T1A2846C21FA01D237C0627DBC4FA995E52A60F9202CA594CB73E71F4F1A79AE03D79709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\ch_cn\name.txt
Size 18B
SHA256 bc1eddbdaf248ffdae109bf56ff950f054bf993ce2bd5bd4b899f3084c8a7723
MD5 5a50f35699333d8cbb47907944cb50d8
SHA1 7a500f7710fc992ffd582db793ce56b2deb14e80
SHA512 cc28d27217b32a317ee0d5cebd05e87206943fe42c992b7a01db047446678db81b402d980b52f979e5c2aebf642e5e6dd75a2cae5558baccde01a52c01364a3a
MD5 SHA1 SHA512

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\ch_tw\name.txt
Size 19B
SHA256 796db1e1a7682ea3b66945683069901219dc393c38af60694799d62cb5ef8c6e
MD5 a976b6601979d764db16e719496dc303
SHA1 475bd05d677945b1aa0853356a8a8a2f5ba3dccb
SHA512 cef60c168efc43bc2323c26510f97e37b112aa87519053d16dbe164aa11c026eb334cebe977b758076651b83879b8f1b51bcf20aff422e9167e629e89ca1da92
MD5 SHA1 SHA512

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\es_CL\name.txt
Size 15B
SHA256 2fc62af9309d993e413e52e28affb872f7fb2f3674f315023a0fdefc151b1717
MD5 fc59d3ba924e9046a9116f9c1ded26eb
SHA1 48d8b7fb7968ab1547063a46babe0142b9565294
SHA512 96464bf4c62422af229d1253e5fd526f58c3e94deb321100775f28bbecfd7493d3c5082e8ac64125707be3308a97544a0cf3306a6b211cd53fdffb6c3ecb4a7f
MD5 SHA1 SHA512

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\ko_KR\name.txt
Size 6B
SHA256 04656c6fe003c7ae32e5e1e82f22fb0e41d765a383ffb95f17934281dfeb7285
MD5 d0bdb3cde477d82e766da05ebda50ccb
SHA1 dec66c5bf0f7fe4cc038ac871def8eb1ac31c146
SHA512 a90f9795a1ffaba67d7d18539fea6574b022c5ec89213f64790eff875ab0677ac2cba31b7a5ace8cbab8d78087f1863aa5374d10c6c31235bdec3555333f1664
MD5 SHA1 SHA512

Submit Download

language.ini

Path C:\Program Files (x86)\Cheat Engine\Languages\language.ini
Size 283B
SHA256 4aa4f0b75548d45c81d8e876e2db1c74bddfd64091f102706d729b50a7af53a5
MD5 af5ed8f4fe5370516403ae39200f5a4f
SHA1 9299e9998a0605182683a58a5a6ab01a9b9bc037
SHA512 f070049a2fae3223861424e7fe79cbae6601c9bee6a56fadde4485ad3c597dc1f3687e720177ab28564a1faab52b6679e9315f74327d02aa1fb31e7b8233a80f
TLSH
T1D7D02B1A2294033438B81179708C9A46B60882291A707E803BCA1909F68BDE923E0EB5
MD5 SHA1 SHA512 TLSH

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\pl_PL\name.txt
Size 6B
SHA256 770341d6e89e04e8bb79afe2847b082492c9750dbe8f43725bbc5ee4afbffab5
MD5 c730389bc8d99e59c867766babdd48b5
SHA1 d011986407b1110e57283981ea38a369075023b8
SHA512 fa8cc6aec9a7b49a266ce50c6123f4580964a3100affa13cd174f2b38583164ae03bb55f563679db9e590584fcd801ac3a396feaccee5a1ea3eb3729f7a0ccd2
MD5 SHA1 SHA512

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\pt_BR\name.txt
Size 17B
SHA256 49d75577c5f311eb3f9ca242bbe386ea97da18d4cf2d6db4e531069b034a4919
MD5 ed8a389f032118fe6f14003561dbd539
SHA1 33f8228b4f271aef80dab1a0ae9f8cd988cceaa1
SHA512 7a247b5a363821560b869b1f33747ba65606d3b06e74b4faa6d2bfe92fdcfd6e7b26d6140e8a3f96983903ca31eecfed2cbd7e1db976d87df362c6d31b8bd68f
MD5 SHA1 SHA512

Submit Download

name.txt

Path C:\Program Files (x86)\Cheat Engine\Languages\ru_RU\name.txt
Size 7B
SHA256 5bcc40adf6e0a2a9c9317f9ac01481271b45ffdd5850d96b562752eee8167b85
MD5 deba6920e70615401385fe1fb5a379ec
SHA1 74ad93cbebf587ac46ab0ef1e3f24139ddd3f535
SHA512 913b7f3434df10d5e274e6cd594dd7020ceb32b6d81c4df05fd652f41a8b69429635526a4c6979f0dda8e5a0d4351c613f332eac0a01c81486a10f9edbb3b15c
MD5 SHA1 SHA512

Submit Download

DotNetInject.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\DotNetInject.lua
Size 7KB
SHA256 31ed4209776dbfad74ec811326439d26c02b6ab653056d5e171d952c12d3f25b
MD5 b5ae011c70c1d26cc31a5d818d60e53c
SHA1 7be6ad86fcc9208d6f21b9f1d464b6334e64922b
SHA512 440b1afc72d671d8aa663b6672371ac365029525ee055cf380a9c9c84625fd5fa2b328110633a183f87cecf8d1d2cacb62e49a7eb382b30aaa75da5b3d2f3054
SSDEEP 192:zuiTTPEYya1gq5jfFEYQhRIA03xB97cq1fvhEN:ztTzyapKRiG
TLSH
T1D9F1DC023F83B5ED1E61D3DE4C59E4C6F380E443AA3A891475DC86772BB84696A7C32D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetInterface.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\DotNetInterface.lua
Size 20KB
SHA256 eae2a91808bb58b386f3bdde75176c7208c22bf5515c5d6e467c583df2e72e15
MD5 04cde30d6aa9999a846b5fc3cfc1f56c
SHA1 2187ab73161ee8a516d25f8295bb4c7e3da2f7e3
SHA512 fb2f27f3981e587ddd379d54999067092dc2fbe2f243e4a49b2f9d4da172907d169bc708aa0840631c951fb01ccb9e69a403eb2e19a5f1aff1be3ff0eec27c62
SSDEEP 192:Rmi4uQRgQgAgm2+CXgSKgKghmg60gGg4tgKplg/Dhrf+1e5l7jTRgzKgIgmoJMQZ:y3KQBHvSo9a452TZ0YgkP
TLSH
T11392EE9D39866AC316FB827477471424F627408323262BD5BE9C8CD1FBB497CA0E97A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MethodInvokeDialog.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\MethodInvokeDialog.lua
Size 11KB
SHA256 d448b049bbe3bc894eaf82a3967e6007954dab833037ac4c6b6353866ee49ad1
MD5 4f948307ea4729956cd96a3d4b8f9185
SHA1 bd98ee0777494584eccea6f53419f88ab64d8030
SHA512 8114cc1ab2b8fd71d72c9ab23a57e372c4dc9ed2933940ff944b22f0a975ded12ced823c938ea7684fc042b3fa6073aa5e17cf3b3a8d9391afa64296eb8880c0
SSDEEP 192:Ta1zikimJM5HLsRFHM7U3H0EbaHEHYCjH7FbYq6RpaHaPH+HNkkBmd/c6RVRH2HB:Ta1F6FEoSZak4CjbFUqmpUeexwd/cUWh
TLSH
T1FC32E1865351A6AE28F1565639C71D26FA104143B308F428BC8D06EF0F77F98B1E6F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpeedhackV3.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\SpeedhackV3.lua
Size 8KB
SHA256 d9620c15a5a3dbc26c8667e476927b0e23975a187ee7332a5fc0cb0a621e4b0f
MD5 65606e40f5144713b22a55c75b309d63
SHA1 70170762ebe26e826fe57940f08fa408d9bc7980
SHA512 ec700b3a19822afe1fe497f7a1e95138d7f5c9dae5dc24db994ff444c94215e5e29bb2dcfe3395433531f141bb72ab7a60cf7094d1edda6e539553c4364a7836
SSDEEP 192:wDFUeTcY7zjT1dsLyY7U/5rNYPg5cl7YHg/Hyd:NnEwLp7cxY+Xd
TLSH
T1E002415A764721724EB3E27CC9431495D30916832ABE0F29F5AD02AA7FB414CE4F53AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addtonewgroup.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\addtonewgroup.lua
Size 1KB
SHA256 96e4429192f9ab26f8bf9f9429f36b388aa69c3624781c61ea6df7e1bca9b49b
MD5 3e20f1013fb48a67fe59bede7b8e341b
SHA1 8c8a4cb49c3b29db2c47f84aafd0416101722bfe
SHA512 99cf3f88c8b06da0dbe8085dee796bec7a9533990a55fbce7524a4f941b5ecf0e8ec975a4b032eb2aaabd116c0804995a75036c98a5e4058f25d78d08a11f3f2
TLSH
T10841A0061B16617524F98BA1DCD33886D31200DB488D092677ACC25F2FF42EDD9B63D5
MD5 SHA1 SHA512 TLSH

Submit Download

android.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\android.lua
Size 2KB
SHA256 2a03bea4f0d207b8707f950ebe1b1cd48a0e85db7a8e7df64e66c1b1bff47776
MD5 39035e57c4e96189929a7a8d00b047a4
SHA1 f0510d6d42506bc3775e9e94661aa8828b4a9b8b
SHA512 7352b129e6dc97074731e9a6e60e72f1d08a7c074ffa980c71fd779667b9a88b8a659ee5793cc112d578161eb1fb8dacbdb5a61f6e4537f46ea7becef71d5bb4
TLSH
T16B41F8021783D72649FA8071643D29558D86260F5CF12B62FD69CBE237FD185979DF02
MD5 SHA1 SHA512 TLSH

Submit Download

autosave.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\autosave.lua
Size 9KB
SHA256 c4cef60489b067c8e7abcdd5594643a27d0720b21523753dd462d53024287116
MD5 40d6bfe593194cf938e19622a3c13a5e
SHA1 761257e8ef492431cf0e04dbca396fabb25fe1ae
SHA512 1d1aaa9de74b0bb08cc4ceced5dbfa4c589347eac098d7ae013d5a1beaae0eeaca4d314e2591560c6df14a93dd4e9316ca317d21efadcca57d11eee72f4c6e16
SSDEEP 192:C64/8dXYKgLNhpwHmFUazyI+Q4Om1q/Qt:t4nHUKUa0Out
TLSH
T16D1284367A03116CBC7A9375B48B4916E222114B18339D78F5DFA0803FB465C56FEBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bigendian.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\bigendian.lua
Size 7KB
SHA256 4541b3e07a2d5e275a8ad09ee152fee2adc2ff870ab9bcc27aa10704cff1115d
MD5 c1aab0e1f8d290a14d3268c72679537f
SHA1 e4ed2e6bccb8ee293422919a935dc8c9d5032279
SHA512 bbfb4f17f16201bf1d3f9421df17c20bbea31aec78ccd16fd60d0f6d70fc9e56d4d0811d8a713aa44499e7c501f43719922c57c53536f044fb9a8462f60e9719
SSDEEP 192:sQJpltyKlR4ZtoOQ9pttWKlR4vtGTQPpMlyFuVCQc6Q0RhBmg:stKY59KYQ5thUg
TLSH
T1F0F198B93E50A6FD0731A7FA548E9DC75241D49620F4078934DE4C3A07F18AE4E7A7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

celib.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\celib.lua
Size 2KB
SHA256 5871f4e9f6c06b5811c1f4b208b5d6869c5191e7cb5540f2b463d01e5541fac2
MD5 32b7d4a723e25334ca4ef93286b8927b
SHA1 a646175bea39b0a13fa4fefecd91478e05755264
SHA512 e7bb29fe2294bdcc992c18bf4f02067cdc3345839808e352c1da2e7faf124d12a36e9c7c23ecd8e521e121615f7c6b582056b6935bdbcb53b4d55968db97c46c
TLSH
T1784150132B3113B6AA728776FE476351E601906B26B20C207CFDC2202F7C25497B5FB6
MD5 SHA1 SHA512 TLSH

Submit Download

ceshare.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\ceshare.lua
Size 13KB
SHA256 1187d02ccc5ed580f5a1a2053466f4a4d8d06fa6eaa7636ff80f6b02abc6f06a
MD5 484a481cf7ce2a96b97027c973a649b1
SHA1 21edf78df530b1016eb1e759517d9b06f47ba719
SHA512 9359a7ea81824ffebf953f4c77950d613be4e06649c4d9faf2ebf4a420f291921529f0a0161dfc230a15858f7615624ea345beee89619f43e244f76df55752a6
SSDEEP 192:p1mSfPL5ThWRM8vLdyWR1hHS/U6stplX7ZbaFYBY6tnGb:/fPjylLXkKW6tE
TLSH
T1965292677542A67D94F2CFB5F8E70451F216404362A6482DBACC40463FB278CE9AE7EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnetinfo.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\dotnetinfo.lua
Size 90KB
SHA256 bfff9915eeaf71c730e4b54d207578d6b203d1545edea9708cc00c8d40f228a0
MD5 12f56ce74cb5dd9e0195b8225874abfa
SHA1 d0ac1935bf01f527262b95c65a28ec85ca9a3eca
SHA512 7b7673a2c2c3b402175029c35ddb132d12a5d48f4b2df5e2edd5a4a4bc4260c61bdab75d87fafca205bef2c0522d8a4a21b7af6cd6e397d754a5ac5139bfa2ef
SSDEEP 1536:yUY5w2LZBaKigkk33YBRX6hT5Od/Wf9zpuzy5AchgL+oSam0WEj:pY5vBa2kk33ERX6hT5G/az6y5Ac3oSaH
TLSH
T156933156354323EB61BA826EA8CA4C02D7132063D45B5DA0BBFC40963F7435CA9F97BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnetinfoCreateInstanceDialog.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\dotnetinfoCreateInstanceDialog.lua
Size 2KB
SHA256 5bd6af2daacc2f10e32216f364ddb63173c492f6798a11fb23d0c5cf539a1551
MD5 66943326aca6622ad030e557906c7d1b
SHA1 735c85d923ac67e7635ca619efe9ab5bc7517bf8
SHA512 e39cc55bfc3ea1236781b69dc4c911986546a9272b8164e827b6be1b4a62901355d60d23215d815c23bbdb4153166ee860120f13d317516254871a61b00562f0
TLSH
T183419F49362363A268FEC29968861D17D3835097E11F5A45BDFC80213FB53B882FA67D
MD5 SHA1 SHA512 TLSH

Submit Download

dotnetpatch,1.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\dotnetpatch,1.lua
Size 7KB
SHA256 c72a22c803731128359a81d4b553c60dfca9cfb6c88efc79fbdbdf6ef5baf2c2
MD5 083979bb5cfcf023a98b3102cd9d9b36
SHA1 5ac8de7b1b6dcebd6a1068e166a6a8922ae181d3
SHA512 d1a1cd76e84631e4466225f87b5337f980b56468ebccb8e8da7bfcb64e6228cc7910abef30523c614687ecfd78b54f20e4d9b3083aff3b961837a27eae4ec395
SSDEEP 192:hG64Cu75bvMPinZJXJe72HXwymhmBEO/66dogk:fjgjpnZJXJd3qABPm
TLSH
T19EF1CE011D03726996BED3AEA8CB144ED3991093217F2D51BDECD1912FB129CEEB93E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnetpatch,2.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\dotnetpatch,2.lua
Size 25KB
SHA256 840e12c1fdd67d07067a9d70a618b8961011efba9a238555882f6c79231ed8c0
MD5 d92ff307a7576a1cef020dd4d34a5369
SHA1 9393a85e384db8d0be9540c12f923fb3557a6358
SHA512 d0d5de70dd0be01b62038b74c5538a0de609f578f7722b6c53ad7b1ccc43618a01bb551604a676bcbaa92af50517857f13d10a0f741a727b6ff78776b19d4277
SSDEEP 384:xenaENZaoAPNfOr1R4hDd5KSI4AKayNvkxgqpqThH//VXxOU+a8:UdFAPNfOr1R4dd5KSISJlqpqTNY
TLSH
T1F9C2A806361A5A7120F6C2AD799B2C03D7E5468322BF0A3579DCC2923F3539CE6B57B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnetsearch.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\dotnetsearch.lua
Size 15KB
SHA256 9dcceba54c44940f7d97b971f61eb6186055eaa389ee4d4d399f106750f17c85
MD5 a61f01399e3f91c1fd879ebc25c48f92
SHA1 ebac47e5d09229d4a27b3542e9de65cfb884e47e
SHA512 c6bb30d75669751a3af1e701b170d0c688975945cbd2384926505d45e989b1d37f98499520020531c3edd304fa41377e36dec093c152e9999cb00e796ac5c070
SSDEEP 384:fTJbJcJtJdJtJFJAmDF3zY0PLTuHr7tIutT9AT0HqkVWAcK3wMexR9WnraIeBXjJ:LJbJcJtJdJtJFJAmDF3zY0jTuHrhIuFG
TLSH
T18F620F27650012BAB4F3867D2AD3A88AD612514399931D54FFEE80823FB43DDA5F43BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

export128x128.png

Path C:\Program Files (x86)\Cheat Engine\autorun\images\export128x128.png
Size 1KB
SHA256 3e671ac6a8e77f11b4c6547cf810bc06327e84961c7657340f5ca0f622a966d9
MD5 a9bcd80603fbcf041bc462918ca48a64
SHA1 a7908250f042b3454d8ddcb5cb20e569839be135
SHA512 ce82c8caaba0329656c26efd5f7c86a0b35a161856b975c9918fd1cd503b32b133d6f0b01dafb92aae132dd4c19f23c7349bf146123554700e05aa94320fc0af
TLSH
T14931EB21697594F892CFA896534DE1405F5CD65154DF1C226BEC31303044FCB4A9087F
MD5 SHA1 SHA512 TLSH

Submit Download

import128x128.png

Path C:\Program Files (x86)\Cheat Engine\autorun\images\import128x128.png
Size 1KB
SHA256 4923fbf164d8dc0111e28dc1864bac8ca2503fee2b7a688845b4616465529ee6
MD5 660d8acf876ead3b985f9df515160838
SHA1 78a858326c16fa917c4a5284a606b824f025af00
SHA512 81bff98bce7cc6ee066fe8e1ab1fa957e56c62084a33d879a87ca22afdf6d88012f1ecdf5dcf2493d816b96dd08073782f31f36da9bca37c53fc81ccfab1e17a
TLSH
T12F2111505751044FAB8FAA68009F56FE72D62DE12C12C41734E861BB7654D7D668C361
MD5 SHA1 SHA512 TLSH

Submit Download

java.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\java.lua
Size 84KB
SHA256 24281af45e46678a8a669a822f9eeddc490aadcc9f4dce6cfb21d639f270e671
MD5 ba03de9495fb51e37d133df5b2253085
SHA1 2444cbe61869f7da300455b4bc55d2c1c1b2ac26
SHA512 b89e2cb7e647f9ec1e7728312bfdb9ce33f3621ac8e3db8b195407b87bab67390ed22fecd19c7f3c89cb08396fec1c25ccca6d6d6d2686fc078e9ab2a8bda16c
SSDEEP 1536:JiRtmZhlpsM/bMWohLZWM0h5G87N6F7MCjLmQ3cRCJdGwLDxIB8BFC+N/0ENjokk:JiRtmZhlpsMFM0q87efmQsYBFC+N/0Ms
TLSH
T1C183E557680B11A155F3C3B26C9B480EF3A49023653B5A98B1BECD523F7820E55E6FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaClassEditor.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\javaClassEditor.lua
Size 52KB
SHA256 4f0e7249a20147fb1e364b5b182d990e6d00bf6a2624edaa368b65142dd08408
MD5 96a64006f752ecd75faed81f86212f93
SHA1 1889ebb9c206866a7096f6ecd5b7cec628dcdcbe
SHA512 01f01661b7c8dddc2940fb8a6e3384c5bebd1560703e510e7ec029a294aa0a49486b6948851d99c01594cbddf75295d2f38ab4c1e7760afa3e40b15151b0fb2b
SSDEEP 768:kR7JxiEJ1FwKp/UnSkXZh/GZPbZ1/GZU29s4dwHvuhWaPg5jys9:Oiqp/UnSkXZh/GZPbZ1/GZUWm9
TLSH
T17733538A0D03B49159A783479FB10A1EF63C0153702A50987DDE4F963B6CBAE85FFB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaclass.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\javaclass.lua
Size 17KB
SHA256 acfb9fda20c347d8b7b2e513d38d2692bd054ae90b88e846460e66b986dd8d1c
MD5 e4fa493cbf4f5e932dce648a78800616
SHA1 b82c12b23ae06ac07ae61b0b599f055dc879c949
SHA512 e0c4b9b757d4f38dbdb2c5ce11fa27ee742eda97a20f098d38300c8dcf27015d5cfc8bfd658b6a7f48cfdece9645da633c32b18050598a368432f7b026826823
SSDEEP 384:zGYmhPbvqKlu2uzKCM/muwu5gfMs5eQVQgQ2GO:zGkKl4zm/mhR
TLSH
T1A782B6C61D0AF1411FBFF1B0696E5C1AC281B637913A0A85F0BDC682367C92D35ADE2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javainfo.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\javainfo.lua
Size 29KB
SHA256 bd0e311d1c4671d5c50b6cd9165b9f61919d2e0657b946ce07017df74b10a029
MD5 f0dc3df0b926b26443efbdf821a6c6a8
SHA1 a4240b55aaf05df1c4405d68087a715f34fdeaa3
SHA512 0d3603a4908e44cd848fe091413db4d644546fc95d35074caa45b0c18106c34cfa0615e37c665af979bd652b40ddcccbf8b2e5eb770c722e0f3f16f579ef21aa
SSDEEP 768:sjAGx0Dm1lZcrF2RhrOOKZQLDyNg45xGtXAK2lc:BDQZcrcK9pxe
TLSH
T127D25613260A19E175FA42ECB88B0D06E7526283A55B9C60BDFC44963F7830E6EF537D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javasearch.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\javasearch.lua
Size 5KB
SHA256 3a1c8f5e7bd2b51ebbc154aec1eecf6dc3452d417c94b3e75b58d75f5befcb19
MD5 fe7ccbda0814567dec39734c80ae9dfd
SHA1 c6fe6073f8ecfde4fcec719ab9d28a3d3e07c55d
SHA512 c59c524c5d63c5c3992a095848414ab8178d4f3b70e12d036c0f3314bc589307a039aaa77ff2191cce7794933e3aefb34fc46e3a732817f2aa7988d4f52cde7f
SSDEEP 48:+tf+HuQNVqXkYVq+fh5o5VLRRxBjK5VxcfmyBKy+Y5fatfqMIInXqMIIInt5HFdO:+f2eSy83LRR78VmFBh+sa8Vh9Lbg
TLSH
T137B1BD56680209BA3CBB837E68C26C95EB231247520B2C157EFC50917F78F6D69F8338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luasymbols.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\luasymbols.lua
Size 629B
SHA256 c5a35380af8bebe96b85377f5f41f8c068cb857c74b9cb85b7467b35c1de10c4
MD5 df4d243ab0407a1f03ccf448232fcf62
SHA1 62453cfa7abf6fa83158be1ba86c854d9a6b7d4b
SHA512 4b05b65909673e92f59ab64c1ff4e0b829f5c9085eafa1fff28cb0ccd7e6a7f6ef031633f443e0ba156a4b8f5009f526d0356f39ef77b22706f98f100b1909c2
TLSH
T121F02D746582D1B69BF1E3BDDC4B7802F1595A83116D0024794D01D1BFB06CC6BF4E55
MD5 SHA1 SHA512 TLSH

Submit Download

modulelistscan.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\modulelistscan.lua
Size 2KB
SHA256 1f11078b143b92612822f3dfc09d93778471198f203694c8fc911e249fbbc557
MD5 ca347def8a682d2adf951c4ecbabd948
SHA1 c65bbc8a5106e9ace9ddc450ec3a5f637704fa62
SHA512 9f7a08822d9357af72a27707c17fc0d3ec03e72333d88e2ba8e2be95eab7ba9c1b33ea3e2e20d734c382f4732f77443d3aa9c189667a74195987f5db486e2651
TLSH
T112417D9562272BA315FE95BAE8C7180AC941E0D3D4B614D2B68CC9F03F7009C64F573E
MD5 SHA1 SHA512 TLSH

Submit Download

monoscript.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\monoscript.lua
Size 174KB
SHA256 8cb8a4aefda335db96443c7982e8dc84de40987e8bfa2a83f4ef48c7c3eec522
MD5 4112d15cea9c31ac0e8bcf30ae6b9e78
SHA1 7502242a67defb030a1e21821e4c1afe64c98e49
SHA512 b6bb931f5693bc9b28beda083412133c1a852858e84b3b1fdd1f5d46b0bcd628a145bad0f29ba260dfd36b9625e14b8a41f79181a21952b65a73e3bbb9080184
SSDEEP 1536:SvHC3SGMB50JN3irlCkzPEZLo6hohIP3C/vEb36nhZ:9qwilzP6al
TLSH
T1AA049625640272B26AF7C7746C8B1406F3214053612A1A25BDFCF8A63FB435CA6F5FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

newdefaulttemplates.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\newdefaulttemplates.lua
Size 1KB
SHA256 cf5f24b53a080577b41ccf238bb97040e20dfc6720f971fa161ad272262cfdb9
MD5 be96f94cc10a66b56d27c2f90aeb00ad
SHA1 9cca04873c522ebcd0ca370415e70d37065517ea
SHA512 1ed203b82896f437e55c73924e9792afaef04477096d7b5c6ae402b2207ed5055e5973e9ffc247b04188d26fecfada209f135ab8dfd14444148392ea393f593b
TLSH
T13241BD563D03B32427F69226C8EF3058E2660193A59A2553B5FCC1962FB520CEB6433D
MD5 SHA1 SHA512 TLSH

Submit Download

patchscan.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\patchscan.lua
Size 17KB
SHA256 720572b426b1ca8e477d122cfd99108bd904431bee13a4c89a43f1224f2b954e
MD5 b757e0500a7b936af490fc59761a39f4
SHA1 9568063ab56b92525a2557175ecaafc6371c3ed1
SHA512 2d5ce369780fc51a61113ce16dc6254e68c6cef31bafcdbb069d5a2d24ea28687f036c75a4580aa3333d08f40027da16114ecbe498a835ef697e627cf1e21953
SSDEEP 192:02/2WiurcwWJsFH1bukLWmHwt/5B9ndDiC4fVAslnlKQ8gLIeHkSD/nTVxVkB8CZ:HtWIBugO8ieHkSDfTVTnC8i+lLQC/6
TLSH
T12B82305A174E226160FB8BB6BEC30E0AE2264057052F2E49B6BC41D03F7136D5DE67BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pseudocode.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\pseudocode.lua
Size 7KB
SHA256 6704bef60f60f85e76aa19b96a43aca74c4aa8905b4033a20c24b75171b33d0a
MD5 2be703bf1ff1ea4dd6d1eff673367e48
SHA1 13c122cfd7eb38d298fa91f3d6021f025578b508
SHA512 e1fc1c55574f5fecef535734a23db9738d4c5762e085dea721f9cd7f5f9f364dd1428f669f26149f1e49414f38a4c00bc7fd4f5e1a5c03a0e53b24c859b25c5e
SSDEEP 192:K9yd/VQilJ6HLwxxKF9Znu8KX+qNdYSnatJoqVSQPFLqJ4:K0VPlJMgNdYSnatmqVSQPFLc4
TLSH
T1F3E12219266260ED1EFBC1B2A8AF0B79E363414708160683F5BDC9913F3851D83AE73D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pseudocodediagram.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\pseudocodediagram.lua
Size 58KB
SHA256 e1f875083e13f376979eb358852d1172e93ff986127ca4334d12836ff077c23c
MD5 08011ddf131669d05e0b2bb65c7be1ae
SHA1 5a8bcf5d1bc8bf57338d006e089405d3feb65783
SHA512 d5ea901a9c598f9e9e523239dce922b102d55fc7d2e8c10e0811addff2f8a1689c6480932222eae690644b1eec07b7a3642b633f517b0d511b224fec25585775
SSDEEP 1536:SDN5O8ZQVIVPW3R89MvhbxjGkT8g4Ahj26:SDN5OKPW3W9MvhbxjH+D6
TLSH
T181432D1519311DDC27FA42A2AC9AD9C4F211C0863E2E2AD4F5ECC087DF78DAD46B5F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

savesession.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\savesession.lua
Size 9KB
SHA256 bfd1837226fab3d6249ea7569c2c8905063bdfb9aa40b263ff71a21eceff5cdc
MD5 4476b0142501b0d53d51d7df59491165
SHA1 1c4f896399b8cd65bdab0581b7d57f439c961ffd
SHA512 52c6a0de03f0b901ba1498b24753fab26524b38abfeded65ce67a4f5e7cf866d0ed35dcbc6f543b9c8b00c8c13dd652b8d5193ed240b52ac6981cd6cd5e1ec76
SSDEEP 192:b4Q3fODrnk5VtS+Xp7SjCjMZL6/SCXN8mmtS+jwKtwTZX:bsD7toA6/dMbtwX
TLSH
T13B126216250B11B578F192B17DE31C0DE3258093E9361A14B9DC9C206FF4B8F6AFAA7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

threadsafegui.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\threadsafegui.lua
Size 26B
SHA256 8b661a0dcac8454ec5e213b332ccd14e2a85fda9f076ef8ef752f0a8ff792bfd
MD5 52dfb7bdbadd7775d0479bf916cffcea
SHA1 e753a9f67021276f6abbf541373522391a8e9f39
SHA512 d64bf8e7564569f051c1fca0906827e62c4d295ae9a8ed6120b051e16f81629f5b3d5e294e836ff261e33876c7aabd0feb2d06a5e35dbecc00744700da132ef5
MD5 SHA1 SHA512

Submit Download

versioncheck.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\versioncheck.lua
Size 7KB
SHA256 566a9405dc4d9880fd0da41bcb35ede0bd39d7ef9103f4ed81603b122504d807
MD5 99dca5dbb6ef0117b70d71e42d51034c
SHA1 16786f508727f4b8b290a304359b4b32af92ffc2
SHA512 278cb61d11e1ae1907da31f9c2d984506bf6ed8537c49ce4497a2191f6d7c4efc9232d4f1fdec85cb841e25d3a0ffe6ff2fab29c2fabb55d56d2484747d4e9e7
SSDEEP 192:J+/R0h8p0wyUYCCTLysSULfHMHwjuFHdqFB2i6uMPV:LWBULsFEr4V
TLSH
T1F7F1F147A20B42F53BF153699A0E48A5D73581531327A0383AEC44810FB9EDCA2EA7FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xmlSimple.lua

Path C:\Program Files (x86)\Cheat Engine\autorun\xml\xmlSimple.lua
Size 5KB
SHA256 05258e280f53c5905ae374f808f4383cfd0898f6e620d875136edeb0fdba34f5
MD5 274946677cb1fb1c63a04aeb641e21d0
SHA1 b4c71b59792773f20878e3ba582331cf4ea7d592
SHA512 aac74d0da491ac3e9465964a3861f93eacd63d2c445c1f235fed444f60f9ce19d3bf5069bd012ae72593516db96ca4a0fdfa07e83218466743551cbf1a6a64ef
SSDEEP 96:j2S/HgQOsILKD/nMed210naDVOPkkmVBgB+CPcGhJpl:j2iHgQOsILKD/nMed210ngOPkkmVBPG3
TLSH
T16FC1F30ABD41A560B9B2D2699CBF2404FBB60143457881F1BD7D81802F3542DA1FEBEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cheatengine-x86_64-SSE4-AVX2.exe

Path C:\Program Files (x86)\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
Size 16.4MB
SHA256 3db0495c1bd9b513dccdd824cbe23c24da2b660275ea42e5894d62c2fd596583
MD5 a0c9caeb18d2027cbd08866a94069c34
SHA1 4d8bd49702f7811f8f580eab7f954cf2d350497f
SHA512 681a0324362f27d91837f457d54cf3935041c654c86b17066158330dc8559605f9e6608608454dcf799dc1ca5ef4a112fe78ef00d7c9584cf810358a7881ffc8
SSDEEP 393216:ubNWjlR/rJZ0ueu7UbqFiSQSDuQ0DA1Lw87:uwj3UbqHsAZw2
TLSH
T1A3074CBB72619A98C0CAC1725597CBE26F31BD2408B5134723D5331E9FF68805E9AD8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lfs.dll

Path C:\Program Files (x86)\Cheat Engine\clibs64\lfs.dll
Size 125KB
SHA256 4ee8d3375f2eeb8e5afb230d13c2cf9ee0379b0edfa76ad8dbf5ebc686a629c1
MD5 5e8ad34ff069b6a2e1ae00bdfe96b612
SHA1 3c83aa3ebd95d9a060ed1f06e236e046c6cd93a7
SHA512 54404199c3b5b3597dc8fb5a6e3c6772f2729045aa5c9aee648c4306358481def2bc15538899ab5e0f5e33d202cec863348830a090b144e00d1662ccf4175828
SSDEEP 3072:BzlRkrowTiYa0u6lQUf3V/4MSfayysXZzjGRobJy:BRylTHa+/yMByyupY
TLSH
T1F1C36C4773E101BBE467E638C9A34905D7B2B8570634DB8E03A4425A5F633D1AE7EB32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

commonmodulelist.txt

Path C:\Program Files (x86)\Cheat Engine\commonmodulelist.txt
Size 1KB
SHA256 cddd0f35f7351e6f19486ccd7eee5d31f0134c5c3554a12c7d51131dde8e29cd
MD5 cc0f8b66bfedc67da8dbb2a7df2aa006
SHA1 c6d86cc43a042581e389dc9a28affddf64294ac8
SHA512 a4aec40ac6bea2adacf15829aeeebe66117473a542303024669a828710c6afd072c0f4890a6a334b35ac894a1a80a5bdd5e91a6ffcb7149540e304117a7e5800
TLSH
T1DF41498EE3943D0D12257A964507BC8DE87701277763B7F81C6A46EA2637437558503E
MD5 SHA1 SHA512 TLSH

Submit Download

defines.lua

Path C:\Program Files (x86)\Cheat Engine\defines.lua
Size 12KB
SHA256 82e8ef7df20a86791cef062f2dcacb1d91b4adc9f5dea2fd274886be8365b2f8
MD5 62e1fa241d417668f7c5da6e4009a5a6
SHA1 f887409e3c204a87731f317a999dc7e4cc8d3fcd
SHA512 2283cbb9e1d5d53ad1ed9bc9db6034fb3c53c633b11001f373523640bbbba95da9a3a0866c7d5fa0620facab7d18c8577dfd69496fc7319e0a4a74d0b9e10c45
SSDEEP 192:0egHuderGTd4G9mSZk/8fdtINfbLmJFcSC5xm+9qh07EBS5pekFrLUK80u9ETxst:AHuderlSZk/8FtIF4umMqEpDg3fT
TLSH
T1C942945D09960137483F5E572DC6422589C07E1D85C0EAF2B6DE4EECAFE136886B5B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua53-64.dll

Path C:\Program Files (x86)\Cheat Engine\lua53-64.dll
Size 1.1MB
SHA256 436f6bf9ac414e7e7259bef4f6e287702a41e1fddbdd9af7d43350d47539a3c9
MD5 b2d53e47d838cf917f90a9a6977c31e0
SHA1 7189c2dc9aa6136ca5f210b5ebd242d3491a91fe
SHA512 1efe3b14d7eac03ad7f2286ca42fbe235481195fa5906b3068dd97d4b4f5b2f9517cdcd78b6907794f6d2979944899ec97dcaae495077282b791260c41aaffe4
SSDEEP 24576:Px5ACjuRUvIY5cfisR23K16TpoJol/nj30sIcqqD7FE5sF8+:PgCYUG2uCFwsT
TLSH
T1EC45493432A810A6D17AC17DC84B4BA6DDB0300A573C55FB5195C6E4AF237EC2B7EB62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main.lua

Path C:\Program Files (x86)\Cheat Engine\main.lua
Size 201B
SHA256 5c16124ba0b39214becb1af4161bd82147ad8468879a3fd8e9facc656a1d2e6f
MD5 62771a63fdc87764bff87d82918ab02a
SHA1 8e468ded8ced87a10470bd5594337a854ff344ba
SHA512 8d1792b712504336cac0b175146f2b7eaeda043bd3941c7b7c54cf926a4ba4835f0eff7a2ad5c7b5509f80e7420c3f5f94200d4c3f922db92b807e20e09a84d0
TLSH
T18ED023FF4D9ED344501B8145111F80111010DD672003534234FDF44D7C72CE923728F4
MD5 SHA1 SHA512 TLSH

Submit Download

windowsrepair.exe

Path C:\Program Files (x86)\Cheat Engine\windowsrepair.exe
Size 262KB
SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
MD5 9a4d1b5154194ea0c42efebeb73f318f
SHA1 220f8af8b91d3c7b64140cbb5d9337d7ed277edb
SHA512 6eef3254fc24079751fc8c38dda9a8e44840e5a4df1ff5adf076e4be87127075a7fea59ba7ef9b901aaf10eb64f881fc8fb306c2625140169665dd3991e5c25b
SSDEEP 6144:0drkqKo/nt7PrwnoK0M6EZgugEkkoSE5O7Z3LLr:6rkm9mP6EZgugEnoSE5OB
TLSH
T167446D56AA13C37BC5837EF84BC486F157B1EA142D3590DB32C60B2E6A75FE02F25219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

botva2.dll

Path C:\Users\Admin\AppData\Local\Temp\is-7SA46.tmp\botva2.dll
Size 41KB
SHA256 ce30b37b27cbde551299549999bd0fa5ec880107e7b698fe9ab729a1d657547e
MD5 4f5fed49f041993d76aeb65e66122f78
SHA1 75745706b8e37f4e5b7db5cee70302ae5acb2b2d
SHA512 5fdbe7368cb0eec00fdf61fa85ac05da5e88babc690b2448e51886045f96fc0affa7bd275e851b1cdbe423ca7d30d9e1aa83519d915f5dc446b08a6a371cf4e7
SSDEEP 768:SyNq+QImctzKKFyAE/PFqhezqSQrvYt4lYVuW0zMo4QHVoWyQK7Oem8PU:lNq+QWJ7ds80mlde76
TLSH
T1DB134B61D9E2C030C096DAFE6D34E215A36F3D001F264BB95A9D6ECCEE5BD43641C167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installable.png

Path C:\Users\Admin\AppData\Local\Temp\is-7SA46.tmp\installable.png
Size 32KB
SHA256 f0ee3bde98dfe0549c8da7ab508e5f367b6d1517c5cb972172a4a189491a3622
MD5 fe5cdb98a7abb6b1dd01e86d24b9eb08
SHA1 18544345d81157b2c4eef0feb2ca792f3ec569af
SHA512 bc1ea918de369efdf7fec11a573039565009e9a2597b972eb590e9678ac55de77afec53846ae300dbd30b223dcdd59299f3b2d70535803b6b5820745fd20c287
SSDEEP 768:s4Nadv3oO0ZoBurY8onxr5vEkTjn0CEPTSxIEWd7c:sKadvYO0ZMuA5NE4nW7SxIDd7c
TLSH
T127E2F10444A3DD84AF9DA64DA5D8139AC737C98480D3F1B0AE4FADA63F76462522F3D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portable.png

Path C:\Users\Admin\AppData\Local\Temp\is-7SA46.tmp\portable.png
Size 32KB
SHA256 be3006534b86c4290c9f6afe6a69ffcd6255f283299bdd64289792424d24014b
MD5 655f487dcd34c1ef5612a9e995c09ac2
SHA1 577519780ded4de6dac7a5878ed5b628b8d9d947
SHA512 fe3ef22ba13faa9fe92f58d2452061bff6596d7d03deb7359f8cd4f1ea97d90cdc8810ec6a40a296c73bdc9bd92621fc70d0729afc058c331747b477797f298c
SSDEEP 768:s4Nsy60AfM35w/l/7nnq+jxvHMVECOA9k/HsG+J6DkO:sKdpb350TnnqaxvHMVEQO
TLSH
T120E2F1C5FD9AEDC0220F5787754AA0493FFBC3F8A7840900AEAD9445DB54ABECB4469C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cheat Engine 7.6.0 Repack & Portable.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-D9E0J.tmp\Cheat Engine 7.6.0 Repack & Portable.tmp
Size 1.4MB
SHA256 7eec6162023108411f9da921d28a525af1fbfcdfff7503425806a6bbf26135b5
MD5 fb261087747a12933a785e28f7aa1dea
SHA1 3b3656a8380626439c116fbb9cd810e81fe6ac11
SHA512 2fefb7c4bae4cc831fe6b165369aaca2f98db5385ed059d17f8a628a9230a841d0458e0d1bc907eedfd6328164d304845a4f72267f4d46fbfcf0a7c64730f715
SSDEEP 24576:IH9/gqpQYze0XKvc4BYCsCS3D4kjiIUjyeyXEDq8UbVlc3GYgl4KvjKFexL+T:QIEJxCWluyZ8UbM+u
TLSH
T191654B12A2A28833E1733F359D2B86946C367D642E74988B3FF45E0C0E79B417D39796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3400-825-0x0000000000400000-0x000000000057A000-memory.dmp

Download

memory/3400-17-0x00000000074B0000-0x00000000074BF000-memory.dmp

Download

memory/3400-28-0x0000000000400000-0x000000000057A000-memory.dmp

Download

memory/3400-32-0x0000000000400000-0x000000000057A000-memory.dmp

Download

memory/3400-266-0x0000000000400000-0x000000000057A000-memory.dmp

Download

memory/3400-6-0x00000000024A0000-0x00000000024A1000-memory.dmp

Download

memory/3400-29-0x00000000074B0000-0x00000000074BF000-memory.dmp

Download

memory/3400-30-0x00000000024A0000-0x00000000024A1000-memory.dmp

Download

memory/4856-27-0x0000000000400000-0x000000000042E000-memory.dmp

Download

memory/4856-827-0x0000000000400000-0x000000000042E000-memory.dmp

Download

memory/4856-0-0x0000000000400000-0x000000000042E000-memory.dmp

Download

memory/6116-824-0x00007FFB73400000-0x00007FFB73592000-memory.dmp

Download

memory/6116-879-0x00007FFB73400000-0x00007FFB73592000-memory.dmp

Download

memory/6116-882-0x00007FFB73400000-0x00007FFB73592000-memory.dmp

Download