hxxps://cheatengine[.]org/

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
166s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cheatengine.org/
Sample260729-vtedkaybqa

Score

8^/10

defense_evasion discovery execution installer

Malware Config

Signatures

Downloads MZ/PE file 3 IoCs

flow	pid	Process
104	1916	chrome.exe
105	1916	chrome.exe
110	1916	chrome.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation	Cheat Engine.exe

Executes dropped EXE 9 IoCs

pid	Process
4820	cdm.exe
4320	cdm.tmp
3548	CheatEngine77.exe
3556	CheatEngine77.tmp
3408	_setup64.tmp
5520	Kernelmoduleunloader.exe
5640	windowsrepair.exe
5180	Cheat Engine.exe
5464	cheatengine-x86_64-SSE4-AVX2.exe

Loads dropped DLL 4 IoCs

pid	Process
4320	cdm.tmp
5464	cheatengine-x86_64-SSE4-AVX2.exe
5464	cheatengine-x86_64-SSE4-AVX2.exe
5464	cheatengine-x86_64-SSE4-AVX2.exe

Modifies file permissions 1 TTPs 2 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
5620	icacls.exe
1008	icacls.exe

Stops running service(s) 4 TTPs
defense_evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002

Checks for any installed AV software in registry 1 TTPs 9 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\Avast Software\Avast	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	cdm.tmp
Key opened	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\AVAST Software\Avast	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	cdm.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	cdm.tmp
Key opened	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\SOFTWARE\AVG\AV\Dir	cdm.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 48 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SYSTEM32\Wldp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\MSCTF.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\msimg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wsock32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\textinputframework.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreMessaging.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNELBASE.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\combase.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\user32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\comdlg32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\kernel.appcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\bcryptPrimitives.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\PROPSYS.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\SHLWAPI.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\winhttp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\hhctrl.ocx	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\dwmapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\CoreUIComponents.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntmarta.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\shell32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\uxtheme.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\wintypes.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\apphelp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ucrtbase.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\RPCRT4.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\gdi32full.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ws2_32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\GLU32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\psapi.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\oleaut32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\GDI32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\advapi32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcrt.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\winmm.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\clbcatq.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\msvcp_win.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\sechost.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\ole32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\imm32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\shcore.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\imagehlp.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\windows.storage.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\KERNEL32.DLL	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\System32\win32u.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\version.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\SYSTEM32\opengl32.dll	cheatengine-x86_64-SSE4-AVX2.exe
File opened for modification	C:\Windows\system32\explorerframe.dll	cheatengine-x86_64-SSE4-AVX2.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Cheat Engine\is-6KPDA.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\sys\is-GOVQ5.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-KFAA6.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-5VPA2.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\allochook-x86_64.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-56E0E.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-5TKS9.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-U5J75.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-9SCO3.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\tableobfuscator\decoder.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-DLESJ.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\forms\is-0HD5J.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\winapi\is-TF094.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\is-P3HCC.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\tcc64-arm64-linux.dll	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\d3dhook64.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-25VNM.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-DVC83.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\lua\is-KCO4A.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\luaclient-x86_64.dll	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\libipt-32.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-KM3V1.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\sec_api\is-49005.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\winapi\is-1AU2L.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\languages\is-J327B.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-A6MH3.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\win32\is-CBT7V.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-14KTQ.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-9B6OL.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\languages\is-QH53N.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\winapi\is-M724R.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\dlls\is-0KO50.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\win32\sqlite3.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\tcclib\is-E9OFB.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\lua\is-SCM5J.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\lua\is-EH2FG.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\example-c\is-9CAM4.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary\SDK\is-3FRBK.tmp	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\win64\dbgshim.dll	CheatEngine77.tmp
File opened for modification	C:\Program Files\Cheat Engine\autorun\dlls\MonoDataCollector64.dll	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\Extensions\is-AUKSV.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\custom\is-KF80J.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-QQQVD.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\languages\is-K8S9M.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\is-K92MM.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-VHTOC.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-2A95K.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-P5TTN.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\win64\is-F5QDU.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\forms\is-9MF2L.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-QCB6E.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-OM31M.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\dlls\src\Mono\MonoDataCollector\is-28RH3.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-L3V3I.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\is-O8PPG.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\sec_api\is-BNID7.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\languages\is-HLPF2.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-O05KD.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary\Properties\is-4M5QM.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\winapi\is-FAKO3.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\autorun\is-N8AF7.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-CCCV1.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\include\is-HQMT8.tmp	CheatEngine77.tmp
File created	C:\Program Files\Cheat Engine\badassets\is-8CCRD.tmp	CheatEngine77.tmp

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\comctl32.dll	cheatengine-x86_64-SSE4-AVX2.exe

Launches sc.exe 3 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
2168	sc.exe
3200	sc.exe
2252	sc.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cdm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cdm.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CheatEngine77.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Kernelmoduleunloader.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	windowsrepair.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cheat Engine.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1916	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 8 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/files/0x0008000000024382-212.dat	innosetup
behavioral1/memory/4820-224-0x00000000003B0000-0x0000000000499000-memory.dmp	innosetup
behavioral1/memory/4820-255-0x00000000003B0000-0x0000000000499000-memory.dmp	innosetup
behavioral1/files/0x0003000000021f4d-340.dat	innosetup
behavioral1/memory/3548-342-0x00000000000C0000-0x00000000001A4000-memory.dmp	innosetup
behavioral1/memory/3548-383-0x00000000000C0000-0x00000000001A4000-memory.dmp	innosetup
behavioral1/memory/3548-1522-0x00000000000C0000-0x00000000001A4000-memory.dmp	innosetup
behavioral1/memory/4820-1785-0x00000000003B0000-0x0000000000499000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	cdm.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	cdm.tmp

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298190159611505"	chrome.exe

Modifies registry class 16 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\ = "Cheat Engine"	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{0CD1BD97-2B28-42DB-B132-E51259B8FEF2}	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine\DefaultIcon	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon\ = "C:\\Program Files\\Cheat Engine\\Cheat Engine.exe,0"	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\CheatEngine\shell\open\command	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command\ = "\"C:\\Program Files\\Cheat Engine\\Cheat Engine.exe\" \"%1\""	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.CETRAINER	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command	CheatEngine77.tmp
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER\ = "CheatEngine"	CheatEngine77.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.CT	CheatEngine77.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CT\ = "CheatEngine"	CheatEngine77.tmp

Runs net.exe

Script User-Agent 3 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	141	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	143	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	255	Cheat Engine : luascript-CEVersionCheck

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
1284	chrome.exe
1284	chrome.exe
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
4320	cdm.tmp
1284	chrome.exe
1284	chrome.exe
3556	CheatEngine77.tmp
3556	CheatEngine77.tmp
1908	chrome.exe
1908	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5464	cheatengine-x86_64-SSE4-AVX2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe
Token: SeShutdownPrivilege	1284	chrome.exe
Token: SeCreatePagefilePrivilege	1284	chrome.exe

Suspicious use of FindShellTrayWindow 59 IoCs

pid	Process
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
4320	cdm.tmp
3556	CheatEngine77.tmp
5464	cheatengine-x86_64-SSE4-AVX2.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe

Suspicious use of SendNotifyMessage 44 IoCs

pid	Process
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe
1284	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1284 wrote to memory of 4132	1284	chrome.exe	85
PID 1284 wrote to memory of 4444	1284	chrome.exe	86
PID 1284 wrote to memory of 4444	1284	chrome.exe	86
PID 1284 wrote to memory of 1916	1284	chrome.exe	87
PID 1284 wrote to memory of 1100	1284	chrome.exe	88
PID 1284 wrote to memory of 1100	1284	chrome.exe	88
PID 1284 wrote to memory of 1644	1284	chrome.exe	90
PID 1284 wrote to memory of 1644	1284	chrome.exe	90
PID 1284 wrote to memory of 3316	1284	chrome.exe	91
PID 1284 wrote to memory of 3316	1284	chrome.exe	91
PID 1284 wrote to memory of 3664	1284	chrome.exe	92
PID 1284 wrote to memory of 3664	1284	chrome.exe	92
PID 1284 wrote to memory of 224	1284	chrome.exe	93
PID 1284 wrote to memory of 224	1284	chrome.exe	93
PID 1284 wrote to memory of 2996	1284	chrome.exe	94
PID 1284 wrote to memory of 2996	1284	chrome.exe	94
PID 1284 wrote to memory of 3240	1284	chrome.exe	95
PID 1284 wrote to memory of 3240	1284	chrome.exe	95
PID 1284 wrote to memory of 4548	1284	chrome.exe	97
PID 1284 wrote to memory of 4548	1284	chrome.exe	97
PID 1284 wrote to memory of 2440	1284	chrome.exe	102
PID 1284 wrote to memory of 2440	1284	chrome.exe	102
PID 1284 wrote to memory of 4508	1284	chrome.exe	103
PID 1284 wrote to memory of 4508	1284	chrome.exe	103
PID 1284 wrote to memory of 1908	1284	chrome.exe	104
PID 1284 wrote to memory of 2748	1284	chrome.exe	112
PID 1284 wrote to memory of 2748	1284	chrome.exe	112
PID 1284 wrote to memory of 800	1284	chrome.exe	113
PID 1284 wrote to memory of 800	1284	chrome.exe	113
PID 1284 wrote to memory of 4328	1284	chrome.exe	114
PID 1284 wrote to memory of 1104	1284	chrome.exe	117
PID 1284 wrote to memory of 2812	1284	chrome.exe	118
PID 1284 wrote to memory of 3596	1284	chrome.exe	119
PID 1284 wrote to memory of 3452	1284	chrome.exe	120
PID 1284 wrote to memory of 3452	1284	chrome.exe	120
PID 1284 wrote to memory of 804	1284	chrome.exe	121
PID 1284 wrote to memory of 804	1284	chrome.exe	121
PID 1284 wrote to memory of 2016	1284	chrome.exe	122
PID 1284 wrote to memory of 2016	1284	chrome.exe	122
PID 1284 wrote to memory of 2812	1284	chrome.exe	124
PID 1284 wrote to memory of 2812	1284	chrome.exe	124
PID 1284 wrote to memory of 4820	1284	chrome.exe	125
PID 4820 wrote to memory of 4320	4820	cdm.exe	127
PID 4320 wrote to memory of 3548	4320	cdm.tmp	131
PID 3548 wrote to memory of 3556	3548	CheatEngine77.exe	132
PID 3556 wrote to memory of 464	3556	CheatEngine77.tmp	133
PID 464 wrote to memory of 1552	464	net.exe	135
PID 3556 wrote to memory of 2112	3556	CheatEngine77.tmp	136
PID 2112 wrote to memory of 552	2112	net.exe	138
PID 3556 wrote to memory of 2168	3556	CheatEngine77.tmp	139
PID 3556 wrote to memory of 3200	3556	CheatEngine77.tmp	141
PID 3556 wrote to memory of 2688	3556	CheatEngine77.tmp	143
PID 2688 wrote to memory of 2760	2688	net.exe	145
PID 3556 wrote to memory of 2252	3556	CheatEngine77.tmp	146
PID 3556 wrote to memory of 3408	3556	CheatEngine77.tmp	148
PID 3556 wrote to memory of 1008	3556	CheatEngine77.tmp	150
PID 3556 wrote to memory of 5520	3556	CheatEngine77.tmp	152
PID 3556 wrote to memory of 5640	3556	CheatEngine77.tmp	153
PID 1284 wrote to memory of 5676	1284	chrome.exe	154
PID 1284 wrote to memory of 5676	1284	chrome.exe	154
PID 3556 wrote to memory of 5620	3556	CheatEngine77.tmp	155
PID 1284 wrote to memory of 3972	1284	chrome.exe	158
PID 1284 wrote to memory of 3972	1284	chrome.exe	158
PID 1284 wrote to memory of 5356	1284	chrome.exe	159

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cheatengine.org/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe4668c728,0x7ffe4668c734,0x7ffe4668c740
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,16890122860400297788,2921925735492292676,262144 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=2212,i,13004007591160428160,3077184535299101539,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=2380,i,13126540624313142713,643156320111298438,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3204,i,8141641860855712054,13207537962060370578,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,3404929875632032098,3294646213017908988,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4548,i,252309982353854922,8705497723205954763,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4700,i,8258100376303776155,2277870558742719774,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4712,i,1032817619385948387,5318755647611817436,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5052,i,17302998119452520745,6273072228022952385,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4840,i,9239905110651724976,10672855970730007491,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5856,i,14159777897803330245,11002833018982297973,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6004,i,13434047289669235564,14132157407656337623,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=6188,i,6087734390876093503,3215476494801414843,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6308,i,2652791611169234854,5728105071590319647,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6040,i,6963039826501695497,17610189269050744153,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=6860,i,7306805116239184478,3605514106164246018,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=6900,i,1243959086417575621,7641771508651408278,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6888 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=6904,i,15190597813018173019,13165121092928178599,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=6908,i,7160778628208633913,17641428265000993609,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6944 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6992,i,5191799634293021772,8125014182371252784,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5040,i,7439693140579869466,34002480293350874,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6844,i,14113916402121213358,11963853930790297626,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6904 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6948,i,8936443354138535582,9808278836421383423,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:2812
- C:\Users\Admin\Downloads\cdm.exe
  "C:\Users\Admin\Downloads\cdm.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4820
- - C:\Users\Admin\AppData\Local\Temp\is-KFHZHXQMMD.tmp\cdm.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-KFHZHXQMMD.tmp\cdm.tmp" /SL5="$702C0,5592098,893952,C:\Users\Admin\Downloads\cdm.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks for any installed AV software in registry
    - System Location Discovery: System Language Discovery
    - Checks processor information in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4320
  - - C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\CheatEngine77.exe
      "C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:3548
    - - C:\Users\Admin\AppData\Local\Temp\is-3VIAU.tmp\CheatEngine77.tmp
        
        "C:\Users\Admin\AppData\Local\Temp\is-3VIAU.tmp\CheatEngine77.tmp" /SL5="$202AC,32420729,869888,C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:3556
      - C:\Windows\SYSTEM32\net.exe
        
        "net" stop BadlionAntic
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:464
        
        C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop BadlionAntic
        7⤵
        
        PID:1552
      - C:\Windows\SYSTEM32\net.exe
        
        "net" stop BadlionAnticheat
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2112
        
        C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop BadlionAnticheat
        7⤵
        
        PID:552
      - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete BadlionAntic
        6⤵
        Launches sc.exe
        
        PID:2168
      - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete BadlionAnticheat
        6⤵
        Launches sc.exe
        
        PID:3200
      - C:\Windows\SYSTEM32\net.exe
        
        "net" stop vgk
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2688
        
        C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 stop vgk
        7⤵
        
        PID:2760
      - C:\Windows\SYSTEM32\sc.exe
        
        "sc" delete vgk
        6⤵
        Launches sc.exe
        
        PID:2252
      - C:\Users\Admin\AppData\Local\Temp\is-SER42.tmp\_isetup\_setup64.tmp
        
        helper 105 0x3AC
        6⤵
        Executes dropped EXE
        
        PID:3408
      - C:\Windows\system32\icacls.exe
        
        "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
        6⤵
        Modifies file permissions
        
        PID:1008
      - C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
        
        "C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe" /SETUP
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5520
      - C:\Program Files\Cheat Engine\windowsrepair.exe
        
        "C:\Program Files\Cheat Engine\windowsrepair.exe" /s
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5640
      - C:\Windows\system32\icacls.exe
        
        "icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)
        6⤵
        Modifies file permissions
        
        PID:5620
  - - C:\Program Files\Cheat Engine\Cheat Engine.exe
      "C:\Program Files\Cheat Engine\Cheat Engine.exe"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:5180
    - - C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
        
        "C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in System32 directory
        Drops file in Windows directory
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of FindShellTrayWindow
        
        PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6032,i,5460177459946197514,4638889575808225517,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=732,i,3616763171120662708,14834005813244203290,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=7260,i,278336079577447895,15730972654748385939,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7280 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=7196,i,4906239225933044266,16371736300663019041,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7256 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7448,i,11280632105722096572,9465140370923391611,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --subproc-heap-profiling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7672,i,8417571635329060926,15375912961964034354,2097152 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --metrics-shmem-handle=7844,i,18028105306743448261,1030180625924861367,524288 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7832 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7864,i,1741542808624073669,6529250605159078906,262144 --field-trial-handle=2004,i,1827047811243032835,13744967496431078390,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7884 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1908

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2964

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

T1569

Service Execution

T1569.002

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

File and Directory Permissions Modification

T1222

Impair Defenses

T1562

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

Cheat Engine.exe

Path C:\Program Files\Cheat Engine\Cheat Engine.exe
Size 397KB
SHA256 5313618d93640bb29b66baadf2339de85e593a51715290dadece6d58e039a75e
MD5 0c84c800533ae5dee5923d5351da9923
SHA1 b454dec7e2091712fa9ca8909dbc176d1f104c17
SHA512 93974a559392c1ac37095d0b60239e16c2caefeb893c10ee726060a8f6a42c41fb7b72ee032e01c0d47ab350072e80d4bd1f9c892112418e2992f32154a6c4d9
SSDEEP 12288:h010wHrzPcHFQjL2CVpGzJ+44EZ8B+gugEnoSE5f6:TwLTclQjL2CVpGzJvZ8B+gugEnoSE5f6
TLSH
T1E3846C21FA01D237C0627DBC4FA995E52A60F9202CA594CB73E71F4F1A79AE03D79709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Kernelmoduleunloader.exe

Path C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
Size 236KB
SHA256 65fa2ccb3ac5400dd92dda5f640445a6e195da7c827107260f67624d3eb95e7d
MD5 9af96706762298cf72df2a74213494c9
SHA1 4b5fd2f168380919524ecce77aa1be330fdef57a
SHA512 29a0619093c4c0ecf602c861ec819ef16550c0607df93067eaef4259a84fd7d40eb88cd5548c0b3b265f3ce5237b585f508fdd543fa281737be17c0551163bd4
SSDEEP 3072:Bj9mOBuELLZXBJPCR6ygny56rs+iO2AwCNCtALb44TPk3Ap1rleY/DptNH/P0uHV:fn7LhBJ9W56A+iOlfN/LbZnbptN0uZH
TLSH
T174346C6ABA818277C1633DFD4ED6C4E66F60FA202C6580DA33D60B4F9A35BD03E65345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

allochook-i386.dll

Path C:\Program Files\Cheat Engine\allochook-i386.dll
Size 328KB
SHA256 b96469b310ba59d1db320a337b3a8104db232a4344a47a8e5ae72f16cc7b1ff4
MD5 19d52868c3e0b609dbeb68ef81f381a9
SHA1 ce365bd4cf627a3849d7277bafbf2f5f56f496dc
SHA512 5fbd53d761695de1dd6f0afd0964b33863764c89692345cab013c0b1b6332c24dcf766028f305cc87d864d17229d7a52bf19a299ca136a799053c368f21c8926
SSDEEP 3072:6LYEDJlXw5pAnHp2ukwTX6N8B4A84zMtEl1knxgaPZ3nbanlYZn2l1S2CAYOpIOs:6LYEDJAAnHp2uk2KNO0tEQV+b3n6
TLSH
T1AD643C52AE419333C6AE273402C3839CF534DB14676B97D6B8D96EBE2EE17D06E31112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

allochook-x86_64.dll

Path C:\Program Files\Cheat Engine\allochook-x86_64.dll
Size 468KB
SHA256 8422be70e0ec59c962b35acf8ad80671bcc8330c9256e6e1ec5c07691388cd66
MD5 daa81711ad1f1b1f8d96dc926d502484
SHA1 7130b241e23bede2b1f812d95fdb4ed5eecadbfd
SHA512 9eaa8e04ad7359a30d5e2f9256f94c1643d4c3f3c0dff24d6cd9e31a6f88cb3b470dd98f01f8b0f57bb947adc3d45c35749ed4877c7cbbbcc181145f0c361065
SSDEEP 6144:Tch6UtcJYg8yRAkB+vsoqOvfkv+y3ilZkaCeMG:e6Utc6gdcfkv+KIR
TLSH
T131A4F7B679918A67C1DFCB3500C386A8F234FE1413AF579584D523BA2EE67C0BE7501A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addtonewgroup.lua

Path C:\Program Files\Cheat Engine\autorun\addtonewgroup.lua
Size 1KB
SHA256 96e4429192f9ab26f8bf9f9429f36b388aa69c3624781c61ea6df7e1bca9b49b
MD5 3e20f1013fb48a67fe59bede7b8e341b
SHA1 8c8a4cb49c3b29db2c47f84aafd0416101722bfe
SHA512 99cf3f88c8b06da0dbe8085dee796bec7a9533990a55fbce7524a4f941b5ecf0e8ec975a4b032eb2aaabd116c0804995a75036c98a5e4058f25d78d08a11f3f2
TLSH
T10841A0061B16617524F98BA1DCD33886D31200DB488D092677ACC25F2FF42EDD9B63D5
MD5 SHA1 SHA512 TLSH

Submit Download

android.lua

Path C:\Program Files\Cheat Engine\autorun\android.lua
Size 311B
SHA256 74e872b33c20fde9ed01cb47f8aac0bf085e861e3a376472c21d89f7e267e874
MD5 1adcafe78b55825ed7b895ee7b3b783c
SHA1 dc3ad07c9a954e9c214cf449aee7604dcd861e74
SHA512 45bf54d7247231fa6bdd22744b893acfe2c070f7853f884d4861ba3989f063701789e3a4196bf927023fe34104e2366cc236b3f8c05b1441ef1172157a01244c
TLSH
T18CE08C81B277E19008E51AC6B0D00C807870A101613D95F1D4C14534EE93B3600B43FE
MD5 SHA1 SHA512 TLSH

Submit Download

autosave.lua

Path C:\Program Files\Cheat Engine\autorun\autosave.lua
Size 9KB
SHA256 fa7122783d550ae6eee45f88d3671c9ed34541ccf788be64d939150abe8c5d1a
MD5 867f93a039e8bc1f6056ee29eab26194
SHA1 16df0cf5303ce4191dc07eda301adb8e8a4efa54
SHA512 6a14ea8a9799f6e977c4f03965a75d6fd3c9b08b522f8a626a510569fe52af6175389c076240404bd1c27a92d9114b784e24fd14fd025ff5fde34bb928c2675d
SSDEEP 96:C64/mddXTcKgZFTNXhpw0KmLRy3azyIT6Q4bLWKxhwAWJ:C64/8dXYKgLNhpwHmFUazyI+Q4OK/wAW
TLSH
T1BF1273367A03116C7C7A9376B48B4916E222114B18339E78F5DFA0803FB465C56FEBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bigendian.lua

Path C:\Program Files\Cheat Engine\autorun\bigendian.lua
Size 7KB
SHA256 091e65aaa8649f5a7a195b3e9c355e55edcf2de7551e3775743153b52a7bd277
MD5 0f2981f8ad602c0f106a8e0d0afd564c
SHA1 c832df75c02dc2e92281945b257661dafcd11f31
SHA512 0c058dd000c8d1f30198f0954904d465dfd76879b02500782a879253f17335b64612be04468d2eb8c4d8ed5efb64cb6cf64dd362b4fc5c46fec368a5de0550f6
SSDEEP 192:UXRQJpltyKlR4ZtoOQ9pttWKlR4vtGTQPpMlyFuVCQc600RhBmg:UtKY59KYQ5BhUg
TLSH
T19EF199B93E50A6FD0731A7FA588E9DC75241D4A520F4078934DE4C3A0BF18AE4E7A7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scoreboard.png

Path C:\Program Files\Cheat Engine\badassets\scoreboard.png
Size 5KB
SHA256 a8d8227b8e97a713e0f1f5db5286b3db786b7148c1c8eb3d4bbfe683dc940db9
MD5 5cff22e5655d267b559261c37a423871
SHA1 b60ae22dfd7843dd1522663a3f46b3e505744b0f
SHA512 e00f5b4a7fa1989382df800d168871530917fcd99efcfe4418ef1b7e8473caea015f0b252cac6a982be93b5d873f4e9acdb460c8e03ae1c6eea9c37f84105e50
SSDEEP 96:9fJTvp2iAJf329FCfsjYsvEG56SyjfEa186J70Lhvxg+NVE:9dvpPA129FC0WSyj06t0LNx3NVE
TLSH
T1F8C18DFD0E4B3E1A968C45F3BB4F4D654C05F382A1129B8BAC2D81E098AD19CCD91C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d10hook.dll

Path C:\Program Files\Cheat Engine\ced3d10hook.dll
Size 128KB
SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
MD5 43dac1f3ca6b48263029b348111e3255
SHA1 9e399fddc2a256292a07b5c3a16b1c8bdd8da5c1
SHA512 6e77a429923b503fc08895995eb8817e36145169c2937dacc2da92b846f45101846e98191aeb4f0f2f13fff05d0836aa658f505a04208188278718166c5e3032
SSDEEP 1536:jRXPVJPMo10+PfXl/IRTlsfQstLh66crJWeWyPCUpfrCWV13P1+CUOEvCvOEMI7:BdJPMlMb1g6e0dU9rf3P7UObvOja
TLSH
T119D39E127620C072CA4A597D8096C7726FBAA6719BDC40C7FB661B3D9F203D16B7930A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d10hook64.dll

Path C:\Program Files\Cheat Engine\ced3d10hook64.dll
Size 140KB
SHA256 a2ac2ba27b0ed9acc3f0ea1bef9909a59169bc2eb16c979ef8e736a784bf2fa4
MD5 0daf9f07847cceb0f0760bf5d770b8c1
SHA1 992cc461f67acea58a866a78b6eefb0cbcc3aaa1
SHA512 b4dda28721de88a372af39d4dfba6e612ce06cc443d6a6d636334865a9f8ca555591fb36d9829b54bc0fb27f486d4f216d50f68e1c2df067439fe8ebbf203b6a
SSDEEP 3072:Kd3u82FbW5v1B9omLKfBbYWFhFCsfa5z8saPFZ1sL3OD1Ow:Kd+NFbWUMKfBTjFxfa5a1y4N
TLSH
T1CCE37C5B737540B7C60ADA7DC9C39A47EBB0B0420BA4538F4366865A1F177A0AE2F325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d11hook.dll

Path C:\Program Files\Cheat Engine\ced3d11hook.dll
Size 137KB
SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
MD5 42e2bf4210f8126e3d655218bd2af2e4
SHA1 78efcb9138eb0c800451cf2bcc10e92a3adf5b72
SHA512 c985988d0832ce26337f774b160ac369f2957c306a1d82fbbffe87d9062ae5f3af3c1209768cd574182669cd4495dba26b6f1388814c0724a7812218b0b8dc74
SSDEEP 1536:onOLYqoZQBD3m7bmVLcuVGpGXlWXQznQN8erRxQEmsYOT1GlERbo3iV8n/7DkCWy:o4YqoZNHi7VBAXvXMZ7ll3iyn3WOR3Oc
TLSH
T188D38C12B661C433CA4A0C7D809AD7266F7EA6715BE844C7FB5A173D5F203D06B3A31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d11hook64.dll

Path C:\Program Files\Cheat Engine\ced3d11hook64.dll
Size 146KB
SHA256 6f505cc5973687bbda1c2d9ac8a635d333f57c12067c54da7453d9448ab40b8f
MD5 0eaac872aadc457c87ee995bbf45a9c1
SHA1 5e9e9b98f40424ad5397fc73c13b882d75499d27
SHA512 164d1e6ef537d44ac4c0fd90d3c708843a74ac2e08fa2b3f0fdd4a180401210847e0f7bb8ec3056f5dc1d5a54d3239c59fb37914ce7742a4c0eb81578657d24b
SSDEEP 3072:/20T06lYodB6ZcnHgSFulvfV0tYP/ipaQ8PFRBIiOBNOW:1Y6bdB6uHgSwtfV0+P/is1BIpD
TLSH
T12BE36B4773B540B7D606CA7DC9D3A657EBB070450BA5838F4726862A6F233A0AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d9hook.dll

Path C:\Program Files\Cheat Engine\ced3d9hook.dll
Size 124KB
SHA256 fd2a2b4fe4504c56347c35f24d566cc0510e81706175395d0a2ba26a013c4daf
MD5 5f1a333671bf167730ed5f70c2c18008
SHA1 c8233bbc6178ba646252c6566789b82a3296cab5
SHA512 6986d93e680b3776eb5700143fc35d60ca9dbbdf83498f8731c673f9fd77c8699a24a4849db2a273aa991b8289e4d6c3142bbde77e11f2faf603df43e8fea105
SSDEEP 1536:yq8Iw0TnMfrUEuKo+w/lT35oBqhSw3kmuqW3Crf0d3N1NsCeOEy6jCMpOEsC:yq8IdTMTyXUR2JJry3NreOnMpOu
TLSH
T131C39E123224C073CA8A597D80D5E7766F7EA6A18BE848C7F77907795F203D07B3921A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ced3d9hook64.dll

Path C:\Program Files\Cheat Engine\ced3d9hook64.dll
Size 136KB
SHA256 8783f06f7b123e16042bb0af91ff196b698d3cd2aa930e3ea97cfc553d9fc0f4
MD5 61ba5199c4e601fa6340e46bef0dff2d
SHA1 7c1a51d6d75b001ba1acde2acb0919b939b392c3
SHA512 8ce180a622a5788bb66c5f3a4abfde62c858e86962f29091e9c157753088ddc826c67c51ff26567bfe2b75737897f14e6bb17ec89f52b525f6577097f1647d31
SSDEEP 3072:6UoPePVhoZB34/UWFdQomnRepTPFn35eoONSO2:j8ZBvWrnmnR2Un+
TLSH
T13DD37B5B777900B7C94AC67DC9D39687EBB0B0424BB5938F4326865A2F133E06E3A315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dhook.dll

Path C:\Program Files\Cheat Engine\d3dhook.dll
Size 119KB
SHA256 e2a7df4c380667431f4443d5e5fc43964b76c8fcb9cf4c7db921c4140b225b42
MD5 2a2ebe526ace7eea5d58e416783d9087
SHA1 5dabe0f7586f351addc8afc5585ee9f70c99e6c4
SHA512 94ed0038068abddd108f880df23422e21f9808ce04a0d14299aacc5d573521f52626c0c2752b314cda976f64de52c4d5bcac0158b37d43afb9bc345f31fdbbc0
SSDEEP 1536:QyfNvGKKZVGcuasOKQBBTff07PSZHCSVKOCDCA32XQaOCKnOEPChMOE6:lNvG7vGcIiBTMS18RD7325YO/hMOr
TLSH
T127C39F123FA0C073DA8A5D3D8096C7627E7EB1719FD948C7B62907A95F103C06B7A25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dhook64.dll

Path C:\Program Files\Cheat Engine\d3dhook64.dll
Size 131KB
SHA256 7d82694094c1bbc586e554fa87a4b1ed6ebc9eb14902fd429824dcd501339722
MD5 2af7afe35ab4825e58f43434f5ae9a0f
SHA1 b67c51cad09b236ae859a77d0807669283d6342f
SHA512 23b7c6db0cb9c918ad9f28fa0e4e683c7e2495e89a136b75b7e1be6380591da61b6fb4f7248191f28fd3d80c4a391744a96434b4ab96b9531b5ebb0ec970b9d0
SSDEEP 3072:ZGrrgbU27p/nFdpF/vwFLUjh2v5VjObfSVMPFtE8PdYO3kOc:crk3ZFdpRYUjh2verh6
TLSH
T197D36B5B772900B7D94A867CC9C29687EBB1B0468BB553CF1225875A1F133E07E3E325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_mingw.h

Path C:\Program Files\Cheat Engine\include\_mingw.h
Size 3KB
SHA256 478ca3b81e7442b00b29ad67ed6ff30656aaf1e83402f5d47c803b6641a88a81
MD5 f972824227a6f696024e54fe892f66cf
SHA1 51a33727b6732ba8435f2bd732fdf2302387458d
SHA512 43c2e22dec75e66a209907c67797d26436c2bd9b10788009626ed8952bd89436f7d32fa7c5a1f24d1b249449388c1fe15fda97d1c6b3135d30950c639100dc8c
TLSH
T10B81BD305CC8F2E254369821A14D45BE455EEEFB2A92A4ECF0626D3D5D6367081F8ECD
MD5 SHA1 SHA512 TLSH

Submit Download

assert.h

Path C:\Program Files\Cheat Engine\include\assert.h
Size 1KB
SHA256 3ab7edec5e55840c35be252bad52236955c3b4f9143810cdb1f09c34510eb8c4
MD5 9c022d741996db6d32411bfef4eadb41
SHA1 4ba93d77927eb8cfdcfe07f56d6edade180af1dd
SHA512 e448608bfecb770a087cb19934a1b45a5c564ea10bdf5a40bbb250f472830ecee4990c669e90e495ecb5d4e48c3871cc2a33ce84f2d38524449fc9f5fd501da0
TLSH
T1CF215731C1CD2AB28110A177F62C4366505EFBD27760C530DD8FB66A5B73C6067B7A60
MD5 SHA1 SHA512 TLSH

Submit Download

celib.h

Path C:\Program Files\Cheat Engine\include\celib.h
Size 264B
SHA256 0d37951ce5445917bdb6fe062cf18bafe458a9f361abf8ec11382ef7f6653e1f
MD5 266012020647e22d8feadb675115c202
SHA1 761c2554f1c3be29f1578e171eb1abab5e8bef90
SHA512 bfc02150272256e3e23e5c57301e88358ba9ccf07c9efaed2c3de9820a5f61602c9cf4755c576763b2ac23e0b2e9fd236cb935f04ebae6aa4ab876c52b0b0c39
TLSH
T11ED02B5368F959E1C9B0E2A4E97EB0C00001B4808362558CFD17D2370F08C04C23E64F
MD5 SHA1 SHA512 TLSH

Submit Download

celog.h

Path C:\Program Files\Cheat Engine\include\celog.h
Size 1KB
SHA256 9373d6ce49de335c64d591e6b8e8f362a2768f474ae761b5fa4ec6a893e635e8
MD5 227f5ddc9953417d86c600c9bd2d3cbb
SHA1 7c0570515b6ca3e8f511cb6e3617551410539d7f
SHA512 9caee401a3bdf8e0b217d148c7f9757e180eb4f3b1b46e222824e8349ccc12639c1b2edee647ceb6d028724a9ee1e0be85a21c33c62e896ace3ffc337acfb70d
TLSH
T1CC31FE24E50F789604B536A3D6460368DB1BDC1332FA77E8B94E34885727C8190F6B9D
MD5 SHA1 SHA512 TLSH

Submit Download

cepipelib.c

Path C:\Program Files\Cheat Engine\include\cepipelib.c
Size 15KB
SHA256 63b57b15239c54c2ff7a0c64097e9d69dd0c1bfd65611f3ac14b1d6249cf4203
MD5 0bbc430197c107c3b52db693aafb842e
SHA1 8c8a80023dd689f7621a88997edf18343f615f1b
SHA512 689468308fb44691dc86b9925c314f831751f9dcd5751809485fa61eb49c10a00fe89052f379f9fc0e3d6605adfa789b0c9da699fbb63721442691a6eb27b9c5
SSDEEP 192:YLnYl7CvFh3cYmwYR0iZFU/IuMREFLpUA3ssZ5:1qTmHRN27FLpUYx5
TLSH
T126622B99075E34527773D7B28B464428D375A89B1AB36F00B1CD8AA16F30274E2B5FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cesocket.h

Path C:\Program Files\Cheat Engine\include\cesocket.h
Size 1KB
SHA256 6184170fe0d4f8c8ada1299caf0e34d435962c288686578436b2251c3909f050
MD5 e6244c0081bde736f10ef1c41e1550b8
SHA1 85a10961a164f3ccd193c188f8f4c7af4c585439
SHA512 c428786cfbcaf6043b75dc3c14e33173a31743592b1303740557104de0bf84c3ad0b2fb83ad8e4503db17340f5ae29df02f51929d1b8642e707c86fc9d1d553c
TLSH
T198319D95ADB76052E0700F52437E4F15921AEA5337C930BAB80CE9E85F529C0E3F66AC
MD5 SHA1 SHA512 TLSH

Submit Download

conio.h

Path C:\Program Files\Cheat Engine\include\conio.h
Size 10KB
SHA256 de7161f85835d98b38fe6a19ef8973dcaf58ec237b1c91cf05ac535b2ff3845f
MD5 6a61e54ad2614ba528414c7b69147caf
SHA1 242479133484e15a2af816d95ddb053835bf4c64
SHA512 468702a606e20ffa893054f676c56dfe6eb3d28a002bae143298422ab388a2f2f78e318714f5274bc9ebd243863f5228d5ebead5f31d892e96d8742c8e6846a1
SSDEEP 192:R9IFnJJzpoJItwJ+Y31t1d1uF8sFX9B17lHLQWq4QcHyQA3sG1:XI4IJ2WzPw
TLSH
T14032348AF45CC462A27745A36A134699514BE89330CCECA5B81F096C5F03D4AF7FCAE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ctype.h

Path C:\Program Files\Cheat Engine\include\ctype.h
Size 9KB
SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
MD5 22e5a00491e32d15b40b196397ad01c1
SHA1 b0db6fcbf4abd2f4fdea2771399c1e502d9f8106
SHA512 28839104776441738233334a20de6ce3ada51179fb50366c27ab60432949fc78e1ccf735d2e80216f8779d84328634005c322d0010875e8fe0ff33d699ecc114
SSDEEP 192:aK0sBzLLoy8q3JHZDrs+UAt0g7WnBeaIlzjD:EALLb8ars+Flzf
TLSH
T15F12AC255ADAD1D220790991B103024175C3CDFE6ACAEAAAB8E7DE388F5356CD1FC58C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dir.h

Path C:\Program Files\Cheat Engine\include\dir.h
Size 952B
SHA256 84064b17e501d691c43d47e45b112c2884db467417910b5fa1482b72342badfb
MD5 ef5c7267df270272bfa8f8ebd1b516f2
SHA1 1e3f8a9afd814efa8cf7c88dc480e9914a5bc570
SHA512 8ca2b0e08b66eaa843fc7ad0f8f4063450a469914819a637aa3f8cac39dd38e32cc0403f2b04f767ae486934026585b56f93544c8a1f5d92cce32ce84a4506f4
TLSH
T1F611ED64C6C1C7F2181246F2AE84DBCA5309749F7363B645341EA2686F0AFE4832AD40
MD5 SHA1 SHA512 TLSH

Submit Download

direct.h

Path C:\Program Files\Cheat Engine\include\direct.h
Size 1KB
SHA256 179c3204312d7cf8032102773629bcb3e5fff792d1d808931cb6619a431d2435
MD5 83679da78aaf8f8352acb1883b9ef868
SHA1 fd89079636571a93755120120ab4f03b91076478
SHA512 13af1f2c118e898e6055ca61286c9766df75366ff4f30708f613193cd8f89afc4a4cc2fd31fc3ac6dce5d577ee83e203f79aca3b739d9d9e9e60b42cd9c7036e
TLSH
T1364167295988EAA281331743F34313B52086D66B36D4F465A51F2B38AF67908F3E6D54
MD5 SHA1 SHA512 TLSH

Submit Download

dirent.h

Path C:\Program Files\Cheat Engine\include\dirent.h
Size 3KB
SHA256 88c1f767fdcd6d51b991ee3234792da48c8576f5f8816f17a42344f9c8bbb1c1
MD5 afbe32ee6ded8cbad33d6fe3fbbf077d
SHA1 a7f0d3edee5f49e127575eb25e64e2747108e7c3
SHA512 f655a40f8c87a0cb43a34ae47612d5cef2cf7814fd2ae9ce1c8566f97f45e91470364bd87e8c12861cce44fb8cca54717546baacc6ccbdace51d0d15206304dd
TLSH
T18C613F42A9F996F340A10632F7067AAAD60BF14F33946114BD8E13782F52F1E62699DC
MD5 SHA1 SHA512 TLSH

Submit Download

dos.h

Path C:\Program Files\Cheat Engine\include\dos.h
Size 1KB
SHA256 3afea4ae85c68987fe59f40592ac5ea3ef1049b4fb72612bb185358d628e2dec
MD5 3b6fbc94238df0fd001b04d55bc899db
SHA1 231e18ce6a5488b2353fb9ef052fd6677c2cf555
SHA512 28ba3ed6cc9511f17798822fa81a2d16da17ca4af9da64f3edc9170fbb883801bf07390214c54b58a32251e6a1c3bb359cb76e892ddb77fbf8c1bf3985e13e5e
TLSH
T12411F03D4ECCD6F082365903A30857E90049E5AF7A64E4B8F407693DAE17924B3E9ADD
MD5 SHA1 SHA512 TLSH

Submit Download

errno.h

Path C:\Program Files\Cheat Engine\include\errno.h
Size 1KB
SHA256 7c8494fe57d944773861c4c1cc1f2b46b3111144a24bf505b3d47b32f0ac1e8a
MD5 b81e5a965abd076fb52de6dfa22a78c4
SHA1 dc11acf6a38871e60d79108dad6c3156715f05e7
SHA512 8f3057882753150fefa734897ecfd8dc4082580e856947910fcd891d744651706338a7df78c1dcf1c7e54ee79ea2a6e8d2646be9dac92ef301d7347801f04273
TLSH
T13F21ABA26DC88370C2320102637C85E011A5EDBB9974A5DE74593EFD9E6D32212F99CF
MD5 SHA1 SHA512 TLSH

Submit Download

excpt.h

Path C:\Program Files\Cheat Engine\include\excpt.h
Size 3KB
SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
MD5 d236372cba09e14c37b4e48f81baef83
SHA1 11a3bffaacedfa1caa4b4bb836cd95297a4ecc6d
SHA512 d7c22525fbb97bf8950db69645511420f1198abe33f5d0fe07a5ee8dd6b5cda07038b6db71a2995c6f5ec1b85d8b98e4370330193132e95f2a65e3a847f04408
TLSH
T107711E50BFBCD6E1E6A1149191180A9AC1EB9D2B11FCC8929486C77C1F8722C91F66FB
MD5 SHA1 SHA512 TLSH

Submit Download

fcntl.h

Path C:\Program Files\Cheat Engine\include\fcntl.h
Size 1KB
SHA256 fbd94f945a57165ac897bdbacd2a861b1351e7850fa76752703c0a622e0646fa
MD5 478add63d2c741d03a60a11bdc4fc0d3
SHA1 e9e0c857d2c409f23c346d81b77c5634f1c395ab
SHA512 bccc563718b1a03e93e5bf8cf0d79bb3128a3fc1fdd6fbc17792cbaf3c5de70de06ec2f88d8eed7105ff62056e32e9a79570f5890e75f4443033421d283b2fec
TLSH
T18421DE227EC1C26398B20384301D66647109FCFB629916EDB014BC4EFE8727411F99DE
MD5 SHA1 SHA512 TLSH

Submit Download

fenv.h

Path C:\Program Files\Cheat Engine\include\fenv.h
Size 3KB
SHA256 67a827acf4e09653afb5d18f2ecaa5fcdfb7471d8a5b8197c2f33d06e8462f84
MD5 deec7c35f77ec8e22074667641ca8851
SHA1 8cce6b663a9a04b3c13aa6621b0798e487a8a88e
SHA512 8de2b82b0579e6c37546a26bc1ab5d7603090e815d8ce728474b1405339ab4ef4f0794df19ff4cc3780aa7259288d4d93fd50b0e9c63d413ff22ad5e72bfcbe5
TLSH
T19B51661939D8E2B7157B5023E3252039D206FE7730C0E9AAA48C9E2D1D83D66B3E51DF
MD5 SHA1 SHA512 TLSH

Submit Download

float.h

Path C:\Program Files\Cheat Engine\include\float.h
Size 1KB
SHA256 7b8c84c49d28439ed7415e88c5131551b3c3f68305c51d3d81b8ec42e6b25013
MD5 f1b2dad415f00af7a859d6933c4123fb
SHA1 94e99217a1d7ed2925af7f9090a8c779d9dddf0b
SHA512 a59382a2588117bc1329bf60aa65a9130f59ad1bec0b5e8b630b91569705f5b3d647b13f1d5053c8ad2c3a2b3542f9ff70ee26013a8da736a9882171d4a3b382
TLSH
T18441A0C85EC524B2C072B1255A1F8E29B52CEC73B11918ED7152AC7C7D4E2905DF46FE
MD5 SHA1 SHA512 TLSH

Submit Download

inttypes.h

Path C:\Program Files\Cheat Engine\include\inttypes.h
Size 5KB
SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
MD5 6bb72461c8c72cc3b96f78c73fa803ba
SHA1 4506fb8bfa1622d4533db176b3dcfab0ae021672
SHA512 5f6d95651183fbce7490a619d37672f2d3bac516319d0edcd4e782a77632b457632eb83ab54b67132752649fbbfbd1d4eb2b4aba2622bdf729f0c4bd7509db2b
SSDEEP 96:a0GgtlRUn9ZpD5AgcpqdvDp/pwZzSAGkKTskBkbBpbwlHrhchgM2bRBhuYBbV3VU:a0GgJUn9ZpD+gcpqdvDp/pwZzP1iskSX
TLSH
T110C166038FDC60A82132BA97A66D52580063FDBB5384A0EC3679DD3D9EA149181F6CDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

io.h

Path C:\Program Files\Cheat Engine\include\io.h
Size 12KB
SHA256 5da97c850e8e2ab608c42947a33411f556f6d75b8264e1e5cf29ca7ba7b96256
MD5 4ac0744ef16453febed8de4242997946
SHA1 b092c9006de0a8dbe7f0ff568b6caafb00b4c90a
SHA512 1ec9947c6fe0160954f3922d6990863865d274874c31355f0838ccbb1bbf6650a9a3f0d3590537a189afbf80e33cde5393260fdd5f3ea5a736a066cdcc5ff815
SSDEEP 384:Y8Bx8BjP8BJPKf37Rw8z/hI9B3mpv6O3O8iONUO5OG0xLIJ8SNgVSAMczPO8cONU:r02oxz7vX+8fNxIG0S8SNgVxz28ZNU
TLSH
T170421255789D895260B61367B64B0275324BCD7B31C1E8E2AB6BAB316F03241F3F66CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jni.h

Path C:\Program Files\Cheat Engine\include\jni.h
Size 52KB
SHA256 bbfdf8435eb3bf257808755066eb267f77f2677af1333c32d8d42476f3cde845
MD5 45146adf8e7b855a3a71d4e89139bd1c
SHA1 a8a5aab92ad76174793afeb96f40c29b83c8ca51
SHA512 f2fca690c025f69bf1914861d6f3edab2a3ed9f14e6d4158f77a9b77f9b4cc7a156f397d3f551dd397a1bf8075152b945790d9087278c73dc471173443f42c1a
SSDEEP 1536:3XgZkPGo+QWLK+rxnPkpzWRT3Cn5ldQoIiRdx5BRhJRNZRFr73ueUAq2YhpaQeo+:3Xg+PuT3Cn5ldQoI0XWcDtX
TLSH
T19D3310815AC3F3E56C73A75DC947944DCA90F003342EEA90BEFC9D954F398058866EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

limits.h

Path C:\Program Files\Cheat Engine\include\limits.h
Size 2KB
SHA256 39c0761f0e43d7b936b9b81c85673dd82896ebfa66e9f1b9a19b45f34e4cd52a
MD5 21ce377183014c3535643c9050306a33
SHA1 41b25206edd6309884312fd70026096c35a6dbeb
SHA512 3b0fa5d6ebb7ac47694c7d04b4835af6c089344f7f8337db74b34e3b46a1792295224dc232fac1fd0db482fc32c8a6a4bfcaf4f39c35dccd98600181c314b43d
TLSH
T181518BAB9EE87091B1316015AE2FCB51001BDDB7B665B2DDB002DEBC2E9615040F9AEC
MD5 SHA1 SHA512 TLSH

Submit Download

linux-x86_64-ExceptionHandler.c

Path C:\Program Files\Cheat Engine\include\linux-x86_64-ExceptionHandler.c
Size 6KB
SHA256 6ee47c69e8af14257387e4ea025b5c8df832ee751745ea21e91e90c79e4352a6
MD5 323b7ac872ff1eab2b0f1166e394e55f
SHA1 e11e451f5ae40c416d496904fe53a15ab77e68e4
SHA512 9ab29ad69bf264cb39d081cb3256cb8a46d94b4fe7e385eeccb692fae816cc21a8db4e5a2f29a0e06f444519a8c39a1c29bab1450b1350255933b7b1353fe80c
SSDEEP 96:T1WYLfTkh729N8VtjJ3t0N6SLXdzC4dzz4h6gH+hzmFSVAPW3DMfzwGp:T1WWfgumbjJ3YLkkgHKzmFPWTMfzwGp
TLSH
T142E1549D2A3E61E173F2316147A21E06D72281531289FED2702FC36C5FB646097E6F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

locale.h

Path C:\Program Files\Cheat Engine\include\locale.h
Size 2KB
SHA256 882626fa25dbc1b5903e6fd98cc8516f1e54c4e06945026653f05b38125dff2c
MD5 5f6a3e42f8eb297b888b498d93437c3c
SHA1 09729d7892a1ed36afaddec40674aceb62b5fa88
SHA512 587bb7be57dda7db0bf8c454a78dd67d850342d97bc7c99a9804d53fa7929eb42c1194e13456170c0902ca7a15c028a6c635879889f0af6a9ed833c2e046b9ec
TLSH
T1E741CE200EAF91E391311B826A3B614A5187CA6F3115C6ECB583FE284F0369CA1F9DDC
MD5 SHA1 SHA512 TLSH

Submit Download

lauxlib.h

Path C:\Program Files\Cheat Engine\include\lua\lauxlib.h
Size 8KB
SHA256 1a47911ab8c28536b35b83e9887729b06b00e10ded9c1bdb417ece7657a6c73a
MD5 414752bf38e58bd6c662587ca7b4291a
SHA1 5a82403a8d90d09e9b487af738ecbcbc0feee297
SHA512 1dc2a3c45c7fc8f8a1c5a59d6907bb03cce53ea1e24225118190873ae8c3d28a7c4e287505d6beec9bb5ac28077576ceaef04a1e2c48a0e6cbad8ddfe8fc71d2
SSDEEP 192:AG3SKmwE5ZD7lq4TJpTPx9W1HPHthPRHroDAtZdJ3/L:AnfEvGAr
TLSH
T1D102624EA8663442DB30634440090A4499EBECABB6E4E6DD365F6817E7513ADC1FF6CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.h

Path C:\Program Files\Cheat Engine\include\lua\lua.h
Size 14KB
SHA256 8aef3fa9669bdc5e7659389e276f31ec779ca4bdf96e2c9ada07dd9458a47416
MD5 555a7140bbd46a1b5bfd5bac4a9a9f10
SHA1 457cee5851a018909d1bc96824e99c0c775166ee
SHA512 34b85999aa982de19630dfa2100c60618758a4247fe5cdb3320e04904415619aa437a72e97b5e67ad287e47c66e73c7fd04da6786dc1fcfa981207541043f3fb
SSDEEP 192:e0NdvtffvT5GDazPCagC/3hJiOY4k1gN3glwkp7MYTG26nRRT46lQHTa:lf4Dg6agC/3h8OBk7wkJMYTG1Rxqa
TLSH
T1B062DD5DE5823480D9317310462D4AC499F6E96B31D4A1E8365EFC188B95BBF42FEECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua.hpp

Path C:\Program Files\Cheat Engine\include\lua\lua.hpp
Size 200B
SHA256 a7a47ce4cd19f703b8025696f0631c09a664d54cfa831be4538d10441aebb48d
MD5 5d2dd4ff9f4c38d14220bb0e425b796c
SHA1 2fd297c467ffcd72cf9cd21450e5bead0ae23962
SHA512 c84ec5c6f867df99c9c8c4f57af4795e2faca7d81f111f7aecc568cd5a28de3971a1bfcfef9950181ff2fa67b82542840488de718d95f87877f51b0709ce10d6
TLSH
T148D0222EC41E8052685372F0A7818873C49CB5A85FC8749702112DCE60C31CC9FEB273
MD5 SHA1 SHA512 TLSH

Submit Download

luaconf.h

Path C:\Program Files\Cheat Engine\include\lua\luaconf.h
Size 20KB
SHA256 0c5d09a7908f99b80377b3157a0bd37c6322cdc0af437e99501ae746037408ec
MD5 fe4f0ba514434b7f01983b97f6e517e0
SHA1 7057fb0bcc204ac4e65aaddbda350bf8f7488a3e
SHA512 bebb3a5c5384d0a08955a95970a40509d2ece40feefb0a7c80bbfd4f9cf02e88aed69b5bf05ba6fffabdd88d364bbb717ad4f59e3a1b6999bcd1cdebdd410d53
SSDEEP 384:AmA+N/G+woUL8m7ETjv68AaMNZjXrQvLXF2ZsgcoGkR3lY6TKhaokMC5:++zbTr68AaMNZjXrQvLXF2ZsgcoGkR3T
TLSH
T11192534DAE9222A202722311520C0A4ED27DFEF7476266FD781DCC5C2916B6742FBEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lualib.h

Path C:\Program Files\Cheat Engine\include\lua\lualib.h
Size 1KB
SHA256 3890f6ce73f70f6eb67ec42a74f7c8cef40fa184659934906648c8acadb53fbf
MD5 d763a23012a8dafd2d76ce4a0609cc17
SHA1 b7c2040f6ef844048a1b17e204658ad0f5c6957e
SHA512 9ac100782422e02809f5a63a42b9787f97c9ff292cc3ebb7e2dc39b5e40e671c566a74dec8d1a748b7d4e8666499f045fdee6ed4ddb0207ff7856145cbfd294e
TLSH
T17921F3ACE443384AD722F542400C263429EFE93B644691D5335C6E4CC5D05AE44FE6ED
MD5 SHA1 SHA512 TLSH

Submit Download

luaclient.c

Path C:\Program Files\Cheat Engine\include\luaclient.c
Size 6KB
SHA256 a18a985a32b8627847278c41012d200c0db1b4368e6204fd6157f6e29281d9e3
MD5 fa29c1499bd4e51eadcb7c3462188430
SHA1 62708f95554b438320eb558267da8efc66593686
SHA512 988eadeb061b30c67a4427532f4f7c095a675d708615960af36a7ca5c3d69339db534e6fd5c109402ab201bf9c8e96a858961b813e029dcf2fd7c267f1f445f7
SSDEEP 96:ZRUrVghQMcaVetgHaQjZGmXVv1JBcZHSdP2LYehVqjcdtHEOYL:QrVg5aVs9dP2LYefftjk
TLSH
T180D1651C018E30B61230D734C3934143F6B6986376C7BE48B65EE5942F73462EAE9EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

macspeedhack.c

Path C:\Program Files\Cheat Engine\include\macspeedhack.c
Size 5KB
SHA256 3385883dfeeda6d10867ad5e942a90e3a86e1a51ae4621ac19d14f8ef92dc000
MD5 af4c02a56cf272a13bf45c40545b575c
SHA1 67b6772487a2eef1177179b09b2e951703fd9a92
SHA512 246293147867b6d5cd4b4d7bef13722a3a020afed34831b4cf7136f74277d2ec7f8ca200e5613eebd61502a839be90e2ccbb0fcaef0edc7a6881991491ad4c15
SSDEEP 96:fFtVKSWx2Mgi5OvfQFF8FWscDuL3dSZBKGQkVuDy5AGaPFi9bPeASF7V:a8m5Ovysck3dWLtez
TLSH
T11CC1FB86304F44B39A35B4638B3720E9D74B480356A56660BAEFC78E2F39411E4A7FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

malloc.h

Path C:\Program Files\Cheat Engine\include\malloc.h
Size 5KB
SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
MD5 537bc027e86f7252d88b6bf2fe5b2f35
SHA1 7f3361d220f96ad1b93669254937929f267cc333
SHA512 3d7693f46fe1272decba8efb6a01853786419055cf338cc900c9fe3ec1b795ba25e16878a5d53261bf3bc3bab7525110b6f1844501d5fb6be45c57b5d277f625
SSDEEP 96:y4bSZjA6r8VdQINtNy6XVqB4/mLErYQ015U/dIuvwQRbZBq35jU:9urrSXIzGdIuvwQR9YJo
TLSH
T153B1002218AD936164739196F99F0360308BE67B7BA0DF64F9F76AE82F0311403F465D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

math.h

Path C:\Program Files\Cheat Engine\include\math.h
Size 22KB
SHA256 0bc33882bd2af1e7d33c38c0160e2a0ae737836815360765750cdc7e98e5dfc5
MD5 631f16c4a65cf2f47fa49c9220d9c500
SHA1 330eadf08fdcb31747bf7c84182f2a5eecfa3fab
SHA512 92eb690ca7d563269ceaeffac1f0ffba6d010568431843f2dd82dca7a1aca0e6634c3335202ed5559fe631b0ed7c585dc1c3f5bb248fe3d571ba754b22b6ad5a
SSDEEP 384:lpwI012C9/SKSP4qROW8JuWucZBFRzWhHONMLPik9OeY:lpq2C9/FA4OOJr
TLSH
T101A21F1C3598BE839D7630B0B587868DD2C559D2134CD8EDF45E83660F23C2AA5B9CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mem.h

Path C:\Program Files\Cheat Engine\include\mem.h
Size 345B
SHA256 43956946aefee50e01fdd4d54a6c597418abcb02251f9d7695ed7039fd7a5ff6
MD5 534517144e5b9ed662526771bb5d7e13
SHA1 2d1801e4179e2a6e5914764d944a9c472bf65e99
SHA512 533f30d3288c2b827d29210c6890d600678db4f67b9ffab27046e5ca3931bc119de4af93ffa63929dcd9d7c0babd69a25e7f52e697272f3226ed198c93a9a8cd
TLSH
T121E02064CBC843F341151A439309D3D2411CA0EFF2F35256381705997F09D700326DCC
MD5 SHA1 SHA512 TLSH

Submit Download

memory.h

Path C:\Program Files\Cheat Engine\include\memory.h
Size 1KB
SHA256 b4341e188913a819fa3bf101078a95ca077780219373f424c39ad86c94e04b6f
MD5 29f62b1add26dc1aed3faad03fac030d
SHA1 6f605b9a153a987f2939ae6500d6391fdc107332
SHA512 3d98e9f039dda694a660ba7d2f7906fcd60016dc6a8fed78ceb7b191618318a68d34169b9480ba5727730f6bd6357a13fd02e0cdca5439a45e06d2f0d61dabe0
TLSH
T12A219A378348D6609073C9C2F6101281603AA24D7440FB56FADBC5763E93420A5E9BAA
MD5 SHA1 SHA512 TLSH

Submit Download

process.h

Path C:\Program Files\Cheat Engine\include\process.h
Size 8KB
SHA256 6947c954f2af676e66cc38d64b1a165428734000e2e272f883c2d74a85b82020
MD5 f06edaf6ab750607c33c37bfe50b2eb2
SHA1 ca3afc7781760d84432b06567afbda24587757dd
SHA512 9926b19fbd4b30ecf6682ae5945401e4387d2b5ce02d7643b51c660462b761b08f52a99f2b7da73b574c7bc6388cd23ca3ed8451a3cf2b3501ad217925a503eb
SSDEEP 192:kVIYQ03tIPjxoNimr4mJ6hIO0XtcsQQ05vQTcsBOdFS3b6dyntql+:kVIYQ03tIPjxoNimr4mJ6hIOmcsQQ05E
TLSH
T1B0121C09629C4556D27313E6FA8712086083B63275A5ECF5DE6F7B788F238C2B7A1D4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

conio_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\conio_s.h
Size 1KB
SHA256 f7375e816739491fbab39531c1d60a77b78ff9a162aba17f817c773bf75f6508
MD5 5bc78aa26af6ce836f322cd5a432e368
SHA1 1e99298161f0adb4f7244eb5a067364dc5b47e91
SHA512 f1bfd5ef34a97e72ec474b2a2fecf4ac5fa1931e08845489623a7c699954b549fede1e4f93c815c0a9944a7d79601a9ed1342d47694528dab54adeaa5bbab443
TLSH
T18C317A16290CCA9295651782F30603D1D94791BE34F2F912AD2F7F202F63E00A3D5A4E
MD5 SHA1 SHA512 TLSH

Submit Download

crtdbg_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\crtdbg_s.h
Size 461B
SHA256 03630ee83e7c921446a0790853fcadeb5a308553dd3c4ecddd568cda3167c0f1
MD5 f0c359a5aa08a907a23d2c0c5aa68e5c
SHA1 b487788ec6aa32458df18f6d10f67573de8fa16e
SHA512 71bd41e6bd84bffe34beb8ef1b49c63358cb5d8e520972d57046d58e9d9fb6deae512e4cf5554337da2510d6f3afcd6c6d58124a30c4003f9e3a8f60c2ffa896
TLSH
T1CDF02711DBD6C7B2A0680611431CB3E20118AAAFA561A25CB98156C9AE0393047B7DDD
MD5 SHA1 SHA512 TLSH

Submit Download

io_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\io_s.h
Size 881B
SHA256 6e02f4ae50d30629af7df34785b6c32642b12d94addd56606f6fc4ab668250ff
MD5 aaf6330564dc2b4b413908ef435956af
SHA1 ea59272194493914f4b0cd1375210053a34cfdc2
SHA512 3fd60615b2dfc257a0cacf1f985af5aa765583db7de6b8e474de52369219da5d2276362add9875a820f0a424a259fe976ebfa1e18fcd7b70008ab8ff70eba03f
TLSH
T1D911E331BA4CC3B190312312F30943D1404ED6FFBDE0D864D9666B6B6F3790073A6AA9
MD5 SHA1 SHA512 TLSH

Submit Download

mbstring_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\mbstring_s.h
Size 3KB
SHA256 d962ab8070958953f48b24c9ea068b345b158237826fb71b9a76d36cf2e8a32b
MD5 ededeec78fa33c84025495013a88bf1a
SHA1 7cb95b9b6df8927222625ea101a72389b8a5318f
SHA512 b32e7891109560b4df8bbbd1b3bb6d2acec9158c35743eb97a88f3b1237114979057b00acd2cbb594cb1db555e5af5ddcaa610fe13c141a20494ca47319f65b0
TLSH
T1FF719C632899CB22687FA75679070284094F539F39D0EF324FDB222D3D7355897CAA2D
MD5 SHA1 SHA512 TLSH

Submit Download

search_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\search_s.h
Size 796B
SHA256 96174e09f1c573c7faea85a6d568225a1b946e133c6c04a7bd6aa865c58896a2
MD5 e0c3256d4be1ad2a506755eb847c2d39
SHA1 236108eeed6afc8156950dae94a055b90f8d169e
SHA512 501e4c147aba8cc08d3195bba9328d3ed6186e8bfe60ef4de65f09441f708abdaac9d7ed4c84ccd4ce21075f45d0c8b60b2bf8a927ad8a449c11ef6b2711032a
TLSH
T15701B131238C427011B742E3E32463C6703DF1ADB150F66156DB938F3E53E50126A7AA
MD5 SHA1 SHA512 TLSH

Submit Download

stdio_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stdio_s.h
Size 11KB
SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
MD5 3c28755c2186dabae016938e1308b77f
SHA1 9437b43cd64ed70638df695b1b9eab34c1b04f57
SHA512 9d89fe5e5b8396998a552e443970f45c8e9f2f04f180d14f1cbbdc56a1fd5ae0f2c9f81b8e25d0dcb20fb1437d9bd178a6dad68a323aa0e9eaef31b6b6d40f33
SSDEEP 192:nzXsE4vla8LmEtTcbA4MfaEU0zwyp0WEP9fF2V:8
TLSH
T1DF32D905690DC94299B71B86F34307C1A843957E34E2FA625D7F6E202F73E59E3C4E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdlib_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stdlib_s.h
Size 4KB
SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
MD5 ae13bd6218c4840eacac71f31c45b2bc
SHA1 e05d796ce8f5aeaa629ca9f1e3f6d4ac154148a2
SHA512 689808a64c20260f3091e94dce6eaabf8662ba627b4de4c43ed685390565186e69ff229cb4755e9d3bd12b5c46e16ccfd848652703572e790df7bbab3824ff9a
SSDEEP 96:1ICzd9hzhSzms1NOsG1/zl1EzQm2pppJptakhplumHNNmeN4mfNaAqk58ikTNBkm:tp9hFS6s1gsiB3fnjhTVS24Y4LN
TLSH
T198815911A5085F52A5333393B303028184DF437B35A4DB71CE9E6E297E33985F6C6DA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stralign_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\stralign_s.h
Size 824B
SHA256 b23f0cf79d5455e232d92792e2b2be38125a02808bc005049367bab68da1300b
MD5 c46db571cfdb29ea8f977222b4bda152
SHA1 727f853fe74015580ae152b7da8e1958b19fe22b
SHA512 747fefa9b6dc0b5b1de13acffbeccdbd7542a1241dee3299f584fd08d65eae8d1814305c44fc5ad580d865cf73ae9a8072f5ad7fd5e8439de034ee82fd789ca7
TLSH
T13701C27579DD4271961B0073861C93865018D5FFBB219538F0E2E8FF7F51920236E5BA
MD5 SHA1 SHA512 TLSH

Submit Download

string_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\string_s.h
Size 1KB
SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
MD5 544899f39ca616ae07d97a2fee8de3d4
SHA1 2f95831d27cc918e633e8d711087ccf7c3da918b
SHA512 20dbf6c25ff2270402bb4eb99430b83128f66d577b7c9277cacbf8cdb5438ec58b6b1ea468499d1f48338cf4f2433a1a0e59e242f812b419c6afc637340c86ab
TLSH
T179314A22760C9B5328B22396F307428108DF576F7461EB21DD8B9A123F33904A6D5F59
MD5 SHA1 SHA512 TLSH

Submit Download

timeb_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\sys\timeb_s.h
Size 653B
SHA256 d153417ec64eb7b1504749bca6477efd51b4b22de670518f4fdc2701080145c0
MD5 001fd701688e91d3781d43714b993275
SHA1 a1825995271fe96dc766421cedc606384cd92201
SHA512 f4f4a8d796e74cb0ad2a06dd153ebaf4cd16c431fdc67b7c2fbbdc4466147593421ae0f60a620503b21dc3c05c6480ca483bd077afb10daca46529996b4391b6
TLSH
T142F09E3179CD53F320510563920843D1665DE6EFFEA08015A52177EA2F12E2002EBCDD
MD5 SHA1 SHA512 TLSH

Submit Download

tchar_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\tchar_s.h
Size 8KB
SHA256 a5318cceb241962769169c32a3ce5bfb9a075a52edbac31aad33b0d7b897b544
MD5 1c3243d5951ccf4c4007e89fd366631d
SHA1 48fe81cea21230097c39ffc92c9b5bcab3b4d0b1
SHA512 f6d25b5532745933f4320280ac21dd02cd12872639333b3ad04f4efbbb42cfe51f5ad828f6cb2134968f5503979029ac38ad208572ad3fd298bdcc97677ecedd
SSDEEP 96:bQGkyRvKPf4e80QgHRySdrCcNNXe1FcNNFe1d6O1yv61ycNNue1ccNNYe1e1O1e3:c11WgJ17OBBapWcEqJ
TLSH
T1480206202DDCCC22653A0674920DD290A95B8E73E4D4B2BAF95AAD0C1D235F187F1DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

time_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\time_s.h
Size 2KB
SHA256 9ae9cb7a3164ad0093e3887b0ca09bb67498da51bb44e9be500b60e72a385dc0
MD5 edc9cc4a2a0b921d3167f19d2d162f0b
SHA1 424e2246a5b852cc80ac043f681a12f4ed95882b
SHA512 3c81d4917e9a47307393ea6af3c6e945f6f6acc1baefa764e500054f84bbaedda83b7ccdbac3a1ec526e389ec7a095b0a6676ae09ceea63ef1e95b5de004b018
TLSH
T18141C021B5587B7111B11B5A720302F1A69F76AB3DA4D650DBCA2F326E33A01C1CBD67
MD5 SHA1 SHA512 TLSH

Submit Download

wchar_s.h

Path C:\Program Files\Cheat Engine\include\sec_api\wchar_s.h
Size 7KB
SHA256 5a470ac358b2d951202182f9ec1f945331c23a8d79629ad4edb08b7d73cfaee4
MD5 37c52897cbb44a15bd22203cf8882566
SHA1 27a8f810adb10bcfd84db971163c98ed81c3bdf9
SHA512 5217c9246a458eab5657b219d136cec221ef0539cb5c5d02bf9e1fe88159a758b247e2d925312636aa8be4665b9d52641a9d3f2613256c3ff88985ed1d50ca05
SSDEEP 96:2s3ligWmjN2JcabAOrco1/x+pxJrx8NxDhW21TUSBL/jCh3HzTxpppJptakhplFY:lUEU0zwyx3fnjhTtj7P9AJbfYFa
TLSH
T1B2F14812B60C9B4129B23797F343028188CB566F34A5EB61D9AE6E103F77D04F3C6E5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setjmp.h

Path C:\Program Files\Cheat Engine\include\setjmp.h
Size 3KB
SHA256 b6164eb7fae4a12163251492f7f4e56cc50d146ec7a2f5640d86eca4d095046f
MD5 8bf97dc43b347cbcf622768ef43090ef
SHA1 e6be2c1b1fe50c19bcd2814e3827c7d94680e51b
SHA512 f2f1a16a1d719b10a20b8be8b5046e151c50792d8d07a2e7f6bc8eb0d53ffce7e66e53934e688fd1c3fdfe00545bf203267fb59cbd289ad92f3786e473f8198f
TLSH
T1A681BCD9429E92E270A5808A473C079A872ED1BB3982FCA33913055D5F03D9AD3E5CE6
MD5 SHA1 SHA512 TLSH

Submit Download

share.h

Path C:\Program Files\Cheat Engine\include\share.h
Size 639B
SHA256 6de922c1bd7eedc33308304785c212945064d763eedfb373c09cbbb5cb933dde
MD5 540ef403878ddbe2d4682540da20095f
SHA1 4e3230df4b7a906cdc3b6e3e1a5cc768cc79c327
SHA512 7c27842cb6f3d2b9707a5df55b45bcc5dd613cda8c550f0232f0cb9df8b59013f428ec3fc07fb002dff80d26bb9941ce76caadd22bd4b539c9f11ea13fe12ef5
TLSH
T10EF0F4A3CEC5C2B4783405194508A280611AE9BB75B6539DF40C2D9EAE56DB851F7CCD
MD5 SHA1 SHA512 TLSH

Submit Download

signal.h

Path C:\Program Files\Cheat Engine\include\signal.h
Size 1KB
SHA256 045a031b376733ed7a685bc01709f5281403729ff7c601b913b2aca2fe1493bb
MD5 a106c85866bf88a68510029349149b52
SHA1 989f8bf922cac5beb03905a0e35c3c7b4b125c85
SHA512 205611a36897d5a87eb54da5c2c193680dad95dda01a55dcef61665ed09efd322a20f276d9419a64144941cf0b59339ff9d15c1a7a9c86da60f140364eacff73
TLSH
T11D311C209F9856FAC3363181986C4A69C567FC3FE85081EE79596E4DAE065A003F36CD
MD5 SHA1 SHA512 TLSH

Submit Download

stdalign.h

Path C:\Program Files\Cheat Engine\include\stdalign.h
Size 354B
SHA256 7612d46571099ccaa7616a510f78f180cb1e91671e6e5e9223a2e297b84b789d
MD5 aac7eff03c8fe0affdc4de59add194ea
SHA1 f8914611b61057134e280c21efc90da9d00f4443
SHA512 579d6b523237e71d2d35acda01fae823a2bb087cac2e513a9b83ca35995098813a93c1e510418d8deb73d1b1c8da406ffb245933abcf60324e08a086dd4bd787
TLSH
T1D7E0922219D58995C22A4052940F35A15595DDF736E220E7F0035C2C0E0B0B06AE45AE
MD5 SHA1 SHA512 TLSH

Submit Download

stdarg.h

Path C:\Program Files\Cheat Engine\include\stdarg.h
Size 335B
SHA256 a38f8d34f5e09658cc3a8892b3a7e80ff566eaeedc194e5a85ece0b675993137
MD5 7b52fb5e54fdff4c741f5180844cb24a
SHA1 b2d080a82d0d365cf563c685da15f6094e004054
SHA512 db442c6d0778e97fd00ca42804bd668dcb00db10418af54106c7302a140cd47973ab3859d119ae8e2413fbba0ea233c60d05d786a84f27e539247f98e16dcfc6
TLSH
T130E04F159DC2F0A9A1243873E1AD1379E0BDCCBF2A45199CFF541C5D685345424E49ED
MD5 SHA1 SHA512 TLSH

Submit Download

stdatomic.h

Path C:\Program Files\Cheat Engine\include\stdatomic.h
Size 7KB
SHA256 5bc89ea6aff1edabaf7f5830ad589cf8d9d8245211ac4f9e1440cf53c0eb8d18
MD5 b40534e5988a8d694a9e6584abd364e7
SHA1 d400751f924d005d89959e05e33b0a048ea5c796
SHA512 fa8d6c1e9b0c1fc7846f84f14f27ef63f948e76c717096de0b6c049a9bdc3096d0a96e6beb7d6857520e719980ead501093cceae988aca6fe429dda0d97a9ffe
SSDEEP 96:GoyQEOuZs5HxDqft+GLtWMYZKmu22DMTzx4FT6wGVO:GwqJYZKmhRHx4FGO
TLSH
T13AF1E0802E44F11111AFC575D66CA4BBC4D682FB0942ABB771ACD8DC8F1716E09DC9EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdbool.h

Path C:\Program Files\Cheat Engine\include\stdbool.h
Size 176B
SHA256 5252824225ddc486b0460677f765e4157af5d3ed7acd65b310a4045eafb56af7
MD5 7d294f4ec2c9640974803a61153ef3dd
SHA1 3bc244518f863b754a97ca1b756580974c0d4356
SHA512 ff09177dcd695a185d66afa8405eb7bf0883d4c1e6507f00a12cd958562e2f0444867f6dabdee6e50cd5977897e4d878f31cb51888ba6878829c96cbf80fb283
TLSH
T129C08C236EE2A979C0346743A88C18B0000CEDBBEA1508EFF2103CAC2C0F2B819F04CC
MD5 SHA1 SHA512 TLSH

Submit Download

stddef.h

Path C:\Program Files\Cheat Engine\include\stddef.h
Size 1KB
SHA256 a2eeaa997ab8f1d3b3ff35612aa61f8d53e61bdabffcd5bbd21c68bc41ab0db5
MD5 9046abc90d479e324b95e99f8c871cdf
SHA1 b74d7a314dae76b3304f2d57fd052fa351add75c
SHA512 6dd7827908eb176ca4b0bc666a000c207e9aaa0a51478376e9705195e72b8ebcf52668162019696b42427bb8a1cb454982623ca6317da0a13ddf4b76ce2bfad4
TLSH
T18C21FE278E893690B8125472920B14AE114FC27377D2EAE11546F46C2C2393464EDED7
MD5 SHA1 SHA512 TLSH

Submit Download

stdint.h

Path C:\Program Files\Cheat Engine\include\stdint.h
Size 6KB
SHA256 33c6c8da7d564b5702af8c6ff45c00a16842ba3ffe3f95f7f6232752f63c5afd
MD5 90c1945afa014fc0f8d17078c51502ca
SHA1 f3a15dc3e32ed97b8cc34c1afa2c66ecba3b3be4
SHA512 be8557bda158662acc18cbd4445d4d2e6787fb5c78a67f0d0e4a62ffc9d2b1173c30c66ca5c6a247da8fe7c38b7c57aff050bd4a35b0120bd95400cfb4c2c2b6
SSDEEP 96:Od4Q69/YQhMgPRVQzD+5VO7wRUNsNwxzMD2eT:Ou/f3Riz65VO7wRUNsNwxG
TLSH
T133D1A7042EC471E112762223888DCB2D821FDC7BBAD6A5F931558C7D1D29E4952FAFEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdio.h

Path C:\Program Files\Cheat Engine\include\stdio.h
Size 14KB
SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
MD5 f4948adea7d9f60748de8b427ab85684
SHA1 101ad5424e182236eb7f537f17ce846c917ced27
SHA512 49847ca1a78bc100739b3afc8a0d607ac37e340cebbb0c04b2c067cdbdd6ed33ac5557214282699a89e39f4b8bb3a8b6383fc0a25c19265089e09b08765ea693
SSDEEP 192:VgGovkt8YzcfdLDQgPVj85xhpp0DghdWRUeuzIDcDW40aMsGQLZX9QLbiR:KGr8ocfdL0w5shpwf40lsGQ6biR
TLSH
T1A562BB257A9C8941A1731386F347126105CBD9B331A0ECE4AAAF6A345F33C15B2F5E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdlib.h

Path C:\Program Files\Cheat Engine\include\stdlib.h
Size 19KB
SHA256 5bba095a2d22a6bc0670f73bfebba63cfec65f8b7c248e84e36b3d7ede0a4f3c
MD5 53d74bf044942015fec4afd293d2f9a8
SHA1 010ab014e3b81b3a7e2d1d87ff0281a8736a4abc
SHA512 64b66f0d610d37e6f55702130fad39f39d30f44d33221c6a985cd03948968d4c4cafb7676402a9a4a029c8539efbfa5801c0d1bcbf667b876f3e7bb08f9bf89f
SSDEEP 384:X5I7a44IVaadf7trkr6vrRcbCGX8XnaTjWb5:Uvf7trkr6vrRHaTjWb5
TLSH
T161922F245118DAA3B0735392F707425641DB825736D0EEB0AE9F7B281F63884F3F9E89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stdnoreturn.h

Path C:\Program Files\Cheat Engine\include\stdnoreturn.h
Size 125B
SHA256 ec64d8fbf7fb2e800df9784b2efca0a99fc25a3eb5e8da56e4df098937f787f2
MD5 4163443c81ed0b6beed89487a9471f03
SHA1 48c03d1418cdfefa18d8b14f6740c95db322e0b8
SHA512 7471d9381df0ccbff3fc01c4a27fd5512c2da7a5b6c0d04c52e47417559509610f313b3711a5955ffcf137338dc5992fd2da183c456bfa22b87ecc58e007e505
TLSH
T1ACB0929AF8F290C2C334052588880076E00C4FB319A8A389F8022C2C683307C88F4ECD
MD5 SHA1 SHA512 TLSH

Submit Download

string.h

Path C:\Program Files\Cheat Engine\include\string.h
Size 8KB
SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
MD5 7e3ac3220bf883da2db8cdc7b8100d0b
SHA1 666e6f91306ef6412ae912fa386b3decc6332ad5
SHA512 1e27e9e73c5d3fbec7ce41cb3b5fd6615bacc416991321bce22b599150902352cf60078cd447bbbbd49f3106254c5e88e3fb01ca7de62da9a4dedb6fd60f9b7a
SSDEEP 192:9SahrQ/tJUaRaV/f7WtxfeiZDHy6U4diocGLIvHKLhfyW7Ja0+8:9sJlS6H
TLSH
T19F023813A3299953A4735BE6F303824244D76B673054DAA1AEDF7E301E63485F9E8F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcntl.h

Path C:\Program Files\Cheat Engine\include\sys\fcntl.h
Size 359B
SHA256 2b4f660ffd8994afa0387407051e3ca7ecc8fe44beb2add2d431cd52ce8ad9c4
MD5 26dac89b148799164d02ac701aa67e91
SHA1 018db361295e5c140de8131bb148a09aba0e3532
SHA512 94bcf1a20d11adf422b9a83521a5d6950eca35144cdd719c9cbb483bfb9fc0e57d1ba02d29347a9006b25b1dac746fdee952bfded1e55139586bb9d50386b8b3
TLSH
T1F8E09A649AC8C3B341121A539308E3D28219B4EEB2A3621A380212B96F09DB0031AFCC
MD5 SHA1 SHA512 TLSH

Submit Download

file.h

Path C:\Program Files\Cheat Engine\include\sys\file.h
Size 367B
SHA256 b6e779c53140c117bc36bd335c64bfcb13ae4c2c486b94783b32149a6eb2d320
MD5 da489932c3143982e94284f464f835cd
SHA1 78fc0cce2b7b047712b753af6df40258623d2620
SHA512 02ece23c55d9c425f2b53c4d3aafb7ce12b15995ab276cefa9254c37499b0735faf43ee32b67bf6a542eec5147294bd5c16dfe51caefec6c5b1c7807a4fd5858
TLSH
T15AE0DF64DBC8C3F341121A539308E3D38219B4EEF2B3621A380212B97F09DB0035AECD
MD5 SHA1 SHA512 TLSH

Submit Download

locking.h

Path C:\Program Files\Cheat Engine\include\sys\locking.h
Size 648B
SHA256 29786145e9af34a1f96e7368855b19e8879fc80d35a172d9ba97d3c7fc2f6311
MD5 28bd6385b1c6af18f7b2b2fa7f66827a
SHA1 ad01251c9d742578f2962d71a17969da842c5a2a
SHA512 04df92a3257b4a87fc1a00c65f700c6a9f4897ff3e258fbd27a3b3ad5426a35faa7371735f829f4da40e622e75a8259d4022f0f54bf8f52ca5acfd234ed75cbe
TLSH
T128F0D3614EDFCAB250210C12355D62855204ECB76A21D4DE7D50DD5F7E1157C40E5ADE
MD5 SHA1 SHA512 TLSH

Submit Download

stat.h

Path C:\Program Files\Cheat Engine\include\sys\stat.h
Size 6KB
SHA256 4dc126ab4b3177da85e40ed56a7d4516105e436a4624272992816b23e03915b5
MD5 c03d618d6697b5e3992feea86a9c4cb8
SHA1 4536ccd81aaef11cf7480649b8b99836c8b32291
SHA512 236235aa9b16b4ceb82c05bf526eca702cb7d8c542f88d0bdb2416ac3be8214688e6ba47bd253aaa877e173197035fd1ea7bf88aae6c72c907e898182a5593c0
SSDEEP 192:1Roa8xTSS9V89V0B9V69VP9VCJQI99wMupDGi+dpq+p:UdTSE44GPkfyDGi+Lq+p
TLSH
T17FE121157DEFD944FC606862E24911B40BCB88BB29D6C95AF60D2E7CCF6322161EC5CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

time.h

Path C:\Program Files\Cheat Engine\include\sys\time.h
Size 1KB
SHA256 518741f286545434df676572e53bf8553b0496a7138942dc6b20ff252b4293e4
MD5 d8bdddb8a0b2e59371ce79ef056873c5
SHA1 25f481b63f4343dcd56d2f15fe205f16bf008cb1
SHA512 4e009938eb6499f59022d1c2227a7e10fde44c1cc4a38de415b9e2c4e932e302c25845d68c6b2107cc037ab8053fe43350b2312a70130880004881e53edb8f16
TLSH
T1F231E3355C7C82A144620C63D61935E4A7A888AF7F4594D83855EEFA5F0373082F72CC
MD5 SHA1 SHA512 TLSH

Submit Download

timeb.h

Path C:\Program Files\Cheat Engine\include\sys\timeb.h
Size 2KB
SHA256 ef43f9f51660ab8282707f7169cc3d977878e623743d23ec565663fe2b4e9782
MD5 19e8a20458a7627517ad83c0be798773
SHA1 fb12989d8b6b899f89f10e39559a46d79addec65
SHA512 4c21638910d0c87097e2ffc7b28b1011601e7b187297f9b9c2c3db52596f84a0cfe089ef172a0dcda0dcbe0b5b5dc94f36401a233cf7b903520c98b826a769dd
TLSH
T13251D1367CFDF1F114800C23A3042BF06B5EA29B6F59C470A912A7B9AF5372140EE98D
MD5 SHA1 SHA512 TLSH

Submit Download

types.h

Path C:\Program Files\Cheat Engine\include\sys\types.h
Size 2KB
SHA256 f1c3f9e5c811a63bebae5229042c09cb5e057f4117fd31b45aacbb4c3a626df8
MD5 c8f3b2f1fcf386398b5f130f0599a72e
SHA1 242163a76e04f20ce4b3d5d0a959d66b978f43ad
SHA512 3239360e2f810ebbb853581e01657a69ba9a56f6bbb29288011d6f842ce2c405d27a7d818c5e4809ae053481723dfa7dc37e4778edfe6b6392884eb32804aa03
TLSH
T1154155395C9CF0F041555D23E2082AF44D8FD6EF2FA6E4B49805B539ADE622181ADBE8
MD5 SHA1 SHA512 TLSH

Submit Download

unistd.h

Path C:\Program Files\Cheat Engine\include\sys\unistd.h
Size 351B
SHA256 1f595a85caeeef7385a0bda94af51896b214ee26056484af50353e9393de1929
MD5 244c135562d0b700d037299e0052a855
SHA1 59f8a3b33c5cc8bbf95e4b57300628e7599df682
SHA512 1f5def177331b0e4dd86b5fc38fc9cf4f679bca644c26c993d2a911dcf39db452d084bf29d76430f5704e218cbccd86d68f11d38c07b93a818ee446ba249eb53
TLSH
T1DDE02669DBC983F381120A539314D3D65228E0EEF6B3921A381312A97F85EB0031AECD
MD5 SHA1 SHA512 TLSH

Submit Download

utime.h

Path C:\Program Files\Cheat Engine\include\sys\utime.h
Size 3KB
SHA256 524312e3e8a325f7d5afc21ddb8fcbceb85d451175e07ef1beadb7f82fa368b3
MD5 0fd455848e3b07648883ff0c890ba3b6
SHA1 22430c3ca7a2fabf95297ba72ca5fb175e37e996
SHA512 53adbb9316b7ad49bef5018e3c32c10272a2d4a5ccf9a91d818d48c94c4dc4650acc2ad462c2154e010e666b762b0b7f57bad1a471830a0c5bb7422afc62f840
TLSH
T14861862534ECE5B392901D22B20117E42BCED5A23F99DC509979B7709F93E20D2F9B8D
MD5 SHA1 SHA512 TLSH

Submit Download

tcc_libm.h

Path C:\Program Files\Cheat Engine\include\tcc\tcc_libm.h
Size 5KB
SHA256 758e0585edfbce44bf27e0bb44d9b22af53b86c9c265e4303df9b270194ed4ff
MD5 7166d4b47303e4dc38ebeae8b204075f
SHA1 fa0341b00479d682c8a398e8ec1c6d4d7fc2d05a
SHA512 4a4df260266b6f17da29e71254969dbe377cc11bade3513bab1f3b767ce049c9bbe1b0656263763bfb5d10c9d325b425364f000baa4342572556716b857e796d
SSDEEP 96:jlnbfJdTPPut0CQHXOiNZIZvYx6G5Pcz3mZqZ9VZ59uxS34n3C3:NfJdSbQHXVNiVYx6G5Y3UO9VFuxS34A
TLSH
T1E4C1DC4C7CD57E076645E0B1298AD4CAF05E468205DDAE8CF42EB3201B2E873A1BDDE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tccdefs.h

Path C:\Program Files\Cheat Engine\include\tccdefs.h
Size 12KB
SHA256 0d59ca4ed0be71f3b2d494612ca26fa7e901af30b2b37f0b4c5adf33df8f19cd
MD5 237a68741ad0bc974cc53b8278839e54
SHA1 96b212050be6063233c33c89ce83ce409fc58035
SHA512 a81da5f88d1833f25d5874caf7f50c1cd0c4c862e5d3c9e1d1ba7f02e56bfdff01713ad5103ea5e614b572dc5fd326705bcae3fda4621942673b4a7613aaff5b
SSDEEP 192:cw4bLJIanJMSEI8ejpTGOLui4NIhIbIXP3qt:cw4bGaGSzNj9G24NIhIbIf3e
TLSH
T148420D214CC4F08854326262A52A0A19D718ECB773E235ECF85EE9AC9F37021E1FD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tchar.h

Path C:\Program Files\Cheat Engine\include\tchar.h
Size 30KB
SHA256 7fe5fde028ff8f69d2bda910664e2c169e7b92c6e7f2cf7915eb72054a9746ff
MD5 e237270733edc1cb97b10870a3d50a69
SHA1 c2406d465b5e8d94e1cb61c6c3f312bdb018ac80
SHA512 8df9add42ad3c8c378e93af4bec69489d59b8088974a40ec04fb91749dc050e3000674c9388fae9937f87d6abb60199b13d179bf0a8654370a66db64cdd2e1b1
SSDEEP 768:ngntwzzdfQQbqvoRFCM/CVwLn4wyQoPUQ:PzdfQQbqvo1UwNoPUQ
TLSH
T1D2E299216CD8C46244B652A6E50E8681E007CE7379D0F6FEFA5A6D2C4D630B6D3F09ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tgmath.h

Path C:\Program Files\Cheat Engine\include\tgmath.h
Size 3KB
SHA256 e60c66ff9017f13ab18ee38824792ca771b9235bcb4df57688fec582739524a5
MD5 2c46f8198e41891c15c0f55b09097737
SHA1 7cee399ff86fdf638d230a1ced76d9e22f3068b2
SHA512 c7c8745a00743b28d10242be553d39c6bbf7a1e4e4d8ae86717d446d935e86d1b1b8812e757fa380aa972c67d9c3c44bd6aeb1aa27c61c3a324805e764dd1d25
TLSH
T1548160102C95D005182672A0975DEB1A6B01A9779B581CFD305CDE8DFBCB466AEFC8FC
MD5 SHA1 SHA512 TLSH

Submit Download

time.h

Path C:\Program Files\Cheat Engine\include\time.h
Size 8KB
SHA256 453793a2d6c6fc772d1cdd60e701fb3d393d752937c1d6b2ca64d5f1cec9fd36
MD5 698ea0c0196ba07e9b949406dbb9ffd7
SHA1 7296cfe82fab54f08d44ce9cbab92bef7d96c96e
SHA512 49984ddd4866060d8e310ca6a2bd53dea87aba70778202c5efed126c35b244df90c42d61477775f327b30597138a73fb2b2ee2e1050dc6732faeb766e870c146
SSDEEP 192:0ih8Bf8Bx8B6qwyKg758H898Bc8BQGDL2XMR6fm4RFeU6sxhE2JFE:0G8Bf8Bx8Bxwyz58O8Bc8Bv208m4RFeD
TLSH
T1EA0224313C2CB1A110A019A6F30645F4EB8BAA473F84D8D47597AB767F23114D2E6F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vadefs.h

Path C:\Program Files\Cheat Engine\include\vadefs.h
Size 304B
SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
MD5 dda4463da15121ed7ad4f091fbf61dff
SHA1 84b4c4973306ef725c3f61446ab891cac6aa66a4
SHA512 d3417cf7702a17f0f327cbaf8d167d7830a2955c19d553893329696cdf2312707595cf0f6ddaa36ea18d0cea41f24e6fa9c15ac14d5bc567bc25a1cc81b733fe
TLSH
T139E0CD508FC5C7B2541219028305E7D6520990EDE9639145381345957F659740669ECE
MD5 SHA1 SHA512 TLSH

Submit Download

values.h

Path C:\Program Files\Cheat Engine\include\values.h
Size 126B
SHA256 fa3758847b33f59abe99b023be00d8a027c391ecd0580a1fe755497c11e0c723
MD5 621045ae9ca57fe30c8a99dd52ac5703
SHA1 39b1e30a678eac4df1b78c0ef9d315a18df4f156
SHA512 aade260048487d82f129a9a51fbdea949793465c33dc147b31943d22523fb1a63c48f80fca370d5929bcca76b89cd15d9786c439a65c396bb4a5416d387e3f3a
TLSH
T12BB02B19563D51067004001117F322C8760E36DD20408851000C000C5C04799C11CC7D
MD5 SHA1 SHA512 TLSH

Submit Download

varargs.h

Path C:\Program Files\Cheat Engine\include\varargs.h
Size 355B
SHA256 07858857f4eed0a61df94beb1a9d678b53fc3d67a0b0e8936155f85ddbcd1dcc
MD5 8c659fcb5ba111c2a40716a84a2540d8
SHA1 20069af3a3805cf4cb05339f7a7a860f04a1e4b9
SHA512 d1b19dec523c79320bb3380f29981a49efb178f06c0538bce0a5b36afeabec9be0f2a9d02436edf2ac0970cb14b175b3387bbb14a1e5f62eec9971c0c7648a99
TLSH
T1F0E02632DED283F200060A029719E3D64209E1DFE6B7150E3C16226D7F55AB14669DAE
MD5 SHA1 SHA512 TLSH

Submit Download

wchar.h

Path C:\Program Files\Cheat Engine\include\wchar.h
Size 33KB
SHA256 c9bf12e02a2ab0783ed1c66dfe43de43c402b33906cada9b1157502a82c7c3e4
MD5 d6b25f8e3068967751493431b36c4248
SHA1 3145ed71f286525d1ff492ae920b30694123259e
SHA512 02a480389cecc909978130585609f57d03728726e72e5fee89874acca4122d971d74fc615949f8675513edcfe3198201ad0118f795b147c6fca10d28e8856645
SSDEEP 384:2186Orc7LIJ8SNgVx6eG17k8MGOHlE4eGP0+aILsGQ86jWIwF2iiEYbS:2IcE8SNgVx61JC6jry2E
TLSH
T135E2CC16A76DD99210B327D3F303025155C38A6B3495E9A5BDAF6E300F63914F3E8E8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wctype.h

Path C:\Program Files\Cheat Engine\include\wctype.h
Size 4KB
SHA256 e12d9c5bcbe4dfb96ea6c75410ea287917b3c24bff9cd2e716d35e00c1d4906c
MD5 c238cfa11a44926becd364ab35bfc821
SHA1 54d68b8ef71d277bd5173e0aac794d6ebdb00360
SHA512 c64f6a3b18d84c8498a2270e7152c4001d6d7ee1acd04169f616a7808a05a02f34e2876ba0cb8d979ae75752109b50a65a66207c86fe936402bda39ac93833c0
SSDEEP 96:4+KnaNsLsNwnSTOXNXgXXXVX+1XPXmXIX6QXJX9XZXdwUSv:4+KA6O6XNXgXXXVXkXPXmXIXfXJX9XZK
TLSH
T1E1A17C667BE9D5E0923410F1B2055845748ACDEF2BC0E8ACF291DA78DF97994C1F838E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

basetsd.h

Path C:\Program Files\Cheat Engine\include\winapi\basetsd.h
Size 5KB
SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
MD5 4bf8483ca6a55237b88b3fb04917c9b4
SHA1 1d5a57a8af15ff88521335970f6c547eb2bda403
SHA512 7c4e012ef32a9529a0fa648320796d2abb287c3c37f22d2cfefe62fd0851cf68b5d373316ad70b51d09f0d0f1f48843a5d6e430c12367b5363648eeff1160466
SSDEEP 96:xOYJhN+GRWlYdGmc0/5ZLURGFVwae+NmZLaVkGMGMRRMhHmdd7sAKGU1LRlw+4i7:xO8hIGRWl6Gmc0hw8Vre+NmcVk5rSHIQ
TLSH
T1CBC1F4861E84E2D5D871E033DCA80192811FED673AE4FDAA949755BC0D32047B2FD6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

basetyps.h

Path C:\Program Files\Cheat Engine\include\winapi\basetyps.h
Size 2KB
SHA256 34842ee3389cb13a72a2b87ec930aadbffce8906eb31480180cff541c7f44134
MD5 09dfc50c697476fdc240969717c514ce
SHA1 c9d444c897a96a4b475379c7c6b826fdf2dff2e5
SHA512 de3e258d4df8e046a131110fadac12572ca14a7359f1c44c41debc7e8f1424a93bec6300e3ca21beeb55ff4b3ab572f0b3059d9399c89cff27d154dcc90238f7
TLSH
T1CE41ED2D9DDAF9BF11745A5A59DCD9868047EC3339225AED78464FFCBC0810A00F22CE
MD5 SHA1 SHA512 TLSH

Submit Download

guiddef.h

Path C:\Program Files\Cheat Engine\include\winapi\guiddef.h
Size 4KB
SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
MD5 d65fffb282c1f60ccbfc4dcf1410be1f
SHA1 2be8badb6c6fb0db0b023bfbc7b6842e0ab73a8f
SHA512 e7f9554980671dcb14c62ff462ae34961c01e0dd1afa9f8e010370b0941e22ba619abea98dce090762888a1e485586baaa0917167ff6373c8309374ebce8054f
SSDEEP 96:lVeZAP1SQySDz25/rPjEgE+2VPYFjrQUnL:lVe01S9kNcH
TLSH
T1FA81E0360EC9E1F124258173780C9B15A88DC9EBFBB0E1FC70466679DC5721A96FA6CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

poppack.h

Path C:\Program Files\Cheat Engine\include\winapi\poppack.h
Size 282B
SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
MD5 584ebd620b89c671805eb5917278c46f
SHA1 645dca8a4775e323eed290eb1262a898e3bd8df3
SHA512 f80c37df443967189b8b3e246e860e854a65283b9e7dbbfd87fe30e6e8285c785df2d6f74ac9d7d59cdf655e543b830042a51574fedcf5611714946da2d1d542
TLSH
T12CD02B65EFC543F2829206028318C3DA520CD0FFB5F15159781105EE7F01A300656D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack1.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack1.h
Size 285B
SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
MD5 f7ce406b57af97c8ba95eeb9d7840c1d
SHA1 ed211a37e0efca13a0146f9fe775875d32db3496
SHA512 b7ee10fbfe60f4f6e998d48d88c36095dfa70524b9e24a6e3bdd6c0a62fbfcd66725e28f227da1469448c909d08dc57add7484d7feeca35b2ff3a4f526756256
TLSH
T1C7D02B51EFC543F2429206028714D3DB520CD0FFA5F15159791206EE7F01A300256D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack2.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack2.h
Size 285B
SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
MD5 5f9ba2a3122f6963219bdd95eff0d63b
SHA1 fc7ef1dbf2d51d9e38e79bc4d2dfe7f89107263e
SHA512 4339e932da337fc33cb8544fad3065f82f689e17ae9cfd6a3035a0a1c62271ed0efc44553a75c29207e97555e55ff8f76d42fbef57b46b0e117b087a367a5d1f
TLSH
T125D02B51EFC543F2429246028314D3DB520CD0FFA5F15159B81105EE7F01A300256D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack4.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack4.h
Size 285B
SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
MD5 9e2e16a461b193bae9e69c59c9a3e040
SHA1 17aaa9161d3f9d7270edb80bc850b3ad1cd9151a
SHA512 37c580b406eb30fc66b0135d91d8dc743a9f2abbf830a58272ecf910e4f4bde10ed9a1cf07a8c0f24bfa2d8e86883af76c5a7805fc70a2ae69f1a9d8225774df
TLSH
T1AFD02B51EFC543F2829206028314D3DB520CD0FFA5F151597C1105EE7F01B300356D89
MD5 SHA1 SHA512 TLSH

Submit Download

pshpack8.h

Path C:\Program Files\Cheat Engine\include\winapi\pshpack8.h
Size 285B
SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
MD5 4fa6301a9105c4442fcd8181b17bf100
SHA1 cd49157fa734af5ecb57bde0e7c57b9bc425ce98
SHA512 ec6c5d061c788463d3e262e69ed74f5a21022007f4e3bc5dcdaa64ed641d0c4953a60a465e7972756e427e3b9ac71103aa36ef298f8e5d8fc946210152612599
TLSH
T104D02B61EFC543F2429206028314D3DB520CD4FFA5F16159781105EE7F01A300356D89
MD5 SHA1 SHA512 TLSH

Submit Download

winbase.h

Path C:\Program Files\Cheat Engine\include\winapi\winbase.h
Size 155KB
SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
MD5 18908ace3445091e5966cc99f9d4b5b9
SHA1 130d1cfa2d8a8a17fa2afa4ddf4fe3dfba4542d5
SHA512 0e63d752b56051057c4e553307a708c2359eac58ea96ea0077931642482eb8b6e0b28984a278663d85c6b1739564cab6ffed3d9582306473841a355bd0cbee61
SSDEEP 3072:p8iWoUKAVEvTQ/BUNRB+NNKjxyfmTcFqTPj:p8iWoUKAVEvTQmcFqTPj
TLSH
T18FF38316AA9A10E8E53B8E9104DF54C91DC6C6730739C7C97BB44ACA2E2D54321F1FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wincon.h

Path C:\Program Files\Cheat Engine\include\winapi\wincon.h
Size 14KB
SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
MD5 a7eac92053e54e029dc3b8356a49df4a
SHA1 475df5425a60973ca79c1b0d5fa05dfd59e99e6a
SHA512 1a1f5032e2ba7a837fb043fc7b3dc15796b27fa481b2d8593f8012d503d1aab5c82ab54404898fed81418ffc3b64712476dbc89acaf92aacac051ff40dd3f7cd
SSDEEP 192:T3LK2osQDITqQWDVvRwPhOotRrwAIPmNLd1mBTVuRthEVPQKyybPki7wanag+4+M:lcio4tzIuhEVPQKyybrwan1+4+M
TLSH
T11852EC238EDA11F095266E501CCF48D85D89ED73825EB68937388CCE6E2D64211F2FED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windef.h

Path C:\Program Files\Cheat Engine\include\winapi\windef.h
Size 5KB
SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
MD5 4149cf07a0fcb5fafab7f58bcc951d8c
SHA1 dbf6f1002b67da30ce63be5d41e0eaa76263ac9f
SHA512 1bc969d3700c3beb6416eed13942142315efee5f929c55f539e11fb9196c8865ca05be0a39094c6e7457b671ba33299d3861aec6161dd0429e8a375f378659a9
SSDEEP 96:l4nmx67GjIz13BkHelji9aF7e4KmCtnLK0kO5Ol60V:4mxbjYkHi+IM4OAO5gv
TLSH
T138C1CA686DCCE0E44237AA33929F1A8470DFCEA35F95ECEC381165B90D9919041FDACC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windows.h

Path C:\Program Files\Cheat Engine\include\winapi\windows.h
Size 2KB
SHA256 3b0d80e4b27e099c8af543d6d9cca295c68e115a0fba7cd79cc0e76d1c3a5c11
MD5 437b745f448ba343620fef2015b72e78
SHA1 6e95b00a515154faedb95606f9aa429afe40807e
SHA512 43ee580b0d94f5556a6d4227b103c52678ceece4566a7ce3a9a494e8f19bcf3b33a3e765e10d62c53cc54552532c3b0b2828241354c4c14df13cc7f90d6ed8ae
TLSH
T1DA412778DDBC10B2C13318A2621E9527114DEABF5B52C5BC620979ECFC5419C25EFACC
MD5 SHA1 SHA512 TLSH

Submit Download

winerror.h

Path C:\Program Files\Cheat Engine\include\winapi\winerror.h
Size 146KB
SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
MD5 8a51f06df0cb380eb7e944203bfede79
SHA1 92b3f5d7ebbaa0f35f30f5fa68698d93a708b0b5
SHA512 e50c7d2391c84b3f975f5e6e732691102595bbb857987ad0577b370c34d9c9c32de3fea64dc8dd45608320eb0e7455ee306ca50b1f19d4b209bfe1618ef9b22a
SSDEEP 1536:fAOSurpB+BkRymeRfJOj/7AL1YxEilv+y2aUs/gtvyEmZ1m6tDLiSgF:RHu7LSqiQakytxtDa
TLSH
T1B4E323515FD867A561B1684670AC30620D34EE3B764CB6EC70AEAFAC1E1DE0119F8ECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wingdi.h

Path C:\Program Files\Cheat Engine\include\winapi\wingdi.h
Size 118KB
SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
MD5 fd80383f6f92379e074379ba54d68bdc
SHA1 0a4d4926df853e126fcc52150c84822af1ef8035
SHA512 4ed6c5508c77a8a3272835c6ae1323514e42d015f3cb53168382ffd78fb1a73d806af5421378d1430ed344ba1200e3006d5aaf4150e925c1f2267a8d637a50a4
SSDEEP 768:mmN0oz+ODr15Ye92/rvZVXkRs4pItxtv7OosWBkEwJaYygZtk+tUtwtmtDlwsigp:nuPn7z57mW7T1QFYLCOdKSbuo8Sl
TLSH
T196C395054DC7A1E8E4B65D11266F31842886FDB309D8E9CE37762DAE0F5D14D28F0AEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winnt.h

Path C:\Program Files\Cheat Engine\include\winapi\winnt.h
Size 189KB
SHA256 f43cca894862a7311f5f4fd4789efdecd86563113b374e4f04f23ceb524472a3
MD5 280a1360d58d4c3e56418e807fdc9622
SHA1 3b1ddc5e74e3977d7d88ce80345b4ebbe785d6f9
SHA512 6c4b76ebb45168789d166e133fadb08a653c9139deec602f8589f83c2fcfb54bc6e461c448a6adff32f439a89dca1dcb25ea1fe2c46b605a36534e2cfa6b82b0
SSDEEP 1536:mgqyl7JPZPZWFLvC3b+tc55bLqkI66qJ+bOaCIzxlWLp9EhxSKAMimiAg9+38w8q:FvTTAw+39O8+NQkK9t/k7In
TLSH
T1181471462DEB60D4E176102973ACF0011846FE7709D8CACD389E2EAD8F9916449F6BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winreg.h

Path C:\Program Files\Cheat Engine\include\winapi\winreg.h
Size 13KB
SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
MD5 0f0e5cb60e379839ac67467a6fd5280f
SHA1 0783bec9c6f621aedd45d2f1010740d9a6152b0a
SHA512 06c87ae227bf6d9c00e8404c728cc77de9840237647605aabf197a85131e4835ff6ee96d7bee24fd7b423c86f64d673669d2d2e8061f03473b2b0a1e10dd8bca
SSDEEP 384:CVb+C+ikI8n1W8l12X3ufMfkebe+XxeceAUgnhicr7Df0ff8uc/1uA1uFZNz6deF:q+C3kI8n1W8l14VzPBAf
TLSH
T11E522E11DEC251FAD57A8A105A9ED1891AC2DDAF2A42CD843B603DC6AE5C90F33F4DDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winuser.h

Path C:\Program Files\Cheat Engine\include\winapi\winuser.h
Size 175KB
SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
MD5 3243b7c1189cc2c02075c2b175592ea9
SHA1 b520f45e195a50ab00acc161efec7e6620e652af
SHA512 cdaa9d91f80127028dc877924d2e41b4ef55714485536c4b64955195c94e8ebfbecf9a0d7545df535cbf4c1977ca53c14379b96abcebf7aec461bcbb87ef040e
SSDEEP 3072:jgie2EUSlwrMbtENbSJGDN4tSUez2pUQkR:jgie7wrMSSJGDfUe++
TLSH
T1090483419EC650A8F43E1D1425AE34802816FD3352E8D4EE36642EDEDE7D19325F8BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winver.h

Path C:\Program Files\Cheat Engine\include\winapi\winver.h
Size 5KB
SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
MD5 f0ef1b8ee3a22c3fa3ca4dd26012e309
SHA1 4d78773275154677a5bb66d6393636ca2418ee69
SHA512 7b230b6be986e12c639dee195198ee87ff1e9e0895fe3c101a3e8553d272986b9800c3c74b53a89128821d2d8d439a4968e48c29b2eda43096e48f51b871b18c
SSDEEP 96:EtGsCwPV1Ihot5C5snyv5vdQSZWVvc22c26T9Dd1s4S/BwS9BYwJw3+wIwV4mDVC:oC4V1Ihot5CFQjs4S/BwS9BmwJp9q1PK
TLSH
T184B144005FC804A4E66E261420EC38586951FBBB56C494DF72664DAEEE1E52239F0DCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowslite.h

Path C:\Program Files\Cheat Engine\include\windowslite.h
Size 2KB
SHA256 4510fe31e609755c5e27a0e04474f1a6a0fed6bf1ee5aeb227b7d7c2f422368d
MD5 0b2420ded126fe6ce8c9d03e5e0fba6a
SHA1 fc55276a325d1b6e077f873e436acc1dacf4d939
SHA512 0c78ebe87b7bbc596dae65b89736be67f49ee47cdd817a7479d4450fc2de85e10a6f375f661ef727198a363467cf545c877766b8e2bef0872719a6d37a89b200
TLSH
T1F941332BA9A21CE9F531B2B8154A31D9845F746749D0AE1174DF6A182F690C090F3FDF
MD5 SHA1 SHA512 TLSH

Submit Download

is-ITB5C.tmp

Path C:\Program Files\Cheat Engine\is-ITB5C.tmp
Size 14.2MB
SHA256 bb9531774c782dc66bf6d46cf566fbbb20515a4a078b911b22ed3e45fa0b29e7
MD5 736643d2842818f51707ef431f0230fd
SHA1 4103d791dbeeddb34a68c9f4dff9069ed6b4a6b7
SHA512 93093a37f20dec24c1fb50b715d5580c3ffd35fdadd5727b00b93514c26a310f8213491b21fc4210deacfdc84d507a2caa2c6e02fbd4d5effe486c2cf5dc6320
SSDEEP 24576:BnT+G86Q+ciXnRqAs0DMH2rW3XYUY6/g5JJr:5Tv8ZoDXruYU//ar
TLSH
T1C4E60826E213422FC8737BF4866B46C85E656724323258C633D72ED6BBB1B867D19307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

language.ini

Path C:\Program Files\Cheat Engine\languages\language.ini
Size 283B
SHA256 4aa4f0b75548d45c81d8e876e2db1c74bddfd64091f102706d729b50a7af53a5
MD5 af5ed8f4fe5370516403ae39200f5a4f
SHA1 9299e9998a0605182683a58a5a6ab01a9b9bc037
SHA512 f070049a2fae3223861424e7fe79cbae6601c9bee6a56fadde4485ad3c597dc1f3687e720177ab28564a1faab52b6679e9315f74327d02aa1fb31e7b8233a80f
TLSH
T1D7D02B1A2294033438B81179708C9A46B60882291A707E803BCA1909F68BDE923E0EB5
MD5 SHA1 SHA512 TLSH

Submit Download

libipt-32.dll

Path C:\Program Files\Cheat Engine\libipt-32.dll
Size 157KB
SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
MD5 df443813546abcef7f33dd9fc0c6070a
SHA1 635d2d453d48382824e44dd1e59d5c54d735ee2c
SHA512 9f9bea9112d9db9bcecfc8e4800b7e8032efb240cbbddaf26c133b4ce12d27b47dc4e90bc339c561714bc972f6e809b2ec9c9e1facc6c223fbac66b089a14c25
SSDEEP 1536:K3uc99F6AOdjfTOZztxlGWGXLQbcpNk6FowD6QcEY7Xjl5hf8keDQa/c7usWjcd6:K3ukXTNGp7+6zaEY7Zf/a0ye3ZoOvKOS
TLSH
T118F38D12FAD1C131EA9A067991FC9A138F7D7951CFB888D7B794055CC8203D26F3AB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libipt-64.dll

Path C:\Program Files\Cheat Engine\libipt-64.dll
Size 182KB
SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
MD5 4a3b7c52ef32d936e3167efc1e920ae6
SHA1 d5d8daa7a272547419132ddb6e666f7559dbac04
SHA512 36d7f8a0a749de049a830cc8c8f0d3962d8dce57b445f5f3c771a86dd11aaa10da5f36f95e55d3dc90900e4dbddd0dcc21052c53aa11f939db691362c42e5312
SSDEEP 3072:XMTS4QqrM7BqUHEwXDVT6B8AF6aBBcFkLODeYJObCkEjOUkOG:XIQqrc7V5Trw6aBBcFk6CtbID4
TLSH
T1BE046B8BF2A400BAEA53DA38C8D74506EB727452C7A49BCF4254027ADF573D25E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

files here are in the lua searchpath.txt

Path C:\Program Files\Cheat Engine\lua\files here are in the lua searchpath.txt
Size 142B
SHA256 3a21d77f86dc718e449c9690035362ea971d55e6ce1bb31f5ec032cb42d02940
MD5 53ff72c3b19d1c9416567aa03721c7d9
SHA1 78a04c4c6bc4a7c5ca094667b38f9d36198b00e9
SHA512 2a2f6ff1a3c912c3d78f4afe297dab3da29670446cc1d547f6455eb1254e3c4846cc0a295c9e534714161ba103e7ca84f7b49c6a5ccc81bcee31195f4123409f
TLSH
T1D3C02BD938C3B32031C1E3D220402904D3C7D8591300A112F480B06ED0D16D69A3E0F5
MD5 SHA1 SHA512 TLSH

Submit Download

forEachForm.lua

Path C:\Program Files\Cheat Engine\lua\forEachForm.lua
Size 364B
SHA256 218b459887d23819336482890c2b6a0ad3f2f4ad3359423297f5e46c18ffe071
MD5 9642579175a8378a876dc7223d22b6e4
SHA1 808c8543f2d75b37fcf93059f2cb578e1c6115e7
SHA512 efe9702a3c40371859b5c16f4f574d938bafe8fc3476632b3fad1118f998005ff9598230e35c3e61fde0c49fa0b317ea8ed0fa689bbd8f9936f411ee8473b9d1
TLSH
T193E020397E4252F59CF3F2ADDC5F1405E21301235DA5242176EC30C11F3155C966277D
MD5 SHA1 SHA512 TLSH

Submit Download

json.lua

Path C:\Program Files\Cheat Engine\lua\json.lua
Size 10KB
SHA256 d937f80c47d79b1a4eccca3bdd8b260ce56bd42dee592e69771fd2c078b19d8b
MD5 73968620592450f5b8632196bf52a948
SHA1 e2c1609e176a3832e9a438411e743216c558f276
SHA512 e3ff2f936a064266f6ce6dd5e0cb475dfffbedb2fac067d524a9c9f314eccc32b724e9e4a4fc488f83616e8fb21263abf0ab54622883c2df737b69100386e9ea
SSDEEP 192:QsQHCs3xNCcX7RgH+OKeMV81OGQuTS6Nmx/6OEHN6q4n/uGsOdGChHihZ72X42gx:Qs1sBNCcXdgHIevOG7S60x/6cXuGDdGR
TLSH
T1DA221106AD9381B11AF3C362DC9B1616F37921422324146B78ED11A46F35AAC96FFF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luaclient-i386.dll

Path C:\Program Files\Cheat Engine\luaclient-i386.dll
Size 197KB
SHA256 dd07117ed80546f23d37f8023e992de560a1f55a76d1eb6dfd9d55baa5e3dad6
MD5 9f50134c8be9af59f371f607a6daa0b6
SHA1 6584b98172cbc4916a7e5ca8d5788493f85f24a7
SHA512 5ccafa2b0e2d20034168ee9a79e8efff64f12f5247f6772815ef4cb9ee56f245a06b088247222c5a3789ae2dcefadbc2c15df4ff5196028857f92b9992b094e0
SSDEEP 3072:fr03mcDwt5b2+z615yQ7SLVTnyJYpgerOEmgsRBZnwO4oO8:fg3mrHb2+z615yQ7GnyOpFOEFKD2G
TLSH
T1F6145B57B5019277C7472EB8464A4A956A74E62038F2E0E77ECB0E4F9A74FA06F34307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luaclient-x86_64.dll

Path C:\Program Files\Cheat Engine\luaclient-x86_64.dll
Size 260KB
SHA256 253d18d0d835f482e6abbaf716855580eb8fe789292c937301e4d60ead29531d
MD5 dd71848b5bbd150e22e84238cf985af0
SHA1 35c7aa128d47710cfdb15bb6809a20dbd0f916d8
SHA512 0cbf35c9d7b09fb57d8a9079eab726a3891393f12aee8b43e01d1d979509e755b74c0fb677f8f2dfab6b2e34a141f65d0cfbfe57bda0bf7482841ad31ace7790
SSDEEP 3072:KK2iOI60nWU4NJ4twEywGLOJQbcOL9z32fY8iV1OQfkz5w4Q7hk1D2oOyPOP:KKu0WU4J0w6xJkBAY8i7fkaThkA4g
TLSH
T1D3441B6B7612CEBDC0CFCB75448A86E2D230FE500DF5974622C12B1B9E76A906FAC54D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.fx

Path C:\Program Files\Cheat Engine\overlay.fx
Size 2KB
SHA256 c4d23db8effb359b4aa4d1e1e480486fe3a4586ce8243397a94250627ba4f8cc
MD5 650c02fc9f949d14d62e32dd7a894f5e
SHA1 fa5399b01aadd9f1a4a5632f8632711c186ec0de
SHA512 f2caaf604c271283fc7af3aa9674b9d647c4ac53dffca031dbf1220d3ed2e867943f5409a95f41c61d716879bed7c888735f43a068f1cc1452b4196d611cb76d
TLSH
T14441ABCA6E5690230F36C6AC2B7B4D48E7094987CA7A4A10714C53671F7246D4BADFCE
MD5 SHA1 SHA512 TLSH

Submit Download

vehdebug-i386.dll

Path C:\Program Files\Cheat Engine\vehdebug-i386.dll
Size 326KB
SHA256 cb716753fe77bc54cd42477be9bf4b5bd8120b4255756855f33e4684bdaff6c0
MD5 6350e0918f6f7996b43b91988858cba4
SHA1 341ce5fd4ce05ec1d121c1659175bbff3454b053
SHA512 69f078c5c7eb57b09dbe8641233a179ee74904ab3d3f12d68e6245c501cce94b0da2181c880253a6a8ce602dee6679517ecc533a0bd7a9bfb276fa6a9a1d1e15
SSDEEP 6144:BokW02RSGoXT3agNiXms6200zr3MEgst84IuH3jyyIf:+kW02RsXjag8mspAEgst84IuXe
TLSH
T11B645C52F9428237C4663DBC5A4B55D95DA4F92038E2D1C6BFEF0F8F5A31A903E6430A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vehdebug-x86_64.dll

Path C:\Program Files\Cheat Engine\vehdebug-x86_64.dll
Size 415KB
SHA256 8dfae450e6de868c3b2b5db4483b979216db5d3af46fe57e1d432c198c2c5414
MD5 c648240edbe4ce3166914013e70081cc
SHA1 9b403d8cd8d88bcce22d1403e950848d76642d51
SHA512 34c86d16e61153e0007c93615a7c4782f9142fde74ac3d786452c58a74af5e54d4d888fb2438f34642b1981732803d8f3114062a22a36c87b17fd0228bcf68a7
SSDEEP 6144:yLJXTQOWZyX1UoQRMYRLlif0bVMmC/lSHmwjhGG:uIZyXWtRXLlif0bVM0Gu
TLSH
T130944B2BF622CA7CC0CFC778449287A29730FE5019F5A78773C5671B4DB1AA06EA854D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowsrepair.exe

Path C:\Program Files\Cheat Engine\windowsrepair.exe
Size 262KB
SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
MD5 9a4d1b5154194ea0c42efebeb73f318f
SHA1 220f8af8b91d3c7b64140cbb5d9337d7ed277edb
SHA512 6eef3254fc24079751fc8c38dda9a8e44840e5a4df1ff5adf076e4be87127075a7fea59ba7ef9b901aaf10eb64f881fc8fb306c2625140169665dd3991e5c25b
SSDEEP 6144:0drkqKo/nt7PrwnoK0M6EZgugEkkoSE5O7Z3LLr:6rkm9mP6EZgugEnoSE5OB
TLSH
T167446D56AA13C37BC5837EF84BC486F157B1EA142D3590DB32C60B2E6A75FE02F25219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winhook-i386.dll

Path C:\Program Files\Cheat Engine\winhook-i386.dll
Size 201KB
SHA256 3cdb85ee83ef12802efdfc9314e863d4696be70530b31e7958c185fc4d6a9b38
MD5 de625af5cf4822db08035cc897f0b9f2
SHA1 4440b060c1fa070eb5d61ea9aadda11e4120d325
SHA512 19b22f43441e8bc72507be850a8154321c20b7351669d15af726145c0d34805c7df58f9dc64a29272a4811268308e503e9840f06e51ccdcb33afd61258339099
SSDEEP 6144:ZyuXZus0fJ34+UZQ5IvR2diworEdVpRmY:nXZgV4dkIJfrEdVt
TLSH
T179145C86E602C333EA5F2EBD464C45A16574E7202CE2C0DF7ECA4E5E5BB4FA05F64246
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winhook-x86_64.dll

Path C:\Program Files\Cheat Engine\winhook-x86_64.dll
Size 264KB
SHA256 e08b035d0a894d8bea64e67b1ed0bce27567d417eaaa133e8b231f8a939e581d
MD5 f9c562b838a3c0620fb6ee46b20b554c
SHA1 5095f54be57622730698b5c92c61b124dfb3b944
SHA512 a20bc9a442c698c264fef82aa743d9f3873227d7d55cb908e282fa1f5dcff6b40c5b9ca7802576ef2f5a753fd1c534e9be69464b29af8efec8b019814b875296
SSDEEP 6144:XcxPVJy83/NkY56owwouBQGsyTfkaiX6P0a:XkPV483FB56wsyTfkOJ
TLSH
T19E440ABB7612CEB9C4CFCB3549C687E29670FE5009F1A74611D0271BDEB6A906E6C10E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 df36a2addc7b34a85eb052134b3a964637c0e6a355e200ea2f0080e2a6d50214
MD5 ee3cb2b2e5f184162359cc9c0329504e
SHA1 34cfbbb603cfb1fd8bc5c53be18efc74c76fa7e1
SHA512 c56c586d4205fac2b74e2fb62fd00ef31d2067dd45a30c99eb0843460bf8d64b930b1fad43029a1e2cb76ad81ce153a0c93ce0008c76670c5cb76427daef6537
TLSH
T1F0E02BBAD961EC2B18FE1768B0618745EA60535F27408D4B763C850C8FF1A3E678581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 a6665442ed69c598ef2e4e65f7be946054c067e8580fa04d86b81cd37a28772f
MD5 1d499dd5630620429745293759d9ea0e
SHA1 0f3e8bc57c59545a2f1b4aba885376558df5b345
SHA512 e8301b7e05d06867576b93c2cfb72e2acd6c19afa87c2e8a7ddccbb5c6e6e99d70a2ba1542354812140895f45c720308bd0793a7ebb32db6fadba10431c5d931
TLSH
T1BC11F11081E79599DF1CD5B674A2AC093673E03E05C7DB8390A15DE8889F6C87F1C883
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 8a261e8a6c2d4459817cb93a76251aa2acb7df4fc6aaf1a87e93c85b63f08a2d
MD5 49d311c2c921ce3f408f8671f0aab9dc
SHA1 3459c0da637239f3d4fdb50e9da0830503f9d670
SHA512 92f51293d9c09bdb7c209a0ed5e16291535d46ee02bbbb2ec50d8ce014090225f3abfe59465838a997ec879e7ad9debeaefefe73b6e6e7af62a3b93b510069c8
TLSH
T16611421080D76A99DF1DD4B27492AC053233D03E01C7DB8394A15CE8889FBD87F1C893
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1c07b6339202d1969ec4be97263d673cab8c61caf28624f16cd8943e31f844b5
MD5 980611f136b327f24e7e1a04b6102ed5
SHA1 9f95ead8e92562c063364b4da462e1d3061daf06
SHA512 e5d5168430c49c6cff654de69afe167c58f0b68475de192f311a7227db40a008a27a56466a13e028495194625739fdb7f8685b4b4f86dc8b8e67e4246c643fc4
TLSH
T16B61A8045AC2ADD1CF58E43360EE7D182523E33B41434BDBD2A05BA865CF3E4669EA0A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 a6dd041b5ace516a44aff865418475a1fcffcc0c54bcc40b546deb28f4b3fb9a
MD5 dbe3ee9b6132757793ec1331765eca79
SHA1 3a4d8304244ed72286ba51d21eabedd38f602bb1
SHA512 0997d21dae166482d4de9cde3aec4bd0fa266885dcc578764cf4211dc856d34b63e5465b13856ec8ce35c6a05372d99af2fb9143f1b47d0ae9781a1c2617f4a1
SSDEEP 384:DanceumbVj+QYlJ5JmuP5XQVN1mJRqFHwJe7ldLMvDwaIa3ip2CmCVReFK0ID8cT:LzDtMBloYXaBhW+Y
TLSH
T1FCA2BBB3C3D8D62DC90223F5DB257E1FCD1A0A6842283D5789D9EF8B93E2472D24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 318bfa58746fe1f71c73440682d58c24807ce4ccdce168cf7e30e8f7afbb6606
MD5 d8630ce7221da8f9648e082ecb6f1e51
SHA1 beb06a852ec8567a24ca366152814fcf958f4fd0
SHA512 14a9be7697312d75527fef4df5f478fdfa590a85f1031b324fa30de15cfc78f763a86f5f16f07edf8d8267d5774ebd0ed74d309a810f1c8be8308a67ce2746b8
SSDEEP 192:DancemJmbDJj+Q8JlJ5JmuP5LIa3ip2CmCVReFK0IDe7cPSHBxP6TPF8EAjyFq98:DanceumbVj+QYlJ5JmuP5LIa3ip2CmC3
TLSH
T1443289F3D3D4CA7ECA1153F2EA117E1BCD1A0A58422C3D5788D59F9B93E24B2D14168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7bf1b5209b29ca24ba04729ac892776c51076e962166be62e2a06e92265e569c
MD5 0c3945216edbc16464469e481f7e90af
SHA1 8e9870be5c3c9d8ab3de4c575b6c419e993e657c
SHA512 d0e97ef800d26b6dd9db3e3757513fe5077246cf03d543b0234c5b7f916874ed9cbb62bf6a013cfa046c7487c3f181b1dc2bbb48d70acc7baf9d79b70635d4d9
SSDEEP 192:+RrOHmtv72vAPRpM+Vzf9THsb+WNPXH1wUsTrWiyeEM2OvK/VyIsnAUgE:+RrOGNCKXXFwvVkaeF2OcE
TLSH
T10552966FB910297B6CD6D219F9617B2BE7F2103165946E84E6FC8E2C14E75CD322700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 78fafea642dd57c8d0ef9637ec150b2f5b9df61f655050dad52016c06962938a
MD5 1bbe41730d6bc986b77864fe82f399b2
SHA1 8585fd10dfb18f1343108782e97a95366bbc698d
SHA512 dfdacf9e9d5bde6140319bf53be556f35441d0ca54b9070f221cb4f0b0ed5681201418eafc8059cb8bace1881fec12ec83db2a8fe9bb453ed481a7891f9eb824
SSDEEP 192:6RrmH6Hv72vAPRp2qT9THsb+WNnMcz6S2KM2OvKRVyIsnAUge:6RrmaPC6XDFwHn232OMe
TLSH
T1DE42A62FBA10297B6CD7D229F9617B27E7F6107165946E84E6FC892C14E75CC322700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 89cdbfecd23ae798fcad6be81afcf8460159b516bdbcebb0f3ad0d37d07a7da2
MD5 ae9f3ca7dc09cfbe5ed9a2cf1d2b60fb
SHA1 13b5e653485d9ae401221ddc4236f86939900d04
SHA512 3214372da290b53700e32a1ac6ee6d7a5110175a585318f6f3478830d0321b2d06d7dbca0cb484cd77e79dfd98aa16578c31041ccf0206556bdc7627b0c2e26a
SSDEEP 192:+RXcBXOHm6v72vAPRpM+pzf9THsb+WNPXH1wUsTrWD7EhM2OvK/VyIsnAUgE:+RXmXOGWCKX/FwvVkiEy2OcE
TLSH
T1FC52B66FB910297B5CD6D229F9617B2BE7F2103165946E84E6FC8E2C14E75CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 33cdb93837421b4b6d36e8c546781fa50602f41cc6c4918758796e22f101d0c8
MD5 8d6caa584b0747f5f488e6b9844586fd
SHA1 45d00c4de7e961448d0f64b4034025664a0d4119
SHA512 1a2271df318120ef2d41f9bf4249342e931f3697f2482c5f7138de519e89286ef8cc0808a4a1f0c02112ad8415c99c7fc8e7f1904faedc347166ea04fb7b2c05
SSDEEP 192:+RrOHmtv72vAPRp2qT9THsb+WNnwUsTreNM2OvKZVyIsnAUgE:+RrOGNC6XDFwjkee2OAE
TLSH
T18642A66FA910297B6CDBD219F9617B27E7F1103165D42E84EAFC892C15E75CC322700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8e8e392491f56c0ff02345d026aee9c5deeedb20a9754c1a5df2a3fa188bb964
MD5 358c90d1e3361421775b178423629398
SHA1 1fab5bc449aea4939b38b2b92a52ed09b91c26e4
SHA512 fed6914227a554446c640205a44874dff376ae75c703113798da4613cb7144cd20d848af33bb08f1e92ee6bd7243d6f22895ed7563978703d00a591a793643f7
SSDEEP 192:+RXcBXOHm6v7AvAPRpM+pzf9THsb+WNPXH1wUsTrWD7EhM2OvK/VyIsnAUgE:+RXmXOGWkKX/FwvVkiEy2OcE
TLSH
T11652B66FB910297B5CDAD229F9617B2BE7F2103165946E84EAFC8E2C14E75CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f2f9c94866397f19c2dfe4add11dc58e088ccae1b08009147e40abaee3922828
MD5 b3de84b5f6daeb1f177066ef95eec92e
SHA1 8bea34ba5fe263ae8836f08d4909bef222050afb
SHA512 c657bd94678199e7e71ad897e47293d81bc4e687b3653adeb4dd5bde2623d75896741fb7edddc6634d9b9a0a3f8bf3c716c3abab574f47eca67351e13d77c10d
TLSH
T155B01200814A66A0CC41E271110B608822D4CE218150924287E0FBA5A8570E02118111
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 0e1a81acee192d085b8be3f0b5165c4f10eb1315a6766f102fca85c1cfd8ae6d
MD5 a458594eb2b35f359b39d65223e9f5e9
SHA1 55c27713f40d7af47283a30e80e0b26cda7c7c43
SHA512 d82473bb0f8fe8184e1c7375413e50b0bccaa544667c579874a610d561ded07b3488c3e1f55028c08b6299e04cfdb60cf3cd063a810d73027158054637f61fc8
TLSH
T174B022808000082AC080033A33E030C03BA00E0003C3E202C0BA8338CA003030300203
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 5f5f1595f26120da2aaf0883a7f3c1e8941a31d11ca91489d0401903b9ea96f8
MD5 90a4ede46a0e0a078adb76a6242366cd
SHA1 8a8591a6f2be4679c449e1bc2b3eb64c4bf0a063
SHA512 f6b674c6c5ee0cbd12ddf2908928295499aec3f11ddd28c8d62b9c6c70bf3bef0b6dc0297de85b9ffba96a76596b3c4490aa2d7c62eb4b1d113d6ec0c0026c2d
TLSH
T1ECC09BE73914469F4F30DBD81018761DD557465C4CC4CDFCF40840162179F33840257D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 76B
SHA256 dd9045ea2f3beaf0282320db70fdf395854071bf212ad747e8765837ec390cbc
MD5 a7a2f6dbe4e14a9267f786d0d5e06097
SHA1 5513aebb0bda58551acacbfc338d903316851a7b
SHA512 aa5d81e7ee3a646afec55aee5435dc84fe06d84d3e7e1c45c934f258292c0c4dc2f2853a13d2f2b37a98fe2f1dcc7639eacf51b09e7dcccb2e29c2cbd3ba1835
TLSH
T1BFA002F71C04809F4F30E8EC203DB22DE45B928C8CC4CDF8C40881532178F3700028A8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 157B
SHA256 2ec5d15dc5000592b9027bdb8f6fd3297c87ceed4d4c388464fc6c3d649ec2a0
MD5 62f4a54708b59008007a2648dbd9dd15
SHA1 e62c146d2b3e5614fd980bd9272074effb52b254
SHA512 02f35840dcc76fd2bfd06491cc85932eb6bfef7f0c635dc848c74855decd282a6f43a624181a9b8f829990779665a1c090361a1ceceee51181a420500a97cdb4
TLSH
T1FCC04CE7291485AB4B3096D45028761DD5674D5C4CC4CDE8A41971163075F33850656D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59e6ad.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe59e6ad.TMP
Size 160B
SHA256 82798872c460949e49f87c8632c3bd3749861b34936544de5ec2a44e0fbe1e3d
MD5 07925eb50bd9603522a076038979b51c
SHA1 2127cdf4df382a4684c2d88f15e35f9279833c83
SHA512 099c0bfbe91c219823a1fefe68b9a255620a0a6729b9332d4b78859ceddace08884a4dfc0e68d956404e8429d242d1c15dd20140e777ee4bed1f36ed039a5c89
TLSH
T143C08CB3553088171A20D6E8A038F64CC11F9C0C4CC4CCF88904B05320B8B268011425
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 186KB
SHA256 4a9bd9e6f8fdc65e78e91a63677032a48976c2841a79659f1325dea59bb2e913
MD5 33b004fae34646a34b1274d9c8f0183a
SHA1 671ff4db1fbbbc6b5a3a7a3ff940ede361ae5e1f
SHA512 5d8202e90c31e6097ca3347775c571612637b0bad81ecee2cc889d4b17edefae136140b8f448299d9ffa15ba6274bffb2ddb074f134150ad9b180fdb9074429f
SSDEEP 3072:a+pnC0jFXlrpVchuAx2XyXgbvnGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:a+BC0plrpyhR2XysGm7Rkm1tYpBeh2BE
TLSH
T1A314123B9E5DED775C95970AF0CD430A0BF14A69E828DD8A88E45E003BE7AD91F44E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9c71af872cf591f55fcaf013c85bd52d01726efc59adacc8b079ebad8f226dc4
MD5 9991ddc76251231d76f8a91e5011d7a5
SHA1 3d39fba867798e6ae681537b69f0c4cdcf2b9969
SHA512 b2de498d798a025b534e33ef751bca73dfe5b41407dfd5bf99f3ec5390eb88ee46f1729e4ad39f3067f94bd220b551de39afd367394319bf303f86933e711a2c
SSDEEP 3072:Z1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Zcm7Rkm1tYpBeh2BAom
TLSH
T1BBC3123B5E74E83759A9B75EB08E0A1F1EF14AA6C930DE51C8D45B0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2c55ca24a7367d67bc53260f50ff161b1947ff921fcc5649c2be8362390452a6
MD5 e44b6856bc0f913af8e5441a1a35a224
SHA1 c3ff9d71b105409bdce2c5c9d8e818d96ccdbbc1
SHA512 e2b6cf5f9ea909ed1ab26e3229a32922d37dfcf12d45ab64ac83c2a5a5bf9167356098ab02c2b7b1b981d29ab1cd611771d4f41d07acb2aabf78f0793991f665
SSDEEP 3072:AGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:rm7Rkm1tYpBeh2BAom
TLSH
T106C3123B5E70E9775979AB4EB08E0B1F1EF14AA2D930DA42C8D85A0437FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 dd44505775b0ab8cfd5705e26524129c4deff8e5a77582bc04881f79abe9bfc8
MD5 aa01938302bcfe5ce263cd40303f613a
SHA1 49fd39a980c9e938bbc6e7556f2f8666862a4bd8
SHA512 a9fe77d5da5653a92c4d9e313cf4aa19128f717eb96a8acf5d8b45223a773ef39cdfd039d98454e04b7d97ab65a10f44aa3440f331d81309fdf26dc2f4c7ea0b
SSDEEP 3072:i1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:icm7Rkm1tYpBeh2BAom
TLSH
T160C3123B5E74E83759A9B75EB08E0A1F1EF14AA6C930DE51C8D85F0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1cf524dd2c81b87f2428d7a3a60fb6c291df655e64f800fbc6b16403b77f3959
MD5 4ac501e961c0de322b0073d4621444ce
SHA1 e518372d6a30d115f4da59758a57fedf93d08ae9
SHA512 f129b41201f19949a81aad913811729827b0c530e9edafeeec957b55e51f62bd5ea8f2c689959e31a6839d8d263c4e24ef608be0adf5de8fd4541d39b9c975bd
SSDEEP 3072:X1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Xcm7Rkm1tYpBeh2BAom
TLSH
T1CBC3123B5E74E83659B9B71EB08E0A1F1EF14AA6C930DA42C8D45F0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheatEngine77.exe

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\CheatEngine77.exe
Size 33.1MB
SHA256 cf0f4b6002555677984233c95856683959be83a5def3dc12175a8296eb22676b
MD5 d48171f08532e46643a785b1c47a5589
SHA1 ab010b87ab95b7e05a4f40fab135f814df0abbf4
SHA512 df857c9cd7f965371fde76af13c8ac8a795eff920f56b79d04ad3c6439b7aa6e7defc437067653911af7613577800f05c5a4f66856a96e6e0e0b6612accd2736
SSDEEP 786432:iFzT3psOc+Cjh6+DdfTfzVn3mlZQzPUIl5H:idiXd6cfjxn3mu8Il9
TLSH
T100773317F387903FF57A6A3A49B6D122853B9A2065068C66A7FC785CCE386D44D3F603
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RAV_Cross.png

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\RAV_Cross.png
Size 74KB
SHA256 b92a31d4853d1b2c4e5b9d9624f40b439856d0c6a517e100978cbde8d3c47dc8
MD5 cd09f361286d1ad2622ba8a57b7613bd
SHA1 4cd3e5d4063b3517a950b9d030841f51f3c5f1b1
SHA512 f73d60c92644e0478107e0402d1c7b4dfa1674f69b41856f74f937a7b57ceaa2b3be9242f2b59f1fcf71063aac6cbe16c594618d1a8cdd181510de3240f31dff
SSDEEP 1536:cyfQCzB7fBVwtW5EGtWO7Cemktbbv36SEOW9izF:cyfJ/2WXz7Fbbf61OW9aF
TLSH
T1EF73022A4A77893184B70E9DEFC6E5F338E9B1CD087E68B7D44D2F74A0439805A127C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpyHunter.png

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\SpyHunter.png
Size 104KB
SHA256 f830b2f871de3f474756fd57ff76a80f475009c9c9fdd08795ca1259265c2453
MD5 66648bcff387514d39b89528538d7338
SHA1 68d277ad5cd3dd8037234747204f2bed62bc37eb
SHA512 328ba8a19e1100364ecd44ecdd5972bad0322e947a022675a71d2a22740a7ce3bb1f86fb7c4b8db4b821ad565a9aea850344dc72410e810ac50493a8d3b9cdd6
SSDEEP 3072:gZJpPKKP+/zAcp39uKmqlkr8UgICrJe1t36BA1A6:gZJpPKcOEcp39SXiA3He6
TLSH
T102B302A18876EF74F62BD4B1E743C5D90F406B88E282B3DA370B0521867702F36D95A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAdvisor.png

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\WebAdvisor.png
Size 33KB
SHA256 494169cdd9c79eb4668378f770bfa55d4b140f23a682ff424441427dfab0ced2
MD5 db6c259cd7b58f2f7a3cca0c38834d0e
SHA1 046fd119fe163298324ddcd47df62fa8abcae169
SHA512 a5e8bb6dc4cae51d4ebbe5454d1b11bc511c69031db64eff089fb2f8f68665f4004f0f215b503f7630a56c995bbe9cf72e8744177e92447901773cc7e2d9fdbb
SSDEEP 768:ZH5cQCJvj3+2/C0clMzHBtHlRX6DVL8dT1DKSd:ZZPCJvj3rVcyzHBdls987DBd
TLSH
T1EDE2E056637B73B94E401FADAEF75A8FA9644282147F20B7EFA2D4027018E4CDF49807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

finish.png

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\finish.png
Size 248KB
SHA256 41031efc4f7e322dc5ffacc94b9296fb28b9b922b1ce3b3da13bf659a5fd2985
MD5 b24e872bd8f92295273197602aac8352
SHA1 2a9b0ebe62e21e9993aa5bfaaade14d2dda3b291
SHA512 f08ac681abc4e0f6d7a1d1f2303169004e67c880f9353c0ed11dfab3eb511ddf841fa056f4090da8201c822c66ae55419c48cd87f11b9866feb46a3fe2c2af99
SSDEEP 6144:1QdvglrmnluatdNn508GtXT3YoTkT1ZLw9p2Hpsx/F:2dvglo/nX67HW1ZL8EJ2/F
TLSH
T104442222E202F589DB5295234F58BB64BF7E17B3F4850A2931F8541B07815BE4CF9ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\logo.png
Size 248KB
SHA256 8c5c80bbc6b0fdb367eab1253517d8b156c85545a2d37d1ee4b78f3041d9b5db
MD5 9cc8a637a7de5c9c101a3047c7fbbb33
SHA1 5e7b92e7ed3ca15d31a48ebe0297539368fff15c
SHA512 cf60556817dba2d7a39b72018f619b0dbea36fb227526943046b67d1ae501a96c838d6d5e3da64618592ac1e2fa14d4440baa91618aa66256f99ea2100a427b4
SSDEEP 3072:d9rAhuSnngAZK0u2vGWTbQ8VreGWVQx1RiiHs0dfo5yk5BRFOYfKa5ubF3/hlKHV:U/HJGWPQ2wV01RPQ5FoBJc+uHtjdhd3
TLSH
T13444122A9260C885D35201230725B4787F78264B7A1CACE6F5F77C1B4A0A67E2D86FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zbShieldUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\is-3IMR7JRXM4.tmp\zbShieldUtils.dll
Size 2.0MB
SHA256 976d070339c1ecd80d0d2ded8f2c3fd1c6ec03f408053470f696066c2bb2b738
MD5 ea1aa2927ea58dfb8f57ae5f7dae0c74
SHA1 f1c1eca6070f82cd7c7918eeda144a207a53bb09
SHA512 20b10a4289bfaea9fe25bdeee636a07303799a78f0a732b65a182728bca9f48cf9802f32c833315e7d71a4816fcb9b7b09370c62867421824d554a87b6ea1559
SSDEEP 49152:y4yxp/wFOn9xRo3HVCEi2ynjsPAXkp4K0x8BFuchAFotKLIk:yJTwo93o3UEi2ynjs4Up4KI8BFucOE
TLSH
T103959E613556446FF21B12355A38B729F2BEA3700BF547C73ED4AA1C39334428E266AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheatEngine77.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-3VIAU.tmp\CheatEngine77.tmp
Size 3.5MB
SHA256 ce70cab18db2e2038dcec0edceb1038a37d3851bc3d77dee3dd7e583ac37792b
MD5 278ba21e452cc6820832666c1152b220
SHA1 1fd2f5177b0148fbcc30972ab0eae7d9dc4835d4
SHA512 c912b801e4569373092e4027fa8ff9ff435ace99a543585585a4071cb724218e43d8099aac92cb6778cc1267a38ce695e243a9ecbdde5dfe0988a17ba7201cfb
SSDEEP 49152:21PRegPynt6Si8zZebYZOHiGXs2krmh52guo/333TNC:2peHl8YQfsGduw333TI
TLSH
T103064B13F345653FD06B2B3A8D279384953BB66029139C177BEC3A8C8F395812E2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cdm.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-KFHZHXQMMD.tmp\cdm.tmp
Size 4.2MB
SHA256 07eea42af4d565d09ce6c8723211e96a835400060dc90e53a6bac21b2fd3da42
MD5 af498a69fb53fc1ad081c0c884e4822a
SHA1 b35902fd0a6b1acb19bfb3002f4c0c44a44bdbaa
SHA512 7523307016fd0b58208cf4bb3aba539866bf59d3f154a95084384ad78512fd76380187ad1fbe1ca86043fe0e7384c858174417e2e5d90c57e11921b5e36b7de5
SSDEEP 98304:5YU5hnuOajWwMPdCpepI3GrwrA+Js333PZ:7xuHjWfZIzeZ
TLSH
T177268F03F388753EE4571A3A583FA280983F7A213915CD4B6BFC295C8F396416D2A797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_setup64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-SER42.tmp\_isetup\_setup64.tmp
Size 6KB
SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
MD5 e4211d6d009757c078a9fac7ff4f03d4
SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
TLSH
T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cdm.exe

Path C:\Users\Admin\Downloads\cdm.exe
Size 6.6MB
SHA256 3f9ec3a861e71bd04e8c3029da824be335a2d99964aebf2932ea3753aa2c4819
MD5 33449fad62a1ab4e4cbbb9bebfaf34c6
SHA1 fedc1b9b038ee64ccea79bd757d7e1bb601c6048
SHA512 96636c7f70cebc8b3336199413bd27d979aaa481135489a583390c2cef9871285d087aba23a50bc8687a5df1a79b3a9a8fc1ed3f4babc4b8d8ce2fe410401b1a
SSDEEP 196608:sB92TlYbckURXNYKzogqQtAwKLD2TxaQF1uujtx5:sKTKckqYKMghyLqtBFUujR
TLSH
T11266123FF28B613EE46A1A3539B2A210593B7A6165174C4296FCF48CCF691B01D3E787
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3548-1522-0x00000000000C0000-0x00000000001A4000-memory.dmp

Download

memory/3548-342-0x00000000000C0000-0x00000000001A4000-memory.dmp

Download

memory/3548-383-0x00000000000C0000-0x00000000001A4000-memory.dmp

Download

memory/3556-1521-0x0000000000080000-0x0000000000408000-memory.dmp

Download

memory/3556-384-0x0000000000080000-0x0000000000408000-memory.dmp

Download

memory/4320-257-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-311-0x00000000039F0000-0x0000000003B30000-memory.dmp

Download

memory/4320-317-0x00000000039F0000-0x0000000003B30000-memory.dmp

Download

memory/4320-306-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-304-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-230-0x0000000000F34000-0x0000000000F36000-memory.dmp

Download

memory/4320-1532-0x00000000039F0000-0x0000000003B30000-memory.dmp

Download

memory/4320-1550-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-354-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-231-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-296-0x00000000039F0000-0x0000000003B30000-memory.dmp

Download

memory/4320-318-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-355-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-260-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-280-0x00000000039F0000-0x0000000003B30000-memory.dmp

Download

memory/4320-281-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-1784-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4320-312-0x0000000000B70000-0x0000000000FBB000-memory.dmp

Download

memory/4820-1785-0x00000000003B0000-0x0000000000499000-memory.dmp

Download

memory/4820-255-0x00000000003B0000-0x0000000000499000-memory.dmp

Download

memory/4820-223-0x000000000046F000-0x0000000000470000-memory.dmp

Download

memory/4820-224-0x00000000003B0000-0x0000000000499000-memory.dmp

Download