File name:

Cheat Engine 7.5.2 Repack & Portable.zip

Full analysis: https://app.any.run/tasks/8c23e510-3424-40b0-aa2e-1da87eb9f3d2
Verdict: Malicious activity
Analysis date: June 14, 2024, 00:36:30
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract, compression method=deflate
MD5:

8E25B698A12CAD6261A48DB78473795F

SHA1:

36A9FD5563E3E00F8A6F820805F5D932E3E2B8F0

SHA256:

A01B369C13F453D03D7F0B422DFCF1FD5C209538050D38FBDD129BF397868D5C

SSDEEP:

196608:dPRl34IOnDS0BvpEffigIBg2km55+3iOhRrcoaQ:Dl3RODSvfGBg2km5431PjaQ

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • WinRAR.exe (PID: 3980)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • Reads the Windows owner or organization settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Process drops legitimate windows executable

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Uses TASKKILL.EXE to kill process

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Reads the Internet Settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine.exe (PID: 1332)
      • cheatengine-i386.exe (PID: 2472)

    • Reads security settings of Internet Explorer

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine.exe (PID: 1332)
      • cheatengine-i386.exe (PID: 2472)

    • Process drops SQLite DLL files

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Malware-specific behavior (creating "System.dll" in Temp)

      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • Application launched itself

      • CheatEnginePortable.exe (PID: 1596)

    • The process creates files with name similar to system file names

      • CheatEnginePortable.exe (PID: 2528)
      • CheatEnginePortable.exe (PID: 1596)

    • Reads settings of System Certificates

      • cheatengine-i386.exe (PID: 2472)

    • Detected use of alternative data streams (AltDS)

      • cheatengine-i386.exe (PID: 2472)

    • Creates file in the systems drive root

      • cheatengine-i386.exe (PID: 2472)

    • Checks Windows Trust Settings

      • cheatengine-i386.exe (PID: 2472)

    • Adds/modifies Windows certificates

      • cheatengine-i386.exe (PID: 2472)

    • Uses REG/REGEDIT.EXE to modify registry

      • CheatEnginePortable.exe (PID: 2528)

  • INFO

    • Checks supported languages

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)
      • Cheat Engine.exe (PID: 1332)
      • wmpnscfg.exe (PID: 1280)

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 3980)

    • Create files in a temporary directory

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Manual execution by a user

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 4080)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 1596)
      • wmpnscfg.exe (PID: 1280)

    • Reads the computer name

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • CheatEnginePortable.exe (PID: 1596)
      • Cheat Engine.exe (PID: 1332)
      • wmpnscfg.exe (PID: 1280)
      • cheatengine-i386.exe (PID: 2472)

    • Process checks whether UAC notifications are on

      • CheatEnginePortable.exe (PID: 1596)

    • Reads the machine GUID from the registry

      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Checks proxy server information

      • cheatengine-i386.exe (PID: 2472)

    • Reads the software policy settings

      • cheatengine-i386.exe (PID: 2472)

    • Creates files or folders in the user directory

      • cheatengine-i386.exe (PID: 2472)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: -
ZipCompression: Deflated
ZipModifyDate: 2023:03:03 16:32:10
ZipCRC: 0xac056c65
ZipCompressedSize: 195
ZipUncompressedSize: 801
ZipFileName: Silent Portable.cmd
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
60
Monitored processes
14
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe cheat engine 7.5.2 repack & portable.exe no specs cheat engine 7.5.2 repack & portable.exe cheat engine 7.5.2 repack & portable.tmp taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs cheatengineportable.exe cheatengineportable.exe reg.exe no specs cheat engine.exe no specs cheatengine-i386.exe wmpnscfg.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
116"C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp" /SL5="$70122,16020650,145920,C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp
Cheat Engine 7.5.2 Repack & Portable.exe
User:
admin
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-5osjg.tmp\cheat engine 7.5.2 repack & portable.tmp
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1280"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1292"C:\Windows\System32\taskkill.exe" /f /im cheatengine-i386.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1332"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe—CheatEnginePortable.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
6.3.0.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\app\programfiles\cheat engine.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1440"C:\Windows\System32\taskkill.exe" /f /im Cheat Engine.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
1
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1596"C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe" C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe
explorer.exe
User:
admin
Company:
https://joosengportableapp.blogspot.com
Integrity Level:
MEDIUM
Description:
Cheat Engine Portable Launcher
Version:
2020.04.15.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\cheatengineportable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
1756"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64-SSE4-AVX2.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2028"C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe
explorer.exe
User:
admin
Company:
Cheat Engine
Integrity Level:
HIGH
Description:
Cheat Engine 7.5.2 Setup
Exit code:
0
Version:
7.5.2
Modules
Images
c:\users\admin\desktop\cheat engine 7.5.2 repack & portable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
2316"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2452"C:\Windows\system32\reg.exe" import "C:\Users\admin\Desktop\Cheat Engine Portable\Data\settings\CheatEnginePortable.reg"C:\Windows\System32\reg.exe—CheatEnginePortable.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Registry Console Tool
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\reg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
Total events
12 204
Read events
12 088
Write events
98
Delete events
18

Modification events

(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\182\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:3
Value:
C:\Users\admin\Desktop\phacker.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:2
Value:
C:\Users\admin\Desktop\Win7-KB3191566-x86.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:1
Value:
C:\Users\admin\Desktop\curl-8.5.0_1-win32-mingw.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\Cheat Engine 7.5.2 Repack & Portable.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
Executable files
135
Suspicious files
49
Text files
559
Unknown types
0

Dropped files

PID
Process
Filename
Type
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\botva2.dllexecutable
MD5:4F5FED49F041993D76AEB65E66122F78
SHA256:CE30B37B27CBDE551299549999BD0FA5EC880107E7B698FE9AB729A1D657547E
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-OCGUF.tmpimage
MD5:C39143D74AD12354387D1C5B972B1C51
SHA256:4C595D0E943D7F9265D06C6DF197F30C1FF99031EA0CFD70A64573AA9B4400AE
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-NN7R1.tmpimage
MD5:88EA139A9FE4B796A3ED5CB9566943A2
SHA256:EA53651C29366816B7B2297B4BBEDED3201AEDEC4B9E6EEEFA853949CF8076F4
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Silent Installation.cmdtext
MD5:381975F9DF239C821926295A22265137
SHA256:62DC5FFB15803B811E23DAF330A74468F005ADF1A6216F8BC12768C08C962913
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\is-EJH4S.tmpexecutable
MD5:6C5D8EF076D960E6DB91ED5F15DD5B70
SHA256:6F070DAB787971AF6C7240F548ACDB858C038B5C5BC3D2C80299EC035E0926EE
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Cheat Engine 7.5.2 Repack & Portable.exeexecutable
MD5:12469E2BB69E8E6BEB31EFE157A0E394
SHA256:DCD081559C2CE3C1A0E55E5BE6F7F4AE564689C229289C50B1DD13F5D89127B1
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exeexecutable
MD5:6C5D8EF076D960E6DB91ED5F15DD5B70
SHA256:6F070DAB787971AF6C7240F548ACDB858C038B5C5BC3D2C80299EC035E0926EE
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\_isetup\_shfoldr.dllexecutable
MD5:92DC6EF532FBB4A5C3201469A5B5EB63
SHA256:9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\appicon_128.pngimage
MD5:27EEF16F27959A9DFB4701F0EB9BB264
SHA256:7A11E86C9DAC275651D9F7A38F64E9729839F5DD5A493A4407978C8C9825154C
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-1QTT4.tmpimage
MD5:27EEF16F27959A9DFB4701F0EB9BB264
SHA256:7A11E86C9DAC275651D9F7A38F64E9729839F5DD5A493A4407978C8C9825154C
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
7
DNS requests
4
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2472
cheatengine-i386.exe
GET
304
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c8b7507553a3292a
unknown
—
—
—
2472
cheatengine-i386.exe
GET
200
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?39c7a4e1e6501a40
unknown
—
—
—
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x2.c.lencr.org/
unknown
—
—
—
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x1.c.lencr.org/
unknown
—
—
—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
unknown
4
System
192.168.100.255:138
—
—
—
unknown
1088
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2472
cheatengine-i386.exe
104.20.94.94:443
cheatengine.org
CLOUDFLARENET
—
unknown
2472
cheatengine-i386.exe
2.19.126.163:80
ctldl.windowsupdate.com
Akamai International B.V.
DE
unknown
2472
cheatengine-i386.exe
2.23.197.184:80
x1.c.lencr.org
CW Vodafone Group PLC
GB
unknown

DNS requests

Domain
IP
Reputation
cheatengine.org
  • 104.20.94.94
  • 104.20.95.94
  • 172.67.35.220
unknown
ctldl.windowsupdate.com
  • 2.19.126.163
  • 2.19.126.137
unknown
x1.c.lencr.org
  • 2.23.197.184
unknown
x2.c.lencr.org
  • 2.23.197.184
unknown

Threats

No threats detected
Process
Message
cheatengine-i386.exe
p3
cheatengine-i386.exe
syncobjs2
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN LLC. ALL RIGHTS RESERVED
ANY.RUN
Reports
Cheat Engine 7.5.2 Repack & Portable.zip