File name:

Cheat Engine 7.5.2 Repack & Portable.zip

Full analysis: https://app.any.run/tasks/8c23e510-3424-40b0-aa2e-1da87eb9f3d2
Verdict: Malicious activity
Analysis date: June 14, 2024, 00:36:30
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract, compression method=deflate
MD5:

8E25B698A12CAD6261A48DB78473795F

SHA1:

36A9FD5563E3E00F8A6F820805F5D932E3E2B8F0

SHA256:

A01B369C13F453D03D7F0B422DFCF1FD5C209538050D38FBDD129BF397868D5C

SSDEEP:

196608:dPRl34IOnDS0BvpEffigIBg2km55+3iOhRrcoaQ:Dl3RODSvfGBg2km5431PjaQ

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • WinRAR.exe (PID: 3980)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)

  • SUSPICIOUS

    • Process drops legitimate windows executable

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Reads the Internet Settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)
      • Cheat Engine.exe (PID: 1332)

    • Executable content was dropped or overwritten

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • CheatEnginePortable.exe (PID: 1596)

    • Reads the Windows owner or organization settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Uses TASKKILL.EXE to kill process

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Reads security settings of Internet Explorer

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine.exe (PID: 1332)
      • cheatengine-i386.exe (PID: 2472)

    • Process drops SQLite DLL files

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Uses REG/REGEDIT.EXE to modify registry

      • CheatEnginePortable.exe (PID: 2528)

    • Application launched itself

      • CheatEnginePortable.exe (PID: 1596)

    • The process creates files with name similar to system file names

      • CheatEnginePortable.exe (PID: 2528)
      • CheatEnginePortable.exe (PID: 1596)

    • Malware-specific behavior (creating "System.dll" in Temp)

      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • Detected use of alternative data streams (AltDS)

      • cheatengine-i386.exe (PID: 2472)

    • Creates file in the systems drive root

      • cheatengine-i386.exe (PID: 2472)

    • Checks Windows Trust Settings

      • cheatengine-i386.exe (PID: 2472)

    • Reads settings of System Certificates

      • cheatengine-i386.exe (PID: 2472)

    • Adds/modifies Windows certificates

      • cheatengine-i386.exe (PID: 2472)

  • INFO

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 3980)

    • Create files in a temporary directory

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Checks supported languages

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • Cheat Engine.exe (PID: 1332)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)
      • wmpnscfg.exe (PID: 1280)

    • Reads the computer name

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • Cheat Engine.exe (PID: 1332)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)
      • wmpnscfg.exe (PID: 1280)

    • Manual execution by a user

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 4080)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 1596)
      • wmpnscfg.exe (PID: 1280)

    • Process checks whether UAC notifications are on

      • CheatEnginePortable.exe (PID: 1596)

    • Reads the machine GUID from the registry

      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Reads the software policy settings

      • cheatengine-i386.exe (PID: 2472)

    • Checks proxy server information

      • cheatengine-i386.exe (PID: 2472)

    • Creates files or folders in the user directory

      • cheatengine-i386.exe (PID: 2472)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: -
ZipCompression: Deflated
ZipModifyDate: 2023:03:03 16:32:10
ZipCRC: 0xac056c65
ZipCompressedSize: 195
ZipUncompressedSize: 801
ZipFileName: Silent Portable.cmd
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
60
Monitored processes
14
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe cheat engine 7.5.2 repack & portable.exe no specs cheat engine 7.5.2 repack & portable.exe cheat engine 7.5.2 repack & portable.tmp taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs cheatengineportable.exe cheatengineportable.exe reg.exe no specs cheat engine.exe no specs cheatengine-i386.exe wmpnscfg.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
116"C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp" /SL5="$70122,16020650,145920,C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp
Cheat Engine 7.5.2 Repack & Portable.exe
User:
admin
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-5osjg.tmp\cheat engine 7.5.2 repack & portable.tmp
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1280"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1292"C:\Windows\System32\taskkill.exe" /f /im cheatengine-i386.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1332"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe—CheatEnginePortable.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
6.3.0.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\app\programfiles\cheat engine.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1440"C:\Windows\System32\taskkill.exe" /f /im Cheat Engine.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
1
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1596"C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe" C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe
explorer.exe
User:
admin
Company:
https://joosengportableapp.blogspot.com
Integrity Level:
MEDIUM
Description:
Cheat Engine Portable Launcher
Version:
2020.04.15.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\cheatengineportable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
1756"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64-SSE4-AVX2.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2028"C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe
explorer.exe
User:
admin
Company:
Cheat Engine
Integrity Level:
HIGH
Description:
Cheat Engine 7.5.2 Setup
Exit code:
0
Version:
7.5.2
Modules
Images
c:\users\admin\desktop\cheat engine 7.5.2 repack & portable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
2316"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2452"C:\Windows\system32\reg.exe" import "C:\Users\admin\Desktop\Cheat Engine Portable\Data\settings\CheatEnginePortable.reg"C:\Windows\System32\reg.exe—CheatEnginePortable.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Registry Console Tool
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\reg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
Total events
12 204
Read events
12 088
Write events
98
Delete events
18

Modification events

(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\182\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:3
Value:
C:\Users\admin\Desktop\phacker.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:2
Value:
C:\Users\admin\Desktop\Win7-KB3191566-x86.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:1
Value:
C:\Users\admin\Desktop\curl-8.5.0_1-win32-mingw.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\Cheat Engine 7.5.2 Repack & Portable.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
Executable files
135
Suspicious files
49
Text files
559
Unknown types
0

Dropped files

PID
Process
Filename
Type
2028Cheat Engine 7.5.2 Repack & Portable.exeC:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmpexecutable
MD5:FB261087747A12933A785E28F7AA1DEA
SHA256:7EEC6162023108411F9DA921D28A525AF1FBFCDFFF7503425806A6BBF26135B5
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\botva2.dllexecutable
MD5:4F5FED49F041993D76AEB65E66122F78
SHA256:CE30B37B27CBDE551299549999BD0FA5EC880107E7B698FE9AB729A1D657547E
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\appicon.icoimage
MD5:88EA139A9FE4B796A3ED5CB9566943A2
SHA256:EA53651C29366816B7B2297B4BBEDED3201AEDEC4B9E6EEEFA853949CF8076F4
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-NN7R1.tmpimage
MD5:88EA139A9FE4B796A3ED5CB9566943A2
SHA256:EA53651C29366816B7B2297B4BBEDED3201AEDEC4B9E6EEEFA853949CF8076F4
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\_isetup\_shfoldr.dllexecutable
MD5:92DC6EF532FBB4A5C3201469A5B5EB63
SHA256:9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Cheat Engine 7.5.2 Repack & Portable.exeexecutable
MD5:12469E2BB69E8E6BEB31EFE157A0E394
SHA256:DCD081559C2CE3C1A0E55E5BE6F7F4AE564689C229289C50B1DD13F5D89127B1
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\is-EJH4S.tmpexecutable
MD5:6C5D8EF076D960E6DB91ED5F15DD5B70
SHA256:6F070DAB787971AF6C7240F548ACDB858C038B5C5BC3D2C80299EC035E0926EE
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exeexecutable
MD5:6C5D8EF076D960E6DB91ED5F15DD5B70
SHA256:6F070DAB787971AF6C7240F548ACDB858C038B5C5BC3D2C80299EC035E0926EE
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\installable.pngimage
MD5:FE5CDB98A7ABB6B1DD01E86D24B9EB08
SHA256:F0EE3BDE98DFE0549C8DA7AB508E5F367B6D1517C5CB972172A4A189491A3622
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\portable.pngimage
MD5:655F487DCD34C1EF5612A9E995C09AC2
SHA256:BE3006534B86C4290C9F6AFE6A69FFCD6255F283299BDD64289792424D24014B
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
7
DNS requests
4
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2472
cheatengine-i386.exe
GET
304
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c8b7507553a3292a
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x1.c.lencr.org/
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?39c7a4e1e6501a40
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x2.c.lencr.org/
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
1088
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2472
cheatengine-i386.exe
104.20.94.94:443
cheatengine.org
CLOUDFLARENET
—
unknown
2472
cheatengine-i386.exe
2.19.126.163:80
ctldl.windowsupdate.com
Akamai International B.V.
DE
unknown
2472
cheatengine-i386.exe
2.23.197.184:80
x1.c.lencr.org
CW Vodafone Group PLC
GB
unknown

DNS requests

Domain
IP
Reputation
cheatengine.org
  • 104.20.94.94
  • 104.20.95.94
  • 172.67.35.220
whitelisted
ctldl.windowsupdate.com
  • 2.19.126.163
  • 2.19.126.137
whitelisted
x1.c.lencr.org
  • 2.23.197.184
whitelisted
x2.c.lencr.org
  • 2.23.197.184
whitelisted

Threats

No threats detected
Process
Message
cheatengine-i386.exe
p3
cheatengine-i386.exe
syncobjs2
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Cheat Engine 7.5.2 Repack & Portable.zip