File name:

Cheat Engine 7.5.2 Repack & Portable.zip

Full analysis: https://app.any.run/tasks/8c23e510-3424-40b0-aa2e-1da87eb9f3d2
Verdict: Malicious activity
Analysis date: June 14, 2024, 00:36:30
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract, compression method=deflate
MD5:

8E25B698A12CAD6261A48DB78473795F

SHA1:

36A9FD5563E3E00F8A6F820805F5D932E3E2B8F0

SHA256:

A01B369C13F453D03D7F0B422DFCF1FD5C209538050D38FBDD129BF397868D5C

SSDEEP:

196608:dPRl34IOnDS0BvpEffigIBg2km55+3iOhRrcoaQ:Dl3RODSvfGBg2km5431PjaQ

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • WinRAR.exe (PID: 3980)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

  • SUSPICIOUS

    • Reads the Windows owner or organization settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Process drops legitimate windows executable

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Executable content was dropped or overwritten

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • Uses TASKKILL.EXE to kill process

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Reads the Internet Settings

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • Cheat Engine.exe (PID: 1332)
      • cheatengine-i386.exe (PID: 2472)
      • CheatEnginePortable.exe (PID: 2528)

    • Reads security settings of Internet Explorer

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • Cheat Engine.exe (PID: 1332)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Malware-specific behavior (creating "System.dll" in Temp)

      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • The process creates files with name similar to system file names

      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)

    • Application launched itself

      • CheatEnginePortable.exe (PID: 1596)

    • Process drops SQLite DLL files

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)

    • Uses REG/REGEDIT.EXE to modify registry

      • CheatEnginePortable.exe (PID: 2528)

    • Detected use of alternative data streams (AltDS)

      • cheatengine-i386.exe (PID: 2472)

    • Creates file in the systems drive root

      • cheatengine-i386.exe (PID: 2472)

    • Checks Windows Trust Settings

      • cheatengine-i386.exe (PID: 2472)

    • Reads settings of System Certificates

      • cheatengine-i386.exe (PID: 2472)

    • Adds/modifies Windows certificates

      • cheatengine-i386.exe (PID: 2472)

  • INFO

    • Checks supported languages

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • Cheat Engine.exe (PID: 1332)
      • cheatengine-i386.exe (PID: 2472)
      • wmpnscfg.exe (PID: 1280)

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 3980)

    • Create files in a temporary directory

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Manual execution by a user

      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 4080)
      • Cheat Engine 7.5.2 Repack & Portable.exe (PID: 2028)
      • CheatEnginePortable.exe (PID: 1596)
      • wmpnscfg.exe (PID: 1280)

    • Reads the computer name

      • Cheat Engine 7.5.2 Repack & Portable.tmp (PID: 116)
      • CheatEnginePortable.exe (PID: 1596)
      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)
      • Cheat Engine.exe (PID: 1332)
      • wmpnscfg.exe (PID: 1280)

    • Process checks whether UAC notifications are on

      • CheatEnginePortable.exe (PID: 1596)

    • Checks proxy server information

      • cheatengine-i386.exe (PID: 2472)

    • Reads the machine GUID from the registry

      • CheatEnginePortable.exe (PID: 2528)
      • cheatengine-i386.exe (PID: 2472)

    • Creates files or folders in the user directory

      • cheatengine-i386.exe (PID: 2472)

    • Reads the software policy settings

      • cheatengine-i386.exe (PID: 2472)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: -
ZipCompression: Deflated
ZipModifyDate: 2023:03:03 16:32:10
ZipCRC: 0xac056c65
ZipCompressedSize: 195
ZipUncompressedSize: 801
ZipFileName: Silent Portable.cmd
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
60
Monitored processes
14
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe cheat engine 7.5.2 repack & portable.exe no specs cheat engine 7.5.2 repack & portable.exe cheat engine 7.5.2 repack & portable.tmp taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs taskkill.exe no specs cheatengineportable.exe cheatengineportable.exe reg.exe no specs cheat engine.exe no specs cheatengine-i386.exe wmpnscfg.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
116"C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp" /SL5="$70122,16020650,145920,C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\AppData\Local\Temp\is-5OSJG.tmp\Cheat Engine 7.5.2 Repack & Portable.tmp
Cheat Engine 7.5.2 Repack & Portable.exe
User:
admin
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-5osjg.tmp\cheat engine 7.5.2 repack & portable.tmp
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1280"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1292"C:\Windows\System32\taskkill.exe" /f /im cheatengine-i386.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1332"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe"C:\Users\admin\Desktop\Cheat Engine Portable\App\ProgramFiles\Cheat Engine.exe—CheatEnginePortable.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
6.3.0.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\app\programfiles\cheat engine.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
1440"C:\Windows\System32\taskkill.exe" /f /im Cheat Engine.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
1
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1596"C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe" C:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exe
explorer.exe
User:
admin
Company:
https://joosengportableapp.blogspot.com
Integrity Level:
MEDIUM
Description:
Cheat Engine Portable Launcher
Version:
2020.04.15.0
Modules
Images
c:\users\admin\desktop\cheat engine portable\cheatengineportable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
1756"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64-SSE4-AVX2.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2028"C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe" C:\Users\admin\Desktop\Cheat Engine 7.5.2 Repack & Portable.exe
explorer.exe
User:
admin
Company:
Cheat Engine
Integrity Level:
HIGH
Description:
Cheat Engine 7.5.2 Setup
Exit code:
0
Version:
7.5.2
Modules
Images
c:\users\admin\desktop\cheat engine 7.5.2 repack & portable.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
2316"C:\Windows\System32\taskkill.exe" /f /im cheatengine-x86_64.exeC:\Windows\System32\taskkill.exe—Cheat Engine 7.5.2 Repack & Portable.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
2452"C:\Windows\system32\reg.exe" import "C:\Users\admin\Desktop\Cheat Engine Portable\Data\settings\CheatEnginePortable.reg"C:\Windows\System32\reg.exe—CheatEnginePortable.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Registry Console Tool
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\reg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
Total events
12 204
Read events
12 088
Write events
98
Delete events
18

Modification events

(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3980) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\182\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:3
Value:
C:\Users\admin\Desktop\phacker.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:2
Value:
C:\Users\admin\Desktop\Win7-KB3191566-x86.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:1
Value:
C:\Users\admin\Desktop\curl-8.5.0_1-win32-mingw.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\Cheat Engine 7.5.2 Repack & Portable.zip
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3980) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
Executable files
135
Suspicious files
49
Text files
559
Unknown types
0

Dropped files

PID
Process
Filename
Type
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Silent Portable.cmdtext
MD5:B913CA5A498418C70EEC9000FD359E4B
SHA256:CD4047A7B89833AA60B7F99CA507012D68769BF969B30ABE1746AC6A94CC0303
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\portable.pngimage
MD5:655F487DCD34C1EF5612A9E995C09AC2
SHA256:BE3006534B86C4290C9F6AFE6A69FFCD6255F283299BDD64289792424D24014B
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\appicon_16.pngimage
MD5:16AEBB735D56E90381D210D2B1E28EE9
SHA256:82D4A2C228B0E9EB875DFE1BA9DB2A44A42ED481FACF271DFA755E9D816173E0
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\CheatEnginePortable.exeexecutable
MD5:6C5D8EF076D960E6DB91ED5F15DD5B70
SHA256:6F070DAB787971AF6C7240F548ACDB858C038B5C5BC3D2C80299EC035E0926EE
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\installable.pngimage
MD5:FE5CDB98A7ABB6B1DD01E86D24B9EB08
SHA256:F0EE3BDE98DFE0549C8DA7AB508E5F367B6D1517C5CB972172A4A189491A3622
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\AppData\Local\Temp\is-5MIS3.tmp\botva2.dllexecutable
MD5:4F5FED49F041993D76AEB65E66122F78
SHA256:CE30B37B27CBDE551299549999BD0FA5EC880107E7B698FE9AB729A1D657547E
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Silent Installation.cmdtext
MD5:381975F9DF239C821926295A22265137
SHA256:62DC5FFB15803B811E23DAF330A74468F005ADF1A6216F8BC12768C08C962913
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-7E4LV.tmpimage
MD5:BDAED2E900FC8FA947C7826AA355D0E4
SHA256:997D201F4FD51BB2C7DDB07C6BE5D45DBF3E41B51753137C06D30E2BE7FFC710
116Cheat Engine 7.5.2 Repack & Portable.tmpC:\Users\admin\Desktop\Cheat Engine Portable\App\AppInfo\is-1QTT4.tmpimage
MD5:27EEF16F27959A9DFB4701F0EB9BB264
SHA256:7A11E86C9DAC275651D9F7A38F64E9729839F5DD5A493A4407978C8C9825154C
3980WinRAR.exeC:\Users\admin\AppData\Local\Temp\Rar$DRa3980.22333\Cheat Engine 7.5.2 Repack & Portable.exeexecutable
MD5:12469E2BB69E8E6BEB31EFE157A0E394
SHA256:DCD081559C2CE3C1A0E55E5BE6F7F4AE564689C229289C50B1DD13F5D89127B1
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
7
DNS requests
4
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2472
cheatengine-i386.exe
GET
304
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c8b7507553a3292a
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x1.c.lencr.org/
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.23.197.184:80
http://x2.c.lencr.org/
unknown
—
—
unknown
2472
cheatengine-i386.exe
GET
200
2.19.126.163:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?39c7a4e1e6501a40
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
1088
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2472
cheatengine-i386.exe
104.20.94.94:443
cheatengine.org
CLOUDFLARENET
—
unknown
2472
cheatengine-i386.exe
2.19.126.163:80
ctldl.windowsupdate.com
Akamai International B.V.
DE
unknown
2472
cheatengine-i386.exe
2.23.197.184:80
x1.c.lencr.org
CW Vodafone Group PLC
GB
unknown

DNS requests

Domain
IP
Reputation
cheatengine.org
  • 104.20.94.94
  • 104.20.95.94
  • 172.67.35.220
whitelisted
ctldl.windowsupdate.com
  • 2.19.126.163
  • 2.19.126.137
whitelisted
x1.c.lencr.org
  • 2.23.197.184
whitelisted
x2.c.lencr.org
  • 2.23.197.184
whitelisted

Threats

No threats detected
Process
Message
cheatengine-i386.exe
p3
cheatengine-i386.exe
syncobjs2
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Cheat Engine 7.5.2 Repack & Portable.zip