Multi-License Discount Quote

Change Region

English
Threat Database Potentially Unwanted Programs PUP.CheatEngine.A

PUP.CheatEngine.A

By CagedTech in Potentially Unwanted Programs

Analysis Report

General information

Family Name: PUP.CheatEngine.A
Signature status: No Signature

Known Samples

MD5: 8d355d555a417ff092fff7a894fc1a4f
SHA1: 1fb3a1df577d74144de4187df65c87e64b0c6647
File Size: 4.72 MB, 4722688 bytes
MD5: 251d10fa4bbf8746156fc02e6f2313a5
SHA1: 4838e90f932b300cc49d42eaf2ad062d947b5f93
SHA256: 39032FEACDE9EBE57500B900328459DC49BAF7A15A4F3BF377A177FF7E81E1A8
File Size: 4.79 MB, 4794368 bytes
MD5: 2cfbb01f64f6077a957e630eb825d662
SHA1: 64f03ac4bd22e8809dea6fc34270320aa3292290
SHA256: D9334F15450094CB0C66AF0D4E57A872B0964106E5034F6646FE83DA03F652FB
File Size: 3.32 MB, 3323392 bytes
MD5: 8b921463fa37cf1c290588230f6371aa
SHA1: 100580847217d714f2c639ab6a9ad0548e82d66b
SHA256: 9618821D28221234E972CE2A4034C0B88B7C7B8827CF5DC08E971FB0B1A45C39
File Size: 193.81 KB, 193806 bytes
MD5: 302273b734da89a43ccc552cf85f684e
SHA1: 4cfcac886a328f2fab49f77e89ef0957af8552ab
SHA256: EFF575C5AB34DC9B543930E6B0C180F65A9E738CD2BB9398E07EB433C3838F17
File Size: 3.50 MB, 3495936 bytes
Show More
MD5: 0db4e32ab3e74051306932a07cfe605e
SHA1: 26d1692eb034c6d2ff27a9035041a2681658758c
SHA256: 7FEA0B8D9F2F140DDC7425E2EBFD325F1611A710DDD84F79418F7C6C1E678EED
File Size: 3.46 MB, 3462144 bytes
MD5: dd4d8253c0ffa870feb2e15a8e560dc9
SHA1: 17f148846f3740001c37a4862d56cd9ea33b6578
SHA256: CCABEA01A72B26215E1922FD1756E36CFEA0FB162A873E14A572E9F8ABB5CF99
File Size: 4.78 MB, 4775936 bytes
MD5: e72d066e1948370799c942ec109f95e5
SHA1: 1bfc43d6fb6a619aaeb7f5254af1aa059ca3d2f7
SHA256: D416024B2292F83895938256957600A475F681697ED1F1EFCAEF2A9C8553AB7A
File Size: 8.10 MB, 8098876 bytes
MD5: 693048ba59c49bb0535e3e413e8fa90b
SHA1: 4d32c62cdd2271293fe5d6002b2d514c86a106b1
SHA256: C5777A055146EEDF4E0266673AC9722B47670DDEF561EFA04F1528C954DD42C2
File Size: 3.29 MB, 3293696 bytes
MD5: a505fcebcc26508960f0d0f05ace6bb1
SHA1: c4838c306016941e8cc8b2c29fe6df3766a33531
SHA256: 6E2F7046DB465FA4E902CC143C9D6AEE312CD0C8DC8854B3AB656E82B8B22FA2
File Size: 4.79 MB, 4791808 bytes
MD5: 899c55ed3708c587bbf309b0e37b5093
SHA1: ec29ff916a825c0e9ebc7c8fa02ceccb44d3a6e8
SHA256: 0877C39F8A329C0180FD8AF622E449E5B204ED07FD71C81CAA5917D51746016B
File Size: 3.60 MB, 3596800 bytes
MD5: 04f96ecc0603122fe88ba5bb1aa2d65f
SHA1: f6aba5115b8964ec8842bd756087560ac360ac45
SHA256: 1F107B8A2961F77AD86FE02F81DF16E7416B664038343113197817CCEE9DED41
File Size: 4.81 MB, 4805632 bytes
MD5: e80fadb5d1dd5fa06110f8882fd4fbce
SHA1: c710566fcca60392ea47d8ab7aae39473850391a
SHA256: 384F6DF557D446B3A2689BC49B63224243671B1B3564F7EBAFF3EF6F6ADFDE75
File Size: 3.59 MB, 3590656 bytes
MD5: c599b788fc91256a1d714977de39c5ff
SHA1: e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed
SHA256: F103334DA3D2BFF6296530DD545210246C1250FA0FA35C88E546C419B02F327C
File Size: 4.80 MB, 4800000 bytes
MD5: b67a83de7e5ca98de4c577e14b80529c
SHA1: baf32659b8ca130577339c694ce3584155845320
SHA256: 65F7CB1673B0C0FEBDF307B4B73946ED89F26FC279D61C644DE9F19F9007E111
File Size: 3.44 MB, 3438592 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File is 32-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
File Version 1.00
Internal Name TJprojMain
Original Filename TJprojMain.exe
Product Name Project1
Product Version 1.00

File Traits

  • HighEntropy
  • No Version Info
  • x86

Block Information

Total Blocks: 1,148
Potentially Malicious Blocks: 11
Whitelisted Blocks: 1,137
Unknown Blocks: 0

Visual Map

x x 0 x 0 0 0 0 1 0 0 1 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 3 0 0 0 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 2 2 0 0 1 0 0 0 1 1 1 0 1 1 0 0 0 0 0 0 0 0 0 0 1 1 0 0 0 0 0 0 1 1 0 0 1 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 1 0 0 1 0 0 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x x x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • CheatEngine.A
  • GifEditor.A

Files Modified

File Attributes
c:\repos\spyhunter5\sandboxtool\builds\releasenologencrypt-win32\injected-win32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\26d1692eb034c6d2ff27a9035041a2681658758c_0003462144 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\extracted\26d1692eb034c6d2ff27a9035041a2681658758c_0003462144 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\extracted\lua5.1-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet45ad.tmp\extracted\win32\dbghelp.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\cet_archive.dat Generic Write,Read Attributes
Show More
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\extracted\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet4d55.tmp\extracted\lua53-64.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\extracted\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet545a.tmp\extracted\lua53-64.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\baf32659b8ca130577339c694ce3584155845320_0003438592 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\extracted\baf32659b8ca130577339c694ce3584155845320_0003438592 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\extracted\lua5.1-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet564c.tmp\extracted\win32\dbghelp.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\17f148846f3740001c37a4862d56cd9ea33b6578_0004775936 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\extracted\17f148846f3740001c37a4862d56cd9ea33b6578_0004775936 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\extracted\lua53-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet60d6.tmp\extracted\win32\dbghelp.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\64f03ac4bd22e8809dea6fc34270320aa3292290_0003323392 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\extracted\64f03ac4bd22e8809dea6fc34270320aa3292290_0003323392 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\extracted\lua5.1-64.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet622f.tmp\extracted\xmplayer.exe Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\advapi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\apphelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\combase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\advapi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\apphelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\combase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\msvcp_win.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\msvcrt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\ole32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\oleaut32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\sechost.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\ucrtbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wgdi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wgdi32full.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wkernel32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wkernelbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wntdll.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wrpcrt4.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wuser32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\dll\wwin32u.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\exe\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\lua53-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\msvcp_win.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\msvcrt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\ole32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\oleaut32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\sechost.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\shell32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\advapi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\apphelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\combase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\msvcp_win.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\msvcrt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\ole32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\oleaut32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\sechost.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\ucrtbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wgdi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wgdi32full.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wkernel32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wkernelbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wntdll.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wrpcrt4.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wuser32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\dll\wwin32u.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\symbols\exe\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\ucrtbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wgdi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wgdi32full.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\win32\dbghelp.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wkernel32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wkernelbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wntdll.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wrpcrt4.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wuser32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet638d.tmp\extracted\wwin32u.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\4cfcac886a328f2fab49f77e89ef0957af8552ab_0003495936 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\4cfcac886a328f2fab49f77e89ef0957af8552ab_0003495936 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\lua5.1-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\win32\dbghelp.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\cet7a3a.tmp\extracted\xmplayer.exe Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\cet_archive.dat Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000 Generic Write,Read Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\advapi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\apphelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\bcrypt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\bcryptprimitives.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\cet_trainer.cetrainer Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\clbcatq.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\combase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\comctl32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\comdlg32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\crypt32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\cryptsp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dbghelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\defines.lua Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\advapi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\apphelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\bcrypt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\bcryptprimitives.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\clbcatq.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\combase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\comctl32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\comdlg32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\crypt32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\cryptsp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\dbghelp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\glu32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\imagehlp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\injected-win32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\kernel.appcore.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\lua53-32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\msctf.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\msimg32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\msvcp_win.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\msvcrt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\ole32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\oleaut32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\opengl32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\profapi.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\propsys.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\psapi.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\sechost.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\shcore.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\shell32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\shfolder.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\shlwapi.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\ucrtbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\version.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wgdi32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wgdi32full.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wimm32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\windows.storage.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wininet.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wkernel32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wkernelbase.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wldp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wntdll.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wrpcrt4.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\ws2_32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wsock32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wuser32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wuxtheme.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\dll\wwin32u.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000 Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\exe\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\glu32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\hhctrl.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\imagehlp.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\injected-win32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\kernel.appcore.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\lua53-32.dll Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\lua53-32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\msctf.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\msimg32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\msvcp_win.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\msvcrt.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\ocx\hhctrl.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\ole32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\oleaut32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\opengl32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\profapi.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\propsys.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\psapi.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\sechost.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\shcore.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\shell32.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\shfolder.pdb Read Attributes,Synchronize,Write Attributes
c:\users\user\appdata\local\temp\cetrainers\ceta63d.tmp\extracted\shlwapi.pdb Read Attributes,Synchronize,Write Attributes

319 additional files are not displayed above.

Windows API Usage

Category API
Process Manipulation Evasion
  • NtUnmapViewOfSection
  • ReadProcessMemory
Process Shell Execute
  • CreateProcess
Syscall Use
  • ntdll.dll!NtAddAtomEx
  • ntdll.dll!NtAdjustPrivilegesToken
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtClose
  • ntdll.dll!NtConnectPort
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
Show More
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryFullAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRequestWaitReplyPort
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForMultipleObjects
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWriteFile
  • ntdll.dll!NtWriteVirtualMemory
  • win32u.dll!NtGdiAnyLinkedFonts
  • win32u.dll!NtGdiBitBlt
  • win32u.dll!NtGdiCreateBitmap
  • win32u.dll!NtGdiCreateCompatibleDC
  • win32u.dll!NtGdiCreateDIBitmapInternal
  • win32u.dll!NtGdiCreateDIBSection
  • win32u.dll!NtGdiCreatePen
  • win32u.dll!NtGdiCreateSolidBrush
  • win32u.dll!NtGdiDeleteObjectApp
  • win32u.dll!NtGdiDoPalette
  • win32u.dll!NtGdiEnumFonts
  • win32u.dll!NtGdiExtGetObjectW
  • win32u.dll!NtGdiFontIsLinked
  • win32u.dll!NtGdiGetDCforBitmap
  • win32u.dll!NtGdiGetDCObject
  • win32u.dll!NtGdiGetDeviceCaps
  • win32u.dll!NtGdiGetDIBitsInternal
  • win32u.dll!NtGdiGetFontData
  • win32u.dll!NtGdiGetGlyphIndicesW
  • win32u.dll!NtGdiGetOutlineTextMetricsInternalW
  • win32u.dll!NtGdiGetRealizationInfo
  • win32u.dll!NtGdiGetTextCharsetInfo
  • win32u.dll!NtGdiGetTextExtentExW
  • win32u.dll!NtGdiGetTextFaceW
  • win32u.dll!NtGdiGetTextMetricsW
  • win32u.dll!NtGdiGetWidthTable
  • win32u.dll!NtGdiHfontCreate
  • win32u.dll!NtGdiIntersectClipRect
  • win32u.dll!NtGdiLineTo
  • win32u.dll!NtGdiPolyPatBlt
  • win32u.dll!NtGdiPolyPolyDraw
  • win32u.dll!NtGdiQueryFontAssocInfo
  • win32u.dll!NtGdiRectangle
  • win32u.dll!NtGdiRestoreDC
  • win32u.dll!NtGdiSaveDC
  • win32u.dll!NtGdiSelectBitmap
  • win32u.dll!NtGdiSetDIBitsToDeviceInternal
  • win32u.dll!NtGdiStretchDIBitsInternal
  • win32u.dll!NtUserBuildHwndList

57 additional items are not displayed above.

Network Winsock2
  • WSAStartup
Keyboard Access
  • GetAsyncKeyState
  • GetKeyState
Anti Debug
  • OutputDebugString
Other Suspicious
  • AdjustTokenPrivileges
  • SetWindowsHookEx
User Data Access
  • GetUserObjectInformation

Shell Command Execution

C:\Users\Ffydldiu\AppData\Local\Temp\cetrainers\CET545A.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe "C:\Users\Ffydldiu\AppData\Local\Temp\cetrainers\CET545A.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Ffydldiu\AppData\Local\Temp\cetrainers\CET545A.tmp\extracted\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe "C:\Users\Ffydldiu\AppData\Local\Temp\cetrainers\CET545A.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Yptggmhz\AppData\Local\Temp\cetrainers\CET4D55.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe "C:\Users\Yptggmhz\AppData\Local\Temp\cetrainers\CET4D55.tmp\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Yptggmhz\AppData\Local\Temp\cetrainers\CET4D55.tmp\extracted\1fb3a1df577d74144de4187df65c87e64b0c6647_0004722688.exe "C:\Users\Yptggmhz\AppData\Local\Temp\cetrainers\CET4D55.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Rjtljfvh\AppData\Local\Temp\cetrainers\CET638D.tmp\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368 "C:\Users\Rjtljfvh\AppData\Local\Temp\cetrainers\CET638D.tmp\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368" -ORIGIN:"c:\users\user\downloads\"
Show More
C:\Users\Rjtljfvh\AppData\Local\Temp\cetrainers\CET638D.tmp\extracted\4838e90f932b300cc49d42eaf2ad062d947b5f93_0004794368 "C:\Users\Rjtljfvh\AppData\Local\Temp\cetrainers\CET638D.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Apzemthh\AppData\Local\Temp\cetrainers\CET622F.tmp\64f03ac4bd22e8809dea6fc34270320aa3292290_0003323392 (NULL)
C:\Users\Apzemthh\AppData\Local\Temp\cetrainers\CET622F.tmp\extracted\64f03ac4bd22e8809dea6fc34270320aa3292290_0003323392 "C:\Users\Apzemthh\AppData\Local\Temp\cetrainers\CET622F.tmp\extracted\CET_TRAINER.CETRAINER"
C:\Users\Taashzad\AppData\Local\Temp\cetrainers\CET7A3A.tmp\4cfcac886a328f2fab49f77e89ef0957af8552ab_0003495936 (NULL)
C:\Users\Taashzad\AppData\Local\Temp\cetrainers\CET7A3A.tmp\extracted\4cfcac886a328f2fab49f77e89ef0957af8552ab_0003495936 "C:\Users\Taashzad\AppData\Local\Temp\cetrainers\CET7A3A.tmp\extracted\CET_TRAINER.CETRAINER"
C:\Users\Fboxmotu\AppData\Local\Temp\cetrainers\CET45AD.tmp\26d1692eb034c6d2ff27a9035041a2681658758c_0003462144 (NULL)
C:\Users\Fboxmotu\AppData\Local\Temp\cetrainers\CET45AD.tmp\extracted\26d1692eb034c6d2ff27a9035041a2681658758c_0003462144 "C:\Users\Fboxmotu\AppData\Local\Temp\cetrainers\CET45AD.tmp\extracted\CET_TRAINER.CETRAINER"
C:\Users\Pwrvpfhu\AppData\Local\Temp\cetrainers\CET60D6.tmp\17f148846f3740001c37a4862d56cd9ea33b6578_0004775936 "C:\Users\Pwrvpfhu\AppData\Local\Temp\cetrainers\CET60D6.tmp\17f148846f3740001c37a4862d56cd9ea33b6578_0004775936" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Pwrvpfhu\AppData\Local\Temp\cetrainers\CET60D6.tmp\extracted\17f148846f3740001c37a4862d56cd9ea33b6578_0004775936 "C:\Users\Pwrvpfhu\AppData\Local\Temp\cetrainers\CET60D6.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Reuadyim\AppData\Local\Temp\cetrainers\CETA7A5.tmp\4d32c62cdd2271293fe5d6002b2d514c86a106b1_0003293696 (NULL)
C:\Users\Reuadyim\AppData\Local\Temp\cetrainers\CETA7A5.tmp\extracted\4d32c62cdd2271293fe5d6002b2d514c86a106b1_0003293696 "C:\Users\Reuadyim\AppData\Local\Temp\cetrainers\CETA7A5.tmp\extracted\CET_TRAINER.CETRAINER"
C:\Users\Itttvdev\AppData\Local\Temp\cetrainers\CETBD69.tmp\c4838c306016941e8cc8b2c29fe6df3766a33531_0004791808 "C:\Users\Itttvdev\AppData\Local\Temp\cetrainers\CETBD69.tmp\c4838c306016941e8cc8b2c29fe6df3766a33531_0004791808" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Itttvdev\AppData\Local\Temp\cetrainers\CETBD69.tmp\extracted\c4838c306016941e8cc8b2c29fe6df3766a33531_0004791808 "C:\Users\Itttvdev\AppData\Local\Temp\cetrainers\CETBD69.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Xerhjpui\AppData\Local\Temp\cetrainers\CETBCAE.tmp\ec29ff916a825c0e9ebc7c8fa02ceccb44d3a6e8_0003596800 (NULL)
C:\Users\Xerhjpui\AppData\Local\Temp\cetrainers\CETBCAE.tmp\extracted\ec29ff916a825c0e9ebc7c8fa02ceccb44d3a6e8_0003596800 "C:\Users\Xerhjpui\AppData\Local\Temp\cetrainers\CETBCAE.tmp\extracted\CET_TRAINER.CETRAINER"
C:\Users\Sagffxrw\AppData\Local\Temp\cetrainers\CETBB46.tmp\f6aba5115b8964ec8842bd756087560ac360ac45_0004805632 "C:\Users\Sagffxrw\AppData\Local\Temp\cetrainers\CETBB46.tmp\f6aba5115b8964ec8842bd756087560ac360ac45_0004805632" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Sagffxrw\AppData\Local\Temp\cetrainers\CETBB46.tmp\extracted\f6aba5115b8964ec8842bd756087560ac360ac45_0004805632 "C:\Users\Sagffxrw\AppData\Local\Temp\cetrainers\CETBB46.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Rsukwior\AppData\Local\Temp\cetrainers\CETD498.tmp\c710566fcca60392ea47d8ab7aae39473850391a_0003590656 "C:\Users\Rsukwior\AppData\Local\Temp\cetrainers\CETD498.tmp\c710566fcca60392ea47d8ab7aae39473850391a_0003590656" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Rsukwior\AppData\Local\Temp\cetrainers\CETD498.tmp\extracted\c710566fcca60392ea47d8ab7aae39473850391a_0003590656 "C:\Users\Rsukwior\AppData\Local\Temp\cetrainers\CETD498.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Ajnwvwuy\AppData\Local\Temp\cetrainers\CETA63D.tmp\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000 "C:\Users\Ajnwvwuy\AppData\Local\Temp\cetrainers\CETA63D.tmp\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Ajnwvwuy\AppData\Local\Temp\cetrainers\CETA63D.tmp\extracted\e011af0fbcdad80a1a9ab42bc4b38d2cd0b548ed_0004800000 "C:\Users\Ajnwvwuy\AppData\Local\Temp\cetrainers\CETA63D.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"
C:\Users\Vtsvtvzw\AppData\Local\Temp\cetrainers\CET564C.tmp\baf32659b8ca130577339c694ce3584155845320_0003438592 "C:\Users\Vtsvtvzw\AppData\Local\Temp\cetrainers\CET564C.tmp\baf32659b8ca130577339c694ce3584155845320_0003438592" -ORIGIN:"c:\users\user\downloads\"
C:\Users\Vtsvtvzw\AppData\Local\Temp\cetrainers\CET564C.tmp\extracted\baf32659b8ca130577339c694ce3584155845320_0003438592 "C:\Users\Vtsvtvzw\AppData\Local\Temp\cetrainers\CET564C.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:c:\users\user\downloads\"

Trending

Most Viewed

Loading...