virustotal logs all actions in system when sample is running in sandbox
its just google updater, because system just recently launched (when analyse called)
wow, we didn't even know about this topic.
fix issues loads with injector, no console its jmp to createthread instead of allocconsole in dll
also no longer creating any files, only .LUA in root csgo folder\lua\UNLOCK_HIDDEN_CVARS.lua what is packed in injector
Source of injector for QHide gamesense. This is a regular loadlibrary injector that allocates csgo.exe memory in a certain address, gamesense cr4ck need specific base address to work.
Need to be skeet.dll in folder with injector.
VAC injection support (thanks to...