Stealit Component Execution from AppData

Duo Tech@duotech

•updated Oct 12, 2025•2•0•100

Detects the execution of game_cache.exe, stats_db.exe, or save_data.exe from a randomly named subdirectory within specific AppData\Local folders (like SystemCache, WindowsCache, AppCache, etc.).