3302b1a12747c5e5f120d3da5a2b411d9ac84771f6dd24604daf54c663e37354

Analysis

max time kernel
134s
max time network
154s
platform
macos-10.15_amd64
resource
macos-20240214-en
resource tags

arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
22/02/2024, 14:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

CheatEngine752.app.zip
Size

19.9MB
MD5

8adc9b7457496bea5cd796193a88a81a
SHA1

3b88636085606112015b87403e451cae79094943
SHA256

3302b1a12747c5e5f120d3da5a2b411d9ac84771f6dd24604daf54c663e37354
SHA512

0966b4f7a88ee9d13230252af204ed3075f389f6070f3a432c7bb887d38ff2de37ed1c99fab36dacfa03b62a282f42d53898ceefe0111ba86a1e44331c1aeff6
SSDEEP

393216:uNl9Gb/e897acPxiPlhSyCRCUTumUWxEkQi9RK01lKBwYGUeseGPvTmi:uNl9Gre8RagAv6ssUYRkvvvPvKi

Score

4^/10

evasion

Malware Config

Signatures

Resource Forking 1 TTPs 2 IoCs

evasion

Resource Forking

T1564.009

ioc	Process
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd	Process not Found
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper	Process not Found

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:530

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:530

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/CheatEngine752.app.zip\""
1⤵
PID:533

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/CheatEngine752.app.zip\""
1⤵
PID:533

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/CheatEngine752.app.zip
1⤵
PID:533
- /bin/zsh
  /bin/zsh -c /Users/run/CheatEngine752.app.zip
  2⤵
  PID:534
- /Users/run/CheatEngine752.app.zip
  /Users/run/CheatEngine752.app.zip
  2⤵
  PID:534

/usr/libexec/xpcproxy
xpcproxy com.apple.secd
1⤵
PID:541

/usr/libexec/secd
/usr/libexec/secd
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.nehelper
1⤵
PID:542

/usr/libexec/nehelper
/usr/libexec/nehelper
1⤵
PID:542

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:544

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:544

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:545

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:545

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:572

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:574

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:574

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:575

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:575

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:576

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:577

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:577

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:583

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:583

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:584

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:584

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:585

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:585

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.2028
1⤵
PID:588

/Applications/Safari.app/Contents/MacOS/Safari
/Applications/Safari.app/Contents/MacOS/Safari
1⤵
PID:588

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.History
1⤵
PID:589

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
1⤵
PID:589

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:591

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:591

/usr/libexec/xpcproxy
xpcproxy com.apple.WebKit.WebContent.C0E5F25B-1F90-4B51-BB10-6F3752781BC8 588
1⤵
PID:592

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
1⤵
PID:592

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:595

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:595

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:596

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:596

/usr/libexec/xpcproxy
xpcproxy com.apple.SafariLaunchAgent
1⤵
PID:599

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
1⤵
PID:599

/usr/libexec/xpcproxy
xpcproxy com.apple.akd
1⤵
PID:600

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
1⤵
PID:600

/usr/libexec/xpcproxy
xpcproxy com.apple.WebKit.WebContent.B0354790-0A08-488F-89CE-2C192489FDAA 588
1⤵
PID:601

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
1⤵
PID:601

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreAuthentication.agent
1⤵
PID:602

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
1⤵
PID:602

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.SearchHelper 588
1⤵
PID:603

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
1⤵
PID:603

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:604

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:604

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.SafeBrowsing.Service
1⤵
PID:606

/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
1⤵
PID:606

/usr/libexec/xpcproxy
xpcproxy com.apple.WebKit.WebContent.2AE26F50-9766-41CD-8267-4D858C4D4161 588
1⤵
PID:607

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
1⤵
PID:607

/usr/libexec/xpcproxy
xpcproxy com.apple.speech.speechsynthesisd
1⤵
PID:610

/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd
1⤵
PID:610

/usr/libexec/xpcproxy
xpcproxy com.apple.knowledge-agent
1⤵
PID:611

/usr/libexec/knowledge-agent
/usr/libexec/knowledge-agent
1⤵
PID:611

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.B88EDA62-7D2A-4953-84FD-7BA1BB9F68DA 535
1⤵
PID:612

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:612

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:613

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:613

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:614

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:614

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.2568
1⤵
PID:615

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility"
1⤵
PID:615

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:616

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose /Users/run/CheatEngine752.app.zip
1⤵
PID:617

/usr/bin/file
/usr/bin/file -b /Users/run/CheatEngine752.app.zip
1⤵
PID:618

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 615
1⤵
PID:619

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:619

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportCrash
1⤵
PID:620

/System/Library/CoreServices/ReportCrash
/System/Library/CoreServices/ReportCrash agent
1⤵
PID:620

/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
1⤵
PID:621

/usr/libexec/xpcproxy
xpcproxy com.apple.assistantd
1⤵
PID:622

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 615
1⤵
PID:624

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:624

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
1⤵
PID:622

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:626

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:626

/usr/libexec/xpcproxy
xpcproxy org.cheatengine.cheatengine-x86_64.3080
1⤵
PID:627

/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
1⤵
PID:627

/usr/libexec/xpcproxy
xpcproxy org.cheatengine.cheatengine-x86_64.3080
1⤵
PID:632

/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
1⤵
PID:632

/usr/libexec/xpcproxy
xpcproxy org.cheatengine.cheatengine-x86_64.3080
1⤵
PID:638

/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64
1⤵
PID:638

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
439B

MD5
c05b619361d2cac0288befbdef519546

SHA1
634e507971e2bd2697df0cdbbe8772e6fbec276e

SHA256
1b2c817978649cad70d67be41215a663790d97707b7512cfc156b488438cbec8

SHA512
86308ab30375670ff5eb886d50e3b5be5f3b7d60e0de53458e0372c0c67cbfd1c58450acb201c7d21a5f351c2b0e796d1777dbaa1e2b83ef7f69a83dac26ba20

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
487B

MD5
e251c94fc14a772dbd695b0919d4f53a

SHA1
63c2eaa2aae3f097a6ad8952064d4764fe8295e0

SHA256
2e8a5e8288abdb773269792173899a3261c3a04c2a4d07c119988542d1978b49

SHA512
92222001d9e6f4bebf5abfc02f4a0b379b33c4f7dc4e9b27170e8b2d43f7c7e017632f893619d04f01eeaa48cfd79f77c7b910cc47d74d5b81f69ea83bd69a5d

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
487B

MD5
7d3535f2750c80fb5549715a6eb18997

SHA1
e4c3448aa704f5a1c3e3dc8c6362ec9238e38ef9

SHA256
273fc7ecbe78aaf71d4692bc0c939735d1d6b02e48b9b7b503e9554bf54980b7

SHA512
a3344e01a57099e812e88cd83577f43e0dc756a06460ceb3177dae23a15a09a77a6175d99f7704eef66dc0edbf3539afa7982686703d7a0f2cd0a729be59fe83

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
517B

MD5
a3707811a6096724d20927c4a5bbd31b

SHA1
c3fcdadaae3dd1492e8c80c56cb241fd0983110f

SHA256
9f5e32f0aad8cb6e9d9097ebe92aaf122599336818b90f3949cdc4c78b405417

SHA512
8909835213fc0da36d5d17e142f3b41fa5c1461d1008da0d45732f0cc89ae2d6fd0febc06ddc175b925578293429448ef8e46e5bda40570fd893e4d4cabedc2f

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
517B

MD5
f7c5b3d0fc1f8e32f750e9b0d3e885f3

SHA1
bfa4a65f345f45cd1bf9267fa0d173f7d277b2db

SHA256
b3e6e0ebc7cdd61e832187c9e29e4bf23d9452d88b986478d1bf4dd3f62f126f

SHA512
99f8b8e0594b327f6492c86a28c40d15ce7f35afa0a30def860777b7ab89d38a847f20ba4cf51209ebe4394f55f6f318cd7d200a240c0cba961f5917f2380b67

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
42B

MD5
ce7f5b3d4bfc7b4b0da6a06dccc515f2

SHA1
ce657a52a052a3aaf534ecfbf7cbdde4ee334c10

SHA256
9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1

SHA512
db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb

Download Submit
/Users/run/.config/CheatEngine/reg.xml

Filesize
230B

MD5
818e3a78da0afa3f6933d595ee3088f7

SHA1
5d1d6f0eccd816e357facef74e1a1d14ea406225

SHA256
bb72915c8acb772ab0fe8af9bad2a86820ca2c95d18a9d9cda8e04a5204ef2b5

SHA512
4de584d5fdde94e45cbab325e138bb204d6480afd090bbc91bddb2764fcd573cec3579d088991b80af193f5e5c6778fd8c2c8c5dd979a6d0166adafb6ed1008a

Download Submit
/Users/run/.config/CheatEngine/reg.xml

Filesize
256B

MD5
8a3f47f90cd6b12161c8f5bf937f7eb0

SHA1
ad71e08bff1a191a45621abcaf501d2dc125d785

SHA256
c41ce56fa0f4c46d719e995525b24686cde914fce8d9f47f7f51cd58e726d8f0

SHA512
ff56e2f9bbbe4e723eb13de5e89cfd36e2030060972ed54b89a81c49f640ee56b6369c671ff3e38c83aacc3d43a6fa5cd7d3e9d65f281c4bb3c1bb4dd1543fa5

Download Submit
/Users/run/.config/CheatEngine/reg.xml

Filesize
297B

MD5
e3e1e5987f66bc191da2e3211901dda2

SHA1
7490008288efd80e1b0210245adac1bd87dce985

SHA256
defd676b7e9feeeab878a2e59b87164dc146d24de44bb9511cb1a0f9e064c980

SHA512
4ec2c484b4c0285bf9ed5e79aa1c6078929219be8387efff28c0490c956a44c8c876e9d90cee3efe31d1c26c1fe557e083fca97551f59b54fa2b23b9a3dbe51d

Download Submit
/Users/run/CheatEngine752.app/Contents/Info.plist

Filesize
1KB

MD5
30ad799beef28f38d58dcf4ff0b61a79

SHA1
74e5cb9627a699a95458bdb988b141a59eddd265

SHA256
b762c92f3fb1f8466638479caf9be080a2f4e926bcd218cadd2b3f2e1fabab6e

SHA512
ba9f0a9aa941bef1721a8bbfaa4cc9cc1a913304221bdc42d4161a314b08c66da1f2b32ecea158b83bc5001d75bc304cbd49e385d506dfd635b43ce59d6a3b6e

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
248KB

MD5
608297e3f4469745316a4aae999de7a2

SHA1
9dddd50fdbfdfc9508aac080ebcb8a3d179878d1

SHA256
6f7fa6d4e2969843627bcb1f8ced75e94511b1d27d3295d459fca78aac11641e

SHA512
2b06dd3ef85e61d735fda0188a61b8ff55a514153fe8d848d37311c9dca6ab9f79b32a00a24bbe92e98be1eb6d71979d7c4501431097db86dd6bf8afc4a25529

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
2.0MB

MD5
dd18a8586264b272f312464bef10c5bd

SHA1
596fafaab897c902fcd186d540c32064f5282188

SHA256
51da13829e3f8e11175059cef94d700494a43dde7c546a9910ef6d70d9e89621

SHA512
a24e25a747afc165eb2ee2cc63b41fc4266bce6ec98f42123b29062b9d66249981803a0abeebffd70a2cef4b7a13abfdaf66fa9c314b1091f1a6cc0acbafb8a1

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
2.1MB

MD5
7b148db36f11c53e52a26bc69b2f4956

SHA1
1a4799921f13a3ca1889426a8c2e6af22230cc38

SHA256
caa713fbefafb9f11d658488268761c7c37f7b176ff219a215657bb6a45c8d5c

SHA512
750755b3213c501ff900893bd4cfd1052c551080af65f8c0ce3066e05d7584fa760f5530a01e0f6c9ce7be52d1ab9d4c26834a82036b9b162bace96f40e5fdd2

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
1.6MB

MD5
0628afb671bb314b03ef2ab8bd1800ff

SHA1
80741bf9e349bc4b5706cde93692d8778d667c81

SHA256
98591aa250a6669c99c29ee461ca372c192fede1a6d1ab1f7b3bab2b07a0eabb

SHA512
1363d9cc860f937aa450f9573d5cb6245003297d5ff7f864aca118c911e8e3050bec4b90ea8051a4edeafa302d9180e5a82d5e6525384c96326ff95d599452dc

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
13.0MB

MD5
47036478cf53ed1b9fc389ce3eaaa40e

SHA1
5da4a1519d60aa9969618013036050337aa48519

SHA256
3f0368f417ecf1bd9b6818db22b513e537795ef24d21d4b634c2811ab020e85f

SHA512
0d6e179d2b02fd7ff0380d1995fc8f6d26753fbab30af4e9dcdfe5a28e14ec8fc41f5eadccd9b5a09442facbeeb496acea143984d771575a7b0071b565e6687c

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/cheatengine-x86_64

Filesize
12.5MB

MD5
eee4c651fedaa293c6b869a951394b59

SHA1
7a0f25903f96d996e92bc053b146dd0d31ce640e

SHA256
275c3cf2a9f3cced0035ad1e099fa669daae451a31556bcaed258bb124712c84

SHA512
01958e314ed7f7e51a1ff6b220f798aaf87b609921cc60cc11f0634fe908d22021c38b3552dcf884f853be9d04d327f19902db60039c6c20e2fed70077401a57

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/liblua53.dylib

Filesize
584KB

MD5
fb72cf29d368b3af940934d0a003f2d0

SHA1
d50389c40c4169bdd973e391b90357b17530cc06

SHA256
69b6f14cc8eac64efcac46f373f92056203f87167704a7489f5458252a6b6529

SHA512
37f6d18a7bcb79d78551fd50684adef87e07ca3de70dc88549363af3b23da844231c91c5899326212f2fb8100abbbd73a8832eef86fd68b248bd0b1d82abd28c

Download Submit
/Users/run/CheatEngine752.app/Contents/MacOS/libtcc_x86_64.dylib

Filesize
711KB

MD5
d48280d4407a91e3bc30f0ee3b36a24c

SHA1
0fa38465a0df53b3782a87c6e6accd9ba5395047

SHA256
75c4c6c396ac217f64ec442944fac4c4a876528a4c1c8a6fbe2a08a29648cc6c

SHA512
bd0913ab9ed80f2e7f690e3e59f05c9f71f9d3fad2ad0c095ea569c965d57345b666383ad66e58bc930c19945aeb96cd1ea31349841030f0ffd3b93ece637e6a

Download Submit
/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

Filesize
124KB

MD5
6e70b684fe2ed4a37e45fe7932033e46

SHA1
a30cbe011334ca18ad231cf29a672bfe3a246ceb

SHA256
7eb19df5b9ba85445392056029d18b6b76a7586ae4bc43a21595e315a87c79d1

SHA512
15b1357f01eff785029c63d69b2847f2b1a3991b643c890ba5c9fc177d65b35ed4f90714ca9b6a6195768e551a4c4d76b1a36e07d8cf1da21806974e3e7ea7bc

Download Submit
/Users/run/Library/Caches/GeoServices/Resources/altitude-1168.xml

Filesize
150KB

MD5
76ebb0196d42a294b69ef118cbb301d5

SHA1
61e5ab752d351af1661716bc48c0520f66cd1d1b

SHA256
aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

SHA512
8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

Download Submit
/Users/run/Library/Safari/Favicon Cache/favicons/BD77DD6D21F3E5CE2E787DE6B17F3FEE

Filesize
5KB

MD5
d25b7fbdc1ee1968076a3d9fd941cac7

SHA1
b9b47c4f79814f375eec10c9dd04fda18fdb7d33

SHA256
7502c3657c084eddd59cd81ac7c5d6f01fc4aab7db7ecdc40b6bb790043badee

SHA512
0d335fdf48a7ecf4ad7e7d2b07f6d0e8a980a755856e5e63612844c52df6944373ad7d2a80f2439454790144b7bb10cd85011c6172f3c9311106dffd5d6f6abe

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression

Filesize
223KB

MD5
942a1a17ac1eeddceba6fb2a98127a17

SHA1
e1e8018858b67c9e801efd454ba1e68f619c8f45

SHA256
77e325aea69e97710f356e4a7ea03e8119947bdcedd0e7e8fea508d7af8b319e

SHA512
a51f6ffd7c00f8ccac19773c877e934363f865a288bb6235271b7218a97b19c9ab010cbab39b2531e079883ad96ca3fc959da313b180cf6802f8eff384f213e3

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression

Filesize
23.2MB

MD5
d7512d6ca7b9c87a9af85ed14d3020c2

SHA1
13085257133c4c1a2010a21bf39cad6b1a5ccca0

SHA256
bddc725e880a4f87591642964e56f4deab6767f0898f9053460abaf44e8b1057

SHA512
7f71c7631b17b3d80b18c09d17efbc559c44657abb0050bb520234793d594125f2d18563820a9c087037e267fd7c4e38e66a2fd4c9a3b0a443a35069f4f895b6

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression

Filesize
1.3MB

MD5
46fc6021791ec0ee07af0bc9d6059ef7

SHA1
9c5305d7fa4e795e5d67b6cc2182e9a104e34cac

SHA256
589614154ad6a4e112e8791a66a22e1e5ad87d59f112c4cfe4beac5c48da4f72

SHA512
1d3553e2ca9a4a041de187845a6bf2db20479f5f9c45ad9d7b6870b34fd582ad87b32af39dd9b8c5d36e4bcdff4ea40791d716cc64eea94739afe83385d9a489

Download Submit