61d47fbfe855446d77c7da74b0b3d23dbcee4e4e48065a397bbf09a7988f596e

Analysis

max time kernel
548s
max time network
515s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
19/09/2022, 01:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

data.pdf
Size

201KB
MD5

61f85308bc4cfa27a0b49d6d3486d6a1
SHA1

af2f9e737853ac29cc9edaf2c3d837791acb0155
SHA256

61d47fbfe855446d77c7da74b0b3d23dbcee4e4e48065a397bbf09a7988f596e
SHA512

d8b2682d251818b4222faa7d14fc57f3353f386cbd56a3694993587f8018702c594a1a22dd1832f121f49805844d2871d8f9ec989696569af6cc5fef0fb1cee8
SSDEEP

6144:nDbt+BIU0MDO3Bvp1Bwm1IuAQY0LvR/cB:Dbaz1O3B31UQYQvR/o

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/data.pdf\""
1⤵
PID:489

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/data.pdf\""
1⤵
PID:489

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/data.pdf\""
1⤵
PID:489

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/data.pdf
1⤵
PID:489

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/data.pdf
1⤵
PID:489
- /bin/zsh
  /bin/zsh -c /Users/run/data.pdf
  2⤵
  PID:490
- /bin/zsh
  /bin/zsh -c /Users/run/data.pdf
  2⤵
  PID:490
- /Users/run/data.pdf
  /Users/run/data.pdf
  2⤵
  PID:490
- /Users/run/data.pdf
  /Users/run/data.pdf
  2⤵
  PID:490
- /bin/sh
  sh /Users/run/data.pdf
  2⤵
  PID:490
- /bin/sh
  sh /Users/run/data.pdf
  2⤵
  PID:490
- /bin/bash
  sh /Users/run/data.pdf
  2⤵
  PID:490
- /bin/bash
  sh /Users/run/data.pdf
  2⤵
  PID:490

/usr/sbin/spctl
/usr/sbin/spctl --status
1⤵
PID:488

/usr/sbin/spctl
/usr/sbin/spctl --test-devid-status
1⤵
PID:492

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:493

/usr/libexec/xpcproxy
xpcproxy "com.apple.xpc.launchd.oneshot.0x10000002.Microsoft Word"
1⤵
PID:539

/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word
"/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word" -psn_0_155686
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.XprotectFramework.AnalysisService 523
1⤵
PID:542

/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
1⤵
PID:542

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:545

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:545

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:546

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:547

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:546

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:547

/usr/libexec/xpcproxy
xpcproxy com.apple.storeuid
1⤵
PID:548

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
1⤵
PID:548

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:550

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:551

/usr/libexec/xpcproxy
xpcproxy com.apple.storedownloadd
1⤵
PID:552

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
1⤵
PID:552

/usr/libexec/xpcproxy
xpcproxy com.microsoft.autoupdate.fba.2660
1⤵
PID:553

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant
"/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant"
1⤵
PID:553

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:551

/bin/launchctl
/bin/launchctl list
1⤵
PID:554

/usr/libexec/xpcproxy
xpcproxy com.microsoft.autoupdate.helper
1⤵
PID:555

/Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
/Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
1⤵
PID:555

/bin/launchctl
/bin/launchctl load /Library/LaunchAgents/com.microsoft.update.agent.plist
1⤵
PID:556

/usr/bin/codesign
/usr/bin/codesign -v /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
1⤵
PID:557

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.53C6B4B7-61B2-4F33-A735-760DDFE8F49B 538
1⤵
PID:567

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:567

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:571

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:571

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:577

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:577

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:579

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:579

/usr/libexec/xpcproxy
xpcproxy com.apple.colorsync.useragent
1⤵
PID:580

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
1⤵
PID:580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Logs/Microsoft/autoupdate.log

Filesize
188KB

MD5
82f92be76261c20a3ae21a14cc1b572a

SHA1
f7347989902c158af115815c76d71ac7d8c913ac

SHA256
1fcbcb46d637e38afe81a7eba488a7203f1ac366827f056a88c5e3a547444630

SHA512
74ef56010dfee53018ac2c75855d56b03b040ec5cdc56ac1a779884b5c227b0541db2330bae6beacb53eb4512f90d383caa2ce164dbae466e9ed9eae8d1a4593

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Baguet Script👪1.png.sb-406638e4-QRpPfa

Filesize
1KB

MD5
ded7346112388a4445aa627ff38f7de4

SHA1
acbe0d544c6a17773b7042c28ab2052454547880

SHA256
f44895d6871a6b8aff24fcf2a864b4c7a95a41526141150bb70766f01bbc2102

SHA512
200ccb4e748285daad9cf5fe95c5fb083d2e0fc40d0fad795984591515fd577f190be26c5d1b009ee4aa6e44cc12e5118ed4aa055592e8cb0fbf7432b9988f8b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Chamberi Super Display👪1.png.sb-406638e4-4JMtzt

Filesize
2KB

MD5
ec3027af8f4bd500d893fac92c233feb

SHA1
c6a55b7fea923586b2dc6e7975904c576b45178b

SHA256
795b6bc7669cd328a169887d7d6599729af8089190de4dd89e3475284d77f077

SHA512
9fc378ea8b166ed0051fd832b044a1f347782420725a12425365829e480e73fcc9365cb92c52e6d9f8dd8f449eb04a561a912269b7832ad2b71c7f089062b6d1

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Cochocib Script Latin Pro👪1.png.sb-406638e4-rLBNmx

Filesize
1KB

MD5
bd92b48d1f261aa3995f7b26e1286c3d

SHA1
d35593d48dac895207e9662516ff932892565627

SHA256
83ee08d436bdde1ef0dc7d3a57fd1c20973a69dffef52ce99776a0d3d701a8a3

SHA512
a5de61e68ea8b10bc6dd472d8e637eef55f8edef6e8d70eebf4e6a25f54377243dadc8c02dba3725369f30c6cdb4913342e97100cd3170d4c5782fcbe5ab0e5b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Congenial👪1.png.sb-406638e4-SsvKiV

Filesize
1KB

MD5
eace595887bd133089a235ff162030f0

SHA1
c8d49074869a679bcbf26124febf2c67010a8081

SHA256
edec8572082de6e240e62e6db868615b64e177179248410fe39a97be3b8e7f46

SHA512
f5c8d76c68eb3c1e2fffb25946cdbe14502b8a7b9dc94777dd9ca3830eb6f0c2501de1843eb3a569c690bbd48ea17043054a10ad51518bda736a71622f7ac47a

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Dreaming Outloud Pro👪1.png.sb-406638e4-sfB10H

Filesize
2KB

MD5
39ea8d661931195bcd86e3f7d1a86990

SHA1
e99c34ce671e831f81445bac5f065b1182239e93

SHA256
c48249d3b16cb5327ec3d0b44cf5cb5b1fa327031e2462b4abaf3933a9a811b4

SHA512
fe0f0c4c0ef93fcce87bbde3feb50601bc77f8b0b4f4a89093b0babb2a64ac4a678422da3a00007164baace65b64bd768f5bfbdb3e652806ce271a648e2c8729

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Dreaming Outloud Script Pro👪1.png.sb-406638e4-94lwux

Filesize
3KB

MD5
d492b0fc6bc3471fe883464559ede470

SHA1
3ef6a89b422b48808a27a50d49be6648adab1c5c

SHA256
c304f89172a44167b056508614c79d2a0b670e129db688f802bf0b9d4a4e164d

SHA512
43440c515d2adeef9122c7d05c964b3ab9e7c64e050eca47b17e89414319a9811d2c19422c63a8bd4ce331b2e00b2ffcfe11201657329ea8c03a94d7a1ad49e1

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Fairwater Script👪1.png.sb-406638e4-8b5prU

Filesize
1KB

MD5
6fd60f923344e9cf06cda395e6696779

SHA1
2c099969adf4a7ed2a5f167af35f507c8a17bd8f

SHA256
f94fabbdeccee04211cf382c482740c12aefa4feeeb9970722139b4275b7a7e2

SHA512
0c58d25bdc09417ce92f3867d5f76bb87600e34e58613471ac1cedc80e9625f35c82560df7afb4fb93355c05b398f744193139e108642a46831818498b2c8707

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Fave Script Pro👪1.png.sb-406638e4-7fNSLV

Filesize
1KB

MD5
98a874a6ed8a379a273868762c4ad902

SHA1
ccf0abb549caafe169aa3494f424c929b6228c64

SHA256
836ed09c40bb930fc411b8ca6992f8c60b1cc450594708ad2c80b0a5723187a2

SHA512
1706509c61de5fd45a5ac8c86ca98fc17a62d9f19bab3d0f1b00a01950d8a57ff37a5006fbd4ad51bbd2b0fa610542886f2d467a4e9c1afa4ff6f74628f64088

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Jumble👪1.png.sb-406638e4-tDLmhQ

Filesize
1KB

MD5
85834f1f5289ff8a61c6b820605b140f

SHA1
0f69f233d3b7ae23b670ae541d73fe93f290d225

SHA256
c906a2142efa8036f5ea4373589f8248c04524cb932f7fefa216f08ed842127a

SHA512
cf475ef2713f08760524affecbca955e5ec2a45616207c5cfff5708494020486e4deda3895297784fab86f0d48b6f84742547a998103fc8a0c5291a9d2567ff7

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Mystical Woods Rough Script👪1.png.sb-406638e4-9fGNka

Filesize
3KB

MD5
b12482c3a50a1f79205b14a4a6455523

SHA1
206f0cdc7345c4a6e0f78c148210fe8dcb98ab1c

SHA256
297f5df7a91c67a0f2f1956ddf0a16419b73e3265400389f49f8691d65664370

SHA512
59af2f811453b2eb61edbce55ac4ec92625298da1b8296dc66bcf9591516142e3ec98c7888c399bccbcf69ba0cc66f86fb170e453dd04e8506a4678de7d20aeb

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Mystical Woods Smooth Script👪1.png.sb-406638e4-g6xvmb

Filesize
3KB

MD5
d0e6c3661d99827589a55f6b4ea87a64

SHA1
16693d77a993f5957511376b9c0db38676deca5c

SHA256
e6f48ce54ba28604ca90941047ea6af453d4552bc351f10b5c4b9ff472447fbf

SHA512
073591027e89d1c7efcfe500376d92626fd7dd1e7c65281eacdad7a0d8f30c42ace0809b52741b575fb8c2ec2a0496ad29728ac38300cdff53d020783112d10c

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Nirmala Text👪1.png.sb-406638e4-d4D4jT

Filesize
1KB

MD5
eb41a0e7ee5bbe85bfa882abe96aeb98

SHA1
b539b57152127bf0ee3825f0bbb5dbfbf42744df

SHA256
a173bef53ba073b427f66e6f21b632aedf4a04b00ebcb144008f9294150eed36

SHA512
2120be484b39a811be04a3262195028e31ea0df3716f7386a3336ba33b6ab5dd8ae25adcf540e28a61d5fb499ff8e746f660f4f292624d8ded9208d376843b59

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Nordique Inline👪1.png.sb-406638e4-6HhbnN

Filesize
1KB

MD5
2daea9a93eb77ba98c211fb71b6d6996

SHA1
888a177d0a7875792b68dff9904f8787f51ad16d

SHA256
d876578c6363af6d6ee084141a0ef11f94e23a15c905de2ea874a059f5991509

SHA512
c813494a6d924114459a4dae47497b51ef7afecb88656baba4ffe546ab1415372aed8da204b802e7c69c5d4d6f3e414c40543822337adab6299b06084c29661c

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Rastanty Cortez👪1.png.sb-406638e4-zVuG3P

Filesize
2KB

MD5
b8d947c29159494a4420dc7ece498505

SHA1
ccd530520cb1dd673aba6ad55d2f122c6d121ab6

SHA256
e0e204c7edbd2cd1209a40925bd723d90caf053feb79483dbf6ca58eb2f6aaf5

SHA512
50ab54e4c0bf07d22956dbb18f2ff705d58daf6f14d1e940432960d222eedae246e7d1e096dd7a466434f1e0b8d40d46fe5d3dd3524168ec879f22328fb1524a

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Sagona Book👪1.png.sb-406638e4-Kn4amH

Filesize
1KB

MD5
6c1ea4f02756b8bbe7a0a9a8b52b3d65

SHA1
f4e4fdf57f2cfc811fd4c1dd9bf01a2c2e1b656f

SHA256
68ab96d6502fec3784c138b812e61935a5d96dc6f4a87cf892ae0075815959c3

SHA512
9d36a1a97ed99d1d204fea760b55a1e19ff6dc0d43d90f9cc0ccf4b18c0342f2badcc93e0d6ffb1b6bccedbc6c3c6f70c565c29bb3b9e3c0d5a0728c33523ed2

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Trade Gothic Inline👪1.png.sb-406638e4-SA9Gxz

Filesize
2KB

MD5
cadb0c753df8c6b0ac64435188ce588a

SHA1
b19245686745eb5ac82c7fcc2b14a1da8a51b9e5

SHA256
30d1acc396b828f37b796d88e5a3bf5b1e6a2ec5a2f93ea2eee7a1db83a10631

SHA512
42ec75d5f94644dcaf00ed9269b19a1f45f0b99295622fda1cc4e8d461891549dfd40b3cfd135ae2e099d9b9a838c16c9bf180fcd42f242c4034d946c896dc18

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Trade Gothic Next Rounded👪1.png.sb-406638e4-tGM5mh

Filesize
2KB

MD5
f7a9cde06a8209a3cb1e78ad35c5b9a0

SHA1
58d33c42b0ec3fdae82c08beeb5a615da7961d99

SHA256
f49a900e5708011e288e2fd850fbac9f6a6ab441ce0c9d5b73d6bd71f199e63f

SHA512
8e091a42d65342857677ca51926fe0f94d6b29b3f4a1a2bec72809e5686d6f4f305dea4e862bdfb3e7d027d95a984e51c69732eda3803243ccc53aa42b6a129d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{03B34D79-0AB8-3544-815A-C4DBA0D97890}tf10002076_mac.dotx

Filesize
32KB

MD5
d84fdac96793077da4147fea1189e76b

SHA1
7a330f3559f6ae05f784d6d5079a779be7cec635

SHA256
98625c2e6a7e9980127ff1f6c86a14df5611130d2b61783f49cf9b4a375e886a

SHA512
61a74d4fc9971459abdf9213b0b3b0f257fae3095657c071250efe12f6039ed87fc982726d739e2ca49e738c159f8d9946800cb26447db5c6eb7b215ea1e5a27

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{04392EED-2173-0B4E-91BF-316FE61762D0}tf16382964.dotm

Filesize
57KB

MD5
11ef9373dfa0b297935d788fc33ae761

SHA1
80eec5798e773f73799540c368e2b3b33b3ff2fd

SHA256
8f3fd082e074cd25d0a71cb47ff7b627089f58fe1c29de19d1e29490c3c8189b

SHA512
b1e589e25c6385485f57b3822cbd55c91940d043c2f332e7daea9f0539f301cde208c0fb439559042d6ed06ecf26697ed145e6f8277c3bc925b76343aa843be7

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{1801EBD9-1D7C-DF49-B8FF-7314842E5E3B}tf10002091.dotx

Filesize
640KB

MD5
ec50cd4f60987edb5a0f23baa67ec746

SHA1
c6b9facc3d0d652be18d2ad1cc5d3fb6480b56a1

SHA256
063b9435199277559a4783d700bde4a25489d9b7db56c757ef2142f26119509e

SHA512
9630438a7acb09a48974fe96e1477b62de0abf141ec3dbec083a24bf4703c0b04cfadec1b92ecd54d330dd0c571d84be2f24ffaca1f42930dfaf4ea9fbed83ed

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{19C67EAD-7773-C742-B36D-A4747302D078}tf10002090_mac.dotx

Filesize
620KB

MD5
d0764359ad212f730fc5d3b15b14a47d

SHA1
bcf2c2932a6235421fa71b1c921d03a1144bad55

SHA256
c81345dee3e2f53ee0615c26a3006530d08d5d8123ef6fea7366094ac575defa

SHA512
f9945e3d4f0014efa741be79a715baeaf1c346b8bdf75ce6c5da3232df83fd6b7ec46911b2f71f57be6c8e0ce69f576aa02eba07c9812e810f8e8d62f3365067

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{2975080F-F3E9-844D-8D99-0DFF97D449B2}tf10002084_mac.dotx

Filesize
68KB

MD5
29ef083fce80f8e37b7cbe9a74c9fa01

SHA1
7d3d643ba6a255e046495c46fbc8356656d10849

SHA256
14b93dbb0f49275d392a77340cb757ff13d2ac985d610f8620af2d443a267601

SHA512
7008259987a68a031722f5a740d6ffc90cfd0dd6d2ec247d19fa67a3c3be11b128ba86b6c2e7c89726003336e2c615fb304d9179a1c38e4172cf27d501c6a3b0

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{33BEBC76-0C11-6241-AD7C-5E5ECD4C31AC}tf10002092.dotx

Filesize
637KB

MD5
6443aa790f635fe5d4b8cd40932d2db2

SHA1
deca30865ed3f7f8655a61754a4d89c1b93d0454

SHA256
bd17e77db22555efc43cda372ff58faa490159a93d54b272877fabf082e98869

SHA512
105c9b1f60366e2748896d491ad81f345212b3c8ac5b04e3968216d13845e81a659e53737d4ca4a1970c31acb078c459c1ae2712167e8a01314f8c259a86232b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{44517633-F1F9-E741-9E50-45062F7EF1D6}tf10002086_mac.dotx

Filesize
25KB

MD5
9f26b3ceaa715f7abbf03be71eff7473

SHA1
fa646fc4eaaf6c8adf7b38c33019ab27d5428b1e

SHA256
8a03d470f6b29ac92ce5a234b4303cf9431b5af834b9a64796175db8690cd380

SHA512
1665bf98186eb30df0eb281e4c992e77c191c88a4beceb5497ea332653efa8fe160f8c76a3c061ebfa64a8972d940cc4dd5f47cdd216d57ff2964410be3efdfe

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{45DF602D-0D10-4846-A4B9-176A86785AD6}tf10002082.dotx

Filesize
26KB

MD5
bd24e169ad1ff47f68f5f4c194fbf354

SHA1
fa06782d840f2c34892fdf70106ec95a850a0e5b

SHA256
077c7cb7bf5178b26f6748967f9898a77379c4784dfce9e2c70ee52404237e47

SHA512
d3e0e2ed63cb43d0dd61ac6d5dea35889e5f5ff838a0d6151a1b5367c908f718583bf53b9733ee1c9f5f7ddce4785617af3cb5a48854504da4122dd2862e6321

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{4782C3FB-013F-6D43-94B4-40053E409172}tf16392737_mac.dotx

Filesize
143KB

MD5
4dfdc32433cb8f66a54f98f357d6ee0d

SHA1
2aae203550b2394c9e1c7e8579cd92e06184c64d

SHA256
e9deb71d0753c030c31632e9fff99b1af217522d5868c3f67fbb114c78380003

SHA512
0ceb676c6bbf8e4a7edf4d33a28de3a9a87d02fc63b65bef8fcfa625d33ed2ef549ea3c5dfb9cce3a28f47edaa61837566401ac5d951b38e42de9559d1d8c972

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{558615BE-AA75-7047-A1FF-6BB78C668956}tf10002078_mac.dotx

Filesize
30KB

MD5
f3517fb8b2114798d717fcc8b0a9dab5

SHA1
11db5a841177705a59568f530dcb4fca5c482b23

SHA256
cbb9f71eba2d57d63ad03cb7ee231b97569fdb42ecc85210c4b575377b935c7c

SHA512
d8e6d8201210c66cb00a8bb0cf377f49b3541656c4f9d3d8d7c8a6b606656993cd9bb3b7046db4a2475aae2560a461d5c69f42cfd513733cc1ad6d587ed1135c

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{5BFD2CFF-C3CD-534D-9825-F803A9A5F324}tf10002070_mac.dotx

Filesize
97KB

MD5
7ac01eb8c5d13641cd04cf2d716b16d6

SHA1
b888a2f80ecaa0e074d7ee5f178c1f7cff998829

SHA256
77bdd9e959d6c42c2dac9eddfd3db55998c048e571d14bb258cb09b0cee27bbe

SHA512
baffa51a38f87f75286e8167cf4576a80043f5690e7f9e15ca905ddd101113b002fde3826e3ac3654226d45fdf99dfbf6fece66cdc5d68a87ceafee908043376

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{64C2232A-5E14-9E43-B8F7-489968F1C1D9}tf16392739_mac.dotx

Filesize
142KB

MD5
c8e92dd95a665785696b94e9574f1da4

SHA1
45a8f1c6b408fa9843a72fc4f2f9c95635226ea0

SHA256
2979491535f4c9fc1535c514e54920a21cff82a88f11fc68933ff62268a178ee

SHA512
287ca166d8ea8617c8ccfb217f1730b83e6b60d4c1871c03c2a5443cb2810bb799a441a246c1a505ba47e03bd28877554fd8acfc03eef67c9f578c79090569c5

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{67214A48-CEED-5248-A668-EE3F37EF0561}tf10002069.dotx

Filesize
368KB

MD5
c8ef11ab9bb6d5cefac17379e3c79d47

SHA1
009ffea68a5913dbb94f5940e469e1bb893caad1

SHA256
c785f91ea94228f97f98411b8ab97b666a2757a6591f00acc5d0c9784b2bb41d

SHA512
73e22a330e13b2c8ba3d3d64860df05975426f72bf610e7e13c8285b980480ab837624c80d17d77d071b7a287a007c9df508c09eb466ddeed699796e6763b34b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{6D4FC778-D7C0-024E-84F5-B1BA6290CE67}tf10002087.dotx

Filesize
275KB

MD5
43879671a0b91ec39c41c33dc2e00a81

SHA1
97d6a2e096399cf1c6183dd4830ba377a1dec595

SHA256
eb94a8be16de8e77baf5f535ac492bec10092728d089d05910706c37c8229967

SHA512
d1d587982531e4c22d40ee01aa644e7889c0eaf92763bafca309f29fbd7bf6db63468872467e4f1b19061fb697ef274103ddcdff76cb1efacff7a29564830254

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{6F083F1F-A855-1846-8D43-566BCFBA1EC4}tf16392738_mac.dotx

Filesize
139KB

MD5
97195b4945c796a505b94dd688ba8d8b

SHA1
557ffc656e3769004769ccd0bf774396dccf01b9

SHA256
e7ab6f35bfa52afcc1a77bfca22d23f0fe312f93552dbb26a3eeec9f3b547afd

SHA512
e22f2b058a1cd09af845dc44f4d35a38556bcba4829077dc9c9eed3e3057e584feb83ad42f800affe628a336db61e46b805fe7d9c911c807663ba7e1dbe5d541

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{7D09EAD8-E904-1D4A-B6C4-0AD2DEFB84EF}tf10002083_mac.dotx

Filesize
29KB

MD5
022e8cce3fb0c392c55862799943656a

SHA1
1baf09bf9041fa404db89acf0d92e7342eeb8052

SHA256
6f648ea8fe342615219721772fd7b918a52b067271d64ba654b525cae648b234

SHA512
395493a9d70caaee2529b463b63deb3920bc28f5b67a0d55a969382e5720ec4b62281356a8b1d96832e02c7dd7f53a644e993db94acf96f8b69ae0ff9b8d35e8

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{81104B06-8D43-9744-BF35-49BB9CDCEE59}tf10002085_mac.dotx

Filesize
37KB

MD5
62c7ac10348babeade0ea60a937215f9

SHA1
eb36c638c8f96a044fc012094f66e6c0b394f76b

SHA256
69e173293e1c16c95e43255376329c75afeba8eb056f5030ab17996b0553e1f0

SHA512
73bc362411a6450f388f593d34d0a12f07cc0b1ca0c842f93cd25f3b60711c9cfee2f6bf336de063dfde010b8a5f62920fd5b0f5ed5d1a11b2f3fc5fe35d6668

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{8146651B-0A7E-404B-AB71-680F0B740513}tf10002072_mac.dotx

Filesize
36KB

MD5
b027fefdd7b82dc51512f45d5ad84a99

SHA1
ea7b2df508770b4fc673e0884d36e5ca7e1ad6d0

SHA256
aa6bfa46260ef1af045b165daec45b26fc7fafab45d10f889153622e4df04b35

SHA512
636ad7c0163a4722982ea5e42c8a3e1f765f3e88decc71bcb6ec99f11321320f584cbd894e59e62906bf8e661fce27a2ba1571f184d855c6a067646bb15c34f2

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{82258A0D-8C9B-9A4F-A046-ABB75BE989A0}tf16392740_mac.dotx

Filesize
165KB

MD5
8c3829e32b05ad796e3ead74490dc5f8

SHA1
bea2c3ed33a5e2216f9bc5345de32d27df0fed36

SHA256
84ec21b14fddaa632ccefc89eb322f1e428857f051e3abaa9d7948dc899533a1

SHA512
de9f3f6ce57814e1fa0406e1b052ad170c62ae32bc45b73267a62b5d725b83cecf1ef7cac1b533bdc260b88d45e273f44df02b432cb8b9a01ecd4c89648e6861

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{8852F00E-7861-4947-8041-0037697466DF}tf10002074.dotx

Filesize
40KB

MD5
b4ee019e30f63e951874a446372c1e67

SHA1
d66d17dbcd612e3b336fa8a86357c28cf392931d

SHA256
3c2286d5f288826205e9f9e70f3323977ffff779c43aaa294030df98acfcdad6

SHA512
73b344e177b397233b68076e34bcd60a03f6395e35ea8180ac1f6687aa25142db28ed86c475d1667bb41800df8e11947936f1cc2643da117de04ef8f87e9ad65

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{99F25901-DEF8-5248-90EB-098003F22187}tf10002071.dotx

Filesize
363KB

MD5
905e9c2d9d8f191ba099240461c7105f

SHA1
2a475beae18849502cdf8025119468be31d18be1

SHA256
b80c9d262a12722345654ffb8f176c24e311a09aa57547cd4d52a0d7cb2755be

SHA512
b0932b12dcfb6f036a85bd87a39b9d26844d964d3c81bfd9dbdc18b2c6b23119076356e0c04e726634896dcb93631051fd6fcaa6f7e4d4ff97834e7b4b6014d7

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{A166C838-58B5-B244-A88D-0FC7AB6E0F69}tf10002089.dotx

Filesize
601KB

MD5
b4d3abdd4a40b6c4949a81fcbe57594c

SHA1
00a52660aaedcda42560e65f73ac25742009913a

SHA256
6142499e02be3bfdf293894f0edecd0772ebab4bf4e167cdb5e33cba295fd0ae

SHA512
5c6ad7b0b445999c87e1fbe2fa37085f01a5703a26ca0054cb68ffc701f71a3d44d7e164eaf5580bf1570d4a15a8b691f8e7cb1f19b512ed5e7bf6793743e4ab

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{ABAFA892-C8CE-A14A-B15C-B2964E498EFF}tf16392741.dotx

Filesize
32KB

MD5
1e65f3797c00fc6f05c79227cdb0a421

SHA1
e3782894ce6e1af086a19f859c5513ec89e5219b

SHA256
2b6d83a27fc30ced6e7ebcdc4f89a6bc8b1944aadbf86912f5f19bef1f1768dc

SHA512
70c792021ba06e51f83620250debc4216b4a1203d6368a3fd65cc9e75fd926ef8c4b115c5fd18a4875eab0ec7b900453521192fc4b38db4b60b82034e4693e05

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{AD277A28-459C-E04F-8724-C400733FFC9C}tf10002077_mac.dotx

Filesize
121KB

MD5
9e33521353ac345211beb59ce5af215a

SHA1
1a02322acf40920e1a1cc7c061cd70057577cb3f

SHA256
b9a7f11463a3a2f1f86f31315ab6194008bcac041200b8cc4d85eb6eae13e04e

SHA512
66b8b41c9cb44466887289da9ceca676d57f4db83de7abee0daca6be1487b0ec4d8407beac4191a834f9e15b76975dccd3f30be5060b1579d6ebf37cf891c112

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{B49D4CB1-F09D-2848-856A-05C408BCE46E}tf10002088_mac.dotx

Filesize
310KB

MD5
3cb6a725e43ace743e237aeb1c53dc69

SHA1
f2d153dfdc30d261af0c3053de2d9e62e331c79e

SHA256
b9c38765242de238196f6a032b0f590ac930a30232b554c61759fc4fe664f1ea

SHA512
be8e5091d27342f803ef22b55650fc74780f45e18141aecbbe1ccff4960763907aad326ae26f98d21c27c119513641c708cb5652f0d8ba013784cf832fae0665

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{C8EFA955-E9CF-8044-97E4-4A004C9D6B87}tf16392742.dotx

Filesize
87KB

MD5
5c782667381e437531205025cbb40b66

SHA1
e03955f5c5b82a366284e709e7c2115c632e2886

SHA256
f7addab4f4b9134d20d0fef33126dcef9cb8c2ee3e3611698dcd026f04d6516e

SHA512
10fd0e6617277bf931873c60b1bbde3c5b1de9bb660a2698c90e957f3017d30ce3f8787b64504b6eec77d42c7fb453cc2f1887ee6b723d76277a5212a7da1ce9

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{CAB614CD-76D7-D34E-89D2-4391F8D50C5D}tf10002079.dotx

Filesize
35KB

MD5
9c7f40c1b3d07e3ce7ecf4f5e14e0989

SHA1
70561b68467a0aaba69de5a6cefa69adc78fe1c3

SHA256
d0fbe770ab1344bcfab1c858b5ee8da8e3015aa49d6b0c40bd5f1a08caf99947

SHA512
3ed2dce19f7d1388a30d4dfe69d69edbffff4613a77ad907bbaad6c81addb3423452edb4e38c839e79895b1359b1dfb8314ee39ea7e2a3094fca1a0d5459a42a

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{DC38DB2A-370A-D947-8DAC-2F9C86E3322C}tf10002080_mac.dotx

Filesize
35KB

MD5
b650e4d8d45473bc60a98bee598287f4

SHA1
3e3220540502179504b3bf0ac4ada8b69232f8a3

SHA256
bee95f94c2af6c43f3a145efffc4b568a51f14f22cd305b72a2965119f1d6641

SHA512
e69fc7d9211e623ce2eb705e16263a0f01eef778f18f42cfd29efbb9578815894556a9c92bb9a7eb2b96d3309cb7a8d972f654076b47d27d1db83f2515ebe58f

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{E5969760-4566-AC4D-B0D1-EE25EFFD212D}tf16382944.dotx

Filesize
1.3MB

MD5
74c96470561429b5753f86bfa912ccb0

SHA1
e27a74387feb4daa93c9eb50465544c94fbb7eb0

SHA256
3e03a7c04d53482a424676f503c65897d2b420ad8e25e1703252981417825870

SHA512
eaf0dd83910e44660b294b20492a5242842db88c2d80ba47c90da05fa5a54ead8f1cbdef68aad0a079d3606ba80f6cfe186a738bf2089545d0a12e243741ed09

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{EE93A489-011D-6244-9079-28A0391FDD68}tf10002073_mac.dotx

Filesize
31KB

MD5
eebc4ca0babd165d6e0617ac59b2b4a1

SHA1
6cf8b1d7506c8a39d34233acde2971ed3a55ba27

SHA256
8375ad17c0be5d1d4212b01ee676212f64c2f11520eb68f9fabb79f9eed9e757

SHA512
5ce8b099a025755c64256e6f716b3e753027e73cddc928c4b0ae2164f8d85822fb7282f404c4239fc09664408dcdb2abb69728ef16808756dc8c14273f191374

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/DTS/en-GB{0EEA794A-94B1-E742-B261-C2762028C87E}/{F478B1C0-D865-AD46-A281-E985D2F2F039}tf10002081.dotx

Filesize
402KB

MD5
86227a5c1e9de79592ebeb3d0ab5a4c8

SHA1
01bdbf90e97a36eb67426f5626bd4c79d0b25b99

SHA256
fd8149c543f4d08ffafbc2d12969bb0163118aaa055a419f0567bf40ec367b46

SHA512
bd6d3c1579b9ca0899d2dd3e1fb2df772d2c5394e338b13ad02f8b588652e935b38c7fbe5db408fd970c3340a84611d63d504cee305fd53ad04ebda376383e0d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/SurveyEventActivityStats.json

Filesize
14B

MD5
6ca4960355e4951c72aa5f6364e459d5

SHA1
2fd90b4ec32804dff7a41b6e63c8b0a40b592113

SHA256
88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3

SHA512
8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/SurveyHistoryStats.json

Filesize
14B

MD5
6ca4960355e4951c72aa5f6364e459d5

SHA1
2fd90b4ec32804dff7a41b6e63c8b0a40b592113

SHA256
88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3

SHA512
8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.CampaignStates.json

Filesize
1KB

MD5
da7b321936a4650a446dc9236c1894ce

SHA1
4950cd50437470597303a7451ae4e8b1d98af034

SHA256
5d468a964d6ad8e3ce0e0078b7955977545c2083cdb1c8929b1bf1c40f074c1c

SHA512
e27efae91b4622e0c4838daf0752ba20cf1f21e88dbd2251adf20dc0df4859876a3d29be0a5adae8b7f5bbcbc02b9ea0f583d786a6d6b7902a55cb66fa8cb3bf

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.GovernedChannelStates.json

Filesize
657B

MD5
c279b05d34a20aa07bc0234458ccc37e

SHA1
e1fff46ec071384722a5da755e8202753d4f1ac7

SHA256
8863afe2073648c74d5446de3e95ad4c6bb239366fda0ff15a252d09997b6fc0

SHA512
ce456abffa8178b4d4c3eae9c61b369a18a9d60df9dec05a9fe3b98df083405f68b4262d8043663037ae396b95260c6c703b01c5bdd768189131ddbb4d64f6f0

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.Settings.json

Filesize
87B

MD5
e4e83f8123e9740b8aa3c3dfa77c1c04

SHA1
5281eae96efde7b0e16a1d977f005f0d3bd7aad0

SHA256
6034f27b0823b2a6a76fe296e851939fd05324d0af9d55f249c79af118b0eb31

SHA512
bd6b33fd2bbce4a46991bc0d877695d16f7e60b1959a0defc79b627e569e5c6cac7b4ad4e3e1d8389a08584602a51cf84d44cf247f03beb95f7d307fbba12bb9

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Personalization/Governance/Anonymous/floodgatecampaigns.json.tmp

Filesize
5KB

MD5
efeefa337ea335bd3b9354d30bc9e542

SHA1
11a5744ed2ce7639febe87d85c96b7a08249d793

SHA256
52fa7332bbd690e71c7268ee21e5240ec12bcdc76ecbf8490c3ffe5086016ee7

SHA512
9090afe823554a788dac95b008fccc91be96787e3a7a28497f73e0534e4a1695da1b472fbe6c3944c26a58be0b45a3be8e27d5287c836e179c89afa56c367d32

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.com/C137FDEB-A70E-5349-9AE8-CB8AFECFF7D3

Filesize
145KB

MD5
bc1b3b8614add326f4e5d24e76b2af54

SHA1
a3cf799297429463fd79c376a09809d8f2fe1379

SHA256
3165f7a5aec6bb1581bbc69146c7e5296fb1036d2c86668f073b5f0fcfba9bef

SHA512
6fbd0965fc34697bd6c9911ca434d134b180692dd4c863a0b87b724f53f50b1c23383c1504131289f6843fe07d536d0e52556dcc055e7f4148d872f5e52bc49b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/microsoft word_Rules.xml

Filesize
259KB

MD5
d9bf9a27ea0d57244805cdbe5565cb2e

SHA1
d511bb1865285046a9fd86af83e9c8b0474e2807

SHA256
7985556d7a6f37b464fd7b79de59b4749e0b2659cbf86a8d8f2221d855eb8356

SHA512
34cf61d825bd2bebd2ad9b8520c015cf222b4a8bcbf5b8a1d2caba55d3187930ab0680465407c722c8045a6f66f76d573b079c508f9815ff68de60243a509e49

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/microsoft word_Rules.xml

Filesize
259KB

MD5
d9bf9a27ea0d57244805cdbe5565cb2e

SHA1
d511bb1865285046a9fd86af83e9c8b0474e2807

SHA256
7985556d7a6f37b464fd7b79de59b4749e0b2659cbf86a8d8f2221d855eb8356

SHA512
34cf61d825bd2bebd2ad9b8520c015cf222b4a8bcbf5b8a1d2caba55d3187930ab0680465407c722c8045a6f66f76d573b079c508f9815ff68de60243a509e49

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Temp/~WRS{7719CEEE-CC6D-DD45-8329-D322D7D39C49}

Filesize
1KB

MD5
e0a581294718e1e2ba19fea0428061a9

SHA1
81be368abd968b139126e6d9c40db12116fbd47a

SHA256
d64732e76dce6cc23f0d81422546ec4550cba90173a96d7715bfc66cee4787fd

SHA512
14f073fda0920881bba51971f570d2c89ccab29a7c2a05414b80f3903268f9839d1d2b6ee4cf21fda316cc9080ece896b1e9889203e2788c7d46a91f43673553

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/Catalog/ListAll_hier.Json

Filesize
519KB

MD5
7a64478bef2df1548ddad929c4fac435

SHA1
97b178f2554534e4dfc5d4fd341129c8d55ed676

SHA256
3a77997f2737bf7aa260be3df8d71f959b220ee51d50e60c86d91866fcf2f3fb

SHA512
9882bb9e8396cd4b37e3a9540d6b3ae28e43550845bcc511b8e268a4f7ba186ed519bbca7fd1c09ee8681756420281499fa1368f3b8ded20d6d694114d3190cd

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/PreviewFont/hier_officeFontsPreview_4_23.ttf

Filesize
1.8MB

MD5
4ec7ad8efea8c3b38cdd313c76581290

SHA1
0a1aec0507034a9637306eabc52c405bf9a06931

SHA256
987145a370c878d22b37fb56e38645971a6189a13fd4bce6cb61243568fda7b8

SHA512
ae8884a5900b8af32a912d214233df0d923ff4c3f3461dcec0a8e004035608d884b420a6b78f9f27a1e2d69cbbeee0309099b4e34bffc868a294a3f7ad18cf1f

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/PreviewFont/hier_officeFontsPreview_4_23.ttf

Filesize
1.8MB

MD5
4ec7ad8efea8c3b38cdd313c76581290

SHA1
0a1aec0507034a9637306eabc52c405bf9a06931

SHA256
987145a370c878d22b37fb56e38645971a6189a13fd4bce6cb61243568fda7b8

SHA512
ae8884a5900b8af32a912d214233df0d923ff4c3f3461dcec0a8e004035608d884b420a6b78f9f27a1e2d69cbbeee0309099b4e34bffc868a294a3f7ad18cf1f

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Templates.localized/~$Normal.dotm

Filesize
162B

MD5
301de467c9973c8b4178ad4a32c38b01

SHA1
44bbaca0e0d6ef61aad23c46c0c9830217a2d011

SHA256
b6f03da65cfe382bdd456e5e5732cf4544ba11134f286028e7974e97bf00e258

SHA512
5f61de7eae5f09e8644e9eccac28cc9e27d5ab4365d9b0a6b8a1413ef95e4c98fa816a73d7b12218d21eb009dc57791537fd5a5e49ad18ebeac4e81ae7ef5e85

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.ms/com.microsoft.autoupdate.fba/.dat.nosync0229.vyanJ7

Filesize
428B

MD5
45bdcab1c9038b2d8b56686406d39e14

SHA1
ce003f268663303128dedf78ca71997b532ccc93

SHA256
7e08a727d97bc6f6460c21a8a86a81c6b89be21833c1695f6a79636e90399a25

SHA512
1c14f9b74e05f4c16baceea40870208044f783452429bf2b7c2ba3919d4ccc973433c77361f0d80add7460fba50415bf0aa415b98531f2cc433da3c6bf46008d

Download Submit
/Users/run/tmp/~$asd.docx

Filesize
162B

MD5
09259dd83ffc3443c28d94dd36c54721

SHA1
4ff8ba98fcb19c62dfab3a7047d41ccb20ee8df5

SHA256
c8dbe5aa2de8b15621aa2a7a9615b20afffe1553c3a47985ba14eb424b137841

SHA512
a8b3efbdad6e58fc14d1752c0aaddbac85852f4c7fd5972a21102134b8bb646f74e4cafa2d2209d921d965e1afafb3c15d528386887bee947a1e01cdc78a9841

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

Filesize
21KB

MD5
b8ce9d32c81882543f866e82df26e557

SHA1
5632583646de0ee5cc84600cda97794404c79c05

SHA256
ed48f46412b48e4d54ecfc48c8c8449f2f5578667a5a11c42e57039bd511a32c

SHA512
70f741bd3c2d15d3ab17079ec94ea9e5aad6d17d331915605876afe59c703f050daf201b9bbce593bd136195ab275bf001b1561e9422d78710a5ed96bf81decb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

Filesize
21KB

MD5
b8ce9d32c81882543f866e82df26e557

SHA1
5632583646de0ee5cc84600cda97794404c79c05

SHA256
ed48f46412b48e4d54ecfc48c8c8449f2f5578667a5a11c42e57039bd511a32c

SHA512
70f741bd3c2d15d3ab17079ec94ea9e5aad6d17d331915605876afe59c703f050daf201b9bbce593bd136195ab275bf001b1561e9422d78710a5ed96bf81decb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/5e84410f27304d289f168a76d51b240a.db.ses

Filesize
51B

MD5
fafa70d316ad38bbe76c21e585f3f1d1

SHA1
a55aca6afd084cb78822169daf0bb10ba31feb0f

SHA256
8dd0c90b370301d408d1a0a0f73465987dc67a6c2409a984df6ecb368e90c9d5

SHA512
64a9e977243f02607aadb82c0aebedb4309718dd606a80c326059a28fbc1c615855c0ab02ddf9caa188a0be67138f465f0b5758e81f0ff65954dee273172e115

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/TelemetryUploadFilecom.microsoft.autoupdate.fba.txt

Filesize
1KB

MD5
92cfa29761c1df7096d926c2e23ab3ba

SHA1
d91b853c864cf36a7de87e24daba395934e08e2c

SHA256
0ec80247e9d59ffe83f343ec8c42ee3a7fb4ac3a53803b6181c99711dd6c8b97

SHA512
44292571f9e247540ec4e411cee1f6afc0cac31610598f1ef4320a43df53fbd6d19c7b6526649fa24e3cc4c8ee9e096060775cfb0630612da9634032ff51b3a8

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.microsoft.Word/TemporaryItems/(A Document Being Saved By Word)/MERP.ObjC.2928E438-53E3-4E03-92A2-F558FDCA70FF.plist

Filesize
5KB

MD5
5ad00a65c346d64316ec1800e5292ff7

SHA1
4ee00827bef3e419ad18ee6e399e3c7d4dd0715c

SHA256
1cb822086ef41dab0661c911ac3fc3c8fe7e157dcd04b525189ae1cab8b09f1a

SHA512
9de22d4c03e4e80302b036cc3657f0c6b07e3ccbd52035c64c3ffce8495c7010925bb4bff79f7e2062a719080f9ce269c5fd487d157a85dd5f282d44e3036a79

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.microsoft.Word/TemporaryItems/(A Document Being Saved By Word)/com.microsoft.Word.securebookmarks.plist

Filesize
1KB

MD5
b3ecf5f70b7107451327a2cb7fd62810

SHA1
563632376da17e10274d9790964232eb3cde8df5

SHA256
2c1843e30093b9394ba117d4a18238039db032bdccd2f1e829ff37b3c36bc026

SHA512
b92985c86b2bf1f1a330d4076ed05934b03e4d9d88f81c4d250e438d02df32d1473da4049af3f59762ac7751daacb16649d633ea9062f5b6d88b63c92f5a3e54

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads