bcbbc91e9ddda109cfb9a4c1a6053758af207436d3304d9943859e08b9a8a913

Resubmissions

23-11-2022 06:46

221123-hjs3rahe4s 1

23-11-2022 06:25

221123-g6rmrsha5x 1

23-11-2022 06:21

221123-g4ekesdd87 1

Analysis

max time kernel
500s
max time network
531s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
23-11-2022 06:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

copy-32.zip
Size

20.0MB
MD5

1f4230bdfd645d1fed4e77d0d958d3d1
SHA1

bb175c931086fcf48f032e3e7dc33e839d552743
SHA256

bcbbc91e9ddda109cfb9a4c1a6053758af207436d3304d9943859e08b9a8a913
SHA512

bae30d3c6f472c01b28beafde2eb405ef38503e0f911e422379c5dccb68d24776f14ca6e09058016b9e0c333fb094226e0c7b4f64e6e8f8f57e078c9e5a7ad5d
SSDEEP

393216:/YszLbkgqVtq8PPrzCX5WPD1+GLAYszLbkgqVtq8PPrzCX5WPD1+GLJ:zzXM/zPrY5G1JizXM/zPrY5G1JJ

Score

1^/10

Malware Config

Signatures

/usr/sbin/spctl
/usr/sbin/spctl --test-devid-status
1⤵
PID:489

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:490

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/copy-32.zip\""
1⤵
PID:492

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/copy-32.zip\""
1⤵
PID:492

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/copy-32.zip\""
1⤵
PID:492

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/copy-32.zip
1⤵
PID:492

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/copy-32.zip
1⤵
PID:492

/bin/zsh
/bin/zsh -c /Users/run/copy-32.zip
2⤵
PID:513

/bin/zsh
/bin/zsh -c /Users/run/copy-32.zip
2⤵
PID:513

/Users/run/copy-32.zip
/Users/run/copy-32.zip
2⤵
PID:513

/Users/run/copy-32.zip
/Users/run/copy-32.zip
2⤵
PID:513

/bin/ls
ls
1⤵
PID:520

/bin/ls
ls
1⤵
PID:520

/bin/ls
ls
1⤵
PID:523

/bin/ls
ls
1⤵
PID:523

/bin/ls
ls
1⤵
PID:540

/bin/ls
ls
1⤵
PID:540

/bin/ls
ls
1⤵
PID:541

/bin/ls
ls
1⤵
PID:541

/bin/ls
ls
1⤵
PID:542

/bin/ls
ls
1⤵
PID:542

/bin/ls
ls
1⤵
PID:543

/bin/ls
ls
1⤵
PID:543

/bin/ls
ls
1⤵
PID:551

/bin/ls
ls
1⤵
PID:551

/bin/ls
ls -la
1⤵
PID:552

/bin/ls
ls -la
1⤵
PID:552

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:553

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:553

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook
1⤵
PID:554

/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
1⤵
PID:554

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.AF425DC3-4985-4C53-94B2-ED7551B0EACF 537
1⤵
PID:555

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:555

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.33E4BB16-00EA-4C9D-8021-5C6A3F6E0F2E 554
1⤵
PID:556

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:556

/usr/libexec/xpcproxy
xpcproxy com.apple.SafariServices 287
1⤵
PID:557

/Library/Apple/System/Library/Frameworks/SafariServices.framework/Versions/A/XPCServices/com.apple.SafariServices.xpc/Contents/MacOS/com.apple.SafariServices
/Library/Apple/System/Library/Frameworks/SafariServices.framework/Versions/A/XPCServices/com.apple.SafariServices.xpc/Contents/MacOS/com.apple.SafariServices
1⤵
PID:557

/usr/libexec/xpcproxy
xpcproxy com.apple.WebKit.WebContent.C7866C25-7D2E-4B08-BE3A-7EEC52DF4785 287
1⤵
PID:559

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
1⤵
PID:559

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.SafeBrowsing.Service
1⤵
PID:560

/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
1⤵
PID:560

/usr/libexec/xpcproxy
xpcproxy com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:563

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:563

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:566

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:566

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.2568
1⤵
PID:567

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility"
1⤵
PID:567

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:568

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose /Users/run/copy-32.zip
1⤵
PID:569

/usr/bin/file
/usr/bin/file -b /Users/run/copy-32.zip
1⤵
PID:570

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 567
1⤵
PID:571

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:571

/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 567
1⤵
PID:573

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:573

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:574

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:574

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:578

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:578

/usr/libexec/xpcproxy
xpcproxy "com.apple.xpc.launchd.oneshot.0x10000002.Archive Utility"
1⤵
PID:579

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility" -psn_0_188462
1⤵
PID:579

/usr/libexec/xpcproxy
xpcproxy com.apple.XprotectFramework.AnalysisService 518
1⤵
PID:580

/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
1⤵
PID:580

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose "/Users/run/copy-32/file1 copy.zip"
1⤵
PID:581

/usr/bin/file
/usr/bin/file -b "/Users/run/copy-32/file1 copy.zip"
1⤵
PID:582

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 579
1⤵
PID:583

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:583

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 579
1⤵
PID:584

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:584

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:585

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:585

/usr/libexec/xpcproxy
xpcproxy "com.apple.xpc.launchd.oneshot.0x10000003.Archive Utility"
1⤵
PID:586

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility" -psn_0_196656
1⤵
PID:586

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose "/Users/run/copy-32/file1 copy 2.zip"
1⤵
PID:587

/usr/bin/file
/usr/bin/file -b "/Users/run/copy-32/file1 copy 2.zip"
1⤵
PID:588

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 586
1⤵
PID:589

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:589

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 586
1⤵
PID:590

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:590

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:591

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:591

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.2568
1⤵
PID:592

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility"
1⤵
PID:592

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose /Users/run/copy-32.zip
1⤵
PID:593

/usr/bin/file
/usr/bin/file -b /Users/run/copy-32.zip
1⤵
PID:594

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 592
1⤵
PID:595

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:595

/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
1⤵
PID:596

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 592
1⤵
PID:597

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:597

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.2568
1⤵
PID:598

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/MacOS/Archive Utility"
1⤵
PID:598

/usr/bin/macbinary
/usr/bin/macbinary probe --verbose /Users/run/copy-32.zip
1⤵
PID:599

/usr/bin/file
/usr/bin/file -b /Users/run/copy-32.zip
1⤵
PID:600

/usr/libexec/xpcproxy
xpcproxy com.apple.archiveutility.auhelperservice 598
1⤵
PID:601

/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService
"/System/Library/CoreServices/Applications/Archive Utility.app/Contents/XPCServices/AUHelperService.xpc/Contents/MacOS/AUHelperService"
1⤵
PID:601

/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
/System/Library/Frameworks/FileProvider.framework/XPCServices/ArchiveService.xpc/Contents/MacOS/ArchiveService
1⤵
PID:602

/usr/libexec/xpcproxy
xpcproxy com.apple.appkit.xpc.sandboxedServiceRunner 598
1⤵
PID:603

/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/SandboxedServiceRunner.xpc/Contents/MacOS/SandboxedServiceRunner
1⤵
PID:603

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Users/run/copy-32/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/Users/run/copy-32/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression

Filesize
324KB

MD5
2c6fc27df563295c1ec749fd60943e42

SHA1
6428cba2d23fe32bf79b37c7b0ced149080f46c7

SHA256
6f0b48f63fea58095b9730a97f6f84da2ace446e9a4ffa80503bce6583a8b101

SHA512
9400b3c0d3391a0993a3c767ae67885495760fdbadbf2a731ad93c7c1754180833a08063c6a6bf6faba8b01d9f1c56bad37d7ff119e10d26b5b39b8294e6fcf7

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression.tmp

Filesize
324KB

MD5
2c6fc27df563295c1ec749fd60943e42

SHA1
6428cba2d23fe32bf79b37c7b0ced149080f46c7

SHA256
6f0b48f63fea58095b9730a97f6f84da2ace446e9a4ffa80503bce6583a8b101

SHA512
9400b3c0d3391a0993a3c767ae67885495760fdbadbf2a731ad93c7c1754180833a08063c6a6bf6faba8b01d9f1c56bad37d7ff119e10d26b5b39b8294e6fcf7

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression

Filesize
25.7MB

MD5
53297323a35178db80da8c94e4e56edd

SHA1
fe8f08f645b9ed9b3b8237e56e0ff24e190fa044

SHA256
4c31e2aba8a44bb9f11debbe4bba5a1f38fcce0e2eba6c0018ce35829a823a3e

SHA512
a9efdf6cfc8c0640f85e3ebb06e8a152eda9157199e08316058d5834f7f3826ba330da3c05f268da4eb5f8f8dc4c9771b7d6a4cf30d9f0cc2927ccea0cc7fa7e

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression.tmp

Filesize
25.7MB

MD5
53297323a35178db80da8c94e4e56edd

SHA1
fe8f08f645b9ed9b3b8237e56e0ff24e190fa044

SHA256
4c31e2aba8a44bb9f11debbe4bba5a1f38fcce0e2eba6c0018ce35829a823a3e

SHA512
a9efdf6cfc8c0640f85e3ebb06e8a152eda9157199e08316058d5834f7f3826ba330da3c05f268da4eb5f8f8dc4c9771b7d6a4cf30d9f0cc2927ccea0cc7fa7e

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression

Filesize
118KB

MD5
f924a7faf3736768f01152ba6aaee1b0

SHA1
34a3d128bf7c0a5307368251d61ce80714e19f28

SHA256
96189b2d0365d85b79f23885a0b2820827724eec161a364732f12e84c345566b

SHA512
ebdd0789ca8511fbf3abe8da14f3a37018b052a72fb9562caa24fea7fe84444b4ba644ef29faf5ddb600b12908ac9de4ad99fddb83b176e6d9a450eec4396543

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression.tmp

Filesize
118KB

MD5
f924a7faf3736768f01152ba6aaee1b0

SHA1
34a3d128bf7c0a5307368251d61ce80714e19f28

SHA256
96189b2d0365d85b79f23885a0b2820827724eec161a364732f12e84c345566b

SHA512
ebdd0789ca8511fbf3abe8da14f3a37018b052a72fb9562caa24fea7fe84444b4ba644ef29faf5ddb600b12908ac9de4ad99fddb83b176e6d9a450eec4396543

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy 2.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.fileprovider.ArchiveService/TemporaryItems/(A Document Being Saved By ArchiveService)/file1 copy.zip

Filesize
10.0MB

MD5
a50b5256db6a7357994d4163a1158c41

SHA1
149a4568237d0b4858558e7dcf8d6a16fb9333aa

SHA256
fd48b08f61588ac737f898afdddc2103e9754b36651b0e7be382062fefcca39a

SHA512
230f54f24266e67fe3293d46210ba57517d6d00d0507889881e127e5cacc1f9e114528c7d16280ad18c3ca611f6730a3130bc063c96cd2dfede3a9e8b45b80cc

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads