Overview

overview

1

Static

static

1

calc.exe

macos-10.15-amd64

Analysis

  • max time kernel
    38s
  • max time network
    38s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    09/04/2023, 13:38

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Machine shutdown
Report Analysis Logs

General

  • Target

    calc.exe

  • Size

    27KB

  • MD5

    5da8c98136d98dfec4716edd79c7145f

  • SHA1

    ed13af4a0a754b8daee4929134d2ff15ebe053cd

  • SHA256

    58189cbd4e6dc0c7d8e66b6a6f75652fc9f4afc7ce0eba7d67d8c3feb0d5381f

  • SHA512

    6e2b067760ec178cdcc4df04c541ce6940fc2a0cdd36f57f4d6332e38119dbc5e24eb67c11d2c8c8ffeed43533c2dd8b642d2c7c997c392928091b5ccce7582a

  • SSDEEP

    384:Otj8FKzuRxmeWCJxhd2WS/YWyiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiLiiiB:QXif4CbPQ7

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/calc.exe\""
    1⤵
      PID:493
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/calc.exe\""
      1⤵
        PID:493
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/calc.exe\""
        1⤵
          PID:493
        • /usr/bin/sudo
          sudo /bin/zsh -c /Users/run/calc.exe
          1⤵
            PID:493
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/calc.exe
            1⤵
              PID:493
              • /bin/zsh
                /bin/zsh -c /Users/run/calc.exe
                2⤵
                  PID:513
                • /bin/zsh
                  /bin/zsh -c /Users/run/calc.exe
                  2⤵
                    PID:513
                  • /Users/run/calc.exe
                    /Users/run/calc.exe
                    2⤵
                      PID:513
                    • /Users/run/calc.exe
                      /Users/run/calc.exe
                      2⤵
                        PID:513
                    • /usr/bin/syslog
                      /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
                      1⤵
                        PID:495
                      • /usr/libexec/xpcproxy
                        xpcproxy com.apple.PerformanceAnalysis.animationperfd
                        1⤵
                          PID:515
                        • /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                          /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                          1⤵
                            PID:515
                          • /usr/libexec/xpcproxy
                            xpcproxy com.apple.Safari.2028
                            1⤵
                              PID:520
                            • /Applications/Safari.app/Contents/MacOS/Safari
                              /Applications/Safari.app/Contents/MacOS/Safari
                              1⤵
                                PID:520
                              • /usr/libexec/xpcproxy
                                xpcproxy com.apple.Safari.History
                                1⤵
                                  PID:521
                                • /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                                  /System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
                                  1⤵
                                    PID:521
                                  • /usr/libexec/xpcproxy
                                    xpcproxy com.apple.WebKit.WebContent.16C8E7BC-9315-4632-988F-00E028E94B5F 520
                                    1⤵
                                      PID:522
                                    • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                      /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                      1⤵
                                        PID:522
                                      • /usr/libexec/xpcproxy
                                        xpcproxy com.apple.SafariLaunchAgent
                                        1⤵
                                          PID:526
                                        • /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                          /Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent
                                          1⤵
                                            PID:526
                                          • /usr/libexec/xpcproxy
                                            xpcproxy com.apple.WebKit.WebContent.F9F6E146-9A15-4E98-A04B-5D59DEDD9377 520
                                            1⤵
                                              PID:527
                                            • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                              /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                              1⤵
                                                PID:527
                                              • /usr/libexec/xpcproxy
                                                xpcproxy com.apple.Safari.SafeBrowsing.Service
                                                1⤵
                                                  PID:530
                                                • /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                                  /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
                                                  1⤵
                                                    PID:530
                                                  • /usr/libexec/xpcproxy
                                                    xpcproxy com.apple.WebKit.WebContent.3917989C-E39D-404C-9A79-BE1879101296 520
                                                    1⤵
                                                      PID:531
                                                    • /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                      /System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
                                                      1⤵
                                                        PID:531
                                                      • /usr/libexec/xpcproxy
                                                        xpcproxy com.apple.ReportMemoryException
                                                        1⤵
                                                          PID:532
                                                        • /usr/libexec/ReportMemoryException
                                                          /usr/libexec/ReportMemoryException
                                                          1⤵
                                                            PID:532
                                                          • /usr/bin/login
                                                            login -pf run
                                                            1⤵
                                                              PID:534
                                                            • /usr/bin/login
                                                              login -pf run
                                                              1⤵
                                                                PID:534
                                                                • /bin/zsh
                                                                  -zsh
                                                                  2⤵
                                                                    PID:535
                                                                  • /bin/zsh
                                                                    -zsh
                                                                    2⤵
                                                                      PID:535
                                                                      • /usr/libexec/path_helper
                                                                        /usr/libexec/path_helper -s
                                                                        3⤵
                                                                          PID:536
                                                                        • /usr/libexec/path_helper
                                                                          /usr/libexec/path_helper -s
                                                                          3⤵
                                                                            PID:536
                                                                          • /usr/bin/locale
                                                                            locale LC_CTYPE
                                                                            3⤵
                                                                              PID:537
                                                                            • /usr/bin/locale
                                                                              locale LC_CTYPE
                                                                              3⤵
                                                                                PID:537
                                                                          • /usr/libexec/xpcproxy
                                                                            xpcproxy com.apple.spindump
                                                                            1⤵
                                                                              PID:538
                                                                            • /usr/sbin/spindump
                                                                              /usr/sbin/spindump
                                                                              1⤵
                                                                                PID:538
                                                                              • /usr/libexec/xpcproxy
                                                                                xpcproxy com.apple.tailspind
                                                                                1⤵
                                                                                  PID:539
                                                                                • /usr/libexec/tailspind
                                                                                  /usr/libexec/tailspind
                                                                                  1⤵
                                                                                    PID:539
                                                                                  • /usr/libexec/xpcproxy
                                                                                    xpcproxy com.apple.spindump_agent
                                                                                    1⤵
                                                                                      PID:540
                                                                                    • /usr/libexec/spindump_agent
                                                                                      /usr/libexec/spindump_agent
                                                                                      1⤵
                                                                                        PID:540
                                                                                      • /usr/libexec/xpcproxy
                                                                                        xpcproxy com.apple.PackageKit.InstallStatus
                                                                                        1⤵
                                                                                          PID:541
                                                                                        • /usr/libexec/xpcproxy
                                                                                          xpcproxy com.apple.warmd_agent
                                                                                          1⤵
                                                                                            PID:542
                                                                                          • /usr/libexec/warmd_agent
                                                                                            /usr/libexec/warmd_agent
                                                                                            1⤵
                                                                                              PID:542
                                                                                            • /System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress
                                                                                              "/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress"
                                                                                              1⤵
                                                                                                PID:541
                                                                                              • /usr/libexec/xpcproxy
                                                                                                xpcproxy com.apple.passd
                                                                                                1⤵
                                                                                                  PID:543
                                                                                                • /System/Library/PrivateFrameworks/PassKitCore.framework/passd
                                                                                                  /System/Library/PrivateFrameworks/PassKitCore.framework/passd
                                                                                                  1⤵
                                                                                                    PID:543
                                                                                                  • /usr/libexec/xpcproxy
                                                                                                    xpcproxy com.apple.parsec-fbf
                                                                                                    1⤵
                                                                                                      PID:544
                                                                                                    • /usr/libexec/xpcproxy
                                                                                                      xpcproxy com.apple.ViewBridgeAuxiliary
                                                                                                      1⤵
                                                                                                        PID:546
                                                                                                      • /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                        /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                        1⤵
                                                                                                          PID:546
                                                                                                        • /usr/libexec/xpcproxy
                                                                                                          xpcproxy com.apple.sessionlogoutd
                                                                                                          1⤵
                                                                                                            PID:547
                                                                                                          • /System/Library/CoreServices/sessionlogoutd
                                                                                                            /System/Library/CoreServices/sessionlogoutd
                                                                                                            1⤵
                                                                                                              PID:547
                                                                                                            • /sbin/shutdown
                                                                                                              /sbin/shutdown -h now
                                                                                                              1⤵
                                                                                                                PID:1.8446744072548463e+19
                                                                                                              • /bin/sh
                                                                                                                sh -c "/usr/bin/wall -n"
                                                                                                                1⤵
                                                                                                                  PID:552
                                                                                                                • /bin/bash
                                                                                                                  sh -c "/usr/bin/wall -n"
                                                                                                                  1⤵
                                                                                                                    PID:552
                                                                                                                  • /bin/bash
                                                                                                                    sh -c "/usr/bin/wall -n"
                                                                                                                    1⤵
                                                                                                                      PID:552
                                                                                                                    • /usr/bin/wall
                                                                                                                      /usr/bin/wall -n
                                                                                                                      1⤵
                                                                                                                        PID:552
                                                                                                                      • /usr/bin/wall
                                                                                                                        /usr/bin/wall -n
                                                                                                                        1⤵
                                                                                                                          PID:552
                                                                                                                        • /System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf
                                                                                                                          /System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf
                                                                                                                          1⤵
                                                                                                                            PID:544
                                                                                                                          • /System/Library/Extensions/IOGraphicsFamily.kext/iogdiagnose
                                                                                                                            iogdiagnose -b /var/log/displaypolicy/iogdiagnose-last.bin
                                                                                                                            1⤵
                                                                                                                              PID:0
                                                                                                                              • /usr/sbin/spindump
                                                                                                                                spindump -shutdownstall 2 -timelimit 5
                                                                                                                                2⤵
                                                                                                                                  PID:554
                                                                                                                                • /bin/sh
                                                                                                                                  sh -c /usr/sbin/kextstat
                                                                                                                                  2⤵
                                                                                                                                    PID:555
                                                                                                                                  • /bin/bash
                                                                                                                                    sh -c /usr/sbin/kextstat
                                                                                                                                    2⤵
                                                                                                                                      PID:555
                                                                                                                                    • /bin/bash
                                                                                                                                      sh -c /usr/sbin/kextstat
                                                                                                                                      2⤵
                                                                                                                                        PID:555
                                                                                                                                      • /usr/sbin/kextstat
                                                                                                                                        /usr/sbin/kextstat
                                                                                                                                        2⤵
                                                                                                                                          PID:555
                                                                                                                                        • /usr/sbin/kextstat
                                                                                                                                          /usr/sbin/kextstat
                                                                                                                                          2⤵
                                                                                                                                            PID:555
                                                                                                                                          • /bin/bash
                                                                                                                                            bash /private/var/install/shutdown_installer_tasks
                                                                                                                                            2⤵
                                                                                                                                              PID:556
                                                                                                                                            • /bin/bash
                                                                                                                                              bash /private/var/install/deferred_install
                                                                                                                                              2⤵
                                                                                                                                                PID:557

                                                                                                                                            Network

                                                                                                                                            MITRE ATT&CK Matrix

                                                                                                                                            Replay Monitor

                                                                                                                                            Loading Replay Monitor...

                                                                                                                                            Downloads

                                                                                                                                            • /Library/Logs/DiagnosticReports/shutdown_stall_2023-04-09-153937_tests-iMac.shutdownStall
                                                                                                                                              Filesize

                                                                                                                                              167KB

                                                                                                                                              MD5

                                                                                                                                              a14362c4d42613341170d1a5fa751286

                                                                                                                                              SHA1

                                                                                                                                              cc5f3971a60eb0f9e75b3eb60ad7b9981f5e8d13

                                                                                                                                              SHA256

                                                                                                                                              fb4bba50615371ebcb9dedded65ac603c41cc0a1841397dc5a2406b1f7b34755

                                                                                                                                              SHA512

                                                                                                                                              4e861454f1638ebd4a528faf5f0c1d8ebff67a0adb63835efcb4d406bc54c578753b8cb1e2c10420bfa9707b74116de26c07cf506ffa68de97cd081c93788a57

                                                                                                                                              Download Submit

                                                                                                                                            • /Users/run/.zsh_history.new
                                                                                                                                              Filesize

                                                                                                                                              528B

                                                                                                                                              MD5

                                                                                                                                              71a61a4272228d84457a1b964867386d

                                                                                                                                              SHA1

                                                                                                                                              88f6eafe73c58f4de3f6eae7d1f11b907ed25283

                                                                                                                                              SHA256

                                                                                                                                              d6fa279e63add257d6034806a2266631fb0546e19bf7e91a4443db05f59092c0

                                                                                                                                              SHA512

                                                                                                                                              dda5456f010b4b47e1489916181f25ea7a16c343087e600f2874cb4fbd400e1dbc7c70e234bfa6ec0ab5d7e1a8bff9495aec1feecd2c9876c588fbf150ec0012

                                                                                                                                              Download Submit

                                                                                                                                            • /Users/run/Library/Containers/com.apple.Safari/Data/Library/Saved Application State/com.apple.Safari.savedState/data.data
                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              MD5

                                                                                                                                              c00b211a4301a584ef79da3d1f29bea5

                                                                                                                                              SHA1

                                                                                                                                              2483aae0ba382f185d110c2e6ed93da05013d6fd

                                                                                                                                              SHA256

                                                                                                                                              def6b78327d3c8d864ed5efe0fd195f3c3a0c6199adbf0b8e5015e24670a856c

                                                                                                                                              SHA512

                                                                                                                                              9420089b23fad0d22cb6919d56dd4c4299425218fbcd56bcb685971faaccd01b3bc7b339d4bdfdd1e8758fe5261ccabd651f2036ca5168271e3445b423b102f0

                                                                                                                                              Download Submit

                                                                                                                                            • /Users/run/Library/Containers/com.apple.Safari/Data/Library/Saved Application State/com.apple.Safari.savedState/data.data
                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              MD5

                                                                                                                                              c00b211a4301a584ef79da3d1f29bea5

                                                                                                                                              SHA1

                                                                                                                                              2483aae0ba382f185d110c2e6ed93da05013d6fd

                                                                                                                                              SHA256

                                                                                                                                              def6b78327d3c8d864ed5efe0fd195f3c3a0c6199adbf0b8e5015e24670a856c

                                                                                                                                              SHA512

                                                                                                                                              9420089b23fad0d22cb6919d56dd4c4299425218fbcd56bcb685971faaccd01b3bc7b339d4bdfdd1e8758fe5261ccabd651f2036ca5168271e3445b423b102f0

                                                                                                                                              Download Submit

                                                                                                                                            • /Users/run/Library/Safari/Favicon Cache/favicons/2529545429CE075A4E64DE7DAA3D4C27
                                                                                                                                              Filesize

                                                                                                                                              5KB

                                                                                                                                              MD5

                                                                                                                                              f3418a443e7d841097c714d69ec4bcb8

                                                                                                                                              SHA1

                                                                                                                                              49263695f6b0cdd72f45cf1b775e660fdc36c606

                                                                                                                                              SHA256

                                                                                                                                              6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

                                                                                                                                              SHA512

                                                                                                                                              82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

                                                                                                                                              Download Submit

                                                                                                                                            • /Users/run/Library/Safari/Favicon Cache/favicons/2529545429CE075A4E64DE7DAA3D4C27
                                                                                                                                              Filesize

                                                                                                                                              5KB

                                                                                                                                              MD5

                                                                                                                                              f3418a443e7d841097c714d69ec4bcb8

                                                                                                                                              SHA1

                                                                                                                                              49263695f6b0cdd72f45cf1b775e660fdc36c606

                                                                                                                                              SHA256

                                                                                                                                              6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

                                                                                                                                              SHA512

                                                                                                                                              82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression
                                                                                                                                              Filesize

                                                                                                                                              364KB

                                                                                                                                              MD5

                                                                                                                                              df8ea669a5a3ae009f8d17ae4ab127de

                                                                                                                                              SHA1

                                                                                                                                              ae0355e496e1e95ae89c0225c21600026ad7a6b0

                                                                                                                                              SHA256

                                                                                                                                              ea9cf8315089b32d6d8fe8c79e9f320743ca35d812debd0069a1af3616e381b7

                                                                                                                                              SHA512

                                                                                                                                              7abc9b8100f577d073a9d367c22b6ccea1cc4adbffe30b55001abe0b8475e287c4c53ca905760249bd2e5a66668b050073e0703e3ffa2ed5575261602f22576a

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression.tmp
                                                                                                                                              Filesize

                                                                                                                                              364KB

                                                                                                                                              MD5

                                                                                                                                              df8ea669a5a3ae009f8d17ae4ab127de

                                                                                                                                              SHA1

                                                                                                                                              ae0355e496e1e95ae89c0225c21600026ad7a6b0

                                                                                                                                              SHA256

                                                                                                                                              ea9cf8315089b32d6d8fe8c79e9f320743ca35d812debd0069a1af3616e381b7

                                                                                                                                              SHA512

                                                                                                                                              7abc9b8100f577d073a9d367c22b6ccea1cc4adbffe30b55001abe0b8475e287c4c53ca905760249bd2e5a66668b050073e0703e3ffa2ed5575261602f22576a

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression
                                                                                                                                              Filesize

                                                                                                                                              26.9MB

                                                                                                                                              MD5

                                                                                                                                              8c13c9c553bd82f268c2517f6bbb3a2b

                                                                                                                                              SHA1

                                                                                                                                              74175d55ab6d209b42ba13952fe0cbfe4e6b3b5c

                                                                                                                                              SHA256

                                                                                                                                              823b241ca53b70b08c03df3a823ec38b82453a8062218dd59fa8c7a567d7b4af

                                                                                                                                              SHA512

                                                                                                                                              ed18e5a3a6cf44d8cda8437578ea71f284a7b7c4fca8d5998c72d584ec96556e92f00ac3c6e19a00e14df3cedddb245ac2b47cecd34eaf8951b8e676a9bceed1

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression.tmp
                                                                                                                                              Filesize

                                                                                                                                              26.9MB

                                                                                                                                              MD5

                                                                                                                                              8c13c9c553bd82f268c2517f6bbb3a2b

                                                                                                                                              SHA1

                                                                                                                                              74175d55ab6d209b42ba13952fe0cbfe4e6b3b5c

                                                                                                                                              SHA256

                                                                                                                                              823b241ca53b70b08c03df3a823ec38b82453a8062218dd59fa8c7a567d7b4af

                                                                                                                                              SHA512

                                                                                                                                              ed18e5a3a6cf44d8cda8437578ea71f284a7b7c4fca8d5998c72d584ec96556e92f00ac3c6e19a00e14df3cedddb245ac2b47cecd34eaf8951b8e676a9bceed1

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression
                                                                                                                                              Filesize

                                                                                                                                              121KB

                                                                                                                                              MD5

                                                                                                                                              87522cef3116b26111cae5fc6e577636

                                                                                                                                              SHA1

                                                                                                                                              af4d87bc2b93b8d827ed492a9b611c55be3702c5

                                                                                                                                              SHA256

                                                                                                                                              bbfaecdd2f3b849806f9b5e7dfa2fcd11b1417eef063301aa3c2fa068fb8eb2a

                                                                                                                                              SHA512

                                                                                                                                              e91a172c62ea49177f2d1d1a02260bdd029eae307c517bb753e68b8e58cf78aba22c82d239a530b05a9f34675e0c8f1846877634786f2ca4306b6a04f24a46eb

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression.tmp
                                                                                                                                              Filesize

                                                                                                                                              121KB

                                                                                                                                              MD5

                                                                                                                                              87522cef3116b26111cae5fc6e577636

                                                                                                                                              SHA1

                                                                                                                                              af4d87bc2b93b8d827ed492a9b611c55be3702c5

                                                                                                                                              SHA256

                                                                                                                                              bbfaecdd2f3b849806f9b5e7dfa2fcd11b1417eef063301aa3c2fa068fb8eb2a

                                                                                                                                              SHA512

                                                                                                                                              e91a172c62ea49177f2d1d1a02260bdd029eae307c517bb753e68b8e58cf78aba22c82d239a530b05a9f34675e0c8f1846877634786f2ca4306b6a04f24a46eb

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari/mds/mdsDirectory.db
                                                                                                                                              Filesize

                                                                                                                                              47KB

                                                                                                                                              MD5

                                                                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                                                                              SHA1

                                                                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                                                                              SHA256

                                                                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                                                                              SHA512

                                                                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari/mds/mdsDirectory.db
                                                                                                                                              Filesize

                                                                                                                                              47KB

                                                                                                                                              MD5

                                                                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                                                                              SHA1

                                                                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                                                                              SHA256

                                                                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                                                                              SHA512

                                                                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari/mds/mdsDirectory.db_
                                                                                                                                              Filesize

                                                                                                                                              47KB

                                                                                                                                              MD5

                                                                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                                                                              SHA1

                                                                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                                                                              SHA256

                                                                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                                                                              SHA512

                                                                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari/mds/mdsObject.db
                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              MD5

                                                                                                                                              d3a1859e6ec593505cc882e6def48fc8

                                                                                                                                              SHA1

                                                                                                                                              f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                                                                              SHA256

                                                                                                                                              3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                                                                              SHA512

                                                                                                                                              ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari/mds/mdsObject.db_
                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              MD5

                                                                                                                                              d3a1859e6ec593505cc882e6def48fc8

                                                                                                                                              SHA1

                                                                                                                                              f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                                                                              SHA256

                                                                                                                                              3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                                                                              SHA512

                                                                                                                                              ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/2529545429CE075A4E64DE7DAA3D4C27
                                                                                                                                              Filesize

                                                                                                                                              5KB

                                                                                                                                              MD5

                                                                                                                                              f3418a443e7d841097c714d69ec4bcb8

                                                                                                                                              SHA1

                                                                                                                                              49263695f6b0cdd72f45cf1b775e660fdc36c606

                                                                                                                                              SHA256

                                                                                                                                              6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

                                                                                                                                              SHA512

                                                                                                                                              82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/AutoFillQuirks.plist
                                                                                                                                              Filesize

                                                                                                                                              52KB

                                                                                                                                              MD5

                                                                                                                                              66c58114c4d62b5b272454c3a7007747

                                                                                                                                              SHA1

                                                                                                                                              a788e3eba776db4f9d27f50e6c705d2de42c83e0

                                                                                                                                              SHA256

                                                                                                                                              60cc77176e244cb4c21160d65724f08e713893348274a222739234c294bf594b

                                                                                                                                              SHA512

                                                                                                                                              9558dab8733762b379a1da6db745ef3c98bdcc6383b14b7b0667001fbebaee16f678d77cfa8b29665b5a74d12c0788cdea6ab2ba23febc67945e0dcc01454cc5

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/CacheSettings.plist
                                                                                                                                              Filesize

                                                                                                                                              263B

                                                                                                                                              MD5

                                                                                                                                              17795f7fe527bfceafbcd983fc87483e

                                                                                                                                              SHA1

                                                                                                                                              5e9775447f676d819b3a839155da097e2af3adeb

                                                                                                                                              SHA256

                                                                                                                                              0d723ba0052b1cc59008b7c6c07aaf5c147471667fb282759d571b4b12f8ab50

                                                                                                                                              SHA512

                                                                                                                                              b7935050317c52ec645014d861edafd9209b64fc77cf751faf787f5ea5da68843b6cf63608080288646e8274c685fc2429cd6654e68688f775d42cc9ff49ac43

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/CloudHistoryRemoteConfiguration.plist
                                                                                                                                              Filesize

                                                                                                                                              1012B

                                                                                                                                              MD5

                                                                                                                                              0c29425555c7ff0ca114b1fd0dc39c50

                                                                                                                                              SHA1

                                                                                                                                              d7d808e8be92462f4c3ceba66734f0e9bb26acdd

                                                                                                                                              SHA256

                                                                                                                                              52826afeec974bb7bacb85bdc01dc4f23bf917d65e04773d7cad393f7866f3fd

                                                                                                                                              SHA512

                                                                                                                                              d9c8364a85f4b4a96caac1409f32f9d6b2f8ae19201e0abd2d449a3eedadd471e99e44bc92deb5d8fb60287da64a88e61b45f759e7b9a383a9bbe5f5fd242f95

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/KnownExtensions.plist
                                                                                                                                              Filesize

                                                                                                                                              2KB

                                                                                                                                              MD5

                                                                                                                                              99707b6e8b1daa434de2a176a458f85c

                                                                                                                                              SHA1

                                                                                                                                              96324f62483dd7ac8683d1850d694bb900eb3419

                                                                                                                                              SHA256

                                                                                                                                              f282d8a52bfdcd208792a47c074e59a1e16d627d53094e11fc73e595aec7ddad

                                                                                                                                              SHA512

                                                                                                                                              e8018018f91a5ce5c418f5c6445dc11a44b40aa6f619958d496b18507b3fe309415bf9ab293e9c7c0b3e4ba109213d0216d39c0304a7bc3cce301db0a729430c

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/LastSession.plist
                                                                                                                                              Filesize

                                                                                                                                              85B

                                                                                                                                              MD5

                                                                                                                                              030dc7964c8bc308933ba27e5875cadc

                                                                                                                                              SHA1

                                                                                                                                              a7a9f3a1c10e8f7ff5a8a5af6e56713dc2abc2ab

                                                                                                                                              SHA256

                                                                                                                                              c8d209beda6ffb4097775869422437378395cfb4a78e983835cb5a761a690c76

                                                                                                                                              SHA512

                                                                                                                                              c8827eb8337794a078c882aa7d91f0d7f27fc6557fd180f05862bd8a30f4e70d2fde35c868847c7f426da4a6bb324217385fcc7106697da0923b9e6b3c2e9c65

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/Preferences.plist
                                                                                                                                              Filesize

                                                                                                                                              76B

                                                                                                                                              MD5

                                                                                                                                              cdc65b5f112547eafae0f16f9c149426

                                                                                                                                              SHA1

                                                                                                                                              aeaf9908a5b6ff3e2f7b738abf5fe9e79108ba01

                                                                                                                                              SHA256

                                                                                                                                              1c6d085d871a855ce4a3902bab4b9b92631b8ee8f0b7f6536768a2aaf427b45c

                                                                                                                                              SHA512

                                                                                                                                              e8b0e4ce6a760a718a19976d3cfe9063f04fb4bf179947aeca84e94c83f21459fb9dc0ffabea8f633bd2d0ba94fe1e15d8c97e9604fde8bd0dea961eb83bddb7

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/RecentlyClosedTabs.plist
                                                                                                                                              Filesize

                                                                                                                                              7KB

                                                                                                                                              MD5

                                                                                                                                              6675fb2f9f838a6f886b5f2896bd347f

                                                                                                                                              SHA1

                                                                                                                                              5ec660d9cd22251c9395e2bd8ed3f5735664a6b3

                                                                                                                                              SHA256

                                                                                                                                              ca5b2e40f553978dcd51c3c0de8774c94d2d4d07a16f7b1bd5b8156d175316cd

                                                                                                                                              SHA512

                                                                                                                                              e09c01b42743f545d3010d5ac9bc5f2a90b78634d10c3331f4fd529888a644ecb137d8beb753b0f5e317439628d2e8f4584fd172b014fb2598f2db72449c9672

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Safari/TemporaryItems/(A Document Being Saved By Safari)/SitesAllowedToAutoplay.plist
                                                                                                                                              Filesize

                                                                                                                                              2KB

                                                                                                                                              MD5

                                                                                                                                              dacac94d436213a1c4eccc4df982a030

                                                                                                                                              SHA1

                                                                                                                                              b63d06513494cd7c4602574194592fdf09cfc9b9

                                                                                                                                              SHA256

                                                                                                                                              82e602f4854b770bf7bd701d8cd8a4c2bd7cf1a600b8b5a90a0804d4b40c2371

                                                                                                                                              SHA512

                                                                                                                                              ce05f31e918aba5513cd587f7f26d9105cd6d564dc25c172a554a887b209abcda81928c016830995923d71d7190550d18e7d62ae70c5f57a239dd7cc48ce2e87

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/spindump.txt
                                                                                                                                              Filesize

                                                                                                                                              140KB

                                                                                                                                              MD5

                                                                                                                                              935d873c5fbbfcd7a920055e0e45e245

                                                                                                                                              SHA1

                                                                                                                                              6bc805bb04a0f214c39a2b8c9f2d7caceb5ea423

                                                                                                                                              SHA256

                                                                                                                                              fbff7f32878866315c614373043a8d7761538e898030e8f046792f3f4cbbfc46

                                                                                                                                              SHA512

                                                                                                                                              86edf69fd632e96a963fa2fd739ce86183e94e4652e09ecc188a150eb203cf01499f1694c6daf5c34a88127b3bb30098ff87ee0fdf3a913f40bc762d07bada2a

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/spindump.txt
                                                                                                                                              Filesize

                                                                                                                                              132KB

                                                                                                                                              MD5

                                                                                                                                              9fe5850adf7d7882c66a606c5064c69b

                                                                                                                                              SHA1

                                                                                                                                              e537b0ce06edc32d88d274fbceb71c57ccb94634

                                                                                                                                              SHA256

                                                                                                                                              8cc01502c7c867221006e6151383b958b3db44e31199634a8636e24bf64d53c1

                                                                                                                                              SHA512

                                                                                                                                              0c8844e09ce2ba640d8f7f9c620661b09303fcc4b07c8acaa39f1ccdf09b5b2b4baf3e630cbcb46db61c61f785fb3c8a60f1df25df7b7db22ae5e25f94ebafd7

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/run/utmpx
                                                                                                                                              Filesize

                                                                                                                                              3KB

                                                                                                                                              MD5

                                                                                                                                              7a9c446cec3bfde7593f2a0c345a5663

                                                                                                                                              SHA1

                                                                                                                                              c21f065bd33ea95782d7b4f56ed1d01ac4646dd9

                                                                                                                                              SHA256

                                                                                                                                              7a04ac2e743822cf3b4f2a20393f405116699f25c554c9367251b87b15d9146d

                                                                                                                                              SHA512

                                                                                                                                              f16296fe93f141c748be012d474155e0503467dda7a3eb4aa009f1b8904407656a84386830cecf16c43a8840949b9ede07cc45a459e3d6787018ee32957330e5

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/run/utmpx
                                                                                                                                              Filesize

                                                                                                                                              3KB

                                                                                                                                              MD5

                                                                                                                                              7a9c446cec3bfde7593f2a0c345a5663

                                                                                                                                              SHA1

                                                                                                                                              c21f065bd33ea95782d7b4f56ed1d01ac4646dd9

                                                                                                                                              SHA256

                                                                                                                                              7a04ac2e743822cf3b4f2a20393f405116699f25c554c9367251b87b15d9146d

                                                                                                                                              SHA512

                                                                                                                                              f16296fe93f141c748be012d474155e0503467dda7a3eb4aa009f1b8904407656a84386830cecf16c43a8840949b9ede07cc45a459e3d6787018ee32957330e5

                                                                                                                                              Download Submit

                                                                                                                                            • /private/var/run/utmpx
                                                                                                                                              Filesize

                                                                                                                                              3KB

                                                                                                                                              MD5

                                                                                                                                              ba8d7cbfd2320b00c3b56dc7a75f8829

                                                                                                                                              SHA1

                                                                                                                                              a6777a294c0fbd88394b83aa5ae06c0d2716b5a3

                                                                                                                                              SHA256

                                                                                                                                              f5cd7df2b7c42fd56ff995f8a28408109d0f1411b97c0177dc8f2f0813fdb1e3

                                                                                                                                              SHA512

                                                                                                                                              31c5ac94bcb4f0655e4542545a7d5e8dbb68f0c9577421761ca4dc4698e25d4b8e43a283d6cccafd023daf7870b9dda5033da2d115bb4566a0371e44fc6b2a9e

                                                                                                                                              Download Submit