3811b460bc6f189b318f12eadd9abf3d49f29286c11da1455cf6cb8562482136

Resubmissions

26/08/2023, 19:07

230826-xsvehaed9v 7

26/08/2023, 19:07

26/08/2023, 19:02

26/08/2023, 19:01

26/08/2023, 18:59

26/08/2023, 18:55

Analysis

max time kernel
746s
max time network
748s
platform
macos_amd64
resource
macos-20220504-en
resource tags

arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
26/08/2023, 19:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

AtlasMenu/Free cheats.url
Size

120B
MD5

81c49e4638adecf46e10f77eaf90c7c1
SHA1

bbc8c41fd77bd16c816b43c2ba1de95c5b8e9155
SHA256

643a6857b68120eb2e6b87a5d553d989a2fa0007e950db088c8314d27ca5a16b
SHA512

e63de428f4113303e6ae8e501527626375e6a5ab4273ac5943fe0eab9e57b6361f791e99ab32d73a4ef4e0477a7b667fca51f4b371059f9cc25839aa67b874fd

Score

1^/10

Malware Config

Signatures

/usr/sbin/spctl
/usr/sbin/spctl --status
1⤵
PID:493

/usr/sbin/spctl
/usr/sbin/spctl --test-devid-status
1⤵
PID:494

/usr/bin/syslog
/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
1⤵
PID:495

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/AtlasMenu/Free cheats.url\""
1⤵
PID:497

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/AtlasMenu/Free cheats.url\""
1⤵
PID:497

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/AtlasMenu/Free cheats.url\""
1⤵
PID:497

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/AtlasMenu/Free cheats.url"
1⤵
PID:497

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/AtlasMenu/Free cheats.url"
1⤵
PID:497
- /bin/zsh
  /bin/zsh -c "/Users/run/AtlasMenu/Free cheats.url"
  2⤵
  PID:502
- /bin/zsh
  /bin/zsh -c "/Users/run/AtlasMenu/Free cheats.url"
  2⤵
  PID:502
- /Users/run/AtlasMenu/Free
  /Users/run/AtlasMenu/Free cheats.url
  2⤵
  PID:502
- /Users/run/AtlasMenu/Free
  /Users/run/AtlasMenu/Free cheats.url
  2⤵
  PID:502

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.1864
1⤵
PID:521

/System/Applications/Maps.app/Contents/MacOS/Maps
/System/Applications/Maps.app/Contents/MacOS/Maps
1⤵
PID:521

/usr/libexec/xpcproxy
xpcproxy com.apple.WeatherService
1⤵
PID:522

/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
1⤵
PID:522

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.searchpartyuseragent
1⤵
PID:524

/usr/libexec/searchpartyuseragent
/usr/libexec/searchpartyuseragent
1⤵
PID:524

/usr/libexec/xpcproxy
xpcproxy com.apple.systempreferences.2140
1⤵
PID:531

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences
"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
1⤵
PID:531

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountProfileRemoteViewService 531
1⤵
PID:532

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
1⤵
PID:532

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
1⤵
PID:534

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
1⤵
PID:535

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
1⤵
PID:536

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
1⤵
PID:537

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
1⤵
PID:538

/usr/libexec/xpcproxy
xpcproxy com.apple.studentd
1⤵
PID:539

/usr/libexec/studentd
/usr/libexec/studentd
1⤵
PID:539

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:541

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:541

/usr/libexec/xpcproxy
xpcproxy com.apple.colorsync.useragent
1⤵
PID:549

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
1⤵
PID:549

/usr/libexec/xpcproxy
xpcproxy com.apple.systempreferences.2140
1⤵
PID:551

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences
"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
1⤵
PID:551

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountProfileRemoteViewService 551
1⤵
PID:552

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
1⤵
PID:552

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
1⤵
PID:553

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
1⤵
PID:554

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
1⤵
PID:555

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
1⤵
PID:556

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
1⤵
PID:557

/usr/libexec/xpcproxy
xpcproxy com.apple.preference.sidecar.remoteservice 551
1⤵
PID:561

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/XPCServices/com.apple.preference.sidecar.remoteservice.xpc/Contents/MacOS/com.apple.preference.sidecar.remoteservice
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/XPCServices/com.apple.preference.sidecar.remoteservice.xpc/Contents/MacOS/com.apple.preference.sidecar.remoteservice
1⤵
PID:561

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:564

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:564

/usr/libexec/xpcproxy
xpcproxy com.apple.JarLauncher.2128
1⤵
PID:565

/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher
"/System/Library/CoreServices/Jar Launcher.app/Contents/MacOS/Jar Launcher"
1⤵
PID:565
- /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
  "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/tmp/hello.jar
  2⤵
  PID:566
- /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
  "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java" -jar /Users/run/tmp/hello.jar
  2⤵
  PID:566

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.ui.helper
1⤵
PID:568

/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper
1⤵
PID:568

/usr/libexec/xpcproxy
xpcproxy "com.apple.xpc.launchd.oneshot.0x10000002.Microsoft Word"
1⤵
PID:569

/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word
"/Applications/Microsoft Word.app/Contents/MacOS/Microsoft Word" -psn_0_213044
1⤵
PID:569

/usr/libexec/xpcproxy
xpcproxy com.apple.XprotectFramework.AnalysisService 528
1⤵
PID:572

/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.storeuid
1⤵
PID:575

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
1⤵
PID:575

/usr/libexec/xpcproxy
xpcproxy com.apple.storedownloadd
1⤵
PID:576

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.microsoft.autoupdate.fba.2660
1⤵
PID:577

/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant
"/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant"
1⤵
PID:577

/bin/launchctl
/bin/launchctl list
1⤵
PID:578

/usr/libexec/xpcproxy
xpcproxy com.microsoft.autoupdate.helper
1⤵
PID:579

/Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
/Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
1⤵
PID:579

/bin/launchctl
/bin/launchctl load /Library/LaunchAgents/com.microsoft.update.agent.plist
1⤵
PID:580

/usr/bin/codesign
/usr/bin/codesign -v /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
1⤵
PID:581

/usr/libexec/xpcproxy
xpcproxy com.apple.Automator.2596
1⤵
PID:587

/System/Applications/Automator.app/Contents/MacOS/Automator
/System/Applications/Automator.app/Contents/MacOS/Automator
1⤵
PID:587

/usr/libexec/xpcproxy
xpcproxy com.apple.bootcampassistant.1848
1⤵
PID:600

/System/Applications/Utilities/Boot Camp Assistant.app/Contents/MacOS/Boot Camp Assistant
"/System/Applications/Utilities/Boot Camp Assistant.app/Contents/MacOS/Boot Camp Assistant"
1⤵
PID:600

/usr/libexec/xpcproxy
xpcproxy com.apple.bootcampassistant.ExFATChecksum 600
1⤵
PID:604

/usr/libexec/xpcproxy
xpcproxy com.apple.xpc.roleaccountd
1⤵
PID:605

/usr/libexec/xpcroleaccountd
/usr/libexec/xpcroleaccountd -launchd
1⤵
PID:605

/private/var/db/com.apple.xpc.roleaccountd.staging/com.apple.bootcampassistant.ExFATChecksum.16777223.1152921500312351016.xpc/Contents/MacOS/ExFATChecksum
/private/var/db/com.apple.xpc.roleaccountd.staging/com.apple.bootcampassistant.ExFATChecksum.16777223.1152921500312351016.xpc/Contents/MacOS/ExFATChecksum
1⤵
PID:604

/usr/libexec/xpcproxy
xpcproxy com.apple.replayd
1⤵
PID:608

/usr/libexec/xpcproxy
xpcproxy com.apple.installd
1⤵
PID:609

/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
1⤵
PID:609

/usr/libexec/replayd
/usr/libexec/replayd
1⤵
PID:608

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:612

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:612

/usr/libexec/xpcproxy
xpcproxy com.apple.system_installd
1⤵
PID:613

/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
1⤵
PID:613

/usr/libexec/xpcproxy
xpcproxy com.apple.Safari.CacheDeleteExtension 606
1⤵
PID:614

/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
1⤵
PID:614

/usr/libexec/xpcproxy
xpcproxy com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:637

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:637

/usr/libexec/xpcproxy
xpcproxy com.apple.loginwindow.CB51E2F0-270F-481F-8283-5891A4053BB9
1⤵
PID:640

/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
1⤵
PID:640

/usr/libexec/xpcproxy
xpcproxy com.apple.imklaunchagent
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.UserEventAgent-LoginWindow
1⤵
PID:642

/usr/libexec/xpcproxy
xpcproxy com.apple.universalaccessd
1⤵
PID:643

/usr/sbin/universalaccessd
/usr/sbin/universalaccessd launchd -s
1⤵
PID:643

/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.pluginkit.pkd
1⤵
PID:644

/usr/libexec/pkd
/usr/libexec/pkd
1⤵
PID:644

/usr/libexec/xpcproxy
xpcproxy com.apple.ViewBridgeAuxiliary
1⤵
PID:646

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
1⤵
PID:646

/usr/libexec/xpcproxy
xpcproxy com.apple.security.agent.login.00000000-0000-0000-0000-0000000186C3
1⤵
PID:647

/usr/libexec/UserEventAgent
/usr/libexec/UserEventAgent "(LoginWindow)"
1⤵
PID:642

/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
1⤵
PID:647

/usr/libexec/xpcproxy
xpcproxy com.apple.coremedia.videodecoder 647
1⤵
PID:651

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
1⤵
PID:651

/usr/libexec/xpcproxy
xpcproxy com.apple.CryptoTokenKit.ahp.agent
1⤵
PID:652

/usr/libexec/xpcproxy
xpcproxy com.apple.xpc.launchd.oneshot.0x10000003.activateSettings
1⤵
PID:653

/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
1⤵
PID:652

/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings
/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings
1⤵
PID:653

/usr/libexec/xpcproxy
xpcproxy com.apple.AmbientDisplayAgent
1⤵
PID:654

/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
1⤵
PID:654

/usr/libexec/xpcproxy
xpcproxy com.apple.ctkd
1⤵
PID:656

/System/Library/Frameworks/CryptoTokenKit.framework/ctkd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
1⤵
PID:656

/usr/libexec/xpcproxy
xpcproxy com.apple.CryptoTokenKit.setoken 656
1⤵
PID:658

/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken
/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken
1⤵
PID:658

/usr/libexec/xpcproxy
xpcproxy com.apple.security.authhost.00000000-0000-0000-0000-0000000186C3
1⤵
PID:659

/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
1⤵
PID:659

/usr/libexec/xpcproxy
xpcproxy com.apple.Kerberos.kcm
1⤵
PID:660

/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm
/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm --launchd
1⤵
PID:660

/usr/libexec/xpcproxy
xpcproxy com.apple.GSSCred
1⤵
PID:661

/System/Library/Frameworks/GSS.framework/Helpers/GSSCred
/System/Library/Frameworks/GSS.framework/Helpers/GSSCred
1⤵
PID:661

/usr/libexec/xpcproxy
xpcproxy com.apple.iconservices.iconservicesagent
1⤵
PID:662

/System/Library/CoreServices/iconservicesagent
/System/Library/CoreServices/iconservicesagent runAsRoot
1⤵
PID:662

/usr/libexec/xpcproxy
xpcproxy com.apple.mobile.keybagd
1⤵
PID:664

/usr/libexec/keybagd
/usr/libexec/keybagd -t 15
1⤵
PID:664

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:665

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:665

/usr/libexec/xpcproxy
xpcproxy com.apple.ViewBridgeAuxiliary
1⤵
PID:666

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
1⤵
PID:666

/usr/libexec/xpcproxy
xpcproxy com.apple.mobileassetd
1⤵
PID:667

/usr/libexec/mobileassetd
/usr/libexec/mobileassetd
1⤵
PID:667

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:668

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:668

/usr/libexec/xpcproxy
xpcproxy com.apple.akd
1⤵
PID:670

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
1⤵
PID:670

/usr/libexec/xpcproxy
xpcproxy com.apple.storagekitd
1⤵
PID:671

/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
1⤵
PID:671

/usr/libexec/xpcproxy
xpcproxy com.apple.coreduetd
1⤵
PID:694

/usr/libexec/coreduetd
/usr/libexec/coreduetd
1⤵
PID:694

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:696

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:696

/usr/libexec/xpcproxy
xpcproxy com.apple.tccd
1⤵
PID:698

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
1⤵
PID:698

/usr/libexec/xpcproxy
xpcproxy com.apple.sandboxd
1⤵
PID:699

/usr/libexec/sandboxd
/usr/libexec/sandboxd
1⤵
PID:699

/usr/libexec/xpcproxy
xpcproxy com.apple.bird
1⤵
PID:700

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
1⤵
PID:700

/usr/libexec/xpcproxy
xpcproxy com.apple.ScreenTimeAgent
1⤵
PID:717

/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent
/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent
1⤵
PID:717

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Application Support/com.apple.icloud.searchpartyd/.dat.nosync020c.9AJhHX

Filesize
2KB

MD5
d8858841b3415b0e7ce869c9ff94cc6c

SHA1
2d384b197673e24d84270c4b1f5b998a2f5cc671

SHA256
bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c

SHA512
5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

Download Submit
/Library/Application Support/com.apple.icloud.searchpartyd/.dat.nosync020c.TMzA7R

Filesize
2KB

MD5
d8858841b3415b0e7ce869c9ff94cc6c

SHA1
2d384b197673e24d84270c4b1f5b998a2f5cc671

SHA256
bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c

SHA512
5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

Download Submit
/Library/Application Support/com.apple.icloud.searchpartyd/savedConfiguration.plist

Filesize
2KB

MD5
d8858841b3415b0e7ce869c9ff94cc6c

SHA1
2d384b197673e24d84270c4b1f5b998a2f5cc671

SHA256
bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c

SHA512
5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

Download Submit
/Library/Application Support/com.apple.icloud.searchpartyd/savedConfiguration.plist

Filesize
2KB

MD5
d8858841b3415b0e7ce869c9ff94cc6c

SHA1
2d384b197673e24d84270c4b1f5b998a2f5cc671

SHA256
bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c

SHA512
5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

Download Submit
/Library/Logs/Microsoft/autoupdate.log

Filesize
188KB

MD5
20cacd54e90650b1ba938fec44bfd584

SHA1
7397fc74b28124f0b78682f54f6ac97c4482440c

SHA256
3c57c2a260dce99ae10f029552d6b05dfc172ed7b35a7935603447d0319d4fba

SHA512
d489bdb5e7418b58feb470dc768c84130bac48c0fd1b25261ddad3851d73ed4a60a96c09d7d78ae466bffa9eeba7b097d1877500ce9be5ccaae41d5eda4b1605

Download Submit
/Users/run/.oracle_jre_usage/613bcfb3a06ef613.timestamp

Filesize
79B

MD5
95e4aa1cd08fd7b6850120ab220e8b66

SHA1
d80d050819051407970528454a0408416ece6cdd

SHA256
93d197465c6089540e04ab0a25195408a7698e996dbc10ace5dff6c9f05a85db

SHA512
02baaf7fb8a29cd0173911ab991aa4f1477afc7ca7b85734a84549e58b7c65e7901f69e02bd9b100669fe1525c72cfeb5b742f6f1d5a282f4c90d5adbb9651b1

Download Submit
/Users/run/Library/Caches/.dat.nosync0213.0qQIa0

Filesize
288KB

MD5
ce9032fc27dc24f38c40c4116b2aec09

SHA1
617bf0e6e5838af3740393cedbf38307b7248371

SHA256
7bff5dd79349e4e42419a9f1720119cc19767df0ec1bedd6fada6a28a8be3749

SHA512
a1883e330fd3483da59388e16da1f392af2174170700093f213a1b218f3d04ae9b1d3f6d3bc9ebeb69324440de414f7a92b92739e98e5880f3b7b078b9676af1

Download Submit
/Users/run/Library/Caches/.dat.nosync0227.2caDem

Filesize
294KB

MD5
54a6415f0ccd912e6ef418df31566b14

SHA1
4b00b5adc45cf789c2d3464c184c1f782a73b2dd

SHA256
5703d526d31fb16982bafaab18e698b2bc9c10f5bdb690ad216ea0e09db16633

SHA512
0672d0c9a787f76fedb254202c669cb0553a9f7f99ba9b2e2511005d883a308db5850822fefc4b4dde4e24b0337aae5b215a34c9bb1fa7a0934199fce86613af

Download Submit
/Users/run/Library/Caches/.dat.nosync024b.B4Qn4f

Filesize
257KB

MD5
1c22fd5a553efb25e04975cad7ceda7c

SHA1
eb06b8794dc290a34804b2c0a12b2111bd35222e

SHA256
fb23dcd677f591a782442ce042f6f35b2fdc2e064336a406b3eab68331bc10c8

SHA512
bb41ef49ec7bca539ece0b83f6f180df1aa85424fc3c4fe40fca303e3b359e8baa5810efe583da257de2b8b0d8937b1e1b755073757fbe365f8f4e142a1ff57b

Download Submit
/Users/run/Library/Caches/.dat.nosync024b.ETkqHu

Filesize
18KB

MD5
0f41f404c13aadd7282cba33ab1c4dc6

SHA1
7f9c61cafb3d04cdf0b87aeb9e149c7111ff9168

SHA256
043f54bb7ca29988befd3b3e5f55b46035ab3b38fe0ab84cc13de25977ff8118

SHA512
27a4f35ee13abacd8190e22390dd86843b9dbe15ba14b6dca813ac5df78919fde3957efedb15d4e95e0fa0f02b0724083b2279e3808754d87d48cef09c675280

Download Submit
/Users/run/Library/Caches/com.apple.systempreferences.imageCache

Filesize
288KB

MD5
ce9032fc27dc24f38c40c4116b2aec09

SHA1
617bf0e6e5838af3740393cedbf38307b7248371

SHA256
7bff5dd79349e4e42419a9f1720119cc19767df0ec1bedd6fada6a28a8be3749

SHA512
a1883e330fd3483da59388e16da1f392af2174170700093f213a1b218f3d04ae9b1d3f6d3bc9ebeb69324440de414f7a92b92739e98e5880f3b7b078b9676af1

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/ADLaM Display👪1.png.sb-d286efd8-mK6uHY

Filesize
1KB

MD5
e2d040a78fe5104e357f41dce7ea15fb

SHA1
837db81a4a924952d180341150c6bf4e89d7ada7

SHA256
4bd7b8cbd689b69208dd9f07b6fe3fa1a108344df6048a42d4be4393e9f58a12

SHA512
2038614ba6ebc01f18f778f88d769b70ac097a9744c1c3fe20faaf329e01f3da174ce5f1ddc1a272b5112c85594136783898b68a4a15c296f18ebe33d27aeb5d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Aptos Display👪1.png.sb-d286efd8-eoMKDx

Filesize
1KB

MD5
dca4bea09aeb6ca21579363b5c3813ac

SHA1
ceccb92fc6bb1a1dadb191b7a356ae798c2266d4

SHA256
18948158f483ed495a83721ed7b1f7c3191e70c758315b8b3d3b0ed57af436dc

SHA512
0a1c130f8eb10a3a415da69617c4b48a348f50082c881c45a684fe5f85548dd1665b7cd5ae102e05c78627bba9b0a423a0d8ad254d33dc7214695ce4ffc145cc

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Aptos Mono👪1.png.sb-d286efd8-Sn2krl

Filesize
1KB

MD5
24ad24f7f4f032d12038e04704ae6ba0

SHA1
0a0ad2eda88d58fe21fd4407fa942435bb6b454e

SHA256
e7b6064c46885e63df16c985d33ab7857d0942d1e141dd539128cdbf481a0134

SHA512
ac251a48b2aadab15fad0a6b5403f7d51dd444af596db6bb57aabd22eb020bd88a4a9030a9d3e465b3b738674226890db9895b9e864f8f8261aa97fd74088789

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Aptos Narrow👪1.png.sb-d286efd8-3qlj7k

Filesize
1KB

MD5
c171d207e293af6a36dd9e67b2b460a7

SHA1
6e10fa239e411f0d5615539dc492e35f7a8e225d

SHA256
d44e1deab600dca86a3a6fa860e06435e6da19ac6c0fe66610d839c05bc60355

SHA512
dd39434eee21a8afee2dbc4489aaed1a22ff3a4cce8edb92c5b2aa63263944a250a6dc408188d167afb60888754a1a71a6b624d1247bc62e55dbb56b13fd37f9

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Aptos Serif👪1.png.sb-d286efd8-VGjpmf

Filesize
1KB

MD5
e6677bbe1a94dd02c75c137649e8d98f

SHA1
a630a9e76b6ca209bfecd63b8d0701741b9cb63d

SHA256
b6402b6e4a3fddd4e1141b12124ba7d877d4d763cf1b9d429e9791029c7b1624

SHA512
40d7da6cd8a60db635fdfa24535fe160f586a2300e89680dee2df3c3cbfa9bff29f0ba1ef182b881fceee06adf96597ea907afb16b30fdebd67f721a22aee234

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Aptos👪1.png.sb-d286efd8-nVHnua

Filesize
920B

MD5
7ab18d100148bb75c508bfa8fa183b6c

SHA1
7c3286827b096400c74b6bf0c6b6f67491af2c0c

SHA256
31f8ff4ddc3272252ee878da941c235454e8f57cf449c713c93892a6c02cb606

SHA512
c342ca032d6a22a84e3f9113b288b8654afc583a073cb0a452cbf35fbbefc58c2463b6c979abd58eb11199c7f13be3d1912d9c0b6b78672d9720a8de0e0bf9af

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Baguet Script👪1.png.sb-d286efd8-MMSV8t

Filesize
1KB

MD5
ded7346112388a4445aa627ff38f7de4

SHA1
acbe0d544c6a17773b7042c28ab2052454547880

SHA256
f44895d6871a6b8aff24fcf2a864b4c7a95a41526141150bb70766f01bbc2102

SHA512
200ccb4e748285daad9cf5fe95c5fb083d2e0fc40d0fad795984591515fd577f190be26c5d1b009ee4aa6e44cc12e5118ed4aa055592e8cb0fbf7432b9988f8b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Chamberi Super Display👪1.png.sb-d286efd8-QCrGKD

Filesize
2KB

MD5
ec3027af8f4bd500d893fac92c233feb

SHA1
c6a55b7fea923586b2dc6e7975904c576b45178b

SHA256
795b6bc7669cd328a169887d7d6599729af8089190de4dd89e3475284d77f077

SHA512
9fc378ea8b166ed0051fd832b044a1f347782420725a12425365829e480e73fcc9365cb92c52e6d9f8dd8f449eb04a561a912269b7832ad2b71c7f089062b6d1

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Cochocib Script Latin Pro👪1.png.sb-d286efd8-TYb5Qt

Filesize
1KB

MD5
bd92b48d1f261aa3995f7b26e1286c3d

SHA1
d35593d48dac895207e9662516ff932892565627

SHA256
83ee08d436bdde1ef0dc7d3a57fd1c20973a69dffef52ce99776a0d3d701a8a3

SHA512
a5de61e68ea8b10bc6dd472d8e637eef55f8edef6e8d70eebf4e6a25f54377243dadc8c02dba3725369f30c6cdb4913342e97100cd3170d4c5782fcbe5ab0e5b

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Congenial👪1.png.sb-d286efd8-F0R7lp

Filesize
1KB

MD5
eace595887bd133089a235ff162030f0

SHA1
c8d49074869a679bcbf26124febf2c67010a8081

SHA256
edec8572082de6e240e62e6db868615b64e177179248410fe39a97be3b8e7f46

SHA512
f5c8d76c68eb3c1e2fffb25946cdbe14502b8a7b9dc94777dd9ca3830eb6f0c2501de1843eb3a569c690bbd48ea17043054a10ad51518bda736a71622f7ac47a

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Dreaming Outloud Pro👪1.png.sb-d286efd8-BhZX84

Filesize
2KB

MD5
39ea8d661931195bcd86e3f7d1a86990

SHA1
e99c34ce671e831f81445bac5f065b1182239e93

SHA256
c48249d3b16cb5327ec3d0b44cf5cb5b1fa327031e2462b4abaf3933a9a811b4

SHA512
fe0f0c4c0ef93fcce87bbde3feb50601bc77f8b0b4f4a89093b0babb2a64ac4a678422da3a00007164baace65b64bd768f5bfbdb3e652806ce271a648e2c8729

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Dreaming Outloud Script Pro👪1.png.sb-d286efd8-pma2v5

Filesize
3KB

MD5
d492b0fc6bc3471fe883464559ede470

SHA1
3ef6a89b422b48808a27a50d49be6648adab1c5c

SHA256
c304f89172a44167b056508614c79d2a0b670e129db688f802bf0b9d4a4e164d

SHA512
43440c515d2adeef9122c7d05c964b3ab9e7c64e050eca47b17e89414319a9811d2c19422c63a8bd4ce331b2e00b2ffcfe11201657329ea8c03a94d7a1ad49e1

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Fairwater Script👪1.png.sb-d286efd8-W7CPEJ

Filesize
1KB

MD5
6fd60f923344e9cf06cda395e6696779

SHA1
2c099969adf4a7ed2a5f167af35f507c8a17bd8f

SHA256
f94fabbdeccee04211cf382c482740c12aefa4feeeb9970722139b4275b7a7e2

SHA512
0c58d25bdc09417ce92f3867d5f76bb87600e34e58613471ac1cedc80e9625f35c82560df7afb4fb93355c05b398f744193139e108642a46831818498b2c8707

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Fave Script Pro👪1.png.sb-d286efd8-X3OALs

Filesize
1KB

MD5
98a874a6ed8a379a273868762c4ad902

SHA1
ccf0abb549caafe169aa3494f424c929b6228c64

SHA256
836ed09c40bb930fc411b8ca6992f8c60b1cc450594708ad2c80b0a5723187a2

SHA512
1706509c61de5fd45a5ac8c86ca98fc17a62d9f19bab3d0f1b00a01950d8a57ff37a5006fbd4ad51bbd2b0fa610542886f2d467a4e9c1afa4ff6f74628f64088

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Forte Forward👪1.png.sb-d286efd8-w04Gdu

Filesize
1KB

MD5
b8b9c117e68b42e57ebab66f90decb9f

SHA1
7d4c0b032796f3bd31b69cb634fe952feeb04415

SHA256
3ad496daa54c97bc0697197d3f3d449411e3b7e78fadc8c8fab863a5a4b1f157

SHA512
354b0c66c8dd3a29c46fcfa40992cf33745c5df2c19826725b999bcca9ec8ca6bc6f997f6d66379ea55585519a32356473261e40e45d7170a8ebf46c4276f59f

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Jumble👪1.png.sb-d286efd8-sPADcB

Filesize
1KB

MD5
85834f1f5289ff8a61c6b820605b140f

SHA1
0f69f233d3b7ae23b670ae541d73fe93f290d225

SHA256
c906a2142efa8036f5ea4373589f8248c04524cb932f7fefa216f08ed842127a

SHA512
cf475ef2713f08760524affecbca955e5ec2a45616207c5cfff5708494020486e4deda3895297784fab86f0d48b6f84742547a998103fc8a0c5291a9d2567ff7

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Mystical Woods Rough Script👪1.png.sb-d286efd8-gKSnaw

Filesize
3KB

MD5
b12482c3a50a1f79205b14a4a6455523

SHA1
206f0cdc7345c4a6e0f78c148210fe8dcb98ab1c

SHA256
297f5df7a91c67a0f2f1956ddf0a16419b73e3265400389f49f8691d65664370

SHA512
59af2f811453b2eb61edbce55ac4ec92625298da1b8296dc66bcf9591516142e3ec98c7888c399bccbcf69ba0cc66f86fb170e453dd04e8506a4678de7d20aeb

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Mystical Woods Smooth Script👪1.png.sb-d286efd8-LPrWYb

Filesize
3KB

MD5
d0e6c3661d99827589a55f6b4ea87a64

SHA1
16693d77a993f5957511376b9c0db38676deca5c

SHA256
e6f48ce54ba28604ca90941047ea6af453d4552bc351f10b5c4b9ff472447fbf

SHA512
073591027e89d1c7efcfe500376d92626fd7dd1e7c65281eacdad7a0d8f30c42ace0809b52741b575fb8c2ec2a0496ad29728ac38300cdff53d020783112d10c

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Nirmala Text👪1.png.sb-d286efd8-ByKasb

Filesize
1KB

MD5
eb41a0e7ee5bbe85bfa882abe96aeb98

SHA1
b539b57152127bf0ee3825f0bbb5dbfbf42744df

SHA256
a173bef53ba073b427f66e6f21b632aedf4a04b00ebcb144008f9294150eed36

SHA512
2120be484b39a811be04a3262195028e31ea0df3716f7386a3336ba33b6ab5dd8ae25adcf540e28a61d5fb499ff8e746f660f4f292624d8ded9208d376843b59

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Nordique Inline👪1.png.sb-d286efd8-NAyChD

Filesize
1KB

MD5
2daea9a93eb77ba98c211fb71b6d6996

SHA1
888a177d0a7875792b68dff9904f8787f51ad16d

SHA256
d876578c6363af6d6ee084141a0ef11f94e23a15c905de2ea874a059f5991509

SHA512
c813494a6d924114459a4dae47497b51ef7afecb88656baba4ffe546ab1415372aed8da204b802e7c69c5d4d6f3e414c40543822337adab6299b06084c29661c

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Rastanty Cortez👪1.png.sb-d286efd8-adtEnH

Filesize
2KB

MD5
b8d947c29159494a4420dc7ece498505

SHA1
ccd530520cb1dd673aba6ad55d2f122c6d121ab6

SHA256
e0e204c7edbd2cd1209a40925bd723d90caf053feb79483dbf6ca58eb2f6aaf5

SHA512
50ab54e4c0bf07d22956dbb18f2ff705d58daf6f14d1e940432960d222eedae246e7d1e096dd7a466434f1e0b8d40d46fe5d3dd3524168ec879f22328fb1524a

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Sagona Book👪1.png.sb-d286efd8-MFNv9m

Filesize
1KB

MD5
6c1ea4f02756b8bbe7a0a9a8b52b3d65

SHA1
f4e4fdf57f2cfc811fd4c1dd9bf01a2c2e1b656f

SHA256
68ab96d6502fec3784c138b812e61935a5d96dc6f4a87cf892ae0075815959c3

SHA512
9d36a1a97ed99d1d204fea760b55a1e19ff6dc0d43d90f9cc0ccf4b18c0342f2badcc93e0d6ffb1b6bccedbc6c3c6f70c565c29bb3b9e3c0d5a0728c33523ed2

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Trade Gothic Inline👪1.png.sb-d286efd8-M6OQVD

Filesize
2KB

MD5
cadb0c753df8c6b0ac64435188ce588a

SHA1
b19245686745eb5ac82c7fcc2b14a1da8a51b9e5

SHA256
30d1acc396b828f37b796d88e5a3bf5b1e6a2ec5a2f93ea2eee7a1db83a10631

SHA512
42ec75d5f94644dcaf00ed9269b19a1f45f0b99295622fda1cc4e8d461891549dfd40b3cfd135ae2e099d9b9a838c16c9bf180fcd42f242c4034d946c896dc18

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/FontPreviewCache/en-GB/Trade Gothic Next Rounded👪1.png.sb-d286efd8-bArh3B

Filesize
2KB

MD5
f7a9cde06a8209a3cb1e78ad35c5b9a0

SHA1
58d33c42b0ec3fdae82c08beeb5a615da7961d99

SHA256
f49a900e5708011e288e2fd850fbac9f6a6ab441ce0c9d5b73d6bd71f199e63f

SHA512
8e091a42d65342857677ca51926fe0f94d6b29b3f4a1a2bec72809e5686d6f4f305dea4e862bdfb3e7d027d95a984e51c69732eda3803243ccc53aa42b6a129d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/SurveyEventActivityStats.json

Filesize
14B

MD5
6ca4960355e4951c72aa5f6364e459d5

SHA1
2fd90b4ec32804dff7a41b6e63c8b0a40b592113

SHA256
88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3

SHA512
8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/SurveyHistoryStats.json

Filesize
14B

MD5
6ca4960355e4951c72aa5f6364e459d5

SHA1
2fd90b4ec32804dff7a41b6e63c8b0a40b592113

SHA256
88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3

SHA512
8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.CampaignStates.json

Filesize
1KB

MD5
da7b321936a4650a446dc9236c1894ce

SHA1
4950cd50437470597303a7451ae4e8b1d98af034

SHA256
5d468a964d6ad8e3ce0e0078b7955977545c2083cdb1c8929b1bf1c40f074c1c

SHA512
e27efae91b4622e0c4838daf0752ba20cf1f21e88dbd2251adf20dc0df4859876a3d29be0a5adae8b7f5bbcbc02b9ea0f583d786a6d6b7902a55cb66fa8cb3bf

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.GovernedChannelStates.json

Filesize
657B

MD5
c279b05d34a20aa07bc0234458ccc37e

SHA1
e1fff46ec071384722a5da755e8202753d4f1ac7

SHA256
8863afe2073648c74d5446de3e95ad4c6bb239366fda0ff15a252d09997b6fc0

SHA512
ce456abffa8178b4d4c3eae9c61b369a18a9d60df9dec05a9fe3b98df083405f68b4262d8043663037ae396b95260c6c703b01c5bdd768189131ddbb4d64f6f0

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/Word.Settings.json

Filesize
87B

MD5
e4e83f8123e9740b8aa3c3dfa77c1c04

SHA1
5281eae96efde7b0e16a1d977f005f0d3bd7aad0

SHA256
6034f27b0823b2a6a76fe296e851939fd05324d0af9d55f249c79af118b0eb31

SHA512
bd6b33fd2bbce4a46991bc0d877695d16f7e60b1959a0defc79b627e569e5c6cac7b4ad4e3e1d8389a08584602a51cf84d44cf247f03beb95f7d307fbba12bb9

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/Personalization/Governance/Anonymous/floodgatecampaigns.json.tmp

Filesize
2KB

MD5
27649843bab3fcee50a0c71e2db42bb0

SHA1
2fd5cef53d0c97ac6cf9e6479aa6b5ed0abe9148

SHA256
dadf51668c648ee08eff078cd05c4d0f20783c549127c33ef917e0dde8635f6e

SHA512
f4ff7073adf76a6d33aa5bd8b398f12fcc51e7eee969df518f1d7915b8767c1a9d9b0dd42128a798b6c89402c7c5bef9c08e8e99cf732763ac39dd7d3f147eba

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.com/5179C181-94DE-144E-8F84-225E8156D5B9

Filesize
155KB

MD5
be1003333f190ea3333da09fb4d9cb11

SHA1
6bfcc3db49f1d5069c9182cddd6978cdf886631e

SHA256
75d3f4f42a5447681b8dd893d67fed325668283172aa08cb0662357361b2c1d9

SHA512
cf37b9ddccd2a09beaef8d4b7a159196125ed25f5ff014a5a0ec6f5247b475bb4e5e80e272990485b9bb439c29ebbaad2c7e60cde1e8932fc4f9ec313088a387

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/microsoft word_Rules.xml

Filesize
271KB

MD5
6a5c9b591423e37698cf6881f8e0529b

SHA1
dfd4a520459a79ca51116c3ef38ce6777bd03544

SHA256
4be9f028a3ac1f91da133d4b8f20bb4eeaa963bf20a7da63e763ffab3c603b72

SHA512
4f7068255211d18ab327d71f26377b1c550cf953a72ec98a204cb4c4a9bfe8da78846989a37a550b924466a6a4f78920ea5e18b507db598bb79fb82636c8b754

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Office/16.0/microsoft word_Rules.xml

Filesize
271KB

MD5
6a5c9b591423e37698cf6881f8e0529b

SHA1
dfd4a520459a79ca51116c3ef38ce6777bd03544

SHA256
4be9f028a3ac1f91da133d4b8f20bb4eeaa963bf20a7da63e763ffab3c603b72

SHA512
4f7068255211d18ab327d71f26377b1c550cf953a72ec98a204cb4c4a9bfe8da78846989a37a550b924466a6a4f78920ea5e18b507db598bb79fb82636c8b754

Download Submit
/Users/run/Library/Containers/com.microsoft.Word/Data/Library/Application Support/Microsoft/Temp/~WRS{883D8219-DA00-CE41-89D2-42E750F56E45}

Filesize
1KB

MD5
e0a581294718e1e2ba19fea0428061a9

SHA1
81be368abd968b139126e6d9c40db12116fbd47a

SHA256
d64732e76dce6cc23f0d81422546ec4550cba90173a96d7715bfc66cee4787fd

SHA512
14f073fda0920881bba51971f570d2c89ccab29a7c2a05414b80f3903268f9839d1d2b6ee4cf21fda316cc9080ece896b1e9889203e2788c7d46a91f43673553

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/Catalog/ListAll_hier.Json

Filesize
554KB

MD5
ef99a0036264614a5b6eb2204e37e78b

SHA1
8c507ed2a37e88f7e4886eff5c829420c2b22023

SHA256
b27fba1694ba8eb0d827515ec2f2b10f8b842b3b08fcde3ff7b75064a26644be

SHA512
f52cfa4e38c7dc6750b5e537ecff9188ab85e24fbdf8f287fcd7119eb59d152dcf8fa6e89098e9dd0aec818614309098f9946c9f905fb39764c9813b8b0d8d09

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/PreviewFont/hier_officeFontsPreview_4_35.ttf

Filesize
1.9MB

MD5
34395557e26b0c9bb5a776218dd3f70c

SHA1
aa08841ad65198da65298f04c56ed35a5b5993bc

SHA256
17d9b9d6d58d49a32edc51c37ec0720fa7f785a5cd33b74c2cd2a30ddcd52000

SHA512
28ea1f34a45920e3b23586d56a25c8a0d59925976714127ee0426ee16a7ba7c3487ef55185338a4f22f4fd85db24d09b70cda32f9ac1c6d9b319a81ad9563f78

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/FontCache/4/PreviewFont/hier_officeFontsPreview_4_35.ttf

Filesize
1.9MB

MD5
34395557e26b0c9bb5a776218dd3f70c

SHA1
aa08841ad65198da65298f04c56ed35a5b5993bc

SHA256
17d9b9d6d58d49a32edc51c37ec0720fa7f785a5cd33b74c2cd2a30ddcd52000

SHA512
28ea1f34a45920e3b23586d56a25c8a0d59925976714127ee0426ee16a7ba7c3487ef55185338a4f22f4fd85db24d09b70cda32f9ac1c6d9b319a81ad9563f78

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Templates.localized/~$Normal.dotm

Filesize
162B

MD5
301de467c9973c8b4178ad4a32c38b01

SHA1
44bbaca0e0d6ef61aad23c46c0c9830217a2d011

SHA256
b6f03da65cfe382bdd456e5e5732cf4544ba11134f286028e7974e97bf00e258

SHA512
5f61de7eae5f09e8644e9eccac28cc9e27d5ab4365d9b0a6b8a1413ef95e4c98fa816a73d7b12218d21eb009dc57791537fd5a5e49ad18ebeac4e81ae7ef5e85

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.Office/~$stom Dictionary

Filesize
162B

MD5
301de467c9973c8b4178ad4a32c38b01

SHA1
44bbaca0e0d6ef61aad23c46c0c9830217a2d011

SHA256
b6f03da65cfe382bdd456e5e5732cf4544ba11134f286028e7974e97bf00e258

SHA512
5f61de7eae5f09e8644e9eccac28cc9e27d5ab4365d9b0a6b8a1413ef95e4c98fa816a73d7b12218d21eb009dc57791537fd5a5e49ad18ebeac4e81ae7ef5e85

Download Submit
/Users/run/Library/Group Containers/UBF8T346G9.ms/com.microsoft.autoupdate.fba/.dat.nosync0241.hGuicZ

Filesize
428B

MD5
45bdcab1c9038b2d8b56686406d39e14

SHA1
ce003f268663303128dedf78ca71997b532ccc93

SHA256
7e08a727d97bc6f6460c21a8a86a81c6b89be21833c1695f6a79636e90399a25

SHA512
1c14f9b74e05f4c16baceea40870208044f783452429bf2b7c2ba3919d4ccc973433c77361f0d80add7460fba50415bf0aa415b98531f2cc433da3c6bf46008d

Download Submit
/Users/run/tmp/~$asd.docx

Filesize
162B

MD5
a2722bff116e4d1e698e78d18d554147

SHA1
97194b0a17357ef04c0d89cc4138e9468e4ae81f

SHA256
4b375e543b672698fb3989fffc94a7c0c82fc43cb46714a3d7efe7e9855dd9f3

SHA512
f343de719fbb525114970bca41298547af355cb42359b0a5b08f42053ecae7fd698597339acc4f9ad3863959992a49c7991ec528427b258d481b965c536ddac4

Download Submit
/private/var/db/Sandbox/syncroots.db

Filesize
431B

MD5
e4946ad9e7a4fc02dfc2ef1ae0e17cf2

SHA1
add1ccc54e63d497c26a1a9956443c6a1bdf8b9f

SHA256
3c830812eb8dfacbc699dac1c177c1d1ef2f52c86a202bdc669514c8dbf2b1a8

SHA512
77f06e92dd2eaed59cc043dbd2b97bd82a06e360e284abc9a7499ecc736f65fb17e58c1897506ad2ec9605bf49f0de41ca49ce314a618e852006dfe2f0a9aab9

Download Submit
/private/var/db/keybags/persona.kb

Filesize
3KB

MD5
eaf3e4bd9356d8ddc388cf7862fb2443

SHA1
f945f03f5e218a4a624f7696d8c37101b4fea2ec

SHA256
ff525f0ec19401702622ff8134404a5363c0197815ea8c7a2852c6539357fdd5

SHA512
2c7f2e079a2d861bfce5ddc99b1b51cae8a1f6aa6fe00266bf9ce7c757f914217422b58877cb4c2a926eaec8e2c5aaed0ffc21bac0906c960110b19cb5e24c5b

Download Submit
/private/var/db/keybags/persona.kb

Filesize
3KB

MD5
eaf3e4bd9356d8ddc388cf7862fb2443

SHA1
f945f03f5e218a4a624f7696d8c37101b4fea2ec

SHA256
ff525f0ec19401702622ff8134404a5363c0197815ea8c7a2852c6539357fdd5

SHA512
2c7f2e079a2d861bfce5ddc99b1b51cae8a1f6aa6fe00266bf9ce7c757f914217422b58877cb4c2a926eaec8e2c5aaed0ffc21bac0906c960110b19cb5e24c5b

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

Filesize
21KB

MD5
b8ce9d32c81882543f866e82df26e557

SHA1
5632583646de0ee5cc84600cda97794404c79c05

SHA256
ed48f46412b48e4d54ecfc48c8c8449f2f5578667a5a11c42e57039bd511a32c

SHA512
70f741bd3c2d15d3ab17079ec94ea9e5aad6d17d331915605876afe59c703f050daf201b9bbce593bd136195ab275bf001b1561e9422d78710a5ed96bf81decb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

Filesize
21KB

MD5
b8ce9d32c81882543f866e82df26e557

SHA1
5632583646de0ee5cc84600cda97794404c79c05

SHA256
ed48f46412b48e4d54ecfc48c8c8449f2f5578667a5a11c42e57039bd511a32c

SHA512
70f741bd3c2d15d3ab17079ec94ea9e5aad6d17d331915605876afe59c703f050daf201b9bbce593bd136195ab275bf001b1561e9422d78710a5ed96bf81decb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

Filesize
21KB

MD5
b8ce9d32c81882543f866e82df26e557

SHA1
5632583646de0ee5cc84600cda97794404c79c05

SHA256
ed48f46412b48e4d54ecfc48c8c8449f2f5578667a5a11c42e57039bd511a32c

SHA512
70f741bd3c2d15d3ab17079ec94ea9e5aad6d17d331915605876afe59c703f050daf201b9bbce593bd136195ab275bf001b1561e9422d78710a5ed96bf81decb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.microsoft.Word/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/5e84410f27304d289f168a76d51b240a.db.ses

Filesize
51B

MD5
2b4a748bfd9d72090a932d7d335aac63

SHA1
60c559a500dede34ed4603376b7e6bee94e0db3d

SHA256
33381ca09dc6445af033b5cfb291cce6b313ab7e244bbff94b47351e09923dbb

SHA512
470d4f9dc41714f6e94641634174f552806a10e9438ab7a83cc3ebaa2c1604afe847b143fc3c61929ff65136bd11706579de530c9203a27beb35b31fe1f5104b

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/TelemetryUploadFilecom.microsoft.autoupdate.fba.txt

Filesize
1KB

MD5
78af26a4cced1a9d0f381dd6e4067499

SHA1
47eb9d64f683759dc4517915322f8ae8de9c0123

SHA256
0a828025cd99cef11523f71bea2b4118a109da548d01e99e0495862d36450dff

SHA512
2132cb8d28942a67e8636193db4c2cbcfbf91892268f3c459896aec189832bdd8e618fcf48e1c3e4de23345c50264056d10dc9335381b3f0ff6007fe2e7f02ec

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Maps/TemporaryItems/(A Document Being Saved By Maps)/GeoBookmarks.plist

Filesize
88B

MD5
44d48b8856347f58f97ffd5efbf6fb52

SHA1
749ac5298ea842c613f3748abe9e488bfdf4b382

SHA256
cd3a65a738c66abb558545cea94329fd7d882f1f4877cea4a5af32d024dbbce3

SHA512
974fc97ed31ccbc19dc976128a41f1fa032e353fdb8cf1e9b7b7f07134c022e01451f7ceb07f91b0ac4b6d97bc320224a2edd471d3e44f5ab5359f41584a8a50

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.Maps/TemporaryItems/(A Document Being Saved By Maps)/GeoHistory.mapsdata

Filesize
84B

MD5
e32332952b2ccee296093224aea5acf9

SHA1
c0418197668954a7baa345478971e86b9ae132b0

SHA256
3c247e22168f7bd24cff896e8b9200d3c4f3229d4a15f5353c4c61483dabfd52

SHA512
089266dd43d52eef5fc38f15e217b3c9d7dae317757cbbfee9d0f21fb2264753de8c9b9c55736113d8e2a560c7d29a9d8ce5f13af742af380d4ccd717a04f5ec

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.studentd/TemporaryItems/(A Document Being Saved By studentd)/isConnected

Filesize
9B

MD5
2ec0d16e4ca169baedb9b2d50ec5c6d7

SHA1
c2f9b7b4897f03f94abf92294c9ca46fea62360b

SHA256
22965568d22a14ee17af055d2870b50afcfe9fd94a83eec3196e266932297bb2

SHA512
22f8e80d23c6110fb42017d8f48db768acb5ed4c1a9153bdfc50f8fb0561dd4dc9267efcb9b88bf772200d7fb46c4c19bd86aec41432c12b52ba286729339334

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.studentd/TemporaryItems/(A Document Being Saved By studentd)/isConnected

Filesize
9B

MD5
2ec0d16e4ca169baedb9b2d50ec5c6d7

SHA1
c2f9b7b4897f03f94abf92294c9ca46fea62360b

SHA256
22965568d22a14ee17af055d2870b50afcfe9fd94a83eec3196e266932297bb2

SHA512
22f8e80d23c6110fb42017d8f48db768acb5ed4c1a9153bdfc50f8fb0561dd4dc9267efcb9b88bf772200d7fb46c4c19bd86aec41432c12b52ba286729339334

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.microsoft.Word/TemporaryItems/(A Document Being Saved By Word)/MERP.ObjC.7CC4F8B0-DAE7-4635-9F6E-4D13D918B6B5.plist

Filesize
5KB

MD5
796e725fefe751636fe93dc8d6fbdc38

SHA1
be48cbc02a3c36b1b9619c90dd82ba875de9e072

SHA256
d9f6b88d846cd2611defded19a257827d70cf7d61ced2c8c5c3d2b6840034bee

SHA512
a83a1a8ab2f68e3c96216b44de00ab0fd0943499055066195f840c8eb6e9e108b967d568aa63902fb2f8e018be2ae8b99647bc2bbb84c4c74cd2bb1fb92563f2

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.microsoft.Word/TemporaryItems/(A Document Being Saved By Word)/com.microsoft.Word.securebookmarks.plist

Filesize
1KB

MD5
1f18bd42e9a007100d2c0a42042069e2

SHA1
973009a9e98a4c57698f1f5a89420c9fdc31c1c3

SHA256
b37eb99325cd7dd2d3da373002502b44733d7dabcf218edc519471821f085953

SHA512
b61712e2f1caf0692c2e425ce13371efc7b5ea379045b4f48eda4f47e0d5c796bdae6eb277f277702703f1560272a105d56166d69321e19b6746587c57fd88c9

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/hsperfdata_run/566

Filesize
32KB

MD5
a618273936f12851b867a9d4ecedecda

SHA1
ed237eb76799143529f75f1babcb3c76ad528a22

SHA256
c458810f624b759b8cfe23139df19881c64cffa568153f5bf35a5205e451f976

SHA512
878102dd2afdb90488c074eb0b6b898425a3f83be75e4f948c56c4035ab36373515f564c44e22e2f49176723ca98b184746272e534c4f4a2763196fe519788b5

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/com.apple.mobileassetd/TemporaryItems/(A Document Being Saved By mobileassetd)/AssetTypeDescriptors.plist

Filesize
1KB

MD5
7c98238e6f9a7ab3e30c4c16283fae97

SHA1
f30126016495459fd5897df0b97fadb72819c5db

SHA256
b02dd9009b3dabe37d5c139166618c17195cf401eb01acd044a207f4c7c85e34

SHA512
d6cc8716476128f4fefdc98f25e7e189b8e77443e35803927302895d32c8c1cc2cebb6114316f63770655932e21c88b1badf1cd2a3ecac39cb9547d386a008bb

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000bh00002w/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads