Malware Analysis Report

2025-08-05 22:50

Sample ID 230924-ajabmsba4w
Target http://oopatet.com/r2.php?e=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%3D
Tags
evasion
score
5/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
5/10

Threat Level: Likely benign

The file http://oopatet.com/r2.php?e=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%3D was found to be: Likely benign.

Malicious Activity Summary

evasion

Removes a system notification.

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Uses Task Scheduler COM API

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Checks processor information in registry

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2023-09-24 00:13

Signatures

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2023-09-24 00:13

Reported

2023-09-24 00:44

Platform

android-x64-arm64-20230831-en

Max time kernel

3299027s

Max time network

1698s

Command Line

com.android.chrome

Signatures

Removes a system notification.

evasion
Description Indicator Process Target
Framework service call android.app.INotificationManager.cancelNotificationWithTag N/A N/A

Processes

com.android.chrome

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
NL 142.251.36.46:443 tcp
NL 142.251.36.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 oopatet.com udp
US 1.1.1.1:53 accounts.google.com udp
NL 142.250.179.205:443 accounts.google.com tcp
US 1.1.1.1:53 oopatet.com udp
AU 103.224.182.206:80 oopatet.com tcp
AU 103.224.182.206:80 oopatet.com tcp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
AU 103.224.182.206:80 oopatet.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
NL 142.250.179.168:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 update.googleapis.com udp
DE 172.217.23.195:443 update.googleapis.com tcp
US 1.1.1.1:53 sjldtgepjjzi udp
US 1.1.1.1:53 irwryliqdrgx udp
US 1.1.1.1:53 lsliyov udp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
NL 142.250.179.206:443 android.apis.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
NL 142.250.179.131:443 update.googleapis.com tcp
US 1.1.1.1:53 edgedl.me.gvt1.com udp
AU 103.224.182.206:80 oopatet.com tcp
US 1.1.1.1:53 edgedl.me.gvt1.com udp
US 34.104.35.123:80 edgedl.me.gvt1.com tcp
AU 103.224.182.206:80 oopatet.com tcp
NL 142.250.179.206:443 android.apis.google.com tcp
AU 103.224.182.206:80 oopatet.com tcp
AU 103.224.182.206:80 oopatet.com tcp
NL 142.251.39.98:443 tcp
NL 142.250.27.188:5228 tcp

Files

files/dom-0.html

Analysis: behavioral3

Detonation Overview

Submitted

2023-09-24 00:13

Reported

2023-09-24 00:44

Platform

macos-20230831-en

Max time kernel

970s

Max time network

1702s

Command Line

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D"]

Signatures

N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D"]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=YMXHgsRzZJeUNOOGeIlCY349flJJQzRBRHQyQ3hYcUJxRzdpU1FTSFNKSTBLekc1UUgxSUYyRk11VmViZ3NDbmxxMStzbFkyQXU5OFA3bHV2QzFhNVJQUWhZUzlYSWJJTEI5WTkrc3hXbXFwVUFzc0tmcGJJU3QzL25MUW5nYnhnRTdnL2dqNlJRQlUwSThHT3dkVVpkL1I2dFFWcXdHS1pOdFNkLzJIWitBcGtRazhDamVjaVYzSFZ6dk9ub3FoYjIwdzNUVUhXUmJvT1NXbkhkL1BMcU92Z0RqOVdtL29YU3VtaHBPQmgvSkdRQWFKL2tlWWh1bWxXYlpnUzlreHIwMnlLdm51bzBlaTl5VnFIc1ZuOXNrM3BoODMzazZVZlRhbUdYZ0EvbXo3dVFzcWNEb0ZWTVRqRGF2enQyY3JHdlVNcENBSGRzZklPOUowNUx2czhVVlFrckFDU2ZDWHdubHBEN2pVUEJyS3VNRTNNajlzcnFQbEtKNXdCTFRycWhYZWgvNEt1QXdiWmdQczNLTlN5UnVJVzYzMHE1dzZEWHduUHhOV0dRaCtGK055OEVXSEVzUXJ4K2lPUEtaUXRYT2xCSFBEbm00R2Z5RjNrdDN2ZU9MY2lMS1JQTDd1emlqUkpYRUd2RnMzazVOZkpsQkVVWWdnOUo3YnIwQUh5WDZkMjdpTTUrd082amh2RnlNYm1NZHFISHlZRGkyYmhYVVZIQ0orVW1lY016cWloN0FUdFA5cmdJOGFuQzFXUDFsVEV0WnYxeW5Wd2pTZFBkaGtONTRJVXRkdGJDRGprMGxhWC83cDhrWnJJVURZczg5TG5qRkI1c2MwTzZPVjc1cXJNYTdNQWdxdHdUTDVlUjZBOHk0amEyeTV4N2RMdEVMT2NSbG5GclBad0NLUlFRZ0pnZkRZRTduUWVOMDhIenVEVUw2WnRHL3BnWDdVNkN5Y1dFSHQ3dldIWFA5eGRYT2xUZmRQczRiQ2xGelZTdkJtRDBtRCtJZTFBd0c1Sy9rcW5rNUhRemxnQkh5cnowYUFWb2FXd2JuUi9OZVlRNUhhNEx0WkQ3NzFsRjdrZXIrNDhrVEUwdHVBa3p4YStzR1BnZDB6YVdHQ0NobXVaaitUaGJHbzBuMFVPdmxSVitGLzFwRDZOM1I2ZncxWjNMVlB2eWxsejlZUVRTV3AwaEpSeE1IZHFEM3FaT3V1Q2xYc3FQZmJkZ1RweENCSGNvZnZNMFJEOFByeG9mUDFHTWcwZEZ3REVGcWRsVT0%3D]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --new-window http://oopatet.com/r2.php?e=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%3D]

/usr/sbin/spctl

[/usr/sbin/spctl --test-devid-status]

/usr/bin/syslog

[/usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature assessments enabled com.apple.message.signature2 devid enabled Message Gatekeeper state assessments enabled/devid enabled]

/usr/bin/pluginkit

[/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterD830718C/OneDrive.app]

/sbin/mount_msdos

[/sbin/mount_msdos -o perm -o nobrowse /dev/disk1s1 /Volumes/firmwaresyncd.xvrfJR]

/sbin/kextload

[/sbin/kextload /System/Library/Extensions/msdosfs.kext]

/usr/bin/rsync

[rsync --ignore-times --links --perms --recursive --times --delete-after --include=/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current --exclude=/Contents/Frameworks/Google Chrome Framework.framework/Versions/* --exclude=/Contents/Versions/* /tmp/KSInstallAction.RCIxUNSygB/m/Google Chrome.app/ /Applications/Google Chrome.app]

/usr/bin/rsync

[rsync --ignore-times --links --perms --recursive --times --delete-after --include=/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current --exclude=/Contents/Frameworks/Google Chrome Framework.framework/Versions/* --exclude=/Contents/Versions/* /tmp/KSInstallAction.RCIxUNSygB/m/Google Chrome.app/ /Applications/Google Chrome.app]

/bin/rm

[rm -f /Applications/Google Chrome.app/.want_full_installer]

/bin/rm

[rm -f /Applications/Google Chrome.app/.want_full_installer]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CFBundleShortVersionString]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CFBundleShortVersionString]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSVersion]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSVersion]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSUpdateURL]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSUpdateURL]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSChannelID]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info KSChannelID]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CrProductDirName]

/usr/bin/defaults

[defaults read /Applications/Google Chrome.app/Contents/Info CrProductDirName]

/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister

[/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister -f /Applications/Google Chrome.app]

/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister

[/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister -f /Applications/Google Chrome.app]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin

[ksadmin --register --productid com.google.Chrome --version 116.0.5845.140 --xcpath /Applications/Google Chrome.app --url https://tools.google.com/service/update2 --tag universal --tag-path /Applications/Google Chrome.app/Contents/Info.plist --tag-key KSChannelID --brand-path /Library/Google/Google Chrome Brand.plist --brand-key KSBrandID --version-path /Applications/Google Chrome.app/Contents/Info.plist --version-key KSVersion]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin

[ksadmin --register --productid com.google.Chrome --version 116.0.5845.140 --xcpath /Applications/Google Chrome.app --url https://tools.google.com/service/update2 --tag universal --tag-path /Applications/Google Chrome.app/Contents/Info.plist --tag-key KSChannelID --brand-path /Library/Google/Google Chrome Brand.plist --brand-key KSBrandID --version-path /Applications/Google Chrome.app/Contents/Info.plist --version-key KSVersion]

/bin/ps

[ps -ewwo comm=]

/bin/ps

[ps -ewwo comm=]

/usr/bin/grep

[grep -Fqx /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/]

/usr/bin/grep

[grep -Fqx /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/]

/usr/bin/cut

[cut -c 1-108]

/usr/bin/cut

[cut -c 1-108]

/usr/sbin/lsof

[lsof /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/Google Chrome Framework]

/usr/sbin/lsof

[lsof /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69/Google Chrome Framework]

/bin/rm

[rm -rf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69]

/bin/rm

[rm -rf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/95.0.4638.69]

/usr/sbin/chown

[chown -Rh root:wheel /Applications/Google Chrome.app]

/usr/sbin/chown

[chown -Rh root:wheel /Applications/Google Chrome.app]

/bin/chmod

[chmod -R a+rX,u+w,go-w /Applications/Google Chrome.app]

/bin/chmod

[chmod -R a+rX,u+w,go-w /Applications/Google Chrome.app]

/usr/bin/find

[find /Applications/Google Chrome.app -type l -exec chmod -h a+rX,u+w,go-w {} +]

/usr/bin/find

[find /Applications/Google Chrome.app -type l -exec chmod -h a+rX,u+w,go-w {} +]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/chmod

[chmod -h a+rX,u+w,go-w /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Default Apps /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Helpers/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Libraries /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Google Chrome Framework /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Internet Plug-Ins /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Frameworks /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Helpers]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/chmod

[chmod -h a+rX,u+w,go-w /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Default Apps /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Helpers/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Libraries /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Google Chrome Framework /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Internet Plug-Ins /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Frameworks /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Helpers]

/bin/chmod

[chmod -h a+rX,u+w,go-w /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Default Apps /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Helpers/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Libraries /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Google Chrome Framework /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Internet Plug-Ins /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Frameworks /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Helpers]

/bin/chmod

[chmod -h a+rX,u+w,go-w /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Default Apps /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/KeystoneRegistration /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Resources /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Versions/Current /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Frameworks/KeystoneRegistration.framework/Helpers /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/116.0.5845.140/Helpers/GoogleUpdater.app/Contents/Helpers/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Libraries /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Google Chrome Framework /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Internet Plug-Ins /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Frameworks /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Helpers]

/usr/bin/xattr

[xattr -d -r com.apple.quarantine /Applications/Google Chrome.app]

/usr/bin/xattr

[xattr -d -r com.apple.quarantine /Applications/Google Chrome.app]

/usr/bin/bzip2

[/usr/bin/bzip2 -f /var/log/wifi.log.0]

/usr/bin/hdiutil

[/usr/bin/hdiutil detach /tmp/KSInstallAction.RCIxUNSygB/m]

/sbin/umount

[/sbin/umount /private/tmp/KSInstallAction.RCIxUNSygB/m]

/sbin/umount

[/sbin/umount /private/tmp/KSInstallAction.RCIxUNSygB/m]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksfetch]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash.Root]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mediaremoteagent]

/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent

[/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.imfoundation.IMRemoteURLConnectionAgent 486]

/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent

[/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent]

/System/Applications/TV.app/Contents/MacOS/TV

[/System/Applications/TV.app/Contents/MacOS/TV]

/usr/libexec/xpcproxy

[xpcproxy com.apple.accessibility.mediaaccessibilityd]

/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd

[/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.99BBBDF7-4231-42DC-A4B2-064BF1EE6BDB 747]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.SafeBrowsing.Service]

/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service

[/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PerfPowerServices]

/usr/libexec/PerfPowerServices

[/usr/libexec/PerfPowerServices]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PerfPowerServices]

/usr/libexec/PerfPowerServices

[/usr/libexec/PerfPowerServices]

/usr/libexec/xpcproxy

[xpcproxy com.apple.icloud.findmydeviced]

/usr/libexec/findmydeviced

[/usr/libexec/findmydeviced]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E]

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService

[/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cfprefsd.xpc.agent]

/usr/sbin/cfprefsd

[/usr/sbin/cfprefsd agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.agent]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.diagnosticd]

/usr/libexec/diagnosticd

[/usr/libexec/diagnosticd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.newsyslog]

/usr/sbin/newsyslog

[/usr/sbin/newsyslog]

/usr/bin/bzip2

[/usr/bin/bzip2 -f /var/log/wifi.log.0]

Network

Country Destination Domain Proto
US 8.8.8.8:53 25.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
US 20.42.73.25:443 tcp
US 8.8.8.8:53 api.apple-cloudkit.fe.apple-dns.net udp
US 8.8.8.8:53 14.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 7.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 46-courier.push.apple.com udp
US 8.8.8.8:53 19-courier.push.apple.com udp
US 8.8.8.8:53 26-courier.push.apple.com udp
US 8.8.8.8:53 10.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 e4686.dsce9.akamaiedge.net udp
US 8.8.8.8:53 28-courier.push.apple.com udp
US 8.8.8.8:53 18.courier-push-apple.com.akadns.net udp
NL 142.251.39.110:443 tcp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
US 8.8.8.8:53 ocsp.entrust.net.edgekey.net udp
US 8.8.8.8:53 2.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 43.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 21.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 ax.itunes.apple.com udp
US 8.8.8.8:53 34-courier.push.apple.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 sb.tv.apple.com udp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
US 8.8.8.8:53 37.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 safebrowsing.googleapis.com udp
NL 142.250.179.170:443 safebrowsing.googleapis.com tcp
HK 23.42.167.156:443 e6858.dscx.akamaiedge.net tcp
US 8.8.8.8:53 uts-api.itunes.apple.com udp
NL 92.122.101.58:443 uts-api.itunes.apple.com tcp
US 8.8.8.8:53 31-courier.push.apple.com udp
US 8.8.8.8:53 is2-ssl.mzstatic.com udp
US 8.8.8.8:53 is3-ssl.mzstatic.com udp
US 8.8.8.8:53 is4-ssl.mzstatic.com udp
US 8.8.8.8:53 is1-ssl.mzstatic.com udp
US 8.8.8.8:53 47-courier.push.apple.com udp
US 8.8.8.8:53 6-courier.push.apple.com udp
US 8.8.8.8:53 13.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 44-courier.push.apple.com udp
US 8.8.8.8:53 17.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 11.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 43.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 45.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 18.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 e17437.dsct.akamaiedge.net udp
US 8.8.8.8:53 41.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 16-courier.push.apple.com udp
US 8.8.8.8:53 39-courier.push.apple.com udp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
US 20.189.173.12:443 mobile.events.data.trafficmanager.net tcp
US 8.8.8.8:53 5.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 33-courier.push.apple.com udp
US 8.8.8.8:53 4-courier.push.apple.com udp
US 8.8.8.8:53 43.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 38.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 31.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 13.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 10.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 22.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 20-courier.push.apple.com udp
US 8.8.8.8:53 3-courier.push.apple.com udp
US 8.8.8.8:53 25.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 23-courier.push.apple.com udp
US 8.8.8.8:53 5.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 45.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 17.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 1.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 11.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 29.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 39.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 7.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 34.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 1.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 4.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 31.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 17.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 15.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 lb._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 3.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 48-courier.push.apple.com udp
US 8.8.8.8:53 3.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 37.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 47.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 32.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 47.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 45.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 46.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 38.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 28.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 37.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 45.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 48.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 12.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 14.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 44.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 21.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 18.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 23.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 39.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 24.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 13.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 41.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 17.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 47.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 16.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 41.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 26.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 29.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 17.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 12.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 7.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 48.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 49.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 16.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 26.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 7.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 20.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 29.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 23.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 40.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 19.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 29.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 20.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 27-courier.push.apple.com udp
US 8.8.8.8:53 cds.apple.com udp
US 8.8.8.8:53 help.apple.com udp
US 23.36.245.75:443 help.apple.com tcp
US 23.36.245.75:443 help.apple.com tcp
US 8.8.8.8:53 45.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 32.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 gspe1-ssl.ls.apple.com udp
NL 104.110.240.193:443 gspe1-ssl.ls.apple.com tcp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 13.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
NL 104.110.240.193:443 gspe1-ssl.ls.apple.com tcp
US 8.8.8.8:53 48.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 16.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 33.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 15.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 26.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 35.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 20.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 21.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 3.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 30.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 37.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 15.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 2.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 15.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 41.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 32.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 1.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 5.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 46.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 courier-ab-vs.push.apple.com udp
US 8.8.8.8:53 37.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 36-courier.push.apple.com udp
US 8.8.8.8:53 39.courier-push-apple.com.akadns.net udp

Files

/Library/Google/GoogleSoftwareUpdate/TicketStore/.dat.nosync02c5.jBxMtW

MD5 d8c1da4da2463fdb980d45c3bc7a5947
SHA1 1d07c6f92f10d6c85c8d331eeba6a7d06682be1f
SHA256 f5eac6457ac6b1b01caa04dc3e50b702b5cb9689371b7c078a196c47f60e125c
SHA512 4acb9f419ac77e49d3cbd06ff8d2cba1be55fa63bcaf90f916608d5cd05581f5176a0c628c3ea16456bc70e3c6b9b4a8394f1d9ce896dc1cb9bd65445eed9dbb

/private/var/log/wifi.log.0.bz2

MD5 af0022ae0e0035b6041b0e9d72b3668a
SHA1 712cf037d8b225a83c598c7c3daee328c32c901f
SHA256 5edc860969e607653356288fa9e8c6c7de02c28a4479df9ff4b054a73caaf314
SHA512 c039b71d188f8e17c806d10c598c813a1b6925f7b30139d7d611effcde09c1d45bb5500e8cd96599b2f138e9e1d0a8dfa37a00114d28c6fd0b2d1f147caa3857

/private/var/log/wifi.log.0.bz2

MD5 af0022ae0e0035b6041b0e9d72b3668a
SHA1 712cf037d8b225a83c598c7c3daee328c32c901f
SHA256 5edc860969e607653356288fa9e8c6c7de02c28a4479df9ff4b054a73caaf314
SHA512 c039b71d188f8e17c806d10c598c813a1b6925f7b30139d7d611effcde09c1d45bb5500e8cd96599b2f138e9e1d0a8dfa37a00114d28c6fd0b2d1f147caa3857

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db_

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db_

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.WebKit.WebContent.Sandbox/CompiledSandbox+_1YYzncKIoXjhjWCwKl267SpBYLvsZewldQMq9uV4SU

MD5 220cf5e933e977986eb1004743b55d27
SHA1 b54cc29602d39247c7595cab725f678ec6de79cc
SHA256 3dca99f87ab1858ed50e3b63aac64b90347492c50a53b3d4835a4609b1600f7c
SHA512 379453af4dbc7f6b2082d04ba1c217f64448bf9ceaf602a4784f69a2e97641e39e28d2b6e21e47b0ee9af39fc918eeaad2aebab59ae2eb9456fb172e85d28bfe

/Users/run/Movies/TV/TV Library.tvlibrary/Temp File.tmp

MD5 70839215da4cd713d29ed422217bf47d
SHA1 32b96a544f78bae521c2ed20c9433271acc47415
SHA256 865cc6c496324769da179870406c52a13c8ed42de2c1dceb4782389eb426f2f9
SHA512 43c30f9da1d6086ff441387f8bac07d88eaab7ee0bdd0c619219d821ab0d504ec423cbef5faff042b756b0b7ef3df631330b6860c2659c2e0c4679ede5409dfd

/private/var/db/keybags/persona.kb

MD5 fe98de1f0965bccce0fcadb71649a979
SHA1 62e9364a03e443ce12c1c40366858575bb8155c9
SHA256 00a28bdb02683adfcf865f9d2ee95b56c4747c58ef3525d0ade5af2572a5dd9a
SHA512 6198969310b01d3eca60e12b6a4e79bbf25a139b9075ea52392edcc23ab34c28211f7341fded82f703364c262613dfe3097459f728ffbb2d5f3cfd2c23722037

/private/var/db/keybags/persona.kb

MD5 fe98de1f0965bccce0fcadb71649a979
SHA1 62e9364a03e443ce12c1c40366858575bb8155c9
SHA256 00a28bdb02683adfcf865f9d2ee95b56c4747c58ef3525d0ade5af2572a5dd9a
SHA512 6198969310b01d3eca60e12b6a4e79bbf25a139b9075ea52392edcc23ab34c28211f7341fded82f703364c262613dfe3097459f728ffbb2d5f3cfd2c23722037

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression.tmp

MD5 54d22de86a2dac7b529c1ffb78352843
SHA1 b8debf4f5a805656e808a1bfc065f8739a26ab94
SHA256 1e35e5f615611f7450ab4cde5183d97415baff8b65012cd7671d4fdac4d726e5
SHA512 dcd1524544cf8c8fc7bc29a953b5d754d64b680ed0cb9001adbd16e219b660ada01014f3e0856ed0e9d3a31454aa415a200ea4b1d6fcd0f7ad315c8a8588b65a

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression

MD5 54d22de86a2dac7b529c1ffb78352843
SHA1 b8debf4f5a805656e808a1bfc065f8739a26ab94
SHA256 1e35e5f615611f7450ab4cde5183d97415baff8b65012cd7671d4fdac4d726e5
SHA512 dcd1524544cf8c8fc7bc29a953b5d754d64b680ed0cb9001adbd16e219b660ada01014f3e0856ed0e9d3a31454aa415a200ea4b1d6fcd0f7ad315c8a8588b65a

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression.tmp

MD5 1204c29b5d8399cf91eb7aab94672084
SHA1 6d332f12ebdca45ee452a040bf4b518274228ed1
SHA256 f7a848a6a298570abcb7fe6cc80e02c1c2ba7358e891717f4dcf4518ece113a9
SHA512 aceec7f99de7cca9c99b4b66513bf775c1ce4d936caa91495b24a0793386cb84d3c2af2c4166bee4c2ec5de834bb381952040f0a9e7c53f25b39ce32eeed40e8

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression

MD5 1204c29b5d8399cf91eb7aab94672084
SHA1 6d332f12ebdca45ee452a040bf4b518274228ed1
SHA256 f7a848a6a298570abcb7fe6cc80e02c1c2ba7358e891717f4dcf4518ece113a9
SHA512 aceec7f99de7cca9c99b4b66513bf775c1ce4d936caa91495b24a0793386cb84d3c2af2c4166bee4c2ec5de834bb381952040f0a9e7c53f25b39ce32eeed40e8

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression.tmp

MD5 846500a00df519570156c777dcd7d743
SHA1 f492e5dc163781737f1aef4444d4fe68676f71d6
SHA256 d200db6fef495a17d2dc8e100d7349b2254f027c2846d923165c18124dfb2134
SHA512 941258f86e58e06e6e3df6833307d7e188f54790cbb4c19cd25c5500205747c9ab38e7d81c8aa9634262dc42af05cefa933ab2ae77f9a26ea2082e4a0c228b75

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression

MD5 846500a00df519570156c777dcd7d743
SHA1 f492e5dc163781737f1aef4444d4fe68676f71d6
SHA256 d200db6fef495a17d2dc8e100d7349b2254f027c2846d923165c18124dfb2134
SHA512 941258f86e58e06e6e3df6833307d7e188f54790cbb4c19cd25c5500205747c9ab38e7d81c8aa9634262dc42af05cefa933ab2ae77f9a26ea2082e4a0c228b75

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-27-2022-06-20_7D60B9B2.PLSQL.gz

MD5 cb689f79cca891b64cb676606b649f4c
SHA1 c565c35aa75852a85c18a2d2fd1f9a35d6a17b25
SHA256 497d88b73636e65e9e74f24998704107581e4652aa04f9a918a28b3ef54dfc13
SHA512 43e0a57dad7e5e9bfd68cc03379c011fdcf2895f8514e978cb6f6dc8e26d20bd5b72ccacef24618debd21189443ae3b9f0a3458bde4384952710cc2cb08f315e

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-20-2022-07-14_E62FF93E.PLSQL.gz

MD5 ba734a94eaa87765b10e7c9254bc3b07
SHA1 fd30ada8579e2e6af88e035521ea07dcebc0ed95
SHA256 b5fadcf2cf29e7fd81531e48cb1699c10628af87367f808f53ad061437f3d2e1
SHA512 7baea18efbcc2054e8642fb517fe3fed8a67da728a7b4e2fd805ccdb929fb335e8f91ea6b338efc6629e3bab948ac69b697b216f7aebf6c988999dd29a200f38

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-14-2022-08-07_C9E9DED1.PLSQL.gz

MD5 4feb83637ef70da07a3320360fd48837
SHA1 bace5664de379c13d37ff2b1e916739b305f75bb
SHA256 7915e58eb23262a2ce22a7df0eb733ebe1d3e3dfbaef9a60d0a3633ed1f99fab
SHA512 70317a8a1ca88b0adf395335fab2a84d374ff53f2c18a7038d6c04171ba87648ec6db5d9d00e95726601bd8458bcbdc0da742668bb47417041170bca41ee3f3a

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-08-07-2022-08-31_504AD0A5.PLSQL.gz

MD5 8924d306d52a2490ba79b53f705f2851
SHA1 52df54cfce322f8bd4df06b9382e5caa56f52780
SHA256 90b3778f38cc4800e1e408886fbb27781096c4c300e912bdb7cfd68163322ea0
SHA512 a0408a882f4b5af6f73525c0e176b439340db281a70384303a98c00e4e2b7db39f924ec134c5c22958480b7c2c1b01537814e6313c1b0a7d01281d2025cfb322

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-08-31-2022-09-24_0B2F7336.PLSQL.gz

MD5 32db6eb204df51e55f063bdb317b18c6
SHA1 b1858e44b27d88c395d961eb645209102aa894af
SHA256 c0eb70d965563f0c046fdeadeae73f5a4a938590fca8e31f1e6bcc5cdddd391f
SHA512 1a6dab142ee043f8211a8e100da4edbc7209144547d815dbc964d0072d61c38584e591430dd8a96cc5a5c9046181c7d29dec4ae4ce1fcc41249d13c50e1a346f

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-24-2022-10-18_11E22C6D.PLSQL.gz

MD5 e1184baa40e7eb8f2386c71d7c37749b
SHA1 296c88e523d8ce4323fcf75a996e7c5bbe77acb6
SHA256 38e33bae91ea33df3f6d45f939d108050025f13f12f9d0a02d70b0708edfed24
SHA512 ce987950bef7256ba38d9ce6e43cb31e13c45c4fb0de00fd29790b3431b47b850ce906f9000930a0dabba38c2b3a500a49feebf94b76d1b17ebbc4b839046f82

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-18-2022-11-11_4D92D43D.PLSQL.gz

MD5 cbb9486fa5028e64cf0ee0258254d8eb
SHA1 7ca920bd633759d7dcdef1e1fd5e672925f996c3
SHA256 d2b30da6fae160ee8481ad1bcedf37d1ae81b2f23bb7623e5e51078c56e09b88
SHA512 eedf6e9491968b2084d54e9bcae1318be0f1a07eba58cf615829694c12a8b3320afa85122f53314a8b1ed2be6ada02685d4d1d3111af93ea66b827b90ee149c9

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-11-2022-12-05_C70EAA2E.PLSQL.gz

MD5 2607bc17c1aaedcd82db511626f3a8e6
SHA1 a19e324429052b077dd9945c70ff1ff21b099f40
SHA256 3ad4ee60cef414fea73eb3f47d2a070348600eb54a35827f7db958fc0c09e8e7
SHA512 863622f027e14c386e25d715c61a2071e9433d5927f730f895a222fafe245605b251189e703259798fe8da94fe574cb1eda871130cfa17a53af648938e2d9cd2

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-12-05-2022-12-29_20AF2815.PLSQL.gz

MD5 a0de2ecea05c13533bfdda6d3abd3264
SHA1 e43d38e80a511308c4eb2a2acfe7f0f0a69e8de3
SHA256 d1b9463f79f6ed8df473a84fd80e00981d37ce3385d27de707e29f9208abace1
SHA512 7fd8f71a36b8b519cfccb9597ace55ced6eadcd43e0cd022c44d54ab1c22c60445253ea7defc049c6b8c2afc5d99ccae1458c3415ad1761de7c50d2814416cb0

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-12-29-2023-01-22_C1CD3FEA.PLSQL.gz

MD5 8ff652a73df89693b0d3e3eb494a9934
SHA1 539e34eba89fb50a68214a6c827efebc772dbb4c
SHA256 4568f6c43163b4c485efe1b7fca71104743f27372f6b8c13c9740cb0baaf1432
SHA512 9b798ae558a7ee820e93a17d9a09da8d85c6256a29485ef1206136861208769a36aeebd93753ddfc813e8fde2199352f26a926402eee25f8c42492805345fbed

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-22-2023-02-15_34BF7A07.PLSQL.gz

MD5 05fea8fbcc516ee9ca4f1a4fcaeb80d0
SHA1 e6ae4121c8f5cc348465c60da6cfbfc6dd2f333c
SHA256 c111b412c325df382bea47a4397d9bff08e782e10b9f5ef11069dd75e17f56dd
SHA512 32194286d22afb5d57a73143e4b16d1a846005a8ee2468d717566b8e17251d6a85b5efbd964f3ecb7e6945b5867b3694a9d0288cbc37b256241a96e4fbe38031

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-15-2023-03-11_3FA00772.PLSQL.gz

MD5 1ac70d2cd4bfb4028e4c511a89e7fd57
SHA1 5f1f888918aa81180b0dcbae57c1e90aa67c6393
SHA256 20f211e10365955725d001286eb302d6f2f2e72d3be7e967a362d3f52b6a41e9
SHA512 7b29b585ad5905a4f87adb87a92ba68a5507e064d15bbe017b76e9330a512b02356e3e5de77527348bfcc194da96e6f87b78aac22370d2c060206616e0ef2067

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-11-2023-04-04_38C03BC5.PLSQL.gz

MD5 b3b1c670fd0803f229d9e7c69a74637d
SHA1 ca23aada14c809d8cb158f02d336f8acd98d4258
SHA256 80da3198796bfa297bc41807e2fa921787459c5ae19efa03878f2fae0829f915
SHA512 ffbb0bd005cbfd4def20828c096744c68fb782443b31613e0ae25653ca3c98f2feaf4cef08bdd43ad035c09e732ef79a1864a9ae582d312f3b7dea834121970a

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-04-04-2023-04-28_D66A1FE0.PLSQL.gz

MD5 a55a9125ce884b3dcbdb8bc6d31d5aa2
SHA1 4ff53db7302824a76f60417ef2a4f5bc96f14938
SHA256 06f5279d85634c07444ce4e3927bc9710bf90460c4d050c9f3c5c4fcb9cfcbd3
SHA512 0229e0ca1114ebebae3e461bab8e47d24e1c27b96afc355524d1a669d9362b28e45cae16739a6ee244ac30e3ade1aa9ecf9f528c02b659d4392a108334c6fdc1

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-04-28-2023-05-22_09181C8A.PLSQL.gz

MD5 d0a81d8c93190d3faaaaada113d1384f
SHA1 73c04a52bdfe4300c983d2a030b3cb89578406bd
SHA256 ac199fdc13243e643976ee1d842d9916843659928f369f6473fad9229de6e35c
SHA512 635271b5a83f47ec04a75308ce578c9025ee529f2e3a151cca9d41153318b04cecd78a79d884ea49df60fc9be77ff0020cd147c7b73b265ada0d7d26b1cefb47

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-22-2023-06-15_B52590DD.PLSQL.gz

MD5 5d3cda5d417c1c0815c7b689cbbe32e8
SHA1 e835c26dc5f98bae0ab6075c559037d9a9fa7671
SHA256 b3a9b182065c7cce2a42f245b61682604685a5237fa38e3faa19ab93b2c2299e
SHA512 2de7ec96e54817eb45aedcd423903b647b71c1a300254cc870d2f0c33d053e50e239a85ecc630cb55496c2317ade673d5f061a92e5534afd0686a3d316c64123

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-15-2023-07-09_6CDD4A46.PLSQL.gz

MD5 3ec30c05af23c0496ddd8814eb1c570c
SHA1 ad0cf2fff180a1ddfb6e925b41b63dc31c3fc2e8
SHA256 1ece1424cae4df79d2fd1d5eae71f36d0b31fcf1eaef6f4a929e0346b932cd07
SHA512 6c3585ff94553a4fab3ebb8ee12b05bffa852902cc664a6872a68a311aa34d8180800ce8360cac49edd792d04ab7cb827c2afdaecbac1ea00c063a7b899dfff0

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-09-2023-08-02_1866AAB5.PLSQL.gz

MD5 e0adb1e49f5397385d46fd82855c7b97
SHA1 3bd0dd27c9ea406ec6161518e00e8a9e48a5ce6d
SHA256 8648f3437ec806e506eb2b2d1d7c64b63b774503de21023af3b6fa65eba30cd8
SHA512 8a6d4199f207d47fc4e2001fde9b9ad6e726d9d2c055ba39cb7a804473c8b9263800c44f26b35b8c2615efe401b0ffa8475440998a5c60d35e258880bb2998c4

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-08-02-2023-08-26_50F986D5.PLSQL.gz

MD5 b1731d58c2c6ecb02b7814e2f6dd22dc
SHA1 0e62922ad1933d4d2eb653788f42aea26f65a15d
SHA256 e1d9b327b5ce3b6da2a590f9058bbba8149e85b341cd2dd54a4454ff5ebb111a
SHA512 ae2462a6d3740d24e83f00fb3c3ad676e314e2b7b44f1b6100214face7b11020f8b6fafc5db8291cad1921daf4138fab00e81d1f28c7f63fae9fb90145273fc9

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-08-26-2023-09-19_096FC679.PLSQL.gz

MD5 3cc12dfc58743cfe217df8eb0f475b6a
SHA1 a6dfb814ddbbb5f396086e3d5535b2c7eba1b3de
SHA256 11de4c6022e811005014419263da3d96af84f7da561d1d087656287e5d30ea29
SHA512 203ca93a6cd169f7374b7bedc379b029a8341743d7f9c07c66b25669ef7abd884dd40f812d827b945d6cefa8f1fe2046adc836d745fb824a5024ab6b1386c4fd

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-19_D8792B68.PLSQL.gz

MD5 c0ce484934b9cbabcec360a89dd44c12
SHA1 a11076c1f19e8a52b9d370c9a24ced8ae36f8aa3
SHA256 99af7645f6ced0449e63eacebb19d2d5f3ebedafc0bb9a5ee72935452f5d3ebb
SHA512 d8f6d8b8c422e103f4192caf0eda8bae7fbf6d8e10262f92ced8a3af18697eb88c2ef01d8ccb8cc5da6c83acf36d58c9cbd60207365545cc7ef18b9aea10bdc1

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-20_1C7C9AAD.PLSQL.gz

MD5 14463adab8b5413075f8a4810b86b55b
SHA1 4573478b7402291cfc7fb747b212104cdc2188cc
SHA256 c9a8d6289273abbbbbc207125662389c0e1696d3aabeb04d2d3f5ec600e3a40a
SHA512 fdddc34569cae87f1baf0c7a4e7d8971237648aa3a1d306aede4d02e3be20384a456db7ede6ad61a4c23bb4557b6806c5269eb888be9af5f32733c8964c7f28e

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-21_3B7F971E.PLSQL.gz

MD5 c265a99328bfcad64656e21bf497d201
SHA1 72498da19a646ab3e46aac08e3934bef64e73933
SHA256 be10037f816684c371d96ef1247ee2366f53de3f20c004762fc8e4a074d0ce2d
SHA512 254a7d12f28a4a57c9c79ab1a0b6af45b90702a5408a810ac061d6b854e4ffb6e35b0bfaa8be007398a6451f50ea7101f033052efd2865b3742af4023e9cca84

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-22_CF6877CB.PLSQL.gz

MD5 de8fbffb693b815e4a5540a6e762c6ab
SHA1 a65042e8f3e542a88c7f3ce23a46a6ddd950bac4
SHA256 b0d445546d5ce1e2cb2e2e06490b4005aed7e739b10584e2df163fbbc0456476
SHA512 4112869df4108830c912afb9b120bbb58eea1078364ef74965cbdf5b9adb01d32716d68831602cd786a513b06d4bb483e35ef10bedb8814baa281da52a8565e1

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

MD5 57f04cbf6bc80d70fae963f57818fe82
SHA1 c63eac16298c2ff63068ac1d0c58fde4fe194274
SHA256 dea199c65f731c4960bd3e7a24cd568dbadc47c00dcc4154f41e525f1280e5b7
SHA512 2cc20d12527f0bfacffcb326d731c58c37fca5d5c8b90fd08dfedaa91ecc6ffe0b2b1c0bc482a7818d47b043479622656317ca8e0d3ef7aa9e50047b711a9edc

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

MD5 9206a87e0c5e1deb8dcd4ad29eb1f51b
SHA1 54e15c5410f3c9ed3fed94cf8c60faa2f752d1b8
SHA256 7edb55f97acedc5ae097f8ec360c66ae348786ae449907ab7c580dac69a38581
SHA512 39761f62b56df7ef0e35b7d77a7c4ae0c113860271e6c94546a6f02d98cd8f91a2afd5a84efe004166c94878687af939801861b77f674a75582eb67fab9bd8d8

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-16526.iconmappack

MD5 076cd173ad76039788e32d517284be9d
SHA1 e3f74a6378362c72d558e66659f0b2f92eca5f42
SHA256 5fad507e12e491f3ca1caef60d69f0697819532b0f176a2c4bfb8376633eb5f0
SHA512 927232e970207bd27d499ba67a66891b386f78cb006132dbeab268bdffc362e0c04b6e74061e9d7e1f5a47e589d8679ed41412b646fc5712d96b476af524ad04

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 5e564a41c1ef92f11ea59711af2fabcf
SHA1 619c01da01eb70e10b221e30e8003437b135f9bf
SHA256 6da81fba868189f37d9c684c382d49b2b9228fd4772392a41a836a92af6f71a2
SHA512 1cb9ab4462ed5aeff362d61fe428be30065f2df90c5549bc3fb83e05acf5248f0beb137c186ba728bd9aaa7d8a211f958675c978334baecb0277d9f1694c65bc

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 df6372479bc118b8024638aab53488c0
SHA1 9c65a312f414baf5d243f5f7ed09c0c1f3dedd74
SHA256 74576dbbd5710ba17a30c7839e2fa5745898931993cf2d6039479193cd56f405
SHA512 4dcdccd4028ba6a3df927f161120958e6376565587a304f63b4e0584708bfec699016a2ddfdd4fcf6207d01e842e4c5022116889fe62290bf8e34af799a7cebf

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-15660.icondatapack

MD5 0c6ce5c35fa7d997fd804bf55aa15318
SHA1 4265ed3869a99ced0275027ff42f143fb5d9bd93
SHA256 32c9d71a301b990cff5a22eaa0efd959687fb6ccfa4902995e9ab196c52de6cc
SHA512 8903d1134e6e31cf721d55eed49dba0092dfa7a859f94c976d5acb2fd74605a27424170036aeec227fed4968a45978947c475b3986f1835dabbc5f8bf24181da

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 557afe76380b5797fc9d770858dd3251
SHA1 5d37da00fcff66ea594151d2ee936df02348195d
SHA256 7ddee46091fb071a4137a6e691bccc084e552cf7346ddcc9408df6800452705f
SHA512 01302639597b6d561e24a75b0b4e543d77b2a260894909f335ccde58b3d585f2d87eca432f09588f91e6cb501c15ae784a451bba32f64bb8cbbcfdb324dba99d

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-15784.iconconfigpack

MD5 de5648917ccf1e6204eae7fbc37c40e6
SHA1 f2cdf8f7a6c9562c44a17eb178a256449f34f33e
SHA256 e5215a3a65f3f1055c0d0b98648c1949b060c7ba0c6d73b70352a895ba7ad60d
SHA512 1e396765e38c0c99e24618d05c95c077e299ab3aaefffe24f621963aa48e0e83423248b69fde8ba85a9aceb7e40622accd06a65aece7b627937890f495c3165f

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1534.iconconfigpack

MD5 e3941a6076ca988c35d21d5284189088
SHA1 90ebf9c6373eedb89f8b0a90cfdca3a880dcc490
SHA256 73e2c7be08b192da38bf5895b6993a762ad8c2dcc96601bf6c1062e7d4db2000
SHA512 cc14f88de9ccd75597868c1a0b9bbbf21b36d3cdf08a10b07d2be064cae6efd504155e4cd4a232b757ad0107c4d87067f46d4fed5ff8aabdf7cb06bb27988c5e

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 d2348dfeeb0ad5d1bd97a68a559f00eb
SHA1 eb309b1c5d4f4893986cb6765be133a21aec4c11
SHA256 02004133d7947a446954e09e5c44cb39df04842fad3d72ddb0ec6e34a2153539
SHA512 78d477d731c4c27da73eface13bf1689e462e603265a8a9fb503a14209f2eca206386a08046671ffbd40d8ec29bf356fccddf89467a9d0de813b93edf8dd9774

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1129.xml

MD5 a785d97332011c3870372928fa77291e
SHA1 edc04792ecd78e16c8d804896fe0f06dacb7903f
SHA256 d4d8c7f7b65e1fa3c6055d48634dc6cfb86700dd17896da2c6f1646c855d7de8
SHA512 7429b71f5386c9b35a03e461e953900fe35824a6300fd7180bd1e477072eb8f062fd07094bf1a68f0c3ee609c755d14bed786e4fd1090e64231927688626c7d2

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

MD5 2b0bc3d4b28b37889d09acc741f4ebae
SHA1 060af238652083cafa7c43d79ea457eed8570429
SHA256 145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575
SHA512 459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3

/Users/run/Library/Caches/GeoServices/Resources/altitude-1129.xml

MD5 a785d97332011c3870372928fa77291e
SHA1 edc04792ecd78e16c8d804896fe0f06dacb7903f
SHA256 d4d8c7f7b65e1fa3c6055d48634dc6cfb86700dd17896da2c6f1646c855d7de8
SHA512 7429b71f5386c9b35a03e461e953900fe35824a6300fd7180bd1e477072eb8f062fd07094bf1a68f0c3ee609c755d14bed786e4fd1090e64231927688626c7d2

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

MD5 ac74edde8caf1d230783448b3b4809bd
SHA1 db67b66b5b9170a16dea83cc3c81c145e1b72ba6
SHA256 40a257fc6d3fe0e0155e8f68fd1c9855fd88d06e0af32db42c49b781baeef740
SHA512 66f55e3f4688598721f9f4c22b49c447cc433e25318a3db86650c70cb302976c3d6795baae30ac0af5787dc83e67a2333540d4bf822dac29cdc4e452c44db492

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

MD5 3d517322c77fa3d3a2fbb22f58b2913a
SHA1 cc5228a0c0502e20e5ea65baa922ee30756d4235
SHA256 a17f753ce5fbcf78d2c8d8ad80fe6ce52d93999353b0e4fad9878a1e7f80f438
SHA512 d2762b111240f0fa1f53dadea9d78a27fc4fcd09de828bdda283c11c9abb3ecf8c4ec6f32862fec364552f85e8027e10589f85495ada2afc1b4c48d9f0e38b7f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

MD5 cd94976f4972074b9299c45f35a683f2
SHA1 dcaf6bd58935bf62732947fb8656460859076f9c
SHA256 17906e32adf06881ce552dfe18a503020a9a84157e7e0c4843abf2fba144ee06
SHA512 29c5fb7e9ec4e1ca83d2c0bf34a887d02d57125b98b6a6ec403ea9a658af52af2c02e85abaa3e65b60e34d7b1fb60aed0cd2a7f55a8d7342b2fe9bcb15c34b22

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-37431.styl

MD5 140c50f532d95e96c5853ebcee5818c1
SHA1 60b9963cedb2a0b03897ae1f6975702c919ab904
SHA256 58f0d7c41ed5bb8ad999c56d1b0ef7141f2268fba4ccebbe0e0714bd76fc8e2c
SHA512 87f2bcfa2184aa6819cafa875a96c6078ebaf2d3fe18f4c457fafc9660450827ff400d0680cbe40f46c6bfe4fbc84f8c6e40df73a27acb32b1bef31237249f3e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 8e0d403b097fe57928bb2261267eb327
SHA1 83535c08ce2734d36a3bd3fed221fec00aad1948
SHA256 0a96127e5b3d2c4f7c0fcd66db83afe4fa830122c5cd1fe2e173200711f1781d
SHA512 86adb2eb07fb2ba62c48f1446ec1e7cf386390eb4ec45926149461973713d9c29609159bd0e881e8bdfe7e77dca8fe84987605766b12b75fc87da3c2842a988d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 dfc7a4218f2cd5886e3fb39027ec3233
SHA1 338929a333b9f37460e3c6aab2d45637d0ab96c8
SHA256 ff67bd3c7eb1663dc188c38088870165189194607c0cb68328fb6cc9807bfbe0
SHA512 a68e2eac3a2d3e797b0d7fd03512953cb895857b7878ef09e0874917f5ce01b2135926718e95590f5c68ca573c8ddb98421e3a1304c4c4f422ebdc4e5364abfe

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4227.styl

MD5 ee603470238923412f180c710806631c
SHA1 c2e773d813dd8df0c4d5f4e3313f2621b88c887b
SHA256 058a51b13582cbe28352355c3aa3ea8785ab99a64d2e5ace4b666f8536120462
SHA512 0a7884435696e0c3ba66bf93755398c2b8eba8f5f6997796868973081017d53985c444593d683b4ecbe840fe41d84ef97797bedaa465328bcb327695ba5ebbb8

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-iosmac-5136.styl

MD5 98ca302cf5f41bab347d0b7146940907
SHA1 d81498eb1e64739aac170a33500e4fdc13d0c471
SHA256 c842c016a9bef3a63d5e7f7ddee841b27b885b84d03e2691f2557674d592c628
SHA512 4ef8c57426344efebdb0c2fa54f91f433cbf49da603d4f9121cb5170eecf180cc4d26685b1f2d9afafbbca6e1d1834db945d90d3b976f640ae83f60aa16cfff4

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 0327c6f63487aa0049eb15215355cbc6
SHA1 edb80fde61d7efc62fa9d4513234c228e5876deb
SHA256 faf28d4834a7b1a99fe0b24aa356fffa52ca8e0e96bff1e8973035f31192f1de
SHA512 241f56e8b3e554e67d7464dc88f4b20cee43ec3a87bb7013e5e53b1d29216256f845f63d00193c09e19f07873d6f4fbf1be20fdfbd7551e38f86a4976bced17d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 9948160c8def991e8596ee2ebf13b574
SHA1 27b9f6c871f915cb3fc8755c659ef0cb08ca7fd4
SHA256 293217016504f61cb2e2a310d1d39cd0e39dcac09c0ccd24933dc267e097e246
SHA512 339d92de76ea3ff266bf5b2ac8c4cad32ff20d31e6b0c676cfbf1168dcccf061c40cbe25d3b8690c4ef48db404689188b39ef124c3a97fee2974e210542c0a29

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/globe-default-6906.styl

MD5 afaa34bc5121263afb22c84473ee1e3a
SHA1 37f7c576adaa7ea7ac8938b8fc141642b5f6e972
SHA256 ee359515ee4f03f87e174113129b7c980611d8bd09d5e2de980aa36f4afc3ce1
SHA512 766f4aae539567334338b287aebabd8e6a74914694f6a0882066d86b2b60f16958cd2898e71af8ef08f5e48d7dbed5d0fa4d6eab965186583c79882aa857f89c

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 a8bba24e44b51793f7e02d77412a816a
SHA1 2c03b5f2469941edd0ff85f5c0f375d7e0b65c30
SHA256 144ae7d30172eae2fe1c7abc694741b68b953c2c51e6551fb7e9b76eff856a0f
SHA512 7cf300097a0a223f676c9059167cf9eb867f7ea5f36a0cc359ddf31df23db258a0d3acd9875095c116a4ce03fe7fe4cf28553d00d1dcf1871b60951217dc68ab

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/globe-default-iosmac-1810.styl

MD5 d8b972b072122b0d65f5ea5739dc7840
SHA1 12a84060ac88c19f88549607ae4748e6b4bb8468
SHA256 89c67bc94382a5280da96c873de17b3d947109482b22d7ba82f2ee550268250f
SHA512 d944b04cd9eb541fac9e4f6e924cdb927dc24d1cd46118f5a705b97aaa1c98396fd51cc3ebec4a56c032fa994a45263509e454d05cf71e928752d224783d5062

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 66deb6f7d22f4d748bf95bb0a1574c9e
SHA1 8cbb0aedc81b26dcffd0783bda6f55aa72659336
SHA256 517d5bbf8892a7b0db4968ac3e034a63f6c4386a6ea2adff7cf5e678874029aa
SHA512 c4ebdda3e696670251897a7597c77922658c97add494ed8dca041ed6c59587869f3f641aee69431d5492a6ff403d70d2d725c6b473ddc76974436f2457d6d0b7

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/hybrid-7159.styl

MD5 bc1935609e73a14ecab1983c7a504f61
SHA1 05a1ab4e96b0ce9e555f13ad659d0f52134aa90d
SHA256 bdf62c4de1c5973dc76528543ed2bbdef60e68b67ad862dc03cb7e7cc0ca6953
SHA512 3cd43890bcf424a1106df2cd47e092fb2117351be8f2d783b5e7d90015c183e15b9a434d31d58217d6037812a3953af96f4a6dc91fd8768c0e3420f90b13cd7f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 c22b5ec494c24fb8e0ad2ee84dbc10f4
SHA1 9ed28115fcb3183a2f951e2b91be71491f66bc38
SHA256 61daf97cf7c9eb7c364b9540b32fe907b1a292c41e5c0731d07c1e7f5b9319a7
SHA512 4105ea78f1dab3ff12492e7be399be25f3df0a4c90500dd74862335df1959f3d0b56c690a798321e851b1c3448b2c29f3abd178ed1a9676a5d686dd16fc7f3fb

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/hybrid-iosmac-2234.styl

MD5 27bd040c0428f3006bdd6e732c867e6e
SHA1 bf5a2954266c821d8fb6163f4941fa1fe2806281
SHA256 429fc712842ff6fe61ce5877ffe201e1c21a9cacb1d1ccaa0fe00bbd39ec455b
SHA512 cd60bf55181a71bec3bca264767963030ada8f468774a1297723b2fb44f2632835b29e2932aee3502087159492e307df3aac5c42e0d71a524aedbc1fd3579c9b

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 5e564a41c1ef92f11ea59711af2fabcf
SHA1 619c01da01eb70e10b221e30e8003437b135f9bf
SHA256 6da81fba868189f37d9c684c382d49b2b9228fd4772392a41a836a92af6f71a2
SHA512 1cb9ab4462ed5aeff362d61fe428be30065f2df90c5549bc3fb83e05acf5248f0beb137c186ba728bd9aaa7d8a211f958675c978334baecb0277d9f1694c65bc

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-16526.iconmappack

MD5 076cd173ad76039788e32d517284be9d
SHA1 e3f74a6378362c72d558e66659f0b2f92eca5f42
SHA256 5fad507e12e491f3ca1caef60d69f0697819532b0f176a2c4bfb8376633eb5f0
SHA512 927232e970207bd27d499ba67a66891b386f78cb006132dbeab268bdffc362e0c04b6e74061e9d7e1f5a47e589d8679ed41412b646fc5712d96b476af524ad04

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 df6372479bc118b8024638aab53488c0
SHA1 9c65a312f414baf5d243f5f7ed09c0c1f3dedd74
SHA256 74576dbbd5710ba17a30c7839e2fa5745898931993cf2d6039479193cd56f405
SHA512 4dcdccd4028ba6a3df927f161120958e6376565587a304f63b4e0584708bfec699016a2ddfdd4fcf6207d01e842e4c5022116889fe62290bf8e34af799a7cebf

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 557afe76380b5797fc9d770858dd3251
SHA1 5d37da00fcff66ea594151d2ee936df02348195d
SHA256 7ddee46091fb071a4137a6e691bccc084e552cf7346ddcc9408df6800452705f
SHA512 01302639597b6d561e24a75b0b4e543d77b2a260894909f335ccde58b3d585f2d87eca432f09588f91e6cb501c15ae784a451bba32f64bb8cbbcfdb324dba99d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-15660.icondatapack

MD5 0c6ce5c35fa7d997fd804bf55aa15318
SHA1 4265ed3869a99ced0275027ff42f143fb5d9bd93
SHA256 32c9d71a301b990cff5a22eaa0efd959687fb6ccfa4902995e9ab196c52de6cc
SHA512 8903d1134e6e31cf721d55eed49dba0092dfa7a859f94c976d5acb2fd74605a27424170036aeec227fed4968a45978947c475b3986f1835dabbc5f8bf24181da

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-15784.iconconfigpack

MD5 de5648917ccf1e6204eae7fbc37c40e6
SHA1 f2cdf8f7a6c9562c44a17eb178a256449f34f33e
SHA256 e5215a3a65f3f1055c0d0b98648c1949b060c7ba0c6d73b70352a895ba7ad60d
SHA512 1e396765e38c0c99e24618d05c95c077e299ab3aaefffe24f621963aa48e0e83423248b69fde8ba85a9aceb7e40622accd06a65aece7b627937890f495c3165f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1534.iconconfigpack

MD5 e3941a6076ca988c35d21d5284189088
SHA1 90ebf9c6373eedb89f8b0a90cfdca3a880dcc490
SHA256 73e2c7be08b192da38bf5895b6993a762ad8c2dcc96601bf6c1062e7d4db2000
SHA512 cc14f88de9ccd75597868c1a0b9bbbf21b36d3cdf08a10b07d2be064cae6efd504155e4cd4a232b757ad0107c4d87067f46d4fed5ff8aabdf7cb06bb27988c5e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 c9756092d45a009155e58196cd50f1da
SHA1 adc42cc848a94035c010dac860e87f2c77ada7e9
SHA256 5316be8838a9dfc1eccf98268ae433adaf2917ffb61ec77413396f2f27ebbe69
SHA512 d64c1f19f87ff75aad0f5eb7c5bc759f9a7d1a34e66b4176eaf522c4e58a7eb45b1b8093dcc1e35ddde2693c1183c0bde737804b40c211e01f63fc233bc123e1

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1512.icondatapack

MD5 38fb1145db03a22582ca240e1c9c8a53
SHA1 b69c653010ff0e722727a5192923fdf5f19e882f
SHA256 71c4ea79fa24e7684941022da673ae487e9233d16f77f1deaab3592ea63b2319
SHA512 fbf6a0a4b9d239f4d16c67f455bffa8695ed31e1712c971273472c0707ca4733ca7ba435fa7fc41bffe73227c5d8571a8da7d0e385f46287e58488d41cd4092e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 d2348dfeeb0ad5d1bd97a68a559f00eb
SHA1 eb309b1c5d4f4893986cb6765be133a21aec4c11
SHA256 02004133d7947a446954e09e5c44cb39df04842fad3d72ddb0ec6e34a2153539
SHA512 78d477d731c4c27da73eface13bf1689e462e603265a8a9fb503a14209f2eca206386a08046671ffbd40d8ec29bf356fccddf89467a9d0de813b93edf8dd9774

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 2132a8ae0b7a999c8a65f0599267c791
SHA1 c672d1b0ae4ebcec24984a56947d635fd88250a1
SHA256 ae1192abe059e23bd4991e4d5027b614c492a286a7397070f2b6f82ff93bffd1
SHA512 48568c9e1026b711d881f839c8977fb0065a18ce6e51f1b13ccb945c5665542cf2403fbbc18fb8b025f26ad6874f1fcb4f48eda271c6af46550e2a9d9c0cb063

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 d4a87d800281a3fd1be0be751783faa8
SHA1 f6ecff86a6d4614e735e216b0bf5c6bb5a54c1f2
SHA256 58cf2c5e14c0bba2925569ee0cdd56f0f3a5044d7ef8bc29ac60f774b1a921dd
SHA512 ab365f01080ef917b8a8e0ac62c9f42b09075f7405239b9863d700af1af9a435eed26f1c68253aba6bbeb80184f457694fee601828b2e4dfc94c7f94d37f123d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 fe997090620cd622068d308e9c47c14c
SHA1 375a9b01ad2e50fd8b00dbf8e49dfb3c83520899
SHA256 51ebd12c0d405249f1138d46d56e46cf290bb3be959c6bbdaceb6723e6bc0335
SHA512 0a8aed8fca96cf2469db2a91cfdebeb61c12e0c52e27231e25394afc93c8e8c5cb592bb01ed7d63fd8bf60dba87200c73f038ab48eb1dbdef7577f9f93edd06c

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 297bd2929996f1750a38142cfcb57395
SHA1 7b5aa2566fd1ff7dc352f3855e8ced64ebea2ee6
SHA256 020a54deccb6576656edbbc92d8e6eb518fe04afb3895066a3fae8a534565d91
SHA512 f94da5bc95bc6f08bac31711e82f7fa178ea675ad48a09bb71151c0bea1d7d1a15339f5b0698219a60e6a73a0347816244208685c865ba82f448538c81f36dd4

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 c4a0dca0681cfdf6e86ce073d92b465e
SHA1 a584f3d28e3fab8cafd68a9c21b961f06b46b921
SHA256 17fe07f8be4b07dfd2afd57a1c578704585371e9045ebea49cdf59108d5dddf9
SHA512 16bbab0fe0820c071b9f06e6c9a8aea1109a5c0fd9ad07d3d95f035e74d42653f3bfaab811f3219d004edb93719b212fcc00b2732477f949404762bb1b3f4b65

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 03d1c319914f33dd864848b44703fe31
SHA1 f426b7579f109f4bcd59829bb8a044201128fc84
SHA256 d9d863e3dec63e95721dae233ff05f8d423ef68a12b04a0b93a0da732994c038
SHA512 93e19a59993014c3ecff2ac5948c4795e4c06cf6e4d9a4a9a316936517967f748ee2ae93f427e49add941c18e318aced591d2b748844d7c8d9fb67b82bb189ae

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry0-2.png

MD5 4dd092255f0cf7762c009ba66c5cce2c
SHA1 c76348b7cfe1ca2c576e50a5b4c311e5dd08f522
SHA256 7921a04d4c788c3a0deaf482bd859a51f34a0b14edf063041c27a9b3bd61b1c7
SHA512 cc9a73c3754f0161a279bde684bf593dd9a58ec079ba117ee1f8d598fa9f60aadff5974db768c68f6c060065e66ea8aa67fd0a96032f48fa919d57096a3cc796

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry1-2.png

MD5 65d95f4d5c6c234a5775b5193c912b17
SHA1 2393eb5547e89690db345d10bb5d8ed2e194ee49
SHA256 f264c39bdf3a7d7c5da9c292d7978e3a7c206adabbfea8d0c5cb0c25995ab9e2
SHA512 4e176f62811aa9cbbe3500b3ca7b32245a2e370c18c5b7f49c257de25cfd25d339d0b2c0c5262b551685b97fb227055f907b929b88ead298f8c2f761f1b15eab

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry2-2.png

MD5 534a889ee9992400f3958ddc6bd61503
SHA1 6d690a52c6ce6d6eeca92edcea040e01c575e757
SHA256 c8c911e6e54f8c20a68b0fb457d15ac8c9727e54b3dc11ae8f4a738bd26aefee
SHA512 4c262863d236683c3661a71ba8d4a15af42958a67b598845c5202f2454494f512dad1b4a2d76c06afdb7369139d97d6bc942beae4f38146729f4908e53ec8b21

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry3-2.png

MD5 d3af80b3f59c83cbc0480e5a78dedd92
SHA1 347016bce6bb69e6ae71ce5e2d24b6f61dfed12e
SHA256 45d718eb0a7ca48291159a8f990c2afbac83324e2be98602fc49cfddf85d6a32
SHA512 73c0470ee95c7918c8d550837dd8953cdfe95476ff864999949998a0e2905bb394e083a309d24a76136dc957b25d66a583e83fad3477c1bd5a31b2b3433f878f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry4-2.png

MD5 7e85cd8922f183f607895eb74d2150fc
SHA1 82c1fbf75e893bfda496ca28cc8cc515d048cc67
SHA256 d815107add6092e371890e9c28974f5b7998b8436a38a5faf4cf4debfefc96da
SHA512 d8102aaa332f0664b3f06755f3c3e54749a16a4eb2cc1ab5098a2df4579abeeaea7fc7bcaa66acd49d2343410428ace36c4097c7b606c32123f728b58f39629b

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/cubeMapQuarry5-2.png

MD5 534448220358d1ce642c6c48bc7e5e8e
SHA1 6f03789d3bdfa1d945cf0a2d52f87321268af9a9
SHA256 14208e791b92a1b13acf7f4a625570e27d00586acb2ee8af16070a6758337f05
SHA512 c683901413ed3cca606bee66acdef36a773c8c56715a76091f0ec0d29f93b5396036fd6a3bc85d5c403d0fc2a94100e76439141eb086279a9c707bdc1e37eb8b

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/CubeTestGray0-1.png

MD5 f6a73339938629b2b27fb139aca778cd
SHA1 ff7f4c21ef97028b95e730c6e5563b7100eec8cf
SHA256 64722948bb5b533554cb8edabbc8d0fd23b7082c1e5375cc8942967dfc2ce3d9
SHA512 8a4b978b01bab733d28a749dc6ae972d02bd609b8e4152e4e316cd0e3d2553027127a9a192f72cd58735263da863047af09b7cc3904d643e5a0e588372d16c01

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/CubeTestGray2-1.png

MD5 fa8ece74c230b90f6282b8b1c68960ca
SHA1 833640aa9e61129cfc85e594bc9ba5f27835f1f3
SHA256 6e9659fcbc77c106b368253004653cf2a9db03e2d5899f43e3a89e0f9158f343
SHA512 7189f3fabf7f22377d257aea4b2b9e107ffcb3893248252684f596e2e1fe67d3004abd493b23e7c3ca17766565c63d03943e1867c82bcbbc1291506c5d965ab8

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 f50b555129f0542a00f0cbd91ee3e511
SHA1 e8f039000115c17520eb68fb3cacfbe11617874a
SHA256 4f6ad5322656131248847f7c240aefadfae16bdbffee6c99e62e2e9cbecef5a4
SHA512 82c3e355b8ff08b02c85eaadb8a27d0226f102e78c4a058f45f6d332d381d9407f10278ad348c4d70215d1343a44f78e5d0ed6cc0a450098cc2dcd5e6488690f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 4feff3021b92bd7a0417c387db1fc70c
SHA1 1c43e35182e6211c6ec1c1c39f0ce1963a6ebd8e
SHA256 2c010c0720920989c7b8caeae186891ee57698769d5f893083d20bfbcaa09ac7
SHA512 db8c3d56fccae024570006834610a56419b406a61f41ca3b3765e4e4dedd8cf5547530e9135784dad83b3cbdb6825850bd59ab6df68715b87b55bea729f45a7f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_Botts-1.png

MD5 5ff167fc6e5d55db0c4621ff101e98c8
SHA1 f2f772908ab19a0e4166efd37858a570218954d2
SHA256 25b067b4a11e1f5dd60769258415cdc6be74d9531ae51373dff60ba67e662c96
SHA512 87783f382c6ed8ba60a76e286c07dc4edcf006f4388bbe6257ffca2b2f8d9e0f22d46d917d5c1f68cfd48511cd0c763ec7018a0f3830cf12ba6eafcdb5e1fecf

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 4f7066247a4570d32f04a49d7e318943
SHA1 1b7f4dc68e1a1e33e9388257759b95fc4063542a
SHA256 cc1a12f1172278a3a33ae73f68ea5a93598a38cf39565b5a40b23d688c158969
SHA512 6f104304f671167b5c5e4fafa1727bb8545cd4c08e4972cab116f1e1528bde61665c318f080a08cb16abf0c0b088b22685d97b6573f15bf66dd171a28d573239

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_Dashed-1.png

MD5 89ffa2569dae82385d46c18f7f5dd0e1
SHA1 1a9901f7e95fa89eb666faff9d28b100d913fd44
SHA256 19bf94941af9996e079c7f359258f36e59f8a2239c94bb7120fa871534b7db88
SHA512 5fd055f7522ad4e0e0a642eb36394ef143477b7f51a628dd9a66a608e70fbf6dbec70cba173cf8ba337dc8def896652bf12c79ca5189fa204bff9fb490be3b06

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_DashedSolid-1.png

MD5 1fa7ba0a27e1efa978d996f89bb81c2d
SHA1 d2fe095b2fe32c4db12c9aae84fecec03878a870
SHA256 243c93b1333d20260667046ef41673afcec0056b1147119301861b82b5aa2992
SHA512 eaab25d7950a33c52c118468d49ee560aa148bdb9fca6e7b7d963e45cf5e13932c4237cc1afdfd641efd4236197cf8267cb64864d8bebffb5851f6eb7a8cba63

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_DoubleDashed-1.png

MD5 82ef1004e34826f282a14ec1def2769e
SHA1 8091156ef87892e0d439f637f9fa478190f1450a
SHA256 ff7c18b1d9d3a078f91d740b9187d39f2023bd26fef320ea25d7ed12f0673510
SHA512 beb59e095a9d436d57cd831903d497d4fb377e3f4a4976bc582782388d60c91656eec2014417c8fd770a7b1a80466180a8e182b9a370177e8b2cf3deeeb869f3

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_DoubleSolid-1.png

MD5 497e916865a00ea8b74e2afb4b3d1979
SHA1 c4b795595a6b7e7f31be9338ddf39db0f2501047
SHA256 df26bcfd1e3073f949df8d5a9267a78314e0985b51532bc2188df35decbd902a
SHA512 ab07e249c04b6bb42fbbf33d5433ea587d7ac77b2cd888a5cb4e8c2ae2f6360b22ece2fb29958290a00eb56b6db05fc43f1b07fed41c2d48c5a404f4948bbc67

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_Median-1.png

MD5 36aa24a48b25fb3458e1f57ae210abdc
SHA1 acbadd1be9f758b0459f9309a7a0777048386b40
SHA256 b2bc9c85628438cdf7c9e6845b7ddad2893f02bf5207e010395f33227eb509dc
SHA512 98a6f207e7122aedc9600b214cc4c8f1c75c7ed4d92d2cd830634b4c9b1df77f94d16a9b8c36ffe7c57be0a7121df1efc36ec0a759d48d8a4fc84f1626a62f35

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_Solid-1.png

MD5 dcaa217cd57ab02fdbfd907d111f8ae1
SHA1 3978e9af78cafe1513cafce2ef27c8ac31fa0c15
SHA256 2b218a195ea731cea66b938f9bfb9ca7b96efa747d09ed3178981eb956f20081
SHA512 b4cd29d52ee44cd0408ca133d4072832039a4c046d5f36eaddd32ba584c014f5dcef9840b718094bf0e89cfa29b39bbbd02db303ae75beb3ab6783fad4e41fe5

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/lane_marking_SolidDashed-1.png

MD5 7c2349fbd8064491c577dff751d150e4
SHA1 f54b959d29dfd4b99c5f76eb9e66eb660d43a6ad
SHA256 0c1dca1cc23d83fcb68abf2149383c2ffc152ebe0d7889b614bfeac7f406e72f
SHA512 8670be33894cc67b3bfa0d35d045c6d90a6a013ffee6951ed2dcf0fc705552411ce8d94e2315e9ba4a8eee1ebeded60e57cff5f0dbea011b50bf787f74981517

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/stripe_1_to_1-1.png

MD5 384d83f66bd788ec26a19e6f816ec910
SHA1 4761c8069dfaeb45f422d7e6aae84e3334046c07
SHA256 e9aa4b648deef8610b11e9f5ec40d32b6462d472bbce03c741d03a8ff3b9502b
SHA512 cd168d06ae7b7e8ee5af4c5ecb751f7c312028771a25cf6bd28990d39b7e043b0cdc88cfdcd4554c33135a53e2be70aa10f6d54cb894acba99a66c4761d2a507

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 03d90dbd4819083729c8fde82b9a99b7
SHA1 701a0d4aa5658e0a9a72892217a84d3d96043910
SHA256 f2f6cf6b954637d6ce0e5f246c8863fade52effac3927927837af004e65660f9
SHA512 efd2a2fea7498af7b592e90953b1be613e2dd4782a4ce25bf0d94ed9f4060c5a302bd5ac1154fc7c80c6c5c8c589ce50b8f1f3ba5eb8dfb49813d831428ba37d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/stripe_1_to_2-1.png

MD5 26a0d536df509e5201609196d7336e60
SHA1 146181dfec9f08940646256c9e68e7497cda0c36
SHA256 3157f22be1fca760d2f425cd63fa7f58574426fae0d09aa050ad7a915c09798a
SHA512 db277c6490b8c7f2bf4b9b17a8cc3aaba533880b7a96ee890cc15996c53b04c591d7409150f30211673bd5af5403ba8cf1d7a5deba730ba23512490ec7688936

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 674920bdf8930ce7fe897a404766ba9c
SHA1 e9ea010699ea1cc827fbffcd4df5ba9b0bf630fb
SHA256 6d91df6957ff0e8b03862a810477f68c70e85e9f104f2077f7abc9f20f049215
SHA512 4724199cac497a02fd55f51e32348870faa36647cb3b262ff39a580288cb5ad39a3c17b6316032fac0b4c00abdd52931e1b15ca41948a5b735e6fbdeb6adb135

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/stripe_1_to_4-1.png

MD5 5b774e159c5839a8cd1ad617be55e1a3
SHA1 a1c56336c90ab454daaf2307c44d46efe9ff00c1
SHA256 3bbcd6969f9784ea47114b61f9c3f90850f632b5bbaa785df7152a5edfd1801c
SHA512 4d87eb642ab31b30f3d1e97d1c7b958ee624fadedca9687c5f95034e5a63f02b51de93f69e5ed05eb96c65d395b885d258196386f2311c52000cc108c2a4dd86

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 e69330a8cec0755bad797623e755a4a6
SHA1 54c8e7185caf75fe8f9f43f304d94fbab84e37b2
SHA256 afda7019263e0999e9b0eb50fea4cc53b75ae826fdecfca5b3b4a2d733622e9c
SHA512 c8972d4d9f5ae36b05c3a9209114f2cc5fea9512f6cb45a9b0496527de9b27991d5bf5ed6db11a827730291dc0a7cbb4389ad1fc0bf8e3351fcadea5a56cd497

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/stripe_1_to_9-1.png

MD5 29278dac461e385abb24f037093bee03
SHA1 2d0e671946361b3c9e1b5761a9fb09844a0061b9
SHA256 0443a0324454d7a44da6ecd616a530a98e43c6186ff824aee6ab7b6d912faf08
SHA512 3a3c8e5504a26fdaa35aaf5e9021a0a24b6a016813ff9f986a4a665ee227f5f6398528fd62cf75bea84c7a9dc8d4693aea4f4a72bc9ee844ae09beb62f23c568

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

MD5 6121a1e2367e67c183f784da72c20837
SHA1 e71a20020fbcb9e76bd721299a85d83a7f462f93
SHA256 2779c94f5702af4fba409508ee0ed866dad14086db10c0510ddaed49665efb61
SHA512 293d4d504361c11c285cb616405b6a3e291e78eb5109383d9bfd60ddb34d92099b2bfc54aac8e6d543acd25f027765725ffca93c1708c73d480cfa9ffe2f74ba

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_BL-1.png

MD5 e202e6d88290cae91a5ca77b80305f54
SHA1 921e4e3f94afbbd337dbc007e215777566edb87e
SHA256 ac555441c03f696a8a36deee43663f3c142bc55fbe9874d26b97a91dcade9e5f
SHA512 6fedd9ad83908048c0fc2d0f81d59c4ae3d4f8e5666ac264aa16d61ab277360a48c3b59f05be68881b55444d641a4c5e784e099428411528dbd12952e679016d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_BL_R-1.png

MD5 0862f514817dc4cc571ac3a0384708fa
SHA1 e44265d4d047b33bf8e8123b446f84fcb7b7c41a
SHA256 6f561640ecd031e86d162f75b19671c97f2b1f1fe0ce1c8abb85af68505690fe
SHA512 a6cd0334d11088c26442e33c73013211e903ab67a67d93db3934931404012f259dd06eb982c1dcd52185bf23623ddb42655e1c70c6da494bb72d1a333a16c270

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_BR-1.png

MD5 4adc82b430d989dfc4c35837007f509f
SHA1 fa47b1ab411a9d55d55cf97c7a6ed4a47caf1b62
SHA256 9e3364d5e21a7100a75f9867461d72a36a108916ab2fa8d5aca68d0b0e816abc
SHA512 f57bcfd567c049b71b378001d6e131dd9a32184eff9bb758af6f264b6331f5cb4511326e25524a16bc2bd909b4da4755eb8395b99900a6d0a6f38b7fd13cd755

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_BR_R-1.png

MD5 6d34a063db9e327e7a5386f59d82a7f9
SHA1 1606caeebd5ddca2cde0b91b7ccdbb1db969dc4b
SHA256 bce204fc5963527ce9de5fc17c01c7dc056194e9cee1d7b296915be8e23ba5b4
SHA512 1fde804542e0fcbf29666f58578681e5de5e4c3da1d5de42d0c4936776ad2b3ba494a00795c906ecac41eaf1134ee9b4e3d8656155330fe6bba3764e47a816d6

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_L-1.png

MD5 d168df73f976345ed165661ee6887458
SHA1 61f032470c03498888bcc8ecebedc9d562bfcf5b
SHA256 13c8d9683a4ed27762ad5f162a1e23bc865e1eb0a7b5c965679e21176c973978
SHA512 3b052a3f8158bc8c9163f5599a5b135d3c9c0e25e80fe4b552baee89c8d804c9962f39395d997b1d9abdd29c62284f32e43c98dc6db169a459dbd66f7eb94033

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_L_BL-1.png

MD5 6b6752b7fb853e5bc057866cb52e23dd
SHA1 0b91ee2a16249ab6358230ab75ad8b7afd1c5e0e
SHA256 10259fe35e88f23558706c463dcbac48cc23a7821f2c270b5a429ea1ebbd63c8
SHA512 830dd50aeafdbcd0a5ff5c6623877d828502f191c7b2c2dbdb435798691392bd3b98cb59c4cdf51b22562a0292bca8b84af7ca4cc9ecbcfbbe4c5ad685a02b42

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_L_R-1.png

MD5 10ccf5aa3df37f83d237a98437593b0c
SHA1 e2ff63de90dffce12cc3c404d74e74bbb302e223
SHA256 e69fc45faa4dd089cbe49462e2ff825b1e8e9522812bc96852367aded506bf73
SHA512 ce7af653091920a19b2221da1d710a9dad60aa3353af61cc2dfe0d6a629089e95604d6c0b047c5741750c5b9d3c371e4a9ad7f12369118325b31252b108105a7

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_L_SA-1.png

MD5 9647ce3e7728294b4f8c8ca1a1cae6ae
SHA1 ff4fb69676ea83c8684ac130bc7ea145b0b6853e
SHA256 343f5e5fd50dec3f2070c30fe2264453403e355359453c78ead0655e700e0183
SHA512 8d4cda072728eb56ff2937b17a6c239d7a4b8e9344b9253fb92e87883c846fccaee04b110f79cd5defb5c01e8ccf97a029892db65a3335df3350ff1f35c0ce63

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_L_SA_R-1.png

MD5 d1e33fc5382f2530253250ffcd232fc4
SHA1 5ad2a3d1471bc7599862bcbe9d06ed9d47a84ba4
SHA256 faa45879872dc292328a3b99da8f035a0e561bea65d946bc6ab3c29dc0596154
SHA512 74b0e8db412452d3d04269f3173e3ecf4ccfc3ca2ea0f7717579cf23f61be7d4114130a3512139666fca0efd60cfb6dccdea1d7212313069e7e593bea9299392

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_LU-1.png

MD5 053932e1ab7bf2e768156b4550a45c73
SHA1 13997e4f01eed93c9fcb78a73167dd8b1ba4fca3
SHA256 42a115f14b25b649f42099d828becb9ac5b74ecf7487b08f19400790f8fd1906
SHA512 ad9bc859d295aebf4c80a3d78e5e4f6304346bfe3c9022a9c812f4ddc792943d11415c2a3ef65e4bf15fbed177d2feeae2f7d555774bc27827a0561d6ac3aab2

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_LU_L-1.png

MD5 86dd39c80fa378fc7d046e464a9e9ad3
SHA1 f7ea66ba107cac9b89d11f64bad66980c90c0904
SHA256 5ad8a57a8136aa3a53acc9222ed0c9d521f6f6249e309f0d4d6d9cb006596847
SHA512 e8d8721fab748a1a05324d86ee731da63e06863c788ba46e548811737c1e937aa740b3200742852f689ea924dbebc75020fcd63b41ba15860dea236c9824b284

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_ML-1.png

MD5 d4a4390fa1956983f6c0079b4b3dc813
SHA1 effac2a9561d0650b2051085ff611de884eefc38
SHA256 6b52043ba8cb58ddc755572e812f57c57e316566f759b776a87dbab99614d157
SHA512 d516515cc09e466d9407aaf32123b4232f9be6fa007d2619eb4da9ac466e597d9467dedc0d037cae590a61eb3a22f404db363faed3ca07068d840bc54776f813

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_MR-1.png

MD5 8cb9950176672ac54af8f0a4121c5a12
SHA1 7eddfcf110a5865040dcd3128858095bda633f89
SHA256 0bbe1722e4c162b0b722992c8f6691931d342d25650e5f2a75471061e2a8545c
SHA512 f2e5cd92cccaf000dea336f93f7e83b56384beeb2f31aafedcd3764841757dc378fa14164905715f3eb0d58a80bb22d92f289f0de2c371b8402a697f3a25956a

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_SA-1.png

MD5 b6e6d72e76d7094b9f307bec11da5ac8
SHA1 219beeb4dffa5e62de29ce96e3a890ac0d9f2e99
SHA256 f0eb07d893b8fcc120f8434b0376ab4739b7e3a5bf1e69bf8b4dc87f401d3555
SHA512 5e6bccb23551e2282d31fa1c7a8711ef7e30c0b5f1c1c81b2576ec0a5a4f2c834157c6d148a5da60b83b2d433453190cd538bda9755ff2dc77b787388f293dfe

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_R-1.png

MD5 5366eb7b8dd4d42ca40be9d7481ef1f9
SHA1 d368324a77001ea2543cc3e833c2775f60a38e0a
SHA256 4bcfd635abf3c94d791335c8e8b4afba33527ea3cba61c0123b6938c30bd3ba7
SHA512 45a7bd4a97f3bf5d445e4e800e43d96fc5e4cd47f5850a7da87edea042c9c8f9b0c01b73620b6f11d1019318720892329434d90fb3f997ecbdfccf02e7e4bd61

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_A_SA_R-1.png

MD5 92b90c48f2b2f0f8c77513ff9a7cfdc8
SHA1 d5fa242838352b7f766c4947f5ca1bddc6b98e8b
SHA256 d3013a96eaee1fc5c32ac11f4e8577227c88343374d391f6c7cfbe5ee66025fb
SHA512 04d81b921d410a0027ff799f9a1ce1d0f44b759f741c14a226832fa80412a17ea7e5fab3bae57d837f474825acd28093d935ee67462ce74d28b0002bb88bb9ed

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_15-1.png

MD5 351772934566b2e89d5db0be4aabb873
SHA1 3c16d9d3f1d4aa46789241041dc1ce13c65d9b44
SHA256 8d58c0a9571c23de4dcc8b699d1841ee05990ba55f388fc1c0124e988f6c365a
SHA512 6c7d947d204cb3cb94fe974ce3ce38df253423d6857e66a56b5429fc12e91c6453a3167260518aa44bb58108f0f5ac2b4b7e468f2f11e3044ea38b805f5ca60e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_10-1.png

MD5 ec44793cdf9ad0348ca50b07af33d917
SHA1 3bf1f16e90d817b91c85a95f0d5a86d363919411
SHA256 b39e993ce529cf975e0a9521317a1c801969cbed952e09c6881f233f5e1bb6b1
SHA512 15f9757026291b3dd59e57614149bb93ad0f57ce02113d0eb420eb863a176b111afcb1328cef612cf5971309fc79ac15be7e7794f6857a5dd9bcb91707a666a0

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_20-1.png

MD5 f6c602bf81856bbd2fdb080a720934c3
SHA1 3904be7467edbd30faecf0dbe901e53d0e50481a
SHA256 ea7a5cddac01becc729e6411a61f59c2ca26bf72d93432e6f4b319e44b575da9
SHA512 ef607ebb9a2ffb616175e90f176693a1884b9fa5e990ca0043d87d1113d4406b3be2abec2ce5eafe5fde1e86b5858bfcac41a68c518571d6573b07bd86df273b

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_25-1.png

MD5 9ad5a8fa97e3117323975b82a8a19c3c
SHA1 e62c060314ec651120324309f8a0b88528d51236
SHA256 648fc037991f004123447b27455b9bdd6b02e83433ae2ef4fa315a6d36bf7898
SHA512 3a6ee9e595d118a8aab1cf22b88fdb1e2db6b19fb40f10bb1445766113b2715c639fce303447034b868f761194bafcebf5c3f854906014a3a315d539de1fbc72

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_35-1.png

MD5 f6d997cc61132ba1c4d46c5638c56872
SHA1 811b4112284a15a60e2cda0a3ff66a99ccbfa635
SHA256 c8880ea0a8040f13bc49912fec85fe1331f5d6ebb8dfd512f4315d9d64cb8c43
SHA512 600f3dd548f2f8a71622bd1e5f44912bd0fd7a816f2043a7b9215d22ba00a3bc86fad25ce6e782c4e2efceb4cbd1054071f902a101b6a443f68be71b32b5f5fb

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_30-1.png

MD5 3e292c6732ef0ab4b201967ef2b22200
SHA1 e255373715e913cc53da6decb4693e9a1df5d1e0
SHA256 b88e38db219599c12769b40d3d547c72ad8458ac3e83d35a61d64f6c1e2159d4
SHA512 4863f3bec68bb9df117ab38102e46937f349074f305815d9599318a87d3ea95a7c6e1bcb99f1a22b8da24778755ab3c1a87609027244f3017142d2d84f676669

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_40-1.png

MD5 85b430ab328138c98bf8b8c494d9f991
SHA1 4522dfe9f7216b15f0bc8e42f87fab98db43aaec
SHA256 980bb2c9b16c2c6dd452addda3ae03a67ffee503fdc9baee1a04c19cd595083d
SHA512 9e085f4ede8966ada020c3370900f270ce395a770c759ed0f8a8498c980da980bee287ebe6df38c8c3fb9b46d0be41c54dd133c4047ed0b6cab7f9e0186cbd80

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_45-1.png

MD5 baa04310bee142c100858dd25d58ea15
SHA1 414e8d9f98761855d2630ba39bfcb0f9a616285c
SHA256 050c4ab90a7a7c955f71cc22d55ca29b6320815d665a18b5316a31136508e82e
SHA512 6241632fa3d37b6b9121e53244c66c0dca1cca07afec106e50d8b70d1078f4dd7384885d1db39c433c6761b70298e803c3ea699fb029b191fb91fb1cb01223ed

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_N_50-1.png

MD5 4c8f228afed9dc76c2b3df502f634e91
SHA1 ec96fdb4cf7a3ba42f44120d8e130605c571fdde
SHA256 d8b53bb0d65dbf63894b9b0af4c837c60224f3eda017ae9e1a9a201f9d0fd363
SHA512 7981df243698814ef5724eba5868a314f6c782844c043267864b72221b293aa0f6bfbbb38dbf4ad62665f1a9bf2be77de4f41937e485f1de84a5af87d96b0586

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_P_Crosswalk-1.png

MD5 14e313b32b68413882c86921e26cb852
SHA1 29095904945035a2d0ec64ba4a7267505dfc2f32
SHA256 5e0275509a4d0cc0fcd5fb842ee8511bad492a417f7056b74c6d6a2a1449a4fe
SHA512 ed9e8bbbca5ed5b76fc2112583b563bdabe12917b5c6a7ede48946d1e7435900fc2626f3ddaa1fb44a0ff8d9ad93d093aa9627e98d80a83550921326a1aa7e44

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_S_Hov-1.png

MD5 ffc5e13869b6cca0811cda6ddd513eb8
SHA1 f8ac4df76a402b1b45c6d504169f8478afad0783
SHA256 e5f92a904c36486210b37455c18931e6348d508dd3f0a9168cdf4b4e33a02cb2
SHA512 00bac397b21f421095d7f16d055cd33f0bc34745c80cf030a271653fa6d1c155153865991debea1afe44c66dc075f66f40920bb5ec152487dc60616e9af426a6

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_S_Rail-1.png

MD5 b1b8248df756b9936bd2465d3dc3cef9
SHA1 6b8d74d1d17b6571a322b8e0bab5b55febc44194
SHA256 c34c4e539e63173b0abc54f9cd3928be49a2957e4060e1f8629df69f1499560e
SHA512 c7e6769d1725a2fdea293a33c6301f664c8044f58536126f41c066387a08d0f6bde399dd88e783c03aa24bd3a63259b90ab71ad96a1f002afbd8cf8511e2eac4

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

MD5 50e228ecbd79d67e2010a85277d19b58
SHA1 f1038a0a4c17932efa6eae2a5600cea28efea429
SHA256 5944ad3d56948a752a3f3cb0becc67fc5ffba4346cb40695d58cd396c18dfaf3
SHA512 9ac93fc3ba5491bac5801967458679bd32fdf3e6b6e33cd97147d83a29adc58504d3c6a98806425d343fef62b9b185c4a1dcc3089115c6d2635e8444e8700c02

/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

MD5 b2fd3b12e75df1efbb824d5e817b7396
SHA1 559b3d933a88002e6e0e1d4fe7bb558db734cc64
SHA256 8582a0ae1270e8a88552778b1ef2c1bb0c3284d91ce58b10501ad9fcd54d4122
SHA512 cde4bb58fb762f5e562f146c337d5f0d0b1c427de9b7638bc1ea4d3508b8255019d8a0a3f5aa6bbbfe051cc35b90d5a69f59307b5f2de2a150d73c22aba30852

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_S_Sharrow-2.png

MD5 9eb0fdedcc8a52ea8d86212ce636b2ab
SHA1 31cdf590c7519b79eb67eed7effd92a7113a204e
SHA256 423aa1c5cdc0332bc1217b06958d81604051c783c8085e3a0d63f51f56d1f567
SHA512 972813c57356a744c1e7ffe671d69d1948f9f5f8e65064418c2492ab3f295d38dfd0fbed9aa1261241870ea4373602a956baf046c28fe218e60c3eb575f12501

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_S_SpeedHump-3.png

MD5 e8e04f07fe0d3288ba00f4a87bb0b0d8
SHA1 6e1ce189c24da5910b763fda2f5930ad9b86906e
SHA256 a2be80b038c7acf59afd03fb3d767b87bfc6a42df04ce335033567faf715f2a7
SHA512 3abf098037108e27efd8324f3a3f7dac1b62bf0ce078cddf69b2856df7c4528519556e401fa03f745cd41f878929f87971f10c94ce691574a1161fc01be9336e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_StopLine-1.png

MD5 b1b291e48623c33d338b43e693db0bca
SHA1 8503be406b1b091d9969585500113194a2bf5ae4
SHA256 da20082b90abcad676a50eaf94192467be6bf84b4ef3ea6acd8475f4dfdbb163
SHA512 3170bc433686b88e03087eaf72e7da4d53a7a4bb9201fb92f2e178fc2bd1df12043c0ea94a067d52f13c8ebfdbd92516d1ab99b9efc0055161b652194d9ce64d

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Ahead-1.png

MD5 787c973fd07a76df9d234cf5f2c271cf
SHA1 8e9034777cc5558724f4bd76ead62c1d3c5cffc8
SHA256 b2407376e426b17006e7feab87fc7047c99c4d6bd0da2f5e3b35185527adf77e
SHA512 6e2482be551e5f40129cc883eae84dfa333f5ef6d499382e27d2e31cf378b97dd2d49dec87257fcbe03691d30d260c1d753a9e5f647348435562063501aa3b8e

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Bike-1.png

MD5 4b31577b75e126b2736342cc407e8746
SHA1 fa072c28dcc471d11c6260f0aa24a5efd0937b16
SHA256 333cc3f0327b4d276cfa32e480280dab3135c754f9ef83253ab25fe9e977b33f
SHA512 1c3367300141f18f2fe62f2b078b354bc873136a7573a814f939bb3fac48988f73c14e12c32f5b1e5445ee6fd051ff306464e1145be0d0fea669e4dab3d65c34

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_BikeLane-1.png

MD5 1dd0a8210fd4aa7db124657f599223d7
SHA1 a1323fa9a7a04bf5035105ae4aad3a999ce84655
SHA256 2ab0794b7dfc88644d1525079867a9a5657bc2a2e0585c893326dcf8604b28ef
SHA512 2078388963e345a6f0708703d95803ee5edee3c07ca486b5a95c375575425bbd6d9d44008efc20b17641e77338fba41812b0e99b5c64de11b3d6f2e28d93ec4f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Bus-1.png

MD5 27a8555e8a690edbe2d8437feac2a484
SHA1 baf7048dfcb55d6abd9f3b4895922133dfeb19a7
SHA256 a14ddd1a34e56650b2c16e5368e8c2d28748fd94f391f7664be4c546f84c978d
SHA512 1d242853e6dce19d051f22287f5d970584a4ebe42d6c68b4b3d852717bb3f609ee2921aa089dfffc7effcc91586f5cedeb8de2040432252f98d038be6ee06259

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Clear-1.png

MD5 8f3dce034e8e30592d67b8a0d8af2bbd
SHA1 8198a59440443e457ff427f3dbe247234703647c
SHA256 756c0060ff96e9593555a15426a57edf061e979e6010dbe9da3b835753e6d117
SHA512 da53b47c61b29e2c20855a8bd1c0127f949b7a1734a325828da40de0ef2209d9cf338b757f5cbca02fb124d27b48bc3b4e37cb04ad3cc8f50c80f1360a96baed

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Keep-1.png

MD5 4a378f523e3e58ae98dfc46aeb6ef96f
SHA1 41db6337658d9137ab1eb09f6deb7792f4ff7074
SHA256 472e51be7cd86ebdcdf8af7d16b9d8471498b028499d5172b58a90fe47e36939
SHA512 6dd3061571d446ba5d51b61bc7281fc66280e85e6acc2bd228d09039c1a3aecb433d1a888ea8c66a7e573e0ff9545790600c5ad068b96a7084aaef4d63d1f0ac

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Lane-1.png

MD5 61e5fa4b702765f7dd2efac0a7d37d9e
SHA1 c6144fca2e82f12a7a44440bb4cdd1f3d0db72f4
SHA256 9b844895b61f270641aca864917f02b3236312bddab52d6c9452be532920195a
SHA512 4e706ab854e115c7ac94843a99ed0c8e068f29a095d0646a09cc8291c9cbecbfa71de281924cf12d2d0659b91bcdd3634303fca9c716387e2e925ebbec913129

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Left-2.png

MD5 e8d5d5f2072bb61807ffd4979b278c2b
SHA1 632370ed11ca1c7298f1a294909ad1be3c46d3dc
SHA256 f42bbb7c9e5528677e9270d06987264fba078bb843815ecad1bc8d2474c963eb
SHA512 3fc988bc05e55c905f3e186f626f02b15146be1ac1e42ca6caa89508a3021d51ee0cadd5ce2257fd4e77f574a94ae2188500aaae954896909b299fb82fb00936

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Muni-1.png

MD5 444863a5b72ef7caed1834cc78118c8f
SHA1 f9991e57196579dac84874f30cca3a4f7e998813
SHA256 1974b8ade3a040650ee69325be13bdf3ec698ebd0535945fb1f443fd7e79a54c
SHA512 4d2f44dafecf80aeaf64753d04830ac147a54c82de8c24c1cf2a9c8725d579eaf4269f884435d76e6af0ec18596332b903ba66769bf6de9aac8ebe28d6afb8d0

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Mph-1.png

MD5 33dffc58e8a21b457829c4ff47fdacfe
SHA1 24350ba1a0d0a507b6e26e9e5127d2553ea727e9
SHA256 156a0d0e416b625f34b32d2e3e36297c1f28a67d301124d49c29e844afcc6f10
SHA512 25e718316743ab49aa92087882cd877eb82882c1126d0977cffddeb8c5d62fb4c4a322844ccbcbe6347a9974677878c06d901397dc7f1342dbd34e22779b15db

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_No-2.png

MD5 b7197c1ad2639f5756a4d6effa69b50e
SHA1 74d75d196b4a714a8cab65de19234ec16c16e0aa
SHA256 e91439de4a686bad646021e23d0c6873d1016fa7dcc5199d28a64170b3c53d3d
SHA512 b0768cff11f8135692cbd29ee70a54013efc451724c77d96edd6b6014c8e8935092f408248918189b1230899600083d2e4f69d53c2d1c0615c9d9e71b822093a

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Only-1.png

MD5 8de554a18943dd7c77de67a8eac65cf7
SHA1 9bb3c311d9b3551dbc0a0d3a53f2f65112f96625
SHA256 c62dbc526c0c699138520f9ddfce8fa96810b0a3fbde17695f7592545da5cdea
SHA512 82c314864acc1931ed82c3ceee956678b3543a8b6426e2f84be8a155f93733af5e21a49c155b877d6a2c2ff4da56d891a8bdb8f1653c086297f00dfeea4ecfc2

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Ped-1.png

MD5 6c7c3ef6ef0fe8478e0ffeb799e66837
SHA1 7a3334e8f18bdc86a9a7d6e40381b98a3c2a2565
SHA256 b37fc3442a813a5676bca8b5b194088f7f078f7a9ef91675cad5e8c117cb66cd
SHA512 9838e3696f5a837e7b85d55f50137c2880cb7b69c0ecce88a2c2cc37429af92e438f0cf675b821697ae87e9fff6ba3fb977233ce401943e98ce5be60b83d4ca1

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Right-2.png

MD5 2add5c520df6d21c3e2ea7d115590c25
SHA1 529cb927682d197e52fd809ab537f5ab13c8f055
SHA256 b3d95bd9aa73864a75f83520025503b7d5df9cddf3d76e36ef9cbda3c76963c7
SHA512 203a07d09c4b766d7f8286e97312e3abd78d72fa3c0b52dc1244c53387e115ee7376f604a21391e2e5c099e73a3468f1f383cd80d5fb7e4db378804548629ba4

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_School-1.png

MD5 d7ada48ad560c03688dc488420bd1d90
SHA1 3d3935d79910c8b3c5a6afed0ecd014fe236572b
SHA256 852a68ab6e2f9fbcf538843094e28c3a1764fb3a6e54cae1a00efc4fb514a649
SHA512 051fd6b9e6929f11e9e43a997f8a1fc9c76e6d87f81abe669e66304c225425c110ffdcec0f22afaaf6de5091d0de92fa12e5ceff64fce84e3b251cac2ae7b94f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Signal-1.png

MD5 7b257df6cd322398ade30facc08c9ffb
SHA1 437aa834444bbf9b041688a47f944fade14b957a
SHA256 2c5d4daa6b44098697ef5897c0a326e9091d75d08a02a890640a62e9cd19ab7b
SHA512 21b1bf9d680f377b3c93fdee6d58aacc455e42f22e01a0ea142616ba999093952cfaa3c3fb94e67a6883e83d75660943f4d18493c5b863959acbaa0fb62f7b28

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Slow-1.png

MD5 509db015dd145212d18d6ac2f48a5084
SHA1 dddde67550b68fff33bdc0aa11cf0307c50348a7
SHA256 245408db9423ffd87b293dca70359d6a3ad256ca35ecc5c6fddd18f3f890c329
SHA512 f45520d848226df7bbaa13a8658fd04abdbb500e65cfc032ab8a0bf3d518b5790dd55478b711245df6f6f95e2012afddffa25116e2c4fa256f3927b7694a1b14

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Stop-1.png

MD5 74f292023de69bb567b1ad041bbc797a
SHA1 df88a6f52c6f568206237efa24957c188c7f593a
SHA256 98ad526c4e1751dda779c0ae7b2267be7e280703bd101a0276c62275cf7ec2ba
SHA512 866d3f3e40482201ba9db483d04d77991b117938c9cabff717e7f69bec798e7bf72210320ae2dac734ab353c63f4b106c23bccad99de5508f1bfddd24debc2e7

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Taxi-2.png

MD5 a7eb7da527c5ad1b63455c97b920df77
SHA1 3c9b0a6adf5eab4f6031b097c66f1b4bdfdc6c03
SHA256 f3a3f0263d787986322ca65e2437af319c69cea4385926c3391abe42a047b4ca
SHA512 f1826548f6b9f463ea2bec07dd62f8d4530d813ed6368ae6b14219e1480ecf9ea4ca2aa7361993565be418f05787e1a5a16a3951ce16342d45d67a94467a15e4

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Turn-2.png

MD5 f616b7f827844c6fffbaf396d46964b1
SHA1 a968034733b138e6616ad6d1348f9e6601d140ff
SHA256 d1f9dd89f600b7d2a8ebc9aa756b1f5a454634b2aa4f6afa52f8d3ec1a5476e8
SHA512 d57394cfe31e3039cf50d3ef566230b46d098f08a88d947070775435c6a364bc9ce5fb6b1da8b04d7353a1d79827442b99ffcef8671ba2099a0d23a0e6c4ba30

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Xing-1.png

MD5 537c1501142330f87fa25bfc4a42a89b
SHA1 6e0fbff5a171c691c6a452638f4548f7f8be1262
SHA256 5e8da7bed295be68b686c8ead7cceec4ceab977e88701e1457d438ce861f04d2
SHA512 77b9ff1631d54c201785da828b4c8d53e5dcdad32e23cdb12aeaf9c1f85927b515ab7880707dfc2678d0bcf2aab986d0b688203ec6c03837936932e768d22076

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/surface_marking_T_Yield-1.png

MD5 8a09b455ccf5be1db45f67fb81b13a95
SHA1 6cca405ac4a87c657f9fc2fc19ae71f32512c12e
SHA256 a0d5d3519ba05f5ca2dcae42d75a9c21b06cd4779b12484f678f12f71beff88d
SHA512 08adde06433d27ad0cffd3045239f508ade80b0c14e970d4b791422f0faba84637628c3cce73c72e222e883c41aa3a82b7f1597851d4188403b25af17da9c882

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SFDisplayShields-Bold-1.otf

MD5 58ab4a7b39ea072789d51e011ead5ffd
SHA1 be934b0ff1964e09a16edbe23816299675ad4cd7
SHA256 875c6c30b9021737ce9b7d5543e655096b70e3553d0a2902053c49e4f9c913b3
SHA512 ddca56e80d3ffa7a6fd3ff0296909ed665f1c5b0a2e80dd06d5ec0fa678084faa07f2ddecde17b88ab35281a2dadd6d96d6b025b9afc4ba7f9bb7a85b7af032f

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1129.xml

MD5 a785d97332011c3870372928fa77291e
SHA1 edc04792ecd78e16c8d804896fe0f06dacb7903f
SHA256 d4d8c7f7b65e1fa3c6055d48634dc6cfb86700dd17896da2c6f1646c855d7de8
SHA512 7429b71f5386c9b35a03e461e953900fe35824a6300fd7180bd1e477072eb8f062fd07094bf1a68f0c3ee609c755d14bed786e4fd1090e64231927688626c7d2

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/LocalizationStyleAttributes-8.plist

MD5 d7aa7d53d68fd2f1ac03fc79dac41482
SHA1 dd0e8f57cfe73e0dd6738e9369d3e9ed1f64d8fa
SHA256 fa9f615b095101a65a744e353217f5ca7be7ed1bf908475f49efee6867cdfb53
SHA512 bd7e9d315546601c498182cdddf440cc64b1cee4dad6a2b389188e53f932ec8a068cf3fbdb822329ad12b4f30c8aa4fb294dc75243bdb9bc1a4979348c515525

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/supportedCountriesDirections-23.plist

MD5 605cc90327ca08a79abd06060b3567ea
SHA1 d9d415b243ecd32dd890d3636230be92fb412fd3
SHA256 e587f3841601596c11a1c124bcb674a47801c40ee0b29914c1c92e07a3c3cabf
SHA512 bbbacc2fdfac9e5c4f9cef63b42983ae854150739ff950a8db8783dd0679cdff4d3aef26b44ba958bde825adac1510f7f5b5ebe51c9ab6738e40d720343f6227

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/supportedCountriesTraffic-7.plist

MD5 6107b0905e8e781df879cc51ef7b1264
SHA1 403dcf0f8e210c28850ad294c9503b2bcdfd85b5
SHA256 dcf8f80b2e48b54900ea81df09a5fa56e9266ade27b67d529ccd2494ded52160
SHA512 8ec329387ebc4362fc5299ba7b147b1b7dba25edabd54cf51ef0ffbb7c8814d5292bbfdfa37931c4018aaf0932aac3cc842e32542f0330505457dde93e83cb72

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-75.pb

MD5 f1c67899e4a078d280fae381024ff9a9
SHA1 1b55c4c06d0471a4b26269a38872b34f7f506fdc
SHA256 1db6010e26d4177f7ebbbf73b8992db37cfe736237af8f57026820b4efc17697
SHA512 654473de6ca58780af858d211f04500eca33089cbb79671bffaf7bb0b52448d453c13549db40a5b10064f5ffe901b1a55e67d83aff3220b66c2be33aad479183

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-62.pb

MD5 501cbea42c7290817c739929e31e8057
SHA1 28b65caa4b08c4c18ceb9575063b51b9595aeedd
SHA256 0c39b89e311502c50b90e9dbb14ba490b1c47430eaab0ccfcf4b89224ba44c7e
SHA512 bc1b96957474f4d8d447f155305cb6628d93cb5b37ee8318a83fcd63a9b52efdd7328a6fa08f886f3c95bd3be1409b599fa3ce1c1ba3351e0b3ccbae47bd7b62

/private/var/db/locationd/Library/Caches/GeoServices/Resources/altitude-1129.xml

MD5 a785d97332011c3870372928fa77291e
SHA1 edc04792ecd78e16c8d804896fe0f06dacb7903f
SHA256 d4d8c7f7b65e1fa3c6055d48634dc6cfb86700dd17896da2c6f1646c855d7de8
SHA512 7429b71f5386c9b35a03e461e953900fe35824a6300fd7180bd1e477072eb8f062fd07094bf1a68f0c3ee609c755d14bed786e4fd1090e64231927688626c7d2

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

MD5 b96e2a64d393b9847523100a835e4fae
SHA1 0da250f03855d04545eb094d8d1c6b1247070e90
SHA256 c997d8f3a80a87fec112b1f25af71ba4e9c1ece158a90982cf2832aab0e6dab1
SHA512 0e282ff91952909591e68badc99c895e42c01e18e1b102c6afae8c194f20a7307cae673b2f175b7d816e7fc60a2428f14fd0ed8432dac13aa3553d188d32ee47

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

MD5 b501e433f15359641df3ada50e4bc951
SHA1 468b9a6275dffd279c1a60cfda1007130595959d
SHA256 8a38712d2eada94fbd887a8419ad74bbd43bc706f5965439090f3ab4523969f7
SHA512 c68eb19f1de0483dbda2cc6bcaefae08a04b2b39fce250e657ebc002edfd57edd0972feafe12bce05b1e8b3dc8b1d228965155ff692e39ffba90fb13cd685728

/private/var/log/wifi.log

MD5 aa5b1bfb417eca1fea886702cc3c16a7
SHA1 7520d7143dd97e2e40f6cb65bbca17db2470fddc
SHA256 c005ba1938d74f34dad0c9ada3b8959e1fe09c2d7216c20996099e22e63a71b9
SHA512 1d41e4a9a62d8933d4a8116fbb032cac543fb8bcdf5140399200c62c1946c9e6da9117484068851562b73e0d95426b084543c65ff9bef32fef14b1cec7625cff

/private/var/log/wifi.log.zkC9E9C

MD5 b47a3007903adfe11d030e76811ccbf3
SHA1 44bb85aab94e36f851db56492da3a423e83f66d9
SHA256 5ec6e5d840feb5f21ff184cae43941133061a4261082ae350e0746411390c9a1
SHA512 580c8353700dfbfe7b00226b877cbe20b5fa4622be773436208d087d0029963b314ec728b1aa593e0108c54bde1a6472318c2eb502fab05cb04626e94a8af74e

/private/var/log/wifi.log

MD5 b47a3007903adfe11d030e76811ccbf3
SHA1 44bb85aab94e36f851db56492da3a423e83f66d9
SHA256 5ec6e5d840feb5f21ff184cae43941133061a4261082ae350e0746411390c9a1
SHA512 580c8353700dfbfe7b00226b877cbe20b5fa4622be773436208d087d0029963b314ec728b1aa593e0108c54bde1a6472318c2eb502fab05cb04626e94a8af74e

/private/var/log/wifi.log.0

MD5 aa5b1bfb417eca1fea886702cc3c16a7
SHA1 7520d7143dd97e2e40f6cb65bbca17db2470fddc
SHA256 c005ba1938d74f34dad0c9ada3b8959e1fe09c2d7216c20996099e22e63a71b9
SHA512 1d41e4a9a62d8933d4a8116fbb032cac543fb8bcdf5140399200c62c1946c9e6da9117484068851562b73e0d95426b084543c65ff9bef32fef14b1cec7625cff

/private/var/log/wifi.log.0.bz2

MD5 f364c5c269033b283a7c7d095a2a2cfa
SHA1 2053c8319f7c074cfe7e918f91b9c2b1ad1b7ed2
SHA256 deb4a3fae7bbaa7e6f7c8c165bf5d7aed3562f0c60c34a2feafa318d0c86fed8
SHA512 2cbe7835675b56e9e25b87907da54d2cc3aec3a35b7dc68b9219303decac6cb326ed43e90b64ecf1b00b83994049a0ce770aaf45cec45d6796eb1615332b8ec8

/private/var/log/wifi.log.0

MD5 aa5b1bfb417eca1fea886702cc3c16a7
SHA1 7520d7143dd97e2e40f6cb65bbca17db2470fddc
SHA256 c005ba1938d74f34dad0c9ada3b8959e1fe09c2d7216c20996099e22e63a71b9
SHA512 1d41e4a9a62d8933d4a8116fbb032cac543fb8bcdf5140399200c62c1946c9e6da9117484068851562b73e0d95426b084543c65ff9bef32fef14b1cec7625cff

/private/var/log/wifi.log.0.bz2

MD5 f364c5c269033b283a7c7d095a2a2cfa
SHA1 2053c8319f7c074cfe7e918f91b9c2b1ad1b7ed2
SHA256 deb4a3fae7bbaa7e6f7c8c165bf5d7aed3562f0c60c34a2feafa318d0c86fed8
SHA512 2cbe7835675b56e9e25b87907da54d2cc3aec3a35b7dc68b9219303decac6cb326ed43e90b64ecf1b00b83994049a0ce770aaf45cec45d6796eb1615332b8ec8

/private/var/log/wifi.log.0

MD5 aa5b1bfb417eca1fea886702cc3c16a7
SHA1 7520d7143dd97e2e40f6cb65bbca17db2470fddc
SHA256 c005ba1938d74f34dad0c9ada3b8959e1fe09c2d7216c20996099e22e63a71b9
SHA512 1d41e4a9a62d8933d4a8116fbb032cac543fb8bcdf5140399200c62c1946c9e6da9117484068851562b73e0d95426b084543c65ff9bef32fef14b1cec7625cff

Analysis: behavioral4

Detonation Overview

Submitted

2023-09-24 00:13

Reported

2023-09-24 00:14

Platform

ubuntu1804-amd64-20230831-en

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-09-24 00:13

Reported

2023-09-24 00:44

Platform

win10v2004-20230915-en

Max time kernel

1689s

Max time network

1158s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://oopatet.com/r2.php?e=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%3D

Signatures

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3027552071-446050021-1254071215-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4312 wrote to memory of 4596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 4596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 1936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 3472 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 3472 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4312 wrote to memory of 5000 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://oopatet.com/r2.php?e=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%3D

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8899f46f8,0x7ff8899f4708,0x7ff8899f4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9604924586472228321,7829373685370221275,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.0.1697848283\690006338" -parentBuildID 20221007134813 -prefsHandle 1884 -prefMapHandle 1876 -prefsLen 20938 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9e51769-42d4-4722-9607-5043f78b17f4} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 1972 208ed6f5458 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.1.139898954\1339532091" -parentBuildID 20221007134813 -prefsHandle 2352 -prefMapHandle 2348 -prefsLen 20974 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c556d641-7c3c-4b76-b777-859f4332450d} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 2364 208e0b72b58 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.2.462187632\654444311" -childID 1 -isForBrowser -prefsHandle 3196 -prefMapHandle 3192 -prefsLen 21077 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9e991576-f90b-4393-baf9-3ec581a0bec5} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 3208 208f15b5958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.3.1595258972\781698480" -childID 2 -isForBrowser -prefsHandle 3644 -prefMapHandle 3640 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d595ad80-5244-4534-96e4-9f2ea65cd3ed} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 3680 208efd6a058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.4.1143996378\729089006" -childID 3 -isForBrowser -prefsHandle 3824 -prefMapHandle 3832 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cf200ce4-1cff-445d-b1a9-4da27613f056} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 3964 208e0b62558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.5.1797340957\522535372" -childID 4 -isForBrowser -prefsHandle 5060 -prefMapHandle 5056 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5fc7477-45e2-4c22-a73f-3822ac80da48} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 5068 208efd69758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.6.1871186021\1408971987" -childID 5 -isForBrowser -prefsHandle 5204 -prefMapHandle 5208 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc6ffe70-8a87-4447-8ae1-5f993b0c5555} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 5196 208f3a1d558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.7.2111400018\403305542" -childID 6 -isForBrowser -prefsHandle 5392 -prefMapHandle 5396 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e896ee06-4d8b-4d66-918a-7c044b3c64ec} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 5476 208f3ac7e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1292.8.870784447\367296653" -childID 7 -isForBrowser -prefsHandle 5848 -prefMapHandle 5840 -prefsLen 26671 -prefMapSize 232675 -jsInitHandle 1428 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b8c75ef5-a556-48b7-995e-cb3b852e6785} 1292 "\\.\pipe\gecko-crash-server-pipe.1292" 4156 208e0b62558 tab

C:\Windows\system32\rundll32.exe

C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask

Network

Country Destination Domain Proto
US 8.8.8.8:53 oopatet.com udp
US 8.8.8.8:53 158.240.127.40.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
AU 103.224.182.206:80 oopatet.com tcp
AU 103.224.182.206:80 oopatet.com tcp
AU 103.224.182.206:80 oopatet.com tcp
US 8.8.8.8:53 206.182.224.103.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 39.142.81.104.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 146.78.124.51.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 112.208.253.8.in-addr.arpa udp
N/A 127.0.0.1:49919 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.117.65.55:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:49925 tcp
US 8.8.8.8:53 oopatet.com udp
AU 103.224.182.206:80 oopatet.com tcp
AU 103.224.182.206:80 oopatet.com tcp
US 8.8.8.8:53 oopatet.com udp
AU 103.224.182.206:80 oopatet.com tcp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 59.128.231.4.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 254.22.238.8.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 38.148.119.40.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 254.177.238.8.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 5.173.189.20.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 bf009481892dd0d1c49db97428428ede
SHA1 aee4e7e213f6332c1629a701b42335eb1a035c66
SHA256 18236c88bc4fe576f82223cca595133aa3b4e5fd24ebac9fd515b70e6f403ab4
SHA512 d05515ff319b0b82030bc9d4a27f0432b613488f945d1dae8b8dfe73c64e651eb39f4141a5d2e157e2afb43dd1dd95b6611c1003ac4e2e80511e6c5cd7cfdf11

\??\pipe\LOCAL\crashpad_4312_HGDCPOPXLCGIVESE

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c0a30522f95756c20b106e948c3e81de
SHA1 a73d2b1f30e2a10e0ef159be0a0f8310fff2c8bd
SHA256 a0cd7bfeb5733c3b83d5ec5f3935c5c31bfb3982a37f8448d079e301cb910a61
SHA512 4e8b0797af4535d321eb70728b4f9311f464d31c176c7dec60661c6bcdba9e0fb1fbaf8a304b74c35f07aca5c115796013339e4ec78fca689ab9558b877a2cd3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0dc0e3114ee5b020ac95bbf2cbf54857
SHA1 350258170c3fe058ae662e21128206f291d4d57f
SHA256 88920e8db0a593e9c385d23e03856004628d20aa81d5781a0d8e729b07102057
SHA512 f2ddd26361f98325847c3729b124e5594849526768a9f27c9ba6a9b25fa7fb6fe55e83e87d3eca37f2af72cee9315768965766bfd5998125a03b1c38a7407509

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 58448dea3e890ab44f9641db24dc00d5
SHA1 45347fbf494290905dc0361688d4be5e8cbc08c8
SHA256 bf3d9e706338f229887ab4cfaef638f90802f5bc6106b81d4ba515599acae4d5
SHA512 5d39055d83682434fc45796d9dbd4e0ad6ebc4414516de7b63328e4701fde4513de9addc5c901044599f404f8a7d4ed550badb768d0cdd65af6a5cad64f1c1b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 25ac77f8c7c7b76b93c8346e41b89a95
SHA1 5a8f769162bab0a75b1014fb8b94f9bb1fb7970a
SHA256 8ad26364375358eac8238a730ef826749677c62d709003d84e758f0e7478cc4b
SHA512 df64a3593882972f3b10c997b118087c97a7fa684cd722624d7f5fb41d645c605d59a89eccf7518570ff9e73b4310432c4bb5864ee58e78c0743c0c1606853a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6d9fc2a87898eb15203a9196e449b914
SHA1 ad7718c1491c14a63ffee2dc31664a3020fc421d
SHA256 cb099d420a1c62fcdd7472102bb1737d8ae3f0032582ec7d8a0b67a3b4b0e00f
SHA512 548fe602720ba6009056b1abe2dd637eb0d9f5514697a3deabcccbcae40d93b8746daade219a98f35ce94e0c74a9d3aa43c82991188a47da62906d6445731a33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4656500611c087b967767740aec5f7c6
SHA1 182f00e61d669e09b0fa53acd0cc1e7345d0a9a1
SHA256 4589f1015f07699225b3a2d6801a7bab99a62b75fab599fd6a84b115a6755f50
SHA512 7ed53c5d23d8612dcb32e5d8104c2710da4a4ea879a1d42a1e1316dbbe853c3026516ec8f60905a65f0da0033bad8756e5a8bee17b385c1148a5d062de547295

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\prefs-1.js

MD5 2e179d98b2b54c385ce5e4cca6a44ae3
SHA1 9ec95b486dbbe77dc9d2c5318b45f809bcd0ca74
SHA256 a971283b32ec4cc383c6cc64cc88e8463bde77deab23e0b7352a9a84f1c69ae3
SHA512 7065f5f7b54e98c6af462824a4a5d1d6bba11eebda70408f592d238b3e30930e4e9f620b88caa2b973dc9eaf7c0e6aaa5f3205444770677067429b5995016a50

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f45dd660ee5deda2557bf94e0ab1a896
SHA1 76db3330b82e8d60c075dfcb4b56955e12ba3ff4
SHA256 9a4b28c86d798f6ceae3878667ba8e820930bf8fb2805c7d4a18a38041ef05a5
SHA512 7deffe22f0af38a95d213fa7d14051c88a9e353c97f733c1bf0989ee6e27e630a7b7a3db44b2c8a4f5fc41e55a987812f0f31f743e3a379732fc1fdf9f8cbc92

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore.jsonlz4

MD5 8333815738a8dd85b05dc9c2de2d8025
SHA1 506f60bd94feff87ea16e7df461de5864bbb81f2
SHA256 75b5f2b6d59ca2c50950f053185510bbe4a06ee2aad7b21f10a9e0aa9d8fcd59
SHA512 9c1c421a9b01971032a70a27a2c51c82e6b1997f3c69ea4730f721a42bc989bfbb2ab41309fac6c7476c51c1364421853b7dbdbe57557599e1322a85b49ded8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3596a5c2ff138c803657a61f7e033d3d
SHA1 d77f9eaeeb7418a882ab6079c8fd7e68502f0768
SHA256 bfb2d80be0a9afa473de074c9a1130d4e154d26a070ad42081192cb5c6bf64c7
SHA512 4b5a6c5c964eefe3d5eee98b952fb69023fa44990aa611536838e3e200ca9ebba3a8b22fcff50a282ea275048e90991e4f17f9f46609dd7ae4d2d7ccdd26df90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec7c966b5119e593b2de35ccf97e4ece
SHA1 eabc049935802595e8f4462c97697e8eb367055d
SHA256 0abe179b3537aed606d501199e65dab51d102b6e0d80b6112d98234d32bc5667
SHA512 c4c7e3cac42f1c00b188d8096a5accc09cfa110fe11276fc2efdbd5578ab7cf0829b68437208d89d5f99cc19c498a01ef963fc2a02619408ff13f4ede14d8f02