Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    10-12-2023 17:31

General

  • Target

    Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb

  • Size

    1KB

  • MD5

    ffb2c32b20779ea2453a28f1d75f4b6d

  • SHA1

    23d8518da59cb09e1136cad03bb1d2aef0ac1ad6

  • SHA256

    4f88e2aa202dd9eacae899b8d02079f1855638379b2ddb63d45a2d26d5e2a394

  • SHA512

    6fd364317f9d81c671224d36451c413471afc6fc4cbfad4d61b5c49eb2ce724f106b17159fcf86391912745e69a09e16e2718dec8e1021303efc9ae8c5924a87

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb\""
    1⤵
      PID:598
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb\""
      1⤵
        PID:598
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb\""
        1⤵
          PID:598
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb"
          1⤵
            PID:598
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb"
            1⤵
              PID:598
              • /bin/zsh
                /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb"
                2⤵
                  PID:599
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb"
                  2⤵
                    PID:599
                  • /Users/run/Dropzone
                    /Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb
                    2⤵
                      PID:599
                    • /Users/run/Dropzone
                      /Users/run/Dropzone 4 4.80.4/Dropzone 4.app/Contents/Actions/lib/task_file_parser.rb
                      2⤵
                        PID:599
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:600
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:600
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.PerfPowerServices
                          1⤵
                            PID:608
                          • /usr/libexec/PerfPowerServices
                            /usr/libexec/PerfPowerServices
                            1⤵
                              PID:608
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.pbs
                              1⤵
                                PID:611
                              • /System/Library/CoreServices/pbs
                                /System/Library/CoreServices/pbs
                                1⤵
                                  PID:611
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.geod
                                  1⤵
                                    PID:612
                                  • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                    /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                    1⤵
                                      PID:612
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.icloud.findmydeviced
                                      1⤵
                                        PID:616
                                      • /usr/libexec/findmydeviced
                                        /usr/libexec/findmydeviced
                                        1⤵
                                          PID:616
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.geod
                                          1⤵
                                            PID:617
                                          • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            1⤵
                                              PID:617
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.secinitd
                                              1⤵
                                                PID:618
                                              • /usr/libexec/secinitd
                                                /usr/libexec/secinitd
                                                1⤵
                                                  PID:618
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:619
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:619
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                      1⤵
                                                        PID:625
                                                      • /usr/libexec/neagent
                                                        /usr/libexec/neagent
                                                        1⤵
                                                          PID:625
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                          1⤵
                                                            PID:627
                                                          • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            1⤵
                                                              PID:627
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.suggestd
                                                              1⤵
                                                                PID:628
                                                              • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                1⤵
                                                                  PID:628
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:632
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:632
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:637
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:637
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.Maps.mapspushd
                                                                          1⤵
                                                                            PID:639
                                                                          • /System/Library/CoreServices/mapspushd
                                                                            /System/Library/CoreServices/mapspushd
                                                                            1⤵
                                                                              PID:639
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.siri.context.service
                                                                              1⤵
                                                                                PID:640
                                                                              • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                1⤵
                                                                                  PID:640
                                                                                • /usr/libexec/xpcproxy
                                                                                  xpcproxy com.apple.tailspind
                                                                                  1⤵
                                                                                    PID:651
                                                                                  • /usr/libexec/tailspind
                                                                                    /usr/libexec/tailspind
                                                                                    1⤵
                                                                                      PID:651

                                                                                    Network

                                                                                    MITRE ATT&CK Matrix

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-13_802E064D.PLSQL.gz

                                                                                      Filesize

                                                                                      31KB

                                                                                      MD5

                                                                                      9d7b5409d18c2fbb6a37e50f4eac09fb

                                                                                      SHA1

                                                                                      d328ebccb0115bb382d6a9c689286038a5d29bb1

                                                                                      SHA256

                                                                                      f4b923687e633c20bcc7f439f58d1c58261710d155154ad7e75a5328d2f493f8

                                                                                      SHA512

                                                                                      d90047368f01aa04f33d3d201d350351a0bfdc8ce5b4cae7fb06d02fbe175845fca2ea7231d45df636b819bb0dd28304843e8db9d0ba421a0099a9507450f6a1

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-14_8F3D24F1.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      c671e4b1ab9be5e065ac78112e71a48b

                                                                                      SHA1

                                                                                      ff8cd691da6c765e589fd9d17af60b16382585d6

                                                                                      SHA256

                                                                                      08c79a8aed486e571f4edb29cf4f8ddaab0b92e7203e09329ec7880917088be4

                                                                                      SHA512

                                                                                      5c15ef006e22dc17255eb9231014d2e513f1241abb8ef654134f6dad2f736edf92b87236d9c38a85e3f39f1b2a34b8996f2aae1755cd61a7ef9b80357468b2a4

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-15_FC3A697C.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      6c6310ffd1f4ebd44dc56140711cbc12

                                                                                      SHA1

                                                                                      da42148357c1acab7209c66926af994ea36e4cf3

                                                                                      SHA256

                                                                                      9222b944d3b079971b6c5142dc7540333a8de3dc86cf22c5a872dd5a93ddc241

                                                                                      SHA512

                                                                                      e9b783a5a24e48ec1bd56e648478618ecd71be3fbef8c3a16b034463a8ee5b211a075d11be4b8a0c94794a2cce34f13b3f0c015843cb831a72d3fb0a12ce9193

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-16_D711D7EB.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      3ef0452d4c584ccb04fc14e2e51142cf

                                                                                      SHA1

                                                                                      71d9ce5d07e83a7e107f82f8b73f9ed575276696

                                                                                      SHA256

                                                                                      47962e74967963fbf965d30544bdac24e1f0037fbac3ce658ecd244e5a406532

                                                                                      SHA512

                                                                                      ae2835e7f0bd53daad54a961600255af6550833ab04784bde8bcc4435e1d8b7b28e770f21d812d51c2330b177082c0c61a2b0dcd158d3367c3d67ce0007dc64f

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-18_4D1494C3.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      3b85e040c7755b65f47143729be1b30a

                                                                                      SHA1

                                                                                      ab84b7f9187cac1d9f29d46380752aa319c73d08

                                                                                      SHA256

                                                                                      8264b345b5f8ae85608fca17efe157c2da8c65d3e0475ab5090ffe53b7f258a4

                                                                                      SHA512

                                                                                      b7cba0ee69dae153e0b6e4436993cc32ed100c64a48751540ac906be70e1f9855c0284568ae9ea09fe229502ca32382bf7ad2e26638269188a2da8554adc86d8

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-19_1E54D495.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      7e4b77a445ae21ee90a562a36bb28c45

                                                                                      SHA1

                                                                                      999bfc1cd99e0dcb63e14eaf3fc10b6cca7e5dbc

                                                                                      SHA256

                                                                                      9d071bd3d634a009c001162b0d4f42ab02f95d8762414d083b78d4fcce6ba9e7

                                                                                      SHA512

                                                                                      1980d09a6c575d1b467255623d2ecff18f12a6819ed582bf97d1b8ea6f847906c3df67bec48912f318c84f7556f50a4539c08d47c6062d85ac3ad2e12a2020ec

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-20_5E2FE568.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      5c25dff96dad8f7849445d35f1eed529

                                                                                      SHA1

                                                                                      d6969d2dfb8224713803535191ee566a8064e756

                                                                                      SHA256

                                                                                      8f7a4bd7b52a3398b1337d82db60518454000ed7bec04aea2e97ad68c62ebb4a

                                                                                      SHA512

                                                                                      f89b3482070cf62c237d5cd7bf9d33f5ed2588250c0508fcfdbb35f716193895ada5617cbdc21a71e1826de32eda25dd6cce00b4a25b4075796fd28f676aee95

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-21_B90B2ABA.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      abdde5c7a6c50cf303dc473450ed2eac

                                                                                      SHA1

                                                                                      4e3daad191f4afd5ce7af3a0d6567e0520c3bfc3

                                                                                      SHA256

                                                                                      cd6d7ca77db0888931ee80d786ec083a7faf4d92926a83b66bdd02be04184f9b

                                                                                      SHA512

                                                                                      691b8e732d6d79dbab7b54f8994eafe94f0246e96807bbe5cbe678a598e909492cec2ce0e6895a58936ac25e1ae016bca21c6ed0e36890ba051670b16c6a5658

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-22_0A42638E.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      f2f81d3acdbd9fed4b0dfb70c04b5726

                                                                                      SHA1

                                                                                      7aa95d13812d344e8dc7ac5147cd4a793b512cdc

                                                                                      SHA256

                                                                                      bd19c2172576e6d8b760c174e9dfa54ce07abed0d0143ae64d16487fd554eef5

                                                                                      SHA512

                                                                                      66c354332c8c6d63a6923ebd31cf6e3943a8799d2bb877a7922f079f6456b598458fda7918621e69d4df714adaa11f4e3dfd05443a6e6092ab3adff83371e927

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-24_152632B4.PLSQL.gz

                                                                                      Filesize

                                                                                      69KB

                                                                                      MD5

                                                                                      3ddd24c2596a704e3106140a9fa4f610

                                                                                      SHA1

                                                                                      ea0754881437611f395eef93391d270cb2aaa57a

                                                                                      SHA256

                                                                                      28e8ba83c6ce6ae52eb383f183785f0801ca642eac6ccce65a4e3858383199e8

                                                                                      SHA512

                                                                                      84cf0cdfac5afb6ac69106a316628511c522163ef9739e5cd0fdf812d9cbd2f456e099f207fb7cba5ecd8bcb5558880fa66c79ed4dd8d722bd40f368c6ac93ba

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-25_45C3504D.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      33e69acb2606c4361d35609cd3340970

                                                                                      SHA1

                                                                                      5b59c2c5809f6cb3f4c023d65f60e1fcca0829c7

                                                                                      SHA256

                                                                                      c48ba76ffe27dc8b8365d3d533bf6ed309d8a97eb832bf4f268db9ad842999c0

                                                                                      SHA512

                                                                                      00f6f3c56a4491c997ba51d1290d7dea89fa4cb3e773f1dfed7ae260efea9dbe8babbe834f72979fa845f3bb5e2335c8dd077e4470985c1b5bb8c9363d8d186c

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-26_CE94DE1E.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      d4c760de741e16f2a4c967c7449da199

                                                                                      SHA1

                                                                                      70fba02784239294aff3204b3a01310779deca32

                                                                                      SHA256

                                                                                      89ac629fbfef5d522285b09a121382593202913c8dcbba61880c816909572b76

                                                                                      SHA512

                                                                                      d38fedba99cebfe543f210e2debeae4eba9144c5a1b2f69eaa351f4211e688b5a39637ae3df4385877932138ce6175861ac2b121b8e9fca7dd64bfff79fcc555

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-27_26A2C162.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      c43cfe4635be2074e8ae14749652d246

                                                                                      SHA1

                                                                                      3fd565f511201f25b5a947afb76e0bc7e1d4c756

                                                                                      SHA256

                                                                                      b310ce322a315db792579cb1621cfd10d78721362e3f02fdaefbfa08ac46f035

                                                                                      SHA512

                                                                                      8f095b2150bd5d95644d7bd4b142ab2ef854f9d560c20b85fe2ff5fe31dfda838fd54eb2e9e269d84b14e6a622527e60fdf0b982451b5653f2372d78be684208

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-28_815A95BB.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      8b1a54035b2948ffdf6d40ed82739e0e

                                                                                      SHA1

                                                                                      38562f2ce9c39f4de1bbd382e8cb6a941a2f2f4b

                                                                                      SHA256

                                                                                      8d62fd8f06bf8dc23266e8b7b939d7ffad496692fc9126e87345f8432776f94b

                                                                                      SHA512

                                                                                      a5fa990479bf5432cc90acb6c23c028d2bbdd412c840f6961ae74856956d066ae54061f50ea24b5c5ac986e7a8673c26165ab8df4559ba38850cc08ef50cac35

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-29_CB9F737F.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      d47c9e913f997a9651712f555eb96705

                                                                                      SHA1

                                                                                      ef5348e573cfbd7b6f7e8d8196ea70189676ccc3

                                                                                      SHA256

                                                                                      fbec1a5d7654ed892cb1370d48c1aa737e37abc1ba5b1f11db7683e4890ce6fd

                                                                                      SHA512

                                                                                      697cbfcc3aadba95fecff5a1b9cd54f50eb39ac4cf9611798e864f1ee67dd733c57bf5834aa8697adbd018e00a82b9f31c777e50f40cf30c966c3c69f04bf000

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-05-30_2157A20B.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      8e54f6587298510e3de7f246a8230491

                                                                                      SHA1

                                                                                      43260ab0d670c39c223e4f80d17fbc69e2c5cecb

                                                                                      SHA256

                                                                                      bf2e051c92f1bc6f08f53d4173ed060b93466060f95c3c060e61ea1c8b22ce22

                                                                                      SHA512

                                                                                      bec8db5cf23ddc46d363399976e2f8c6738895fc792261b755391a13feeff3784c7c50e55727de6c6b2237eae46d51a9f86579ae418b0f57fdec85561a5183c8

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-01_20D33040.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      d7e93c9a2644d0fb6548b89093bfd077

                                                                                      SHA1

                                                                                      d50f6256e7b38eb3d45fdd470f70f148920b75d9

                                                                                      SHA256

                                                                                      4a8198f9d1be058abfe43c998ec2da432de13c688fe896da5c6975162677431c

                                                                                      SHA512

                                                                                      b50291d5e3d1fb4722adcfc2b32af0936795e7eeec529960e17a9d92a99f42a3a754cd0cb3c6a9e664e6867b8fe96f8735dd7870a46a4b3fbf8b116bf2994999

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-02_68E0ED09.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      7a410f134cf7e7c89fe518d024e1d9a1

                                                                                      SHA1

                                                                                      9daac493218c2ca0ba606846ce988c8d16451d27

                                                                                      SHA256

                                                                                      dc28556da868ad5d1078d04b668e6e18a42dc43c1eff2379d5cbc28a65e24b72

                                                                                      SHA512

                                                                                      c9aa836a0f0b91a04b3bd608a99b13f5f34164ef01ec8f619f373a15f7f46fdb9ed28c63999ce05c989cd3d662fdfb62872af4fd97dc2e59a64571a00e9c5386

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-03_633F1783.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      fb42fd8db3133463f98ac2ee39832b65

                                                                                      SHA1

                                                                                      0e291fb47f98d8f24862fd3296b5bf58eaa560d3

                                                                                      SHA256

                                                                                      a3e24b68f1b7bf70f0224607bac77736d66d1715309f15961716d73973ed9343

                                                                                      SHA512

                                                                                      c7c53eb06c030a1f95766f7881ab4856e046d057cf2278350135714aa1f61a1ce0edfd1f4c0beefbd814a14637537b5fa698af9ba1603ebcfbfb28dee3c526d7

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-04_2680A95C.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      b5fbb5dd555e33a4454449d1e6c9660c

                                                                                      SHA1

                                                                                      5932df04be70411fa82001ef0954eba229a16759

                                                                                      SHA256

                                                                                      fa8c9aad4fe891a6663a68df90e719ff7e6b58b3f303db90cd836a5bf1fba55b

                                                                                      SHA512

                                                                                      0b5db1bc67d5504b9abb7daf3afb68b51ed70fa3e2a57d27ff2c1a32cc0b78ebfd493ec681c232253caea094e17a0815b63222444fb4e099a2f655115560037b

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-05_95C47040.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      ee265f073a88ff6df6e4d9869b02e377

                                                                                      SHA1

                                                                                      10635b69c11d928cc497f94561b4b0d25a5aedf2

                                                                                      SHA256

                                                                                      ef1d317ccea49dfb793f1b5e2dbe6a1c92823f20a4c663dd33e0f911d7cc9c2e

                                                                                      SHA512

                                                                                      3ca7f13de3fa0988f491905600fa13a8bb2af1630d5db1224ad46c237d9a74f0995bbe1f64521f7c9c20cf66d0ab580f773655f237ff3ca6e7308c6ef6670dbe

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-06_E1ED3128.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      7126b828d9558ad2873ce67bf8b069b1

                                                                                      SHA1

                                                                                      1331672fa7db5a74ebcd9d0a2c72256a9b6bacfe

                                                                                      SHA256

                                                                                      6f45b8d044937fdf0aee430602bfe193afa930964bb2359ae460eac82fd9107a

                                                                                      SHA512

                                                                                      a3a07649ed58f95cd96034b7642749661c02ad89c6d6fa118e5f39cbd88e24d5d7980d5f27277dea6be0922326e83a997196a8eaa0169e11df50d463b2bf0a02

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-07_71BA15DE.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      5279026f07718d9e2f94d2828c80db0b

                                                                                      SHA1

                                                                                      90f448744e25ef96d0a6bb44d4dddfa0c7f3b1fd

                                                                                      SHA256

                                                                                      8227aa51ccb2fb6dc94c7184da4b21de1e782fe6b66f3f46f286b9ef2d6e6b35

                                                                                      SHA512

                                                                                      1e0a3ba902504b53e6176d50a52dcff5d844a13abf40e301e2cdee37ac76c79f60d182c87cf19ea7e2e59c12a46d5798616148d595d04bbc70344ce1686b5f2b

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-08_8B2727DA.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      f3d7c251b11d2cc898a159ac4a11e814

                                                                                      SHA1

                                                                                      173a19dd6413b7c8c7355b056d3167576f715470

                                                                                      SHA256

                                                                                      275e5a7753a0e96f63c31d5d00de3b32b6db80248e017ed1a74db2f0d298eed6

                                                                                      SHA512

                                                                                      0dc4dd52ff749097091f8c6a1f5fca6138adac2274b97ff059bc28a58a25c78da17561b403a66f5450924eee936b0957db111b2e3e1f238ad3f905ae06630e93

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-09_1E79C22F.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      6aeeae1edbedeff7192f005c75bc242a

                                                                                      SHA1

                                                                                      24bf44c0915f72b0f6ee758ee2d446e2330aaacf

                                                                                      SHA256

                                                                                      a1269aa864c87cea9c3d8421f268feb0cc364d429a0713c5b600fa428aa97e40

                                                                                      SHA512

                                                                                      15285597518d98879c6b11db3dcbc5df915a5127d88641a61438063d203f76a268ac4f62efd5ed8685f9cc8993887b9bd14ad21764e9853df84e2d0a150ccfe8

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-10_8311E1A2.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      c89253ceb0b37e7f2a77c0a4f47f206d

                                                                                      SHA1

                                                                                      1bff6da77a3bb62696ff1443dc6c13d4b721a05f

                                                                                      SHA256

                                                                                      fe6712164066f0ef6fa7a63ff41b522b3aa4c597c3112d7468cc09f03294ccaa

                                                                                      SHA512

                                                                                      75203587e6caa72cc430c80d9600bbc66ef04ce574a9097b79f01a3d11228219f13acf0a1429f1a9747d30810fe5aa99fbe3da8c2bb62336e7230b715376234b

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-11_BDA5CA3E.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      a6ef9e00bca0d517ce57fa8564b7ca0c

                                                                                      SHA1

                                                                                      916a2c31eacffb920bc79fbefd22083274bb3da8

                                                                                      SHA256

                                                                                      bd61d760512cb2baacae301638d92f5f203c0074aa79a9eb0610cec6f8764655

                                                                                      SHA512

                                                                                      bb01c5bf10e8f39d21044ea66f5151543715d8560f82b896d0492ea38be7906a063474b3c4009ddf66fcee1f65e4a7268a7b37f53a3c0a9ddff773ad88ff591a

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-12_4A147F23.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      a3caef5e6a10e3150ac0c6b8c6b117a5

                                                                                      SHA1

                                                                                      51e57578b3ce5d3142c0d47edf704a813c9316ab

                                                                                      SHA256

                                                                                      95e65eb6a452c786b8fe31e7f2c73b73a65a88300c67c4ed8a4d58b399f444b4

                                                                                      SHA512

                                                                                      b5053af1e280aea7a928295569511540765136e12ec9894f7d9d3d2d9b29a86fb4eba663f334ffd097cef22fd8499fb8f9a9d240b95ed0611cf703dfb283dfae

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13_107783E2.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      638d8eca86b7beb7cff99f5263ab54aa

                                                                                      SHA1

                                                                                      4b4e776ebbb1b20766e93b3710b20f74a21099f4

                                                                                      SHA256

                                                                                      1232126fc90ab65ff1cbecb415f7f0d99c9f7f84dcb1278b3553a7132de6e653

                                                                                      SHA512

                                                                                      5f575d72f20490144d4d7133f9b2af1cd1209a9baadda95354dcf7eae8473c7839e487efaa7c6d9ae11e5d2191e5c2ffb6e66d64f55b622f575c529797fc522f

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-14_C48C0026.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      4406facde367189d25a8e14872afaec5

                                                                                      SHA1

                                                                                      08eead812415ae701493b2ae4f14bf0eac1661d4

                                                                                      SHA256

                                                                                      5ea4a8da729e5746f4b30de7fd3266963607650b9f3441b7c2d231382de2604a

                                                                                      SHA512

                                                                                      1e5bd0902bda1a87265397564379f17dd0e16e367e7f4943a16c36b452fb2796fd270d4ac7ae99c8fa35ff6a476e68785b990ff37a7448777780916fbf124ea1

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-15_C08E034E.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      dd4fe62db518c87e6b3835ed347a796d

                                                                                      SHA1

                                                                                      f3107d6577971b44f30cf0a2e59687fd035163d3

                                                                                      SHA256

                                                                                      2608ed6369c352528568d7dceff0a25ba8e476399bcd9be36f59b7aa7f096c28

                                                                                      SHA512

                                                                                      0f28225f9017bdb97b399e07d7bb089b535bb36162ec72ca1d1154ca4e484d85aa2e8368e72461001f1fafd2f2a201f1704fa5ce46f503761dfd660723b6a700

                                                                                    • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-16_7642443B.PLSQL.gz

                                                                                      Filesize

                                                                                      27KB

                                                                                      MD5

                                                                                      21b4f071885f9b0911e677803b3b3c95

                                                                                      SHA1

                                                                                      23a27e06c2d320e5214ce95cffb102e445614343

                                                                                      SHA256

                                                                                      d01de6e24f59d6d931bad3ec1f1355087a2dc87c932d4f1e84ca87e169a3d806

                                                                                      SHA512

                                                                                      4f50916304e66323e79d3a3da9d6f7d405367fcd7287a90f41542e361b92cc67f0437c5bdea1c16b33deb1afbdffb9a80ba1ac3ad51ed1eee15fc03c1343f046

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                      Filesize

                                                                                      124KB

                                                                                      MD5

                                                                                      557f6f938ac91e1692ecf6adfcf4fb05

                                                                                      SHA1

                                                                                      7de16594da330d53b4b86aa8432109474b398116

                                                                                      SHA256

                                                                                      2cba43c4ac0f60e6a2131f0514b380d970369f25580227512a4503c163926f23

                                                                                      SHA512

                                                                                      97def73c08e3f738ecdf5f96ef1ed21017d25b900ffa9c6d387302c79c23d87a81e067d27feb3ee129cc6e8f3ad25d70669bccbac042dcd57942ae6c12ecbda5

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                      Filesize

                                                                                      248KB

                                                                                      MD5

                                                                                      11db3f416902b93a1265803e5cdf7454

                                                                                      SHA1

                                                                                      046287bc7b81361a3437746da5c30aefda130dd5

                                                                                      SHA256

                                                                                      3abe3cba1adb87220f7164bc554d5273f8e8dab93e6042500b4bd583282c45da

                                                                                      SHA512

                                                                                      447a152e355461da2c6ae0877c3b8c20a8e6086867334480bf3c689c5c4b41ddc8ea9ec70923ace5b6fd3607470f3a4f17d69182654f0ed36cccf59bf141b349

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                      Filesize

                                                                                      63KB

                                                                                      MD5

                                                                                      ad66b5cdb8724708bf77ac7580474fe9

                                                                                      SHA1

                                                                                      b5dcb1e2bee0dbd2f5ee71705d1b346ddf8e7eed

                                                                                      SHA256

                                                                                      d77dd817f7feebe855ee8c6e02dc52bc3cc710b7f9f4a7b71f2fbfcdc52543d8

                                                                                      SHA512

                                                                                      953cf86e2dae92c474e6a0dd81c0257bd8b97ad076ff65bc9856272570f04594fbe748d47db725aa2399f1a80da288ab56590b79182e964a4b1db31f4126bc1e

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                      Filesize

                                                                                      316B

                                                                                      MD5

                                                                                      d73c7193c868e9b17dbef64029ec0403

                                                                                      SHA1

                                                                                      b350b92892fb61edc89135f6a1ef7d19ac36bc63

                                                                                      SHA256

                                                                                      886695bf74f2af578d56d7089a096b0e6f5da08ecbc7a7574456ae83fa081a9c

                                                                                      SHA512

                                                                                      ff40072a6e4eb04ccf8e95a843a595f5f9e00fb53056329c8cb312c35792277abf0604c8272c62abe4624bb4709526c8a8d209bce2685daf8bc5f0a6753e631f

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                      Filesize

                                                                                      462B

                                                                                      MD5

                                                                                      3b670fe388065ea4db9c0a12d0166bb7

                                                                                      SHA1

                                                                                      d3e8eec4e5f761f899a011e690d81f5b4a6de036

                                                                                      SHA256

                                                                                      fe833fb2e3772f9a9b6ac04e0bbf7867604793d47fb1d60adcfab42c40244a82

                                                                                      SHA512

                                                                                      4e2b0b23499f0ae29d738a83cec782caa9011a74bb5dbc2add1d4ad313e75268de38f5b222b9791396e020595b76edf21faca1f8843b4c2d68d9b748e81ae1e1

                                                                                    • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                      Filesize

                                                                                      483B

                                                                                      MD5

                                                                                      87d9e06943fab7f2a4a81af8d60702e9

                                                                                      SHA1

                                                                                      833d038a6bd14d45203f4d33fcf49f7546ef1800

                                                                                      SHA256

                                                                                      fa069c341abcccbc71ff0bb79a171eb1da97917dbcbc01be2d934e485f2b380d

                                                                                      SHA512

                                                                                      4b48a0d32e1ba2475084ecf4234745163e757db653aecff798e9aa1274292c2ee019147a0555ec5062b6075b00bc271a9a0a74a126a72e0e46ef492e77e00746

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

                                                                                      Filesize

                                                                                      47KB

                                                                                      MD5

                                                                                      0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                      SHA1

                                                                                      414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                      SHA256

                                                                                      cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                      SHA512

                                                                                      1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

                                                                                      Filesize

                                                                                      4KB

                                                                                      MD5

                                                                                      d3a1859e6ec593505cc882e6def48fc8

                                                                                      SHA1

                                                                                      f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                      SHA256

                                                                                      3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                      SHA512

                                                                                      ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                      Filesize

                                                                                      124KB

                                                                                      MD5

                                                                                      1c5bfdf7f87edb7d310d1eebd6e7606a

                                                                                      SHA1

                                                                                      caa94f0b6e277183c75f573237182773509ada8e

                                                                                      SHA256

                                                                                      1681db30112efbb1b05c2d2d1a3899e1ffccde057ef0fc5905968fcb5db9413c

                                                                                      SHA512

                                                                                      34ddf1327bcc75ac67a4b9f1825a0bd3090fc5702646deb5be907ddc698150fb094fab24bf11cf9b87de30bdc8d4a08fd62bd6c498f07e124f5855ae828de140

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-17989.iconmappack

                                                                                      Filesize

                                                                                      141KB

                                                                                      MD5

                                                                                      7a81ffd3f898f52a318a38012ac29023

                                                                                      SHA1

                                                                                      de78506eb76b92848791a22953ee8833b8516581

                                                                                      SHA256

                                                                                      d4ee848ec33afc420ff1db6df56eb0d0c60fb57f05a8436fac4f3fec1d54034f

                                                                                      SHA512

                                                                                      87ae25d6927822037dddffef207e47d61ffd3b57359a19f065e33e9bae7f8c438fe94856b27184c98255bc6fede1d2fecb8a238d739c015f366c3277d3e3f211

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                      Filesize

                                                                                      141KB

                                                                                      MD5

                                                                                      fba845f98696f5f11e28a30fd39c361f

                                                                                      SHA1

                                                                                      3f1c913d933624b7f26d16aa79045614ac8c19db

                                                                                      SHA256

                                                                                      3bfd1d27b97e378aa58f268978a38c02b4612f044d72ccf8c7e75ec976de1fae

                                                                                      SHA512

                                                                                      8cbc5102873d69e7a33007837808dcd1c0c8a4dfcea5e6a5dd6523a43712431f509945d39699f13686c4af29feba4c9dc1d7b688ef69168519960b93d92385af

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-16576.iconconfigpack

                                                                                      Filesize

                                                                                      554KB

                                                                                      MD5

                                                                                      531b0ec4438dd872d04533f59dfa64e0

                                                                                      SHA1

                                                                                      3b0f8c297e41041a05a519dea1abd132fe64bf49

                                                                                      SHA256

                                                                                      5e93bb22980d9302b47550c25022471f74c088aaf41e7ff1a927e1075612e70e

                                                                                      SHA512

                                                                                      f92528014165a75c8607df8c5be70917d94dd5a3278ec4135f46af14fc2695ec336a3b902dc463269ed522090de848004fe17250a258b264a94a5cc6a86cfd99

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1711.iconconfigpack

                                                                                      Filesize

                                                                                      82KB

                                                                                      MD5

                                                                                      7791ab25c3d375120d7c67f80aa8587c

                                                                                      SHA1

                                                                                      3b9f7a56962d5ed0a625ccc481204dcea8270b4f

                                                                                      SHA256

                                                                                      20f5bc3f446e5b65e5856edcd3ad2dadf6d4f803da7cdec26a8e1fb61c26708b

                                                                                      SHA512

                                                                                      d1ef0d4d823cee89237ed8b4039ef7e440af88a740364749ece8b8bfdb337f710c20970abe85106bab50d50b22df09de9170fb1123eb7cc530b276638ab51820

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                      Filesize

                                                                                      248KB

                                                                                      MD5

                                                                                      f2674df869a905b359fa226a18328157

                                                                                      SHA1

                                                                                      f4cfb0dab2ed276f161d94ae69fc23e4ef1eee65

                                                                                      SHA256

                                                                                      a1ac4d7a91034b3c96df0a8cd8cc96fc9be94de4c6d3b6a8440df91fccb2711d

                                                                                      SHA512

                                                                                      f282e9cf71cb7f6c48a3ab17a9be43f47d17fd27777d744ef90249d734de8827fd84da64ede258f682ee5fb0ead538228d1c3975d0ed7f64073d66871314e15b

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                      Filesize

                                                                                      63KB

                                                                                      MD5

                                                                                      438f728b7e5f2f5ec0c279d4d9817a73

                                                                                      SHA1

                                                                                      f66261cea89ccb547d9dd9f8b84ec2a878a47361

                                                                                      SHA256

                                                                                      182bfdfc17c342429f07c226f1ebc1291c91da0e7dd1d2a5baf75ccba503292d

                                                                                      SHA512

                                                                                      56f0dfd710627b218cac4a405cd0f11006094553829d68348b6056fc5bbb3a8435123d9a226db6fe816ef171992623853137510e1f3732bf7526c5d652ef4e91

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                      Filesize

                                                                                      530B

                                                                                      MD5

                                                                                      d0366111328c0c4dda33c8f649ec07b3

                                                                                      SHA1

                                                                                      52a1d7dc3c09391eada85c42e597f7305ffe8228

                                                                                      SHA256

                                                                                      0966d56be3ac2c8897ee63b6fb8e23c3d97f9721ac358319e5b81d649ffbf551

                                                                                      SHA512

                                                                                      e659d1db06aaf01f4ed31e1c894352ff39812b008196aa4819692a6b6bfb50d11cf97a7207fb09023215eb09e163437c8ae889db471ba0857e14bbc7f674b0fd

                                                                                    • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

                                                                                      Filesize

                                                                                      6KB

                                                                                      MD5

                                                                                      2b0bc3d4b28b37889d09acc741f4ebae

                                                                                      SHA1

                                                                                      060af238652083cafa7c43d79ea457eed8570429

                                                                                      SHA256

                                                                                      145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

                                                                                      SHA512

                                                                                      459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3