f85ba13b1d04823edcf037d4a4131aa6c9cad75b2970d3156d67f5284663788d

Analysis

max time kernel
349s
max time network
606s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02/01/2024, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Size

2KB
MD5

d13e5f59b2fedb231e6586f76fd5f5c3
SHA1

1ffcb643a117d8031773b629026f8daf15084ad8
SHA256

d7046257350ed68cfe4f253de0af8dc9dc6f963011ffa9b17bfddb5b7810527a
SHA512

a580d7b6db8740430a5e9fa708855c74bfec01924dd30c167e7ba57656d33b2f0b4b282e3e4cdcf764f843468cfb582c0801e1203931d608a9ee34f2eeeae42d

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:579

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:579

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings\""
1⤵
PID:579

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
1⤵
PID:579

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
1⤵
PID:579
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
  2⤵
  PID:580
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings"
  2⤵
  PID:580
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
  2⤵
  PID:580
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
  2⤵
  PID:580

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:601

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:601

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:612

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:612

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:614

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:614

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:615

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:615

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:617

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:617

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:618

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:618

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:619

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:619

/usr/libexec/xpcproxy
xpcproxy com.apple.suggestd
1⤵
PID:620

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
1⤵
PID:620

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:623

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:623

/usr/libexec/xpcproxy
xpcproxy com.apple.knowledge-agent
1⤵
PID:631

/usr/libexec/knowledge-agent
/usr/libexec/knowledge-agent
1⤵
PID:631

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:633

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:633

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:637

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:637

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:638

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:638

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:641

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:642

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:642

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:654

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:654

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:659

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:659

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:660

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:660

/usr/libexec/xpcproxy
xpcproxy com.apple.assistantd
1⤵
PID:670

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
1⤵
PID:670

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreAuthentication.agent
1⤵
PID:672

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
1⤵
PID:672

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:673

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:673

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:674

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:674

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-05-2022-07-08_7898354B.PLSQL.gz

Filesize
64KB

MD5
1a6171979c5bd5cedfe432dfef5c7e1d

SHA1
0a3d76a13533bb6f005f755d707c24c78703b072

SHA256
7c7d7740492756ba292cf964632d5acc075d90a91fe22f1654f38b154a11b298

SHA512
d60f4d4385e51d4597280995bf4cc8a68a88c61ca339590149d651848ce743a3c1cde49c658b7aa579b1279da6786befa68e98bae5d46daf86580baf9f2802df

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-08-2022-08-10_67D580D0.PLSQL.gz

Filesize
23KB

MD5
ffcd103933a55f89755faf45cdc6ff50

SHA1
de745f8cc207df92c7f2cb061724b187ad125547

SHA256
beb428d4e16ba8753f49b1555127ab45e409dc935cad9ada43b118ec244a934d

SHA512
63547901141dd87c486276cf8ef26a5aceaaf3f2b0e7c85fcd7f2d1281ea4d052b9d02a679fab349e819b2e17ef56ebeb3e7e899b546c430bd9ed1a8891ab57c

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-12-2022-10-15_65CA8A86.PLSQL.gz

Filesize
50KB

MD5
1bf29e12acef2744bc164bfccb2e0f8e

SHA1
d3a7fab1823cd32fa8037aa8fc758c4f84867cd5

SHA256
5a5696a92e0555bef6cead985aa912bd458d00e39992c81e20c84f49d687e350

SHA512
062f98b5e7a4b21b14be966f674e8be39a79c9a2eff58982bc44621b68827d55b59858fbf56242b99a4cd5637f235f928e56c7a01a4b28f926e2ab6ebd18eb9f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-15-2022-11-17_79A51460.PLSQL.gz

Filesize
23KB

MD5
962854d9badf72ecd792594184c5f7a2

SHA1
1836688ffce19e2dcd54ad5c9987d2742800f711

SHA256
9cec70ed3bece80703aed824a1f639253bdec44eafbec92abbf3536f2122ff63

SHA512
305bdbe9f9f71d702cc642f2337d95414e40d28cc728a099a653cc1d5c8019b496b51cdedad8d8b2864b60e7b0923bb78f0a788a8e2e86ede6234fab935316f4

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-12-20-2023-01-22_833B1B3E.PLSQL.gz

Filesize
27KB

MD5
a97a24e773df6c7548f1ac1dacd32a36

SHA1
66385354f9f78d29b5408bdc03c0ca009c38a190

SHA256
6ae54e073fe47928898f31942847642692488559fc8317017e2dcc592ba8baea

SHA512
a3e3030e232ab7fd9a420153effdbb7a2b132b075c030b47aa030b77e70e3ace0643dc54f9330bf203cb580270659e7d88e9872837ae182e2d2262f788081ee2

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-22-2023-02-24_4F428C88.PLSQL.gz

Filesize
27KB

MD5
6bc2ce8416721a27d51ada85763cb339

SHA1
88478e24054291ee46ff2acefd4c2859e7590800

SHA256
4df4394593a8696e9ce73b5061b147762dce47fabbdb594eddd7c61e6d7216cf

SHA512
eb8267a188d53067ba48627c5f21213e28f4604f02ca4357d542e1de015021a504763eaef476024e86fe4f81f1809f626feab9d2700921f8cd0bd88968b14f60

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-24-2023-03-29_FC467A6C.PLSQL.gz

Filesize
27KB

MD5
14c2e52d18afb4b5c060bb12290247bd

SHA1
799c8e3b2964a9245762a95c83160fe2671ae434

SHA256
546a1426ad8865282693abca03a60b7324dad78b5fd810fa62e062b2e0606b8a

SHA512
5829c3cd24d3c05fe5cbcf2ba55ea743457bca6245a71ca4af870ab7f3d63ade23296720bc440d062d68e557c63ea452ed738b47e946f2f8b9689bd5782ca1c3

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-29-2023-05-01_047A6148.PLSQL.gz

Filesize
27KB

MD5
1c19d3b3e8da47f40ed94056337baa5d

SHA1
443d56d6625cfa7bf97961ddb7623d4cc4e0be48

SHA256
6dcfa276cef653c7090b95b62bc35ae2a24e6c652f3115bdba37dbff43a4da5a

SHA512
a0c74fdbb65b8c547eaa88b88f272bc7b5cfbdeebadea9a5fa988cbae241ae21c8558e54b1b8dd39c6aa5016981676402f1116f085ea67ac0aab83f03755a983

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-01-2023-06-03_BEAD5642.PLSQL.gz

Filesize
57KB

MD5
451cb52d28e88493d71f77fbf0ff5b4d

SHA1
3dc7428f661fe7dd215f375e11943e2a187df99f

SHA256
bec63656ed4018819cb215fa65ecbfd209fb69e0da631994d9156d000356eab6

SHA512
5a75250f6cb9a16659eaa5ec840ac98d1120d3f294bbacb975eca9d9161623cf530abdad988a821466f52b4057667c1b7d5765a1f3146ea3be5d0862d814b08e

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-03-2023-07-06_ADDC2E75.PLSQL.gz

Filesize
27KB

MD5
28aa6de9055942aad4928a0bbcead933

SHA1
edef5c69b456e026c0b8b2227f192d9bab802d75

SHA256
880b91140779732f4377f2c550f2c08ce8c5c4582ce790c763b644614b9ff180

SHA512
8730e62c64269ab306e09b92e65867e629d623c0606ab8296d109cb1ba203bebc331b25d60ca83dbe166106a2eb30180ff13e4b7a22414148a8ef0c8fdd6f13a

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-10-2023-10-13_5B114983.PLSQL.gz

Filesize
27KB

MD5
072cf2e786d2be2c6d7bf1c7ceaada36

SHA1
b9a7aa95f2f2718f988a36544e67a6c6c4dc4ee8

SHA256
54d11737a94c89859ac583866b669651a48b419b1b7d0724c2d858484a9034c2

SHA512
fd244b81bb1701f0bbd6f25e299aa94b127dac10f653dceb02e061aa0fa93c6c04954c2f0dfb8d45747303ab4476ebf612b6afaf6b0c3711387c6ec6c6d23d96

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-15-2023-12-18_081DFC9B.PLSQL.gz

Filesize
27KB

MD5
4d3f5cfaa9d4776e6f89827ebb41c1a7

SHA1
95eb6804d7ddc7eab7cfb4a39abf81c08bee3671

SHA256
1f4d23e858fa75edf99e4c1a9224aa5836c53ee23c41aeae1b07999c20215433

SHA512
4ec3ffd7b5d9ae6a71adad8fff6e3a792fd010435f0a0752068f038ba530dd2f1133b8d45129fd6b030f8c395cfd600e4b028aaecc24cb8423326ee5cb30e29a

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-19_20801832.PLSQL.gz

Filesize
27KB

MD5
57dc95549a394972a5cfc987fbad13d5

SHA1
7ae846198d86365e57c7160fcb4a8528892e2c82

SHA256
042d8109474d1ffb9de49a7a55957ad8808483102ed4a91144249e931999f673

SHA512
5f081d93a5cacb2eeb20fca72629ca218a860eb6c2f6f4ebf4469050c1c29481a45213b7436ec141f28bdac8dc9b9a9608553fbf96f8ef74029dcf60059421e9

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-20_1D47BFA0.PLSQL.gz

Filesize
27KB

MD5
d32a28a618ead43e14c6f93287114d88

SHA1
cf3b1c9ec975c8019a252b32ce7aaae86fd32a43

SHA256
8839f8092b340589463dc4458d76a53f20fd83360aa7f6ddef2b01dfa61f247b

SHA512
a7fd39ac65b414b10fd021efa0e60fb1b62b21e22c370c7f84a73a61e68daa063a7a7e1a55ec263965b032b79d5599e16882e189f9d1e066a1cb21df4e344db7

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-21_3F06F036.PLSQL.gz

Filesize
27KB

MD5
59316ee77b849bf7b9d189764e4c0eee

SHA1
aa904e146cc8d8f707000bce02f65d7387fd80dd

SHA256
e21ab8b01388a16c0a5f4de5cf03b3aaa1bf4641ba4921bc2d108117b066a1b6

SHA512
b882fe794687c9e8c54f72295b28f72b7ce4890736a2eec912bd6abfdcd6bb248fb1e1c5f4f2db534592a3cdc418efaac5936e129ec67e55b0ab35a9a7d3cee3

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-22_68AFB823.PLSQL.gz

Filesize
27KB

MD5
b8b3f5d3c3550af9652d332fc858fa34

SHA1
15db985c6cfcc8098067c1a400b558d9cd04cb23

SHA256
f50d31bbb84bbb86084b0c7c832c08a542566ecac3be6a8c70c7cc959495f22e

SHA512
e06cd44e01b49cabbe8558685380c83aa1ec6429e0634a6624cf1be718a6323eafb42978dc3e73a7e07382b1ebee02e4474dd4eef7e765336e53ba7124859b6f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-23_E14C87FD.PLSQL.gz

Filesize
27KB

MD5
27486db0a95e0bb2e650bbe97953d4f6

SHA1
08d3d433d81ce2500bc9e73f76e7e1422d1c7d63

SHA256
a13635998af90932744e2907d0005ccc73159268f9939c843545c9cf85b6ccd7

SHA512
79dbaab28d636032f8e9a7ccf1b905d29eb6376f188fbd0e705990ee039d63a6a71fefaafa8da4da9f51670f0c9558c0a530ad180f682d1f156d9749073de126

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-24_5DCE61DF.PLSQL.gz

Filesize
27KB

MD5
7e8862b90321178e9b2e7f6c20bc563b

SHA1
3e4f136325c5b266fe15348b31377d599e80aca8

SHA256
87e095ce03c3a4b5ca0cb193a6e2e393adad0135927e6df01362d0c04cf4009a

SHA512
dc7e354e0c7148fc2d621e466f74aae33e0ed9fc138e45e37908fa6dbd1139527369e8551a575a0af657ce2ee11ec242c49f125542bab53e9a78301d78c960e3

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-25_461378BD.PLSQL.gz

Filesize
27KB

MD5
49204223dd8b5e04334ad0aa0a1b0f75

SHA1
07419db48e0a062ed8468f02bf8a8ba169be1047

SHA256
edbfe9b271af1e64d2e47b83eda2e8647d960da5b8182956e06efc899bbe49f0

SHA512
b233cdf5325e31c5ceca501fb9bde52d7d043cc9860970ff6213504b5d00b7b854b1c9645793577fe8a97ed2f1e918ea37c4dd107c05e12b8bd26f18a19f74f2

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-27_657358A3.PLSQL.gz

Filesize
59KB

MD5
892dba32a8a2a140107414e39147b78b

SHA1
92e0afd7f9dcc10876c05dc870d4c8764e3c1ef0

SHA256
c2f4f4a9150f3685a31d8fc857a026482a0b92f68e872da0b153215a6e405cc9

SHA512
1706d38a0cc2ace3f9a8a7c9b8922636ec4a63b7bdafe5f874653fcac9e4fa11cf422f80998e337394df4070de46d06203e5ceffe5b9ed3cd253dcaa96798e66

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-28_CAAF703A.PLSQL.gz

Filesize
27KB

MD5
f15879c44fa85fdf4ac14f66745fe140

SHA1
574aa7c7e87bee89f2c910826d5e1ece7f04db4b

SHA256
69c4d9ca6dc07a8dc7624cc1a552a9176a2f3b791e580a8dd7ad5d4bcfabc73d

SHA512
12058253872af9b49b8f60c503dff6e8ad7569f5e613a71af502dccb97794dab78588f7efd837c7c55255cbc3b697ef810ab22652815e451230c9145bc30ee24

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-29_7E0E2864.PLSQL.gz

Filesize
27KB

MD5
0c009e9572698f4094ca912629e7c94f

SHA1
222cd398e26ed7e96ac0d24ce489edee0659b187

SHA256
86616521eccef4109aead1626e11d7ad307994c5c6cfaa9e678efa838e2cb442

SHA512
323295193cdb2588a383d6dc94a4b9caa86b0310eeb6621c87711465a7fad1b7088b36431eeeb68acfec27d2cd6dfcdd050fdeab520f7e1210144f2dddf1f796

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-30_AA9B5658.PLSQL.gz

Filesize
27KB

MD5
641b2cd4c0d6f35b01cf47be3e8dbb48

SHA1
360eb7f8522518df5291483ef326f0f4fcb8b031

SHA256
db7405d215bcf5011c8ca978825bd9e263100ac611469c42642f81490168248b

SHA512
810f86bd074e3f257ff592b54b9d9c4c629b56b1d92928751da087a1aac5124b5509af0e94c7cd08872c2f3c48cf1b4d771a6ec9553b825688ad39cc12f92ff2

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-31_20E88298.PLSQL.gz

Filesize
27KB

MD5
dcd59a57c12759132ffa8a339a2cf5fb

SHA1
2d2a3f1f28570b8b8f176ce67edf8f78cc0ca7b4

SHA256
f8fef0e33ffc7c619e45cf9487cd43bb38b28cc177f79261e0765929f1b0d3a4

SHA512
6467fb527d37764106c918075df9b714b74c17e1db8275eb82544a17e224fdcf86af38b97b18a261f8fa9d39d7dfd90fc21d48bc01f450626e25872d2a3945a5

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
6d6ffdaaa27a1a12d4366faca7caf90d

SHA1
3f9189508e4655c57c7813f571f4fd2d7b65b6bc

SHA256
ebd948d3bed7f2058a6ca6f42a46eebd88d3ca34d9b9eb4dd3ebc07a4aac34d7

SHA512
e6d7608aeb6956fd137bf9b598c3cfed64ae3f2b2fb2a62695a5ccd7d070c3e8b6c4f5930573e095a64600ccf3bf1723e9cba03b1da50174efd973f7f7783ccc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18242.iconmappack

Filesize
141KB

MD5
b4c22a09fe2f31466efb161ecbe2b2c3

SHA1
aeecd74130ef2f9799e5b0baa95cdb71d54ce6c9

SHA256
4cf1086aee27b90f5b6e10f7dc7d3113845c1cb7efb844b4a0bb6990589607e2

SHA512
64162fd751a35d4868c4e0b358c7a4c687078dc43ce6abe6d043aa9d70881ee8273a89bc9a0faef0453c68b63699b0a66aa5dcec7e3d13a34e3f50011c723006

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
141KB

MD5
45858a55c27b09a84895a274589742f8

SHA1
401e5fb105d818eb631e294d25c33b978ae58a42

SHA256
977f6a61e6caba111511db7a50f6a57ea094d644da3dc17669c02e6e5f780a8a

SHA512
7613625b022da7a03c3a650b12c77aa1d6d2e9113a42a0350539465853f2966c5ebd9be57f90d4162e35f8987dbfbe43e7c86ec0d7beb209bbbd55f51f2471be

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
557KB

MD5
c612eeafe7d65893269b9b39f64cc2da

SHA1
b337aed83971aeccdf700982c3a3cb5aec92c1c5

SHA256
8900950d05fb0f2db3032ea7849f48c7655f210e666aec31d1913b14089733c6

SHA512
4c0c208d9ff3a12872d5c7e91819fe804b602e02bf822081fe975233f2c22b9a4776f309301487914945ab26536945a3659fccfccc5b2a01a453af63318132c6

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17136.iconconfigpack

Filesize
556KB

MD5
60a9b755ab271df605b8f2a0b26bcb1e

SHA1
2098fec72d912f48bf3bc51a186958c28dbe4cb8

SHA256
a67ff86f31c7254fb033c4263e864976902d7450c4b3b05228c331fad6ecb2c7

SHA512
837edbb92be079ec9c27015aac9dc1ccf76276983769c778846765ac675202eb35bc763070b8ac490e7e44d65299e0ff2832f2a2f89983e1c685e4d8a6ea6de9

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1671.iconconfigpack

Filesize
82KB

MD5
9563a30bbd5d0af6f826ac7a6f33cf74

SHA1
df5f46010618c73b1a2bf277b7ca2a0c6ee97e9c

SHA256
d8ae99aedff70b2d0382f393dca972e58f26a866e9c831e6b0ec6717eaf89fda

SHA512
f5bd911863ac95fe1fc89a951c2ffda27308bbb93e35c6ed9dbfb936370cae526e179af2a12417a41cab3a359cdc9f5fc48f735af77df12ef0e2acd28b69fe7d

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Experiments.pbd

Filesize
293B

MD5
69a9eceb15fcf4916dd97397011dc4f7

SHA1
786fafb9ada02323d2aba16b132a1a52d265fa31

SHA256
04ae095a818c238dce74c992ba6e76d281a54f00620d702a8a4f9b7a8a888ea1

SHA512
9a98a493f4c989525c3bb7cbc433b25387e7062ae9c97994844665151ed9b7211e4bfe2f81a0d8cbfa399f978ba0b27c158f6b17bf009677cbdf0ceb489305b7

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
14e91f6538fc2346f2eb0ef903ebf284

SHA1
60ee04791b1afe0bed723dc04dd96bc1d26d5b6f

SHA256
aa3784ecc9de239dccbdfbce715ca70c45b57d08682e30f6f8a30b4798534ab2

SHA512
1bd883407bdbf4281cfa674c961b124840da90d5cf630671efaa996234f3fb6617cd4e7ab58540563211e4d16da1c0942a4e3ae96aca5575f6ed998b2c7ec5b6

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
8ade4e3d6ecc24e026c0a84ba1704713

SHA1
466b3c40f000edc8a47b7fdb3f7435c14a0c8679

SHA256
f47af7b6f0d1ae5ae95a44eb66d52d7014ffa5ba17a70e086700175a0c44aa65

SHA512
e034870f8c32dca89a83dd53a158f04f66e85be9a39b597692c54f82a45dcda07a3167746bf5658d4f71a5e3746ad7b5603c7e69c6580c45f0b9d04647579ea9

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
d60bd21c16b08126d26f4e43d3586fca

SHA1
330b50e21f4ab7be6467011ceac6d0e55069e3c8

SHA256
7cadbca3b001d5b86bae219ed7cad5832c9f5613d487b191c9b93a9a58cd456c

SHA512
dba5634a1a843d35eddb6ab37fd60409e8b5c06299747d244f77e3e8c79a120d2518deb4ac195514e04eaae1fbb2e8f9053d1066251d2bf42d7fb8de028ad11f

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1162.xml

Filesize
150KB

MD5
1d51e6eba90b4f906ce24c062305dc41

SHA1
c3d6b5737119bd3e2a5a1f5dc4461ac12b1504ab

SHA256
dbe65e8dae5bccf407f19bfd7bfdbb358b2a0ffb456f962e504a9ad062576075

SHA512
df2e12956f760c74e4373acd5ecc6a714947d72290c6080cc2cc1a779c4ae32b7915fd727be48e066a3741ff0d45f28f58cf17b92e96449f996d56ab1c7f76bb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
526B

MD5
35bd24cfdb951e444873dda4e09f4c66

SHA1
d74ee30daa1b28804a5a88fc762d608edd947e00

SHA256
a5b65f11a07df19334e3822cfb180cfd92625ac7e043069dadd2aff659322359

SHA512
06b399c63b4d6fbe3eb950715918bbfbd5148a384af43df2f46202f823916f05280ac2c3683b3dc1d13d0b45d17e448622ce2cda7379e0b7d6128af4631b3da4

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
316B

MD5
438d0fe8ce2ca7925dbfdebebb0819f4

SHA1
cb2fc38d253b1f82dca3063e983954cbdef10c36

SHA256
889ecaaf35e4051a5fac896b3174f348435bd539f2219c05454d1263eb476dbb

SHA512
1195308f475401bdc68874ba4779c492b8d0dfbdab9885e0a721fd06237dd6e7d5e50b286c03fc84c90432092e922fee1c2c0b6ca99e4d9c100641ee6ce76c76

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
482B

MD5
89874a6e119aa746ff3d292451d98761

SHA1
79b900c5c10115cbe51cc006e5f3e2f3f13f3214

SHA256
a22b04439105e415952c298ac3c1468cbc8ecad71f1c09702843b28ebf43dd53

SHA512
214f405909fc274c4757296a7832b77b163c343f5c94bc6d25417b81e5ec02da6b0b64e2899ac37ae72ec765769009aa5807806f4a2901ca4913bfef2f6fc5fc

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

Filesize
4KB

MD5
ecffd97aba0c34d35b1a9814925dce20

SHA1
955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

SHA256
9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

SHA512
0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
4KB

MD5
0772477173e9e34a7860141b6b18a084

SHA1
d28286b98e6d7de043466687dc609f2b5287560e

SHA256
6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

SHA512
6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

Filesize
21KB

MD5
df3e0dfd820521a756bbbc584f4bf1a9

SHA1
dccf82e2be348c406faf445309ed1669d7eab7f3

SHA256
7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

SHA512
c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

Filesize
2KB

MD5
ba4df8801bd4124f55bfe7c130477094

SHA1
2136b957456e5776e5d0b996fadc2978a2cd064d

SHA256
d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

SHA512
795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
51ad4cb20a64c1c3c6629959fedb4919

SHA1
b68d8ece79495ae7b46500597ecea421eff8053a

SHA256
1fe3b836ab9aa8ed7a7396e653cc343b097b03b7e66e86a41a754b59b7bd3d17

SHA512
5150028cc012accc438dfde5cf7706f54730e86cc106c55dacf1117a0a531d200a3ffb44bb4f34153ba5723891ad414051ee8205b486b7664a611af98e360977

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
399172620aceaa2e8fe1a928525016cd

SHA1
48d3c5a0dfc1687633c4c0d34e0f3cafaf38b39d

SHA256
2de3531c7202a8d31cff411bea000f124837bd6eb2bb08536e8c219e5bf37ea5

SHA512
10c04606a071818cb10cd2764bec175e4968a38f27422b0379eba74d6657a56f5718e04aa7c09c587bb4566760cce3f382d400ec5520a66f260f4ce24ba18d00

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
03839f21f749c66f5eae10f1b7653d67

SHA1
4af4ef164a167f04af3b5c317c835be3ae5e3910

SHA256
c3c02791d047c6284f22612a69444f3d5254e97f4e6ab72456e973f7b31c10b1

SHA512
8561c708f66d8ddede2f492435fa3e7d19712885535a2ba1db6a635290deda6dc18bba02d1d883e1c466a8a7278e9d4682fe603ec9804b5231e0ba8f6a7bbb8c

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
538B

MD5
f71dd22947eefbfe0d5a0f8378415ede

SHA1
6fa4f7c087b47b88ace42ef4715ba2a3bd55d2ad

SHA256
3a48408f8cd66ba78e530af103e5026575e997ac2d350a7ef6c317bb44a83280

SHA512
2bd8b425387819a67fdb6fbfda687be9b99e566b201d20477e84e5401de4b4ea92411d8373ad9f6ba4f54396734a15a01fd723b826b82a1fd07a81fd4d7f56f3

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

Filesize
6KB

MD5
2b0bc3d4b28b37889d09acc741f4ebae

SHA1
060af238652083cafa7c43d79ea457eed8570429

SHA256
145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

SHA512
459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads