f85ba13b1d04823edcf037d4a4131aa6c9cad75b2970d3156d67f5284663788d

Analysis

max time kernel
599s
max time network
606s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
02/01/2024, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Ghost Buster Pro 2.4.3 MAS/.background/bg.png
Size

86KB
MD5

ccccdbebe8a63d52a5634c575562a7ef
SHA1

f22b7e39aa29a01e5784d08aae8557127f0bee75
SHA256

9767cbc6f03421fb8abb858eae12fd63790f99e2344d907ef0986ea8330b439c
SHA512

df62a14b093774928a50d69008fc5cd9d52088660d77abd6a457fe24d0413db62e6cd7245d4edabc035d41a0dcaced0cc38a2512bc2e2820b353451de72229e1
SSDEEP

1536:naqDHpS/84VwZCQDfNucLv3Kk8OP3B++9d78yrtCsZ5an0QhIiRs:nO84uCQpr8KNddVHoa

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png\""
1⤵
PID:577

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png\""
1⤵
PID:577

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png\""
1⤵
PID:577

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png"
1⤵
PID:577

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png"
1⤵
PID:577
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png"
  2⤵
  PID:578
- /bin/zsh
  /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png"
  2⤵
  PID:578
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png
  2⤵
  PID:578
- /Users/run/Ghost
  /Users/run/Ghost Buster Pro 2.4.3 MAS/.background/bg.png
  2⤵
  PID:578

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:599

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:599

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:609

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:609

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:613

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:613

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:616

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:616

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:619

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:619

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:620

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:620

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:621

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:621

/usr/libexec/xpcproxy
xpcproxy com.apple.suggestd
1⤵
PID:624

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
1⤵
PID:624

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:626

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:626

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:629

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:629

/usr/libexec/xpcproxy
xpcproxy com.apple.knowledge-agent
1⤵
PID:631

/usr/libexec/knowledge-agent
/usr/libexec/knowledge-agent
1⤵
PID:631

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:636

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:636

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:638

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:638

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:639

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:639

/usr/libexec/xpcproxy
xpcproxy com.apple.assistantd
1⤵
PID:645

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
1⤵
PID:645

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:651

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:651

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:656

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:656

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:658

/usr/libexec/xpcproxy
xpcproxy com.apple.bird
1⤵
PID:660

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
1⤵
PID:660

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:664

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:664

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:667

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:667

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:668

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:669

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:670

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:670

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreAuthentication.agent
1⤵
PID:672

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
1⤵
PID:672

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:680

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:680

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:681

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:681

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-08-2022-08-10_CB8C491D.PLSQL.gz

Filesize
50KB

MD5
cbe769c3fd4622f523aa16b145293f58

SHA1
5e5e20a6bb83a2f4f2f3894d9deee8979fcdaeda

SHA256
a2ec2458bddf349b3d23e3f1eb9f186d808a6c15f04e40866c755595f25f22a1

SHA512
4a39db3c420cf1edae6ee70ccb971f5157e902b02129f01d812c990d7a9ff47371d86de4ec71f49b69372276eedcdaad99a1c5744bbf5a05d83f86c04f00d674

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-08-10-2022-09-12_B3F81245.PLSQL.gz

Filesize
23KB

MD5
3e7293219d64c695b7e1c25db79b0c46

SHA1
279893a6c79414883edbea81a514ae5a93fcf561

SHA256
d18b5f72860c8cb73001ac5eb3f849fca142cd36103dd3580a8c67858d0ffb61

SHA512
dcc772be6e59d71529362048c6c411573fe34a7f582f3577587e46df8e3a0c0395ad5b9f217e519aa526f55ff420a30aa6330e01d0fc336f9ec1003e3d05a2b1

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-17-2022-12-20_3CA74EAA.PLSQL.gz

Filesize
27KB

MD5
6b590f611d4447ee897d1af4500bfe95

SHA1
3c78ca7f0913d13cf33d9f565aa92146fed5acf4

SHA256
887b1de2e16de1a4887ae58eaeab58676a5f99c3bfc077967fb81bf7d2537aa6

SHA512
7b8fd864ee5293a658a91284d4f870a176c42c32ea0271cb821c46be41449a54b13002c720ce7e5b450662eeaf86b81b1f48d69fe68f641a35d85c4332cc0838

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-12-20-2023-01-22_EEE1BB7B.PLSQL.gz

Filesize
27KB

MD5
722de5bbe2d20297ab361bd6f204e22b

SHA1
be1f77714548acda4948dfacff4650755152aa0c

SHA256
33b4a69f670d2ead7f54190c2a7c5e138887315b379c1900a8023a4860314008

SHA512
111a695ccba0218e5a3a49f06b6245cd28c4816f31a5b9f76e4c0494a9a2deda5e36204ded5b7991e185a2c8cb41da4cfeff4edfc8ca25029a25cf19366f61b0

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-22-2023-02-24_A7D3AEC3.PLSQL.gz

Filesize
27KB

MD5
971375bf7f1fe039d966d6a8e02af64f

SHA1
769d4a54fc1abe991a3e01385a767ad00dc55e02

SHA256
c9a173b66340a169908abbe128f5313751f8f014abc884af3ccc715e2cea4735

SHA512
6408b5299d400d23527397fafb1b9424c363e608bfe2f44ff957b4afa55a44821851b65ccccb1ad19dfbbc9fbbf6befee3b36eab069c0144e472065ef5a4267b

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-24-2023-03-29_F70FE17F.PLSQL.gz

Filesize
27KB

MD5
8a010fe09df3fa6384c6b91c0b5025fa

SHA1
0a68f3eb03891d203f85a1ee339e3d2f13cd7f72

SHA256
06602b47f4d76e8b92a46167f7eec2523ee7689fc6e5efb781bf7de7c77d3b7d

SHA512
8beeba3b7d2b37b57a5ba3fed6990888b5693c32ee45096a324761d00908f914bf071453bf5a1cd84b9db813ed559ebd8d3a818590eb15642b889ce06b8866f9

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-29-2023-05-01_AE80B4E9.PLSQL.gz

Filesize
27KB

MD5
f93af01f202dff75a460ae41fa32fa5d

SHA1
3d9edf459228f76fc494574a2bdb702c06878852

SHA256
016d9a867c182328d184d251f96b83ffd139e151edc6d8f71f118485e2e7aaf9

SHA512
ba38c2e20bb240731277f7360b7ed98d3119a9bea912e8693880b531ac2d1f666d216fd1c8961110696ca1c56a68ea549bc17062a8705fbfdc17cee083de9752

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-01-2023-06-03_BC23FD42.PLSQL.gz

Filesize
27KB

MD5
111cc0acd44a972a49f1bf65c9505442

SHA1
c29d864321c5adaca190e978fdfa1a33dd07f1f4

SHA256
a434b915229edcbd18d99ea06b52f31aa004836e09ae23c85ba562e820d91f33

SHA512
899e93cefc9a221afbbcd1d96a1f8e57503990b6564e1cfeb06e6843dc7387e73bad54ee0066dbab3dc266a17f45c7c9b36d69d020ddef5006e23ecb1e4e3c36

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-03-2023-07-06_46937AAA.PLSQL.gz

Filesize
27KB

MD5
6fd465f6b949b5e0236acb01a46d0c00

SHA1
a4d5d7c7ea6d2a52b031c7a0e2a80d5f3bb05608

SHA256
39566a67170e5ad56c3dd8809472565ce7f4749cd8b0a5c13dca74cb8d72b1fc

SHA512
5e6e6a635a34b1c93c93f5b1c4c5f5c2575c7a7e72ea97779ec94ed6443e2ac5882d22d45704c2a2d73cc4363aefdaef04e51e18b17f7d55ddb2bffd44876a19

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-06-2023-08-08_6229B24F.PLSQL.gz

Filesize
27KB

MD5
f464b31cf75f9c1f5893a6f2f5672c46

SHA1
ce911a11c7989e6da4dea308003fd99faf1839d3

SHA256
2b7e0451c9fd6f28fd37823dbf203a2a47b289ad3b8fc0c457221c0a4c6c3f54

SHA512
c75f85de5c0334cb8d6b78246c0a806bfed2aa4e6b02c6b1781ce280f998ddeb9774cb1155bf77a62eb00d61cb85fdeca3b64325675ce20e4afae098604d4100

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-08-08-2023-09-10_60A1D807.PLSQL.gz

Filesize
27KB

MD5
a3d37f10c2c747c00a65cb3f25c44970

SHA1
ce0ffe209b87a212480a783f96b2b92fe06b358b

SHA256
860f65d78aa4df9fb429317d02880e9e9873b66e874488dfa8a676ac0a00a101

SHA512
6858d498ca42e19ddc56df04236ff9ef65956493d2e366a2c2495215f5d08ace6d38944f2ae5c65566da09e7a772d5a8a1f1f283c09d084c60fadb7d625349c1

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-10-2023-10-13_2A630042.PLSQL.gz

Filesize
27KB

MD5
1c0a7b732bbe6254d09d4d72621eb29f

SHA1
67e77b3b0a7d3c6b3275690ea5cd987fdccc2db2

SHA256
dfa671562e53fe586814a07bfca777f9100cb84e129d260f6b974782333267ae

SHA512
fdf3a068d810c53b370df9808d6ef0e8a39fd8f929aac171ed187fed0c3ad0da882fb257fc799227f9e289ee7c2715ca1157debea92f443989b6f92fffbf3049

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-13-2023-11-15_9F57B910.PLSQL.gz

Filesize
27KB

MD5
dd47cbcbeb07d8ab430936a50a94ff52

SHA1
920ca611452dcfae39e8110bc5c67c2cf69293cb

SHA256
6c1b7ae57faf61cd61f669f36bb93e448c958b9fb7f2f5193ef1f44d56757e61

SHA512
877bc764c69326134ec717713a3ceca923bf92c9601b53723210dc201ff38995ac4d530785a3b6bb5c8ebf4b8ad7de0637b44af66e1339b08a57e50f07d5bf84

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-15-2023-12-18_A27DCA7A.PLSQL.gz

Filesize
27KB

MD5
d574b62eab5333e36dab4c1927c5acdb

SHA1
4858a6bca0bf72619906c2a29f19979f017ecd3c

SHA256
d83d0935234af298ecb474f9acb3a05930b81d2c3c4ca2cd35307eb26c73741d

SHA512
4cc74de1bceb5e7027b43da0998fd724cdbe7b8d7aaeab3959eda3aaa2ace4653863af5487890bb0e142baf80ce46419d62a42dbcd3710591324c858fbd698dd

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-18_7FF64E87.PLSQL.gz

Filesize
27KB

MD5
45ebe46272c5e3e38950089741ae8aac

SHA1
6c14c7c3496c7d0dbfdc6f23b8972f4c16885312

SHA256
d7b92ba473cf2f2258e8562e73f1131a7a0371d0d08ab0c2c60e4ce60212dafe

SHA512
fddda12913cc004544480644d1d0b25604bcfb11b7573436a17edeba49931841048b6f8599a5a64a3c8ecd97fd8f053ae43ac1e1580f999b8146101ae994d6ff

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-19_EA41C711.PLSQL.gz

Filesize
59KB

MD5
d06d4a0a6218cdfc42ad0bbb06330303

SHA1
c2d884246ec2a892e4b6efeda3779af56f1b2011

SHA256
86f66dd0b3953071577e6a0c9520e2986cc4f672fd4ef5b25941ec6ae2fc405e

SHA512
6758f7b8745170545083ed3a4182da33e3d075f69fad846b16f5eb274a0d3f7749d80ec77f17a0d3dd81451bcb91588e35509fe29f772ad7fa1aa2206e30bd1b

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-22_9455853B.PLSQL.gz

Filesize
27KB

MD5
db7ba835c7efda07aa2a9264177c0fa0

SHA1
204ceb3a0dc8f56c6841b1d9443ae37739294d9c

SHA256
97f379b5de5d0aad24669ae6f5cf9d1dc368c122847be444d5099e5b6c2a2899

SHA512
27fbe30cf4540ccc80aaa97315024bf859f5cd97f9e794e3ecb16915946f5a0abc4607319e5eeb06451733d2919a631cceff18f4e35c0f285d4e60b0262950aa

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-23_DE5DDB75.PLSQL.gz

Filesize
27KB

MD5
8bf8f73de554f4e5dab96ff5143ae685

SHA1
d8636baeadfbe52e0e4c8ac74114dcc6443c7ef4

SHA256
296d64754ec26ddddfe79201a7f86d8065707899558008f2817bec3bfa84e6f5

SHA512
c84009a8d4c770abb74648c81c92408ecec1ac43dce6f67bda5d0c6da4254df5ee24f6c6aeeaff0f58f46780377d4ff51df850f5d61c41d3fb5a5f599b598b74

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-24_6F0EDE21.PLSQL.gz

Filesize
27KB

MD5
78e566d252c6be76f2338877c994d37d

SHA1
f568d117214d46f74b8e2a62235a006305832da3

SHA256
1b08860c068e0aa62ecfef59983bef731f1b93d4c377cb837a1937b3b3fabf5a

SHA512
d9fb89c170ddd27801881628f252df0bccfde6b1c1615c0de02f49dfbf9eb6f5a1f92fe53d71b9ec9839179a40df28f9da91e34a98dccbbf5f68ba85c24c2d11

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-25_BBEC9DDC.PLSQL.gz

Filesize
27KB

MD5
48f529e90a1dae2e2567d41b5b508269

SHA1
8850bfe55bfe75873bcc8c4bb6713e2e3ebe108a

SHA256
c471a7dc7528b4a9e39de6e77a12c8aaedbdb422c560b0cd5a1c08e023c59c78

SHA512
9bebb00fdd4568c0985f5ec510f456e69e58709856d6467f35d77f650164cec32359122c604b0e02b69ba6478b19e001ceea3292e6ef37b18b3fe407d5f415ac

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-26_F6AD30FE.PLSQL.gz

Filesize
59KB

MD5
c315c86c859c2918ccfd1afe3ecb27ab

SHA1
60f0a9b230f0fc4ed31f66506f65003b2937e8da

SHA256
28e94b208b6c820d29595637f1550d4b9f8fbc4688245d497d61777a75a54f06

SHA512
44f18f9dfcd571029f7ec3452f05ec3e9b80ba6db41ee55adcf8fdd3f28f8d5f6101c1fd75224118ed5f57356aaf21bb901bb27fcba730f3812206a3f2da3de7

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-27_5ED0522A.PLSQL.gz

Filesize
27KB

MD5
e5d332920f6d5a910bbfddec439e3177

SHA1
000c5b434c9d1c1e47b4c93e1ac9ff6aea1d0ccd

SHA256
fc3c802e8f81200bfb37bb5f2b8d6e60c0ec8cfd9cc366cc8acbcebc7bc28838

SHA512
064fe72de6cd5aaaf46f9a183f38feda7b04558717647a929564cfc040d8d33794c24ca9e39b0e3958bc9e6625743f08cb077affeb48d134621e362c4a816a3c

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-28_E8232009.PLSQL.gz

Filesize
27KB

MD5
b51c89be5c8eb254578bbdf0b2a26c1c

SHA1
928678d4ccef4a5e47b614440657141c47b7d8b2

SHA256
49e40e814b616bb09f01ef2158a2f4cd115e59478d7f7aae4aa74572632d0143

SHA512
83e54d9bfa5702a99cf64e1823ee733ed7fe641fe1781f453390c236e717aa9b274422c36fe1be2c3e130518fbf54986089a7dc6c09cfde46d039bcab1a362cd

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-29_4819042F.PLSQL.gz

Filesize
27KB

MD5
da84bebf8acb7e5d2a78e38a07c690b6

SHA1
fedc6916078b45ebb29f457dc2b5bb4b91a2e4e6

SHA256
dd5c5bf2b5e2e59d7d090de06bfbe3ec6f9a2be843b86f807e6d2a603c607053

SHA512
704df9274d109ad96a513090737d6720ff60a84dfb4aea760b684d4b61d219a026b58660e3ac6f0eb5b14896a3cc95d3b6663fee8cab106166f05988c294660e

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-30_89FE8DEE.PLSQL.gz

Filesize
27KB

MD5
59ea7117c17015b899cfb23c9f3fc9ee

SHA1
3454946c4310cc51a9023cb99e7fc0a9de79dea5

SHA256
abfcaa517aec32db31aabbee9d07c6c555fe5bab7534b2f9d9559a977afa7e0e

SHA512
79b6913ecc3f01e1cde2a312bd763066a5977183104808fea0537633d9efcf8bbb7f8323c6ccdf0114224e878c4c735172eb045b33fbdc8730275dd75d1a4246

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-12-31_0DF94A8E.PLSQL.gz

Filesize
27KB

MD5
81f914a6e2a11503b8c3e4828d3d1c13

SHA1
6e60f1ee433ab5ce768a3f803310a5b7d4e96dfb

SHA256
3b9c50c28e7b4384e8ecab4e232d3922d561095a98a225e3c7d51a138b9b7bef

SHA512
0459fb2e116995df2241a1552ee18ed76688699f429719b6c0ba8305e6886cf66dde40873d6e540ee2cf0bfbf0ef6f3852d62c99faf58a42132791d4d940afe0

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
9c2f89ca9d99dee5b741c6ec72815dc3

SHA1
55aebff22280972f5d24b66524c757268ec3e808

SHA256
9f49c297f4fee5acb13a877fab696bac255c5e0e393d31277de0ea8643066759

SHA512
cc41b7445ca54a9345ee337d566a378c85a7c6fb469e5aa5e90c31ed5f6521478cb5301d99ff056a19d017edce29f92ab73360fca47752892f8135d7082d60f2

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18242.iconmappack

Filesize
141KB

MD5
b4c22a09fe2f31466efb161ecbe2b2c3

SHA1
aeecd74130ef2f9799e5b0baa95cdb71d54ce6c9

SHA256
4cf1086aee27b90f5b6e10f7dc7d3113845c1cb7efb844b4a0bb6990589607e2

SHA512
64162fd751a35d4868c4e0b358c7a4c687078dc43ce6abe6d043aa9d70881ee8273a89bc9a0faef0453c68b63699b0a66aa5dcec7e3d13a34e3f50011c723006

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
141KB

MD5
45858a55c27b09a84895a274589742f8

SHA1
401e5fb105d818eb631e294d25c33b978ae58a42

SHA256
977f6a61e6caba111511db7a50f6a57ea094d644da3dc17669c02e6e5f780a8a

SHA512
7613625b022da7a03c3a650b12c77aa1d6d2e9113a42a0350539465853f2966c5ebd9be57f90d4162e35f8987dbfbe43e7c86ec0d7beb209bbbd55f51f2471be

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
557KB

MD5
c612eeafe7d65893269b9b39f64cc2da

SHA1
b337aed83971aeccdf700982c3a3cb5aec92c1c5

SHA256
8900950d05fb0f2db3032ea7849f48c7655f210e666aec31d1913b14089733c6

SHA512
4c0c208d9ff3a12872d5c7e91819fe804b602e02bf822081fe975233f2c22b9a4776f309301487914945ab26536945a3659fccfccc5b2a01a453af63318132c6

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17136.iconconfigpack

Filesize
556KB

MD5
60a9b755ab271df605b8f2a0b26bcb1e

SHA1
2098fec72d912f48bf3bc51a186958c28dbe4cb8

SHA256
a67ff86f31c7254fb033c4263e864976902d7450c4b3b05228c331fad6ecb2c7

SHA512
837edbb92be079ec9c27015aac9dc1ccf76276983769c778846765ac675202eb35bc763070b8ac490e7e44d65299e0ff2832f2a2f89983e1c685e4d8a6ea6de9

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1671.iconconfigpack

Filesize
82KB

MD5
9563a30bbd5d0af6f826ac7a6f33cf74

SHA1
df5f46010618c73b1a2bf277b7ca2a0c6ee97e9c

SHA256
d8ae99aedff70b2d0382f393dca972e58f26a866e9c831e6b0ec6717eaf89fda

SHA512
f5bd911863ac95fe1fc89a951c2ffda27308bbb93e35c6ed9dbfb936370cae526e179af2a12417a41cab3a359cdc9f5fc48f735af77df12ef0e2acd28b69fe7d

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Experiments.pbd

Filesize
293B

MD5
5bdaf1af4dbcc314bf9795ae64dd17cd

SHA1
ca0b8d18641464993d237401a244bddfe9afcf24

SHA256
fd3c6ba0ffd5728389824f02631979197fbd3898e7717891020f9244045ba0ce

SHA512
c54199e13ea861f283552d1c86c4c1f48f901199341b93e6a60d7f651cef380c683bade2a4232a7d458495b7405f030e315c30a3c974d3ea0ad517008ab90b6d

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
712b26e459201af4a122dfa0b2a1e8bc

SHA1
ee8e3720279c8539481ca0d82f44ee57900dc2df

SHA256
23083d284361bcf9c326d36cff4a9b4f4a7967952bf0d62abe5f443f246a78e1

SHA512
cc8164178d3c925ad3d100df9a3c24ea7d414f790289d29fc2ab38d6873940796390e923484a6f5bf4918340675f977dbec7edf655a0f934569a83e7aec27111

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
57d2c7394cc2be8e753075471a0685cd

SHA1
06a16cbdc61e6c5fa7b94375fb3b2b191ba9e361

SHA256
e958edb850d6a1147ac7b3a8780e8f9b0c9ddb23945e9b2080fdc413bba52617

SHA512
f6caedd5c130e3b1f981bd2adeda4b6b038ad3a7af64620cf1fdfde4b329fc3347c4d57eddc3a2fa152f5beb1ecc60226dcbe4961751a1d5ae4e7e929f23a00b

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
e684bc5eda9314641479a42da2bcd98c

SHA1
46fa5656ef71916de2f0b26813e9efd4961f893b

SHA256
1f72aa484419d1a25fc3f8c06596e07c0c86786b7cced060cee667ea14d9ded9

SHA512
3b0fe3ff18adfd9747849be77b665b5d2a130b683408880343ab7683c74d7ecc30242ddb15929c23694e0b0212217c22416b123a3ec5070889bf546d7d52b2df

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1162.xml

Filesize
150KB

MD5
1d51e6eba90b4f906ce24c062305dc41

SHA1
c3d6b5737119bd3e2a5a1f5dc4461ac12b1504ab

SHA256
dbe65e8dae5bccf407f19bfd7bfdbb358b2a0ffb456f962e504a9ad062576075

SHA512
df2e12956f760c74e4373acd5ecc6a714947d72290c6080cc2cc1a779c4ae32b7915fd727be48e066a3741ff0d45f28f58cf17b92e96449f996d56ab1c7f76bb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
523B

MD5
02440bc407fa521928130a546eba04b9

SHA1
c83c7286b0678b1cf563efc5d7bb6ed46a34ea0a

SHA256
c84c6834837e63464f2be96068f6290e28ebd09a48fd819263789672fb1ccc91

SHA512
478b85c096024aee9a4899f238b963e70e9f855efaeb77c95a6d974157ccc365abe89f2f4e85357bcf009b5866088e9a0a11caac4fd9ebebda46034c54212455

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
505B

MD5
e2d5f8c49af204334c21b4db784f6e40

SHA1
368c3b0b7ee1816f32e9736b8bb0d0844cb698a0

SHA256
cea333f18031913ed765f7a95f4fecafd27d6f15cf27355a6e716ec62ad0558b

SHA512
0a5d4ebed28f1818a845e240fe096734cc23a7a26cbd9478d92b198a712d9dbd3f9e6d3f02a204a6b59cdf79212264fff0a2ba53b0afc65b593eaf80c255e0a3

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

Filesize
4KB

MD5
ecffd97aba0c34d35b1a9814925dce20

SHA1
955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

SHA256
9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

SHA512
0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
4KB

MD5
0772477173e9e34a7860141b6b18a084

SHA1
d28286b98e6d7de043466687dc609f2b5287560e

SHA256
6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

SHA512
6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

Filesize
21KB

MD5
df3e0dfd820521a756bbbc584f4bf1a9

SHA1
dccf82e2be348c406faf445309ed1669d7eab7f3

SHA256
7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

SHA512
c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

Filesize
2KB

MD5
ba4df8801bd4124f55bfe7c130477094

SHA1
2136b957456e5776e5d0b996fadc2978a2cd064d

SHA256
d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

SHA512
795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod 2)/ResourceManifest.pbd

Filesize
248KB

MD5
a37b5a673306980e447c1ff10a165cac

SHA1
fde98809683dc00a8a05f5b8a205ab67f47def81

SHA256
2862d1afda28e90d8c9e7c05403f5df3f032a2fcae20dc4e69ac73f1ac8e75e5

SHA512
ef37fbc0b6d48084bc639fef0a2fd8345b7bae6a2264f97d3864dedc2b130ded369c9af741d03e071655837ec2282b6a9706d814dcfbba9f5efdf12ad34bb6b1

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
eec16b51ea5e1ed38796626736593812

SHA1
072267b96f1847ed0fd7ce8bbf8b7e3f79d3e39d

SHA256
716ffbb3c9a77df61c1f5555dbc1490dcfe813b14219626423dd67287fabe3f8

SHA512
5b10d3a2f19327439fdf0f4bb3df20c323ff947bfbb89081224def8d1f043026afd599e05f90dd5040d3f4630fe6c87272db04826ef232f470f7d50b04c87519

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
b9747f7945a79fc3a7953ccdd767cabf

SHA1
df837028e307d50e049512b25f42349261aa111b

SHA256
82d3096203fa5ed4cde7c89218098bed5d4618f7654aa4c11426cdcbafb9462b

SHA512
9b6e2ce51a99aa806841ab61041cffade0c5beb8a1e973cf3b0cd4c04f93854ad17976e340194367879bfcd60e3789b8a5e41d10e06536d3a3cf8f288808b72f

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
fbbe72cc3ce19c3206dc113ab3dec362

SHA1
32e7784ee8c95729cf3a9a5ae0de459a12e4c6fb

SHA256
3fa4ddf68cc37796b43248b6017c9747a3845cc5f7c4a5062033fd6b834b8e66

SHA512
1422c1cd99907f59c6c7fc8e4b747d8e43b220d29fa9f7bee6cae6f5a5e14063fd562caad2eaf6e690dd0e25469b2047a8e12b1f3cba973a42855b1240c3f511

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
fc3609f80998d127117ed7da3751b527

SHA1
35bb3d8e42870136fff4f6b5578fbe94db0a088f

SHA256
dc25f6bb2618c39437b8894ca49359dc6a3ca79c2d2ca899a438287643367d58

SHA512
1b6f04fc17fe9a1bf8a30455e96be2e58f2ff0992f2878e39de03313d0401a1baff6e3fc3a3b29bc879a7332616c691fa84cb72ed2a528b18e22142d813fbc93

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
583B

MD5
29c2d251a60ed4cae881ee8ce20beed3

SHA1
6561b9b531d9018141b7b051a17f435b8b9de83d

SHA256
aabd75979a5e206467fd62d6a9f82d51781ffe091c3aac0f8c384ee9b3d1bf05

SHA512
045ca78d2245e82a745892497ad962bc8eaf935591026d9b29a73b147638bbe236fa819489a7d6e9455cc0148d5ec71da59666289651d2da4ee8570fae63dbbb

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

Filesize
6KB

MD5
2b0bc3d4b28b37889d09acc741f4ebae

SHA1
060af238652083cafa7c43d79ea457eed8570429

SHA256
145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

SHA512
459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads