Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk1

11/01/2024, 02:43

240111-c7j7vsdaej1

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 02:43

General

  • Target
    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib
  • Size 1KB
  • Sample240111-c7j7vsdaej
  • SHA256 c25eba435e8b8e85e17058eeaea7bb1729bd9c5545299ad175e640b0da81fd5d
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib\""
    1⤵
      PID:579
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib\""
      1⤵
        PID:579
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib\""
        1⤵
          PID:579
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib"
          1⤵
            PID:579
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib"
            1⤵
              PID:579
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib"
                2⤵
                  PID:580
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib"
                  2⤵
                    PID:580
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib
                    2⤵
                      PID:580
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/Offers.storyboardc/classicOffer.nib
                      2⤵
                        PID:580
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:581
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:581
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.icloud.findmydeviced
                          1⤵
                            PID:613
                          • /usr/libexec/findmydeviced
                            /usr/libexec/findmydeviced
                            1⤵
                              PID:613
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.PerfPowerServices
                              1⤵
                                PID:614
                              • /usr/libexec/xpcproxy
                                xpcproxy com.apple.geod
                                1⤵
                                  PID:615
                                • /usr/libexec/PerfPowerServices
                                  /usr/libexec/PerfPowerServices
                                  1⤵
                                    PID:614
                                  • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                    /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                    1⤵
                                      PID:615
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.pbs
                                      1⤵
                                        PID:616
                                      • /System/Library/CoreServices/pbs
                                        /System/Library/CoreServices/pbs
                                        1⤵
                                          PID:616
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.geod
                                          1⤵
                                            PID:617
                                          • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            1⤵
                                              PID:617
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.secinitd
                                              1⤵
                                                PID:619
                                              • /usr/libexec/secinitd
                                                /usr/libexec/secinitd
                                                1⤵
                                                  PID:619
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:622
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:622
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                      1⤵
                                                        PID:629
                                                      • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        1⤵
                                                          PID:629
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.suggestd
                                                          1⤵
                                                            PID:631
                                                          • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                            /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                            1⤵
                                                              PID:631
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                              1⤵
                                                                PID:634
                                                              • /usr/libexec/neagent
                                                                /usr/libexec/neagent
                                                                1⤵
                                                                  PID:634
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:635
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:635
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:639
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:639
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.Maps.mapspushd
                                                                          1⤵
                                                                            PID:640
                                                                          • /System/Library/CoreServices/mapspushd
                                                                            /System/Library/CoreServices/mapspushd
                                                                            1⤵
                                                                              PID:640
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.siri.context.service
                                                                              1⤵
                                                                                PID:645
                                                                              • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                1⤵
                                                                                  PID:645
                                                                                • /usr/libexec/xpcproxy
                                                                                  xpcproxy com.apple.tailspind
                                                                                  1⤵
                                                                                    PID:652
                                                                                  • /usr/libexec/tailspind
                                                                                    /usr/libexec/tailspind
                                                                                    1⤵
                                                                                      PID:652
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                                                                      1⤵
                                                                                        PID:658
                                                                                      • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                        /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                        1⤵
                                                                                          PID:658

                                                                                        Network

                                                                                              MITRE ATT&CK Matrix

                                                                                              Replay Monitor

                                                                                              Loading Replay Monitor...

                                                                                              Downloads

                                                                                              powerlog_2022-06-13_6AAB8B3B.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13_6AAB8B3B.PLSQL.gz
                                                                                              • Size 31KB
                                                                                              • SHA256 7fda0f5d0e7a5f60f683523a990d9c6c6d09e7c289594f1e7e302a6c8cdc8473
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-14_B7128CE8.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-14_B7128CE8.PLSQL.gz
                                                                                              • Size 23KB
                                                                                              • SHA256 dab033e5c0c4d51ea82eb44ee38073ba8f23987569ab45045f2602fc296b15a5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-16_EADAD118.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-16_EADAD118.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 65771154a0a6ee4766756a6808879b98cb544edaff5dfbbe2650805829a52cd2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-17_D1067103.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-17_D1067103.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 d86a1e8e724c0b8a2004bae271ed3ea6d0af7396d80593891e502f05adf69e3d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-18_758024DD.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-18_758024DD.PLSQL.gz
                                                                                              • Size 69KB
                                                                                              • SHA256 d6992e5304aaeafddeb8a819f5c24ad4efa725048f3c950df35ab28df853219d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-19_DEC3B867.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-19_DEC3B867.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 730b8750e290754a04f45a2cfd1a059e05167f604b62e32c55013a6d798d399d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-20_37E514F2.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-20_37E514F2.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 3bf263a433913ebe4e9e75b19c94e83c28c6ac26bee54ff107d3407b6ddcf106
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-21_08B3CE03.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-21_08B3CE03.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 59f34554c068a151353ae6fc65588c0f4eb2ff5ae7ea8d892b700b31c08dc2c8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-22_35D24396.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-22_35D24396.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 9a10a9e449cd6fb8feb3a0256a87426a1342ae2731e36a136915f6e62b773ad7
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-23_E0223E47.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-23_E0223E47.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 1b19d41a1b2550413e490875d9d4af9518a69d8f3f98c669a87e248272b23120
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-24_5BAAE0C5.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-24_5BAAE0C5.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 5349811ca04d5ea0a725273fff6d5db662f891f2df483595fc0f9ea3ea7b38a5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-26_475510AD.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-26_475510AD.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 32ad15e85faf35c1278921ab5fe9b1d2d553f87fd3540602c9b900a3fe0a2b38
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-27_7B3E0768.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-27_7B3E0768.PLSQL.gz
                                                                                              • Size 70KB
                                                                                              • SHA256 f719cd167b5ef4791a77fe4d43839c35049e0adaf8308891865b2e8b40d282cf
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-28_A988ABA0.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-28_A988ABA0.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 8b287489675c4ee6f4bcb01c6cd5c69cbd3ae30bc15ba6c9b599a6b900f4f5e3
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-29_1F4D2024.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-29_1F4D2024.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 a27545282cdf2fceede0c6284d20594b6809f953253826b50a2b6ca68e413ba2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-06-30_3E5B15B8.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-30_3E5B15B8.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 c36c09ad3f3d57b82d5b239b103510658c2f1b5ddcafdf39df3db98ca7956208
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-01_910B32F0.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-01_910B32F0.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 02e4f823976977ca1e89278510c7e999ce3f91471952c0a7623be20d8f6addd9
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-02_2C77CB4D.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-02_2C77CB4D.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 dd13845bf8eb0db58f84f671feca6cced4bfecbd53e20fca16f2d6afd617f018
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-03_4181BBF1.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-03_4181BBF1.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 d8e0fbf0280016ef88146171225fc0ba5bd76393066b97ac3b3e9f4621ba9bed
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-04_742CD8EC.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-04_742CD8EC.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 a4cf2249dee105c92f7bc8a3bef35b8d472a19b5045ac655c2d0d00bf7f5211b
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-05_5DC27EED.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-05_5DC27EED.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 25d6feea0321d6157729bc846e0825442b10c95591ebc38936da4e4635156ef8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-06_4EF6C112.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-06_4EF6C112.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 16c62783c2d9ca75ddb1dc36b41b3897e322682cde3c47cb2de596ce98045fc0
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-07_12DB970C.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-07_12DB970C.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 64de04a93994ab49d0c7cf275352950d64d76d264999b664a164ba5c2aeb4eea
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-08_23A18F7F.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-08_23A18F7F.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 770e2f4b8abfdcf1bf9061b18642c1253f83ffb4f0d86040cd79f33022355ae4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-09_8BC40952.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-09_8BC40952.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 1b79f400bebbda0391ee4cb65d4d2d1ad184f7b45182b533fb4b00b6361f7202
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-10_E888E5DA.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-10_E888E5DA.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 2cf472a91ba6a49ee57bad64d8f648dcf7837e766e69f44e65785d54bc110ecb
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-11_5FE3F963.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-11_5FE3F963.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 55eafb494067fcafec7995f591c31c388aebf2bc1299c07992965ee1a0ad4e1e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-12_889DD611.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-12_889DD611.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 a30ce56169e90589e083e78fab4b2b8798983ea28d40a2df14a8d1420009853d
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-13_316EF87C.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-13_316EF87C.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 5ca7f7ed6a08072e6e2039aba1460d722b38b92c8017bf434d153086ffd958e2
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-14_668AF79E.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-14_668AF79E.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 2aef716f5097f6f08a2f0fbcecc9529272d9dd3584dcbab8a0abcc9c19793b87
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-15_DA52874E.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-15_DA52874E.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 49809c48426e28cafb5f1d5555ae90f1b9fa02843342354a4b226578a47f3700
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-16_F269347B.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-16_F269347B.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 1cecc1eeadab0752362afd1f09845ab4dbdb2185daabaa60fd5273fd3568685f
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-17_D804AD3E.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-17_D804AD3E.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 452d01a0390748af593a34a7bd1d1aeda6d97a2aac18bd03c201cd10360acd09
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-18_2C34F4B0.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-18_2C34F4B0.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 fe521658cacc96bdf253e4c5be75fc2352c9c11ea4aed2bd8adeb0729cf5925a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-19_FFEEA828.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-19_FFEEA828.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 644daf7e98604e79626f173567676de8e31c2e6c094a9c449f78870088f6ce2a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-20_C835B89A.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-20_C835B89A.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 ac1334e556640254372841ec8c78040539efdecc5cbd89380b0c117042d4fac6
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-21_DB1A8298.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-21_DB1A8298.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 4c0504e5caac8783a691d34358d0930567f60445b387f5e0e62b86b3913bcc33
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-22_369B5A4D.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-22_369B5A4D.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 c2f5218566278d8b91860bd9a6e83e3b0b195884fa7d6974648f31bdff8090e5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-24_9B16D542.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24_9B16D542.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 ed45bad7c53357ffc9210624dd7485d9014b86d3a5e967a2d95646957970e0d5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-25_CA726A03.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-25_CA726A03.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 1a8be7198b178e0cc0cf228a87fc99727c533231a37ab77cb55286ad4e4f35ad
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-26_E1640A25.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-26_E1640A25.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 466adc03557cf005a4b1a52f1ec7b577fba1d2e20b9723dd159c009be13e3adc
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-27_3A7BFA8C.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-27_3A7BFA8C.PLSQL.gz
                                                                                              • Size 71KB
                                                                                              • SHA256 1623557f6aff5141c0ae3e462afb6833a16432389b3e5c665475d463d161693e
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-28_A152591B.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-28_A152591B.PLSQL.gz
                                                                                              • Size 71KB
                                                                                              • SHA256 013f00fe6538293498f3cc755024d58ed40b0b6e8792085164c5921d61bc7c97
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-29_F36A3B7D.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-29_F36A3B7D.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 5d95601517654f9430c686ac721ea7402ae14c66adafa1c921720cd97da26eff
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-30_20BDA2D4.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-30_20BDA2D4.PLSQL.gz
                                                                                              • Size 71KB
                                                                                              • SHA256 8db81b3ce367a0cf79bfe24960f23856489ced1cea2a9c665d703d955c9c1270
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-07-31_00FB7EA3.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-31_00FB7EA3.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 5575646ed478e206f60dd2b2def317ea910e73268ed648e100cc8ffdad02822c
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              powerlog_2022-08-01_8B724B0B.PLSQL.gz

                                                                                              • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-08-01_8B724B0B.PLSQL.gz
                                                                                              • Size 27KB
                                                                                              • SHA256 3d2fc23820110825e65eee3b2d922fcd652bd88083cbe1fa7c10b7b578967849
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              ActiveTileGroup.pbd

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                              • Size 124KB
                                                                                              • SHA256 a2a952ffa8a1eb792f079353072eed0c0acda0e7402f48a60ea90594314254a0
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Default-18583.iconmappack

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack
                                                                                              • Size 141KB
                                                                                              • SHA256 008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                              • Size 141KB
                                                                                              • SHA256 9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                              • Size 557KB
                                                                                              • SHA256 a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                              • Size 2.4MB
                                                                                              • SHA256 460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Default_Icons-17228.icondatapack

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack
                                                                                              • Size 980KB
                                                                                              • SHA256 3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Default_Icons-17418.iconconfigpack

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack
                                                                                              • Size 556KB
                                                                                              • SHA256 4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              Default_Shields-1686.iconconfigpack

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack
                                                                                              • Size 82KB
                                                                                              • SHA256 63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                              • Size 84KB
                                                                                              • SHA256 b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              ResourceManifest.pbd

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                              • Size 248KB
                                                                                              • SHA256 778dedfe6c46f033ce6d607a459bcd9d3bf398bd7e452139323585d4c71a46a1
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              SearchAttribution.pbd

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd
                                                                                              • Size 63KB
                                                                                              • SHA256 572c23c9f0c839c88f984eb6cf25436601cb355adddbfc2fe3048cd29f27d6c5
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              altitude-1168.xml

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml
                                                                                              • Size 150KB
                                                                                              • SHA256 aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              com.apple.geo.analytic.12000

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                              • Size 513B
                                                                                              • SHA256 9fc8cb611232d48202dbb5085b8f241cf3abb2221c54fab550218ca69d0dda17
                                                                                              • MD5 SHA1 SHA512

                                                                                              com.apple.geo.analytic.12000

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                              • Size 316B
                                                                                              • SHA256 0d50f251961b359750faedcf01ef2a9b92c835177ea5b0d5cc58430ddb26f6ba
                                                                                              • MD5 SHA1 SHA512

                                                                                              default-search-4255.styl

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl
                                                                                              • Size 4KB
                                                                                              • SHA256 9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                              • Size 4KB
                                                                                              • SHA256 6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              publisher_attribution_dot_coms-78.pb

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb
                                                                                              • Size 21KB
                                                                                              • SHA256 7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              publisher_attribution_manifest_index-65.pb

                                                                                              • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb
                                                                                              • Size 2KB
                                                                                              • SHA256 d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a
                                                                                              • MD5 SHA1 SHA512

                                                                                              mdsDirectory.db_

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_
                                                                                              • Size 47KB
                                                                                              • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              mdsObject.db_

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_
                                                                                              • Size 4KB
                                                                                              • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              ActiveTileGroup.pbd

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                              • Size 124KB
                                                                                              • SHA256 3ff4339873bafbcb744df0a094a63227a4a6427e1430bb8aee12d9d9b867160f
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              ResourceManifest.pbd

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                              • Size 248KB
                                                                                              • SHA256 baca9912a6366b587d58ac0fc7c1f226be3fdcac1f37cdf7a34299d6e621a20a
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              SearchAttribution.pbd

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd
                                                                                              • Size 63KB
                                                                                              • SHA256 605cf1957699620066c448fd6f958e873d39c72ce74388376e9e947d2737dfd4
                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                              com.apple.geo.analytic.12000

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                              • Size 538B
                                                                                              • SHA256 7df05e08fa5b820cecc6f9a6ced990f80773d4b499d98e70771d99f507942528
                                                                                              • MD5 SHA1 SHA512

                                                                                              networkDefaults.plist

                                                                                              • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist
                                                                                              • Size 6KB
                                                                                              • SHA256 145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575
                                                                                              • MD5 SHA1 SHA512 SSDEEP