2227af2b3c4b388ef4608bdfefa758843a51972f40ce0c081a68b15cbc2297a4

Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

max time kernel
129s
max time network
143s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11/01/2024, 02:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml
Size

5KB
MD5

3ac1f8683655da24396ed7ad826a49d9
SHA1

6d388acd62e6ca9aa2745facab7bf2c9c5413f9f
SHA256

6d6bb8e2a80adbf67805ce479a4cfbef4b5966c8410f5482aeaa0683893b419c
SHA512

8cb7c2eda32ff42d693dbf861a56993a979c3edfcb186de9500abfc7562bc66703d5ebd131439a70c1be96f30420067914b21c8769be8b36b773830918404b22
SSDEEP

24:2dfyiws4PyKMxyJyKMxiAYyKMxMPyKXxLeyKXxxUJyKXxVYyKXxoPyKaxneyKaxe:cfyit+EnmAW3

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml\""
1⤵
PID:579

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml\""
1⤵
PID:579

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml\""
1⤵
PID:579

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml"
1⤵
PID:579

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml"
1⤵
PID:579
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml"
  2⤵
  PID:580
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml"
  2⤵
  PID:580
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml
  2⤵
  PID:580
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Resources/bag.xml
  2⤵
  PID:580

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:581

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:581

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:614

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:614

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:615

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:615

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:616

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:616

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:618

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:618

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:619

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:619

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:620

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:620

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:621

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:621

/usr/libexec/xpcproxy
xpcproxy com.apple.suggestd
1⤵
PID:622

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
1⤵
PID:622

/usr/libexec/xpcproxy
xpcproxy com.apple.knowledge-agent
1⤵
PID:630

/usr/libexec/knowledge-agent
/usr/libexec/knowledge-agent
1⤵
PID:630

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:632

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:632

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:637

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:637

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:638

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:638

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:640

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:640

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:641

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:654

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:654

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:655

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:655

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:656

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13-2022-07-24_04139953.PLSQL.gz

Filesize
31KB

MD5
da91ab32846d9cd648bb4a131a3479f2

SHA1
4a7d6b6ab8fd51664ebaeae7d98e78763f4d72f9

SHA256
1c13264e174fac65b05afb6334c34345d158950bd5f94c9733f3037a720fed0c

SHA512
b6fe75a6d6d7fbdc10be8c1ed3670ef911146dc6ba6a94167b54ef77905107d9c9d328bcd37dba5cd292cae70f35ed2d63f099537fc866b465666108b9950d04

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24-2022-09-03_F723450F.PLSQL.gz

Filesize
23KB

MD5
0d73d42fd0ecbc5a0af1e41d4ccaf668

SHA1
4faf084b0bbb4757012f7afb2837078ff493df02

SHA256
2c38f0a932cfcfbe9295a0dea6268440c9687782c26db104697a1b01198ccba6

SHA512
bfffe237f33b4342d2e9603125c72e8a5dbc423f4305d9faa478b321b561d75f1b335287e79236e52bde68151978c5d4c21c31a1dcd35757d4f7cde4cf2337a9

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-14-2022-11-24_28CD38DA.PLSQL.gz

Filesize
23KB

MD5
56d6acb2134ce08a84582403fe8eacac

SHA1
b588005f1b2a696109b25a6f1569e315d31161e2

SHA256
996547542adc5b500a3f76b7394a9284a94b22bfe421b9b1934ece0f25d823ea

SHA512
b2f77d53cd581cd001c298b2662d385e46cf179b5255a67d677fcf1d154bf595671a030edea4ebe9919f6da1957d863bcb356f0694343ae5ede9639641e7f0f5

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-24-2023-01-04_645AF5D5.PLSQL.gz

Filesize
27KB

MD5
86ea7c9aa064a8c8fc06b72379ed44ac

SHA1
326204c2d267fc7bdffc09dd5fb0f2c4f2c5d745

SHA256
563542539668aec56d8d3630a94b3fb03b5e02c5c16780ecd64bb077615eda59

SHA512
86e8a59ea32d889c3db70b5f31501dcd68efe1deab3e35072aaeab21baf08dd30debad56b37358a284663a41f459bc38c7ab7a268c50e327919b999f4638706f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-04-2023-02-14_70552246.PLSQL.gz

Filesize
27KB

MD5
bd77aa85ff8c174faf9a8121e5fbc400

SHA1
515769a2238d5d6eae1b5465d1d2d6c03e4e39ab

SHA256
d2969b9bd78058e72c1bdbb93dc76ef0eee51a6d7c20747724d531236424f17c

SHA512
cfe4cf70c4410eea60e1b9161d3a21b98837595398595bcefa6f5edecb879641a93ea1b8f99746585441073774a46f1f3621bb8c2be88e9a03ac89f72c529487

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-14-2023-03-27_7831BB91.PLSQL.gz

Filesize
27KB

MD5
ff042429e184a1dd8eadf72183509928

SHA1
9859cce4a26e10c61472209d4513dcf60ce48a2b

SHA256
4d81f2a6b6f47263605b5ee4127e50a3f5a41e1fa444d482b96ba458657a38bc

SHA512
876c52882da3911aacd7dfbfadbcac8ccd49fa9dd67b2768f82174cad7d1152ad600b30a8da07fa1a455c0328fe4bed326f9c73aeb5d39bb08c3848932147b8a

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-27-2023-05-07_AF1AA697.PLSQL.gz

Filesize
27KB

MD5
a700831c5a7cac46986aa5bc2e1cca97

SHA1
5a590d0d4275a07f7573376c6c3914758ae261cf

SHA256
1472be6741d60df89e33d283fa6db493f1953da34930b79111c21ee6c75b7c12

SHA512
0fe245ac1cb765e45c42eda10f6aa86193747c23acc0128be0698efa63467ed8aeb785bafb2f4b24585147f7b64b000c789570e6b71e11bc79ce79b867f8b756

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-07-2023-06-17_253A1D2F.PLSQL.gz

Filesize
27KB

MD5
50571263225abdab231200729f0f8430

SHA1
bd2f23a27ad840ede5eec462572001d7c9c5ba50

SHA256
fb015f6d0b4d20031792adc6adb1e666009fb30f9828ba6405de8365c3b2b820

SHA512
bb57e3ea1bdf3eaf097dbfadee6ccee5274ccba5cb100653b2d6a2594cda5b2788dfa3f0009704464baff65c4fbf91aeaceaabbcd339e350993389b64a86c17f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-17-2023-07-28_40707DE7.PLSQL.gz

Filesize
27KB

MD5
887cd4bf1e84d93116ccb1012d88512f

SHA1
b46baf2b6ff0894ca579848f69406a9f8fa3ab5a

SHA256
3ed49d17bd8c888fa6278294a3426792ab0f5ce93b5259ff32fed8486221451d

SHA512
1867ba51c0a0e2efcb722e69c9bd402468b23cb67086edfc5da2bf29f24b3008b2dda953fd65b3b27c023e7912f722fc0920941e6f0c81c83f5400ad38bcce02

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-28-2023-09-07_7CF34FAA.PLSQL.gz

Filesize
27KB

MD5
19a0e632c5878b136b2d8b0d1afa1bca

SHA1
c25c21739e7c86f91912e842e051aa1d6279f0ac

SHA256
f8369408f5e9c98a3ac3dd044a7e5c93c68946269bbb69a1395ad0a564af0d97

SHA512
5758fa54de23d6f3365cf8f625cb1e8c6501a01dab4441cf93a34498416bb7ace9326d2cd2b32384e1b54e7a61cca0683a647e6c68e3d745271459fb611906c0

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-07-2023-10-18_031C045D.PLSQL.gz

Filesize
27KB

MD5
0e6753c6993115c3e216eebb6224fccd

SHA1
c20650fe3c6b9b6dc04c0c9cc5341905b5c60503

SHA256
36d11a09d544107033265bede5a46b4bc73e8db86b96c1bec3a8450f49dc2bb1

SHA512
9535f475c076a542bf8c7f3dcfb3d386ee719880825296d6eb010a17e4945c72890053be631e918dabb4828bcfa77d879b9d48f44697df7c556af30a95febe52

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-18-2023-11-28_4F3CD43D.PLSQL.gz

Filesize
27KB

MD5
315f5b6ba9c7f17bb9dc3dc93cd5d604

SHA1
fb8b3b26766230d067b693c3b1fd46a2820c9678

SHA256
7779b1387463f29877d623985c883d6cef28adc8d29bb744325ff6f13bf12080

SHA512
7252c4c3a004ce0bb4642b08843abe98d5d1f1a1dbe9b4c7bacf8f243b821a85fadd9ccd174105380f8e37638969b93fce42c8617da6236bc16c93aab1ec9b52

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-28-2024-01-08_29F25639.PLSQL.gz

Filesize
27KB

MD5
e91920c8ee5e130f528021aeffbf6a44

SHA1
b799ed33abc162e0095ba4efcad4e8827c71dc0f

SHA256
88cb4228a1240335c2523c311271d94effcb87f1aab310c1c6420ca6a5c0f33d

SHA512
99e1a0534b76da5bd2a75753a5397c8f67a12884568d5889c2812830f25993498e7b0abe9a200b40ddd15d6a9f385e41841e8572e80fe0afdc3b7c75522d74d7

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-09_4CF02C9E.PLSQL.gz

Filesize
27KB

MD5
f5d38052eb152cc05275cd0cf0d5c0ac

SHA1
c96108fcd45595bd0a34e53d91a8e31353f3d33d

SHA256
05d0dcfce175cad64a1c1074b161b454e28ff3b09fc7d9826a8f9238ba6bff61

SHA512
536f54c5b9c53ac9792d4137cb16c2999c6c24cb1509d770c72d7d4e1d28b814d9c0290f0023827caf9bb461ca781d0ed0532d212d134286f247896d891e65e3

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
c2c070f3bc1b6836578c0afe814134da

SHA1
a783fa2060158dd2d5b9309f0238a3b592d39479

SHA256
554be59d1c52a650f1b238757512894b02c047bc012ca55d5f4c7349125c1573

SHA512
e706067892c3776f610db76392c1b0018f0cb5cb1c353059802f01dc962d1e0a3a9ffa09b17cfcea8de418db9b22e517907be7b3b1d3b97b9f72565ce8b0f916

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack

Filesize
141KB

MD5
7e6f2130adaf8f51c9099b720420d583

SHA1
926ad8aed7174dc1e6c4564c287f162a64e9eb02

SHA256
008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e

SHA512
af094f868136ca6678ba79342eda83093d97d8f4ed7e32142189ca6b637ed1889a47bb5a6e5b9aa3446f6fabc40f460fd5ed5046522cf4ba37dffdc442f1f111

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
141KB

MD5
e470100c10a331f411c89c42ed1d2b36

SHA1
9b61c06dac80e37b8f10755a1085442695bc6d96

SHA256
9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9

SHA512
219257b90463b5cd26f4550bbbff44ebb7c912dc4123949be55b5295bea1068891276bcd39daeefc4f4b151830a6357b905417f6aa667185447f8ef74ae24e46

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
557KB

MD5
79e30a7cc6ed6b5593a4ecb88abe39a8

SHA1
939964f09310e060c3b304c010fcb320615ebac1

SHA256
a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a

SHA512
097c8e18460d5b83dcb9b8ebb9b5018cdf4e6ba942d43fc01e248c2fa056cac2d0ea64bf4e163d06efa1cd19b420fa1623cc5bc76a4fe5d5ff0843c258d031fe

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
2.4MB

MD5
7497805b545ae23676ac858b71d4fa4e

SHA1
24274ca99bf58e61db2dab7402df4ab1c4683758

SHA256
460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a

SHA512
5671678d3847b305f000808de62424eb348451e73b9ea05721af03e6afd326fdaa0216a54af12ca4d66a40c039202d022bfd24c86fac73b9de88af92964ab13f

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack

Filesize
980KB

MD5
1c59ac9552a4f3a4f4360043e7b2f9dd

SHA1
baf7ca38c5f9ccbe63cb0358b4a7de0985b04724

SHA256
3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3

SHA512
74825cd1a7202a966436966abe0fa21897db021ac7131208f7b3b211f665b011797fb76d08b3ef711905d70ea73812b9205ffad8b3673100269eecea5aa7bc5c

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack

Filesize
556KB

MD5
9d9b8128687d190c12ec71dd3f4cdd7d

SHA1
17b6b8ebd611990412ef8f9b023f7c6b70bc24f7

SHA256
4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb

SHA512
145504feb65be180363c66721d79ced6fd6f5ac164005a2c90820ee6b0f77d2ff27f6213a55d64acf5169624ddd9fb798babfc10dbf8a46c1bc042bbf7c8049f

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack

Filesize
82KB

MD5
e598b18e3ad8c62750d0f9ce92f889e1

SHA1
e33a7f936b4136b050eae19c031fb447f88b4f53

SHA256
63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058

SHA512
b8a2b12449c2a10ee03bceed4003999d3e69c7318873cb1075ea0918b296df95e78fe1840bcbc931982a2feee69262880cea7cd12be284cce1de54603a9b4551

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
84KB

MD5
17ccc05a9b2b550f44f9adb751deef28

SHA1
40b1c2c53565a26ce46218ccbe28e1a83e7196d8

SHA256
b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8

SHA512
f6876ee7ea2a2d116f6df75045180644a1232f38d288a840c80e73b4d88d9e07a163261f0644ebe2455154325d7063da69f25b2ae66b92b5f924f3c3975b32ab

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
f23b365c6bc633288149dc9f42a02d26

SHA1
1d0547d1e2ade98df954764ebc27ed8843ac9d4e

SHA256
f0515b0954f2b0f3d0d298b3492cbdc5ae28ab85edbf0ffe834c8a3d11503b49

SHA512
3f5e9ebb8752bd72a10f3867cda958dcc765ae7e4e1928ad1cc76c8b1ff15291604f94f0ccb88e9527e85a3a90456c121b9d65cda9a97f2324fbe72444da892d

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
02fd56f6862429dd93da34112d38c232

SHA1
01ffb08513787b1856d1b7fe59573695129e7449

SHA256
24ac7272742d9e0337e741c4a4c1b0e09df26888dd72e25cf2a17902556d506c

SHA512
c9a583d10adcf3d85ed1a93ef3295b5418c52a70d6a9eb0721d76fdb318f9a734f8ab5ff30c0d3d24e756a31075d21557c40067ad4787d5611632f433cbce48e

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml

Filesize
150KB

MD5
76ebb0196d42a294b69ef118cbb301d5

SHA1
61e5ab752d351af1661716bc48c0520f66cd1d1b

SHA256
aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

SHA512
8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
513B

MD5
0d960148b3382a177636e32b0cc0f87f

SHA1
2d1a04611b3b844cf8085a231f279fef0a026194

SHA256
78ac52942c100ac48fb28f7ecf5409e7c5d8e96fba3dc2c4d6dc27de09b7b814

SHA512
116acc045bd221ed5c559c0267f5513c95c6fb0853564b74c12c18a8d421a29d5db2b22d659a24b51144e90aa1b9b76da976f5da52764fe33bc27c158bca764c

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
316B

MD5
f7e8640cf75ed80b2dce0fdcad8fde06

SHA1
6519a8502d70645ece8d8c6096fcdf385e607f4b

SHA256
24e810db10b5d2949ac0546a435b23ac772ebbe69d976ae02804d0ff3e51d62c

SHA512
d3499acb416cb83557fb82c38f77fb7987dad0445edaf0cf799160f99d4113026735e436531aac7593d16ca674f6cf0cd48bed9a40e23b4f687575c6f0794356

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

Filesize
4KB

MD5
ecffd97aba0c34d35b1a9814925dce20

SHA1
955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

SHA256
9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

SHA512
0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
4KB

MD5
0772477173e9e34a7860141b6b18a084

SHA1
d28286b98e6d7de043466687dc609f2b5287560e

SHA256
6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

SHA512
6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

Filesize
21KB

MD5
df3e0dfd820521a756bbbc584f4bf1a9

SHA1
dccf82e2be348c406faf445309ed1669d7eab7f3

SHA256
7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

SHA512
c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

Filesize
2KB

MD5
ba4df8801bd4124f55bfe7c130477094

SHA1
2136b957456e5776e5d0b996fadc2978a2cd064d

SHA256
d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

SHA512
795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
fa0c3594815e686e7005600d3dbc9b42

SHA1
0d58925cdcbdbf1f7ad0adaa73649a7e3a7d5c41

SHA256
42f179a1b2e3fae51dd9ec7ac981908d642484b1ee741ba47833ccf96acaa3bc

SHA512
b83c621493266bb44d81dee681eee086aa9b07ea2b24bdd09889ef9bd596871023b156fb94f84453621de79c51ff3625c51c5f88d2c1e88a9c74d9f6cba2d71a

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
7d4f73d62a025792ad16c55b42aab54f

SHA1
661bd38a249d798c05e6584fc6b8b774b76b6a58

SHA256
334a1ccf26293c3a355540b1a9a0427f2581e92f04731b795b6feceefe4803dd

SHA512
c86818c3c1bdc2c3c53af68db7cd952c2d7a07a47c8db530a91b13c1c074b5fdaffa74201d80fd39989ddf96bcce844178711d7ed0b9717e1748ea1ba05517fa

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
4f303d869591941911722274f8c427a5

SHA1
72884e0cdd8a1753d5fb082c658dc1ae240dd4c3

SHA256
ed0c7c587282ca26260f238145ba70776ea65120fe7dd4ceb25ab55b4fad6d5e

SHA512
3e723d11884dc8257d695723d98dc18dabdc7d5f2ce26590ff84bdc1e69f630a030277d5842edef031b04b7c8aba0b1ba4fc06b72e42160421704c18edaa59fe

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
538B

MD5
38aaa7fd4169269a60660d072096e719

SHA1
1f7903d8ab2f107ea1abf20f4a56d5eea7832ced

SHA256
86a8986be7a688fdb56d4ca579d1f307049521917e94af92e2501de064e62762

SHA512
55ddbc8d0ec3d1ad6c07d14c52595cb5bc7bc1861b1154a87ebb530c9e6b891a4fdf97b8d0948cbc36a12d8dba69432837f76d0e365f0b65441404d67ba7d6a7

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

Filesize
6KB

MD5
2b0bc3d4b28b37889d09acc741f4ebae

SHA1
060af238652083cafa7c43d79ea457eed8570429

SHA256
145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

SHA512
459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads