Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 02:43

General

  • Target

    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt

  • Size

    1B

  • MD5

    68b329da9893e34099c7d8ad5cb9c940

  • SHA1

    adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

  • SHA256

    01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

  • SHA512

    be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt\""
    1⤵
      PID:579
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt\""
      1⤵
        PID:579
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt\""
        1⤵
          PID:579
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt"
          1⤵
            PID:579
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt"
            1⤵
              PID:579
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt"
                2⤵
                  PID:580
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt"
                  2⤵
                    PID:580
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt
                    2⤵
                      PID:580
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/_MASReceipt/receipt
                      2⤵
                        PID:580
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:601
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:601
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.geod
                          1⤵
                            PID:614
                          • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                            /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                            1⤵
                              PID:614
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.icloud.findmydeviced
                              1⤵
                                PID:615
                              • /usr/libexec/findmydeviced
                                /usr/libexec/findmydeviced
                                1⤵
                                  PID:615
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.PerfPowerServices
                                  1⤵
                                    PID:616
                                  • /usr/libexec/PerfPowerServices
                                    /usr/libexec/PerfPowerServices
                                    1⤵
                                      PID:616
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.geod
                                      1⤵
                                        PID:618
                                      • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        1⤵
                                          PID:618
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.secinitd
                                          1⤵
                                            PID:619
                                          • /usr/libexec/secinitd
                                            /usr/libexec/secinitd
                                            1⤵
                                              PID:619
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.cfprefsd.xpc.agent
                                              1⤵
                                                PID:620
                                              • /usr/sbin/cfprefsd
                                                /usr/sbin/cfprefsd agent
                                                1⤵
                                                  PID:620
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.pbs
                                                  1⤵
                                                    PID:625
                                                  • /System/Library/CoreServices/pbs
                                                    /System/Library/CoreServices/pbs
                                                    1⤵
                                                      PID:625
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                      1⤵
                                                        PID:631
                                                      • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        1⤵
                                                          PID:631
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.suggestd
                                                          1⤵
                                                            PID:633
                                                          • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                            /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                            1⤵
                                                              PID:633
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                              1⤵
                                                                PID:635
                                                              • /usr/libexec/neagent
                                                                /usr/libexec/neagent
                                                                1⤵
                                                                  PID:635
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:637
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:637
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:641
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:641
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.siri.context.service
                                                                          1⤵
                                                                            PID:643
                                                                          • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                            /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                            1⤵
                                                                              PID:643
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.Maps.mapspushd
                                                                              1⤵
                                                                                PID:646
                                                                              • /System/Library/CoreServices/mapspushd
                                                                                /System/Library/CoreServices/mapspushd
                                                                                1⤵
                                                                                  PID:646
                                                                                • /usr/libexec/xpcproxy
                                                                                  xpcproxy com.apple.tailspind
                                                                                  1⤵
                                                                                    PID:656
                                                                                  • /usr/libexec/tailspind
                                                                                    /usr/libexec/tailspind
                                                                                    1⤵
                                                                                      PID:656
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.PerfPowerServices
                                                                                      1⤵
                                                                                        PID:658
                                                                                      • /usr/libexec/PerfPowerServices
                                                                                        /usr/libexec/PerfPowerServices
                                                                                        1⤵
                                                                                          PID:658
                                                                                        • /usr/libexec/xpcproxy
                                                                                          xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                                                                          1⤵
                                                                                            PID:661
                                                                                          • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                            /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                            1⤵
                                                                                              PID:661

                                                                                            Network

                                                                                            MITRE ATT&CK Matrix

                                                                                            Replay Monitor

                                                                                            Loading Replay Monitor...

                                                                                            Downloads

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13-2022-07-24_EB6AD9D7.PLSQL.gz

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              3443e4edf2f96316848e4b7eaf8706c8

                                                                                              SHA1

                                                                                              9ca6960b8a5d6d8f0a72bdc858b03122ce346c4c

                                                                                              SHA256

                                                                                              22c2feae547fa3ef57af701fad13ba3152794f9975953b9145e8681b21384a41

                                                                                              SHA512

                                                                                              66bd6c23b6d30aa4fdf63db12e9ba65e15b482452360b105ef84f41f9419834b094c50518e4f0744fabba4cb3c5811118aa6c08b78884ea75f2ee00908aba060

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24-2022-09-03_C9376BBE.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              7af410cacaf2150dd0fd2f6ff9022b64

                                                                                              SHA1

                                                                                              a6574b5a78e2efd327e14a955738f2122148593c

                                                                                              SHA256

                                                                                              e1d6a1b1a7695578f8b52f819646cca6e575161701a2df033de879182feb38bd

                                                                                              SHA512

                                                                                              9daabf3c79a73632dce9a64ae95bbac4b23b39b400e734707700a58f2657ce038c0a614372a5b673b53c2bb2e3279d159b295ec21cdeb39ac251b5646b42637a

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-03-2022-10-14_4D119040.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              13da7090fca49d0b13f9f655cb3443e5

                                                                                              SHA1

                                                                                              e8dcb1be7fa75563cea1bfc0ae7cf294cc5ccff3

                                                                                              SHA256

                                                                                              9d6c9fffcd5f8dde5a5d09a36dd4c9b79c379d3dfad52f21361cdeafd5bb8fe1

                                                                                              SHA512

                                                                                              c30c8aa4412dcfbc9f8d7b99aa576f808285c86afb5de5b34853f7de1de6522ee6b0db48f539b1b0e32a5255553cb2947a37195fd4c273b42749b3bd0e431f63

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-14-2022-11-24_6D29AFB9.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              2f42a9b5b70f2049539ae1f6b258d84a

                                                                                              SHA1

                                                                                              e4af1e1911832af495281038d9320a1b79db433e

                                                                                              SHA256

                                                                                              9d8cbbe6b74e0bb52a2ccf58bd04793f7478c301372c692fce362408cccff1ac

                                                                                              SHA512

                                                                                              89958d9f3b51bd93bcec72edaf4ea283bd50ac8427a3ce865f70e6629f8ef1b3ba3c278f1361ea63b21c86a9f02456f0cbc2b314ab81ee33370f3289321af66e

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-24-2023-01-04_BDC3BD50.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              c3575059da1ced09b655d76cb19e567a

                                                                                              SHA1

                                                                                              bdd71f20f8a622b0c422403e75b5c19dfd016cd2

                                                                                              SHA256

                                                                                              9e543f59260e776647d3a80d71b04d56d29e87ea120ec49ebec8e5118b2784c7

                                                                                              SHA512

                                                                                              f70ca115bfdffe2d2aceb3f3c8572d0f3f9da0682df0b81442efaebd6cc3320df9763a36586373627490749f42c5275c2b0d031ef771ee4b68d26b0d6873b60f

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-04-2023-02-14_01CC9F9C.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              4bb1d36202cd0301c429ab1eb177b081

                                                                                              SHA1

                                                                                              88d7bab60148f3422ab7faa3573320b3373bc888

                                                                                              SHA256

                                                                                              0c47afa34aac1c5bd2caff8efdf492e56c676894e91fe9967b966c409b9f3aff

                                                                                              SHA512

                                                                                              cc62073a7f454be7f860525f22a610f92f8d42edfdcacfa4c99c55c25bb5d411a0e41814218ac0288932b41fdf114b848939f1ec4223e8e8132e6aa86a44957c

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-14-2023-03-27_6B7B8866.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              acaaf07a44bd497c61365d3dc19eb4dc

                                                                                              SHA1

                                                                                              93afa28d880bdb1a73a47b388fd8843d1907d2d7

                                                                                              SHA256

                                                                                              85f831d0a68f7536cefa7726a2ba9a18731136ec87bccab4d3ef12b698ec5e8a

                                                                                              SHA512

                                                                                              25d62cd80c3409e84187458ae928d930b1052c0a73aceb85e75e889441dafd93bf5174b3386d0b25e972f9804fa1e4016a449b040cfc89a1592c8da3f7c40f77

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-27-2023-05-07_B5557BAB.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              7b372275c81accb8c2cfca01d2d2fa08

                                                                                              SHA1

                                                                                              ecf90a46a534875348d0c6cc68a3f519e20134d5

                                                                                              SHA256

                                                                                              0ffc9d9da289b189e73e96a1df97d362d73ee7d6c41a208e5a2da09dde1c40d2

                                                                                              SHA512

                                                                                              fc222930942401a96e40d58a7482a142381df5a1c1fc591e87f0560df899dcc3b319c6310681666239ca203dfc3cbe824fc7019e5892456a617ce72f624e91ca

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-07-2023-06-17_29DA1066.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              d186aff84eb002b41e388e22818e762f

                                                                                              SHA1

                                                                                              ea820d6c9bcfd26feead8e18c005c251306aa809

                                                                                              SHA256

                                                                                              98cc15a77eb71d6d28ae949d44e6d91617017f4079aa23b891a867a7e6ec9ce7

                                                                                              SHA512

                                                                                              61ba61df4a7a01de6b8063419b6f75f8dce0badb8c7615876b2f1e592af59b3ba3d5218a6f5b32a82dc2320fa9eeb642edb35a760a4ae9a8735646c888318f15

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-28-2023-09-07_CE4B8A5A.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              cb0cca026fddf010af07751ff8568340

                                                                                              SHA1

                                                                                              7b159428214fc321c56efe60e7901edd4c8d3b12

                                                                                              SHA256

                                                                                              853d293defe2b53f978cc66c08225e2ebc82c34660a30678354d8a7904ac011c

                                                                                              SHA512

                                                                                              ff2b403c7a07c9c4237fc831d000dedfed255be3ce208bf465b3ea08ff84bb38a3fb7988f6a250f9f30e6ee8c76f65feebd41d187b257746803a39adf66c1879

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-07-2023-10-18_4A4E5271.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              d079df8d6f3f956dcbf4a285298d5392

                                                                                              SHA1

                                                                                              5e2c54dcebda469981dca5a0c623d611d24fd096

                                                                                              SHA256

                                                                                              ef2e78cb31f012dc82365f796e67aa45c7144a6f02b325cef45e1b0f37e47e9e

                                                                                              SHA512

                                                                                              1acd91ca38032f3c80f0308d0c86de40c37b4ca80341924d22875a4aa750f526dce6c8208ca3da5f97ec99d8be00703e766d402b85d8c1b5b25fb9804af20c4c

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-18-2023-11-28_07875DD8.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              ed37149524964c8dff108834f78028b8

                                                                                              SHA1

                                                                                              514af72ed2f6e7b729e3757c8c9133472ca85181

                                                                                              SHA256

                                                                                              8031e5e7145a6bfd32bb61cbb4ccfe10b30c0e61ddc74d0b19c84721531a2752

                                                                                              SHA512

                                                                                              ee7282c2db90bc800933b247c914cbbf272374ae3485731995d028160a834e0b3277226bdc46d86c4700c70724622be1bc5def7d3360656264f601654c4dd4f7

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-08_E48B5C51.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              d6b1cd7077a39664ebe58b8a472f1c93

                                                                                              SHA1

                                                                                              d3860450e8426fd603cbdd61cf611096225ac211

                                                                                              SHA256

                                                                                              0aab75dbea3440475ecf8ca1046aad27c38729ba2826e0b3d173d97318154d9b

                                                                                              SHA512

                                                                                              8f21ce72167081624f5c67478f8aaeb8c5484c890c055a4a9e6ad5bb158d3a9e747e9cf97346b123fc232f63081ff91fe8bdf7a637ee82409b261929ec938164

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-09_A0D37646.PLSQL.gz

                                                                                              Filesize

                                                                                              58KB

                                                                                              MD5

                                                                                              981a1bcd1425b7192267fbb02a6041be

                                                                                              SHA1

                                                                                              b1e5dad96b1c17c67c1f164347b3ac2f8f81ccd9

                                                                                              SHA256

                                                                                              cc8e0e15f156f8038ec9f3c1ff7fc179846da73715ea7b56453c754c6629f877

                                                                                              SHA512

                                                                                              b749a2a93766fea2695b8294279d66d1ae16d03c5211ab660f7ecd8040f709ba20bc6b00fbc62a235ddeb5a16fbe94c5779d92803925f3461bb17659e9eae232

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod 2)/default-search-4255.styl

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              ecffd97aba0c34d35b1a9814925dce20

                                                                                              SHA1

                                                                                              955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

                                                                                              SHA256

                                                                                              9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

                                                                                              SHA512

                                                                                              0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod 2)/[email protected]

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              0772477173e9e34a7860141b6b18a084

                                                                                              SHA1

                                                                                              d28286b98e6d7de043466687dc609f2b5287560e

                                                                                              SHA256

                                                                                              6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

                                                                                              SHA512

                                                                                              6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              a252b0eb6cb7038d9fd0fb6067466b77

                                                                                              SHA1

                                                                                              8498f402c35bb1dd74d705916c9d596fb98ab3fa

                                                                                              SHA256

                                                                                              0ecc2e906f7ee6cb729056ed6cebfd602b7ec67f714f6a09eac09ed2c1e0b9da

                                                                                              SHA512

                                                                                              95627b77931b2a5698597002bb6b925603fc99a448780b6f48abae47326d94d251aa55493a66ecfa30e68e38912aa62d9bc2c2c4e38d875f585de9d972129ba6

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              7e6f2130adaf8f51c9099b720420d583

                                                                                              SHA1

                                                                                              926ad8aed7174dc1e6c4564c287f162a64e9eb02

                                                                                              SHA256

                                                                                              008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e

                                                                                              SHA512

                                                                                              af094f868136ca6678ba79342eda83093d97d8f4ed7e32142189ca6b637ed1889a47bb5a6e5b9aa3446f6fabc40f460fd5ed5046522cf4ba37dffdc442f1f111

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              e470100c10a331f411c89c42ed1d2b36

                                                                                              SHA1

                                                                                              9b61c06dac80e37b8f10755a1085442695bc6d96

                                                                                              SHA256

                                                                                              9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9

                                                                                              SHA512

                                                                                              219257b90463b5cd26f4550bbbff44ebb7c912dc4123949be55b5295bea1068891276bcd39daeefc4f4b151830a6357b905417f6aa667185447f8ef74ae24e46

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              557KB

                                                                                              MD5

                                                                                              79e30a7cc6ed6b5593a4ecb88abe39a8

                                                                                              SHA1

                                                                                              939964f09310e060c3b304c010fcb320615ebac1

                                                                                              SHA256

                                                                                              a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a

                                                                                              SHA512

                                                                                              097c8e18460d5b83dcb9b8ebb9b5018cdf4e6ba942d43fc01e248c2fa056cac2d0ea64bf4e163d06efa1cd19b420fa1623cc5bc76a4fe5d5ff0843c258d031fe

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              2.4MB

                                                                                              MD5

                                                                                              7497805b545ae23676ac858b71d4fa4e

                                                                                              SHA1

                                                                                              24274ca99bf58e61db2dab7402df4ab1c4683758

                                                                                              SHA256

                                                                                              460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a

                                                                                              SHA512

                                                                                              5671678d3847b305f000808de62424eb348451e73b9ea05721af03e6afd326fdaa0216a54af12ca4d66a40c039202d022bfd24c86fac73b9de88af92964ab13f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack

                                                                                              Filesize

                                                                                              980KB

                                                                                              MD5

                                                                                              1c59ac9552a4f3a4f4360043e7b2f9dd

                                                                                              SHA1

                                                                                              baf7ca38c5f9ccbe63cb0358b4a7de0985b04724

                                                                                              SHA256

                                                                                              3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3

                                                                                              SHA512

                                                                                              74825cd1a7202a966436966abe0fa21897db021ac7131208f7b3b211f665b011797fb76d08b3ef711905d70ea73812b9205ffad8b3673100269eecea5aa7bc5c

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack

                                                                                              Filesize

                                                                                              556KB

                                                                                              MD5

                                                                                              9d9b8128687d190c12ec71dd3f4cdd7d

                                                                                              SHA1

                                                                                              17b6b8ebd611990412ef8f9b023f7c6b70bc24f7

                                                                                              SHA256

                                                                                              4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb

                                                                                              SHA512

                                                                                              145504feb65be180363c66721d79ced6fd6f5ac164005a2c90820ee6b0f77d2ff27f6213a55d64acf5169624ddd9fb798babfc10dbf8a46c1bc042bbf7c8049f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack

                                                                                              Filesize

                                                                                              82KB

                                                                                              MD5

                                                                                              e598b18e3ad8c62750d0f9ce92f889e1

                                                                                              SHA1

                                                                                              e33a7f936b4136b050eae19c031fb447f88b4f53

                                                                                              SHA256

                                                                                              63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058

                                                                                              SHA512

                                                                                              b8a2b12449c2a10ee03bceed4003999d3e69c7318873cb1075ea0918b296df95e78fe1840bcbc931982a2feee69262880cea7cd12be284cce1de54603a9b4551

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              84KB

                                                                                              MD5

                                                                                              17ccc05a9b2b550f44f9adb751deef28

                                                                                              SHA1

                                                                                              40b1c2c53565a26ce46218ccbe28e1a83e7196d8

                                                                                              SHA256

                                                                                              b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8

                                                                                              SHA512

                                                                                              f6876ee7ea2a2d116f6df75045180644a1232f38d288a840c80e73b4d88d9e07a163261f0644ebe2455154325d7063da69f25b2ae66b92b5f924f3c3975b32ab

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              9a6bdc0f5c6bdb443c5def9e55c9b5db

                                                                                              SHA1

                                                                                              3d9817e39d7e73b809e97e97e0ea4c59c33e1819

                                                                                              SHA256

                                                                                              675e8fe3f6d138c33579125651e179fae0b7fa897f7c7221c2bfaea2d293c4b5

                                                                                              SHA512

                                                                                              943c4e7ab940384f0685f6a5a1caa1dd0bfd5e5bf6a960de9b87dd0fda36534d00874aa8fa0fbeca6dc031679601ddf5a4808aae130c84bca688114d6da9daeb

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              06a0b882430deef4b3d79d2b7f6230c6

                                                                                              SHA1

                                                                                              ab6761cbcbfbe4a9388a3aa6e4e954384a0d1063

                                                                                              SHA256

                                                                                              87c0709774e927e35507a281b4d4f11896e89a7da2eeb48f60eaeb343c8105db

                                                                                              SHA512

                                                                                              882ad399214c1d5abfccedaefbf60c6b2a9d2a7f40fd2e732531f6ce104ea8f6405a79ae22826c9297f5c2d6fe8a6f706fd56309ec89e016a9809cb0858facf0

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml

                                                                                              Filesize

                                                                                              150KB

                                                                                              MD5

                                                                                              76ebb0196d42a294b69ef118cbb301d5

                                                                                              SHA1

                                                                                              61e5ab752d351af1661716bc48c0520f66cd1d1b

                                                                                              SHA256

                                                                                              aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

                                                                                              SHA512

                                                                                              8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              513B

                                                                                              MD5

                                                                                              a2e71d8053926dd9187a2c0ab78a9d91

                                                                                              SHA1

                                                                                              155ab73e7922f9852466d2f84f7ac040b3dbfdcf

                                                                                              SHA256

                                                                                              72456826a6f6c9625a1a8781afa72d08cf317fb19765c5f25acaf5bd00848be6

                                                                                              SHA512

                                                                                              eab58bac2076d61a4934676d5332067463041bce03282738c1d85fb25062d0908c490ef838100ef241f25152936f23dc53803693a1841ce8aac90e5d7f0845cd

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              316B

                                                                                              MD5

                                                                                              2c1a2c6776631bf0e98031c442bb9787

                                                                                              SHA1

                                                                                              3d5c0c836e14d70712aea02557dcf8d899c741cd

                                                                                              SHA256

                                                                                              00578c8de424b66d08835b807542cc850375cf5f42138074983c76d24418d33b

                                                                                              SHA512

                                                                                              fdef686cb61bc17fbaa964fea12f8bf94b355e2bddb59a1dbb99313cc39553873d5fe2bd8f62538cd444ca856f8db886dfb8b7e7f6a1f9a56dbf697ee09c384a

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

                                                                                              Filesize

                                                                                              21KB

                                                                                              MD5

                                                                                              df3e0dfd820521a756bbbc584f4bf1a9

                                                                                              SHA1

                                                                                              dccf82e2be348c406faf445309ed1669d7eab7f3

                                                                                              SHA256

                                                                                              7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

                                                                                              SHA512

                                                                                              c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

                                                                                              Filesize

                                                                                              2KB

                                                                                              MD5

                                                                                              ba4df8801bd4124f55bfe7c130477094

                                                                                              SHA1

                                                                                              2136b957456e5776e5d0b996fadc2978a2cd064d

                                                                                              SHA256

                                                                                              d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

                                                                                              SHA512

                                                                                              795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

                                                                                              Filesize

                                                                                              47KB

                                                                                              MD5

                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                              SHA1

                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                              SHA256

                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                              SHA512

                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              d3a1859e6ec593505cc882e6def48fc8

                                                                                              SHA1

                                                                                              f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                              SHA256

                                                                                              3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                              SHA512

                                                                                              ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              4fa4861206270cf218b0cc467321d0bf

                                                                                              SHA1

                                                                                              902b6057ec4de1d4d9471183972c665d3abebbc0

                                                                                              SHA256

                                                                                              5f62befc945d1e6170f24bc2185d98e62a5d7c61dc426f7589b04a899ea098ef

                                                                                              SHA512

                                                                                              7b6ff022c3b047f040da221ff39e9b2c7797c4e24c593a2ee9f74709ac38f765ef224ce92c03cabbae7047b728c7a4cdf2a67c0b77f7aef86cc323d3460e4483

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              47b97fcb895835db0963eccf206d4993

                                                                                              SHA1

                                                                                              b92fc960dce029d2f6c8aac1cc2ac744f98d82a1

                                                                                              SHA256

                                                                                              d80a3dd243a6c8156cd7504f5fec801db2dd597213098dcfa145ccfe014045e2

                                                                                              SHA512

                                                                                              9f00455982926ba864156fea63400a2fbc213b88173b38f0ace81c627e0631200e42afe82662121766fae4f3185c7dabef44786f28840623dfe7d620e2d72dd1

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              2e42589f3284dcfaa0d33b4949ec193e

                                                                                              SHA1

                                                                                              dcd261263f1879091a311a5fca5297b068ed342d

                                                                                              SHA256

                                                                                              4ad952475bd2aa12213191c8b4d72ad43a46ddad1ed40cf45928259da8e6e35b

                                                                                              SHA512

                                                                                              1db90cecd33d65e3ab206a6681d197380268d7b8fa6de3b7eba1f13743f188cd206ec15d38a255c154e8c8aee225cf50f0065b439b8d786c6150e30451d2d20d

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              538B

                                                                                              MD5

                                                                                              1f3f082c0accec9cafafe29ee8d29a90

                                                                                              SHA1

                                                                                              001990226e43005a020838ea98df25379de53ddc

                                                                                              SHA256

                                                                                              e396dbb03635eee95d2db4d73f302d64c7d115d727fa930f3ce72e6ec4f86c49

                                                                                              SHA512

                                                                                              30c1ae8ce1e5b2f740104f797ad3d473b1ca116dbfadce3d2a26785f08d823c5924822c298bad71f80b5ffa7274b969408661f9d1ae7ee4b83e4e850b8ba4472

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

                                                                                              Filesize

                                                                                              6KB

                                                                                              MD5

                                                                                              2b0bc3d4b28b37889d09acc741f4ebae

                                                                                              SHA1

                                                                                              060af238652083cafa7c43d79ea457eed8570429

                                                                                              SHA256

                                                                                              145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

                                                                                              SHA512

                                                                                              459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3