Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 03:06

General

  • Target

    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib

  • Size

    320KB

  • MD5

    c1a3371fb9d12f0b770b10585cee449d

  • SHA1

    79e700196c5ecd8ce918ebb5ca2ad2b486828796

  • SHA256

    5f8a09e33f36390f1b01a9046db49ca9f138698f43f4c4ff281bfc2249492be2

  • SHA512

    d90c8c1586240840c54d2c20d86212c7d90a255543fa8c37321282aab225297b9d642082bcdd8f5b57dadb6e8ba04fdc39e5e5832148e34feca32bacef778495

  • SSDEEP

    3072:Vo5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQo/8uGT:65R9iqOEcKbAgHMWbBZ7oS1bXE

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib\""
    1⤵
      PID:579
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib\""
      1⤵
        PID:579
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib\""
        1⤵
          PID:579
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib"
          1⤵
            PID:579
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib"
            1⤵
              PID:579
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib"
                2⤵
                  PID:580
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib"
                  2⤵
                    PID:580
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib
                    2⤵
                      PID:580
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftDispatch.dylib
                      2⤵
                        PID:580
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:581
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:581
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.geod
                          1⤵
                            PID:615
                          • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                            /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                            1⤵
                              PID:615
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.icloud.findmydeviced
                              1⤵
                                PID:616
                              • /usr/libexec/findmydeviced
                                /usr/libexec/findmydeviced
                                1⤵
                                  PID:616
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.pbs
                                  1⤵
                                    PID:617
                                  • /System/Library/CoreServices/pbs
                                    /System/Library/CoreServices/pbs
                                    1⤵
                                      PID:617
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.geod
                                      1⤵
                                        PID:618
                                      • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        1⤵
                                          PID:618
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.PerfPowerServices
                                          1⤵
                                            PID:619
                                          • /usr/libexec/PerfPowerServices
                                            /usr/libexec/PerfPowerServices
                                            1⤵
                                              PID:619
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.secinitd
                                              1⤵
                                                PID:620
                                              • /usr/libexec/secinitd
                                                /usr/libexec/secinitd
                                                1⤵
                                                  PID:620
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:621
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:621
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                      1⤵
                                                        PID:631
                                                      • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                        1⤵
                                                          PID:631
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                          1⤵
                                                            PID:634
                                                          • /usr/libexec/neagent
                                                            /usr/libexec/neagent
                                                            1⤵
                                                              PID:634
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.suggestd
                                                              1⤵
                                                                PID:636
                                                              • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                1⤵
                                                                  PID:636
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:638
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:638
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:641
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:641
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.siri.context.service
                                                                          1⤵
                                                                            PID:647
                                                                          • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                            /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                            1⤵
                                                                              PID:647
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.Maps.mapspushd
                                                                              1⤵
                                                                                PID:648
                                                                              • /System/Library/CoreServices/mapspushd
                                                                                /System/Library/CoreServices/mapspushd
                                                                                1⤵
                                                                                  PID:648
                                                                                • /usr/libexec/xpcproxy
                                                                                  xpcproxy com.apple.tailspind
                                                                                  1⤵
                                                                                    PID:656
                                                                                  • /usr/libexec/tailspind
                                                                                    /usr/libexec/tailspind
                                                                                    1⤵
                                                                                      PID:656
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.PerfPowerServices
                                                                                      1⤵
                                                                                        PID:658
                                                                                      • /usr/libexec/PerfPowerServices
                                                                                        /usr/libexec/PerfPowerServices
                                                                                        1⤵
                                                                                          PID:658
                                                                                        • /usr/libexec/xpcproxy
                                                                                          xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
                                                                                          1⤵
                                                                                            PID:661
                                                                                          • /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                            /System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
                                                                                            1⤵
                                                                                              PID:661

                                                                                            Network

                                                                                            MITRE ATT&CK Matrix

                                                                                            Replay Monitor

                                                                                            Loading Replay Monitor...

                                                                                            Downloads

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13-2022-07-24_AF640CB6.PLSQL.gz

                                                                                              Filesize

                                                                                              31KB

                                                                                              MD5

                                                                                              c3b1703686d1012169f1e255f702f8d6

                                                                                              SHA1

                                                                                              289b3b36aaaa0a58cf6ea704ab4f307364924954

                                                                                              SHA256

                                                                                              e15e85746cc13ea64ccbcb8b72ecfd30699f183e22435ab30cb7ecab3b387ebd

                                                                                              SHA512

                                                                                              7b9be3eabd2f0a8eb9e6338aa1fe123acf3dd0b49364350680677de72d6747f1ffda02d1ee9339586c65fe8b43916713e54697be40a239dbaa9f2852e7ef9fe5

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24-2022-09-03_5314D496.PLSQL.gz

                                                                                              Filesize

                                                                                              50KB

                                                                                              MD5

                                                                                              9d8a837fa6fd4dfbb4759233a1c2e83f

                                                                                              SHA1

                                                                                              bd8b9c0c149846d661696e2cf1017da6e9b9fc4d

                                                                                              SHA256

                                                                                              05586d1f11ad520822cf85074565ebd9f216009c9d5d43d9dde692d2db14a729

                                                                                              SHA512

                                                                                              c633ae6cf92d2e7d9310be48c91ae87c13116a567e68d7d871c360eda2e457eedb428b8b782551d4195e32d187ebb3065a6952339e04fa95cb61201fc09c4c13

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-03-2022-10-14_AC679062.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              0b7612b0a202ec105b100aac55f55aae

                                                                                              SHA1

                                                                                              da753a5fd4c3cb31fe42174975cdcb96631237a6

                                                                                              SHA256

                                                                                              b3bf86811fcd087d67b4bf4fa7a1971cce0e2313b81d85311ea3812e56c6ab71

                                                                                              SHA512

                                                                                              97e9c851138c510f2bf2579f34e2290edb43e089a35c9b81836ebe11663eac9975ef0e1d92ad298ec6e0c27c959a3ddcacd6328f70eee721de228166caa28f59

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-14-2022-11-24_A4F0F6C6.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              0cd8eb583bc19cf9f12cd66c4d972c39

                                                                                              SHA1

                                                                                              d9dc652e99b6a8010f4e6233e55f1d915fba01b5

                                                                                              SHA256

                                                                                              b56af8b6eca1c18adbb6a68427642ac6dbafe744f95cc712b43c6ab9790e67a6

                                                                                              SHA512

                                                                                              11ab66d0e556db268f1d6ed97ab331ebbe62a17e300bc9c30ae85484ace68ad912e3daaf4a5cef8ea72f4f2f4f122b81953572ab65f456dab66f1c45743e7110

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-04-2023-02-14_6B1A8C3B.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              bc39e0aaefbd0d21cd09811f791b21c9

                                                                                              SHA1

                                                                                              9e7fe2bcc0eb50c6a40229d91233757b2b100760

                                                                                              SHA256

                                                                                              1ad29ecf24c76eab3263aaf220e3d90335d62bcb07096f0531ac8cf4b2627e0a

                                                                                              SHA512

                                                                                              ffe91dbe49df75e9fbf0a81adc7fc8c4443711f7e19000ac8cf7849ab4611df4e350cd7d4388120ccad4fe3871ef1094038fc7ce70482687ac64c8a2e8ba5cda

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-14-2023-03-27_0CE3E25E.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              5c5cf1d0860f90058ffb6b0e77cd3182

                                                                                              SHA1

                                                                                              1a1dcb94754c4e44ca1d6c9ad6a0e7d2d82425b4

                                                                                              SHA256

                                                                                              91d9cdac1fcebb4f47d82780627dc82608fad417e6fcf0a4960eadf18d9c5132

                                                                                              SHA512

                                                                                              c8c72e32bb99ff1704c88ba78519256cd4e6f5d02aa3ebb0af2b4ebe9267ebf1e6798ad4972afeac133e051be011fa2b127882fa3334f7b3f361aa9364c29bf6

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-27-2023-05-07_9DD65C61.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              e21fae8eaec99004b9c040fe03dbc951

                                                                                              SHA1

                                                                                              b9349fdd22dd0bf13cd38a706a90c0aef94ea8ea

                                                                                              SHA256

                                                                                              f80f834ac9726db91ac9e4530e5b7b30d36d9c0a35544d12ef113f2e8047f9f7

                                                                                              SHA512

                                                                                              7936db75b4c61d5a65d95c171919187c4cbc220c334dfb388379816928f0358ea46d839285ae9943c9c735cab14e39f0fc0879225419436aaae858ccef525729

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-07-2023-06-17_489FA018.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              815ccc523e0fc234f96493eac4b99d9c

                                                                                              SHA1

                                                                                              88b4ed4ccd3f938280452c50b7d868bd0058caa5

                                                                                              SHA256

                                                                                              a7e7ec8f4f8658cdf93841f44d81c8dd650170856e91c21006402e7af50ee0cc

                                                                                              SHA512

                                                                                              9b0e15d9cdd6cd32d6121bb30386892e2f1c58f7c637e405241306905dfb8db82153835bca9ed757a744f1979c5d7f0ebf24484912e5d51758d4c2ff5f914274

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-17-2023-07-28_D9C18A48.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              d93e0100c6cd27c3c68c48193eac80a1

                                                                                              SHA1

                                                                                              14bc454e61ee8cee256cbc6862a194a2a475975f

                                                                                              SHA256

                                                                                              3866742dd07412a1810f9003c4c864181cb24b98cce4957b63da945986aab2d0

                                                                                              SHA512

                                                                                              dac82e4adccd7e50180d54928e6bb10d376e3db485a258bbcbd3171896626248e4971475d3c688450f4e2844e5415d8bb5a89a6d88112a195eda829b1a4e0f83

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-28-2023-09-07_72AAF495.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              207e0c515790c527008901a5b1bfd089

                                                                                              SHA1

                                                                                              5fc403cad676bb09eb00322585a40a474dacaa06

                                                                                              SHA256

                                                                                              09f8308400ea2812950adec9ad7b11f42885996c314671863001599d3e6d878b

                                                                                              SHA512

                                                                                              cf895859a2ba629ec274f22feb89c200946444c4e792dae13ea060fe4a610a643f46b3b82a4eeabdd539fad092ef48315f3f3803f1b44cfd19bb8192eae75b68

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-18-2023-11-28_F0A963A1.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              d9c2f1443d10a3feedb9ee4ae77801f5

                                                                                              SHA1

                                                                                              fb01999931215c298c4e6a4f63efc19cef4bfdcc

                                                                                              SHA256

                                                                                              48ee4e0aa09438ccb13f27417b5d02dfdf0a493b58c05202d4fa388c8a798d17

                                                                                              SHA512

                                                                                              a156b385513409441e25083a352a2f2394bfe96483e9b25875efabfdfaa9c0af8168359965aaa4644bea0ddd3f1094866c605f00d02e7782476dbe8fe14e418f

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-28-2024-01-08_28321C0B.PLSQL.gz

                                                                                              Filesize

                                                                                              57KB

                                                                                              MD5

                                                                                              039803c57e087e40b1a647543694ca73

                                                                                              SHA1

                                                                                              dd0636dd89c22afa0a7398882fc17b4ede767e79

                                                                                              SHA256

                                                                                              c9bd92ade3d26ecfecdee0030a39b9a5e874e0ca6a6fd7f1ba4e98b3c94d1228

                                                                                              SHA512

                                                                                              c80e3ef279827bb76556571efe81f02123010eca1806eaa4d2a15c19a750607571a490b112fab2cf154a0b05d099f80861eddef65a2c4a0683f547b1b720fe9d

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-08_1C1F6746.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              7686bdab05e384fae46a3c0f50e9c6f5

                                                                                              SHA1

                                                                                              b2a32e492f0d5d1865ed0b73a3c274cd055b66d3

                                                                                              SHA256

                                                                                              41ed79d229f4ca8ccfe6c21d1b37235b16856d82e547a33b4f03fa0e7609d835

                                                                                              SHA512

                                                                                              d5099d40c77b5f4e884697841f68df0e15581537f4506bfd34111e2d3dae410bf90bfca93f38ffeb37b010d387db4f720e1ff2f229ff03ee3307b7f6ca287f17

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-09_90E8117C.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              b5f8c6c1f9982afae99f70820159ae9f

                                                                                              SHA1

                                                                                              8208a62ba5c7f8bcdfdac0050a48a9916fb72fe4

                                                                                              SHA256

                                                                                              1bc21c645f69080883bfe1adfbdd1b44504a0af137a78adf7cc89afb3355e73e

                                                                                              SHA512

                                                                                              5a0a50d4cdac21a7a65f6355edf2b50710bc3946b36357fb8e31c24a9d85eb09645b9293c27b38d78e246a87607e5d1b5a2ad70912f450345324b4c3d2b020a5

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              2288f3c30dfcc1fbcecadd61aa323985

                                                                                              SHA1

                                                                                              c4eaaa6a10ed36c98ffaf3e0b22cdaea6f33181a

                                                                                              SHA256

                                                                                              b6198c6f47a2bebdec730297372f53727409b6ca25b936d5fb12dff49dbe7ebd

                                                                                              SHA512

                                                                                              f4d0b66c334a8f46495518e9e45f0cfbae1287b16e5f3ab730f13c4d31766028a09ae98c776014c114ee00f9b68c3cd79dd6c32ad7b49e609c0070b9ad512d97

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              7e6f2130adaf8f51c9099b720420d583

                                                                                              SHA1

                                                                                              926ad8aed7174dc1e6c4564c287f162a64e9eb02

                                                                                              SHA256

                                                                                              008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e

                                                                                              SHA512

                                                                                              af094f868136ca6678ba79342eda83093d97d8f4ed7e32142189ca6b637ed1889a47bb5a6e5b9aa3446f6fabc40f460fd5ed5046522cf4ba37dffdc442f1f111

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              e470100c10a331f411c89c42ed1d2b36

                                                                                              SHA1

                                                                                              9b61c06dac80e37b8f10755a1085442695bc6d96

                                                                                              SHA256

                                                                                              9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9

                                                                                              SHA512

                                                                                              219257b90463b5cd26f4550bbbff44ebb7c912dc4123949be55b5295bea1068891276bcd39daeefc4f4b151830a6357b905417f6aa667185447f8ef74ae24e46

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              557KB

                                                                                              MD5

                                                                                              79e30a7cc6ed6b5593a4ecb88abe39a8

                                                                                              SHA1

                                                                                              939964f09310e060c3b304c010fcb320615ebac1

                                                                                              SHA256

                                                                                              a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a

                                                                                              SHA512

                                                                                              097c8e18460d5b83dcb9b8ebb9b5018cdf4e6ba942d43fc01e248c2fa056cac2d0ea64bf4e163d06efa1cd19b420fa1623cc5bc76a4fe5d5ff0843c258d031fe

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              2.4MB

                                                                                              MD5

                                                                                              7497805b545ae23676ac858b71d4fa4e

                                                                                              SHA1

                                                                                              24274ca99bf58e61db2dab7402df4ab1c4683758

                                                                                              SHA256

                                                                                              460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a

                                                                                              SHA512

                                                                                              5671678d3847b305f000808de62424eb348451e73b9ea05721af03e6afd326fdaa0216a54af12ca4d66a40c039202d022bfd24c86fac73b9de88af92964ab13f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack

                                                                                              Filesize

                                                                                              980KB

                                                                                              MD5

                                                                                              1c59ac9552a4f3a4f4360043e7b2f9dd

                                                                                              SHA1

                                                                                              baf7ca38c5f9ccbe63cb0358b4a7de0985b04724

                                                                                              SHA256

                                                                                              3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3

                                                                                              SHA512

                                                                                              74825cd1a7202a966436966abe0fa21897db021ac7131208f7b3b211f665b011797fb76d08b3ef711905d70ea73812b9205ffad8b3673100269eecea5aa7bc5c

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack

                                                                                              Filesize

                                                                                              556KB

                                                                                              MD5

                                                                                              9d9b8128687d190c12ec71dd3f4cdd7d

                                                                                              SHA1

                                                                                              17b6b8ebd611990412ef8f9b023f7c6b70bc24f7

                                                                                              SHA256

                                                                                              4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb

                                                                                              SHA512

                                                                                              145504feb65be180363c66721d79ced6fd6f5ac164005a2c90820ee6b0f77d2ff27f6213a55d64acf5169624ddd9fb798babfc10dbf8a46c1bc042bbf7c8049f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack

                                                                                              Filesize

                                                                                              82KB

                                                                                              MD5

                                                                                              e598b18e3ad8c62750d0f9ce92f889e1

                                                                                              SHA1

                                                                                              e33a7f936b4136b050eae19c031fb447f88b4f53

                                                                                              SHA256

                                                                                              63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058

                                                                                              SHA512

                                                                                              b8a2b12449c2a10ee03bceed4003999d3e69c7318873cb1075ea0918b296df95e78fe1840bcbc931982a2feee69262880cea7cd12be284cce1de54603a9b4551

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              84KB

                                                                                              MD5

                                                                                              17ccc05a9b2b550f44f9adb751deef28

                                                                                              SHA1

                                                                                              40b1c2c53565a26ce46218ccbe28e1a83e7196d8

                                                                                              SHA256

                                                                                              b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8

                                                                                              SHA512

                                                                                              f6876ee7ea2a2d116f6df75045180644a1232f38d288a840c80e73b4d88d9e07a163261f0644ebe2455154325d7063da69f25b2ae66b92b5f924f3c3975b32ab

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              a8fc8233448a4bc9d48be54a4cc3ee41

                                                                                              SHA1

                                                                                              2037dc1c8b4e89fc7f485cf13b1ae47037282c5f

                                                                                              SHA256

                                                                                              cc034bc12ff11f7a314ab809950700f9b3fafa9a8aa2841ab8c904db75a94580

                                                                                              SHA512

                                                                                              837b9b54e906f3127cf0b8a37eb9fda06baa0c987bab4b45a13d4af2a6f187e1eeb1e879f1a65d1b81b28492e1b43d9634f753d2c46e489627cc657d81079190

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              c2eedcdcf197c7063fba2c1d5a232929

                                                                                              SHA1

                                                                                              76861ff9f4b227d80b9c8b416f0ab440f36010fd

                                                                                              SHA256

                                                                                              9d589eea69a5b5fb62d70910385b0783c818b9eb97ac32b7ee1d9dc322c26f16

                                                                                              SHA512

                                                                                              c58468814bdbaece4523ebc0aca9c8186ed8eab1373b42b9eee9170f6c656829cb5e186a628d37964eb5ed3feb79572386f417733245514b632ef58b2fb0f540

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml

                                                                                              Filesize

                                                                                              150KB

                                                                                              MD5

                                                                                              76ebb0196d42a294b69ef118cbb301d5

                                                                                              SHA1

                                                                                              61e5ab752d351af1661716bc48c0520f66cd1d1b

                                                                                              SHA256

                                                                                              aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

                                                                                              SHA512

                                                                                              8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              513B

                                                                                              MD5

                                                                                              93f4e72859626451a4bc0ad64069cf4d

                                                                                              SHA1

                                                                                              2226748763d595fad1065ffff8617f6291cf16f0

                                                                                              SHA256

                                                                                              868fa06d3b8acff2f48b1f29692e6559c63bf3059eee9a29e81961a5562da3b5

                                                                                              SHA512

                                                                                              8b4e82744b0a5a6df52268ce59d3eeed12853f472a3bb0ca1a462b2696afa6d619d52c004e91af59aa080b11de45cff8c4d2ce9fa9d87838b509abb2599368ec

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              316B

                                                                                              MD5

                                                                                              790a6d353208587e231e36c50c364631

                                                                                              SHA1

                                                                                              0a7807622af9301450deeb3270b3f1ae6dd3d5b1

                                                                                              SHA256

                                                                                              1ecc7b43a773846a37be28e0719d19b393c0c748329d5b6a25ecf8897d3abf27

                                                                                              SHA512

                                                                                              665755fc91553fa62064b890c4ed8326b8f817b054d1857ee82704d182d00393da3455cf0fb8ab105eafa6e4ca7ad2910fc831f130805fcaef3c06b68e78e914

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              ecffd97aba0c34d35b1a9814925dce20

                                                                                              SHA1

                                                                                              955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

                                                                                              SHA256

                                                                                              9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

                                                                                              SHA512

                                                                                              0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              0772477173e9e34a7860141b6b18a084

                                                                                              SHA1

                                                                                              d28286b98e6d7de043466687dc609f2b5287560e

                                                                                              SHA256

                                                                                              6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

                                                                                              SHA512

                                                                                              6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

                                                                                              Filesize

                                                                                              21KB

                                                                                              MD5

                                                                                              df3e0dfd820521a756bbbc584f4bf1a9

                                                                                              SHA1

                                                                                              dccf82e2be348c406faf445309ed1669d7eab7f3

                                                                                              SHA256

                                                                                              7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

                                                                                              SHA512

                                                                                              c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

                                                                                              Filesize

                                                                                              2KB

                                                                                              MD5

                                                                                              ba4df8801bd4124f55bfe7c130477094

                                                                                              SHA1

                                                                                              2136b957456e5776e5d0b996fadc2978a2cd064d

                                                                                              SHA256

                                                                                              d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

                                                                                              SHA512

                                                                                              795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

                                                                                              Filesize

                                                                                              47KB

                                                                                              MD5

                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                              SHA1

                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                              SHA256

                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                              SHA512

                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              d3a1859e6ec593505cc882e6def48fc8

                                                                                              SHA1

                                                                                              f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                              SHA256

                                                                                              3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                              SHA512

                                                                                              ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              4a07ab7b5591a519210b27d84a85adce

                                                                                              SHA1

                                                                                              0912841fccb21bf5bf8ad4d4d07fd5016fc7c2cf

                                                                                              SHA256

                                                                                              0e7a2431dd2cce930cc548d857289d2aab7fabaa0c5f9053da0dd4e05592aa5a

                                                                                              SHA512

                                                                                              7d2c60e7eb4106d15aa25c2d463481f754ac7a01c65dad5d508c41226aec89d645e18af95ffc77b2cef2d8a33ea1107e51dad048c097ee08638b7db417013884

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              81734d9afa427473b3ce28579131efc2

                                                                                              SHA1

                                                                                              a257079b4e9722a854a03fd17421e09074d77a28

                                                                                              SHA256

                                                                                              286fad43288c29474e25940721f1c07c6db0a2b85895a238722d6c752b76c187

                                                                                              SHA512

                                                                                              5f3f39322af9b06a3e2db80a37dc40cce3965ac46ad7aa658159f0ab31561d84aad8fdd90ecc4805458bafd89bef65a78a17a3940f0461825e65b28c76bffbb5

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              7300dd2ebf6f54cbbcf8afb80f1ed2b8

                                                                                              SHA1

                                                                                              76eee045e053cf8448a74d5f1891b1c5b2b9652c

                                                                                              SHA256

                                                                                              fe975edb1a5d01a2caa865b6bb59f76a2ef54d49d0168312038ce44a7c5083e5

                                                                                              SHA512

                                                                                              9eaf37d7384e70af01c7d868f3275b7d2e1a7be1ec6da5d1bffc59e3fc22c74b9c10bb628d7c504ce4cdbe722481141fac4f3ebdd88c70f04a838f8a314ee437

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              531B

                                                                                              MD5

                                                                                              9675507ca635b0caf77be6b23a912aa5

                                                                                              SHA1

                                                                                              b2fc24750901914f4c7f383c007159876c20f388

                                                                                              SHA256

                                                                                              d5040163f351e487f37b8112066b1045a176eef76bde2e08ccbda8fbfdd77935

                                                                                              SHA512

                                                                                              807e1ff76bf9ea6a19b5a564579199e668e7240ebb49f40d77bb251bb43c41e3c3f0aa0fa5bed3d3284bb2f3954998e6697dacb8c210732280b2e449d48dd2cc

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

                                                                                              Filesize

                                                                                              6KB

                                                                                              MD5

                                                                                              2b0bc3d4b28b37889d09acc741f4ebae

                                                                                              SHA1

                                                                                              060af238652083cafa7c43d79ea457eed8570429

                                                                                              SHA256

                                                                                              145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

                                                                                              SHA512

                                                                                              459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3