2227af2b3c4b388ef4608bdfefa758843a51972f40ce0c081a68b15cbc2297a4

Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk 1

11/01/2024, 02:43

240111-c7j7vsdaej 1

Analysis

max time kernel
149s
max time network
156s
platform
macos-10.15_amd64
resource
macos-20231201-en
resource tags

arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
11/01/2024, 03:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
Size

44KB
MD5

06df532feeffc82d5e5cbf3840f0bfbe
SHA1

57eab62c07015bcd09f0fd94ee38adc53e2d9657
SHA256

380626348e8be8627e271f1ddeace4b5c3c715b73dc66cb3d7e5b1241f0d7d32
SHA512

89c2ba975fc5b760b4d68d258ae64ab0d2b60c77cd6a624d06ec796a03780dadeb587019d1014493beeb3b0902dedf1a86d69785b430eae77ed24e6d6bd2a207
SSDEEP

192:9z9dPD5/PhKrOvwiPCCLBx6aJnx2K1LCLpBPN3pO9q+tZ:9z1/PHP/L2ksqLCLnZp83

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
1⤵
PID:583

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
1⤵
PID:583

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
1⤵
PID:583

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
1⤵
PID:583

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
1⤵
PID:583
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
  2⤵
  PID:590
- /bin/zsh
  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
  2⤵
  PID:590
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
  2⤵
  PID:590
- /Users/run/Design
  /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
  2⤵
  PID:590

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:599

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:599

/usr/libexec/xpcproxy
xpcproxy com.apple.PerfPowerServices
1⤵
PID:611

/usr/libexec/PerfPowerServices
/usr/libexec/PerfPowerServices
1⤵
PID:611

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:612

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:612

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.findmydeviced
1⤵
PID:616

/usr/libexec/findmydeviced
/usr/libexec/findmydeviced
1⤵
PID:616

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:620

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:620

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:621

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:621

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:622

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:622

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:624

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:624

/usr/libexec/xpcproxy
xpcproxy com.apple.suggestd
1⤵
PID:629

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
1⤵
PID:629

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:631

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:631

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:634

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:634

/usr/libexec/xpcproxy
xpcproxy com.apple.knowledge-agent
1⤵
PID:635

/usr/libexec/knowledge-agent
/usr/libexec/knowledge-agent
1⤵
PID:635

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:641

/usr/libexec/routined
/usr/libexec/routined LAUNCHED_BY_LAUNCHD
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:643

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:643

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:644

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:644

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:657

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:657

/usr/libexec/xpcproxy
xpcproxy com.apple.assistantd
1⤵
PID:661

/usr/libexec/xpcproxy
xpcproxy com.apple.bird
1⤵
PID:662

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:663

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
1⤵
PID:662

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
1⤵
PID:661

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-14_8656637C.PLSQL.gz

Filesize
27KB

MD5
46d9cef5375ebd36648975920d9c49ff

SHA1
e0229de4cb9c6d295d811640e42d22d9ef75a7d1

SHA256
c72a78bf4f5c5edda57d6b093bc25995383b0f716e8e622c754caa06469aaedb

SHA512
02fc9ae89bb4d59a13a90a7594a2e61b41ae6c1e68f496ea1fa55b24d1e4a569663dd21500f522ceda063294bb1a5b4ef70ff3598685ec1a95c7aa43e8ecfaba

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-15_88E8619C.PLSQL.gz

Filesize
27KB

MD5
4505669d50580880f17b153242b9cf1e

SHA1
f10d6fa05d40c17a5418c0468228aeb6de37eb37

SHA256
5aaa5b11c43eeb6931e7105079abaa81f8119e37f06c4ad8262cea9959df8df5

SHA512
19aeb9b0f2fece2fc2d76bafbeb7a4e04f86525ada3828d4947c8e3c4cde9782db6068ce91d404dda087a41582075aa4e135c1bd69ab98acfe256edd1c5dc8da

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-16_34CDCD2F.PLSQL.gz

Filesize
27KB

MD5
b966283ea07b7004bf92033f6ef7007b

SHA1
afa2a1e670db5486607fd640960055211915299c

SHA256
bdb3a4ea3fcf4abbdd4fc2b52a4770896b8ea2bb59afc4f65c27ea1aa203b74a

SHA512
1f0711587158d0720b149439508976ab81811f044355f7c892b7595df61a5a91094001f31d722505ab60df9a85df059f2be92e14480f1812379ec0e78724a5b8

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-17_62F7015C.PLSQL.gz

Filesize
27KB

MD5
f4a090065cd17f1a541a30eca86067e4

SHA1
29b9a16e37465070f3acf949ffcac3c939a471a3

SHA256
a1d1f111d4a4a6e6f467988c2cdaad5a0e821175d2db0b0131458b9d77835de6

SHA512
55490f86f00163378bf50b2388fb521f22bbd0ea90da1f710e15735d2eb8e0cf8847b555cd7c740a3b49c463e7e8c6ad35a7be0b1bbba9a4f8867e418cf1c8d7

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-18_20802735.PLSQL.gz

Filesize
27KB

MD5
7d117b78b6e7565d395d119bff4343aa

SHA1
44ac154b9e72ece6e35d9955b826615bb0f0b74d

SHA256
233352520ee02a345f5a9fcf273879e6a2a4e7331907f13b6393ba0ae039b8c1

SHA512
374497327f2914d17c7d4bc4498a651387439e7e628cbdb8c36a66806ce76b768796e8eaaa9e8bd60f4555002878182f653bd0584e5e027c90b2b3aa46018ce2

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-19_1AFE448D.PLSQL.gz

Filesize
27KB

MD5
179d2b43a321074c8a6949ca47972d5d

SHA1
2e5ce1149f1c53b5c159da621d1b38159c8bea6b

SHA256
f2873e9f1866ba749546a4842efa6a0b632aa312a50b53a7a6f0bdc2417e1e2a

SHA512
efecdd8efdd86fa3e5fe52899d131fce49b0b413185531938f0be6502fdc608cb2b1bbea6418e3f37039a7b25e4513187e89866a48d731471124d572d99424f1

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-20_BFDE8BB0.PLSQL.gz

Filesize
69KB

MD5
617c10014d61c8a691e4218a567fcace

SHA1
8b60e835a0f984e9b27a22b53a349d7e9b28e910

SHA256
566f51a7da48bcc6379a582023c60c2382f055e3f0000d00ee077216dd7331d9

SHA512
178539ceae7b6019e61bf98f6491f438d4c349e3fe0c65c700d50d7961573bcd1eb41c7ffc9aa3bd218ce865438f0fc47726c28f68e8446ba4b7bb27ec655a58

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-21_A868D5BB.PLSQL.gz

Filesize
27KB

MD5
6c2bf990cab56061a13f454bd4df7eb9

SHA1
8919c798587bd8ffda53fbcb26bd4f36324f376a

SHA256
28a68c72ab1dd57292a4e13f4b9bc9762d9152389cb1f3e433a8ccb39677f4d2

SHA512
c83cf33f6f513bc68a0e8426e552560a64b96b7d52be4218b31a8d945470c1130f9d5b4081a5f6ccfcac684c79a4351c6bee28272d3713d5170b37c09c48ab10

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-22_DDADEC22.PLSQL.gz

Filesize
27KB

MD5
42c170bd3e2391f5a8d46b91a22df1b4

SHA1
aa361ae583a730294b8c11e2881ae9fe7c3d0bb4

SHA256
c4df06b559e156af43b1e41b049906e7e9e067bfce2cb6120b81b1d3a901298e

SHA512
e7c1acf5d0fe20f0638bc8943b2cc285e729988fa81fed25305cf58427e08c7c44d3d21f526f1c9af8b23c217a91f173e5de2cce79cf345275446ef049c07fa0

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-23_19689E40.PLSQL.gz

Filesize
27KB

MD5
99a702f59e05546fd30c94cd9fd1377e

SHA1
d5f4dd68c0792b5eaa070cdf344d7b426a3446d1

SHA256
c4ee8f8037a7f2922e2bafac996673616eac5f43a647385b36ab4d216149510d

SHA512
f51a2da923ec8dbf4af6441a437d0733973bedb289e1a451d6e277c857038361cddabcb7afec698524be4f5e6efc97a7b8da072156b7c2b0fc484ff20c8468e4

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-24_C3F1D705.PLSQL.gz

Filesize
27KB

MD5
ee667cc60a36060a8131bc8db6856c2e

SHA1
43d0f76f628bc6f7f791bf900c56269cff1e3236

SHA256
34b473b00a21d0b97bbc6fa0453866e78cc6089855fcff57fb9daff1725fc290

SHA512
78b9d6a15e96c3f6f874764a09b073b1f38ed7713b2ef9470f369d0de402c87515410e4d3564acd14476f9c90b75173aee6339b2b11a084ed1124012172e7698

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-25_ACCE3B37.PLSQL.gz

Filesize
27KB

MD5
5f960c60837a042c7a4f53a1838fcfa1

SHA1
53fa05d381c429b0435ba9603f57b4dd57099195

SHA256
2514f88941f4cea33a473dce68abec32677286ad7b157694a0ddcdbb0c835bbe

SHA512
045297ae3a1d4359dcab55e0653363053ce25ac149c299a171e6bf575046e3f1d39576b8c9acc4035428cb9f8569d4ad5ff248586eb6ee9766cbceeb41942e1d

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-26_D4CCCBD2.PLSQL.gz

Filesize
27KB

MD5
51cfcaa6b7a7e994346c292fab9e5dbe

SHA1
fc5a22d5d01a24a4e10b3d74a482cdf05d5696ac

SHA256
a063b64f5d74d14bc70b333cc175a0a0e1024e895230e78a1cd01cc0c5daece5

SHA512
de1eaafc7e8ce205a1f911132a1f0e1873f33490e565c856b7290f10ac868ec59f78f032afdb16bbada857a5d4105c3f0bd5948a7414a481b6b39de064448e10

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-28_C0791A09.PLSQL.gz

Filesize
69KB

MD5
fb1132044aef7ba34dcf5385bc52d158

SHA1
540e27928b700d99649d568db0b807fc86147cb4

SHA256
9baed4afdcf3ccc0f8a78c2d0248b301736ea6cc061554c07b04ff71273e36cd

SHA512
5a1b44091d9a6d4c27830bdfcb60add256ef562bb8bba30435e5884d5f395100107b543c46c07ae0fac2ce50cd97a90424bde55889593a1518b873fafe0dc983

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-29_4124F430.PLSQL.gz

Filesize
27KB

MD5
e79234bbada616b8c72d6075eb886dbb

SHA1
bd131445da080c532824836515349cde174ad5ab

SHA256
b45a649ac25c2c95c67d23e441ab30fa7eb7b50b07ae2821500cb3157ca881be

SHA512
12bc1023669a51d2bd9c471be08a8551c60ed823ed2374c4da2b63e4c8a25f127f11423486b4aab56ff47d85233e9ccb4a96e706c8e60e44bb1a32ac933790fa

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-01_D3152698.PLSQL.gz

Filesize
70KB

MD5
76198e653a2a0c6206d4ea34ca74c5b2

SHA1
8a453f28f3a150d3c84db2342c569eeb952f9364

SHA256
954de0155b2c7df48c1519ae7d39896b9521bd802bd603d03d05a3f6fc77d27e

SHA512
a080614cd241eb065b12eb58a1bbcf68983c3110cce38a422bd3b506a630c3414e111bb062345d251d0adf27dce7de7fec5dc568eec3a0968441b609759e06a4

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-02_39716001.PLSQL.gz

Filesize
70KB

MD5
96ab90dcb81f8d37d2bf5899bc7c09dd

SHA1
24ac0928dabe3766c5d488a4a2bd06640886e0a6

SHA256
0e4c58be7c5d9fdf0a4bb058a99d52097fa283f639906a70bb1fa0841ef9925b

SHA512
66f9559ca4893e6e935ee87ee8ee07dd948cb21d381cd10763f79966ebc70c19402cde269f0130a3d2b356dbd6cc4673ef69d927d742ae0073f5e035905fc00b

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-03_BBAE0711.PLSQL.gz

Filesize
27KB

MD5
7d90f4653e14249f179c1b6ac92167ab

SHA1
6d54b17ddabbf978976932a6c19fbb528cf1fce8

SHA256
b2b143a760b3ce310a5771f163e92dbd9172d62f5bc18e11b6475c25c6eeeb80

SHA512
b9b4ae6b375bc339c78aee26301ce1cf3777cf5f80452e7ac124d4b1bc7c4223dc15c96e1a02fb9062bd9f6a6c58b8f66edc896df436d6ee81ece6d99fd96208

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-04_8884B6FD.PLSQL.gz

Filesize
27KB

MD5
18fa87a0235b53952e10ede0337e6fd9

SHA1
10cdcc70e33571a75fbc7b2890a3488f6f687466

SHA256
c81283fa514834f06cba9906c56815308d6798fef5167211c8a1769fc722d466

SHA512
ca9551025a9e48e1d8b06beab9d15e72749d652248b783e00cff746e465973c0998062002b0963eeb0cdca2af591e889306adeb6e9382864b8a298ec88bcbf2b

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-05_069C15D2.PLSQL.gz

Filesize
27KB

MD5
2ca00a40aeb4e3012fb3df747ca92dac

SHA1
17d01cbfc081442e93b741e5e40fcebc0dcaa694

SHA256
95c7ddfc9969609f49bf8ae65a389c348c0416138eb1076b9f296fd746ff3c7f

SHA512
ab612fb54d6e7be87ee83a0b0901399bcb574595622c78ab96be41d8ba8c8c88d9e88071a383f6375ec9489cb8f8e5ba2b0c02022da43a8cda3876fbbd3ad27f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-06_CA5841EA.PLSQL.gz

Filesize
27KB

MD5
614c35e397cc2b6a3af5efd046cc7d4d

SHA1
d1c35eea45eb2d9cddbb0f78a8d2ee8f4b7eb27a

SHA256
4b18d7ecf4915c4ce98e0abd37ff356250a23be3a2d84b96a7fb2e0e7d7e3301

SHA512
56781b2ec2e92aae0c80832463bf7ff94f23cb2bcfff642614090d9659fa8d172759ebddeb6bb6117a5df3b8ebe61e2613c1ce13dbc106a829c4b865ec785de1

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-07_C5EA4321.PLSQL.gz

Filesize
27KB

MD5
4cd2dd7d16bb2eb9426fec9f2f0a9eb4

SHA1
d16dd05171dd1bcf96f88d2689a040db29695b23

SHA256
0d9f7eceda9691ab5510c09d5b9a49ae5820fc944f6ca1254b2152cb3702ef4e

SHA512
516f1bcc55b00702468b942cafd254e7bc2cceb5da16ba4f1b77e3feee0e212d00d6d55a61263b1fea7643fdd677f97e4b1848477d65b9947261405862dedb2b

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-08_53430BCF.PLSQL.gz

Filesize
27KB

MD5
17737fa2accd247d790b0afb6c90e73b

SHA1
eec3b2baf78f9118c58c18e027d3fd72950731d8

SHA256
750d7986eab20e9055d0922063d5c2a365f9517862de27d8861fb5c84a77d72c

SHA512
7807c85b77f7eb0452c6c7d7d85908c01031efe9a464ca28d2c343f9d719d548d87a14edf0e15d344a3930dab7a1b0be036e258ef6b33640651be30f92424641

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-09_53AE6592.PLSQL.gz

Filesize
27KB

MD5
42a427a8d6f6d65d00457954ec1ca18d

SHA1
35abcbd30129f63471257850decc1c6072e1c205

SHA256
37f500d8db833d22d2cfbe58e32e7a52bb08ea764d4066ad43b38fd99c531e8e

SHA512
1d243b12cafae9f7f6972e5095190b03e252397782feefe0fd0fcd148bd893cfdcd501011c3271887990d1f3c108e930db5a920c0334491aeecbecf462bc52c8

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-10_86A15001.PLSQL.gz

Filesize
27KB

MD5
c129ec9a334e559910ddc3c25c61f09d

SHA1
9b9a427a8ad669295a3ee2c9d698b941a06689c5

SHA256
1caff0d804924d0622fb9810fabd4319cb79bc4f44a1d863be2fdeda46961c8f

SHA512
8be9432ae33a081aaac5e7a6bbfa392a94427dc958226d8afe39e83a5a48bce5c31294e7a230a323d97b7cb98ab4368fb2ecf5620b5914c0a2e5f3c1e4147fc5

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-11_8A96DAEB.PLSQL.gz

Filesize
27KB

MD5
6b8965b0ae6aa150a8d6388c9aa60d2b

SHA1
0f81f417821a36a03fef5db5a252d8097bcbccba

SHA256
7927cb5c6cfee8b59a5e232796a0df9a57638558cd8f1571dcd823a84486200b

SHA512
9b30cf3fb3fc62cbde6a126997bdac58100c0116bf1b3fcdc11bebc80c14d187efb76d903f732ff8fd7bd88c78692421ae3a212e802732dd6f8f5cacaffa67cf

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-12_B21CA85E.PLSQL.gz

Filesize
27KB

MD5
133defd5767285def1eb7ea44e78c547

SHA1
3e72b8f48e86bc2fc15d6db8d67b0c5efb895855

SHA256
1bd03cbb6f2e6025c33cbfa037385962952f9c69b5097a181be9af7bbbf3ac2c

SHA512
8fed7107c746fd6b11a69b46ae7f67f5fec806d07b96a39c3dddfc5ab0856d7de1d16c7b81f5e30da1be0f4f595eb01fd16c0b98687e8bbe97362230db20533f

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-13_A691C00E.PLSQL.gz

Filesize
70KB

MD5
cc88b671806d7a4106e0bff0f635136a

SHA1
64d9017f7e1abc756efc9ceebd6dbd38e46f11ba

SHA256
d4829dc868eba994f986db78fb596e9933921e8912024d943bca8c828a51f1a4

SHA512
c8d3df80e77c85447d272d9b90e82269329dabf13c98bf19429a7d4c8cf84815f4d86b581fc7490e8ff9824001ba57a6edb999e87e4520e6e76db2fae72f65a0

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-14_EECA84F8.PLSQL.gz

Filesize
27KB

MD5
4b897c24f7628f95c832d19bc0756b44

SHA1
3b97caf91bfe72ede0ad2cddc2cbe4f7894af7a4

SHA256
dd88fa7919227bfe2ec12df5b54a7cfa3a70cc902e71432cc7b1fd8df7e0c336

SHA512
048e0481ac149763753e34026df1ec61ecf62201eed95c236c677b42821078f8cd41533b51c50fc60771d622069ff62ad22072bd3b4847881428e31bcd2d5243

Download Submit
/private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-15_33CB589E.PLSQL.gz

Filesize
70KB

MD5
231bcb9027d5d8838b91719e2c76fa55

SHA1
e3f58ad4b30d6b4ac6ce608593b739a096b33e0a

SHA256
1459f1dd35f60eaa4d3a98c05ad2a8891a7803ea9b3f3ea6c0d4808471d1ffe7

SHA512
a3e6c8aedb690e40d33a67362d817c49e631fffec2a1dd25c2ad55dd4bb83b7708e8bdb7684250ae3e216285e267861642d991ab41b09c85e6d94fa8b3a2e43b

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
6668be839ca0eecccc62ad2136ee1b1a

SHA1
a4c21b503d3ccea270ec6fb61190e24071260e2f

SHA256
b44d450bf9e7b79e07b4991e0fab7a6d9322f85ec05e16715b66988669c19f57

SHA512
3351d8962b17b2b9a4d94290ee797df7b3770816b7852f1982142d432f9350cad7eb917806ca2a109eb5d1d264095163fa9b79e720f1e57987290ce2b02349e3

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack

Filesize
141KB

MD5
7e6f2130adaf8f51c9099b720420d583

SHA1
926ad8aed7174dc1e6c4564c287f162a64e9eb02

SHA256
008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e

SHA512
af094f868136ca6678ba79342eda83093d97d8f4ed7e32142189ca6b637ed1889a47bb5a6e5b9aa3446f6fabc40f460fd5ed5046522cf4ba37dffdc442f1f111

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
141KB

MD5
e470100c10a331f411c89c42ed1d2b36

SHA1
9b61c06dac80e37b8f10755a1085442695bc6d96

SHA256
9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9

SHA512
219257b90463b5cd26f4550bbbff44ebb7c912dc4123949be55b5295bea1068891276bcd39daeefc4f4b151830a6357b905417f6aa667185447f8ef74ae24e46

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
557KB

MD5
79e30a7cc6ed6b5593a4ecb88abe39a8

SHA1
939964f09310e060c3b304c010fcb320615ebac1

SHA256
a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a

SHA512
097c8e18460d5b83dcb9b8ebb9b5018cdf4e6ba942d43fc01e248c2fa056cac2d0ea64bf4e163d06efa1cd19b420fa1623cc5bc76a4fe5d5ff0843c258d031fe

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
2.4MB

MD5
7497805b545ae23676ac858b71d4fa4e

SHA1
24274ca99bf58e61db2dab7402df4ab1c4683758

SHA256
460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a

SHA512
5671678d3847b305f000808de62424eb348451e73b9ea05721af03e6afd326fdaa0216a54af12ca4d66a40c039202d022bfd24c86fac73b9de88af92964ab13f

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack

Filesize
980KB

MD5
1c59ac9552a4f3a4f4360043e7b2f9dd

SHA1
baf7ca38c5f9ccbe63cb0358b4a7de0985b04724

SHA256
3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3

SHA512
74825cd1a7202a966436966abe0fa21897db021ac7131208f7b3b211f665b011797fb76d08b3ef711905d70ea73812b9205ffad8b3673100269eecea5aa7bc5c

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack

Filesize
556KB

MD5
9d9b8128687d190c12ec71dd3f4cdd7d

SHA1
17b6b8ebd611990412ef8f9b023f7c6b70bc24f7

SHA256
4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb

SHA512
145504feb65be180363c66721d79ced6fd6f5ac164005a2c90820ee6b0f77d2ff27f6213a55d64acf5169624ddd9fb798babfc10dbf8a46c1bc042bbf7c8049f

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack

Filesize
82KB

MD5
e598b18e3ad8c62750d0f9ce92f889e1

SHA1
e33a7f936b4136b050eae19c031fb447f88b4f53

SHA256
63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058

SHA512
b8a2b12449c2a10ee03bceed4003999d3e69c7318873cb1075ea0918b296df95e78fe1840bcbc931982a2feee69262880cea7cd12be284cce1de54603a9b4551

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
84KB

MD5
17ccc05a9b2b550f44f9adb751deef28

SHA1
40b1c2c53565a26ce46218ccbe28e1a83e7196d8

SHA256
b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8

SHA512
f6876ee7ea2a2d116f6df75045180644a1232f38d288a840c80e73b4d88d9e07a163261f0644ebe2455154325d7063da69f25b2ae66b92b5f924f3c3975b32ab

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
1d2f0c6cbdf4392f35387d2665295491

SHA1
e533e43ea3f9375973b6ca2567967ae69764e60f

SHA256
f6004cdb4fe9d9de561b5a8e41953d0157dc393d6096b323139d074cb1563624

SHA512
95adb2c9683e603be432739f75046ec86bf2cd96b15df671fc2c5b28d2a24c3bdf001a74043919f1ca84d9f08dba4ae4d602985f6363388ec5e048e60e6c4158

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

Filesize
63KB

MD5
4c6eab13ef7d91b992d7efc8cffce5b0

SHA1
40518a43144b9b32ac7ba60d0bfd6eef62bd657a

SHA256
9377e40066881bae534def103c4adcb84be6106d925627a7d528dcd6f5ede415

SHA512
37a53e0470a33dc70b557c10e45b5a9955187c79e898600d5ba5bb2b176b98d92616d9307647fa0fdbf98e5c2e4f1639043831b95faecc93a79b8c51ad23da0c

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml

Filesize
150KB

MD5
76ebb0196d42a294b69ef118cbb301d5

SHA1
61e5ab752d351af1661716bc48c0520f66cd1d1b

SHA256
aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

SHA512
8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
526B

MD5
3f5826a9d77b4c94f3077152d2dff4ba

SHA1
49f258b25548413da4d9b254f3728e1a80af4ad1

SHA256
2db6a348666105dd0d617eb82d6fcce1c07a539b9b6f7d774d03449bb08a5acd

SHA512
2458d821be8bf99d44ddf3c8d343ab2d0de8ab6fdfaa71e02c507a2800751483e60f5353f8f5fbcccf2afe7d78016078cb6a0016eae0486e173d202380c9e88c

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
316B

MD5
31150dceaeaaeee2266d589887f2ff0a

SHA1
27e9c559401671094ddc2b6f81ad6eb6a7912726

SHA256
d8a3a000aa1684774ea209c7fcd3264c23ffe09b6ac18433e951be3175e19835

SHA512
a7799dd54b214470a1bd6f514e88c0418979a71008c6b7946a7e9a10b60b0281b603f7422d4c4ae7f993b1add7009cd76fd0caa13d12af6e08166dbcaa9fc3a2

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

Filesize
4KB

MD5
ecffd97aba0c34d35b1a9814925dce20

SHA1
955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

SHA256
9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

SHA512
0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

Filesize
4KB

MD5
0772477173e9e34a7860141b6b18a084

SHA1
d28286b98e6d7de043466687dc609f2b5287560e

SHA256
6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

SHA512
6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

Filesize
21KB

MD5
df3e0dfd820521a756bbbc584f4bf1a9

SHA1
dccf82e2be348c406faf445309ed1669d7eab7f3

SHA256
7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

SHA512
c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

Download Submit
/private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

Filesize
2KB

MD5
ba4df8801bd4124f55bfe7c130477094

SHA1
2136b957456e5776e5d0b996fadc2978a2cd064d

SHA256
d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

SHA512
795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod 2)/SearchAttribution.pbd

Filesize
63KB

MD5
a18b5dea0846ce07bfcf6969c411685d

SHA1
777617330e1784a32ee168bd489d390d53ecaadf

SHA256
2104e69933c0b193fe6f16ebcedcf889a40469cf6c4dada5cd25289eecd05d29

SHA512
6c531296eb625871135f697c60afd5b8091970aec7e4eaf5cbd8c4c4c7646527f25bbea6a4e4949b5a5a707eae34a9b4c09375b6e678dfc5d0fbe6d163172549

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

Filesize
124KB

MD5
b6a662816a2b1c1cff4060920bd6523d

SHA1
4740ab7ba71ad42c4e45c428d5b5286f0975dd38

SHA256
699f8272e681d378298cb63baa03924f0c6a02f308b32834aa785befa09524bb

SHA512
bc2375bd508a6de1ff046f90b0726bd085d4c060f8a9405d32f0b546d73c9318f8fca2631c4c477e3fc93b5bd79de5d3aeca6a2c4b0ee1a64f76bfee9354127c

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

Filesize
248KB

MD5
a526f7abc573a8b3b09d6344ed86bed2

SHA1
50016e3f25a315ace39a59a38754d42e072fc02b

SHA256
12ab2cac6d88fbb6c491411be59dfcac8b78a83eacc909878bb31d20cd486782

SHA512
6db52b596059c427c193842ed7fdd43300b7b4f2b03c42816283dcbe4015b4895d8ce93a357788ce9da8b00483cda16b1996f867f4e143a2a33f9daef4fdcef7

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

Filesize
538B

MD5
bd20b634bbe71c7e66dea6c9ec796f42

SHA1
97f6a2abdcb8587f649585678307daa5d198a127

SHA256
a28be1f1e1d19a197cc0518504e74e653ee1a51d3039178a3734a3781a360603

SHA512
8b4fa4847c12526da14c730674d94cd543da34ffa23e04ff5d0c8e661936ba5010bf0531992e9383756c5e134c67f1bd9285a4aba7ab765569b7192c20c0a94c

Download Submit
/private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

Filesize
6KB

MD5
2b0bc3d4b28b37889d09acc741f4ebae

SHA1
060af238652083cafa7c43d79ea457eed8570429

SHA256
145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

SHA512
459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads