Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk1

11/01/2024, 02:43

240111-c7j7vsdaej1

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 03:06

General

  • Target
    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
  • Size 44KB
  • Sample240111-dlzwvsdddk
  • SHA256 380626348e8be8627e271f1ddeace4b5c3c715b73dc66cb3d7e5b1241f0d7d32
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
    1⤵
      PID:583
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
      1⤵
        PID:583
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib\""
        1⤵
          PID:583
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
          1⤵
            PID:583
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
            1⤵
              PID:583
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
                2⤵
                  PID:590
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib"
                  2⤵
                    PID:590
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
                    2⤵
                      PID:590
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftXPC.dylib
                      2⤵
                        PID:590
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:599
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:599
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.PerfPowerServices
                          1⤵
                            PID:611
                          • /usr/libexec/PerfPowerServices
                            /usr/libexec/PerfPowerServices
                            1⤵
                              PID:611
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.pbs
                              1⤵
                                PID:612
                              • /System/Library/CoreServices/pbs
                                /System/Library/CoreServices/pbs
                                1⤵
                                  PID:612
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.icloud.findmydeviced
                                  1⤵
                                    PID:616
                                  • /usr/libexec/findmydeviced
                                    /usr/libexec/findmydeviced
                                    1⤵
                                      PID:616
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.geod
                                      1⤵
                                        PID:620
                                      • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        1⤵
                                          PID:620
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.geod
                                          1⤵
                                            PID:621
                                          • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                            1⤵
                                              PID:621
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.secinitd
                                              1⤵
                                                PID:622
                                              • /usr/libexec/secinitd
                                                /usr/libexec/secinitd
                                                1⤵
                                                  PID:622
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:624
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:624
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.suggestd
                                                      1⤵
                                                        PID:629
                                                      • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                        /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                        1⤵
                                                          PID:629
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                          1⤵
                                                            PID:631
                                                          • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            1⤵
                                                              PID:631
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                              1⤵
                                                                PID:634
                                                              • /usr/libexec/neagent
                                                                /usr/libexec/neagent
                                                                1⤵
                                                                  PID:634
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:635
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:635
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:641
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:641
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.Maps.mapspushd
                                                                          1⤵
                                                                            PID:643
                                                                          • /System/Library/CoreServices/mapspushd
                                                                            /System/Library/CoreServices/mapspushd
                                                                            1⤵
                                                                              PID:643
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.siri.context.service
                                                                              1⤵
                                                                                PID:644
                                                                              • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                1⤵
                                                                                  PID:644
                                                                                • /usr/libexec/xpcproxy
                                                                                  xpcproxy com.apple.tailspind
                                                                                  1⤵
                                                                                    PID:657
                                                                                  • /usr/libexec/tailspind
                                                                                    /usr/libexec/tailspind
                                                                                    1⤵
                                                                                      PID:657
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.assistantd
                                                                                      1⤵
                                                                                        PID:661
                                                                                      • /usr/libexec/xpcproxy
                                                                                        xpcproxy com.apple.bird
                                                                                        1⤵
                                                                                          PID:662
                                                                                        • /usr/sbin/spctl
                                                                                          /usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
                                                                                          1⤵
                                                                                            PID:663
                                                                                          • /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
                                                                                            /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
                                                                                            1⤵
                                                                                              PID:662
                                                                                            • /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
                                                                                              /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
                                                                                              1⤵
                                                                                                PID:661

                                                                                              Network

                                                                                                    MITRE ATT&CK Matrix

                                                                                                    Replay Monitor

                                                                                                    Loading Replay Monitor...

                                                                                                    Downloads

                                                                                                    powerlog_2022-06-14_8656637C.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-14_8656637C.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 c72a78bf4f5c5edda57d6b093bc25995383b0f716e8e622c754caa06469aaedb
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-15_88E8619C.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-15_88E8619C.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 5aaa5b11c43eeb6931e7105079abaa81f8119e37f06c4ad8262cea9959df8df5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-16_34CDCD2F.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-16_34CDCD2F.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 bdb3a4ea3fcf4abbdd4fc2b52a4770896b8ea2bb59afc4f65c27ea1aa203b74a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-17_62F7015C.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-17_62F7015C.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 a1d1f111d4a4a6e6f467988c2cdaad5a0e821175d2db0b0131458b9d77835de6
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-18_20802735.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-18_20802735.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 233352520ee02a345f5a9fcf273879e6a2a4e7331907f13b6393ba0ae039b8c1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-19_1AFE448D.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-19_1AFE448D.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 f2873e9f1866ba749546a4842efa6a0b632aa312a50b53a7a6f0bdc2417e1e2a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-20_BFDE8BB0.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-20_BFDE8BB0.PLSQL.gz
                                                                                                    • Size 69KB
                                                                                                    • SHA256 566f51a7da48bcc6379a582023c60c2382f055e3f0000d00ee077216dd7331d9
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-21_A868D5BB.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-21_A868D5BB.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 28a68c72ab1dd57292a4e13f4b9bc9762d9152389cb1f3e433a8ccb39677f4d2
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-22_DDADEC22.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-22_DDADEC22.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 c4df06b559e156af43b1e41b049906e7e9e067bfce2cb6120b81b1d3a901298e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-23_19689E40.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-23_19689E40.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 c4ee8f8037a7f2922e2bafac996673616eac5f43a647385b36ab4d216149510d
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-24_C3F1D705.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-24_C3F1D705.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 34b473b00a21d0b97bbc6fa0453866e78cc6089855fcff57fb9daff1725fc290
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-25_ACCE3B37.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-25_ACCE3B37.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 2514f88941f4cea33a473dce68abec32677286ad7b157694a0ddcdbb0c835bbe
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-26_D4CCCBD2.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-26_D4CCCBD2.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 a063b64f5d74d14bc70b333cc175a0a0e1024e895230e78a1cd01cc0c5daece5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-28_C0791A09.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-28_C0791A09.PLSQL.gz
                                                                                                    • Size 69KB
                                                                                                    • SHA256 9baed4afdcf3ccc0f8a78c2d0248b301736ea6cc061554c07b04ff71273e36cd
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-06-29_4124F430.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-29_4124F430.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 b45a649ac25c2c95c67d23e441ab30fa7eb7b50b07ae2821500cb3157ca881be
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-01_D3152698.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-01_D3152698.PLSQL.gz
                                                                                                    • Size 70KB
                                                                                                    • SHA256 954de0155b2c7df48c1519ae7d39896b9521bd802bd603d03d05a3f6fc77d27e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-02_39716001.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-02_39716001.PLSQL.gz
                                                                                                    • Size 70KB
                                                                                                    • SHA256 0e4c58be7c5d9fdf0a4bb058a99d52097fa283f639906a70bb1fa0841ef9925b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-03_BBAE0711.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-03_BBAE0711.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 b2b143a760b3ce310a5771f163e92dbd9172d62f5bc18e11b6475c25c6eeeb80
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-04_8884B6FD.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-04_8884B6FD.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 c81283fa514834f06cba9906c56815308d6798fef5167211c8a1769fc722d466
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-05_069C15D2.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-05_069C15D2.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 95c7ddfc9969609f49bf8ae65a389c348c0416138eb1076b9f296fd746ff3c7f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-06_CA5841EA.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-06_CA5841EA.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 4b18d7ecf4915c4ce98e0abd37ff356250a23be3a2d84b96a7fb2e0e7d7e3301
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-07_C5EA4321.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-07_C5EA4321.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 0d9f7eceda9691ab5510c09d5b9a49ae5820fc944f6ca1254b2152cb3702ef4e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-08_53430BCF.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-08_53430BCF.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 750d7986eab20e9055d0922063d5c2a365f9517862de27d8861fb5c84a77d72c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-09_53AE6592.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-09_53AE6592.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 37f500d8db833d22d2cfbe58e32e7a52bb08ea764d4066ad43b38fd99c531e8e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-10_86A15001.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-10_86A15001.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 1caff0d804924d0622fb9810fabd4319cb79bc4f44a1d863be2fdeda46961c8f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-11_8A96DAEB.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-11_8A96DAEB.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 7927cb5c6cfee8b59a5e232796a0df9a57638558cd8f1571dcd823a84486200b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-12_B21CA85E.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-12_B21CA85E.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 1bd03cbb6f2e6025c33cbfa037385962952f9c69b5097a181be9af7bbbf3ac2c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-13_A691C00E.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-13_A691C00E.PLSQL.gz
                                                                                                    • Size 70KB
                                                                                                    • SHA256 d4829dc868eba994f986db78fb596e9933921e8912024d943bca8c828a51f1a4
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-14_EECA84F8.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-14_EECA84F8.PLSQL.gz
                                                                                                    • Size 27KB
                                                                                                    • SHA256 dd88fa7919227bfe2ec12df5b54a7cfa3a70cc902e71432cc7b1fd8df7e0c336
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    powerlog_2022-07-15_33CB589E.PLSQL.gz

                                                                                                    • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-15_33CB589E.PLSQL.gz
                                                                                                    • Size 70KB
                                                                                                    • SHA256 1459f1dd35f60eaa4d3a98c05ad2a8891a7803ea9b3f3ea6c0d4808471d1ffe7
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    ActiveTileGroup.pbd

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                                    • Size 124KB
                                                                                                    • SHA256 b44d450bf9e7b79e07b4991e0fab7a6d9322f85ec05e16715b66988669c19f57
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    Default-18583.iconmappack

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack
                                                                                                    • Size 141KB
                                                                                                    • SHA256 008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                    • Size 141KB
                                                                                                    • SHA256 9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9
                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                    • Size 557KB
                                                                                                    • SHA256 a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                    • Size 2.4MB
                                                                                                    • SHA256 460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    Default_Icons-17228.icondatapack

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack
                                                                                                    • Size 980KB
                                                                                                    • SHA256 3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    Default_Icons-17418.iconconfigpack

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack
                                                                                                    • Size 556KB
                                                                                                    • SHA256 4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    Default_Shields-1686.iconconfigpack

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack
                                                                                                    • Size 82KB
                                                                                                    • SHA256 63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058
                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                    • Size 84KB
                                                                                                    • SHA256 b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    ResourceManifest.pbd

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                                    • Size 248KB
                                                                                                    • SHA256 f6004cdb4fe9d9de561b5a8e41953d0157dc393d6096b323139d074cb1563624
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    SearchAttribution.pbd

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd
                                                                                                    • Size 63KB
                                                                                                    • SHA256 9377e40066881bae534def103c4adcb84be6106d925627a7d528dcd6f5ede415
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    altitude-1168.xml

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml
                                                                                                    • Size 150KB
                                                                                                    • SHA256 aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    com.apple.geo.analytic.12000

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                    • Size 526B
                                                                                                    • SHA256 2db6a348666105dd0d617eb82d6fcce1c07a539b9b6f7d774d03449bb08a5acd
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    com.apple.geo.analytic.12000

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                    • Size 316B
                                                                                                    • SHA256 d8a3a000aa1684774ea209c7fcd3264c23ffe09b6ac18433e951be3175e19835
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    default-search-4255.styl

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl
                                                                                                    • Size 4KB
                                                                                                    • SHA256 9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                    • Size 4KB
                                                                                                    • SHA256 6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    publisher_attribution_dot_coms-78.pb

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb
                                                                                                    • Size 21KB
                                                                                                    • SHA256 7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    publisher_attribution_manifest_index-65.pb

                                                                                                    • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb
                                                                                                    • Size 2KB
                                                                                                    • SHA256 d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    mdsDirectory.db_

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_
                                                                                                    • Size 47KB
                                                                                                    • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    mdsObject.db_

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_
                                                                                                    • Size 4KB
                                                                                                    • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    SearchAttribution.pbd

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod 2)/SearchAttribution.pbd
                                                                                                    • Size 63KB
                                                                                                    • SHA256 2104e69933c0b193fe6f16ebcedcf889a40469cf6c4dada5cd25289eecd05d29
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    ActiveTileGroup.pbd

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                                    • Size 124KB
                                                                                                    • SHA256 699f8272e681d378298cb63baa03924f0c6a02f308b32834aa785befa09524bb
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    ResourceManifest.pbd

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                                    • Size 248KB
                                                                                                    • SHA256 12ab2cac6d88fbb6c491411be59dfcac8b78a83eacc909878bb31d20cd486782
                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                    com.apple.geo.analytic.12000

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                    • Size 538B
                                                                                                    • SHA256 a28be1f1e1d19a197cc0518504e74e653ee1a51d3039178a3734a3781a360603
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    networkDefaults.plist

                                                                                                    • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist
                                                                                                    • Size 6KB
                                                                                                    • SHA256 145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575
                                                                                                    • MD5 SHA1 SHA512 SSDEEP