Resubmissions

11/01/2024, 03:06

240111-dlzwvsdddk1

11/01/2024, 02:43

240111-c7j7vsdaej1

Analysis

  • max time kernel
    107s
  • max time network
    142s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11/01/2024, 03:06

General

  • Target
    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib
  • Size 96KB
  • Sample240111-dlzwvsdddk
  • SHA256 ff4aa104946456c96a9034b7a8dee7f621926e4f4a2b0dc7dc7c032d8f3eac5b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
    1⤵
      PID:595
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
      1⤵
        PID:595
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
        1⤵
          PID:595
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
          1⤵
            PID:595
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
            1⤵
              PID:595
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
                2⤵
                  PID:596
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
                  2⤵
                    PID:596
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib
                    2⤵
                      PID:596
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib
                      2⤵
                        PID:596
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:600
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:600
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.pbs
                          1⤵
                            PID:611
                          • /System/Library/CoreServices/pbs
                            /System/Library/CoreServices/pbs
                            1⤵
                              PID:611
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.geod
                              1⤵
                                PID:613
                              • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                1⤵
                                  PID:613
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.PerfPowerServices
                                  1⤵
                                    PID:614
                                  • /usr/libexec/PerfPowerServices
                                    /usr/libexec/PerfPowerServices
                                    1⤵
                                      PID:614
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.geod
                                      1⤵
                                        PID:615
                                      • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        1⤵
                                          PID:615
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.secinitd
                                          1⤵
                                            PID:616
                                          • /usr/libexec/secinitd
                                            /usr/libexec/secinitd
                                            1⤵
                                              PID:616
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.icloud.findmydeviced
                                              1⤵
                                                PID:617
                                              • /usr/libexec/findmydeviced
                                                /usr/libexec/findmydeviced
                                                1⤵
                                                  PID:617
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:620
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:620
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                      1⤵
                                                        PID:626
                                                      • /usr/libexec/neagent
                                                        /usr/libexec/neagent
                                                        1⤵
                                                          PID:626
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                          1⤵
                                                            PID:628
                                                          • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            1⤵
                                                              PID:628
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.suggestd
                                                              1⤵
                                                                PID:630
                                                              • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                1⤵
                                                                  PID:630
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:633
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:633
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:637
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:637
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.csrutil.report
                                                                          1⤵
                                                                            PID:640
                                                                          • /usr/bin/csrutil
                                                                            /usr/bin/csrutil report
                                                                            1⤵
                                                                              PID:640
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.Maps.mapspushd
                                                                              1⤵
                                                                                PID:641
                                                                              • /usr/libexec/xpcproxy
                                                                                xpcproxy com.apple.siri.context.service
                                                                                1⤵
                                                                                  PID:642
                                                                                • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                  /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                  1⤵
                                                                                    PID:642
                                                                                  • /System/Library/CoreServices/mapspushd
                                                                                    /System/Library/CoreServices/mapspushd
                                                                                    1⤵
                                                                                      PID:641
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.tailspind
                                                                                      1⤵
                                                                                        PID:654
                                                                                      • /usr/libexec/tailspind
                                                                                        /usr/libexec/tailspind
                                                                                        1⤵
                                                                                          PID:654
                                                                                        • /usr/libexec/xpcproxy
                                                                                          xpcproxy com.apple.PerfPowerServices
                                                                                          1⤵
                                                                                            PID:658
                                                                                          • /usr/libexec/PerfPowerServices
                                                                                            /usr/libexec/PerfPowerServices
                                                                                            1⤵
                                                                                              PID:658

                                                                                            Network

                                                                                                  MITRE ATT&CK Matrix

                                                                                                  Replay Monitor

                                                                                                  Loading Replay Monitor...

                                                                                                  Downloads

                                                                                                  powerlog_2022-06-13-2022-07-24_0544B5A0.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13-2022-07-24_0544B5A0.PLSQL.gz
                                                                                                  • Size 31KB
                                                                                                  • SHA256 df7c4e702342fb8529011cb0c4b8f5b53a489d3c49b5b77d7b11446ba116f5df
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2022-07-24-2022-09-03_38A6DB77.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24-2022-09-03_38A6DB77.PLSQL.gz
                                                                                                  • Size 23KB
                                                                                                  • SHA256 9c99365d3af46b7f623bf50ec1d6cc10dc8b9279ef4ea1167d0e84aeaf4ab712
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2022-09-03-2022-10-14_20111771.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-03-2022-10-14_20111771.PLSQL.gz
                                                                                                  • Size 50KB
                                                                                                  • SHA256 95930fbabfd88481bf02913de7553464c21edd3f5bf085f034887875cbb5ad19
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2022-10-14-2022-11-24_9973B7E5.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-14-2022-11-24_9973B7E5.PLSQL.gz
                                                                                                  • Size 23KB
                                                                                                  • SHA256 52e6a7748df2d7442ef672f8e49832133d2d19d938a2efbedb6054430e2d148a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2022-11-24-2023-01-04_5FD96C5D.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-24-2023-01-04_5FD96C5D.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 586065f7e03dcb8ffc69d48716abd1fdd4f8c97f8929128736e6d337eca93ed2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-01-04-2023-02-14_FDC180B7.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-04-2023-02-14_FDC180B7.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 6247db7a82c65a6c2d3000d374ee4d09f1aa5156ed5a6d34872c6571582e2acf
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-02-14-2023-03-27_77909A82.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-14-2023-03-27_77909A82.PLSQL.gz
                                                                                                  • Size 56KB
                                                                                                  • SHA256 4e0784a0b2ae8747ca61a43e8117b267e43085de70a8cb51f470aff67f0e48a1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-03-27-2023-05-07_1B4C3DBD.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-27-2023-05-07_1B4C3DBD.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 acaf274aa3acc200b29186fc883adebd808c62ad79f776ff4c51909b7eb14f57
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-05-07-2023-06-17_949B5C75.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-07-2023-06-17_949B5C75.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 0e8f8807216762daa831c7fd2981f614d2275a09c53b07fec7829eee9db88e0a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-06-17-2023-07-28_D9DB2251.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-17-2023-07-28_D9DB2251.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 b4585f77f69113bffc32e35c6f7a74ad82fd3ce90b1837b53e707558613c90ae
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-07-28-2023-09-07_8C2E784C.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-28-2023-09-07_8C2E784C.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 a3faed911131fe3afe6368aca1a4d9daeb33515f322ce1b732b42251f90e723f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-09-07-2023-10-18_FD9101E4.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-07-2023-10-18_FD9101E4.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 166092f96f25beb4a52b08c270c30b53a531411f15a1bf989018f6a6b7918071
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-10-18-2023-11-28_DF821D0A.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-18-2023-11-28_DF821D0A.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 f8997bafe3209655052e9b2eeec62a7c1af94ce9708e0411429630848159791d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2023-11-28-2024-01-08_9D23533B.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-28-2024-01-08_9D23533B.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 7f83e37aeaf9bfabb5e8c65b3c0466494a5b654eb5938d952856f10fe1d8db39
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2024-01-08_CC192BF9.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-08_CC192BF9.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 8c6b473ac7a4070c161754d2ab63c33efc5e6ca57558d7aec1dbb13dce5a6562
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  powerlog_2024-01-09_691F4E63.PLSQL.gz

                                                                                                  • Path /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-09_691F4E63.PLSQL.gz
                                                                                                  • Size 27KB
                                                                                                  • SHA256 752dd987da40dcaa5772686e4b6a501be208333a31afb86a02d047d6fd9d4dce
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  ActiveTileGroup.pbd

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                                  • Size 124KB
                                                                                                  • SHA256 7a199a428574ed8d4c09fb78317cf6c1570fa221f3f6b239b953db8a2cd74111
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  Default-18583.iconmappack

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack
                                                                                                  • Size 141KB
                                                                                                  • SHA256 008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                  • Size 141KB
                                                                                                  • SHA256 9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                  • Size 557KB
                                                                                                  • SHA256 a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                  • Size 2.4MB
                                                                                                  • SHA256 460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  Default_Icons-17228.icondatapack

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack
                                                                                                  • Size 980KB
                                                                                                  • SHA256 3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  Default_Icons-17418.iconconfigpack

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack
                                                                                                  • Size 556KB
                                                                                                  • SHA256 4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  Default_Shields-1686.iconconfigpack

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack
                                                                                                  • Size 82KB
                                                                                                  • SHA256 63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058
                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                  • Size 84KB
                                                                                                  • SHA256 b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  ResourceManifest.pbd

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                                  • Size 248KB
                                                                                                  • SHA256 69e40e9e0ba9c1e01f1060b002dc94511e903667e33b2bb9c31bbf2f1d910638
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  SearchAttribution.pbd

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd
                                                                                                  • Size 63KB
                                                                                                  • SHA256 d43697d6da267f868ed083eb542aa5e2cfe7226f31750eb95a366fc9e34d6cce
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  altitude-1168.xml

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml
                                                                                                  • Size 150KB
                                                                                                  • SHA256 aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  com.apple.geo.analytic.12000

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                  • Size 459B
                                                                                                  • SHA256 82983b12d221050f9779f8ebb0014ed3b56bd91d277241a9d3acfddbcdd438f3
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  com.apple.geo.analytic.12000

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                  • Size 566B
                                                                                                  • SHA256 6f0faeac7a55d38e1e7fd4d20f0dca1d8e2ba7cce9d2f74be89e4c7fb96cc891
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  com.apple.geo.analytic.12000

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                  • Size 316B
                                                                                                  • SHA256 6a30ebe96717f21ea625ab6b92d42704a3094e2316fbe32a9405ace405deaa35
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  default-search-4255.styl

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl
                                                                                                  • Size 4KB
                                                                                                  • SHA256 9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]
                                                                                                  • Size 4KB
                                                                                                  • SHA256 6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  publisher_attribution_dot_coms-78.pb

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb
                                                                                                  • Size 21KB
                                                                                                  • SHA256 7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  publisher_attribution_manifest_index-65.pb

                                                                                                  • Path /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb
                                                                                                  • Size 2KB
                                                                                                  • SHA256 d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  mdsDirectory.db_

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_
                                                                                                  • Size 47KB
                                                                                                  • SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  mdsObject.db_

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_
                                                                                                  • Size 4KB
                                                                                                  • SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  ActiveTileGroup.pbd

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd
                                                                                                  • Size 124KB
                                                                                                  • SHA256 0590406c5806051743effdae82a0fe866365157638e71c455b2877e92d6c0d61
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  ResourceManifest.pbd

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                                  • Size 248KB
                                                                                                  • SHA256 c401cd27a1dd73672c12c257602be5ef3565da5bf7e6479c58490c971957d3ee
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  ResourceManifest.pbd

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd
                                                                                                  • Size 248KB
                                                                                                  • SHA256 6f13a6c7583a55c2f0d839ee6c2d6a98799b0c73fa7f8f7792879d9546b4817a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  SearchAttribution.pbd

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd
                                                                                                  • Size 63KB
                                                                                                  • SHA256 4bea106f784da891bde55f79fd5dff9479f70477dd859e3bfe0bf7d19a8bd106
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  com.apple.geo.analytic.12000

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000
                                                                                                  • Size 569B
                                                                                                  • SHA256 b9bb41290b72b6f79269a8480c8a35da62dcd28eadea74e26fdace187161ac95
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  networkDefaults.plist

                                                                                                  • Path /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist
                                                                                                  • Size 6KB
                                                                                                  • SHA256 145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575
                                                                                                  • MD5 SHA1 SHA512 SSDEEP