Resubmissions

11-01-2024 03:06

240111-dlzwvsdddk 1

11-01-2024 02:43

240111-c7j7vsdaej 1

Analysis

  • max time kernel
    107s
  • max time network
    142s
  • platform
    macos-10.15_amd64
  • resource
    macos-20231201-en
  • resource tags

    arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    11-01-2024 03:06

General

  • Target

    Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib

  • Size

    96KB

  • MD5

    3bd2b327441a56fc93ece132a4a8b013

  • SHA1

    399cb7a5cb65d613ff4751fa9cc85c0909570d3f

  • SHA256

    ff4aa104946456c96a9034b7a8dee7f621926e4f4a2b0dc7dc7c032d8f3eac5b

  • SHA512

    fae5736852096fb4669923339943daa7edb085c42332d5d3499bb890639e6490632f509cb79e1af76ce8213f85e53c3e58d966babefabd817b4376298a7525c3

  • SSDEEP

    3072:JSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcV:EF1b

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
    1⤵
      PID:595
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
      1⤵
        PID:595
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib\""
        1⤵
          PID:595
        • /usr/bin/sudo
          sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
          1⤵
            PID:595
          • /usr/bin/sudo
            sudo /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
            1⤵
              PID:595
              • /bin/zsh
                /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
                2⤵
                  PID:596
                • /bin/zsh
                  /bin/zsh -c "/Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib"
                  2⤵
                    PID:596
                  • /Users/run/Design
                    /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib
                    2⤵
                      PID:596
                    • /Users/run/Design
                      /Users/run/Design Your Collage 1.1.1 MAS + In-App/Design Your Collage.app/Contents/Frameworks/libswiftCoreData.dylib
                      2⤵
                        PID:596
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.sysmond
                      1⤵
                        PID:600
                      • /usr/libexec/sysmond
                        /usr/libexec/sysmond
                        1⤵
                          PID:600
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.pbs
                          1⤵
                            PID:611
                          • /System/Library/CoreServices/pbs
                            /System/Library/CoreServices/pbs
                            1⤵
                              PID:611
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.geod
                              1⤵
                                PID:613
                              • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                1⤵
                                  PID:613
                                • /usr/libexec/xpcproxy
                                  xpcproxy com.apple.PerfPowerServices
                                  1⤵
                                    PID:614
                                  • /usr/libexec/PerfPowerServices
                                    /usr/libexec/PerfPowerServices
                                    1⤵
                                      PID:614
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.geod
                                      1⤵
                                        PID:615
                                      • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                        1⤵
                                          PID:615
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.secinitd
                                          1⤵
                                            PID:616
                                          • /usr/libexec/secinitd
                                            /usr/libexec/secinitd
                                            1⤵
                                              PID:616
                                            • /usr/libexec/xpcproxy
                                              xpcproxy com.apple.icloud.findmydeviced
                                              1⤵
                                                PID:617
                                              • /usr/libexec/findmydeviced
                                                /usr/libexec/findmydeviced
                                                1⤵
                                                  PID:617
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.cfprefsd.xpc.agent
                                                  1⤵
                                                    PID:620
                                                  • /usr/sbin/cfprefsd
                                                    /usr/sbin/cfprefsd agent
                                                    1⤵
                                                      PID:620
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                      1⤵
                                                        PID:626
                                                      • /usr/libexec/neagent
                                                        /usr/libexec/neagent
                                                        1⤵
                                                          PID:626
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                          1⤵
                                                            PID:628
                                                          • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                            1⤵
                                                              PID:628
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.suggestd
                                                              1⤵
                                                                PID:630
                                                              • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                                                1⤵
                                                                  PID:630
                                                                • /usr/libexec/xpcproxy
                                                                  xpcproxy com.apple.knowledge-agent
                                                                  1⤵
                                                                    PID:633
                                                                  • /usr/libexec/knowledge-agent
                                                                    /usr/libexec/knowledge-agent
                                                                    1⤵
                                                                      PID:633
                                                                    • /usr/libexec/xpcproxy
                                                                      xpcproxy com.apple.routined
                                                                      1⤵
                                                                        PID:637
                                                                      • /usr/libexec/routined
                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                        1⤵
                                                                          PID:637
                                                                        • /usr/libexec/xpcproxy
                                                                          xpcproxy com.apple.csrutil.report
                                                                          1⤵
                                                                            PID:640
                                                                          • /usr/bin/csrutil
                                                                            /usr/bin/csrutil report
                                                                            1⤵
                                                                              PID:640
                                                                            • /usr/libexec/xpcproxy
                                                                              xpcproxy com.apple.Maps.mapspushd
                                                                              1⤵
                                                                                PID:641
                                                                              • /usr/libexec/xpcproxy
                                                                                xpcproxy com.apple.siri.context.service
                                                                                1⤵
                                                                                  PID:642
                                                                                • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                  /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                                                                                  1⤵
                                                                                    PID:642
                                                                                  • /System/Library/CoreServices/mapspushd
                                                                                    /System/Library/CoreServices/mapspushd
                                                                                    1⤵
                                                                                      PID:641
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.tailspind
                                                                                      1⤵
                                                                                        PID:654
                                                                                      • /usr/libexec/tailspind
                                                                                        /usr/libexec/tailspind
                                                                                        1⤵
                                                                                          PID:654
                                                                                        • /usr/libexec/xpcproxy
                                                                                          xpcproxy com.apple.PerfPowerServices
                                                                                          1⤵
                                                                                            PID:658
                                                                                          • /usr/libexec/PerfPowerServices
                                                                                            /usr/libexec/PerfPowerServices
                                                                                            1⤵
                                                                                              PID:658

                                                                                            Network

                                                                                            MITRE ATT&CK Matrix

                                                                                            Replay Monitor

                                                                                            Loading Replay Monitor...

                                                                                            Downloads

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-06-13-2022-07-24_0544B5A0.PLSQL.gz

                                                                                              Filesize

                                                                                              31KB

                                                                                              MD5

                                                                                              2354d57e0973088123424af1e93c860f

                                                                                              SHA1

                                                                                              5bb4225703bc1a9f9bf60ae90dd62938e0faf92b

                                                                                              SHA256

                                                                                              df7c4e702342fb8529011cb0c4b8f5b53a489d3c49b5b77d7b11446ba116f5df

                                                                                              SHA512

                                                                                              5238b32082a33bc3cac360652c3f1a2aadb9e30b216b37376a024168a8dde107e89fb6be77ba2f6952a3f85315c699c3d8cc9f7ee9b71a6d47dd347c0d178e34

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-07-24-2022-09-03_38A6DB77.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              e9f490943280dcfd0c0aa8f6bc6cbec1

                                                                                              SHA1

                                                                                              fb410f57366da5fd48ed35f3bfa6be451666cd8f

                                                                                              SHA256

                                                                                              9c99365d3af46b7f623bf50ec1d6cc10dc8b9279ef4ea1167d0e84aeaf4ab712

                                                                                              SHA512

                                                                                              a98399fd1e7a79eed373fa11d49770f2bd3d87fd436fdfd74f55752bffbbd89b51717ce9257bd5194629e4333e58bde3d3688fe6dc3ffb8a1f4ee763a619de3c

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-09-03-2022-10-14_20111771.PLSQL.gz

                                                                                              Filesize

                                                                                              50KB

                                                                                              MD5

                                                                                              b487059252393a3afcfe05baf0e4ef89

                                                                                              SHA1

                                                                                              a6a902b594405fc06b191ce9b33197ee33bd2fb7

                                                                                              SHA256

                                                                                              95930fbabfd88481bf02913de7553464c21edd3f5bf085f034887875cbb5ad19

                                                                                              SHA512

                                                                                              0af7453cf166cc50b2fa8347296e10acecbf917b3472eef601b67e3bdb451cbe05b200c0eb89b5455150d5d4459ddafb6ff9f34e8d3994cc877ff1e0db98af77

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-10-14-2022-11-24_9973B7E5.PLSQL.gz

                                                                                              Filesize

                                                                                              23KB

                                                                                              MD5

                                                                                              06e4d537145ee8b6859a4f0c860cf858

                                                                                              SHA1

                                                                                              cc38504624f03d070b2ac3259686d9ac45fc32ab

                                                                                              SHA256

                                                                                              52e6a7748df2d7442ef672f8e49832133d2d19d938a2efbedb6054430e2d148a

                                                                                              SHA512

                                                                                              dd5a53da304f719ce4a734dfa71b7992c63ee6117ede7fc17e5ce203ce6ff0c1756d6a2c99998b21a90a5f34d41611ef33cd8b0e1b646a85fdecdbd452928a83

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2022-11-24-2023-01-04_5FD96C5D.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              00d6d0f268cda694f9ad6cde1537fe77

                                                                                              SHA1

                                                                                              1960b9ab8672cbf901ef48478691754e3af9e94f

                                                                                              SHA256

                                                                                              586065f7e03dcb8ffc69d48716abd1fdd4f8c97f8929128736e6d337eca93ed2

                                                                                              SHA512

                                                                                              5ba34c2d3a5b53ef0132bf90d6532ec24d524791b93eb9eb118a6fd3672e0002b11d65b3fbb26b0b62a450382ce2643c14a921146fc5fe3de86d763818dc24ba

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-01-04-2023-02-14_FDC180B7.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              3a28c53f1a55b19c06247ca8bb418daa

                                                                                              SHA1

                                                                                              734ed11d8b339bb4bffd895a7244d43f1dc65e60

                                                                                              SHA256

                                                                                              6247db7a82c65a6c2d3000d374ee4d09f1aa5156ed5a6d34872c6571582e2acf

                                                                                              SHA512

                                                                                              7141972f1136843c06ad990a47bf09a9a96f74295a74d6c0af7aa65e2e131383129e052fc80febfb8e25e029a7b8eb69670334eb97ce53e5b19a5d0dc5777439

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-02-14-2023-03-27_77909A82.PLSQL.gz

                                                                                              Filesize

                                                                                              56KB

                                                                                              MD5

                                                                                              a3054a6e0c936c177b55bf44ddf58d0f

                                                                                              SHA1

                                                                                              65af4bdea734c8dea55eced51232a4040822660f

                                                                                              SHA256

                                                                                              4e0784a0b2ae8747ca61a43e8117b267e43085de70a8cb51f470aff67f0e48a1

                                                                                              SHA512

                                                                                              7c570a01b649fe0aa84b45aa1c1e2ddd3f29aa4cb4db9f35e5a3b0de61eb3d36687b89ec1f6a2ce983de36d706f80b7e527b186bb89d1188693f0970b58a833f

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-03-27-2023-05-07_1B4C3DBD.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              3d7fbf1098e97560aee844e1f4a628a0

                                                                                              SHA1

                                                                                              deecc56a8f54e335c3206de25ac42e6b19f8b913

                                                                                              SHA256

                                                                                              acaf274aa3acc200b29186fc883adebd808c62ad79f776ff4c51909b7eb14f57

                                                                                              SHA512

                                                                                              29529d4fdcdfa396fd0d8d141cd8cf906801a73585f6bd20c6dc3a5d0fcbc4aad6818656dae58cb7f6250113b18539b1ed250f4e92d20a75f3cf65d6d154b9dd

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-05-07-2023-06-17_949B5C75.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              bcbf990774d259ef08c66438cb8b2fb9

                                                                                              SHA1

                                                                                              8d9dda311477755be994bcf671ecda03189f3778

                                                                                              SHA256

                                                                                              0e8f8807216762daa831c7fd2981f614d2275a09c53b07fec7829eee9db88e0a

                                                                                              SHA512

                                                                                              a5f8fbd13c63058f97a17ef57547212776f883535293efe8f6dd71bb1012c3c4131de5482a01b239ed8bc2aba91cabbb7437644e3653f7fb0d9f27fbe498bb60

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-06-17-2023-07-28_D9DB2251.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              4d2f80db1ae5db757fd5d7f79d629f9e

                                                                                              SHA1

                                                                                              44bf68928556c059139d6e4efb588da86ea66d73

                                                                                              SHA256

                                                                                              b4585f77f69113bffc32e35c6f7a74ad82fd3ce90b1837b53e707558613c90ae

                                                                                              SHA512

                                                                                              a4171f6feba2386c106e0a0a0b04ae5d2d5533f479d4bd1171b34bcb4a6bb6fc3b3c6457fb2930694d20071b6e3f38a1d397558113e62aece797b424a1a7f11b

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-07-28-2023-09-07_8C2E784C.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              83fbf36c353a3fc413cd4e91487499b8

                                                                                              SHA1

                                                                                              79412e480acc2026344b1053be2a3dcdd949df09

                                                                                              SHA256

                                                                                              a3faed911131fe3afe6368aca1a4d9daeb33515f322ce1b732b42251f90e723f

                                                                                              SHA512

                                                                                              6774897d3da78281d5704f7f94fae9411d0017a100b1b066205cbfbd3cbee472da7f3c5cfc24dc60d80e95ac4497a508188e08cdb3c6f0da54154cebca0d2fa7

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-09-07-2023-10-18_FD9101E4.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              e9b764aeec2b2ef519e942b1ef5f0172

                                                                                              SHA1

                                                                                              7ff84f925757305c2ebb95f7d88c27dffc29880c

                                                                                              SHA256

                                                                                              166092f96f25beb4a52b08c270c30b53a531411f15a1bf989018f6a6b7918071

                                                                                              SHA512

                                                                                              bd710f3df8d076f0f8c01b22646bc2456a08771f54602b08354172012bccd64451fa52f4b4cb2cc90140a49fcfa0c7f4dd703a0860715a6e93f9291c3f6071f5

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-10-18-2023-11-28_DF821D0A.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              b2308f7b03e924edb4d355a6306393c8

                                                                                              SHA1

                                                                                              21b7fbd8ed62e8f967796be4b4e5f22cf9f0551d

                                                                                              SHA256

                                                                                              f8997bafe3209655052e9b2eeec62a7c1af94ce9708e0411429630848159791d

                                                                                              SHA512

                                                                                              66a92a1709744aaaa1a3d5a724e7b1c488fb5d3abfe4196815f92dc3bf2cfea63a4550c9d51ad4398b9eb0da57b9e8d62de3210b5fe9acd45d65699594e8725b

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2023-11-28-2024-01-08_9D23533B.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              ba12fd29b4749aa5ab518733f15bb059

                                                                                              SHA1

                                                                                              53a1bc1a0eb998ac641692b8b7ce2a650c0a0de4

                                                                                              SHA256

                                                                                              7f83e37aeaf9bfabb5e8c65b3c0466494a5b654eb5938d952856f10fe1d8db39

                                                                                              SHA512

                                                                                              2523196b05b5216fa4096a46c9dbcfe8e4debd4228673579ffb4d57e3f7475d2a506acbf8877d66992485520666235fca08366b29f79cecc72c48da0cb72a74d

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-08_CC192BF9.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              bdfc875adfc82e122cc7ca02d2b47cf8

                                                                                              SHA1

                                                                                              8009818b40612209cd555e7935bab21b67c60279

                                                                                              SHA256

                                                                                              8c6b473ac7a4070c161754d2ab63c33efc5e6ca57558d7aec1dbb13dce5a6562

                                                                                              SHA512

                                                                                              b032e8b2e787cf54647f506d3f6c0676f9985d456927b4e378b6292196666d4a034226cbbce15d18738c92c37159e45089ffafbcdef56a0e70ab25c2b6420803

                                                                                            • /private/var/db/powerlog/Library/BatteryLife/Archives/powerlog_2024-01-09_691F4E63.PLSQL.gz

                                                                                              Filesize

                                                                                              27KB

                                                                                              MD5

                                                                                              a2a2f1ca3d90b8ddd03c40dde5e1fbdd

                                                                                              SHA1

                                                                                              413d2f9aec1fd3b3262378a66ab33d31e01af606

                                                                                              SHA256

                                                                                              752dd987da40dcaa5772686e4b6a501be208333a31afb86a02d047d6fd9d4dce

                                                                                              SHA512

                                                                                              253bd7e2c6618412b1e255dbfc7234597d96a39e763b7bf569183bbd56a8d9ff565ac7475249fc11afd089f0dff6ce9fa2dd0f33e2edbc91211b507796344b22

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              83b36a80dce89d204759dbd8adc27a2f

                                                                                              SHA1

                                                                                              e261d8fc69676df0771e51fdecd688bd5dc2d29f

                                                                                              SHA256

                                                                                              7a199a428574ed8d4c09fb78317cf6c1570fa221f3f6b239b953db8a2cd74111

                                                                                              SHA512

                                                                                              70342b69b205df54f9846d8f1306b73a248d07f36ebd591fac304d90915074764dc612e3c9a6fde960ad3a2a240bf444c3f6abc27b2b40c07f766ff4ea0485da

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default-18583.iconmappack

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              7e6f2130adaf8f51c9099b720420d583

                                                                                              SHA1

                                                                                              926ad8aed7174dc1e6c4564c287f162a64e9eb02

                                                                                              SHA256

                                                                                              008952037eb3f0fe24bef30546e346cdbc90b3f0612bffcac5cc773ca562295e

                                                                                              SHA512

                                                                                              af094f868136ca6678ba79342eda83093d97d8f4ed7e32142189ca6b637ed1889a47bb5a6e5b9aa3446f6fabc40f460fd5ed5046522cf4ba37dffdc442f1f111

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              141KB

                                                                                              MD5

                                                                                              e470100c10a331f411c89c42ed1d2b36

                                                                                              SHA1

                                                                                              9b61c06dac80e37b8f10755a1085442695bc6d96

                                                                                              SHA256

                                                                                              9df4d426121f79e40cac2b051add0617a6c2459ec5a3460238fab33b165400b9

                                                                                              SHA512

                                                                                              219257b90463b5cd26f4550bbbff44ebb7c912dc4123949be55b5295bea1068891276bcd39daeefc4f4b151830a6357b905417f6aa667185447f8ef74ae24e46

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              557KB

                                                                                              MD5

                                                                                              79e30a7cc6ed6b5593a4ecb88abe39a8

                                                                                              SHA1

                                                                                              939964f09310e060c3b304c010fcb320615ebac1

                                                                                              SHA256

                                                                                              a1df80bfea86260051d1111e90a5025b3552747557e81291d17436a61b77eb9a

                                                                                              SHA512

                                                                                              097c8e18460d5b83dcb9b8ebb9b5018cdf4e6ba942d43fc01e248c2fa056cac2d0ea64bf4e163d06efa1cd19b420fa1623cc5bc76a4fe5d5ff0843c258d031fe

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              2.4MB

                                                                                              MD5

                                                                                              7497805b545ae23676ac858b71d4fa4e

                                                                                              SHA1

                                                                                              24274ca99bf58e61db2dab7402df4ab1c4683758

                                                                                              SHA256

                                                                                              460478c7c193b3001a94c3103b34d9ab2e82bd6695fbad319c16fb5103d5d27a

                                                                                              SHA512

                                                                                              5671678d3847b305f000808de62424eb348451e73b9ea05721af03e6afd326fdaa0216a54af12ca4d66a40c039202d022bfd24c86fac73b9de88af92964ab13f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17228.icondatapack

                                                                                              Filesize

                                                                                              980KB

                                                                                              MD5

                                                                                              1c59ac9552a4f3a4f4360043e7b2f9dd

                                                                                              SHA1

                                                                                              baf7ca38c5f9ccbe63cb0358b4a7de0985b04724

                                                                                              SHA256

                                                                                              3cfd996a71dea3864f12cc9e2dabdc6f692891018b2a3b9124de477458dd69c3

                                                                                              SHA512

                                                                                              74825cd1a7202a966436966abe0fa21897db021ac7131208f7b3b211f665b011797fb76d08b3ef711905d70ea73812b9205ffad8b3673100269eecea5aa7bc5c

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Icons-17418.iconconfigpack

                                                                                              Filesize

                                                                                              556KB

                                                                                              MD5

                                                                                              9d9b8128687d190c12ec71dd3f4cdd7d

                                                                                              SHA1

                                                                                              17b6b8ebd611990412ef8f9b023f7c6b70bc24f7

                                                                                              SHA256

                                                                                              4b5349d8e52c2a70e725811b6fae9b8f86f52271945ecd333d5392deff1be5eb

                                                                                              SHA512

                                                                                              145504feb65be180363c66721d79ced6fd6f5ac164005a2c90820ee6b0f77d2ff27f6213a55d64acf5169624ddd9fb798babfc10dbf8a46c1bc042bbf7c8049f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/Default_Shields-1686.iconconfigpack

                                                                                              Filesize

                                                                                              82KB

                                                                                              MD5

                                                                                              e598b18e3ad8c62750d0f9ce92f889e1

                                                                                              SHA1

                                                                                              e33a7f936b4136b050eae19c031fb447f88b4f53

                                                                                              SHA256

                                                                                              63eb9c68de734d9e5e0ad69dd30b36e18a295921df31ff9ae515d639e973c058

                                                                                              SHA512

                                                                                              b8a2b12449c2a10ee03bceed4003999d3e69c7318873cb1075ea0918b296df95e78fe1840bcbc931982a2feee69262880cea7cd12be284cce1de54603a9b4551

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              84KB

                                                                                              MD5

                                                                                              17ccc05a9b2b550f44f9adb751deef28

                                                                                              SHA1

                                                                                              40b1c2c53565a26ce46218ccbe28e1a83e7196d8

                                                                                              SHA256

                                                                                              b6e0e74bd2680f9c2d955f8b33d0c53a52ac8ae36ef9f1a0c7221cd36f1b5ec8

                                                                                              SHA512

                                                                                              f6876ee7ea2a2d116f6df75045180644a1232f38d288a840c80e73b4d88d9e07a163261f0644ebe2455154325d7063da69f25b2ae66b92b5f924f3c3975b32ab

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              1b0ac6d485cfe3b9d3c1cf76c438ef5f

                                                                                              SHA1

                                                                                              cdd9c382e7ace607a1814018ec085bb411a7feda

                                                                                              SHA256

                                                                                              69e40e9e0ba9c1e01f1060b002dc94511e903667e33b2bb9c31bbf2f1d910638

                                                                                              SHA512

                                                                                              0bb254174a36c4eafbc7793cf93e1ebc3adcb28bd407d07c9d7c4b05431044cd7d2c658793f7d86524c00d95145176c194f4117e12f8af6788750640a251a395

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              85cc7eba2a5785f8141ec90615e9404f

                                                                                              SHA1

                                                                                              03c568eb93a47bb2d606f856f050e6a693ea6b58

                                                                                              SHA256

                                                                                              d43697d6da267f868ed083eb542aa5e2cfe7226f31750eb95a366fc9e34d6cce

                                                                                              SHA512

                                                                                              139f3dd91e5594c99698ce1cbb2ecb30175a357ba1123dbb205720fe0d1fb95b12b39cf7a96efe8a280f455604096f81e5b9113341b6728a2c4a00053688c386

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/altitude-1168.xml

                                                                                              Filesize

                                                                                              150KB

                                                                                              MD5

                                                                                              76ebb0196d42a294b69ef118cbb301d5

                                                                                              SHA1

                                                                                              61e5ab752d351af1661716bc48c0520f66cd1d1b

                                                                                              SHA256

                                                                                              aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

                                                                                              SHA512

                                                                                              8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              459B

                                                                                              MD5

                                                                                              54618ab5b9bf2401f1141104c85186c5

                                                                                              SHA1

                                                                                              929a444d618f945dc1805a65174386c2cd47f394

                                                                                              SHA256

                                                                                              82983b12d221050f9779f8ebb0014ed3b56bd91d277241a9d3acfddbcdd438f3

                                                                                              SHA512

                                                                                              bac215ff1042fea79e43cd27ada5ba9b2bb9fa88965b0e2c5281feac3d682e5fdd405aed213dd0c14afae2f075a07336e4e791ff1ecc04dbd2ad8cb9da594d6f

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              566B

                                                                                              MD5

                                                                                              618b378a212f0311d6d145d91c340684

                                                                                              SHA1

                                                                                              5b8a8b732cb8511f6c692991500d4fea888ffa63

                                                                                              SHA256

                                                                                              6f0faeac7a55d38e1e7fd4d20f0dca1d8e2ba7cce9d2f74be89e4c7fb96cc891

                                                                                              SHA512

                                                                                              cee9ae05251e47f9bbb4505ace7da6819fa6e665dda69a58cceb66405c132156bfb6209c12f480db879acee6bc90837fd10e7dd3c46f0a9fc6eaf2eb25aa3977

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              316B

                                                                                              MD5

                                                                                              2abf3b3d08b28bb7a917051379d3a0eb

                                                                                              SHA1

                                                                                              305e696aea8654d22f06b85c310136a578853abe

                                                                                              SHA256

                                                                                              6a30ebe96717f21ea625ab6b92d42704a3094e2316fbe32a9405ace405deaa35

                                                                                              SHA512

                                                                                              3f5755ae763efccd8fac2f5889177c31256405b603b2c262d49aa23eff141f9d79ce092bf8b2acd4846477c70e94887f51e2c149602a6d25a9c982a1593aa711

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/default-search-4255.styl

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              ecffd97aba0c34d35b1a9814925dce20

                                                                                              SHA1

                                                                                              955f9e12763a52a03e04d4ffd11aaef5d7f61c9e

                                                                                              SHA256

                                                                                              9a2a568c390dd2011a7f0caaba9137e97a08d418692ce937ea893d626144acf3

                                                                                              SHA512

                                                                                              0ab126628f62a7d2659e3848c619d42b57899ddefa96bd8687494f9e4c23cecad5d20c9e03f9c1c3976aae3395b521067bd94f18ab53710981bdf2770390afcb

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/[email protected]

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              0772477173e9e34a7860141b6b18a084

                                                                                              SHA1

                                                                                              d28286b98e6d7de043466687dc609f2b5287560e

                                                                                              SHA256

                                                                                              6ac023973bc73d4e5a24982a8f7f0ed3c4b6b12b07d5bd432db87602128599e7

                                                                                              SHA512

                                                                                              6e467f22fc6607f8fb2cc23f90735e4ae4e0951a850ced6104052bc37d0554db50d3e58b5eabdbbd9978f90748d67d6a0fb1dc4e794ffc75284d133710a01618

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_dot_coms-78.pb

                                                                                              Filesize

                                                                                              21KB

                                                                                              MD5

                                                                                              df3e0dfd820521a756bbbc584f4bf1a9

                                                                                              SHA1

                                                                                              dccf82e2be348c406faf445309ed1669d7eab7f3

                                                                                              SHA256

                                                                                              7db626f6178f1a525616314cc8857e1f9729e20d4befc56fb1dee292495e557f

                                                                                              SHA512

                                                                                              c78a1aefbf1035140e69b8e5e5b6e3abf4826707091e6b774ca112e93707eeb091a90bb9f883ce613914b825f1931e7f08ec86ed72f3dad4f7a6b724b9f46946

                                                                                            • /private/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/publisher_attribution_manifest_index-65.pb

                                                                                              Filesize

                                                                                              2KB

                                                                                              MD5

                                                                                              ba4df8801bd4124f55bfe7c130477094

                                                                                              SHA1

                                                                                              2136b957456e5776e5d0b996fadc2978a2cd064d

                                                                                              SHA256

                                                                                              d51837f4ef49d5d2e24f675a5bfd9f8391581a435f8c193f91a8520fccb8361a

                                                                                              SHA512

                                                                                              795f14ee1b7fe8d89c21c8af4e358e95e2331d60250acf91998ff3fbe8ee8c2124b11cac909be603c549508917a1af56af9f0c9c0da11da119ecddc4d3a13c65

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsDirectory.db_

                                                                                              Filesize

                                                                                              47KB

                                                                                              MD5

                                                                                              0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                              SHA1

                                                                                              414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                              SHA256

                                                                                              cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                              SHA512

                                                                                              1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C/mds/mdsObject.db_

                                                                                              Filesize

                                                                                              4KB

                                                                                              MD5

                                                                                              d3a1859e6ec593505cc882e6def48fc8

                                                                                              SHA1

                                                                                              f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                              SHA256

                                                                                              3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                              SHA512

                                                                                              ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ActiveTileGroup.pbd

                                                                                              Filesize

                                                                                              124KB

                                                                                              MD5

                                                                                              0e21602a325093d9c13cef966af65427

                                                                                              SHA1

                                                                                              b57923145f46be0a00df1ba4c1531435f5250f72

                                                                                              SHA256

                                                                                              0590406c5806051743effdae82a0fe866365157638e71c455b2877e92d6c0d61

                                                                                              SHA512

                                                                                              09cb1a0465d66af45e342b1e5569ea812e35d77bae994e16ff36dfb6898248c977e900614ef2993edc386c593bdaf78095ffde22735e4441169ecbd0ef135ebd

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              31c9310506083139a5eea4774fe57695

                                                                                              SHA1

                                                                                              396ebdb808da38bfcefe8f3149864c956bcdbcd6

                                                                                              SHA256

                                                                                              c401cd27a1dd73672c12c257602be5ef3565da5bf7e6479c58490c971957d3ee

                                                                                              SHA512

                                                                                              acf0795171a35ea1088115e6ce2a78afbd750675046aa3aaf06c8a1f18129ff7c264ecf0fa2e31bfb7c8ddc45a4b7884a6d8e0cad60530825645f9b39d8dcfc2

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/ResourceManifest.pbd

                                                                                              Filesize

                                                                                              248KB

                                                                                              MD5

                                                                                              8997b994aff9cecd74f5ae48fca7e6e7

                                                                                              SHA1

                                                                                              57ce415192a6ca46bbf4ce7ac28efee7ffd33507

                                                                                              SHA256

                                                                                              6f13a6c7583a55c2f0d839ee6c2d6a98799b0c73fa7f8f7792879d9546b4817a

                                                                                              SHA512

                                                                                              378b777fdf141b109f3e75e0cf2a0d5e8c1149e0878a372601036412a79ae3f9e46d9ee6096faa40df1d5f43e015025f720c41bd51627f5931a462a1276e06c4

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/SearchAttribution.pbd

                                                                                              Filesize

                                                                                              63KB

                                                                                              MD5

                                                                                              f1d75dc6344c0c1b4bfe84a48b1f256f

                                                                                              SHA1

                                                                                              b3af02048f4d54752881afe3490cfe9aa2f19e5e

                                                                                              SHA256

                                                                                              4bea106f784da891bde55f79fd5dff9479f70477dd859e3bfe0bf7d19a8bd106

                                                                                              SHA512

                                                                                              15a3fd07d73a4db9efac3198aa99d330aa4133add6585f48ccf9b0afb4ad132dc2b4ad6d59b01118b5ef4b37e1a184a4a5142f7d123f763b4a57700f05769929

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/com.apple.geo.analytic.12000

                                                                                              Filesize

                                                                                              569B

                                                                                              MD5

                                                                                              3b43145fb8188cafd218cb0ae94dc2cd

                                                                                              SHA1

                                                                                              9814d605d6aa0d46ef2de01ad9e01ad7bc0638e8

                                                                                              SHA256

                                                                                              b9bb41290b72b6f79269a8480c8a35da62dcd28eadea74e26fdace187161ac95

                                                                                              SHA512

                                                                                              435d0003d3f6dded0491f1a3a0094006babec3a92aa09f5f2faaa8f1b5bffe48771153a9b3fa1217122dc716accb7d1c5c4a0305917226db73aea12cc3e622ef

                                                                                            • /private/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/T/com.apple.geod/TemporaryItems/(A Document Being Saved By com.apple.geod)/networkDefaults.plist

                                                                                              Filesize

                                                                                              6KB

                                                                                              MD5

                                                                                              2b0bc3d4b28b37889d09acc741f4ebae

                                                                                              SHA1

                                                                                              060af238652083cafa7c43d79ea457eed8570429

                                                                                              SHA256

                                                                                              145a9dba11445d7b6102cb19a70ef8540fd119930c9e6ef323db408e4f727575

                                                                                              SHA512

                                                                                              459ccf92572f8dc284f49460dcfd4f04611f7ec2a5f14446e37d15aa85cfb094b1d2b49ca2606cb771151926dc14bfdcfa6e13da5686d212fe05c4d8cad989c3