4988a9499e4835c29bd1affbd7b7d25d3dc09bec61d41ea138167ca2dfc40d97

Analysis

max time kernel
118s
max time network
117s
platform
macos-10.15_amd64
resource
macos-20240214-en
resource tags

arch:amd64arch:i386image:macos-20240214-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
24/02/2024, 16:43

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

Screenshot_20240217-233633_Gmail.jpg
Size

280KB
MD5

c7c2d7a6e4d5c5fe7acc2af32540f8e4
SHA1

8c38021db0478cc21c3b998622499ae23ae94f0d
SHA256

4988a9499e4835c29bd1affbd7b7d25d3dc09bec61d41ea138167ca2dfc40d97
SHA512

dea426bb31211b198b6321df3848e3b81a7064759808339cdfa0e49f8ce81a1470e2df43b04a9d25a8a8a6377a96efbe76107d2eff3b03ba23333735421f0e5b
SSDEEP

6144:RCTuqhaTLpDbNJTfKnNiQ4ilMKHuAonpcnTzixNjQWfne:RCTtaTlDb7TfKnNiQTMKHjoAWQWfe

Score

4^/10

evasion

Malware Config

Signatures

Resource Forking 1 TTPs 10 IoCs

evasion

Resource Forking

T1564.009

ioc	Process
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck	Process not Found
"/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated"	Process not Found
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd	Process not Found
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager	Process not Found
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy	Process not Found
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool	Process not Found
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool	Process not Found
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref	Process not Found
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool	Process not Found
"/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd"	Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Screenshot_20240217-233633_Gmail.jpg\""
1⤵
PID:532

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Screenshot_20240217-233633_Gmail.jpg\""
1⤵
PID:532

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Screenshot_20240217-233633_Gmail.jpg
1⤵
PID:532
- /bin/zsh
  /bin/zsh -c /Users/run/Screenshot_20240217-233633_Gmail.jpg
  2⤵
  PID:533
- /Users/run/Screenshot_20240217-233633_Gmail.jpg
  /Users/run/Screenshot_20240217-233633_Gmail.jpg
  2⤵
  PID:533

/usr/libexec/xpcproxy
xpcproxy com.apple.secd
1⤵
PID:540

/usr/libexec/secd
/usr/libexec/secd
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy com.apple.nehelper
1⤵
PID:556

/usr/libexec/nehelper
/usr/libexec/nehelper
1⤵
PID:556

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:558

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:558

/usr/libexec/xpcproxy
xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
1⤵
PID:561

/usr/libexec/neagent
/usr/libexec/neagent
1⤵
PID:561

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:565

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:565

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:566

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:566

/usr/libexec/xpcproxy
xpcproxy com.apple.ncplugin.stocks 311
1⤵
PID:571

/usr/libexec/xpcproxy
xpcproxy com.apple.notificationcenterui.WeatherSummary 311
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.ncplugin.weather 311
1⤵
PID:573

/usr/libexec/xpcproxy
xpcproxy com.apple.iCal.CalendarNC 311
1⤵
PID:574

/System/Library/CoreServices/StocksWidget.app/Contents/PlugIns/com.apple.ncplugin.stocks.appex/Contents/MacOS/com.apple.ncplugin.stocks
/System/Library/CoreServices/StocksWidget.app/Contents/PlugIns/com.apple.ncplugin.stocks.appex/Contents/MacOS/com.apple.ncplugin.stocks
1⤵
PID:571

/System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex/Contents/MacOS/com.apple.ncplugin.weather
/System/Library/CoreServices/Weather.app/Contents/PlugIns/com.apple.ncplugin.weather.appex/Contents/MacOS/com.apple.ncplugin.weather
1⤵
PID:573

/System/Applications/Calendar.app/Contents/PlugIns/com.apple.iCal.CalendarNC.appex/Contents/MacOS/com.apple.iCal.CalendarNC
/System/Applications/Calendar.app/Contents/PlugIns/com.apple.iCal.CalendarNC.appex/Contents/MacOS/com.apple.iCal.CalendarNC
1⤵
PID:574

/System/Library/CoreServices/NotificationCenter.app/Contents/XPCServices/com.apple.notificationcenterui.WeatherSummary.xpc/Contents/MacOS/com.apple.notificationcenterui.WeatherSummary
/System/Library/CoreServices/NotificationCenter.app/Contents/XPCServices/com.apple.notificationcenterui.WeatherSummary.xpc/Contents/MacOS/com.apple.notificationcenterui.WeatherSummary
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy com.apple.AddressBook.ContactsAccountsService
1⤵
PID:576

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
1⤵
PID:576

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.searchpartyuseragent
1⤵
PID:578

/usr/libexec/searchpartyuseragent
/usr/libexec/searchpartyuseragent
1⤵
PID:578

/usr/libexec/xpcproxy
xpcproxy com.apple.icloud.fmfd
1⤵
PID:581

/usr/libexec/fmfd
/usr/libexec/fmfd
1⤵
PID:581

/usr/libexec/xpcproxy
xpcproxy com.apple.iCloudHelper
1⤵
PID:582

/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper
/System/Library/PrivateFrameworks/AOSKit.framework/Versions/A/XPCServices/com.apple.iCloudHelper.xpc/Contents/MacOS/com.apple.iCloudHelper
1⤵
PID:582

/usr/libexec/xpcproxy
xpcproxy com.apple.security.cloudkeychainproxy3
1⤵
PID:583

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
1⤵
PID:583

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:584

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:585

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:585

/usr/libexec/xpcproxy
xpcproxy com.apple.assistantd
1⤵
PID:586

/usr/libexec/xpcproxy
xpcproxy com.apple.geod
1⤵
PID:588

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
1⤵
PID:588

/usr/libexec/xpcproxy
xpcproxy com.apple.secinitd
1⤵
PID:592

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
1⤵
PID:586

/usr/libexec/secinitd
/usr/libexec/secinitd
1⤵
PID:592

/usr/libexec/xpcproxy
xpcproxy com.apple.cfprefsd.xpc.agent
1⤵
PID:594

/usr/sbin/cfprefsd
/usr/sbin/cfprefsd agent
1⤵
PID:594

/usr/libexec/xpcproxy
xpcproxy com.apple.WeatherKitService 573
1⤵
PID:596

/System/Library/PrivateFrameworks/WeatherKit.framework/Versions/A/XPCServices/com.apple.WeatherKitService.xpc/Contents/MacOS/com.apple.WeatherKitService
/System/Library/PrivateFrameworks/WeatherKit.framework/Versions/A/XPCServices/com.apple.WeatherKitService.xpc/Contents/MacOS/com.apple.WeatherKitService
1⤵
PID:596

/usr/libexec/xpcproxy
xpcproxy com.apple.systempreferences.2140
1⤵
PID:600

/System/Applications/System Preferences.app/Contents/MacOS/System Preferences
"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
1⤵
PID:600

/usr/libexec/xpcproxy
xpcproxy com.apple.siri.context.service
1⤵
PID:602

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
1⤵
PID:602

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountProfileRemoteViewService 600
1⤵
PID:603

/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
1⤵
PID:603

/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
1⤵
PID:604

/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
1⤵
PID:605

/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
1⤵
PID:606

/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
1⤵
PID:607

/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
1⤵
PID:608

/usr/libexec/xpcproxy
xpcproxy com.apple.CoreAuthentication.agent
1⤵
PID:609

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
1⤵
PID:609

/usr/libexec/xpcproxy
xpcproxy com.apple.studentd
1⤵
PID:611

/usr/libexec/studentd
/usr/libexec/studentd
1⤵
PID:611

/usr/libexec/xpcproxy
xpcproxy com.apple.preferences.softwareupdate.remoteservice 600
1⤵
PID:613

/System/Library/PreferencePanes/SoftwareUpdate.prefPane/Contents/XPCServices/com.apple.preferences.softwareupdate.remoteservice.xpc/Contents/MacOS/com.apple.preferences.softwareupdate.remoteservice
/System/Library/PreferencePanes/SoftwareUpdate.prefPane/Contents/XPCServices/com.apple.preferences.softwareupdate.remoteservice.xpc/Contents/MacOS/com.apple.preferences.softwareupdate.remoteservice
1⤵
PID:613

/usr/libexec/xpcproxy
xpcproxy com.apple.softwareupdated
1⤵
PID:615

/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
"/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated"
1⤵
PID:615

/usr/libexec/xpcproxy
xpcproxy com.apple.suhelperd
1⤵
PID:616

/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd
"/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd"
1⤵
PID:616

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:619

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:619

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:620

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:620

/usr/libexec/xpcproxy
xpcproxy com.apple.SoftwareUpdateNotificationManager
1⤵
PID:621

/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager
1⤵
PID:621

/usr/libexec/xpcproxy
xpcproxy com.apple.metadata.mdwrite
1⤵
PID:622

/System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues
/System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues -z
1⤵
PID:623

/usr/libexec/xpcproxy
xpcproxy com.apple.system_installd
1⤵
PID:627

/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
1⤵
PID:627

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportCrash
1⤵
PID:630

/usr/libexec/xpcproxy
xpcproxy com.apple.rtcreportingd
1⤵
PID:631

/usr/libexec/rtcreportingd
/usr/libexec/rtcreportingd
1⤵
PID:631

/System/Library/CoreServices/ReportCrash
/System/Library/CoreServices/ReportCrash agent
1⤵
PID:630

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:632

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:632

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.1864
1⤵
PID:633

/System/Applications/Maps.app/Contents/MacOS/Maps
/System/Applications/Maps.app/Contents/MacOS/Maps
1⤵
PID:633

/usr/libexec/xpcproxy
xpcproxy com.apple.Maps.mapspushd
1⤵
PID:634

/System/Library/CoreServices/mapspushd
/System/Library/CoreServices/mapspushd
1⤵
PID:634

/usr/libexec/xpcproxy
xpcproxy com.apple.WeatherService
1⤵
PID:635

/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService
1⤵
PID:635

/System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues
/System/Library/SystemConfiguration/PrinterNotifications.bundle/Contents/MacOS/makequeues -z
1⤵
PID:636

/usr/libexec/xpcproxy
xpcproxy com.apple.PackageKit.InstallStatus
1⤵
PID:637

/usr/libexec/xpcproxy
xpcproxy com.apple.warmd_agent
1⤵
PID:638

/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress
"/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress"
1⤵
PID:637

/usr/libexec/warmd_agent
/usr/libexec/warmd_agent
1⤵
PID:638

/usr/libexec/xpcproxy
xpcproxy com.apple.security.keychain-circle-notification
1⤵
PID:639

/usr/libexec/xpcproxy
xpcproxy com.apple.studentd
1⤵
PID:640

/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification
"/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification"
1⤵
PID:639

/usr/libexec/studentd
/usr/libexec/studentd
1⤵
PID:640

/usr/libexec/xpcproxy
xpcproxy com.apple.sessionlogoutd
1⤵
PID:641

/System/Library/CoreServices/sessionlogoutd
/System/Library/CoreServices/sessionlogoutd
1⤵
PID:641

/usr/libexec/xpcproxy
xpcproxy com.apple.akd
1⤵
PID:642

/usr/libexec/xpcproxy
xpcproxy com.apple.routined
1⤵
PID:643

/sbin/shutdown
/sbin/shutdown -h now
1⤵
PID:1.8446744073709552e+19

/bin/sh
sh -c "/usr/bin/wall -n"
1⤵
PID:645

/bin/bash
sh -c "/usr/bin/wall -n"
1⤵
PID:645

/usr/bin/wall
/usr/bin/wall -n
1⤵
PID:645

/System/Library/Extensions/IOGraphicsFamily.kext/iogdiagnose
iogdiagnose -b /var/log/displaypolicy/iogdiagnose-last.bin
1⤵
PID:1.8446744073709552e+19

/usr/sbin/spindump
spindump -shutdownstall 2 -timelimit 5
1⤵
PID:647

/bin/sh
sh -c /usr/sbin/kextstat
1⤵
PID:648

/bin/bash
sh -c /usr/sbin/kextstat
1⤵
PID:648

/usr/sbin/kextstat
/usr/sbin/kextstat
1⤵
PID:648

/bin/bash
bash /private/var/install/shutdown_installer_tasks
1⤵
PID:649

/bin/bash
bash /private/var/install/deferred_install
1⤵
PID:650

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Application Support/com.apple.icloud.searchpartyd/savedConfiguration.plist

Filesize
2KB

MD5
d8858841b3415b0e7ce869c9ff94cc6c

SHA1
2d384b197673e24d84270c4b1f5b998a2f5cc671

SHA256
bff60d1818d3c635d8e844c7eb59b4bc45ee3563320ba8c278a064aa3ae5d64c

SHA512
5165384c11f49c318eebd43c59205af9059f81789017712a279b55294007fa072c8a04f14f60bb613d6650f4c6ab0ecceb0b6a78f5c86e4c13e3b277f3bb3a81

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
439B

MD5
c05b619361d2cac0288befbdef519546

SHA1
634e507971e2bd2697df0cdbbe8772e6fbec276e

SHA256
1b2c817978649cad70d67be41215a663790d97707b7512cfc156b488438cbec8

SHA512
86308ab30375670ff5eb886d50e3b5be5f3b7d60e0de53458e0372c0c67cbfd1c58450acb201c7d21a5f351c2b0e796d1777dbaa1e2b83ef7f69a83dac26ba20

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
439B

MD5
18fc6741c6af8ff3a448ec9b158be8c7

SHA1
7c6e888d393ad2419edafcb4ae5ed76721347010

SHA256
9f52516fb3572a40174a683fc4e7702e6177efed32d153b999f8ad3d9575d9c4

SHA512
0320fd4161b014693d16c5eb6ba30b24510c41824242dcc6b3506666f0204cf405a6cafa6a232feb606956770b40bf4e4f983a74ade9f2834c5781532d6331db

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
487B

MD5
e251c94fc14a772dbd695b0919d4f53a

SHA1
63c2eaa2aae3f097a6ad8952064d4764fe8295e0

SHA256
2e8a5e8288abdb773269792173899a3261c3a04c2a4d07c119988542d1978b49

SHA512
92222001d9e6f4bebf5abfc02f4a0b379b33c4f7dc4e9b27170e8b2d43f7c7e017632f893619d04f01eeaa48cfd79f77c7b910cc47d74d5b81f69ea83bd69a5d

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
42B

MD5
ce7f5b3d4bfc7b4b0da6a06dccc515f2

SHA1
ce657a52a052a3aaf534ecfbf7cbdde4ee334c10

SHA256
9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1

SHA512
db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
89B

MD5
4d3efd632ec536e165b91e26b8fbde8a

SHA1
833a9b9e93b418474bfacce83dbc6b3355ef6075

SHA256
05205992906b7e74d921ef7e1643c83c861abf69adabb15d3699620fd456a630

SHA512
d5493e235e660bb83300e367498f6695370f0552c627e35a202529069d65354a591b7c47c2567b2149dca9fc5084e3655216b2dd585b598d12af4d6f22aaf2fc

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
109B

MD5
ba837f4af9ed1e2c6605409f420fdfc4

SHA1
ef63fa775f35a56138a8c870e5df4c2f145f0f23

SHA256
5f04435197d7e7ad4abc33ce9a35b3ed728f650e2d20bce27fc226260208d73d

SHA512
4fdd21a75bd7a984858db0dc34f782e50e2450495da906a75473ff4e60322db08cffcd5387f2eaec79feab82cdc28a5cb3aa5e1fe695e36ca1bc9e0653083ca3

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
166B

MD5
4a8becd5edf68e6c4260d17af1b67a57

SHA1
1cbb1c7bf6ddf82e9c7ca4a03682558868d566ac

SHA256
20159f45989af339a8f08cdbbca25d4390e6276ebb0b9f61e10fc5e087faf66e

SHA512
0f52215767423487e05e406e39b202ebee7f92fd28c24dbaf707b16df6d8f8e3c8a09b0d4f8be19c2dd7d30a6a7afe41c3df3f8c1f05517da72b6ac99b63c4c6

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
166B

MD5
7abcb60865368d0a973b40590d2d0b01

SHA1
b486fe5f61c77c623135f344d4d6cc147ec69962

SHA256
06ebe2677bb963425de961aa77400725def64777b65b561323ff3a353481035e

SHA512
8c2c4d06adc0f5e92dbeb7992752c329e44e45dda6c90b1c7bb1a2445b971fc53b7757e093195f684a93e493f9f477fe23ba9bba5c5779f4d136a2061d9e6580

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
207B

MD5
1c192fe4495e142b09d1bf48c92c4f5a

SHA1
3450d110792cd09a734b61ba386ec9bb0ba1e95b

SHA256
3d919e9825149c1ce47325d06a81ef9bf9aadb9ec93f251a63f3cdb2a8a0b55b

SHA512
6b1beec4cb31f4b31155a0194ddc154b63857d9561322b44551c54e11b0e2e604b1e2a8ac32d1d3cc25f14ae2b28040a6beb014c467509caa63abc818efbd0cd

Download Submit
/Library/Preferences/com.apple.networkextension.uuidcache.plist

Filesize
207B

MD5
fac8942bc4e8ac0a4293946af08289ef

SHA1
5bfa5f4dbf0d891a6f750ce43b7918366517faef

SHA256
a5e0e1346cd21d486214f192d80573de4ee9c176d67e1ad3c37b6a9f090676ec

SHA512
47bd2975e11fc1dabf13f6700ba6ba532f5a19fad1e36d6acd762ce475352234f94ca25cf597b953db3f3882fba1e2f55bdc26279d63ceff1b4363fe7b4fa85b

Download Submit
/Library/Printers/InstalledPrinters.plist

Filesize
495B

MD5
3439dcb6d4ce19d3ea022b8bb17cba7a

SHA1
e412c16548b6fcc5fd488315cd70b324ca4d782e

SHA256
aec405d7619e28da751fafd97782015affebdb36e863c58eea2b658551a59e7b

SHA512
8ca944a1a157f6933a5efeea35aa7626d0dd5f6fd4b5d9fe08c3760b39b6f54289e502923ca7616110c468173f0389f2ce1e35899d171bd08873678759aba93b

Download Submit
/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

Filesize
124KB

MD5
61c1ab75f0c464951d66dabccec799da

SHA1
6d6073aba56c2f0fc94666e7eb1caa7e98a9af8c

SHA256
cf5680a7746701ec2c4e87d0a29252b49c8f0f6be5a7ee6006e09727003026c8

SHA512
8fd19a53508137afb1f20eca4529da33eedd0bc575afcf62cd9074ee3066d1544263fa618da2cf6a5389989de9c674d6c9d36413612008dbb179530504d30506

Download Submit
/Users/run/Library/Caches/GeoServices/Resources/LocalizationStyleAttributes-8.plist

Filesize
6KB

MD5
d7aa7d53d68fd2f1ac03fc79dac41482

SHA1
dd0e8f57cfe73e0dd6738e9369d3e9ed1f64d8fa

SHA256
fa9f615b095101a65a744e353217f5ca7be7ed1bf908475f49efee6867cdfb53

SHA512
bd7e9d315546601c498182cdddf440cc64b1cee4dad6a2b389188e53f932ec8a068cf3fbdb822329ad12b4f30c8aa4fb294dc75243bdb9bc1a4979348c515525

Download Submit
/Users/run/Library/Caches/GeoServices/Resources/altitude-1168.xml

Filesize
150KB

MD5
76ebb0196d42a294b69ef118cbb301d5

SHA1
61e5ab752d351af1661716bc48c0520f66cd1d1b

SHA256
aaa9febe98e3a75220b4933d1f00f2bef276183491e7d171fa54d03259812759

SHA512
8dde09d72944e8925c5bd64dc3799a44d7c30191d5038939a24f8a45ccf4d66b84990e8be3e0f2ee1d42d1dd6e5ed3673c39f803874fb0840a3232cc1e533663

Download Submit
/Users/run/Library/Caches/GeoServices/Resources/default-38225.styl

Filesize
201KB

MD5
9661331b3ef6eb6be979320fd610b68d

SHA1
ff8079ea0b78661dc2ed9be480c2415c4c1b59ae

SHA256
d0a5901d4045b73410f6421c8658565b036f81002d8cdae3cf69349b226b0684

SHA512
b69616245552547b1b312b5b18a89530968d513df6356a665c3ac030b0a08c3a38ede9c5a56cf37683ea3a343c61f2efe489ec2e5759e7790b2564456a424f6d

Download Submit
/Users/run/Library/Caches/GeoServices/SearchAttribution.pbd

Filesize
63KB

MD5
c61e0ed40bd0f724c1372caabe5e8bc5

SHA1
961743753ae56e2ae7382160a6916f102554f7bd

SHA256
7e58864fa20a70aec419dafed5dab9e56aed44189b3f860dfa4a02ea395232f6

SHA512
a4cac26a988d7ae73b804d8a1a7f383cf212d76b35951106986dab50eb65ef94299d42d9db10e447749419ee1f34041574c3e132949fc384a40dd516602d75fa

Download Submit
/Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoBookmarks.plist

Filesize
88B

MD5
44d48b8856347f58f97ffd5efbf6fb52

SHA1
749ac5298ea842c613f3748abe9e488bfdf4b382

SHA256
cd3a65a738c66abb558545cea94329fd7d882f1f4877cea4a5af32d024dbbce3

SHA512
974fc97ed31ccbc19dc976128a41f1fa032e353fdb8cf1e9b7b7f07134c022e01451f7ceb07f91b0ac4b6d97bc320224a2edd471d3e44f5ab5359f41584a8a50

Download Submit
/Users/run/Library/Containers/com.apple.Maps/Data/Library/Maps/GeoHistory.mapsdata

Filesize
84B

MD5
e32332952b2ccee296093224aea5acf9

SHA1
c0418197668954a7baa345478971e86b9ae132b0

SHA256
3c247e22168f7bd24cff896e8b9200d3c4f3229d4a15f5353c4c61483dabfd52

SHA512
089266dd43d52eef5fc38f15e217b3c9d7dae317757cbbfee9d0f21fb2264753de8c9b9c55736113d8e2a560c7d29a9d8ce5f13af742af380d4ccd717a04f5ec

Download Submit
/Users/run/Library/Saved Application State/com.apple.systempreferences.savedState/data.data

Filesize
3KB

MD5
74215f415b79dadacfb05f8dc3e846d8

SHA1
2e49f53e1b7d8781aea31c07ea32e1529d68e269

SHA256
0ac619d0bfdc94c58522aaa8d6affbc542ee057f50f5d5785319e9af0b2af019

SHA512
f465b085dc66bef73b4d9c69127616330aabb4c3afa2aec1d34c99ef0f96dbcf911c4702c7a4dd71c2ecb5bd72ad2f4a5ada1836fa5efb24564d6ce6abf71658

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

Filesize
47KB

MD5
0e4a0d1ceb2af6f0f8d0167ce77be2d3

SHA1
414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

SHA256
cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

SHA512
1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

Filesize
25KB

MD5
d7a3588b6664bea7d098906c1ed373e9

SHA1
f54588d7e1d0019ad54e00aaf3bd002f635354fa

SHA256
b2deaa48a646f8461ecf842455b884404199b798054cebd1f4b6e1c98a0b867a

SHA512
897ad712e98dcd60266d3f98054e175733640f64feace348dc7bc2092c9c02b7ee1f4065c6338eace46611849b6bcb1868ae8651f3d0809f61b17962343c08b1

Download Submit
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

Filesize
4KB

MD5
d3a1859e6ec593505cc882e6def48fc8

SHA1
f8e6728e3e9de477a75706faa95cead9ce13cb32

SHA256
3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

SHA512
ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

Filesize
168KB

MD5
dcbf39254b0d1224817b821763031ab5

SHA1
08da1c478b3ad2ee3cfdd84d9e936c7e471023c6

SHA256
5636c8b36f72111616a81b390dd3ba1c1335c3013aef56c671fabee481826ca0

SHA512
026e3e32a17df9b32e84c1aef528d75eb1b09c455671a1d06bd21e2435f22b82c49d6ad07df5938d8de4ae5177ca25f100fe5eab1450c3e9619f364af277e30f

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C/softwareupdated/com.apple.SoftwareUpdate.SUCatalogDataManager/d/052-57725/052-57725.English.dist

Filesize
2KB

MD5
c091099e713972eb7041d76edf0ec603

SHA1
f6cb42deeb96c1765281bd1f407151380394b7a4

SHA256
e13f323e17a60982561e6659ca25da206086d5453342ea554d2bec87b10d1ec3

SHA512
454be91de3276fab66c100fc2f14c955d17a53748fe77235a14df05251df98f01f8cf30088fd11b610dae0f54e4db04207447c35c627ff9a3b6edec0ce1ef4e5

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C/softwareupdated/com.apple.SoftwareUpdate.SUCatalogDataManager/e/052-25574/052-25574.English.dist

Filesize
11KB

MD5
968ab128ea706e0998a0f477b93b35d5

SHA1
5290f79457ceaca10f86b870175e5096de273281

SHA256
275cccf0e27e7b1a61f26a627c778bc3a8078d953b3896f39f3fb734957361a8

SHA512
0298a3ff7a8b2c9919b10b2452b9550a9138730241f75fbab35fe2db3d778a1293aff4940148101f45a81532979f6c8d0f119924fc1f4dd8dce976909bdd0964

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C/softwareupdated/com.apple.SoftwareUpdate.SUCatalogDataManager/g/012-04872/012-04872.English.dist

Filesize
2KB

MD5
84af1f7a03435cfef5fbcffb7a3c58c4

SHA1
966643bdee53124295304e3fc6ad4e09a988222a

SHA256
4286594444bfc059d0fc98d4048ba91b4aba3c5072dcda73c8851e650b836166

SHA512
0ced3739663a028a1a3dd6155e64650454a0967573fc42c64862fab7355c4e682477a7a3fd56ce2a151a33baa8dd8fa3749e7ff543c1d49c10e3198267fafbcf

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C/softwareupdated/com.apple.SoftwareUpdate.SUCatalogDataManager/g/052-49204/052-49204.English.dist

Filesize
2KB

MD5
42e172367a4f19f5152d23bcdf7cfd68

SHA1
8222f872a51ed69a36ac3d532661f1a20dccb377

SHA256
b372226530d76a682d8e467bb24d8f6634d12e8e3a050f0aeb0f9caab3f1411e

SHA512
8ccc6914074d702db2a247954575b2d1130b550e6dcaeeaad7aa60769833ab79c2aeea27d7fe02c9b8b666efdc8fa142079a267b816ecfdc069361ac735fb45d

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C/softwareupdated/com.apple.SoftwareUpdate/swcdn.apple.com/content/downloads/47/55/002-90015-A_VSZB7DY8DG/a3aeutlgmbhbfj02uok0g73k9h4i9uz50h/InstallAssistant.pkg.partialState

Filesize
436B

MD5
bee738fe24d4bf464db35f2ae59ed5e4

SHA1
dbc21cd86bf8d454e2c9f57608dec00f80c97da1

SHA256
26864b81a5a8f59b44b81242e3076fafd457f550706a0849dd2486cad5c19283

SHA512
d4126beb637859f7d74e79c5a17cb05c2c0de5859b83a216ae931b67ed96892d85b6359fb29758e4fd7c7ee29db20673805c583d8f5ff748bbe0795ffebcdd37

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/MajorOSInfo.pkg

Filesize
1.3MB

MD5
2d16d8a1217f08423756bac8e12401c9

SHA1
71cb5b62a7de93764df58c962f47ceede139625b

SHA256
2af942ebfe7a6cdcd05a60cfe1ac142e70ea9aca7ec0df41a2fb18cf41afeb5f

SHA512
e9d3380bc8d1bba03cefb3235bdde0aaa6bd6086ee7a376ba41388ccdc119234c5b090ea98d18b6a518c92264e708511eb4c0db81f2ec10d76eb492bb0bb4055

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/MajorOSInfo.pkg

Filesize
1.3MB

MD5
dd5a4b113785ef4eca849c8ecf6e1b35

SHA1
5815ac6ee214749aeafba503132ec3d3692506be

SHA256
d8e277b962780b80ad8bb41ce9a36bb58e5481dcdf7fd2f4cb79ff1896718626

SHA512
479c65c6b98d71b38366c608e798de4164e412a331bb8a75eb037cfdc8a90d9195c87fac7d6d81a808f07b02e45f74d39db33f945aac46da78eb24a07f8f9bd5

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/MajorOSInfo.pkg

Filesize
1.1MB

MD5
522b85c6421b94aa757d6eadf5bef389

SHA1
0f65937c6faad1e68f1b131c69af3794fa7fd6c1

SHA256
9a3598f87165b93ce701c1f862be06448fb56a758a92fa6652fb555b449d2cd9

SHA512
371b0eb373937ca6a6e89b45e4ff9dbfd95023c45860a53aea204440ba012513d65be635f63ca6e62a54503c08a764884d631d8621f2048f24832a0fc7fae5db

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Info.plist

Filesize
861B

MD5
333836a7eb95f49b44940b2080fb9fc2

SHA1
3a3ae4545749d078fb34d7c01afedb11798ca663

SHA256
f2cb9f107ce5e2593dac1643c9d69f9cf0f191a97f8e26c346765653dfec9685

SHA512
2034e64024ae56149f4a0b10b2a3c625863efb341d91a473692f58ca495c55b0943f275a63b2a483fb3f78ca52d42b971b361905abcd3777938456aa1c30e2d9

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Resources/OSBadge.icns

Filesize
1.2MB

MD5
fb7c56f169a52288e2421d441466a033

SHA1
70a77454128f3069b46a810068fe42e97f6faaff

SHA256
857fd20f95431ad9682682be5a3c2b094007630cc36bdc3b6d1f51097b5a7c0d

SHA512
56242623eb03f71315f1c22c0938ebd4e3d8be11ad49a29c9ae1fba1a4ce164c17c1e84fb3bc8e6487bcea53687a26e3cdae24a99b9f545107e56a83a986824b

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/052-58279_86E8E107-E07A-4B17-8CF7-7EF0861A784B/Payload/System/Library/CoreServices/MajorOSInfo.bundle/Contents/Resources/en.lproj/Localizable.strings

Filesize
148B

MD5
8b4ece7adf04487c3c0892458e42d9de

SHA1
5f54a72c67c2d88ff32b57ff5b24a919e872286c

SHA256
525c6efad03dab0004451911c0ef31599085c1a260472b5f0bf995f86f2b16bb

SHA512
57edaf2820cf8a541bec262a3872213a3abf1b87d32cce0e9c02d8df3601d21eb8cee02914775ca7a64585bec0f3da45791475122538e8716920848e0496d3c7

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/ProductMetadata.plist

Filesize
1.1MB

MD5
5395b42e34fa94d6ea62cc3748b09e51

SHA1
5c61e7429c7f7ca248af015b241c74415eba3847

SHA256
de78c921f18426e2d8db367d0dead3d3d60872c3c741ecef60096fa5489f3318

SHA512
1d7fc9e10898b7a8cd524d46a315b6eaa22c0dc198eecc4d3d48abf6ac41ae30cce977734fb2113a1144847fe15637340a6b3860ad39c4911878f6d31bc51a89

Download Submit
/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/T/softwareupdated/ProductMetadata.plist

Filesize
425B

MD5
9ac377316f06c6a6fd99ee3e07593b87

SHA1
1dbea8980aff3e7d370a7d5599897d8ae0809da2

SHA256
0694f19b95b76c8cf749a539321a09c173543f9d5a0b12140ebe8e84c53248b7

SHA512
b9284cb2dfc836ccb6f5c5b4badbf2ca454c3da16a30030ea0b671213e7f31387046b834f9c14b6122bce94b78611e620cdea24107625ab7a3aa2e8bcd398432

Download Submit
/var/root/Library/Caches/rtcreportingd/events/NRM_Events_2024-02-24-16-44-12.event

Filesize
4KB

MD5
f39520ca4a6cbc429bfbb1d2878cb421

SHA1
7b14ea556945bc7a631d07575379c59b7207141a

SHA256
2c2d8a606eb9e50fe23b9b2e81c7d8ee62f33c36b27d5f8bc9ccbf92f4e9d3dd

SHA512
08dfcc9469fd4a0b7c8d5188a629b223a5b868a0408c14e9ca87a92e2db998d748574f77f3a1689f4d76d8d2f551f9ea7c950b32765245bc40df2f467bee098f

Download Submit
/var/root/Library/Caches/rtcreportingd/events/NRM_Events_2024-02-24-16-44-12.event

Filesize
8KB

MD5
1bf061aed4ee83cc3bc954abdccad207

SHA1
6975f1d268d7d25959cbeca5cdeb6127447c1217

SHA256
ebddc4abe8eafbccc929f0bab963f866afbdd2a1942cfe09b859c5ade2fa73b8

SHA512
db13aa91a38b8428718ec14cd8c60c2f93cb0cc47ebf446d072a5111b87a94ff72d8c2c6ad37b62c3748ec76aa41d077830319bdac8861d3818cfdbc27f09cb8

Download Submit