Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    168s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240410-en
  • resource tags

    arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    24/04/2024, 12:14

General

  • Target

    Install Parallels Desktop.dmg

  • Size

    1.9MB

  • MD5

    24f906cfda1e856380787927a7443af2

  • SHA1

    9acda3749161f99d8be9408eb618694c56eaa0f9

  • SHA256

    2e697828d0bb36a4aa0085997b62a9cc6a83e13afe94c299e4a707f3282b2a66

  • SHA512

    a58c4c901491b1f18b127a32647844f15abe3a25e40fce04f5361f9f2f5ac4840a607e0f23c4d315da3746a7fcb7081d170910d95ed7e1c936a34f227a865292

  • SSDEEP

    49152:JSyJQgxOqeh6dwzVQm2V4htQgHH4WZaDJ2VVXun:c2QgxOqXMgV4r4WZaDJ2en

Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 8 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"open /Volumes/Install\\ Parallels\\ Desktop/Install\\ Parallels\\ Desktop.app\""
    1⤵
      PID:598
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"open /Volumes/Install\\ Parallels\\ Desktop/Install\\ Parallels\\ Desktop.app\""
      1⤵
        PID:598
      • /usr/bin/sudo
        sudo /bin/zsh -c "open /Volumes/Install\\ Parallels\\ Desktop/Install\\ Parallels\\ Desktop.app"
        1⤵
          PID:598
          • /bin/zsh
            /bin/zsh -c "open /Volumes/Install\\ Parallels\\ Desktop/Install\\ Parallels\\ Desktop.app"
            2⤵
              PID:599
            • /usr/bin/open
              open "/Volumes/Install Parallels Desktop/Install Parallels Desktop.app"
              2⤵
                PID:599
            • /usr/libexec/xpcproxy
              xpcproxy com.parallels.webinstaller.2308
              1⤵
                PID:603
              • /Volumes/Install Parallels Desktop/Install Parallels Desktop.app/Contents/MacOS/Install Parallels Desktop
                "/Volumes/Install Parallels Desktop/Install Parallels Desktop.app/Contents/MacOS/Install Parallels Desktop"
                1⤵
                  PID:603
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.siri.context.service
                  1⤵
                    PID:606
                  • /usr/libexec/xpcproxy
                    xpcproxy com.apple.assistantd
                    1⤵
                      PID:607
                    • /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                      /System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService
                      1⤵
                        PID:606
                      • /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
                        /System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd
                        1⤵
                          PID:607
                        • /usr/libexec/xpcproxy
                          xpcproxy com.apple.spindump
                          1⤵
                            PID:608
                          • /usr/sbin/spindump
                            /usr/sbin/spindump
                            1⤵
                              PID:608
                            • /usr/libexec/xpcproxy
                              xpcproxy com.apple.tailspind
                              1⤵
                                PID:610
                              • /usr/libexec/xpcproxy
                                xpcproxy com.apple.spindump_agent
                                1⤵
                                  PID:611
                                • /usr/libexec/tailspind
                                  /usr/libexec/tailspind
                                  1⤵
                                    PID:610
                                  • /usr/libexec/spindump_agent
                                    /usr/libexec/spindump_agent
                                    1⤵
                                      PID:611
                                    • /usr/libexec/xpcproxy
                                      xpcproxy com.apple.pbs
                                      1⤵
                                        PID:614
                                      • /System/Library/CoreServices/pbs
                                        /System/Library/CoreServices/pbs
                                        1⤵
                                          PID:614
                                        • /usr/libexec/xpcproxy
                                          xpcproxy com.apple.suggestd
                                          1⤵
                                            PID:620
                                          • /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                            /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
                                            1⤵
                                              PID:620
                                            • /usr/sbin/spctl
                                              /usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
                                              1⤵
                                                PID:625
                                              • /usr/libexec/xpcproxy
                                                xpcproxy com.apple.knowledge-agent
                                                1⤵
                                                  PID:629
                                                • /usr/libexec/knowledge-agent
                                                  /usr/libexec/knowledge-agent
                                                  1⤵
                                                    PID:629
                                                  • /usr/libexec/xpcproxy
                                                    xpcproxy com.apple.AddressBook.ContactsAccountsService
                                                    1⤵
                                                      PID:631
                                                    • /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                      /System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
                                                      1⤵
                                                        PID:631
                                                      • /usr/libexec/xpcproxy
                                                        xpcproxy com.apple.ReportCrash
                                                        1⤵
                                                          PID:634
                                                        • /System/Library/CoreServices/ReportCrash
                                                          /System/Library/CoreServices/ReportCrash agent
                                                          1⤵
                                                            PID:634
                                                          • /usr/libexec/xpcproxy
                                                            xpcproxy com.apple.ReportMemoryException
                                                            1⤵
                                                              PID:636
                                                            • /usr/libexec/ReportMemoryException
                                                              /usr/libexec/ReportMemoryException
                                                              1⤵
                                                                PID:636
                                                              • /usr/libexec/xpcproxy
                                                                xpcproxy com.apple.geod
                                                                1⤵
                                                                  PID:637
                                                                • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                                                  /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                                                  1⤵
                                                                    PID:637
                                                                  • /usr/libexec/xpcproxy
                                                                    xpcproxy com.apple.geod
                                                                    1⤵
                                                                      PID:638
                                                                    • /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                                                      /System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
                                                                      1⤵
                                                                        PID:638
                                                                      • /usr/libexec/xpcproxy
                                                                        xpcproxy com.apple.secinitd
                                                                        1⤵
                                                                          PID:639
                                                                        • /usr/libexec/secinitd
                                                                          /usr/libexec/secinitd
                                                                          1⤵
                                                                            PID:639
                                                                          • /usr/libexec/xpcproxy
                                                                            xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A
                                                                            1⤵
                                                                              PID:643
                                                                            • /usr/libexec/neagent
                                                                              /usr/libexec/neagent
                                                                              1⤵
                                                                                PID:643
                                                                              • /usr/libexec/xpcproxy
                                                                                xpcproxy com.apple.newsyslog
                                                                                1⤵
                                                                                  PID:644
                                                                                • /usr/sbin/newsyslog
                                                                                  /usr/sbin/newsyslog
                                                                                  1⤵
                                                                                    PID:644
                                                                                  • /usr/bin/hdiutil
                                                                                    /usr/bin/hdiutil verify /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg
                                                                                    1⤵
                                                                                      PID:645
                                                                                    • /usr/libexec/xpcproxy
                                                                                      xpcproxy com.apple.routined
                                                                                      1⤵
                                                                                        PID:646
                                                                                      • /usr/libexec/routined
                                                                                        /usr/libexec/routined LAUNCHED_BY_LAUNCHD
                                                                                        1⤵
                                                                                          PID:646
                                                                                        • /usr/bin/hdiutil
                                                                                          /usr/bin/hdiutil attach /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/MountCopies/030B023C-941E-4DF3-A4F7-18EB143801BC/Image.dmg -nobrowse -readonly -mountpoint /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC
                                                                                          1⤵
                                                                                            PID:647
                                                                                          • /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
                                                                                            /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C4B5280D-5BE4-4E50-886B-2A9FCF2EED7C
                                                                                            1⤵
                                                                                              PID:648
                                                                                            • /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
                                                                                              /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid C4B5280D-5BE4-4E50-886B-2A9FCF2EED7C -post-exec 4
                                                                                              1⤵
                                                                                                PID:649
                                                                                              • /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
                                                                                                /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly
                                                                                                1⤵
                                                                                                  PID:650
                                                                                                • /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
                                                                                                  /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1
                                                                                                  1⤵
                                                                                                    PID:651
                                                                                                  • /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
                                                                                                    /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1
                                                                                                    1⤵
                                                                                                      PID:652
                                                                                                    • /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
                                                                                                      /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -p disk5s1 removable readonly
                                                                                                      1⤵
                                                                                                        PID:653
                                                                                                      • /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util
                                                                                                        /System/Library/Filesystems/hfs.fs/Contents/Resources/./hfs.util -k disk5s1
                                                                                                        1⤵
                                                                                                          PID:654
                                                                                                        • /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs
                                                                                                          /System/Library/Filesystems/hfs.fs/Contents/Resources/./fsck_hfs -q /dev/rdisk5s1
                                                                                                          1⤵
                                                                                                            PID:655
                                                                                                          • /sbin/mount
                                                                                                            /sbin/mount -t hfs -o "-u=502,-g=20,-m=755,nodev,noowners,nosuid,rdonly,nobrowse" /dev/disk5s1 /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC
                                                                                                            1⤵
                                                                                                              PID:656
                                                                                                              • /sbin/mount_hfs
                                                                                                                /sbin/mount_hfs -u 502 -g 20 -m 755 -o nodev -o noowners -o nosuid -o rdonly -o nobrowse /dev/disk5s1 /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC
                                                                                                                2⤵
                                                                                                                  PID:657
                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                xpcproxy com.apple.TextInputMenuAgent
                                                                                                                1⤵
                                                                                                                  PID:659
                                                                                                                • /System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
                                                                                                                  /System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent
                                                                                                                  1⤵
                                                                                                                    PID:659
                                                                                                                  • /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC/Install.app/Contents/MacOS/Install
                                                                                                                    /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC/Install.app/Contents/MacOS/Install --web-installer --cep 1
                                                                                                                    1⤵
                                                                                                                      PID:660
                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                      xpcproxy com.apple.TextInputSwitcher
                                                                                                                      1⤵
                                                                                                                        PID:661
                                                                                                                      • /System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
                                                                                                                        /System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher
                                                                                                                        1⤵
                                                                                                                          PID:661
                                                                                                                        • /Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC/Parallels Desktop.app/Contents/MacOS/prl_client_app
                                                                                                                          "/Users/run/Library/Caches/com.parallels.webinstaller/MountPoints/030B023C-941E-4DF3-A4F7-18EB143801BC/Parallels Desktop.app/Contents/MacOS/prl_client_app" --install --skip-update-check --dont-show-eula --set-cep 1
                                                                                                                          1⤵
                                                                                                                            PID:662

                                                                                                                          Network

                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                          Replay Monitor

                                                                                                                          Loading Replay Monitor...

                                                                                                                          Downloads

                                                                                                                          • /var/db/locationd/Library/Caches/GeoServices/Resources/altitude-1269.xml

                                                                                                                            Filesize

                                                                                                                            167KB

                                                                                                                            MD5

                                                                                                                            a645869f7bf432953f0292ca5fd17ad8

                                                                                                                            SHA1

                                                                                                                            9063c8541f8d4d81d301df8b359a30071d42b119

                                                                                                                            SHA256

                                                                                                                            04daf260c11cd34cd84f42fb5a47f1d5717d0b2f62b236826d7c3a6f0a1c9db9

                                                                                                                            SHA512

                                                                                                                            6449c45cd990750cf88cbf75b3320e6d972ba1b10dd8bb23835e1d298efb0b5d50399ad2c4be9d3d068619d645e544afc3245c66630da1878c8688811e76fca4

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

                                                                                                                            Filesize

                                                                                                                            47KB

                                                                                                                            MD5

                                                                                                                            0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                                                            SHA1

                                                                                                                            414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                                                            SHA256

                                                                                                                            cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                                                            SHA512

                                                                                                                            1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

                                                                                                                            Filesize

                                                                                                                            4KB

                                                                                                                            MD5

                                                                                                                            d3a1859e6ec593505cc882e6def48fc8

                                                                                                                            SHA1

                                                                                                                            f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                                                            SHA256

                                                                                                                            3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                                                            SHA512

                                                                                                                            ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            19.6MB

                                                                                                                            MD5

                                                                                                                            71fc4aba28903c1380eabd75ea2e2444

                                                                                                                            SHA1

                                                                                                                            d27eb34bbc0086f5f706aead9c4db3452c4d3410

                                                                                                                            SHA256

                                                                                                                            c9f4d93ca107d83ab3cbd7cd096e332d527cf96bd55712e8cd83e695a3a795db

                                                                                                                            SHA512

                                                                                                                            ab57cb92a10b5d5e0047d7d7566f4f72198bb69f454a64abba812095aa210d69c9d2f025d327d275cf8e07cbf23b13359555aa3ae196a64814c0c9580a75543f

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            22.9MB

                                                                                                                            MD5

                                                                                                                            1de16686023174c1114491c0763ce1e5

                                                                                                                            SHA1

                                                                                                                            e0d9b125e598e7c3e29b1ea8cdef52b0d2962ed5

                                                                                                                            SHA256

                                                                                                                            29633b6b9cf8b755da14157ad9d523500ace3ab6f76e84a84d55d244ef18e750

                                                                                                                            SHA512

                                                                                                                            c3694638bb6d2e43c071d0ee4dc050f34fce78117ab65204a892ce8216ddd670b97b8e02cdb9bcfb795e922ba6167ec0ec4a4f693a0088a5219052b4afe4b323

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            21.0MB

                                                                                                                            MD5

                                                                                                                            c5c1463c788e89f5512b31a860602515

                                                                                                                            SHA1

                                                                                                                            452a02a58d62121645a20d2110d7999713c5387c

                                                                                                                            SHA256

                                                                                                                            d321d4e2146fd29d8fadec88d3d86fb019312b1d0b1f92341e2aa0fd57df5feb

                                                                                                                            SHA512

                                                                                                                            65627fa596aa2228a5bd0073c81d0056b45dad24e1a22675aa004450c6976f8df75c161e489e7845917c655f8c924a937b626667bc64cf44dfb57b953e85b719

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            22.5MB

                                                                                                                            MD5

                                                                                                                            b19b41a2c71e332a1c52dc03baa20a53

                                                                                                                            SHA1

                                                                                                                            095ec9bbe511e77e6a267f1f5099a512bdf35617

                                                                                                                            SHA256

                                                                                                                            b1cc9883838f1e115ea275ca0f77d5c98ee95d84e6dc7f42b632c8b7227b555b

                                                                                                                            SHA512

                                                                                                                            246a5e2455181d27e88d91242d13175eb6b798559ed837d5e3b994202f4b9535fd8420dd7a97b502db914374de4ad3466751d43c69ef69189412f92175bdd865

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            21.7MB

                                                                                                                            MD5

                                                                                                                            8c5ac4ff4bd5de3b5744f3a3a30ddd32

                                                                                                                            SHA1

                                                                                                                            c0e3728c8a05a505a82ab7410258c8ab53973418

                                                                                                                            SHA256

                                                                                                                            5b85054b830b5aacea75b4c27c3f464f0d26caf3cd8ad39b05f12d657c3efe31

                                                                                                                            SHA512

                                                                                                                            20f2a6cc19a247f7ec90f5a5d6df4c08fb3441d1c7075e3f56fcdf72c817e00844daa3689ceca7cc3eb839b2ddf82eb3c980c4dd91b4faaa3aff2b6082b8e279

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            21.6MB

                                                                                                                            MD5

                                                                                                                            388508ff276cf3ee654e28b98a835de7

                                                                                                                            SHA1

                                                                                                                            b9ded5cd641604c1b41b2ef72c052d0c15547c03

                                                                                                                            SHA256

                                                                                                                            2944cfe300411a59508df5d59f5a111b9178139945202ead7504e971538762f4

                                                                                                                            SHA512

                                                                                                                            21c8c1ceb3076dedb84f3e097a85cce533e8204cc46ff00ff14a838ad90db49a5569421f233dc6e5ff5e38eb690a3ee3f0ed1a1004d796ee596c763a632cd475

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            21.2MB

                                                                                                                            MD5

                                                                                                                            f115ea43658501537bbd8d7265beaf0e

                                                                                                                            SHA1

                                                                                                                            aede68e14dc35655d23642bc16f6e0b99b59fb56

                                                                                                                            SHA256

                                                                                                                            2138fec976bb216027e2b8c6643b66d8dc51c3841f332760abe1fed8be5dcffe

                                                                                                                            SHA512

                                                                                                                            666d67890316b50cc5df3e114ca9491c779257186486e55e8f937d2ae48cb897a208f9f4d2cbd59f2fe1ca3e1ad3d1a4f346da32015a1214e9cf3a5e9c93b889

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            23.0MB

                                                                                                                            MD5

                                                                                                                            1236fb7e6ac4feed9c4276d663419dcf

                                                                                                                            SHA1

                                                                                                                            294a36cdbd78782f328897e29f325b671a2393da

                                                                                                                            SHA256

                                                                                                                            e37d523db5c2bf810c7e936a1da927d13b5eabbbf1fb41c82c5892593f520054

                                                                                                                            SHA512

                                                                                                                            4fcbfdea4a30a7c3bf721f95cde7b1fb2b7e54e9bf629cb1b773b106b00a4c05518047a1dc6522474aa64bc44ee51f92af15bdb56d1ddee8f0ccb8055a14af61

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            20.8MB

                                                                                                                            MD5

                                                                                                                            20df65ac1e29fa3aacec82fabeadb4ff

                                                                                                                            SHA1

                                                                                                                            aac682c739b13d15d577edaaf92f1c2c73c834f0

                                                                                                                            SHA256

                                                                                                                            6659ca099d7b02c95fc2d497f00c020fff809657dbcd9ff0134f505557c42a65

                                                                                                                            SHA512

                                                                                                                            224c0aac12c1b392e4200b2c65984ddcde2227f619cd353017eda4369b7b8a585c775589224d5dcc68076f6c1c9a4864d6ea2e6eea486e78bbf736963e28bf06

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            21.7MB

                                                                                                                            MD5

                                                                                                                            dff5f485866e3046bf30e6b155946dce

                                                                                                                            SHA1

                                                                                                                            42fc719ccbb0f63e7b8e9a60e89699b110cb0916

                                                                                                                            SHA256

                                                                                                                            b96c63f460db51ad870481faa8f915b6536268548987205020929463eb4ed783

                                                                                                                            SHA512

                                                                                                                            d6b1298a25736e8f1fd0d5e551ca9e657d7bce3b038c63288783588d8f8369168dcdb804cdbf8e4b4f04ed9f6e0ea9540e754bce8e2bb85b0729cad222de5877

                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/ParallelsWebInstaller/Downloads/C2820B2E-55F6-4E72-AC98-1813004B0616/Image.dmg

                                                                                                                            Filesize

                                                                                                                            46.2MB

                                                                                                                            MD5

                                                                                                                            c70b11f8b29c79199f55b85017b08b8c

                                                                                                                            SHA1

                                                                                                                            87f98bb8a121963aa37b9220a766cc0195cd074a

                                                                                                                            SHA256

                                                                                                                            6779cfccb720a169e2f7dd6a6083d9adcea4330a2d99e1ee7db6df3bb2f30ff1

                                                                                                                            SHA512

                                                                                                                            4504d12d2463a9dd47079ea6b4c90e28e89bf0ffe9c7872ef65f1806082aea36c67e46d43cea66ec5db370d88ff75ed0192faf0a11738cea3740c99b3943e23d

                                                                                                                          • /var/log/fsck_hfs.log

                                                                                                                            Filesize

                                                                                                                            15KB

                                                                                                                            MD5

                                                                                                                            dfb65788656f2beff811d78c8324346f

                                                                                                                            SHA1

                                                                                                                            e1b65883d19526a2363bbcf4654873edd57106a6

                                                                                                                            SHA256

                                                                                                                            203d8ac527781928e7f2edccaaf68bedf526e85506e7f0eb47d844962c8c5b74

                                                                                                                            SHA512

                                                                                                                            023e201537e6d15901da65f9c0f0c0336f329c33a560b857e79c9c90a398419ebbc7df597da29118629328844a0ca7cce2767b3d6f7e853f638dcd3e52e004bd