evilquest | 54e7c78b10ba18184c326b473675d81a63b33f59638b94c3a7752966070703fc

Analysis

max time kernel
150s
max time network
141s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
26-04-2024 16:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118
Size

168KB
MD5

0127dfd555611d81b4e6c2f1c5bcea0a
SHA1

48d6ca277a70ac8f9477207948288ba3930825c9
SHA256

54e7c78b10ba18184c326b473675d81a63b33f59638b94c3a7752966070703fc
SHA512

7d4ec3b9bed16761334f771827a58cb76e3f3daf4ed8a5893e81c86b09b71a586c094e141e47d135fe88ad0dfd86ad9442b61334b7d93b4e22f5af3c6e55d1b1
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9CLL0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest backdoor execution persistence

Malware Config

Signatures

EvilQuest
EvilQuest family.
backdoor evilquest

EvilQuest payload 13 IoCs

Processes:

resource	yara_rule
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest
/Users/run/Library/osxmobiledata/com.apple.afsvcpd	family_evilquest

Launch Agent 1 TTPs
Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
persistence

Launch Agent
T1543.001
Launch Daemon 1 TTPs
Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.
persistence

Launch Daemon
T1543.004

AppleScript 1 TTPs 8 IoCs

AppleScript is a macOS scripting language designed to control applications and parts of the OS via inter-application messages called AppleEvents.

execution

AppleScript

T1059.002

Processes:

ioc	process
osascript -e "do shell script \"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
osascript -e "do shell script \"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
sh -c "osascript -e \"do shell script \\\"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
osascript -e "do shell script \"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
osascript -e "do shell script \"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
sh -c "osascript -e \"do shell script \\\"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""

Launchctl 1 TTPs 16 IoCs

Adversaries may abuse launchctl to execute commands or programs. Launchctl supports taking subcommands on the command-line, interactively, or even redirected from standard input.

execution

Launchctl

T1569.001

Processes:

ioc	process
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
/bin/sh -c "launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist
sh -c "osascript -e \"do shell script \\\"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
/bin/sh -c "launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
osascript -e "do shell script \"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist
launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
/bin/sh -c "launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist"
sh -c "osascript -e \"do shell script \\\"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist
osascript -e "do shell script \"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
osascript -e "do shell script \"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
osascript -e "do shell script \"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
/bin/sh -c "launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist"

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118
1⤵
PID:487

/bin/zsh
/bin/zsh -c /Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118
2⤵
PID:489

/Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118
/Users/run/0127dfd555611d81b4e6c2f1c5bcea0a_JaffaCakes118
2⤵
PID:489

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:490

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:490

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:490

/usr/bin/pluginkit
/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync
1⤵
PID:494

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterB516C108/OneDrive.app
1⤵
PID:495

/bin/sh
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:496

/bin/bash
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:496

/usr/bin/osascript
osascript -e "do shell script \"launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
1⤵
PID:496

/usr/libexec/xpcproxy
xpcproxy com.apple.security.authtrampoline
1⤵
PID:497

/System/Library/Frameworks/Security.framework/authtrampoline
/System/Library/Frameworks/Security.framework/authtrampoline
1⤵
PID:497

/bin/sh
/bin/sh -c "launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
1⤵
PID:498

/bin/bash
/bin/sh -c "launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
1⤵
PID:498

/bin/launchctl
launchctl load -w /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist
1⤵
PID:498

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:499

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:499

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:500

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:500

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:500

/bin/sh
sh -c "osascript -e \"do shell script \\\"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:501

/bin/bash
sh -c "osascript -e \"do shell script \\\"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:501

/usr/bin/osascript
osascript -e "do shell script \"launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist\" with administrator privileges"
1⤵
PID:501

/bin/sh
/bin/sh -c "launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
1⤵
PID:503

/bin/bash
/bin/sh -c "launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist"
1⤵
PID:503

/bin/launchctl
launchctl start /Users/run/Library/LaunchAgents/com.apple.afsvcpd.plist
1⤵
PID:503

/bin/sh
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:504

/bin/bash
sh -c "osascript -e \"do shell script \\\"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:504

/usr/bin/osascript
osascript -e "do shell script \"launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
1⤵
PID:504

/bin/sh
/bin/sh -c "launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist"
1⤵
PID:505

/bin/bash
/bin/sh -c "launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist"
1⤵
PID:505

/bin/launchctl
launchctl load -w /Library/LaunchDaemons/com.apple.afsvcpd.plist
1⤵
PID:505

/bin/sh
sh -c "osascript -e \"do shell script \\\"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:507

/bin/bash
sh -c "osascript -e \"do shell script \\\"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\\\" with administrator privileges\""
1⤵
PID:507

/usr/bin/osascript
osascript -e "do shell script \"launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist\" with administrator privileges"
1⤵
PID:507

/bin/sh
/bin/sh -c "launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist"
1⤵
PID:509

/bin/bash
/bin/sh -c "launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist"
1⤵
PID:509

/bin/launchctl
launchctl start /Library/LaunchDaemons/com.apple.afsvcpd.plist
1⤵
PID:509

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportCrash.Root
1⤵
PID:528

/System/Library/CoreServices/ReportCrash
/System/Library/CoreServices/ReportCrash daemon
1⤵
PID:528

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:529

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:529

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:534

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:534

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:535

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:535

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:535

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:539

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:539

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:540

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:540

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:540

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:545

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:545

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:546

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:546

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:546

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:548

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:548

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:549

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:549

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:549

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:552

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:552

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:553

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:553

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:553

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:554

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:554

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:555

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:555

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:555

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:556

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:556

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:557

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:557

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:557

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:560

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:560

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:561

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:561

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:561

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:563

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:563

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:564

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:564

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:564

/usr/sbin/spctl
/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app
1⤵
PID:565

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:570

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:570

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:571

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:571

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:571

/usr/libexec/xpcproxy
xpcproxy com.apple.pbs
1⤵
PID:572

/System/Library/CoreServices/pbs
/System/Library/CoreServices/pbs
1⤵
PID:572

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:573

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:573

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:574

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:574

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:574

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:577

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:577

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:578

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:578

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:578

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:579

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:579

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:580

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:580

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:580

/usr/libexec/xpcproxy
xpcproxy afsvcpd
1⤵
PID:581

/Users/run/Library/osxmobiledata/com.apple.afsvcpd
/Users/run/Library/osxmobiledata/com.apple.afsvcpd --silent
1⤵
PID:581

/bin/sh
sh -c "sysctl -n hw.ncpu"
1⤵
PID:582

/bin/bash
sh -c "sysctl -n hw.ncpu"
1⤵
PID:582

/usr/sbin/sysctl
sysctl -n hw.ncpu
1⤵
PID:582

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

T1059

AppleScript

T1059.002

System Services

T1569

Launchctl

T1569.001

Persistence

Create or Modify System Process

T1543

Launch Agent

T1543.001

Launch Daemon

T1543.004

Privilege Escalation

Create or Modify System Process

T1543

Launch Agent

T1543.001

Launch Daemon

T1543.004

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
f2665622d2de55696494438250b04aa5

SHA1
bdfdca882bd71f34ad95764887f898f67fbabdb6

SHA256
d6bae973121399144965ab8909e7e7e06f56ca251f8da52d72c429d09dba2b36

SHA512
91f11a45e97e81c7ffe07136d8d545d6398eaf72b01bebbb22ba51d30c97ae1e6461525634b9633000f85d6701c1e5b7022c72f4844b6d3ee3628ffb2fc09b29

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
f39b9c0ee1f97ac1514e957ca008784d

SHA1
0119231c2914a5161e0fb09556a6719c1354c943

SHA256
9aaaec20cfc831e5d3bf353728dee02f4cef9179b91ddf5b201d8bbc1efe1df9

SHA512
0bc4460ec15dd644199477841badb116d6f7f05b889ff9197a5fd3749b2de35d8bccf2b908cb842758a20ce7147eeb1852027eb78cb505a7fe907515b814b419

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
956d369095664844697395943596188a

SHA1
a7f99a3483b5a18ce06f87ff24654979b28d45cf

SHA256
b2776bae42c99b5f9eb13498a8fa2642ea475a37c0b0eefbf008eb51adab99c8

SHA512
70c4b9793fc8d9873a2ea9d26d264d976702ca1120a3b072871a50585264b6401dea73851f0267dd0c2321cd8f9cd84478de8dd86d8ce34215089f293d74d044

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
b10546af3fd7efaad6c9a1946797cc79

SHA1
ee33d37ec7904d041faec9b16956d633202484b2

SHA256
c0a60b895b5085d10d2bc1295cf77fe01107f045daf653f28b13c75158cf4257

SHA512
a7b94338dfed0d0b906fb5ed2e172a6b00d6d1c5d1743b341158270c3ede70884d73cd9c7b5ecd3c35ecb658038e8bc1b802f7d8dadb84fd11341f9a4acbadca

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
95dffd2f5b90a5db71167bb7c287de12

SHA1
4f8848824dae4cf7ee438c00900dc0981ca01303

SHA256
efe1584840b37d930096464120d75eb392bb5d0f4208c24b693ca7483676bede

SHA512
7829e1fa88a7305257fb7da7fe71c07a89708e27c675f83fae11f79a1d5f53456ae33c36a50ba1517c084c770ce976a823e046ebbabb9183b7515924d3d03436

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
910b5b442b83d44ed13f47d4401411d3

SHA1
7f2bf7f69d7ff8b423216da98d7c3c7e43df9c97

SHA256
71105dd793b754e840d51f86027cb48c4222b54bcf9864c3bcfb4d5711305980

SHA512
6fc112c9ecebc3191b66e2b1998cd7ab06fdd24f0762c23dc2225826a316b3b34187e499883962f8814deef7f873cbdd975c30139db70b4746ab878347891839

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
cf40221d0d4cdbfe6b4565bbce6fdcd8

SHA1
eb7ab3b61e729d09d357d788162ea15726901f13

SHA256
5ce0eb0ea1b430c706c8f26e9587b6fe91e2318b89d372cd92e55435f0fa4e9b

SHA512
a7e4b6c55b7536efc8cb1f976dc85295bb47c47fd12586f69c03a6e64d39649d6ee95d85eeb82015969656ea7dcda308f1e5d04fed476e2ec2fc220029612ad7

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
2da0f15935ddfb53459e647b447fca8d

SHA1
fa4921c593dea588ea442758b43bd630fe6aec24

SHA256
61ac63fc0eaecbefaa6c69c75b22d995d7d1f312303de7a808d0eb00e8bc027f

SHA512
e1fe9fdd60abff9520169f4cc1568a76fbff0c0295eb367e1b903576879a59b5d2713dabfcdebd3636d4c1b5c86ed220ce210cc4033aaf7839ced3ded166eedf

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
940addaaf25003a08ddf25b7f2bd73dd

SHA1
6d2da7dff8644ad6b7460e9030d6d540a131d3e7

SHA256
b34b5dd0a52494ef2b94dfd846a948f49c83a88e8a386d10eea85216935dd469

SHA512
daaaa3f48c35afb1769cbd8a9fc1b37c211e4f49e8ef4072d7327a1aad0aebd7075463849680c0e2b94f5edcbee03a3383b567d0d7ad3fbab6098056ca4b3992

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
666917622da0cf7148996cb3145c9fb1

SHA1
f10da7117aabb3cc339f8b46943e1dbd2de4e43a

SHA256
b6cab9462380d034ffbb75ac1f29b2a2023543b95f38a47058fad48ea2b3470c

SHA512
a2b9cb713ed88fdb50af0ff53a2c28a9add55bee9f20f71f1bbd23bf2a4c9ef046a010932d51b6b462a9226be003855c4187548d75fef0aefcc1925479b5b6c5

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
158B

MD5
7f80040385992f214a5fd4ec0eb8d7bd

SHA1
ccafa7f972e2eb673dea0c8316049b2fabd978d5

SHA256
41ed2a912ca1c07b3bab61b1654e739a88859f268a8589e2a1fdbc0d8a3df234

SHA512
fc7334131d87f668894163247ceead09f217c4005632a1e7dca15ae885c9e9e553850cd2508c27f54953fae7c645a860773ddf497f9dbb720c624c76eb46eb56

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/Library/Application Support/CrashReporter/com.apple.afsvcpd_79C87F0E-9227-5AAD-AA91-25F794E1F52E.plist
Filesize
156B

MD5
fa86d1dad14eac31eb5955ca35073450

SHA1
daac68aa99a764a69cd9bde373fffe1600853d50

SHA256
da07ea4129457a0d3d1d9f0bb5631da6b820b09988c94cb175ba94371a9ef36d

SHA512
44042f09ce0192357f85442fa1281d0ed9bd4373afbd7ad820cf344214d54fb51746c409afd5cd880b6edb4064a264bf0907baf3e912e01ce590ece4fdbd41e1

Download Submit
/Library/Logs/DiagnosticReports/com.apple.afsvcpd_2024-04-26-160920_tests-iMac.crash
Filesize
39KB

MD5
8eb784aaa9853424c28c9e54339aa7b3

SHA1
7815f90f4432041fbe708023765e32b137528027

SHA256
1edbd411b81e94d4118c9d42a66be6df50c80b0d96e5613e178540275206d866

SHA512
6d8b41e184de9fb364aeca7b7339704b0531ee2d34fbf64393c3fa0de07428b4e1ce33cdca1f6d606575ac082d7520e36eb90fbecf899b21009d117233e18ba8

Download Submit
/Library/Logs/DiagnosticReports/com.apple.afsvcpd_2024-04-26-161115_tests-iMac.crash
Filesize
39KB

MD5
2aa62e7a0fdaf510c8a359dd248a0085

SHA1
0866dd468f94063e9716dfc832b7c1ceeb2f53a2

SHA256
fde038bc2db0b09a7d509c4a0a845ba09cfa695866200113999631233cea8bb4

SHA512
ed8c371944cc27432d5956ccfc70f70961582247c3b789e58e9367dab5a2d7b085df1bdafaf12e161e4a3a56734f2ecef6e859f62955d19753b330ed6f01cd57

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
e7340a246f21737a7f42dd5cb0ebf6b4

SHA1
59e69d8ad4cb608ee4329d6490b38ad0d126c720

SHA256
438c3985a74d60f5773d026a22a3c7bedcc15585008b8b809c21914e41c8d29a

SHA512
290dda0e41ca9b7903e6c539d5887957b5ba7c38f9367b9f9b506bf30498ec43e62eadd27dff75f2af93e83c0df382bd132642790637531971692c57f0036add

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
2e0de84e9c95fa5c37af8764d6b60dea

SHA1
d511686c12fec7456dd036ab60b01a2d13ed11e9

SHA256
96ca1b714f9b4f2831688d9f5061ce3cb904bc1264983063f19cf2cb2b9a2e5e

SHA512
998bb431ca120b53d98c1ccc71025e5a6e2c9d562fb4c44ee8e4d307f9f97e2595ae47081d695c1b0c966b6772075cc400ab96c955a82be851b3b40a426c5eef

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
eee5e14e062bb459ffb56dc702b7ed3a

SHA1
8f7788448a44990596e0ee01ebf6d38964db0bda

SHA256
44e8b4450e264360d1e3569a1d3bf93d373982ace5e593ef71f53574d1cff6f3

SHA512
4b7ce6452876a629336e2bb8a6c186045af7bc4ec5080e48da877e95fa04938c82664abeb086dc77953709bbcc62e5368e0ff3fe2436d8cab9e1c9dc8e044628

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
26c8b25e0c7022d3ee2d570940e45fca

SHA1
c05fdd358ad91f474e322bb64f625f0d435fb652

SHA256
64637edf6df7bdface56f2e4561e75e99af2a5e303b139638ac8e15517130257

SHA512
58c7937b057b322f741a0c8f9daf35c55beb149a8e99a3ee1decba6bdd33d685e338036dda25c101c7ae75fa8f6b4c214c011a2c8ea86e48636eb1dbd6b15d97

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
c6e6c7b4ce19809cb8691fe047883a01

SHA1
f56476d570131f7c38190c6f53bee96d9b170a02

SHA256
62d336aaffa4ed3917e6e3c19bd57decab5fbca97f34b9e7efb67f20f318430c

SHA512
a05d9046b4661802973998e1501b8ee6bee258dfa9213727d183bcd3c29727cb32c7c2a6a60476bfd0d87ede76d0620a4843b0c30d32c22338fc04d16137d28d

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
faa8808feb4c82830a68c0def1350c9d

SHA1
3dc62d395ae2ab387e9931e19c62ea76de0f1178

SHA256
60b57729ac04f1a0cf8aeae219ab80b1408f8d17edba4f2169205d246f37e4f9

SHA512
cb7b65cbb9ba435c33754d4f480af01d15c24df810cd61b8a9a22cec6939ffcfa196d40f0bde2d1640bc20222bfd39493b78b03bffe285b123b47657c1d796a7

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
e06b9c41916cfed712b303d750604ac5

SHA1
d6dd2bd93819b7e4621af523c153b3f59bf81567

SHA256
1240c97dcb829d5609e2f0f4a8da541ec2a94d0c7825605c576cbf7afc092365

SHA512
b4e5016be1d9d194293654ed5c39725c77418279a8de4a51ecb21ddc48745957f04370022147d69cda70be4f251458d4d85c68705d91e2d2e3339147b32257c0

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
2940562660fadf957670c5e41cd05a4c

SHA1
6c79a9941e94604e5c767191d4c30abe824e7d42

SHA256
e8963879bff93fa4cfa45014f7ce0cd55493f20c94c61f62912f4d4070564e73

SHA512
2dace1c8b6bfcf68aa0663f3bb375ebc17bff60044c9b112667af300918fee987038efaa062a8738ee39db4a48372d1d2ffc0cf40d001f1d39ed062b41668fb7

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
fb6a65dced9fcedb683f103c0079cd1f

SHA1
c0d9df36d4a8d4b15b055116354c30a9245cb5a8

SHA256
2dfbd81ac58eae112d2c71ba8c3ceb7b3a9b2043f1600fdc784bc317060b1dc8

SHA512
7063d7827c04659fc4491ca37f8e0e55b1d9c18336d6fb7680f0573cec3c2d92ec2f37b4ccd62ba87b8ab6f4f3cfd9a3cc41fb85d0ea44bdf1054e4dce61cb27

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
8ab82bee13ef47ecc07ea206f10e73fb

SHA1
f6ee7da273e2d6c42752105702c1a3fb0abdafdf

SHA256
e0556def32408b9097941a3643f4ea850c69a329f9499f1f86c380020b8b7ae2

SHA512
584837a12026042f91da36fa11d17fdd0fac200e452f59b688a694653fe898870b9b89dc7f6c14432f39ef17fe52bbe91e947fe117e8479a2fec3f0d2395ae27

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
3ad96729a49d9d609080117b04d7e839

SHA1
6b2a50170f3dd04caef7ada99a73d38f3c3e8717

SHA256
517a66015cdc8542ef0516b6f424238f555e368155395068eb2541a05ba2154f

SHA512
8b07d354ff48951ca79e427a39d8e0e985f286e3f5c3736309df9930362bc6b4451bb9518113abeec94521eb3faf32e6cf80caca77d41f0b36665b8f7ee42b5e

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
22694454b7e72b8d04162bf2d7ff3676

SHA1
a1cf5cef8757199872a40116826b46bc09914007

SHA256
e276c0108619e898647655339d369a112d92c3cb5110c08315092a190ed9e3e6

SHA512
0e2751ea80b19275d35ecb933b6e02cf823055049d0ebb42ccc51590131b1ef991902efd4985293f4c9c7ee90cd859a8a31aa99728f14179f8bf4af62bc5dbbe

Download Submit
/Users/run/Library/osxmobiledata/com.apple.afsvcpd
Filesize
168KB

MD5
69c80f2357652994740211b65eb3753a

SHA1
2b345ce5ea88e1af983f3b807750aa10cd1d6acc

SHA256
34e33e547f55026f795676ddb8fc86b3a3919a1e44c14b0a8114b86c74d9ba46

SHA512
71c248471bf4ee06ffd9a7c7a98c1bfde4a13b11d895bcddebe921a611dad9ba4ee7e05ac0ba8f3cb9566fcffa29e41d10e0b2136126ff129e38c60dcc612a93

Download Submit