Malware Analysis Report

2024-10-16 06:33

Sample ID 240608-snee9sdf82
Target https://www.youtube.com/watch?v=5RFN3EwtiJE
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

Threat Level: No (potentially) malicious behavior was detected

The file https://www.youtube.com/watch?v=5RFN3EwtiJE was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary

N/A

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-08 15:15

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-08 15:15

Reported

2024-06-08 15:19

Platform

macos-20240410-en

Max time kernel

170s

Max time network

170s

Command Line

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.youtube.com/watch?v=5RFN3EwtiJE"]

Signatures

N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.youtube.com/watch?v=5RFN3EwtiJE"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.youtube.com/watch?v=5RFN3EwtiJE"]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.youtube.com/watch?v=5RFN3EwtiJE]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.youtube.com/watch?v=5RFN3EwtiJE]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Photos.1876]

/System/Applications/Photos.app/Contents/MacOS/Photos

[/System/Applications/Photos.app/Contents/MacOS/Photos]

/usr/libexec/xpcproxy

[xpcproxy com.apple.colorsync.useragent]

/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent

[/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.2028]

/Applications/Safari.app/Contents/MacOS/Safari

[/Applications/Safari.app/Contents/MacOS/Safari]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.History]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.62A93ABA-0013-4893-A01B-20078AAB8FA8 526]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SafariLaunchAgent]

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

[/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.AEA4C616-3773-4320-8980-6E32008D59EE 526]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.SearchHelper 526]

/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper

[/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Safari.SafeBrowsing.Service]

/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service

[/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.0E1B6A11-BF7D-4E43-8AE2-B5B8B6C14D36 526]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.AudioComponentRegistrar]

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar

[/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.SandboxHelper 539]

/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper

[/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.accessibility.mediaaccessibilityd]

/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd

[/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.263CAA7D-1882-4E8A-B3AD-2FB384CEA5F9 526]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.WebKit.WebContent.818E014A-DCB5-4D29-8A0B-B011E0CD9259 526]

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

[/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coremedia.videodecoder 539]

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService

[/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Notes.1736]

/System/Applications/Notes.app/Contents/MacOS/Notes

[/System/Applications/Notes.app/Contents/MacOS/Notes]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E]

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService

[/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PackageKit.InstallStatus]

/usr/libexec/xpcproxy

[xpcproxy com.apple.warmd_agent]

/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress

[/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress]

/usr/libexec/warmd_agent

[/usr/libexec/warmd_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.passd]

/System/Library/PrivateFrameworks/PassKitCore.framework/passd

[/System/Library/PrivateFrameworks/PassKitCore.framework/passd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.rtcreportingd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coremedia.videodecoder 121]

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService

[/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService]

/usr/libexec/rtcreportingd

[/usr/libexec/rtcreportingd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sessionlogoutd]

/System/Library/CoreServices/sessionlogoutd

[/System/Library/CoreServices/sessionlogoutd]

/sbin/shutdown

[/sbin/shutdown -h now]

/bin/sh

[sh -c /usr/bin/wall -n]

/bin/bash

[sh -c /usr/bin/wall -n]

/usr/bin/wall

[/usr/bin/wall -n]

/System/Library/Extensions/IOGraphicsFamily.kext/iogdiagnose

[iogdiagnose -b /var/log/displaypolicy/iogdiagnose-last.bin]

/usr/sbin/spindump

[spindump -shutdownstall 2 -timelimit 5]

/bin/sh

[sh -c /usr/sbin/kextstat]

/bin/bash

[sh -c /usr/sbin/kextstat]

/usr/sbin/kextstat

[/usr/sbin/kextstat]

/bin/bash

[bash /private/var/install/shutdown_installer_tasks]

/bin/bash

[bash /private/var/install/deferred_install]

Network

Country Destination Domain Proto
DE 20.52.64.201:443 tcp
US 8.8.8.8:53 apis.apple.map.fastly.net udp
US 8.8.8.8:53 bag-cdn-lb.itunes-apple.com.akadns.net udp
GB 17.250.81.67:443 tcp
US 8.8.8.8:53 gateway.fe2.apple-dns.net udp
US 8.8.8.8:53 api-glb-aeuw3b.smoot.apple.com udp
FR 15.237.18.235:443 api-glb-aeuw3b.smoot.apple.com tcp
US 8.8.8.8:53 clients1.google.com udp
FR 216.58.213.78:443 clients1.google.com tcp
FR 216.58.213.78:443 clients1.google.com tcp
US 8.8.8.8:53 www.yelp.com udp
US 151.101.0.116:443 www.yelp.com tcp
US 8.8.8.8:53 safebrowsing.googleapis.com udp
FR 172.217.20.202:443 safebrowsing.googleapis.com tcp
US 8.8.8.8:53 cdn2.smoot.apple.com udp
US 8.8.8.8:53 cdn.smoot.apple.com udp
US 8.8.8.8:53 www.yelp.co.uk udp
GB 17.253.77.201:443 cdn.smoot.apple.com tcp
GB 17.253.77.201:443 cdn.smoot.apple.com tcp
FR 52.84.174.35:443 www.yelp.co.uk tcp
US 8.8.8.8:53 www.youtube.com udp
FR 142.250.201.174:443 www.youtube.com tcp
US 8.8.8.8:53 i.ytimg.com udp
FR 172.217.20.214:443 i.ytimg.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 216.58.213.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 itunes.apple.com udp
FR 142.250.201.174:443 www.youtube.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
FR 216.58.214.163:80 www.gstatic.com tcp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.196:443 www.google.com tcp
FR 216.58.214.163:80 www.gstatic.com tcp
FR 142.250.201.174:443 www.youtube.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
FR 142.250.179.74:443 jnn-pa.googleapis.com tcp
FR 142.250.75.230:443 static.doubleclick.net tcp
FR 216.58.214.163:80 www.gstatic.com tcp
US 8.8.8.8:53 play.google.com udp
FR 172.217.20.174:443 play.google.com tcp
FR 172.217.20.174:443 play.google.com tcp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
US 8.8.8.8:53 youtube.com udp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
FR 142.250.179.110:443 suggestqueries-clients6.youtube.com tcp
FR 142.250.179.110:443 suggestqueries-clients6.youtube.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 lh6.googleusercontent.com udp
FR 172.217.20.193:443 yt3.ggpht.com tcp
FR 142.250.178.129:443 lh6.googleusercontent.com tcp
FR 216.58.214.163:80 www.gstatic.com tcp
FR 216.58.214.163:80 www.gstatic.com tcp
US 8.8.8.8:53 rr5---sn-aigl6nzr.googlevideo.com udp
GB 74.125.175.138:443 rr5---sn-aigl6nzr.googlevideo.com tcp
GB 74.125.175.138:443 rr5---sn-aigl6nzr.googlevideo.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 rr3---sn-aigl6ney.googlevideo.com udp
GB 74.125.175.138:443 rr5---sn-aigl6nzr.googlevideo.com tcp
FR 142.250.179.97:443 tpc.googlesyndication.com tcp
GB 173.194.183.168:443 rr3---sn-aigl6ney.googlevideo.com tcp
FR 216.58.214.163:80 www.gstatic.com tcp
US 8.8.8.8:53 lh5.googleusercontent.com udp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 142.250.178.130:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 rr5---sn-aigl6nze.googlevideo.com udp
GB 74.125.168.138:443 rr5---sn-aigl6nze.googlevideo.com tcp
US 8.8.8.8:53 tv.youtube.com udp
FR 142.250.75.238:443 tv.youtube.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 support.google.com udp
US 8.8.8.8:53 twitter.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
US 8.8.8.8:53 kstatic.googleusercontent.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 35.241.11.240:443 kstatic.googleusercontent.com tcp
FR 172.217.20.170:443 ajax.googleapis.com tcp
US 8.8.8.8:53 artists.youtube.com udp
US 8.8.8.8:53 developers.google.com udp
US 8.8.8.8:53 www.instagram.com udp
US 8.8.8.8:53 blog.youtube udp
US 8.8.8.8:53 socialimpact.youtube.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 servicesdirectory.withyoutube.com udp
US 8.8.8.8:53 vr.youtube.com udp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
US 8.8.8.8:53 tv.youtube.comhttps udp
US 8.8.8.8:53 studio.youtube.com udp
FR 172.217.20.196:443 www.google.com tcp
FR 216.58.213.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 216.239.36.181:443 analytics.google.com tcp
BE 64.233.166.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 2542116.fls.doubleclick.net udp
IE 17.57.146.88:5223 tcp
US 8.8.8.8:53 cds.apple.com udp
BE 104.68.86.71:443 cds.apple.com tcp
US 8.8.8.8:53 help.apple.com udp
US 23.220.113.166:443 help.apple.com tcp
US 23.220.113.166:443 help.apple.com tcp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
DE 51.116.246.105:443 tcp
US 8.8.8.8:53 1.courier-push-apple.com.akadns.net udp
US 8.8.8.8:53 1.courier-sandbox-push-apple.com.akadns.net udp

Files

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

MD5 e1da288b44074dcd51be5feadb3b3b18
SHA1 2c4dd0ebc4159a8be2c2ba6aefeba96732d17856
SHA256 651be12572ba7c53777669931cc01fe098c37e7c9a5d873fce6cfacb461f41c3
SHA512 739f8c84084a65c95bacf9f0076eeb021b65a211d77b9929c9733efc133c5e5e0ef48bc4bd9ee7d343c0e56b7562e1941f172921ad54bacff3c47de0134209d7

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari//mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/Users/run/Library/Safari/Favicon Cache/favicons/27D44A3C6A210B59ECB9F77BDB5025D0

MD5 9909227b6fd2415ccb9a276d99632243
SHA1 c21dfda1e925054b0d6c882e43f87dbe1222a933
SHA256 af7282a5f1a3c7a62bda5f2265b1254d420ba7b5aab58023df705dd6064d2ac9
SHA512 9705d6811e00ee5f616ead194484f00df7fd5033e6bbea784c02438b87774a3e60ece7e2fb6e23486eec43743d642a105a16a615b3a5d5ee32d49b8f77814e5c

/Users/run/Library/Safari/Favicon Cache/favicons/FA1310F1253E6F696AB6ABBBCD5B798D

MD5 b1d93af012a8b948b8eaebe20a4ca838
SHA1 c3d1a9778e88922c38152b08700a90a8ff9c083c
SHA256 32d88e1590bd2714c7552c028eb4e40537606857a799a91d23333454c508c246
SHA512 d173c4ffcbd42af35a571a3fc5fefb14fe9304edd365e5e573788aff5a9722ed4a1636af3d9f4d904cb3bd5207c6d680f95c91ffb4701ecbad52438b6eabbb74

/Users/run/Library/Safari/Favicon Cache/favicons/4413421AC8495E3C3F09E9AFD1212EB0

MD5 80f7367cb52983d2b58c2570460a9e9b
SHA1 8b1020b84f2c57bc43c0b0e504529fbd176fc694
SHA256 d7dd223f488a3dc314edecff758abc774093909d8cdaabb5c6b3f5a84a6f4be7
SHA512 ec16f486883b31551597eaa82406989c159a5e186ec33fcc8fbc85093d1ac758bfab065a9a8f91ef3087456cc2a0b2b097dbb074f567280f5ccf8f3838eaceb3

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expression

MD5 2adc0a27bb6d15f9d0cfca5cef51d875
SHA1 2047a07534258c94ef350a0f80109245efc04c61
SHA256 8874e1819f330336a6e17c6da32e9e982b5d69a1f6ed1df952334846a2bf0bde
SHA512 62bade7991aa12f3c09656b81e6047f0d875bbb3adb8a7b19ccb4ec391d85cc16d05a72c49dc77858f07b0e0b7060942e6ade3636593ea160d7d56f0f87f879b

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expression

MD5 ad3792eda4bd2ffd29629d16fd3c70ec
SHA1 5c839711ddc773b8480b4de02620411ba5dd61d7
SHA256 03087a2a3cdc99bdab9c8569d02608d32861becb9bb645379e2a8fd5771b3df1
SHA512 cdf75e059d74aca3affffd51a8a790e02c8075c610e7cfba28c30a212938da4fcf656ecb40680f96991bcecb273d70aed59da3057eec2e2b54473ff5fb5bad5e

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expression

MD5 30707783aca28aab049859a1a9cfb716
SHA1 19a83fb8ce79d0694710d8767441da0b67e91c2a
SHA256 30db97a9198eb556e969a6728f517ebc6e9c2e24142fdae3fcd060d81a9f7e94
SHA512 c06daa1ce8ce3d0b4d55fcdae0fece0b257b2d3819810aea3045cf0e56279c377766cb5cc7ef0b1add6e33d27a249745a0fe6969cf7be5326363b1db597a068c

/Users/run/Library/Safari/Favicon Cache/favicons/AC95BCE4422CF32F34DE19DAF12AFE85

MD5 2d4610446f0fb5cfcf49134eb2b38721
SHA1 7ab22676eb6ff50aff8ecedb9e7f427bd225eb28
SHA256 e430ae43a6af30393a0f46ea0b8c971a899454da05d22e9d24e2e96eda839497
SHA512 0637197fb66c7cdd3d6b6f620bf5cb48110b32a5da03db164583ae22a822609fd80c11b19aca7b64970eae0d9842c0dfccf41c46d662eaf139ee0018ee97661b

/Users/run/Library/Safari/Favicon Cache/favicons/A859754BCEC7EAB0346C6FB5757F54E6

MD5 ccef48ae2f2f332799c6c2fd7edf988c
SHA1 fccadbb695a64d388424771090a931c0a6e156c3
SHA256 6fb516c5d70946f1396898385ed9c015ea08c2cef55e2e6c32e68a1536947b18
SHA512 ecf3e7ae782d2c6858726a9edc6548fea4ed1cc4a6c06f162c2c3bc562cd74c507661ce3bba26ec45cb2d1dd1aa5fc1130ec1ff6d849a4aad680e0e48a7f2a50

/Users/run/Library/Safari/Favicon Cache/favicons/53209859EF0833415C52AE5AC0E47DE5

MD5 b029f4de2a30258eec08f87f7c134d72
SHA1 886dfea946b08233f119ab91c4926387ae8c4b14
SHA256 6ca8619960ca15e5e9a6fefeafb485d9217b2746ed4578ad048a4a83c68a0a6d
SHA512 e42c2b25398b5b0e1733ab13c486ffe5d28a457eb0e1817cfd1ef488d9a955dfe4c03fbc5fd5f2e84af5d1191d9bf32ac4800f0978feba03a7fac7faa9b43eab

/Users/run/Library/Saved Application State/com.apple.safari.savedState/data.data

MD5 8687e190e53ab80d0dcfb4562a170ce2
SHA1 6da94ecc6aa78acf1fae85c299db8848d74f6add
SHA256 4fdcc4fbac24e3667851307f99b93a265d2baa772f8592583bc2eab5725b3bd5
SHA512 632b26ed4fd27ba2754d8307b91d66432e9a05be1277f280d0b227753410d98b4952d8efb82f813d40337362d0f51b74cf566022fa6f34778e49752ed5bbb72a

/var/root/Library/Caches/rtcreportingd/events/NRM_Events_2024-06-08-15-18-45.event

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T//spindump.txt

MD5 395ebe8f5d47bd4c9902aa919ea9a7fc
SHA1 bbcd415c97b9c994afd4ff925b57881d11c175eb
SHA256 00bfb4ce684089702418cf3f90c397e0488aba273b624358e11d1ef9962878fc
SHA512 443569fcb480804ad68ca8fcec514846bc210b4bbb31d268168050b5a7e099b46d9094c2ccb18e4c15bde4a464b32990a5cb7a77cb5287a7f51977c5b35192c6