Analysis
-
max time kernel
2240s -
max time network
2663s -
platform
macos-10.15_amd64 -
resource
macos-20240611-en -
resource tags
arch:amd64arch:i386image:macos-20240611-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
17-06-2024 10:04
Static task
static1
Behavioral task
behavioral1
Sample
d3ZXHLsxqw.webp
Resource
macos-20240611-en
General
-
Target
d3ZXHLsxqw.webp
-
Size
293KB
-
MD5
9f93ab54f3f281b1f8df8d1e530be81b
-
SHA1
5161271ddb78ef00287512da3b7aa500423b7eb5
-
SHA256
057be7a598682f44faf44a3b1fbf9f78a5c3f93e886b209d864d56e13a991a66
-
SHA512
9353d65c2eec826f2a3cbe83583b6527261972b410a2978d50927a54eb617a7122393c0bc2a17630ab76946fca5431d8b555759f636ccce5dbc09be5362d46e1
-
SSDEEP
6144:Ers4VlUZoJDhyL4kUFjSTi+2vvAFgr69iqz2udE1ffDX+BDx:ErXVgodhybGS2+2vvt69iqby1ff8Dx
Malware Config
Signatures
-
Resource Forking 1 TTPs 5 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
Processes:
ioc process /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy /System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/d3ZXHLsxqw.webp\""1⤵PID:521
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/d3ZXHLsxqw.webp\""1⤵PID:521
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/d3ZXHLsxqw.webp1⤵PID:521
-
/bin/zsh/bin/zsh -c /Users/run/d3ZXHLsxqw.webp2⤵PID:523
-
/Users/run/d3ZXHLsxqw.webp/Users/run/d3ZXHLsxqw.webp2⤵PID:523
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:527
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:527
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:547
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:547
-
/usr/libexec/xpcproxyxpcproxy com.apple.pbs1⤵PID:550
-
/System/Library/CoreServices/pbs/System/Library/CoreServices/pbs1⤵PID:550
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:552
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:552
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.cloudkeychainproxy31⤵PID:556
-
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy1⤵PID:556
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:563
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:563
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:564
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:564
-
/usr/libexec/xpcproxyxpcproxy com.apple.secinitd1⤵PID:565
-
/usr/libexec/secinitd/usr/libexec/secinitd1⤵PID:565
-
/usr/libexec/xpcproxyxpcproxy com.apple.AddressBook.ContactsAccountsService1⤵PID:568
-
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService1⤵PID:568
-
/usr/libexec/xpcproxyxpcproxy com.apple.routined1⤵PID:569
-
/usr/libexec/routined/usr/libexec/routined LAUNCHED_BY_LAUNCHD1⤵PID:569
-
/usr/libexec/xpcproxyxpcproxy com.apple.Maps.mapspushd1⤵PID:570
-
/System/Library/CoreServices/mapspushd/System/Library/CoreServices/mapspushd1⤵PID:570
-
/usr/libexec/xpcproxyxpcproxy com.apple.nehelper1⤵PID:573
-
/usr/libexec/nehelper/usr/libexec/nehelper1⤵PID:573
-
/usr/libexec/xpcproxyxpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A1⤵PID:574
-
/usr/libexec/neagent/usr/libexec/neagent1⤵PID:574
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.20281⤵PID:581
-
/Applications/Safari.app/Contents/MacOS/Safari/Applications/Safari.app/Contents/MacOS/Safari1⤵PID:581
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.History1⤵PID:582
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History1⤵PID:582
-
/usr/libexec/xpcproxyxpcproxy com.apple.siri.context.service1⤵PID:584
-
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService1⤵PID:584
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.F84B265E-7FC8-4D0C-A3ED-83136A128EDE 5811⤵PID:585
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:585
-
/usr/libexec/xpcproxyxpcproxy com.apple.SafariLaunchAgent1⤵PID:589
-
/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent1⤵PID:589
-
/usr/libexec/xpcproxyxpcproxy com.apple.akd1⤵PID:590
-
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd1⤵PID:590
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.A0AF7802-608B-4A01-B206-E4BDBA4F7DA1 5811⤵PID:591
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:591
-
/usr/libexec/xpcproxyxpcproxy com.apple.CoreAuthentication.agent1⤵PID:592
-
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd1⤵PID:592
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:593
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:593
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SearchHelper 5811⤵PID:597
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper1⤵PID:597
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SafeBrowsing.Service1⤵PID:598
-
/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service1⤵PID:598
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.6965C12D-0F8B-416D-873F-752DBC77E990 5811⤵PID:600
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:600
-
/usr/libexec/xpcproxyxpcproxy com.apple.mediaremoted1⤵PID:601
-
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted1⤵PID:601
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:602
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar1⤵PID:602
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.SandboxHelper 6001⤵PID:603
-
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper1⤵PID:603
-
/usr/libexec/xpcproxyxpcproxy com.apple.accessibility.mediaaccessibilityd1⤵PID:604
-
/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd1⤵PID:604
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.E775A484-A0F5-4F73-B1B6-3016695538F3 5811⤵PID:605
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:605
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.5A0612FD-539D-4B08-AE17-6657981A14BF 5811⤵PID:607
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:607
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.3152966A-476E-4F2B-801D-8202545D7452 5811⤵PID:612
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:612
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.EE6215D2-55E0-4F47-AA39-80588E5F5B95 5811⤵PID:614
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:614
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobile.keybagd1⤵PID:615
-
/usr/libexec/keybagd/usr/libexec/keybagd -t 151⤵PID:615
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:616
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:616
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump_agent1⤵PID:617
-
/usr/libexec/spindump_agent/usr/libexec/spindump_agent1⤵PID:617
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.SandboxHelper 6121⤵PID:618
-
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper1⤵PID:618
-
/usr/libexec/xpcproxyxpcproxy com.apple.ViewBridgeAuxiliary1⤵PID:620
-
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary1⤵PID:620
-
/usr/libexec/xpcproxyxpcproxy com.apple.accessibility.mediaaccessibilityd1⤵PID:621
-
/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd1⤵PID:621
-
/usr/libexec/xpcproxyxpcproxy com.apple.secinitd1⤵PID:622
-
/usr/libexec/secinitd/usr/libexec/secinitd1⤵PID:622
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.D148B497-786F-400E-B6FE-D4D00AE3530C 5811⤵PID:624
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:624
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobileassetd1⤵PID:625
-
/usr/libexec/mobileassetd/usr/libexec/mobileassetd1⤵PID:625
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobile.keybagd1⤵PID:626
-
/usr/libexec/keybagd/usr/libexec/keybagd -t 151⤵PID:626
-
/usr/libexec/xpcproxyxpcproxy com.apple.coreduetd1⤵PID:627
-
/usr/libexec/coreduetd/usr/libexec/coreduetd1⤵PID:627
-
/usr/libexec/xpcproxyxpcproxy com.apple.ViewBridgeAuxiliary1⤵PID:628
-
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary1⤵PID:628
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:629
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:629
-
/usr/libexec/xpcproxyxpcproxy com.apple.geod1⤵PID:630
-
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod1⤵PID:630
-
/usr/libexec/xpcproxyxpcproxy com.apple.secinitd1⤵PID:631
-
/usr/libexec/secinitd/usr/libexec/secinitd1⤵PID:631
-
/usr/libexec/xpcproxyxpcproxy com.apple.cfprefsd.xpc.agent1⤵PID:632
-
/usr/sbin/cfprefsd/usr/sbin/cfprefsd agent1⤵PID:632
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobileassetd1⤵PID:636
-
/usr/libexec/mobileassetd/usr/libexec/mobileassetd1⤵PID:636
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobile.keybagd1⤵PID:637
-
/usr/libexec/keybagd/usr/libexec/keybagd -t 151⤵PID:637
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.History1⤵PID:638
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History1⤵PID:638
-
/usr/libexec/xpcproxyxpcproxy com.apple.nehelper1⤵PID:639
-
/usr/libexec/nehelper/usr/libexec/nehelper1⤵PID:639
-
/usr/libexec/xpcproxyxpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A1⤵PID:640
-
/usr/libexec/neagent/usr/libexec/neagent1⤵PID:640
-
/usr/libexec/xpcproxyxpcproxy com.apple.ContextStoreAgent1⤵PID:642
-
/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent1⤵PID:642
-
/usr/libexec/xpcproxyxpcproxy com.apple.ScreenTimeAgent1⤵PID:643
-
/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent1⤵PID:643
-
/usr/libexec/xpcproxyxpcproxy com.apple.dmd1⤵PID:644
-
/usr/libexec/dmd/usr/libexec/dmd1⤵PID:644
-
/usr/libexec/xpcproxyxpcproxy com.apple.trustd1⤵PID:646
-
/usr/libexec/xpcproxyxpcproxy com.apple.CodeSigningHelper1⤵PID:647
-
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper1⤵PID:647
-
/usr/libexec/xpcproxyxpcproxy com.apple.tccd.system1⤵PID:648
-
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system1⤵PID:648
-
/usr/libexec/xpcproxyxpcproxy com.apple.sandboxd1⤵PID:649
-
/usr/libexec/sandboxd/usr/libexec/sandboxd1⤵PID:649
-
/usr/libexec/xpcproxyxpcproxy com.apple.iconservices.iconservicesagent1⤵PID:650
-
/System/Library/CoreServices/iconservicesagent/System/Library/CoreServices/iconservicesagent1⤵PID:650
-
/usr/libexec/xpcproxyxpcproxy com.apple.bird1⤵PID:651
-
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird1⤵PID:651
-
/usr/libexec/xpcproxyxpcproxy com.apple.iconservices.iconservicesd1⤵PID:652
-
/System/Library/CoreServices/iconservicesd/System/Library/CoreServices/iconservicesd1⤵PID:652
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:653
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:653
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.SearchHelper 5811⤵PID:655
-
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper1⤵PID:655
-
/usr/libexec/xpcproxyxpcproxy com.apple.akd1⤵PID:657
-
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd1⤵PID:657
-
/usr/libexec/xpcproxyxpcproxy com.apple.suggestd1⤵PID:659
-
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd1⤵PID:659
-
/usr/libexec/xpcproxyxpcproxy com.apple.knowledge-agent1⤵PID:660
-
/usr/libexec/xpcproxyxpcproxy com.apple.siri.context.service1⤵PID:661
-
/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService1⤵PID:661
-
/usr/libexec/knowledge-agent/usr/libexec/knowledge-agent1⤵PID:660
-
/usr/libexec/xpcproxyxpcproxy com.apple.tccd1⤵PID:662
-
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd1⤵PID:662
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.FC70C15A-EF49-47A5-B9E8-4DD6732A4A8B 5811⤵PID:664
-
/usr/libexec/xpcproxyxpcproxy com.apple.pluginkit.pkd1⤵PID:665
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:664
-
/usr/libexec/pkd/usr/libexec/pkd1⤵PID:665
-
/usr/libexec/xpcproxyxpcproxy com.apple.AddressBook.ContactsAccountsService1⤵PID:667
-
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService1⤵PID:667
-
/usr/libexec/xpcproxyxpcproxy com.apple.CalendarAgent1⤵PID:668
-
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent1⤵PID:668
-
/usr/libexec/xpcproxyxpcproxy com.apple.CalendarNotification.CalNCService 6681⤵PID:669
-
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService1⤵PID:669
-
/usr/libexec/xpcproxyxpcproxy com.apple.coreduetd1⤵PID:672
-
/usr/libexec/coreduetd/usr/libexec/coreduetd1⤵PID:672
-
/usr/libexec/xpcproxyxpcproxy com.apple.secd1⤵PID:673
-
/usr/libexec/secd/usr/libexec/secd1⤵PID:673
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:675
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:675
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportCrash1⤵PID:676
-
/System/Library/CoreServices/ReportCrash/System/Library/CoreServices/ReportCrash agent1⤵PID:676
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportMemoryException1⤵PID:677
-
/usr/libexec/ReportMemoryException/usr/libexec/ReportMemoryException1⤵PID:677
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:679
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:679
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump_agent1⤵PID:680
-
/usr/libexec/spindump_agent/usr/libexec/spindump_agent1⤵PID:680
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.10FA79BC-B25B-4DD9-AF43-E69B93DED013 5811⤵PID:682
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:682
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.9627D6C2-43F9-477B-8DBD-2FD6BE864C44 5811⤵PID:684
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:684
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.06407F8F-80DC-4F5D-B71E-DC03D22693B4 5811⤵PID:685
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:685
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.F3AEAA80-349A-4617-B07C-73CDA2111320 5811⤵PID:686
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:686
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.BBCD63FD-B020-430C-B40D-820EBDDEEEB9 5811⤵PID:688
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:688
-
/usr/libexec/xpcproxyxpcproxy com.apple.WebKit.WebContent.0A8D5AF5-DE1F-4282-BB12-252B89D2AFCB 5811⤵PID:690
-
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent1⤵PID:690
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:691
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:691
-
/usr/libexec/xpcproxyxpcproxy com.apple.routined1⤵PID:694
-
/usr/libexec/routined/usr/libexec/routined LAUNCHED_BY_LAUNCHD1⤵PID:694
-
/usr/libexec/xpcproxyxpcproxy com.apple.Maps.mapspushd1⤵PID:697
-
/System/Library/CoreServices/mapspushd/System/Library/CoreServices/mapspushd1⤵PID:697
-
/usr/libexec/xpcproxyxpcproxy com.apple.adid1⤵PID:699
-
/System/Library/PrivateFrameworks/CoreADI.framework/adid/System/Library/PrivateFrameworks/CoreADI.framework/adid1⤵PID:699
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:701
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:701
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.cloudkeychainproxy31⤵PID:704
-
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy1⤵PID:704
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵PID:706
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵PID:706
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/Library/Caches/com.apple.iconservices.store/8DAFA032-BCF7-3B0F-8548-EEB820761EF0.isdataFilesize
64KB
MD543fc0a758250774f8a4e52a6cfa3da61
SHA1fcae4cc3f0de1907adc42270320ce8d3c0a21274
SHA2568dafa032bcf7fb0f8548eeb820761ef0488d2b1ee7fae978a902fea2179024aa
SHA512c0384999cbc33b443ad0a42df2563efc0f67aed8771a66bc5010450b3a7936105db151a9a238b2c0b5635e2fbeb75aabe7c8d3b23ea65ddda96338de99a3bc97
-
/Library/Preferences/com.apple.networkextension.uuidcache.plistFilesize
443B
MD595d1f6a479ea836bed553646ebef85c1
SHA119da469018294e373c788d888e5c55e0bb18695e
SHA256fc78047a7293b7fba3abe949497f397804f86e2ff04c29c4a549df60aa877aa2
SHA5123f9b8aa7efc6cbbcf6672e0d08a630178c653894d800e9125ed18774de105bc564b097120e98b5711cec5d05d95b41fe822019bc10038055eabf341b0c12845d
-
/Library/Preferences/com.apple.networkextension.uuidcache.plistFilesize
443B
MD5b5ed1a4aa9f5eb7122af5b836de7cefc
SHA150f9e5dbb61125650245824f2bc6b466ede59bf6
SHA256c81bb42621fd0e666a3863f06db96ab6f5f2631cf135d41e2916c25d973c1056
SHA5123986a6f6457f3f794a04034f6d905cdb7ab37e67fd3d266a1aa7bf5deaeb544097d0c8668642288f2a6dfb33f343147241d2130abbff33f20140c6608f4a1211
-
/Library/Preferences/com.apple.networkextension.uuidcache.plistFilesize
487B
MD5d57c2c880732544ab7260fd582f738eb
SHA193f874a25477dfc0e51b3463abea4a436437e077
SHA256c153b23daa5c8fdb6a115b3f5b7da9c3f8bb8fa81f045747b0be7fd433d73750
SHA51262be7f989f7736a4ea093b8fee862c21988bccccdffc5e281e9762ab8ad5b3b7b203b8bcdd4de8e8c613717bcce58562ef264d386163a45c3b391ebc895e3855
-
/Library/Preferences/com.apple.networkextension.uuidcache.plistFilesize
517B
MD5a3707811a6096724d20927c4a5bbd31b
SHA1c3fcdadaae3dd1492e8c80c56cb241fd0983110f
SHA2569f5e32f0aad8cb6e9d9097ebe92aaf122599336818b90f3949cdc4c78b405417
SHA5128909835213fc0da36d5d17e142f3b41fa5c1461d1008da0d45732f0cc89ae2d6fd0febc06ddc175b925578293429448ef8e46e5bda40570fd893e4d4cabedc2f
-
/Library/Preferences/com.apple.networkextension.uuidcache.plistFilesize
517B
MD5f7c5b3d0fc1f8e32f750e9b0d3e885f3
SHA1bfa4a65f345f45cd1bf9267fa0d173f7d277b2db
SHA256b3e6e0ebc7cdd61e832187c9e29e4bf23d9452d88b986478d1bf4dd3f62f126f
SHA51299f8b8e0594b327f6492c86a28c40d15ce7f35afa0a30def860777b7ab89d38a847f20ba4cf51209ebe4394f55f6f318cd7d200a240c0cba961f5917f2380b67
-
/System/Library/AssetsV2/com_apple_MobileAsset_TopLevelDomainDafsa/com_apple_MobileAsset_TopLevelDomainDafsa.xmlFilesize
4KB
MD5ebc2a19a18ff6bca039b54e59eb1a340
SHA12f8e29f150775f1d252a8b13b814600ea2804b64
SHA25650d058659b632866a5778d68373f6abdf11994bebcb00a913b2ec082137cdeff
SHA5125d6e7ced0f68aad9b51aac4fce485d7d9c0d3f3814a311e37ec39c3d70d229671b41dcea7d5b5fd67b1f7e2fdff7122ee6b58c42876bee8106280f17238b73ac
-
/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbdFilesize
124KB
MD562f4cd82c973b11cd7bd0bf556c0bec3
SHA1ced35eb0b7288c45b2936e29b9419c8edcb22ed7
SHA256a57222e5e18e51b27f7571e5ba2682ed7af256ad3607dba9b6204ec653e382a3
SHA51206eb0ddc5fc986497bd9cf4ff18e49e2064f3e84472d97bada018e0ae82adcd9512331a86aceb55a3c00200c94af0f91f9b251fdf2c28ec9b38569c55aabcfcb
-
/Users/run/Library/Caches/GeoServices/ResourceManifest.pbdFilesize
248KB
MD5c9ddd515bf94f623dc0922b913143280
SHA1f4e73bd6299e3df479b0960046d0cd2a05b6ba8d
SHA2562786647d59f218e7aff225c48b40ebf316e47b4696dcdfd94f89bbc29a1a0e9a
SHA51229e14d3c3aae8f48a97f17e75f0f0a1416e95212ecfb6259f67836a702c81d35911ccbc191af51f58fb590d7966ce11c26d63702d46fe18f2a2c30a73512ccd1
-
/Users/run/Library/Caches/GeoServices/Resources/altitude-1285.xmlFilesize
179KB
MD59a43af57707d2fb460832049d1f217d1
SHA1056d813f8cb5198ca82072f7e3484f38ea5267f8
SHA2567224f8828694ed74a8353567e4d84da188d15a993a4a75938f8409cb49218e7c
SHA5121f33175f5d0958c79540a627552f71c6960b6ff19c9b2b0aa604c00bfeff216f6ea2ec3a22ef91ad8d7249597fdf5ad49ddbf5f4aef71b397e785152474954d7
-
/Users/run/Library/Keychains/login.keychain-dbFilesize
106KB
MD591a0e8a5556a6bd87b1ff5c0a3b25350
SHA10364deebbd213845861ceaedc5bd519f3f46ade5
SHA2561afe1bdca6e6615d8c976b086b2437f9d6b89cbf52dcf0c266e566a706427c9d
SHA5120c3805673ea2557efb826a1b67be9677755537622d9ed474ebe6f2d57f4b6ff10f8aab79cd460355dc85bb9ba0508ad80e42da1d621f435dc07e3e8905254706
-
/Users/run/Library/Preferences/com.apple.security.cloudkeychainproxy3.keysToRegister.plistFilesize
640B
MD514798ea64c710aadfdc1694b0b3c596c
SHA17788e2cc3bf6a656b570446cd668cb8319d113b9
SHA2568201fe862ae9353835d600f5af778d0ef72559d41d7b9f07a59421f02ee6b1c3
SHA512de70b800ea2dd56b76992e7d7e57890ed224488bb40e270067bf9965152f20f65f1487b14a06fd6dafe80b6bddb8d9b50ddc8e5ca1a4eb7b550232ed56098902
-
/Users/run/Library/Safari/Favicon Cache/favicons/1C2781D6C6883A38DDCF70A155075520Filesize
14KB
MD5aaecf9c038897af242f5d1d59e317abb
SHA1c2706c1bbbe33e29149b928029956e77753e8f24
SHA25680f1460ede9fb2582106a7cfb8d91bd3d14c4735e6a60d37d13017c6fcd373cb
SHA5129b85ba088cae013ecf5ac59baf217c59bf05590dc4b51c21e6f8ec8e31171107c01105c70bc36fdce0d47b6917e86fbdc0cb52fc3ee012b761e7be3cd70fe7f9
-
/Users/run/Library/Safari/Favicon Cache/favicons/2800DC1739828F05C6477BD6D2351807Filesize
5KB
MD51263d4fd818e3ccdb33bd529075de514
SHA180f7989737ffd4f5c0167ed3a2123c704eec624a
SHA25647f7131ce4913e1d49fda4283aed2824907eec694ed07237cc557952cccfbfe0
SHA51289b0328ab6ab74e1a8cfc966dc416435377431cccd61f18a17f93c8e7c1ddc76b4a8ed95e67395b7f5c6759df3c296c55546bee3361f3bca44d3baf9e1b75d0f
-
/Users/run/Library/Safari/Favicon Cache/favicons/2C9FB50A3E644900BE7615303A0B2BA3Filesize
5KB
MD5f3418a443e7d841097c714d69ec4bcb8
SHA149263695f6b0cdd72f45cf1b775e660fdc36c606
SHA2566da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
SHA51282d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563
-
/Users/run/Library/Safari/Favicon Cache/favicons/54536D87B1AA09E378503E34FDEA3DB5Filesize
5KB
MD53ceb0c2c416b0d7e967c22e162fb166e
SHA1fcba598d5e04ec401721869257cdfa0a24d8f522
SHA256bd012d6227e715bdc704e65570d67b9c3b2e70db5111cda64df832c50c69d7b9
SHA5123271d6c420ac4761d48e505012c5a878a2b4550327f9bf08a5e408a1e8aff02f341c7609294f626c68f6cb7a49e95c9566d075441a4a0862f1a3865b88c92c69
-
/Users/run/Library/Safari/Favicon Cache/favicons/AC0DA0E90466A6F8FF6C755594C2D245Filesize
5KB
MD59909227b6fd2415ccb9a276d99632243
SHA1c21dfda1e925054b0d6c882e43f87dbe1222a933
SHA256af7282a5f1a3c7a62bda5f2265b1254d420ba7b5aab58023df705dd6064d2ac9
SHA5129705d6811e00ee5f616ead194484f00df7fd5033e6bbea784c02438b87774a3e60ece7e2fb6e23486eec43743d642a105a16a615b3a5d5ee32d49b8f77814e5c
-
/Users/run/Library/Safari/Favicon Cache/favicons/B9B22332C2775BAC7922099EC5E20EB5Filesize
5KB
MD579c897bd28b9ccc97f5b6575e3653fe6
SHA10dfe38884e3d4ad1abaab041a4c5523993e4b82b
SHA256e58a8be4176bda139d271e49511fd1ab40fe07ae5de02c66c64c091732892594
SHA5126aa85f5d6b079a9eddd8105237b6e3cb3e1cfb30fddd792a867131d1302a129d82f1f48d4d0ef7197c7224e44ef7662fb78eae8f2d566210a6952d67408bb6df
-
/Users/run/Library/Safari/Favicon Cache/favicons/CB66C4756FD575DA72C5681980179CF2Filesize
5KB
MD580f7367cb52983d2b58c2570460a9e9b
SHA18b1020b84f2c57bc43c0b0e504529fbd176fc694
SHA256d7dd223f488a3dc314edecff758abc774093909d8cdaabb5c6b3f5a84a6f4be7
SHA512ec16f486883b31551597eaa82406989c159a5e186ec33fcc8fbc85093d1ac758bfab065a9a8f91ef3087456cc2a0b2b097dbb074f567280f5ccf8f3838eaceb3
-
/Users/run/Library/Safari/Favicon Cache/favicons/F64A430B9FD417352EFB53A80A93F152Filesize
2KB
MD5904ce6bd2ef5e1eaa6de1eb02164436b
SHA1b37ac89616b9e4c01a35991af59fe6b63e41a48e
SHA2563638de61226857e62cf5187d7d59cf902111ad4f792b5bdff1bfed3f5ed5e608
SHA51205044e298742b1520585ae3c029938036ebed50337608a600c4924a29e3624ce704f3b13fbe348d9e1b1e93b1e0abff9f53bbc9fd31929199f9a374f154f74c2
-
/Users/run/Library/Suggestions/pending/3.qdatFilesize
5KB
MD5a34876d66bbe8f3c15426dd5050b22e3
SHA1272f8718542d31e4f1df7ca2450301f355f898b8
SHA2560d1cd7239de74181a93385530e3188b67d3db70d21c3f83135c084bbad9d8b2c
SHA5122ede2aa26775900daf0135422c8a80c93025ef33707374f02216de57f6a7e3b20fc4b684eb7f6d8e5b01de742dde84674b566923113b934cab87962d47b7361e
-
/Users/run/Library/Suggestions/pending/4.qdatFilesize
5KB
MD54c6c2413a39f4518eedd862844dbf2fd
SHA1740beffd43ca8f269312f75917b672cc2420c55e
SHA25600d33045781ce4546bc226403512bb28cf0032c23f214131888afcc1d33daf09
SHA512a01ca6e552a59c8cbedd3973cf78180e6db665ebe30b3882dc6137107bcf016e56acb40dd47b99e1c2cca26d2e2efc9a829ced1fa2223781aae6f27c63bf8372
-
/private/var/db//keybags/persona.kbFilesize
3KB
MD563e45862192c53570a96be79af9e2ba0
SHA1775800ed5c1edacc742abe5f17a687c8e0f1c366
SHA2564f6b419348d6b3a1e08664ec4abb2b52902d85a392a2a8cd47af4443b4891a2e
SHA512e0b4a72b8d8334a85a5b5efca023d0e1de250fd08d9e181e7a624e1e7ed0a882da4c0469736119f3d4a2da41100a7335ed359770a246b4a269f92335dcc25fef
-
/private/var/db//keybags/persona.kbFilesize
3KB
MD545445bec0fe21446a7b5503605c9a652
SHA1892b3d993c39e29092868f71a002cd2370f9758a
SHA2560d706926a36f90962d9798dd87cc009ca9dd5cd3c536e3c12c8ff9a65ccf14df
SHA512b4b97f3c4a3bd4a0f57332189926144f0838f660fd80c51b722bda8af2dc551f86c183830f5c4d012fd60607eb2047ea0ee7896b9800dc287af0ffeb2d3320ad
-
/var/db/locationd/Library/Caches/GeoServices/ActiveTileGroup.pbdFilesize
124KB
MD5e9038b61860114d74320357e3c499256
SHA1e05a83d71cf42e2b4d7cf1411c891bd565478d78
SHA2569ff749f01fe2287d19c2b503ccf7d99e23046afa31235f4aa8180f87cc1db951
SHA5123e0686ef0a98d7715e068bf6e093beee7e5301b4072617695619b4ea06e0f77691fa8208fba3bca0635f7c5e0ee1cd4948bfb6d16f647047d04f3799d180bab3
-
/var/db/locationd/Library/Caches/GeoServices/ResourceManifest.pbdFilesize
248KB
MD5b0950c4e25823e902927bb79382b21ea
SHA16e0b402522310d37c1b59df974d0bd0d8269d788
SHA25678a936e089d5013dcb0d89e4bd1a0853994ca2598b29eb83123c1ce593bdbeaa
SHA5123d8e08b8213c34a7b50d30a7b697109c9ce28e9f0a6ad7cf69f7aa887b2177ba5912c90649e21c7a3594a16c819f7fbd60f3346e0aa6490e6f02113e96ef49c0
-
/var/db/locationd/Library/Caches/GeoServices/networkDefaults.plistFilesize
6KB
MD557487c5e523f4e461e97ab98b41803aa
SHA1c631fbf25dc6f23be44ccc2670b334278800c63e
SHA25667725d05a0ce28bf4ccbfcde82acfcaa627c0eeb7678d5c8e5b7649a7f158f8d
SHA5129d9826379ab15e2da65a2a32bc3584b201d79e89e3a7d6e554b2398b7a0ada77241144be6d69fc749526029838293d5107f96f45392fe6a07a05dd2f4d07a3bf
-
/var/db/nsurlstoraged/dafsaData.binFilesize
53KB
MD57e6f706958b092cc383164b72f0747d3
SHA10b5610fe3452fcd8b30c39512b182ed2ea658d08
SHA2563fa3a11ba183442ad6d6f0736d9a885c929157a52055867c8548ee4412dcaf02
SHA512b9900d308bb49a051cf1a03134be994e387dc1707a45d81c8972dd05b6b3acb95f06120877f3ad3ee5f468200bbd1974ef82b170b32b51a36a8f892e849332ea
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/malware,osx,url_expressionFilesize
218KB
MD567156cb6b6e1732094722702959a30b0
SHA1d90cf633876758a0970df9d032dab6f0b30b63a1
SHA25658ba1d98871747feeed19634c78d0c295cba0c1045b880d1ea6c3e2630f1e048
SHA512f571a6da978166bd7998e165fe404e6f424051429c8026bdfe53cbda4d5b22840b6bad0f5e2449cb6befb9ad06cd052cea0d783f17dd6c21dec102967443eb88
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/social_engineering,osx,url_expressionFilesize
21.9MB
MD5acb2ece6b39604a758d8c9470b26c4a1
SHA19276bbf8ead48aab60c4fecdedbc8ef67c84a3da
SHA2569fa132990f42ebfbf38168e2baff6323eaf2f210a6c6e5fb5830fb36ab119114
SHA512cd3484e4de0546bf45917f111940b817c0236e1e5c559dc7c54df8072b0a2e3f04e3eca1fb598f103cee01d6f749338ca4508bd4732c7b220fb41afca9530c9f
-
/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.Safari.SafeBrowsing/Google/unwanted_software,osx,url_expressionFilesize
127KB
MD59ebab5c7a0813099e82e154ca4a3b1a3
SHA1165a095c12a5ef12a24afe58c68d72a827d5962f
SHA2569bdc6470db71e898ca94ec16f6630070db3434e925bc5c33718731430e729713
SHA512c6d180e26472c2ef3e4be697242020c5db69342f432c72786ba989724a7bac9e0ccf8c9c99565f9d18e9ab44dac14a46db4a6b500c734001e48bbc893f1faab9
-
/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C//mds/mdsDirectory.dbFilesize
47KB
MD50e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA5121dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
-
/var/folders/zz/zyxvpxvq6csfxvn_n00000sm00006d/C//mds/mdsObject.dbFilesize
4KB
MD5d3a1859e6ec593505cc882e6def48fc8
SHA1f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA2563ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818