Analysis
-
max time kernel
892s -
max time network
898s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
28/03/2025, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
HexagonStudioLauncherBeta.exe
Resource
macos-20241106-en
General
-
Target
HexagonStudioLauncherBeta.exe
-
Size
1.0MB
-
MD5
e04e8381257f94d1b07bfee6d69d3902
-
SHA1
1e2ca349a353b5b66b1803a39d03992f54b65bec
-
SHA256
a2d17b944f12efe2bd3502b978c1e9ece10cb8f648e091da43dc4d1855e102bf
-
SHA512
f4b816e393d9fc5e9e4633a403bcb570c3c3dea615f1a450288010dc294487aabd2e711a71d6e00b74bb7f1df0bcbf2b9bad0f6a49a8053ab4e59c57e9d3097d
-
SSDEEP
12288:Zl2HSe/Of5dYu4wqnIVTFmTFo/2k1KIvN47MerKJcDkmVjuighWTgUkySU2gN6/+:jyF/Ohdn41eFxS9MaK2zHzTgUu9sce
Malware Config
Signatures
-
Resource Forking 1 TTPs 18 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck Process not Found /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref Process not Found /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool Process not Found /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool Process not Found /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool Process not Found /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd Process not Found /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd Process not Found /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd Process not Found /System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings Process not Found /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd Process not Found /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool Process not Found /System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent Process not Found /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system Process not Found /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck Process not Found /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref Process not Found /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/HexagonStudioLauncherBeta.exe\""1⤵PID:457
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/HexagonStudioLauncherBeta.exe\""1⤵PID:457
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/HexagonStudioLauncherBeta.exe1⤵PID:457
-
/bin/zsh/bin/zsh -c /Users/run/HexagonStudioLauncherBeta.exe2⤵PID:459
-
-
/Users/run/HexagonStudioLauncherBeta.exe/Users/run/HexagonStudioLauncherBeta.exe2⤵PID:459
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:483
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:483
-
/usr/libexec/xpcproxyxpcproxy com.apple.systempreferences.21401⤵PID:487
-
/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"1⤵PID:487
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountProfileRemoteViewService 4871⤵PID:488
-
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService1⤵PID:488
-
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool1⤵PID:490
-
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool1⤵PID:491
-
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck1⤵PID:492
-
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref1⤵PID:493
-
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool1⤵PID:494
-
/usr/libexec/xpcproxyxpcproxy com.apple.nfcd1⤵PID:496
-
/usr/libexec/nfcd/usr/libexec/nfcd1⤵PID:496
-
/usr/libexec/xpcproxyxpcproxy com.apple.studentd1⤵PID:497
-
/usr/libexec/studentd/usr/libexec/studentd1⤵PID:497
-
/usr/libexec/xpcproxyxpcproxy com.apple.preference.screentime.remoteservice 4871⤵PID:498
-
/System/Library/PreferencePanes/ScreenTime.prefPane/Contents/XPCServices/com.apple.preference.screentime.remoteservice.xpc/Contents/MacOS/com.apple.preference.screentime.remoteservice/System/Library/PreferencePanes/ScreenTime.prefPane/Contents/XPCServices/com.apple.preference.screentime.remoteservice.xpc/Contents/MacOS/com.apple.preference.screentime.remoteservice1⤵PID:498
-
/usr/libexec/xpcproxyxpcproxy com.apple.metadata.mdwrite1⤵PID:499
-
/usr/libexec/xpcproxyxpcproxy com.apple.colorsync.useragent1⤵PID:500
-
/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent/System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent1⤵PID:500
-
/usr/libexec/xpcproxyxpcproxy com.apple.PerformanceAnalysis.animationperfd1⤵PID:503
-
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd1⤵PID:503
-
/usr/libexec/xpcproxyxpcproxy com.apple.systempreferences.21401⤵PID:506
-
/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"1⤵PID:506
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountProfileRemoteViewService 5061⤵PID:507
-
/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService/System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService1⤵PID:507
-
/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool/System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool1⤵PID:508
-
/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool/System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool1⤵PID:509
-
/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck/System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck1⤵PID:510
-
/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref/System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref1⤵PID:511
-
/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool/System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool1⤵PID:512
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:513
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:513
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportMemoryException1⤵PID:514
-
/usr/libexec/ReportMemoryException/usr/libexec/ReportMemoryException1⤵PID:514
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:517
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:517
-
/usr/libexec/xpcproxyxpcproxy com.apple.tailspind1⤵PID:518
-
/usr/libexec/tailspind/usr/libexec/tailspind1⤵PID:518
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump_agent1⤵PID:519
-
/usr/libexec/spindump_agent/usr/libexec/spindump_agent1⤵PID:519
-
/usr/libexec/xpcproxyxpcproxy com.apple.systemprofiler1⤵PID:520
-
/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information"/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information"1⤵PID:520
-
/usr/libexec/xpcproxyxpcproxy com.apple.replayd1⤵PID:523
-
/usr/libexec/replayd/usr/libexec/replayd1⤵PID:523
-
/usr/libexec/xpcproxyxpcproxy com.apple.installd1⤵PID:524
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd1⤵PID:524
-
/usr/libexec/xpcproxyxpcproxy com.apple.storedownloadd1⤵PID:528
-
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd1⤵PID:528
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.CacheDeleteExtension 5211⤵PID:529
-
/usr/libexec/xpcproxyxpcproxy com.apple.system_installd1⤵PID:530
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd1⤵PID:530
-
/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension1⤵PID:529
-
/usr/libexec/xpcproxyxpcproxy com.apple.preference.general.remoteservice 5061⤵PID:535
-
/System/Library/PreferencePanes/Appearance.prefPane/Contents/XPCServices/com.apple.preference.general.remoteservice.xpc/Contents/MacOS/com.apple.preference.general.remoteservice/System/Library/PreferencePanes/Appearance.prefPane/Contents/XPCServices/com.apple.preference.general.remoteservice.xpc/Contents/MacOS/com.apple.preference.general.remoteservice1⤵PID:535
-
/usr/libexec/xpcproxyxpcproxy com.apple.warmd_agent1⤵PID:536
-
/usr/libexec/warmd_agent/usr/libexec/warmd_agent1⤵PID:536
-
/usr/libexec/xpcproxyxpcproxy com.apple.studentd1⤵PID:537
-
/usr/libexec/xpcproxyxpcproxy com.apple.coremedia.videodecoder 1221⤵PID:538
-
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService1⤵PID:538
-
/usr/libexec/studentd/usr/libexec/studentd1⤵PID:537
-
/usr/libexec/xpcproxyxpcproxy com.apple.sessionlogoutd1⤵PID:539
-
/System/Library/CoreServices/sessionlogoutd/System/Library/CoreServices/sessionlogoutd1⤵PID:539
-
/usr/bin/sudo/usr/bin/sudo -k1⤵PID:540
-
/usr/libexec/xpcproxyxpcproxy com.apple.loginwindow.34879B9D-495F-4C58-9024-F7CCC7CF964F1⤵PID:541
-
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console1⤵PID:541
-
/usr/libexec/xpcproxyxpcproxy com.apple.imklaunchagent1⤵PID:542
-
/usr/libexec/xpcproxyxpcproxy com.apple.UserEventAgent-LoginWindow1⤵PID:543
-
/usr/libexec/xpcproxyxpcproxy com.apple.universalaccessd1⤵PID:544
-
/usr/sbin/universalaccessd/usr/sbin/universalaccessd launchd -s1⤵PID:544
-
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent1⤵PID:542
-
/usr/libexec/xpcproxyxpcproxy com.apple.pluginkit.pkd1⤵PID:545
-
/usr/libexec/pkd/usr/libexec/pkd1⤵PID:545
-
/usr/libexec/xpcproxyxpcproxy com.apple.ViewBridgeAuxiliary1⤵PID:546
-
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary1⤵PID:546
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.agent.login.00000000-0000-0000-0000-0000000186BE1⤵PID:547
-
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent1⤵PID:547
-
/usr/libexec/UserEventAgent/usr/libexec/UserEventAgent "(LoginWindow)"1⤵PID:543
-
/usr/libexec/xpcproxyxpcproxy com.apple.coremedia.videodecoder 5471⤵PID:551
-
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService1⤵PID:551
-
/usr/libexec/xpcproxyxpcproxy com.apple.CryptoTokenKit.ahp.agent1⤵PID:552
-
/usr/libexec/xpcproxyxpcproxy com.apple.xpc.launchd.oneshot.0x10000001.activateSettings1⤵PID:553
-
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp1⤵PID:552
-
/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings/System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings1⤵PID:553
-
/usr/libexec/xpcproxyxpcproxy com.apple.AmbientDisplayAgent1⤵PID:554
-
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent1⤵PID:554
-
/usr/libexec/xpcproxyxpcproxy com.apple.ctkd1⤵PID:555
-
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw1⤵PID:555
-
/usr/libexec/xpcproxyxpcproxy com.apple.CryptoTokenKit.setoken 5551⤵PID:557
-
/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken1⤵PID:557
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobileassetd1⤵PID:563
-
/usr/libexec/mobileassetd/usr/libexec/mobileassetd1⤵PID:563
-
/usr/libexec/xpcproxyxpcproxy com.apple.usbmuxd1⤵PID:564
-
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd1⤵PID:564
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobile.keybagd1⤵PID:565
-
/usr/libexec/keybagd/usr/libexec/keybagd -t 151⤵PID:565
-
/usr/libexec/xpcproxyxpcproxy com.apple.ViewBridgeAuxiliary1⤵PID:566
-
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary1⤵PID:566
-
/usr/libexec/xpcproxyxpcproxy com.apple.CodeSigningHelper1⤵PID:567
-
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper1⤵PID:567
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobileassetd1⤵PID:568
-
/usr/libexec/mobileassetd/usr/libexec/mobileassetd1⤵PID:568
-
/usr/libexec/xpcproxyxpcproxy com.apple.mobile.keybagd1⤵PID:569
-
/usr/libexec/keybagd/usr/libexec/keybagd -t 151⤵PID:569
-
/usr/libexec/xpcproxyxpcproxy com.apple.ViewBridgeAuxiliary1⤵PID:570
-
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary1⤵PID:570
-
/usr/libexec/xpcproxyxpcproxy com.apple.trustd1⤵PID:571
-
/usr/libexec/xpcproxyxpcproxy com.apple.CodeSigningHelper1⤵PID:572
-
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper1⤵PID:572
-
/usr/libexec/xpcproxyxpcproxy com.apple.tccd.system1⤵PID:573
-
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system1⤵PID:573
-
/usr/libexec/xpcproxyxpcproxy com.apple.sandboxd1⤵PID:574
-
/usr/libexec/sandboxd/usr/libexec/sandboxd1⤵PID:574
-
/usr/libexec/xpcproxyxpcproxy com.apple.AccountPolicyHelper1⤵PID:575
-
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper1⤵PID:575
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.authhost.00000000-0000-0000-0000-0000000186BE1⤵PID:576
-
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost1⤵PID:576
-
/usr/libexec/xpcproxyxpcproxy com.apple.Kerberos.kcm1⤵PID:578
-
/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm --launchd1⤵PID:578
-
/usr/libexec/xpcproxyxpcproxy com.apple.GSSCred1⤵PID:579
-
/System/Library/Frameworks/GSS.framework/Helpers/GSSCred/System/Library/Frameworks/GSS.framework/Helpers/GSSCred1⤵PID:579
-
/usr/libexec/xpcproxyxpcproxy com.apple.iconservices.iconservicesagent1⤵PID:580
-
/System/Library/CoreServices/iconservicesagent/System/Library/CoreServices/iconservicesagent runAsRoot1⤵PID:580
-
/usr/libexec/xpcproxyxpcproxy com.apple.iconservices.iconservicesd1⤵PID:581
-
/System/Library/CoreServices/iconservicesd/System/Library/CoreServices/iconservicesd1⤵PID:581
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.systemsoundserverd1⤵PID:582
-
/usr/sbin/systemsoundserverd/usr/sbin/systemsoundserverd1⤵PID:582
-
/usr/libexec/xpcproxyxpcproxy com.apple.audio.AudioComponentRegistrar1⤵PID:583
-
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon1⤵PID:583
-
/usr/libexec/xpcproxyxpcproxy com.apple.akd1⤵PID:586
-
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd1⤵PID:586
-
/usr/libexec/xpcproxyxpcproxy com.apple.adid1⤵PID:587
-
/System/Library/PrivateFrameworks/CoreADI.framework/adid/System/Library/PrivateFrameworks/CoreADI.framework/adid1⤵PID:587
-
/usr/libexec/xpcproxyxpcproxy com.apple.storagekitd1⤵PID:588
-
/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd1⤵PID:588
-
/usr/libexec/xpcproxyxpcproxy com.apple.sysmond1⤵PID:597
-
/usr/libexec/sysmond/usr/libexec/sysmond1⤵PID:597
-
/usr/libexec/xpcproxyxpcproxy com.apple.newsyslog1⤵PID:600
-
/usr/sbin/newsyslog/usr/sbin/newsyslog1⤵PID:600
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:651
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:651
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:652
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:652
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.9MB
MD59daeeded074bd8e6d5f245f74963905b
SHA1c3cd1d956fcb60710ba9b1dfd5287f7b19c0200a
SHA25662ac30afbddf65c23729a5bdc61aacd4b952abb4dd5776c1620b68761eacebd2
SHA512f984df93ffdb4003605577a58361dbc0510bc1579187698ac454bc7793a0c64ddab7c90a8c44008c4767e141c2cbffe24f9321e422ee2d3b904031d54a03ec08
-
Filesize
288KB
MD5ce9032fc27dc24f38c40c4116b2aec09
SHA1617bf0e6e5838af3740393cedbf38307b7248371
SHA2567bff5dd79349e4e42419a9f1720119cc19767df0ec1bedd6fada6a28a8be3749
SHA512a1883e330fd3483da59388e16da1f392af2174170700093f213a1b218f3d04ae9b1d3f6d3bc9ebeb69324440de414f7a92b92739e98e5880f3b7b078b9676af1
-
Filesize
1KB
MD5610c3108e1c8c60fe8c8fccbba2d3eac
SHA1e387fb72554ae92735dd72b52fdbec1885fb7723
SHA25678d76d85c0e7ddc1c841dd49a1fca1fbcd774a5604fb035fb29ed8a62be29f65
SHA512d4c05d57616c1147ec408d0f8d4a567bdfa24d9f525ab01e51d14d1b282537a59510d3d0462d2c9e85f8d3d5e9e299b3ba824747e56474a27b99541870b5176c
-
Filesize
3KB
MD5681deeb3ba27fd1a6107e6b459391fb6
SHA1d4fab7ce6d240eeb949566173a3379e635664896
SHA2566eef270e095020e9b82ffe4ccb1a4058b90c6b1dc5d4fe3b6cdb507688f476ef
SHA5127ecda7776777ec26d60ab767571b8fe27ac9afb000788bc27969ef7cd899de4d1d7c62273fd56a9c4d3e6841be4780611e1bcf925ab7636edced0a090e0d1887
-
Filesize
3KB
MD54c8c772f694d07e6fe83a94a4b823e45
SHA1c7683aa396d83d2c88d5ab882c5928835adbb63f
SHA256ec5a9e49c932a62e378136184d226adcb42d4f2a3dcf49869f7a2abdb9fb65cf
SHA512591a15f725acfffd89c6d11fdc12816197fba5bbb534a4386a28c8a46d0bb5dfc79381c91a25a4461a92bd88d9830c9b8a42d46518795aa405f5cef9e2cffb73
-
Filesize
1KB
MD517ca5d51bc8a4ad7c7e806d79497ec3c
SHA11718c0c3457cec9ba486adc77c858c44abacd9a3
SHA25676807584791a0c2acf09ce001dc4e7e50d82480d0607994d11c6d9b8d8824877
SHA512c4f605e6717e12ae0e929f4b5ed5c2b69f6985827b1372823321b627fc891dd31b6c3220231b9ee80ddb35b5fdb9ed0e486b33861b37b784c8801abaea5dc4ed
-
Filesize
54KB
MD564f469698e53d0c828b7f90acd306082
SHA1bcc041b3849e1b0b4104ffeb46002207eeac54f3
SHA256d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd
SHA512a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f
-
Filesize
47KB
MD50e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA5121dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
-
Filesize
4KB
MD5d3a1859e6ec593505cc882e6def48fc8
SHA1f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA2563ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
-
Filesize
21KB
MD597ee9988c81b0d2ab74b6b2a425e24d3
SHA1a4edfc3533b590720f6e1b53ca134ba6dc8234e3
SHA256b608f0a095c27af19f4c32ea774e7f598b231497316f939c1dcc3c326ae94c53
SHA5121d4c527bf57a3dfc35382be197e734175cfe88e7fb40f03d4142e4e8c4d9c2a2c419f2692b8b3b31dad3116e46b054f9c9d7ece103bcd1f377238221a39d58b9