Analysis

  • max time kernel
    892s
  • max time network
    898s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 08:24

General

  • Target

    HexagonStudioLauncherBeta.exe

  • Size

    1.0MB

  • MD5

    e04e8381257f94d1b07bfee6d69d3902

  • SHA1

    1e2ca349a353b5b66b1803a39d03992f54b65bec

  • SHA256

    a2d17b944f12efe2bd3502b978c1e9ece10cb8f648e091da43dc4d1855e102bf

  • SHA512

    f4b816e393d9fc5e9e4633a403bcb570c3c3dea615f1a450288010dc294487aabd2e711a71d6e00b74bb7f1df0bcbf2b9bad0f6a49a8053ab4e59c57e9d3097d

  • SSDEEP

    12288:Zl2HSe/Of5dYu4wqnIVTFmTFo/2k1KIvN47MerKJcDkmVjuighWTgUkySU2gN6/+:jyF/Ohdn41eFxS9MaK2zHzTgUu9sce

Score
4/10

Malware Config

Signatures

  • Resource Forking 1 TTPs 18 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/HexagonStudioLauncherBeta.exe\""
    1⤵
      PID:457
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/HexagonStudioLauncherBeta.exe\""
      1⤵
        PID:457
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/HexagonStudioLauncherBeta.exe
        1⤵
          PID:457
          • /bin/zsh
            /bin/zsh -c /Users/run/HexagonStudioLauncherBeta.exe
            2⤵
              PID:459
            • /Users/run/HexagonStudioLauncherBeta.exe
              /Users/run/HexagonStudioLauncherBeta.exe
              2⤵
                PID:459
            • /usr/libexec/xpcproxy
              xpcproxy com.apple.audio.AudioComponentRegistrar
              1⤵
                PID:483
              • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                1⤵
                  PID:483
                • /usr/libexec/xpcproxy
                  xpcproxy com.apple.systempreferences.2140
                  1⤵
                    PID:487
                  • /System/Applications/System Preferences.app/Contents/MacOS/System Preferences
                    "/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
                    1⤵
                      PID:487
                    • /usr/libexec/xpcproxy
                      xpcproxy com.apple.AccountProfileRemoteViewService 487
                      1⤵
                        PID:488
                      • /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
                        /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
                        1⤵
                          PID:488
                        • /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
                          /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
                          1⤵
                            PID:490
                          • /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
                            /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
                            1⤵
                              PID:491
                            • /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
                              /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
                              1⤵
                                PID:492
                              • /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
                                /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
                                1⤵
                                  PID:493
                                • /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
                                  /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
                                  1⤵
                                    PID:494
                                  • /usr/libexec/xpcproxy
                                    xpcproxy com.apple.nfcd
                                    1⤵
                                      PID:496
                                    • /usr/libexec/nfcd
                                      /usr/libexec/nfcd
                                      1⤵
                                        PID:496
                                      • /usr/libexec/xpcproxy
                                        xpcproxy com.apple.studentd
                                        1⤵
                                          PID:497
                                        • /usr/libexec/studentd
                                          /usr/libexec/studentd
                                          1⤵
                                            PID:497
                                          • /usr/libexec/xpcproxy
                                            xpcproxy com.apple.preference.screentime.remoteservice 487
                                            1⤵
                                              PID:498
                                            • /System/Library/PreferencePanes/ScreenTime.prefPane/Contents/XPCServices/com.apple.preference.screentime.remoteservice.xpc/Contents/MacOS/com.apple.preference.screentime.remoteservice
                                              /System/Library/PreferencePanes/ScreenTime.prefPane/Contents/XPCServices/com.apple.preference.screentime.remoteservice.xpc/Contents/MacOS/com.apple.preference.screentime.remoteservice
                                              1⤵
                                                PID:498
                                              • /usr/libexec/xpcproxy
                                                xpcproxy com.apple.metadata.mdwrite
                                                1⤵
                                                  PID:499
                                                • /usr/libexec/xpcproxy
                                                  xpcproxy com.apple.colorsync.useragent
                                                  1⤵
                                                    PID:500
                                                  • /System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
                                                    /System/Library/Frameworks/ColorSync.framework/Support/colorsync.useragent
                                                    1⤵
                                                      PID:500
                                                    • /usr/libexec/xpcproxy
                                                      xpcproxy com.apple.PerformanceAnalysis.animationperfd
                                                      1⤵
                                                        PID:503
                                                      • /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                                                        /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
                                                        1⤵
                                                          PID:503
                                                        • /usr/libexec/xpcproxy
                                                          xpcproxy com.apple.systempreferences.2140
                                                          1⤵
                                                            PID:506
                                                          • /System/Applications/System Preferences.app/Contents/MacOS/System Preferences
                                                            "/System/Applications/System Preferences.app/Contents/MacOS/System Preferences"
                                                            1⤵
                                                              PID:506
                                                            • /usr/libexec/xpcproxy
                                                              xpcproxy com.apple.AccountProfileRemoteViewService 506
                                                              1⤵
                                                                PID:507
                                                              • /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
                                                                /System/Library/PrivateFrameworks/AOSUI.framework/Versions/A/XPCServices/AccountProfileRemoteViewService.xpc/Contents/MacOS/AccountProfileRemoteViewService
                                                                1⤵
                                                                  PID:507
                                                                • /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
                                                                  /System/Library/PreferencePanes/ClassroomSettings.prefPane/Contents/Resources/ClassroomSettingsVisibilityCheckTool
                                                                  1⤵
                                                                    PID:508
                                                                  • /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
                                                                    /System/Library/PreferencePanes/Profiles.prefPane/Contents/Resources/CPPrefPaneEnabledTool
                                                                    1⤵
                                                                      PID:509
                                                                    • /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
                                                                      /System/Library/PreferencePanes/Sidecar.prefPane/Contents/Resources/sidecarPrefCheck
                                                                      1⤵
                                                                        PID:510
                                                                      • /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
                                                                        /System/Library/PreferencePanes/TouchID.prefPane/Contents/Resources/AllowPasswordPref
                                                                        1⤵
                                                                          PID:511
                                                                        • /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
                                                                          /System/Library/PreferencePanes/Wallet.prefPane/Contents/Resources/walletAvailabilityCheckTool
                                                                          1⤵
                                                                            PID:512
                                                                          • /usr/libexec/xpcproxy
                                                                            xpcproxy com.apple.nsurlstoraged
                                                                            1⤵
                                                                              PID:513
                                                                            • /usr/libexec/nsurlstoraged
                                                                              /usr/libexec/nsurlstoraged --privileged
                                                                              1⤵
                                                                                PID:513
                                                                              • /usr/libexec/xpcproxy
                                                                                xpcproxy com.apple.ReportMemoryException
                                                                                1⤵
                                                                                  PID:514
                                                                                • /usr/libexec/ReportMemoryException
                                                                                  /usr/libexec/ReportMemoryException
                                                                                  1⤵
                                                                                    PID:514
                                                                                  • /usr/libexec/xpcproxy
                                                                                    xpcproxy com.apple.spindump
                                                                                    1⤵
                                                                                      PID:517
                                                                                    • /usr/sbin/spindump
                                                                                      /usr/sbin/spindump
                                                                                      1⤵
                                                                                        PID:517
                                                                                      • /usr/libexec/xpcproxy
                                                                                        xpcproxy com.apple.tailspind
                                                                                        1⤵
                                                                                          PID:518
                                                                                        • /usr/libexec/tailspind
                                                                                          /usr/libexec/tailspind
                                                                                          1⤵
                                                                                            PID:518
                                                                                          • /usr/libexec/xpcproxy
                                                                                            xpcproxy com.apple.spindump_agent
                                                                                            1⤵
                                                                                              PID:519
                                                                                            • /usr/libexec/spindump_agent
                                                                                              /usr/libexec/spindump_agent
                                                                                              1⤵
                                                                                                PID:519
                                                                                              • /usr/libexec/xpcproxy
                                                                                                xpcproxy com.apple.systemprofiler
                                                                                                1⤵
                                                                                                  PID:520
                                                                                                • /System/Applications/Utilities/System Information.app/Contents/MacOS/System Information
                                                                                                  "/System/Applications/Utilities/System Information.app/Contents/MacOS/System Information"
                                                                                                  1⤵
                                                                                                    PID:520
                                                                                                  • /usr/libexec/xpcproxy
                                                                                                    xpcproxy com.apple.replayd
                                                                                                    1⤵
                                                                                                      PID:523
                                                                                                    • /usr/libexec/replayd
                                                                                                      /usr/libexec/replayd
                                                                                                      1⤵
                                                                                                        PID:523
                                                                                                      • /usr/libexec/xpcproxy
                                                                                                        xpcproxy com.apple.installd
                                                                                                        1⤵
                                                                                                          PID:524
                                                                                                        • /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
                                                                                                          /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
                                                                                                          1⤵
                                                                                                            PID:524
                                                                                                          • /usr/libexec/xpcproxy
                                                                                                            xpcproxy com.apple.storedownloadd
                                                                                                            1⤵
                                                                                                              PID:528
                                                                                                            • /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
                                                                                                              /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
                                                                                                              1⤵
                                                                                                                PID:528
                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                xpcproxy com.apple.Safari.CacheDeleteExtension 521
                                                                                                                1⤵
                                                                                                                  PID:529
                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                  xpcproxy com.apple.system_installd
                                                                                                                  1⤵
                                                                                                                    PID:530
                                                                                                                  • /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
                                                                                                                    /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
                                                                                                                    1⤵
                                                                                                                      PID:530
                                                                                                                    • /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
                                                                                                                      /Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension
                                                                                                                      1⤵
                                                                                                                        PID:529
                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                        xpcproxy com.apple.preference.general.remoteservice 506
                                                                                                                        1⤵
                                                                                                                          PID:535
                                                                                                                        • /System/Library/PreferencePanes/Appearance.prefPane/Contents/XPCServices/com.apple.preference.general.remoteservice.xpc/Contents/MacOS/com.apple.preference.general.remoteservice
                                                                                                                          /System/Library/PreferencePanes/Appearance.prefPane/Contents/XPCServices/com.apple.preference.general.remoteservice.xpc/Contents/MacOS/com.apple.preference.general.remoteservice
                                                                                                                          1⤵
                                                                                                                            PID:535
                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                            xpcproxy com.apple.warmd_agent
                                                                                                                            1⤵
                                                                                                                              PID:536
                                                                                                                            • /usr/libexec/warmd_agent
                                                                                                                              /usr/libexec/warmd_agent
                                                                                                                              1⤵
                                                                                                                                PID:536
                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                xpcproxy com.apple.studentd
                                                                                                                                1⤵
                                                                                                                                  PID:537
                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                  xpcproxy com.apple.coremedia.videodecoder 122
                                                                                                                                  1⤵
                                                                                                                                    PID:538
                                                                                                                                  • /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
                                                                                                                                    /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
                                                                                                                                    1⤵
                                                                                                                                      PID:538
                                                                                                                                    • /usr/libexec/studentd
                                                                                                                                      /usr/libexec/studentd
                                                                                                                                      1⤵
                                                                                                                                        PID:537
                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                        xpcproxy com.apple.sessionlogoutd
                                                                                                                                        1⤵
                                                                                                                                          PID:539
                                                                                                                                        • /System/Library/CoreServices/sessionlogoutd
                                                                                                                                          /System/Library/CoreServices/sessionlogoutd
                                                                                                                                          1⤵
                                                                                                                                            PID:539
                                                                                                                                          • /usr/bin/sudo
                                                                                                                                            /usr/bin/sudo -k
                                                                                                                                            1⤵
                                                                                                                                              PID:540
                                                                                                                                            • /usr/libexec/xpcproxy
                                                                                                                                              xpcproxy com.apple.loginwindow.34879B9D-495F-4C58-9024-F7CCC7CF964F
                                                                                                                                              1⤵
                                                                                                                                                PID:541
                                                                                                                                              • /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow
                                                                                                                                                /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
                                                                                                                                                1⤵
                                                                                                                                                  PID:541
                                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                                  xpcproxy com.apple.imklaunchagent
                                                                                                                                                  1⤵
                                                                                                                                                    PID:542
                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                    xpcproxy com.apple.UserEventAgent-LoginWindow
                                                                                                                                                    1⤵
                                                                                                                                                      PID:543
                                                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                                                      xpcproxy com.apple.universalaccessd
                                                                                                                                                      1⤵
                                                                                                                                                        PID:544
                                                                                                                                                      • /usr/sbin/universalaccessd
                                                                                                                                                        /usr/sbin/universalaccessd launchd -s
                                                                                                                                                        1⤵
                                                                                                                                                          PID:544
                                                                                                                                                        • /System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
                                                                                                                                                          /System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
                                                                                                                                                          1⤵
                                                                                                                                                            PID:542
                                                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                                                            xpcproxy com.apple.pluginkit.pkd
                                                                                                                                                            1⤵
                                                                                                                                                              PID:545
                                                                                                                                                            • /usr/libexec/pkd
                                                                                                                                                              /usr/libexec/pkd
                                                                                                                                                              1⤵
                                                                                                                                                                PID:545
                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                xpcproxy com.apple.ViewBridgeAuxiliary
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:546
                                                                                                                                                                • /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                  /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:546
                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                    xpcproxy com.apple.security.agent.login.00000000-0000-0000-0000-0000000186BE
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:547
                                                                                                                                                                    • /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
                                                                                                                                                                      /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:547
                                                                                                                                                                      • /usr/libexec/UserEventAgent
                                                                                                                                                                        /usr/libexec/UserEventAgent "(LoginWindow)"
                                                                                                                                                                        1⤵
                                                                                                                                                                          PID:543
                                                                                                                                                                        • /usr/libexec/xpcproxy
                                                                                                                                                                          xpcproxy com.apple.coremedia.videodecoder 547
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:551
                                                                                                                                                                          • /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
                                                                                                                                                                            /System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
                                                                                                                                                                            1⤵
                                                                                                                                                                              PID:551
                                                                                                                                                                            • /usr/libexec/xpcproxy
                                                                                                                                                                              xpcproxy com.apple.CryptoTokenKit.ahp.agent
                                                                                                                                                                              1⤵
                                                                                                                                                                                PID:552
                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                xpcproxy com.apple.xpc.launchd.oneshot.0x10000001.activateSettings
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:553
                                                                                                                                                                                • /System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
                                                                                                                                                                                  /System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
                                                                                                                                                                                  1⤵
                                                                                                                                                                                    PID:552
                                                                                                                                                                                  • /System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings
                                                                                                                                                                                    /System/Library/PrivateFrameworks/SystemAdministration.framework/Resources/activateSettings
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:553
                                                                                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                                                                                      xpcproxy com.apple.AmbientDisplayAgent
                                                                                                                                                                                      1⤵
                                                                                                                                                                                        PID:554
                                                                                                                                                                                      • /System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
                                                                                                                                                                                        /System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
                                                                                                                                                                                        1⤵
                                                                                                                                                                                          PID:554
                                                                                                                                                                                        • /usr/libexec/xpcproxy
                                                                                                                                                                                          xpcproxy com.apple.ctkd
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:555
                                                                                                                                                                                          • /System/Library/Frameworks/CryptoTokenKit.framework/ctkd
                                                                                                                                                                                            /System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
                                                                                                                                                                                            1⤵
                                                                                                                                                                                              PID:555
                                                                                                                                                                                            • /usr/libexec/xpcproxy
                                                                                                                                                                                              xpcproxy com.apple.CryptoTokenKit.setoken 555
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:557
                                                                                                                                                                                              • /System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken
                                                                                                                                                                                                /System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                  PID:557
                                                                                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                                                                                  xpcproxy com.apple.mobileassetd
                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                    PID:563
                                                                                                                                                                                                  • /usr/libexec/mobileassetd
                                                                                                                                                                                                    /usr/libexec/mobileassetd
                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                      PID:563
                                                                                                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                                                                                                      xpcproxy com.apple.usbmuxd
                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                        PID:564
                                                                                                                                                                                                      • /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd
                                                                                                                                                                                                        /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                          PID:564
                                                                                                                                                                                                        • /usr/libexec/xpcproxy
                                                                                                                                                                                                          xpcproxy com.apple.mobile.keybagd
                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                            PID:565
                                                                                                                                                                                                          • /usr/libexec/keybagd
                                                                                                                                                                                                            /usr/libexec/keybagd -t 15
                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                              PID:565
                                                                                                                                                                                                            • /usr/libexec/xpcproxy
                                                                                                                                                                                                              xpcproxy com.apple.ViewBridgeAuxiliary
                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                PID:566
                                                                                                                                                                                                              • /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                                                                /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                  PID:566
                                                                                                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                                                                                                  xpcproxy com.apple.CodeSigningHelper
                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                    PID:567
                                                                                                                                                                                                                  • /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
                                                                                                                                                                                                                    /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                      PID:567
                                                                                                                                                                                                                    • /usr/libexec/xpcproxy
                                                                                                                                                                                                                      xpcproxy com.apple.mobileassetd
                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                        PID:568
                                                                                                                                                                                                                      • /usr/libexec/mobileassetd
                                                                                                                                                                                                                        /usr/libexec/mobileassetd
                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                          PID:568
                                                                                                                                                                                                                        • /usr/libexec/xpcproxy
                                                                                                                                                                                                                          xpcproxy com.apple.mobile.keybagd
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                            PID:569
                                                                                                                                                                                                                          • /usr/libexec/keybagd
                                                                                                                                                                                                                            /usr/libexec/keybagd -t 15
                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                              PID:569
                                                                                                                                                                                                                            • /usr/libexec/xpcproxy
                                                                                                                                                                                                                              xpcproxy com.apple.ViewBridgeAuxiliary
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                PID:570
                                                                                                                                                                                                                              • /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                                                                                /System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                  PID:570
                                                                                                                                                                                                                                • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                  xpcproxy com.apple.trustd
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                    PID:571
                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                    xpcproxy com.apple.CodeSigningHelper
                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                      PID:572
                                                                                                                                                                                                                                    • /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
                                                                                                                                                                                                                                      /System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:572
                                                                                                                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                        xpcproxy com.apple.tccd.system
                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                          PID:573
                                                                                                                                                                                                                                        • /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
                                                                                                                                                                                                                                          /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                            PID:573
                                                                                                                                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                            xpcproxy com.apple.sandboxd
                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                              PID:574
                                                                                                                                                                                                                                            • /usr/libexec/sandboxd
                                                                                                                                                                                                                                              /usr/libexec/sandboxd
                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                PID:574
                                                                                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                xpcproxy com.apple.AccountPolicyHelper
                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                  PID:575
                                                                                                                                                                                                                                                • /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
                                                                                                                                                                                                                                                  /System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:575
                                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                    xpcproxy com.apple.security.authhost.00000000-0000-0000-0000-0000000186BE
                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                      PID:576
                                                                                                                                                                                                                                                    • /System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
                                                                                                                                                                                                                                                      /System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost
                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                        PID:576
                                                                                                                                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                        xpcproxy com.apple.Kerberos.kcm
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:578
                                                                                                                                                                                                                                                        • /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm
                                                                                                                                                                                                                                                          /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm --launchd
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:578
                                                                                                                                                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                            xpcproxy com.apple.GSSCred
                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                              PID:579
                                                                                                                                                                                                                                                            • /System/Library/Frameworks/GSS.framework/Helpers/GSSCred
                                                                                                                                                                                                                                                              /System/Library/Frameworks/GSS.framework/Helpers/GSSCred
                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                PID:579
                                                                                                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                xpcproxy com.apple.iconservices.iconservicesagent
                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                  PID:580
                                                                                                                                                                                                                                                                • /System/Library/CoreServices/iconservicesagent
                                                                                                                                                                                                                                                                  /System/Library/CoreServices/iconservicesagent runAsRoot
                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                    PID:580
                                                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                    xpcproxy com.apple.iconservices.iconservicesd
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                      PID:581
                                                                                                                                                                                                                                                                    • /System/Library/CoreServices/iconservicesd
                                                                                                                                                                                                                                                                      /System/Library/CoreServices/iconservicesd
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                        PID:581
                                                                                                                                                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                        xpcproxy com.apple.audio.systemsoundserverd
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                          PID:582
                                                                                                                                                                                                                                                                        • /usr/sbin/systemsoundserverd
                                                                                                                                                                                                                                                                          /usr/sbin/systemsoundserverd
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                            PID:582
                                                                                                                                                                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                            xpcproxy com.apple.audio.AudioComponentRegistrar
                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                              PID:583
                                                                                                                                                                                                                                                                            • /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
                                                                                                                                                                                                                                                                              /System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                PID:583
                                                                                                                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                xpcproxy com.apple.akd
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                  PID:586
                                                                                                                                                                                                                                                                                • /System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
                                                                                                                                                                                                                                                                                  /System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                    PID:586
                                                                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                    xpcproxy com.apple.adid
                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                      PID:587
                                                                                                                                                                                                                                                                                    • /System/Library/PrivateFrameworks/CoreADI.framework/adid
                                                                                                                                                                                                                                                                                      /System/Library/PrivateFrameworks/CoreADI.framework/adid
                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                        PID:587
                                                                                                                                                                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                        xpcproxy com.apple.storagekitd
                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                          PID:588
                                                                                                                                                                                                                                                                                        • /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
                                                                                                                                                                                                                                                                                          /System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                            PID:588
                                                                                                                                                                                                                                                                                          • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                            xpcproxy com.apple.sysmond
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                              PID:597
                                                                                                                                                                                                                                                                                            • /usr/libexec/sysmond
                                                                                                                                                                                                                                                                                              /usr/libexec/sysmond
                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                PID:597
                                                                                                                                                                                                                                                                                              • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                                xpcproxy com.apple.newsyslog
                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                  PID:600
                                                                                                                                                                                                                                                                                                • /usr/sbin/newsyslog
                                                                                                                                                                                                                                                                                                  /usr/sbin/newsyslog
                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                    PID:600
                                                                                                                                                                                                                                                                                                  • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                                    xpcproxy com.apple.spindump
                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                      PID:651
                                                                                                                                                                                                                                                                                                    • /usr/sbin/spindump
                                                                                                                                                                                                                                                                                                      /usr/sbin/spindump
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                        PID:651
                                                                                                                                                                                                                                                                                                      • /usr/libexec/xpcproxy
                                                                                                                                                                                                                                                                                                        xpcproxy com.apple.diagnosticd
                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                          PID:652
                                                                                                                                                                                                                                                                                                        • /usr/libexec/diagnosticd
                                                                                                                                                                                                                                                                                                          /usr/libexec/diagnosticd
                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                            PID:652

                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                                          Replay Monitor

                                                                                                                                                                                                                                                                                                          Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                          Downloads

                                                                                                                                                                                                                                                                                                          • /Library/Keychains/crls//update-current

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            10.9MB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            9daeeded074bd8e6d5f245f74963905b

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            c3cd1d956fcb60710ba9b1dfd5287f7b19c0200a

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            62ac30afbddf65c23729a5bdc61aacd4b952abb4dd5776c1620b68761eacebd2

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            f984df93ffdb4003605577a58361dbc0510bc1579187698ac454bc7793a0c64ddab7c90a8c44008c4767e141c2cbffe24f9321e422ee2d3b904031d54a03ec08

                                                                                                                                                                                                                                                                                                          • /Users/run/Library/Caches/com.apple.systempreferences.imageCache

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            288KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            ce9032fc27dc24f38c40c4116b2aec09

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            617bf0e6e5838af3740393cedbf38307b7248371

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            7bff5dd79349e4e42419a9f1720119cc19767df0ec1bedd6fada6a28a8be3749

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            a1883e330fd3483da59388e16da1f392af2174170700093f213a1b218f3d04ae9b1d3f6d3bc9ebeb69324440de414f7a92b92739e98e5880f3b7b078b9676af1

                                                                                                                                                                                                                                                                                                          • /Users/run/Library/Saved Application State/com.apple.systempreferences.savedState/data.data

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            610c3108e1c8c60fe8c8fccbba2d3eac

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            e387fb72554ae92735dd72b52fdbec1885fb7723

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            78d76d85c0e7ddc1c841dd49a1fca1fbcd774a5604fb035fb29ed8a62be29f65

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            d4c05d57616c1147ec408d0f8d4a567bdfa24d9f525ab01e51d14d1b282537a59510d3d0462d2c9e85f8d3d5e9e299b3ba824747e56474a27b99541870b5176c

                                                                                                                                                                                                                                                                                                          • /Users/run/Library/Saved Application State/com.apple.systempreferences.savedState/data.data

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            3KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            681deeb3ba27fd1a6107e6b459391fb6

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            d4fab7ce6d240eeb949566173a3379e635664896

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            6eef270e095020e9b82ffe4ccb1a4058b90c6b1dc5d4fe3b6cdb507688f476ef

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            7ecda7776777ec26d60ab767571b8fe27ac9afb000788bc27969ef7cd899de4d1d7c62273fd56a9c4d3e6841be4780611e1bcf925ab7636edced0a090e0d1887

                                                                                                                                                                                                                                                                                                          • /private/var/db//keybags/persona.kb

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            3KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            4c8c772f694d07e6fe83a94a4b823e45

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            c7683aa396d83d2c88d5ab882c5928835adbb63f

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            ec5a9e49c932a62e378136184d226adcb42d4f2a3dcf49869f7a2abdb9fb65cf

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            591a15f725acfffd89c6d11fdc12816197fba5bbb534a4386a28c8a46d0bb5dfc79381c91a25a4461a92bd88d9830c9b8a42d46518795aa405f5cef9e2cffb73

                                                                                                                                                                                                                                                                                                          • /var/db/fpsd/adi/adi.pb

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            1KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            17ca5d51bc8a4ad7c7e806d79497ec3c

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            1718c0c3457cec9ba486adc77c858c44abacd9a3

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            76807584791a0c2acf09ce001dc4e7e50d82480d0607994d11c6d9b8d8824877

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            c4f605e6717e12ae0e929f4b5ed5c2b69f6985827b1372823321b627fc891dd31b6c3220231b9ee80ddb35b5fdb9ed0e486b33861b37b784c8801abaea5dc4ed

                                                                                                                                                                                                                                                                                                          • /var/db/nsurlstoraged/dafsaData.bin

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            54KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            64f469698e53d0c828b7f90acd306082

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            bcc041b3849e1b0b4104ffeb46002207eeac54f3

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f

                                                                                                                                                                                                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            47KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            0e4a0d1ceb2af6f0f8d0167ce77be2d3

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            414ba4c1dc5fc8bf53d550e296fd6f5ad669918c

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

                                                                                                                                                                                                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            4KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            d3a1859e6ec593505cc882e6def48fc8

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            f8e6728e3e9de477a75706faa95cead9ce13cb32

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

                                                                                                                                                                                                                                                                                                          • /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/com.apple.colorsync.profiles.502

                                                                                                                                                                                                                                                                                                            Filesize

                                                                                                                                                                                                                                                                                                            21KB

                                                                                                                                                                                                                                                                                                            MD5

                                                                                                                                                                                                                                                                                                            97ee9988c81b0d2ab74b6b2a425e24d3

                                                                                                                                                                                                                                                                                                            SHA1

                                                                                                                                                                                                                                                                                                            a4edfc3533b590720f6e1b53ca134ba6dc8234e3

                                                                                                                                                                                                                                                                                                            SHA256

                                                                                                                                                                                                                                                                                                            b608f0a095c27af19f4c32ea774e7f598b231497316f939c1dcc3c326ae94c53

                                                                                                                                                                                                                                                                                                            SHA512

                                                                                                                                                                                                                                                                                                            1d4c527bf57a3dfc35382be197e734175cfe88e7fb40f03d4142e4e8c4d9c2a2c419f2692b8b3b31dad3116e46b054f9c9d7ece103bcd1f377238221a39d58b9