c40b99ed1375f223714bdce1a1cc346922180dc99287ab99c061439f7ddaa4d6

Analysis

user interaction
yes
max time kernel
300s
max time network
262s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
28/04/2026, 01:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KeychainCheck2.app.zip
Size 6.0MB
Sample260428-bllccsft3q
SHA256 c40b99ed1375f223714bdce1a1cc346922180dc99287ab99c061439f7ddaa4d6
MD5 a4803bdf228ddc7e77bc1facac8db2cc
SHA1 2c5e44402810ad9a97408c0b346f406e3ff14c45
SHA512 d12dbd70b2e0094df77df5937a7d9d728a688a9f47995d6713350e0ec28a32370fc85c015c2fd9a9ded0f47209edb68d697d527a823f7105e75b49c0a9c3ef18
SSDEEP 98304:JOJmzina2of6amRoO2l6ZP64PUKtdbCDFw6kPWf9DauY1hDXP/g:wfa2+6amR2l6VG9DauUhDXHg
TLSH
T17D5633F989BAAB3BD0F0973D01DBD1612820296C95F5E45D23D480AD5CFBBD86052ACF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/KeychainCheck2.app.zip\""
1⤵
PID:485

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/KeychainCheck2.app.zip\""
1⤵
PID:485

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/KeychainCheck2.app.zip
1⤵
PID:485
- /bin/zsh
  /bin/zsh -c /Users/run/KeychainCheck2.app.zip
  2⤵
  PID:488
- /Users/run/KeychainCheck2.app.zip
  /Users/run/KeychainCheck2.app.zip
  2⤵
  PID:488

/usr/libexec/xpcproxy
xpcproxy com.apple.quicklook.satellite.AEFE418E-98DF-4393-92FE-44ABC4FF2693 511
1⤵
PID:524

/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
1⤵
PID:524

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:525

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:525

/usr/libexec/xpcproxy
xpcproxy com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:537

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
1⤵
PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.Terminal.2100
1⤵
PID:540

/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
/System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
1⤵
PID:540
- /usr/bin/login
  login -pf run
  2⤵
  PID:541
- - /bin/zsh
    -zsh
    3⤵
    PID:544
  - - /usr/libexec/path_helper
      /usr/libexec/path_helper -s
      4⤵
      PID:545
  - - /usr/bin/locale
      locale LC_CTYPE
      4⤵
      PID:546
  - - /usr/local/bin/lsd
      lsd
      4⤵
      PID:547
  - - /usr/bin/lsd
      lsd
      4⤵
      PID:547
  - - /bin/lsd
      lsd
      4⤵
      PID:547
  - - /usr/sbin/lsd
      lsd
      4⤵
      PID:547
  - - /sbin/lsd
      lsd
      4⤵
      PID:547
  - - /bin/ls
      ls
      4⤵
      PID:548
  - - /usr/bin/unzip
      unzip KeychainCheck2.app.zip
      4⤵
      PID:549
  - - /bin/ls
      ls
      4⤵
      PID:552
  - - ./KeychainCheck2.app/Contents/MacOS/KeychainCheck2
      ./KeychainCheck2.app/Contents/MacOS/KeychainCheck2
      4⤵
      PID:553

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:542

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:542

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountPolicyHelper
1⤵
PID:543

/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
1⤵
PID:543

/usr/bin/log
/usr/bin/log show --predicate "eventMessage CONTAINS[c] \"keychain\"" --style syslog --info --last 1h
1⤵
PID:554

/usr/bin/log
/usr/bin/log show --predicate "eventMessage CONTAINS[c] \"keychain\"" --style syslog --info --last 1h
1⤵
PID:555

/usr/bin/log
/usr/bin/log show --predicate "eventMessage CONTAINS[c] \"keychain\"" --style syslog --info --last 1h
1⤵
PID:556

/usr/bin/log
/usr/bin/log show --predicate "eventMessage CONTAINS[c] \"keychain\"" --style syslog --info --last 1h
1⤵
PID:559

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:560

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:560

/usr/libexec/xpcproxy
xpcproxy com.apple.tailspind
1⤵
PID:561

/usr/libexec/tailspind
/usr/libexec/tailspind
1⤵
PID:561

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump_agent
1⤵
PID:562

/usr/libexec/spindump_agent
/usr/libexec/spindump_agent
1⤵
PID:562

/usr/libexec/xpcproxy
xpcproxy com.apple.security.agent
1⤵
PID:563

/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent
1⤵
PID:563

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportCrash.Root
1⤵
PID:564

/System/Library/CoreServices/ReportCrash
/System/Library/CoreServices/ReportCrash daemon
1⤵
PID:564

/usr/libexec/xpcproxy
xpcproxy com.apple.ReportMemoryException
1⤵
PID:565

/usr/libexec/ReportMemoryException
/usr/libexec/ReportMemoryException
1⤵
PID:565

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

CodeResources

Path /Users/run/KeychainCheck2.app/Contents/CodeResources
Size 2KB
SHA256 9925d7cd5d759cc0ac8e300b3c71f7db9651bc9c4f13b658b05798359e7bb26e
MD5 5c5a4bc0bff7c50960ac51c61000950b
SHA1 04dc2453ac9fa8b80e9bb9d3c01ae3b74635aa90
SHA512 869e2151c7001b1466bf4329932c6b0b51cfab8f7387669bfb4f39f1a0f495ad7d1eb040762f9ddc3a8b79225b643431ed3c273554b732d0666cdb864de629af
TLSH
T12041A5AE9A103094DF71F9D4C3C0D86BAE7403EE9BC75062204088D624E9BAA1725B3E
MD5 SHA1 SHA512 TLSH

Submit Download

libswiftAppKit.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftAppKit.dylib
Size 217KB
SHA256 ce226a1bdf1dd073092a62d8bf6b2455455f47e038b9909e2fcb0cdfa8b279f3
MD5 f7df35c25d18937a2e8042b47abfe742
SHA1 03ab1cf298819913b3e42e6d1164d967340f1f92
SHA512 1a11ce427971bc8f7704a329ed194eba0d8eaf1b53dcc9d47dc01716b34d14829f02c21afc73f0e3c32f645c84d553afbc3d2226f2e8ad980be02949f0fabd80
SSDEEP 3072:n2l1GzmZ2wOlFryRZHTb/XH7TKjF+ndYjO3yA8zR/PmrIL3Z5TzySPv/foITzNrI:ioFP6r0vpGT8Ma0UwL
TLSH
T113244C4723715E3AD66BE039CB6FD9080B24F6429A2613AED7A45531FEA57221F13C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCloudKit.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCloudKit.dylib
Size 201KB
SHA256 c560301563c752fbb735c8bfa876aad1c4b5a4db147137825c1d2415da6449d2
MD5 225922c5c0945ef0528ec1d4bb61a05a
SHA1 83a9d09ed623c204a61f981299154016f156af19
SHA512 65af702dd9b207b4b81f80aad7463b2e259b0eb6cde60f7ea669461295923c23f6c8de2dc388a9f708e4ec119cced01872249f05e232b19d3bdfdeed4236db5d
SSDEEP 6144:nGLPyXy0L9hHvT5/VGyQq8qZA06DK8Rl5R7e:VXy0BhHvT5/VGyQq8qZA06DK8Rl5R7
TLSH
T1BC1407572A53B925D07AF5368A7F53011330BB6178D9E74E73C0EA65BE226B06F13C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftContacts.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftContacts.dylib
Size 67KB
SHA256 033e57a67ea6719a2d69eab5347c74373d5a00c33775d87769819ade93683123
MD5 6bdde626223ba7ba191917e499f5b5f0
SHA1 0c1ffbbcee781c9c3af519ce5843b30c451b8807
SHA512 8b7dfba61fdcd9454d3581e9302d61ceda973b7e22e1307f0e6f1e3db8306dace3a1ab939633ca596f474dd93708db9a4e47a2a70f2fcea968939bd7ac7ce3e7
SSDEEP 768:T/ObL7LTGIcqnunsWrd/Ose3pi1S/m7iZTj3I+hmVeLRpSWOGZ80tamab8K:abbTGjEVZTtLKp
TLSH
T1A963F9971B123027E46D50B68AF6A1027070B719BA1241EAF3D1563727F5FB1EF8398E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCore.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCore.dylib
Size 6.2MB
SHA256 0fbde150edf89559457d7eb3841c3798138687c336cc6c53d9ecbe19a01abaae
MD5 7ec484110b90d6e87bb37ab08bb36dba
SHA1 50afc163dfaefbaef294374f1abb6858ada5b4f7
SHA512 ded2e4ce49f535e8eca367484f51859c013e685ac1cd28088492112e40b0343dccd880b39b21c94b8fb1a80e74ade2f318d3c1131702ac6130e198b68cf23fa7
SSDEEP 98304:rgpE3ltAx2iIgRvDSTdzM4qwgwAUuiJ7AglPhvffkESUyGsr:qolt7iI61wgwAm7Ag
TLSH
T119567C3F65A29D0DC2ADD070498F7A022871F4B157563DA417C4BA3A6FBAC91270EB4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCoreData.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCoreData.dylib
Size 96KB
SHA256 c8b30f3213a171efcea2655be717d535cb01cd9ba5d4bdced660ac4e0ab9b57c
MD5 119989dcfbcec14202308417265aa658
SHA1 032d19973d2fc46196e7067209e51149d0fbf24f
SHA512 59a6206601fbfb21c99e68ef2c4b040111dcee9d501fc3122ecde4d0b28350d7e06fdbc2a305e0d6a26963668096b4a0eb60c64f49630206c7019fb228ef411d
SSDEEP 3072:cSFjQPAUCtvlZWjAj4n26VQxWTWOrbok7qF2V2LCSR69oQCNVzUgV51kGqmz4kcV:LF1b6
TLSH
T1F7A383970BB6343BDA6A123340BBC9326870E90B2FD669B697A14DF0259F664370750F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCoreFoundation.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCoreFoundation.dylib
Size 41KB
SHA256 f87e05d3f7d749625751ff138e26da70fa20342e0e72b920f293ff516b151b02
MD5 e4868ca96fd3468755527c799c4efae1
SHA1 341a33033a513c091d28ff96761f7902e0e77a0e
SHA512 570df17fea5722d3a9c699108514a9c8c0367baf421f6f85c0ebeebf7cce0fa2068000626a62430729ccb7ef13e1c271d99c812637c3c012bdb2c54f4c16cfdd
SSDEEP 384:Szy3JOg2r+Q8Srg64krFiEr8keLkrNab8er:SzSJOD8+Vamab8
TLSH
T1FE13199707543421ED5C95B102DAA253AE72F2893F23106AF069D5B02B37FB41B974ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCoreGraphics.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCoreGraphics.dylib
Size 186KB
SHA256 78e4c166ce4fd0c62e2fffa73ce54508e2082279506360e650d58c1d75445125
MD5 f6e697733b97e17e2186f94dfcd766db
SHA1 fde7251c7c9fd01d1e5274ebf7a54a65068b0131
SHA512 4dd55728ad43698cdf7505f538935e4301741a30f24d069171dcad6a570b746ab27690a4f2a5106a2fe4c08087f2c83c04f4939dd0046740162ccaba4d24d338
SSDEEP 3072:2a1kZDjzHXI9TH85JojH4bLQfWXO6sI9Zr6vzEOMbOWLdL:H1kJvHXD5LDAyx
TLSH
T16514D65BF6622C5CCC6DC8704E9E22513415FDF827624B5EABF05035BA66E306E12BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCoreImage.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCoreImage.dylib
Size 49KB
SHA256 6e90e432a8c104563566202baf183daeb03c02a88a7dd4055a7b4345146e0c95
MD5 92e79799493f798e0c404efbaac23843
SHA1 ed68fc6dd5aa47a94ab90ca21f40596f20b175c9
SHA512 33529fabe1027db95cddb5d911b8f808db29f64d9aeb54709edfb329c9b7845184cb95919d0421aff12ec7257ac0389b192fc38af803a2a051e451dd72daaf9f
SSDEEP 384:5CHkWI5r+Q8Srg64UrSVmHwr8keLkrNab8erP:5CHkb38h0Aamab8i
TLSH
T1D233F89B0B743532EC98A17456CA63029E32F3897F63016AB09584F13B37F751A5B5DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftCoreLocation.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftCoreLocation.dylib
Size 53KB
SHA256 7a305aec00f2796a309e6378d2a829b1c64f15b9244e2f7561e3954da6aa1877
MD5 b139cdf0afdfcd70a96e76e5ad85d8c6
SHA1 fcbb2110e616dc86c1cb8b20370fde1dacef5f01
SHA512 227b7200ff337dac1ea0501e743779a91f4e4cad76d0277b79125cb92dd85ec975833c8b9ac6abc0ac3ac30c961e6209f0ce144b5cd90cfc2fad07a258e925dc
SSDEEP 384:lYlbnuxxqWO1aHJZr+Q8Srg64UrsG4Jr8keLkrNab8er:lYlbuzqWO1aHV8zG4ramab8
TLSH
T18F432A8F17587162DAD95076C2CB61438972F2CEAF632159B164D0B03633FFC3A1B95A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftDarwin.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftDarwin.dylib
Size 97KB
SHA256 a480458b753c20bd6af3041a5a01d9c374b0661e9e071efc4f2bb0bb1a49f9c6
MD5 be8da572eaa1fcd1439dc169a588c3e8
SHA1 0c710080351fb3d78b92f02d36569f4906af8add
SHA512 75ea85010d1d4bd10110f8ddd9b0df1a643fe4d5ccf3b905d54d25c0544453e707867fc1d5940470e73b4dcfbaffa94a9f216e48e13a9dc48c5fa10c25a90274
SSDEEP 3072:7cicIA1+T36lxD8DBnVK4rywrcXARZTFW6D5BNTEiQvg8Mw/F3OFga0u6kXIohea:7cs1elxD8DBnVK4rywrcXARZTFW6D5B7
TLSH
T1A9A3E69E2E63B827D625D835C8A767919933F5B84F0276195F98F0BE4E32BC0360191E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftDispatch.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftDispatch.dylib
Size 320KB
SHA256 a3c3b6e938ddc9b2b5c762e505e3458383e42246c851a7db01cca7d13f433d51
MD5 e87de0555b95ed415f25e49c7b3a67b9
SHA1 6b03c8a16e84abdc869f0c55d659989f3a301667
SHA512 1fba1ef78c1e1f1d00986a563f2d796576c5442b2b6f7bfaa4ef5e6e2990b898b4783cfb6471048cc33f85f96b28680c8ab8f38f06b16611a4f62ebd462a1746
SSDEEP 3072:1o5uaLj93SCgAQ6DSEcKeeGkAgHujrJWbBZ7ohXs1bQvo8d:a5R9iqOEcKbAgHMWbBZ7oS1bC3d
TLSH
T17E64B6FAD2E24E24C4348078837F79221723F47193712768E764B2A56E7ED546E1FE0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftFoundation.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftFoundation.dylib
Size 3.0MB
SHA256 8cbf2235a4a3d09e34576bb40d3f459a2f13cb6ce392ae4e0bb7244774523da0
MD5 7c372db53c87e828d78f25cf19a16707
SHA1 3bd55ab857c65b4e49d1f46b2da5dc8e6be1dde6
SHA512 4bf41ef8a8b9f81481f94d6b7efdc9027e3084681e6c276b92cf14789b9669ed764ae6e0cb1d2214d17e732219bc443047b465f522828512ecf9b765ac43311f
SSDEEP 49152:XwCROS1cNS83nxZXwcK9+EHdD7/26iN4LQy5gWwUGnnWEe+mgVL00cBPOtaFlIHw:gCd1cNn4p/X0fVYtBGt1GK3
TLSH
T1ABE5386B9F33A81CC17F807215BF69502530FB97B8523DFAE3945B741BE9861178A20E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftIOKit.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftIOKit.dylib
Size 44KB
SHA256 3545579b4cdb60c0cca17692dd3a41a2f14d823a05a8e25315fa584901ad1e3f
MD5 9484c7604e2ab4c991a0674d934f973e
SHA1 632efe0c90260297ea3b2be1a7a2b1dfc489243f
SHA512 ce9e13951d1992387b1f13dc32b6057b4d4b528d8f689d1b9429d818482c5c942981ee6bd1ec9d70ce72661139ce73467fb28ceaebd661154d039dea4dc553c8
SSDEEP 384:NXT+C9eYgFr+Q8Srg64krTr8keLkrNab8er:NX/y8Qamab8
TLSH
T1DD23E53F0F215335EC54D1B1C48719C12D76F2585E830082A2A6F5E23A2EB75BA6F66F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftMetal.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftMetal.dylib
Size 83KB
SHA256 d5383f862aa9207e2fa9006275a9e7b40465100402d8c951667419093a6178d9
MD5 269716874f1ed6b5502b5a49fdbfda6a
SHA1 26b26c6816081eee1e33d8429941541924bd4b94
SHA512 b8b5d7844b01c7fcda7216f3e40c2a826a0e08bf6a3233153bd0257e79292b2acd0a033fd406500c9ded4b5e7cebd2a69a87c6bacb1c5099f31570b7a38e82c0
SSDEEP 768:/Lbjr+chkNwxGlsMg/Knbekt+9PPGFP2Dx8wamab8I:HjrDkNwxGlsMgybekt+9PWuDx1LK1
TLSH
T126832A932A547421CD6C517601DF2A432931B782BE12566FB3D187E65F33F8A34239EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftObjectiveC.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftObjectiveC.dylib
Size 61KB
SHA256 079188e0af27f1fe3d6363ece21964a4673740649524cee8007cb7d9b6dd1d5d
MD5 2b7e3a768ec7c0ce20ef1752bff12ced
SHA1 9fb3049da661fd99d0d8e4cfe8b730c167ff2119
SHA512 bd0d744375a980eae43642f0b6d7fa5b2b5234d65aabce89f216be2d957c9cdfe2d1e7af640e30f1197ecd919ba32433bdd5a429dd0f8bb026006a8089643150
SSDEEP 768:ZkOcK3OeaZz1WICjm6PP9hDBPNBPRNPm4ecfKwoZvtmE+82wab8e:2tCVJCK
TLSH
T182532A636310F855C9A9C0B201DEA351C9D1F1C6AB4292D6F3A0C5FD9F9B2703B1668F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftQuartzCore.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftQuartzCore.dylib
Size 57KB
SHA256 63d017c5032efeb7528f066d9ce683cd1091637f2cfa3104e9b3bad7233d577e
MD5 0181946d81a02bda707a2842faa58387
SHA1 308040f219e0a3f46868e7a7bbaebae613a42e8b
SHA512 9f7a7ec623c99c854f46419cd46a073e6679683d855311e74086fc6d7d57c6c7186cc8c34eda65394e18e08ef22e7fbf94dfa2237d253fc3bbb301845e01b18d
SSDEEP 384:zznYXgVbobGr+Q8Srg64UrTiLrQrMirNab8erh:zznSicbk8zLrwab8e
TLSH
T17843095B2F4D7022DC18A17446CA7B63B931F34DBF6710DAB060A1A53F33BB4295399A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftXPC.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftXPC.dylib
Size 45KB
SHA256 89298fb5533439da534feae83eaf4b8b74a21a0868f2451c7366208204b8baa0
MD5 5d6bf769af14f5df428e3f656a4520c1
SHA1 16411f9d1af947cd592ad20b9f198776f96de2f4
SHA512 b15f84d158ada61c25f8cc781f59cad18b63d1ac12e932fc0ce906aa6c9298dda7d15a699ca63ff4898d47da385b642983f66f2744768520a8a6e65f20c6213f
SSDEEP 384:9zY/PHP/L2SK7f/r+Q8Srg64kr12oQrMirNab8erhp:9za/iSKL58Vowab8e
TLSH
T13123F9472B243852EC994036014AD24299B3F2443FA6119FB1E294B01F77BF6BE9B7DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libswiftos.dylib

Path /Users/run/KeychainCheck2.app/Contents/Frameworks/libswiftos.dylib
Size 71KB
SHA256 d8b844c58c99c19a99a95151a42e76f77a7423cdfa9d5b1e3f0ae63d01e169ba
MD5 54fcf119610d14f92bd189c635e6af6f
SHA1 782e2dae784f041d456b61030e6c67e4e8341260
SHA512 9ab7a1db6b528256ed8af0fd4ff0ed52b63de348d0d95fd799d57f43ec07d37c152d3febee1231dc8299cca413d71d0c6694bf7d6345ef8151dc0daac7ef37ca
SSDEEP 1536:tEvB/fyVElB9IbxKoy+b9i5H9dPc/cFUauVrVVwaewjK:tEJHmn
TLSH
T1A3635B6F2A28B424C49C807B064E57637F32F10E6F051589F3E8A5B17FB2F92161768E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Info.plist

Path /Users/run/KeychainCheck2.app/Contents/Info.plist
Size 2KB
SHA256 c82d126415fc7ed4f634dffe66e6175738c4d169221cfec6be07462f5c317dc5
MD5 973cfd8ab09935d565d06d0a67e548d6
SHA1 1a7d1ac4db048d1d13d603576112dea251eb2d5f
SHA512 c80c74f88786a7e4af9e72668a1e29c3e9664d4e696d3a77a2714900ddc591c9813697576f3dfad74eb87a6c49180717b0f12376fca2e88e0a25cbf24a59b88c
TLSH
T17D41DFF60E1C399D1EC112A71AD2510E01DD71CC5D3266FEFDC79A28BD0E806A2B5EE9
MD5 SHA1 SHA512 TLSH

Submit Download

KeychainCheck2

Path /Users/run/KeychainCheck2.app/Contents/MacOS/KeychainCheck2
Size 279KB
SHA256 008f8978150f73d4f9489a5f3367b038870b703bb1e04c42cbd311f296f8df26
MD5 96bea0c11c983b69c14113d9d784799f
SHA1 d5461c2f45c77926489423f4b81764e5acf0ddf5
SHA512 4bc08e8c7321cc213ac19e3556196ca691ea620b9b76c548783e4c8a34e3ad746db45bdc8fc792a1b12e5b5f7a948dcc1a716f0491dc51b83d9df08dbee6591f
SSDEEP 3072:WLtRTQR25rcx8vfchjtf/v4xFzTcNcAQpwSQpRGramAL:k8RQO6cbwxOXQpwNRGeV
TLSH
T18C547CD36F48681AC0A9A13E4557E3517733F90A9F12037A7B80973C6E73BB45B2790A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PkgInfo

Path /Users/run/KeychainCheck2.app/Contents/PkgInfo
Size 8B
SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

Submit Download

AppIcon.icns

Path /Users/run/KeychainCheck2.app/Contents/Resources/AppIcon.icns
Size 960KB
SHA256 b095dc1d1fbc5c59aae288c439b527197b1d032184a9f5c047909cfa13568651
MD5 bd3b96c37d869fb4e49f60d9e1e1baed
SHA1 eea4ed20eb14c3e77c8e5dbb9d9672acbd62c66a
SHA512 fb28689606f2f090b71a71092652b84c5ee61922fc16f66f6633633925d48de7180e3e9f7d34c98dfa34e11a6be2460abbcbe831b43e51fa62a8e6640e4811fb
SSDEEP 12288:vxtaqTz0TzQgiUsVbROZ6hegiUsVbROZ6htlsR2pfGZksywKx/1Uvgn5aydF9ICq:3aqcviJRZfiJRZhsOfrs519ydntMP
TLSH
T1FB252352EFDABB52F6F79836855E96340C218C6936E55F900DA870CEFCEE350A29003D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assets.car

Path /Users/run/KeychainCheck2.app/Contents/Resources/Assets.car
Size 928KB
SHA256 4f6097992ed2fdba5ef7806186cbbb730a3061de1826fddfd2812a065bf52d3a
MD5 29a098646dcf81d880b50ae24538d1f4
SHA1 b23fb8de03c5f448f87e107bdec35abbc904cc80
SHA512 4a05f11ca9d7102900024b297163f19e695ffa8708d8907454eb14fd1d5d004deeb580fa6c81dbc86f75a55c73135d1b7e9e5d134cb8199f9778b3eab54d4499
SSDEEP 24576:JTubpYw7k6CLeKhCLeKlep/D7IJylxasxsjKW1JKbpYw7k:hub676CLeKhCLeKlepBBsxKb67
TLSH
T1521523E61AEC2497CC352DFB23529350672149A554320F6E9EA1943F3DF458B80CAFAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5gI-5U-AMq-view-ERx-hH-rdd.nib

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/5gI-5U-AMq-view-ERx-hH-rdd.nib
Size 20KB
SHA256 cbdccdc4385818d337444157a62e9fe733ba85bb895cdf309a7f209f32a9994a
MD5 9cc860f46d059752e467630db124429c
SHA1 185e7fd079758fec6a123d19e496e7cef52c6c9f
SHA512 969be71c45688741a19ef445af52f7060d2525603c4a25ff94a33423f5ec739d84b0febf4c7281231c941df17ddb40f9d1fbb55bf7ec513cfaf4e710e409782a
SSDEEP 384:RSrIgFshE0FeEYNg7mgclYWN5oE3o4jEYNg7Aw6x358skMoYfe:RqIg+9eEYyUYWN5rcYyja3ebSe
TLSH
T1FA925DB9B37FD374F97BE13470612E43E7623A55CB7086161252AD9301E0804E6CEBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Document Window Controller.nib

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/Document Window Controller.nib
Size 4KB
SHA256 cb2e7205ab4265f42adb40b38a37912a0e1b07b5c796ff60d6aac2564397ca38
MD5 cf8cad8ef59d386549724b1f7359c0ee
SHA1 8f6d962e66ceb1d26b4c2d1eae1fad00580d756e
SHA512 909d8defc1b8968a4c04c2f9c0011b2e8b36644ebd682c9dddd428162d5759b9ac4c6f40bb555b925ce5f884da1eafd96b510012aa64f9145141edb65d7e7e28
SSDEEP 96:AIv1Wp1322Z1ckhuKk/MIwbiJw+q91VM0:/v1Wp1FMYX/vd
TLSH
T15D81F942103AD3E4C3DBA4707303FB2A7240789BC74CF46755C2A6E29E7290186AB7DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Help Window Controller.nib

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/Help Window Controller.nib
Size 3KB
SHA256 0182a3bc0c93c118347ff627d5c65de901572a432ed13d067eaf40f661d2e5ba
MD5 dffb95553839fcb00e6a4de0f80f02cd
SHA1 b3c651bc1f2ad9daaded770a8c9360f63383860d
SHA512 804e5d67126f926ef955f939e20c2ec1f447ae5614b0e37815eebed0dc743c654890aaef011906f66fc89e4e98e2d032d68a71c579b4f6af8dfb69008969dc4f
TLSH
T151810892503AC3A4C5DB80B17212AF035640B4A7C79CB0BA1543FED1AB63A05469BBEF
MD5 SHA1 SHA512 TLSH

Submit Download

Info.plist

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/Info.plist
Size 421B
SHA256 0f55854ab7347dc2a5ed54076769b1c1f28e9ae05e9e439af12eca46025cd9e1
MD5 f199dd045e84e4d519def5eba2091a36
SHA1 c43a62aab56b8ddc30bfc666bdc94cf790d9bb0b
SHA512 a1db48686127fb374007a62257e0985e0ee17fc42d61cd578fb02434c34fdd89578353b46709529fda7a7f9820a22f0be6d178db0d0cdfb738e95f7708bf5b85
TLSH
T1FBE061A000B813B4C351467CFB139F1A25F3A1F57F44759721C47D8048E236614EB58C
MD5 SHA1 SHA512 TLSH

Submit Download

MainMenu.nib

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/MainMenu.nib
Size 36KB
SHA256 42b8290a6797b70f2da0fb1eecbeff555243af77e23e60f24e615a6eef1c804a
MD5 e741d908d700741a544fa9f4d29312a7
SHA1 45dc8811be356fbc58a8cc9cbcd392e9f817071b
SHA512 afec10f52f7a78dc065092fada13e40283f1a4396d29255268b8d78321f6f440bf53f3d98babba92d1f2dc9523bb545d728353b0f9a75f3de5f73ecf1eafd9d6
SSDEEP 768:7rHDgG1ugYuD9dBHGkQjJyo9W+kxXYC3DXuz:7ngGggLv9FlDXuz
TLSH
T194F2F73ED44AC675A35FDC06EDFAA062CC113844E6B0C9A7869E57D32F4E94ED4CB242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qWP-lu-BCG-view-G0x-ba-oSe.nib

Path /Users/run/KeychainCheck2.app/Contents/Resources/Base.lproj/Main.storyboardc/qWP-lu-BCG-view-G0x-ba-oSe.nib
Size 3KB
SHA256 f75082d6bcc8f10436bcd6e8c4ef5af8297650b0976c511c2c440a12d025ee29
MD5 9a28ba816cef142e6f984b780d59bb92
SHA1 6aa7bb132224f370df1b9c698dfdeff94b8847ba
SHA512 e17585f38429d6a13ed8eb6ddeb251003df2e914e480f8c46c9dcc3077eb5c180aeeab556f4b406177e2833d5883dc5d34cc549f7ff590ad3493de5feaa20531
TLSH
T1325109A31010C630C7DF9A7372695903AA706D43DB28B12D81B7CED363B271552DBADE
MD5 SHA1 SHA512 TLSH

Submit Download

KeychainCheckHelp.pdf

Path /Users/run/KeychainCheck2.app/Contents/Resources/KeychainCheckHelp.pdf
Size 910KB
SHA256 0a9c99b2e3fceab04841352d58c3558d6a44d6dbc210c7e5412f391f5cd73c82
MD5 8a1db2f7ec1803a34617631f38b6f8af
SHA1 61f52883938f3749662403f1ed69ff71116283cf
SHA512 0b7eaab32e42e7e13f95a9535ccafbd1a2affe704666335da37f7332b8d9e1d3cc5516394d1bcea6fd092d5f8b485ff0744a6fd68198ea67786907d046c82a7f
SSDEEP 24576:YeC8fXhc1ShR4ZiEnTkIb8YFK5krOc4C+Sd+0Q3uxgt:Ye8shaiEQIb8eK5krO/C+SLQexy
TLSH
T15115010BDA90A8DFD505DF22032BBAE582B83A7B799D5F060F641D153E9B0CCE723945
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CodeResources

Path /Users/run/KeychainCheck2.app/Contents/_CodeSignature/CodeResources
Size 13KB
SHA256 5583d187f8852a467679d4632bd2fd8173431c32e5867e7fb86d58bab69f8c9b
MD5 4ffa8fc85819b9a0f91d1ba99021c583
SHA1 45dc51c67a6d271d4f78feaef17931ca1d883fb1
SHA512 a1719f697e8a02f53c9dbdaca2089ae298ab4e1ba23e55a686740a8d5b544efa25237dc4367954a0aa1af17d612abcaebd427fc31d5161c9bf707f29e4f7a133
SSDEEP 96:CyT08fRvVGb7tRFSy0HPS4wVFSey7SW6bSvRhnGSL+GSjmyeS9IISSi/SvRfmScZ:XzSKhfo+0EDzko
TLSH
T1BE5299F19D9D2FE22888127E0603119A49DFF8E5BD365572C9839073BE31F0A76B4385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tailspin-trace.2026-04-28_01-19-57.tailspin

Path /private/var/db/spindump/tailspin-trace.2026-04-28_01-19-57.tailspin
Size 15.7MB
SHA256 f0bb51cd23d077e955616696e9f21511791464442a176c32dd583fd240b4d1e9
MD5 de1c7c7ea35e27e46667787e30650f43
SHA1 ad14543267c42de3264e68216dbc56128a1834a1
SHA512 08bb0fbbe2bdc08c2213713852c9079ce95f0de758a667c80f81b41acc25438cef858b46be9c367d65b050cb6cb7def07b36e15560d55af0afa3d150d82476c8
SSDEEP 196608:yMY34ghzyb3JOGslEm4IklvoCpjqwhNsqEEcMLvH3azeBXe9nI/:zY3nhebcGuRYom8EcMLv3CeBXonI/
TLSH
T194F66CB1AC46ECD1CDD1AAB10AD3956302B3B6F5EDA1527E54953FFD062A70308CB386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mdsDirectory.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
Size 47KB
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
TLSH
T19223BE475BA4DA72EA90357B903363BCDB69F667C346132F465CB0AB4C121802E6FD9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mdsObject.db

Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
Size 4KB
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
TLSH
T1B6919F479BA86A23DD90357690B3677CAF29E693D347031B428CB0968C122843E6FDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads