Analysis
- user interaction
yes - max time kernel
262s - max time network
276s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
10/08/2026, 06:22
Static task
static1
Behavioral task
behavioral1
Sample
Ricoh_IM_C3000_C3500_C4500_LIO_1.13.0.0.dmg
Resource
macos-20250619-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
Ricoh_IM_C3000_C3500_C4500_LIO_1.13.0.0/Ricoh_IM_C3000_C3500_C4500_LIO_Driver.pkg
Resource
macos-20250619-en
1 signatures
300 seconds
General
- Target Ricoh_IM_C3000_C3500_C4500_LIO_1.13.0.0.dmg
- Size 4.2MB
- Sample260810-g5b6pasfre
- SHA256 fe9f84d2c03cf06f7bad0d3845550e5c0f1149445cbffeb5054269945177f31d
- MD5 7b7458beeb924717d786ed13a553c14e
- SHA1 f8b50f47e69c2a088067b3986b9395f9652710e6
- SHA512 aadd6959e4b4bc32f517a323062234ec237a6c3c000648a3b3f862e85c11814c4ba9db7dc36fa67111e1cec0f8363e66bcf071d5f38f563eeb962ca889f3055a
- SSDEEP 49152:N1UKVyoyHIujyOBKOK51DgSx4x72J4JMQjlWXp0CBvzlVcshovSBfPcn871D2yAC:N1UxPRyOA5DJnPXppB7r7sQnD
- TLSH T1821633F4691FCC06EC40C5F13F0257707E69420B999588AAE6F3885DB4F4BB1BCE2965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Resource Forking 1 TTPs 13 IoCs
Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.
ioc Process /System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update -c Process not Found /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper Process not Found /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/pstopsRV2.app Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/Generic/Filters/pstopsRV1.app Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/shove -f -s /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root / Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd Process not Found /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd Process not Found /System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Utilities/AutoSetupToolRV1.app Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/commandfilterRV1.app Process not Found /System/Library/PrivateFrameworks/PackageKit.framework/Resources/install_monitor -t /private/var/run/installd.commit.pid Process not Found
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""1⤵PID:519
-
/bin/bashsh -c "sudo /bin/zsh -c \"installer -pkg /Users/run/setup.pkg -target /\""1⤵PID:519
-
/usr/bin/sudosudo /bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"1⤵PID:519
-
/bin/zsh/bin/zsh -c "installer -pkg /Users/run/setup.pkg -target /"2⤵PID:520
-
-
/usr/sbin/installerinstaller -pkg /Users/run/setup.pkg -target /2⤵PID:520
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.installd1⤵PID:521
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd1⤵PID:521
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Utilities/AutoSetupToolRV1.app1⤵PID:522
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/commandfilterRV1.app1⤵PID:523
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/pstopsRV2.app1⤵PID:524
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/Generic/Filters/pstopsRV1.app1⤵PID:525
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/install_monitor/System/Library/PrivateFrameworks/PackageKit.framework/Resources/install_monitor -t /private/var/run/installd.commit.pid1⤵PID:526
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/shove/System/Library/PrivateFrameworks/PackageKit.framework/Resources/shove -f -s /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root /1⤵PID:527
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update/System/Library/PrivateFrameworks/PackageKit.framework/Resources/efw_cache_update -c1⤵PID:529
-
/usr/libexec/xpcproxyxpcproxy com.apple.quicklook.satellite.71788FE1-E791-4E58-8C15-7C5DBB5CF3C5 5311⤵PID:533
-
/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite/System/Library/Frameworks/QuickLook.framework/Versions/A/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite1⤵PID:533
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:534
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:535
-
/usr/libexec/xpcproxyxpcproxy com.apple.quicklook.ui.helper1⤵PID:536
-
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper1⤵PID:536
-
/usr/libexec/xpcproxyxpcproxy com.apple.installer.21241⤵PID:537
-
/System/Library/CoreServices/Installer.app/Contents/MacOS/Installer/System/Library/CoreServices/Installer.app/Contents/MacOS/Installer1⤵PID:537
-
/usr/libexec/xpcproxyxpcproxy com.apple.metadata.mdwrite1⤵PID:538
-
/usr/libexec/xpcproxyxpcproxy com.apple.replayd1⤵PID:543
-
/usr/libexec/xpcproxyxpcproxy com.apple.ReportMemoryException1⤵PID:544
-
/usr/libexec/xpcproxyxpcproxy com.apple.system_installd1⤵PID:548
-
/usr/libexec/xpcproxyxpcproxy com.apple.storedownloadd1⤵PID:549
-
/usr/libexec/replayd/usr/libexec/replayd1⤵PID:543
-
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd1⤵PID:548
-
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd1⤵PID:549
-
/usr/libexec/ReportMemoryException/usr/libexec/ReportMemoryException1⤵PID:544
-
/usr/libexec/xpcproxyxpcproxy com.apple.Safari.CacheDeleteExtension 5411⤵PID:552
-
/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension/Applications/Safari.app/Contents/PlugIns/CacheDeleteExtension.appex/Contents/MacOS/CacheDeleteExtension1⤵PID:552
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:553
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:553
-
/usr/libexec/xpcproxyxpcproxy com.apple.StreamingUnzipService 1861⤵PID:554
-
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService1⤵PID:554
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:558
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:558
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.agent1⤵PID:569
-
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent1⤵PID:569
-
/usr/libexec/xpcproxyxpcproxy com.apple.security.authhost.00000000-0000-0000-0000-0000000186A61⤵PID:572
-
/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost1⤵PID:572
-
/usr/libexec/xpcproxyxpcproxy com.apple.quicklook.ui.helper1⤵PID:577
-
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper1⤵PID:577
-
/usr/libexec/xpcproxyxpcproxy com.apple.TextEdit.20921⤵PID:578
-
/System/Applications/TextEdit.app/Contents/MacOS/TextEdit/System/Applications/TextEdit.app/Contents/MacOS/TextEdit1⤵PID:578
-
/usr/libexec/xpcproxyxpcproxy com.apple.quicklook.ui.helper1⤵PID:583
-
/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper1⤵PID:583
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/RICOH.balanceadjustment.pkg.bom
- Size 36KB
- SHA256 0b0dea976b0501f7b504689bd57a39f1d0fe8384879c3677d579b76d86bae586
- MD5 ce19b00275f08b858bbe2ad771ac281f
- SHA1 49202142368c8d80cbbe074ef1ed7e7b20d288a0
- SHA512 96976af3c2d50f7370f85db5a9f8a1614fcbcc2ad5f938f6da80f27eb373ce1ee2db3150f19e02e34b31ff9c134e689144e261c513dac6ed9dafadb7884be14e
- SSDEEP 48:W7JSCQjAWVAElU28yz8wV+hyLd2LSpmmt:WACQbV5U29zVkhygSpmmt
- TLSH T1C8F20081590BAC2CD57C813B8DB729C01F0DD194F80DAFE3508BCE6588F99899F5EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/com.RICOH.print.IM_C3000_C3500_C4500.ICCs.pkg.bom
- Size 34KB
- SHA256 511838cdd82461a892709876e97ec9a45dcb7d1a51d820ab16e4cbe572ed045d
- MD5 41f395335bbd487d197580002bb73898
- SHA1 dfc63a779512809a224946b72a7757dfebf96890
- SHA512 3803973205a055a64a856bf82e42bc1c0687d7f2509831d1d799e846141d763d86759b46fa9ca84b0b6a9a595d6f34faab448da99b62b5f0a3188bc2332226ac
- SSDEEP 24:RWz6i7AQ4gtmgXMrXB/XNXK5XeXuYrCxTqyA+:k9AqFgd9GujwT
- TLSH T14FF290928711D135D17C42BA7DFADE227A509000F9FACD0B8087849DD9853EADF47B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/com.RICOH.print.IM_C3000_C3500_C4500.icons.pkg.bom
- Size 34KB
- SHA256 23320c81b201691203896238ff03310c90905a255b3fc2f4d15967ed9b355717
- MD5 8ad7ac16f44e67317d48ef9bbb65d48a
- SHA1 7f1af582e5a61e951cf13f3b00e4ab144e3ee90a
- SHA512 aa75d1753c3701cffcfd0bd6f3164cb75e98d809b3ae53705c56a6da2d9153afbe2c36692b457f960585d584d289fb5c84e4dc64a98b556d6e200f3cb74db6c1
- SSDEEP 12:jVAzPLLCiWvIbwchjfc6CtmNS1Dx10pepWj1eGJnPUrIzryeTav0fYP:mz2igEZcdtm4xseHrET0
- TLSH T1D3F2FC0B6B44413ED4480B3A49F6BB097A05D184FAD76E0B404588819C85788EDAFE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/com.RICOH.print.IM_C3000_C3500_C4500.ppds.pkg.bom
- Size 34KB
- SHA256 0b6b05c8c67cfd7afb85a2dfa6fca2eb3a61226b322559900ad3305610406d50
- MD5 29ea9656c8a349862d010bf69a9ea81f
- SHA1 30ee5daf3997c58d7861ca82711655c3e126f747
- SHA512 a475256919a8daf13b0ad85e6404c3642b3772346f3f52f729f7a00edde94e508ec2e9bdc064c156f1de1e48e1a86e4a26cc811b3827ecc6f23d197fb3adfe7b
- SSDEEP 24:dzR1ji7Ai9dA6pPtmRf708f0NS2oOZK+mgkf0yury1wIXlgl:9eAGRgfM5KtueHXl
- TLSH T18DF267965B104274D618037B7DBB4ED66F04E840FA8EAEDB309714A0C8C46C9AF1B99D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.autosetuptool.pkg.bom
- Size 34KB
- SHA256 18c39173cc0f0e71d8419945071e80140bee3132f18918677ddbf65a600b8efa
- MD5 623abbae4e862248714ac18d70be5ab3
- SHA1 f9b17e2ccca33da6d9f79a34e61fe9858f511ca6
- SHA512 22dae3ef793d0837cae9fe3b49ac5579b60106f03eabcbee0478b86370ac7e5f92f97f21605af8647a6ba2ee246bfe3252e3d484cafcd5d2139a1254551e9c65
- SSDEEP 24:izbixraKUtmLv84tTSkEv3TlrH9stHsr7f+zGSyr:O0raX4vSDstHsv+z
- TLSH T1FEF2BA470B804A35C11C4A3BA8935A281AA9D210FDE4DF0F00C900858CDD399EE4BB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.backgroundnumbering.pkg.bom
- Size 36KB
- SHA256 804a7daa7e09ca5cd8bf521d087d50f18821b13f809c4e0419980e01b6eb7f79
- MD5 ccdf3eb762131fa4a614993c985031df
- SHA1 5a32abb0fc41bf65ecd7fca17c8c2b0be1247ad9
- SHA512 6349cca19931728ab8b44994723e3461a546663f2e811056249062c985ae1e576b3600031361c037aa5b4a5fe0d2f484275bc1c52c5dae3d11d4f6c870a9c5fa
- SSDEEP 48:SJSCkHNhV/ETOA5CTWw1iXjZwDzxU70b+/7NoEv/KOp:3CEHV8TOnTWw1rWob4/p
- TLSH T1D5F2FE8358019C11F5EDC73389937AE00B1881B5FDDC6FEF8487DA0585DA982AF5BA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.commandfilter.pkg.bom
- Size 34KB
- SHA256 938cfa513d18d694ed0941173b85e63db7ae92a2a9fcb6584d7e841ea73930a4
- MD5 a77cf760f551f5db69aaa24079295597
- SHA1 b9ce02da961419e75e09111819922e7658614db4
- SHA512 6d5d846e8e52f3426227d7658dc9cc23ccefdd901071bdf5baa066c82f4bad0b37f11344de6e1dc837354d3e2d20d3c9bb95800e21de877f92896d800e3ec43f
- SSDEEP 24:FzR1jixjl9dA62WtmxGilHtQtT+foblGclTQ2st7MtmtxdKJh7r7f+zGSyMre:FojDBeGi9sB7sthBKHv+z
- TLSH T121F2FE075A406525C25CCA3BA4C3AD34271CC270FECADF8B808B924688E9747EE17E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.copycontrol.pkg.bom
- Size 43KB
- SHA256 78baaa273447a1f5697c41be62f723af006a91c811f8efdde31314ba401fe7dc
- MD5 f276f90f9ccddb6902ccb45bda7d5420
- SHA1 01f13b511f185642b60377fdd06013406a3d5ee7
- SHA512 351c33104c85086c8fe68f11d587d4d8f775636f2bf91f1afe1891772fbbaf35ba58ca38679b0fd3947bb2af36ef652b500474c67634e6ed4a3b66a8a1e273de
- SSDEEP 192:wqWWmE8BGG8Uz0PHW6p2inuwOeP2JX368FvKwCd0fKxsg6KOLtD5jJOhqOiGgOV6:wt69U6bjZAJaYPSxeb1VOeOmCEX6PY
- TLSH T1621337C227025D15C9BC03355EB24BC81F99D1E57B2BB9A7B0869150E4AEAC46F3E3C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.cupsfilter.pkg.bom
- Size 34KB
- SHA256 00cdf6275006be88f1c41cf73af3b6f93fb1a42f147c725b7f3d2746d502939d
- MD5 e21cdcc0dca570787e7f3868e6127b54
- SHA1 caf8b8e1ed1da8f51c7b055fe9fc778266aff2a1
- SHA512 8fce05499d6c78da7f4de0005c03cdb57580f21e9aa157844fb34f54c45cb4089564daae2099bd4f98a0b2e35a21b10bebd25a99698ac515918c031503618e06
- SSDEEP 24:1zbixraKzEtmsutTKvcq2stHQ55YrC5pJ:10razWstH5ux
- TLSH T15FF2BA864E404436C118063F989BAF052711C040FAC9DF8B80DB45098CE5F8BDD93A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.gencupsfilter.pkg.bom
- Size 34KB
- SHA256 e354f2f502ae08d739c483abf2277d709b0c52d19b07347faa6cb84102219c03
- MD5 023ff3ef37547498b96f583328355d51
- SHA1 c95506f7d663b86bdb595f3f6e7a09bed3f7f77c
- SHA512 e11ba4aa444ade2993dff6ff6a5a2098b947e252d22949be458d46b847414aac64cebc608acba0d52114a2d605cadcfd83e3edcc4f2e4dddf5b671b0e805f3f7
- SSDEEP 24:1zbixraKzNtm/+W4icAFcVtTHcRvD0hzWSBk7RstHfJYrC5pJ:10raAg+W4icecHcx0ZWSIRstH6ux
- TLSH T12CF2D98B5E404932C13D063FEA87AA097711C044EEC9DF4B91898550C8CA369FDA7A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.genjoblog.pkg.bom
- Size 36KB
- SHA256 820e04ec24ace1c9f6356273357fdceaa3783cb267ac257ad94620cb79d783af
- MD5 aa74e55916dad0a83b7dd2fb9642e187
- SHA1 94d108c98d9a50b1a56c27c04e2c519bf3f592f0
- SHA512 c194a2e54f2cf3ce1ec71aeab96476b08f71ded86e10c1689240442759d7fcbb346373cd7b176547b0ce9e787e3fbc9c1c8050e4e190ee0ced28cc782f00f99e
- SSDEEP 48:cjSZkHpef74RcZSJ3yg5hKx8QT+z/MCvXYmGDX9c2J:bWHsfqcZ5zT+zU2Ymoc2J
- TLSH T141F29AC34D03AC21C56E453799BAD8941F088185F91DAFE34087B6168FF99C7AF1EA26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.genuserAuthentication.pkg.bom
- Size 37KB
- SHA256 69dbc141ded152dd985f48cb8dda8361aacf87dc5011b1f626e16f2084f5db10
- MD5 f37ae19597dfa8cfb0920c64d2c5082a
- SHA1 0b933a8b3fe869531a8d0a9bf4f44e010362180d
- SHA512 4f79d5996fc56899c6ec32aededfecc6027a0b02a5a6848ec35d0950b809419771fd99b1fe25e1edb8105a3727ed59e000cbb8bbb4dca940a6231272c6a463a2
- SSDEEP 48:LBsSFSR2mQRuTcC68Xdl3l5g8dZCuyANF/KnWr/Hv4lCHHaJvs:Lpxm8scCRXdlV5gWZCuyAf/5fBnaJvs
- TLSH T1EF03BD8398036C21E5AD45324FB194840F888185AE1FEEE7C497F451CEF4987BFDA6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.joblog.pkg.bom
- Size 36KB
- SHA256 bd83c98456f49472463e5c6e669bbb7829365ed9f1ed9c7a223f065dd641fb79
- MD5 7f652e66da2cbc9a0f58f8931d1a5774
- SHA1 d2aa3683056b05275bf91dae7114b87e2e917e3b
- SHA512 aa5c730f7d7aee2cd66285662dc98a54ce2d08f9e95393e5b8178464f2812814db18503a4d1286fe2f6b67043ac2b3ca21eea6ce8e4c0a98dce8c27ba8192438
- SSDEEP 48:cjSZkHpefR/ReAOuUmorhYcAj9iT+z/MCvXYmGDX9c2J:bWHsfxRejuUscT+zU2Ymoc2J
- TLSH T1E3F29B434503AC21C56E4537DDB6D8841F088295FD1DAFEB40CBB2864DF9987EF1EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Boms/ricoh.userAuthentication.pkg.bom
- Size 37KB
- SHA256 17f7c3a15ba8938f59ee4ed18e94247cccd64cec7955edf48be0628f23de901c
- MD5 e20db4bb2034a2c23f5f570b235ef68b
- SHA1 0aa8e9bd4607e948bb9a9fe54e9f833c28883b6e
- SHA512 f5d528602bed2f93d2cd4e9bce1d7c84d00203bb397a8f56ced0f8b0f09c2036d8e0a11a081485154e0e8216429f78aaa671c2eca43cd347a0d2d884c6618033
- SSDEEP 96:Lpxm8scpIllE0KlKgxYC9LAf/5fBnaJvs:Lpc4Is9LCfBnc
- TLSH T18C03AF8354036C11C5AD473ACEB294850F88A195AC1EAEE3C4D7F411CEF498F7F9A66A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/Generic/Filters/pstopsRV1.app/Contents/Info.plist
- Size 1KB
- SHA256 794fea4adf038dc465e7ff2986cb14ed4b65218b61113029d6a84ddb1e0a8cf8
- MD5 63c58e762d03563ec69707b373194f10
- SHA1 97870230f7adedf6c320203e81d917033b3032c6
- SHA512 2c3e0eda1aef73378ef9a1d0c9d22773266e5bb3a9bae4e808b278dc08f401d008fb3adec97f124b9f20dfd1748be28adab9195bfd5cafcc60f99395c6632102
- TLSH T103213BF10E0C39982CC1126647D2514E12DC61CC5C7332FEFEC6A66CAE0E806A375BD4
- MD5 SHA1 SHA512 TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/commandfilterRV1.app/Contents/Info.plist
- Size 1KB
- SHA256 9e85af2f2ba55482c22178eb6c6df428f0435711991f82e244d45b01185ce93e
- MD5 41aef0ea30d8209638ca21244f212731
- SHA1 b9c353dd88d1c1d5f9afc33002c8bd4e737de062
- SHA512 8e32a7c2eb319cc1c69e42d0d364390ff27b452f42ef1c47b3613eca73b5eed853ebe7c5581860e8ce98a03bc772a085d8d3e4c9fed76ffdb16ccb19a22919a2
- TLSH T19F2127F60A1C39992CC112665BD2514F01DCA1CC5C7332FEFEC5AA2CAE0E802A375AE5
- MD5 SHA1 SHA512 TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/commandfilterRV1.app/Contents/Resources/English.lproj/InfoPlist.strings
- Size 92B
- SHA256 39cf2ee07b7b333e7c179d0bf4d798a5b72af6a4e584f51e642703bbfa4fc828
- MD5 51ef59b60e5b41b91519cc662a9fe886
- SHA1 3222ca0c39eb50aaf8126baf852e55430c4718af
- SHA512 3952a908b72d44040f5072f6344f6327fc78981c3aa55e931acae84c0c9bcc0d148991cd564af4803765c328cbf5f7efe9eb558fc56e47e8206b7b706026f30a
- TLSH T129B0120052F83800F1F24F2428B450506EB83C001C70229D225050290460A00C270733
- MD5 SHA1 SHA512 TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Filters/pstopsRV2.app/Contents/Info.plist
- Size 1KB
- SHA256 64a50a3740848ba0e1d6a7657569683065f2260292d9c62ccd3f59bc9fde707c
- MD5 0bb1411d4f285a692f6d8092f477a631
- SHA1 365ba57de23fb521783fe6a2b6404b1517bca0be
- SHA512 53dc450bb8e2591867ae12fa681c8f7aeadaa898142fc09e16441fa0b46b9c9ceff576dfc24de37dcb6342f8fcd0f7c1ee208b56dd86b171f72d055ec2f85339
- TLSH T1442136F50A0D39982CC112665BD6514E02DC61CC5C7332FEFEC5AA6CAE1E806A371AE4
- MD5 SHA1 SHA512 TLSH
- Path /Library/InstallerSandboxes/.PKInstallSandboxManager/A6F8F629-9E8E-4397-9F5C-77D6CF41A19C.activeSandbox/Root/Library/Printers/RICOH/Utilities/AutoSetupToolRV1.app/Contents/Info.plist
- Size 1KB
- SHA256 4eaf01adab4acc9701eb26942c41dc57bb087c589c9983740213f20b03a77752
- MD5 af27e64953947820c3b60a577c1f3615
- SHA1 b4e7ad9de04cad88cac67967241cf682161c791b
- SHA512 029c2df431b91a2ddc6ef9584dc79aad0c9a9c7dbb8eaa77b740ff33b6f89027b142664c354e6c28a20679a4e51ff33f2ef0d92de47e09715f8a1a289597468e
- TLSH T10B2105F60A1C399D2CC112665BD2514A01DC61CC5C7232FEFEC5A62CAE0E802A279BE5
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/RICOH.balanceadjustment.pkg.plist
- Size 285B
- SHA256 150d0129c3aa91d8c702bd3607ddec6251854ae07f6bcf3235e48812fb309d39
- MD5 5ec60749883d58dbb7c3b56fa90ca2f0
- SHA1 7e6a258daa92f6cb869efbff567751ac80a481d5
- SHA512 14715fc428bc39638b6c2d85e6cb37fedcf6984613ee52e4e310077ba77f461694cd0b5d12a62c9378f6a5cb43aa72da6e0d00ba4cbf160fdfc3228be2c820a5
- TLSH T198D095625595C471E7DE073C77170E9717DCB544D493214373C11C511F93544485FF11
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/com.RICOH.print.IM_C3000_C3500_C4500.ICCs.pkg.plist
- Size 281B
- SHA256 550089e8ad9fb81a958c28cc6686f746363522510bc32e7907fc53d83c7f5064
- MD5 7acc02e3ea9427e09a16a1ee2d17b47f
- SHA1 4acdd09012b4a0700d855a1c50d116d4f7d54c39
- SHA512 ca1c9b13719836467b8ac7830587f6e6fd9779b6ab8124a0fdc307648bb42ea634bb39d7c0e14a9c485a906176930891df891a20e2404b4fdeddbff5b3da4ffb
- TLSH T163D02B0617A5D230D7D8073C7B238D93298934546992264283C15D526F427D48C13E01
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/com.RICOH.print.IM_C3000_C3500_C4500.icons.pkg.plist
- Size 283B
- SHA256 dd249668ae5f9d4064655bc87bbc9c8b7114c73b3d3e1d74fdc56584576d2397
- MD5 f2e55c729910509403f7ac223d3d217c
- SHA1 ca0f08f579a3257fceed6ded8c0c78083ac935b2
- SHA512 0c35997cd8a4adfc05f138c8c4d47bdcbcbe2c6dc339834df30a8b414148ab9dcc01778f81375629baeb91fe18bd9bcd2cd72d7c85a2e2cee888dc372a3f1a24
- TLSH T17FD02B0A15B5D133E7E9473D77139D936DCAB4446C426783D3C26D215F427549813751
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/com.RICOH.print.IM_C3000_C3500_C4500.ppds.pkg.plist
- Size 299B
- SHA256 2bd3fd488177ac7cda33d93c4a2dd45ebb1b2f4b5fc0a859920bbfb04813803c
- MD5 4bd442fdab17dc98ef43a3e2f23cd2fe
- SHA1 9e4f963dbb41aa5ddb78cac17c07286c2fca3e6e
- SHA512 253da83ed1ca0f9b3d8378badecc5949b9e25f7ccb13b047399a5c2eb3531c1e8d9d2ff62f7a697e930cd9f221e6edebd43bd4fb3d5975bf672cd9809c92d531
- TLSH T1E2E0EB0305B8D032DEEC0BBCB7128DE32A88384928626063C3C14CC21FC27408813A11
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.autosetuptool.pkg.plist
- Size 279B
- SHA256 607949d4e7e8da13546cd9dad73abc669be3b5ce459b309331cabafdc052698a
- MD5 520bdb55b0e9a917a133a8fe9d48a07b
- SHA1 9138e7bb7b3b36993ea6ba6b35017f675d23e965
- SHA512 19a4f92901c790bf4ce54dbf6762b4e976428ded975899387198913d276830ef0edf73672daca4d7d80d352b5153b58d30584fe1b1cd39d85900e73b68905f3e
- TLSH T19AD02B034D5AC334C6D90B3C3B170D434D9D34854D83664263C50CB45F81294C80F751
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.backgroundnumbering.pkg.plist
- Size 286B
- SHA256 35996efab4ee3f748004c0e4dc89bf82eeea70422daa35758f63a8024150f018
- MD5 8a4457cb46898041912f1d2f222c5519
- SHA1 fda01555e8a2d23db9e7069b3c1e99d48d93828d
- SHA512 e8134e2f3b5181d7c0c3a5782f3aca6c9b3fa7e4c0a50498d5c478249ec6b2b37b675c10a119e3c347f560b017a4672b9f48fa17ccf818e74217c4f8e78357d2
- TLSH T15CD02B0298D9C865F7DA0BBDA6239D870ADDB581D8636247B3CD2DA41F435815517710
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.commandfilter.pkg.plist
- Size 281B
- SHA256 134931d788cb8aa31eedbb10d903fdb25e95865c3268ccc2887b90356fa0eebc
- MD5 158a6017180fde1f44502b7e452cd87c
- SHA1 9883a4257fdf0067654faf5014b4dcfc59a8e834
- SHA512 6cb96efd4a8bca9a009258ebbce9cd028d6070e2205927b573ba42c33ba120d782715210a890b13549d297302f990472dcc53ae7d4029c6efb72bcca56282551
- TLSH T19BD02E5309EAC522E3E91A3CFB271C220EAAB5C08A026583A3C60E641F43548C40BAA0
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.copycontrol.pkg.plist
- Size 272B
- SHA256 fb8511bd093ae00d1adef1e40de8062d44d1b2ea987b641fdb4bf210b9f9dc68
- MD5 482d2770987f19f902dfd84221e81684
- SHA1 b32fec6e5b4aa1d74eb1b11d9482ba361176f823
- SHA512 7cf9818b58653a8f23348cd52fdaa4ce85a25a594b7f0a123d48facc49f109aa789d1cd5a834f7c0646060236286d9b0b1e744ac1648c257888d206fd64a50f2
- TLSH T121D02E02A8E8C2B1E6990F3C7B234D02299AF48299023A6363C10C902F83288850FA01
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.cupsfilter.pkg.plist
- Size 269B
- SHA256 f4d4e824cf3982bef001707c50219f8ea6e2f52d43ee6486c5ca8cbc83db4745
- MD5 e8e6a591f69946766a6de82cda69762a
- SHA1 367fc7f66f36eeb8301285f97721b26514b598e7
- SHA512 efba87637dc4c9bfe3e39214081e6c79145173ed442bd0d9a41fd6684fc35d62a7ef73da407a6402d0500202779c3c2728e4091175c75f7e9d77d5292813f45b
- TLSH T184D02E821AD9C821E6EA0F3CBB230DA20AADB4D04D032253A3CA08501F83A98C40B620
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.gencupsfilter.pkg.plist
- Size 280B
- SHA256 237e3024a4c0cead8cb2213e280ee6358316efc3e39226dbbb632715d9713002
- MD5 47bcdcaa5802a65b01e3417376b72b69
- SHA1 8c89c6ca6d29137910fd98217edcf7433ee66923
- SHA512 87871da506148c102fb42569cc5a02a33b4f001aa067b8cbf0a904d8bf3c5eddeca83c154f6d19568c534cf4cf7ddd576b5dd1b229dad09af42e1df2e2a321d4
- TLSH T194D02B8504D5C535D6AA1E7CBB220E2206A874C64E02240353CA08A05F43958D81BB60
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.genjoblog.pkg.plist
- Size 268B
- SHA256 29df3d136d8d63b9fa219d67274fd08c03dd439bfb9c1e6e1ecf306a019cc0aa
- MD5 f01167a92b4688abf7b4f52900566f1e
- SHA1 b79126750b8429bbfa9bd3f908e38a96bfb9f1b0
- SHA512 60f5e85779dd3dede12aa120d10041b70f6c712cbb280fab1a9c0da14de42c4cdf420bac08450e39ee77e6cd6e4ece4bbc0483594893202b50ef142c9b5c7bd8
- TLSH T191D095021ADCC132F6EA0B7C36234C22269D78854C03755373C508602F416444837745
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.genuserAuthentication.pkg.plist
- Size 294B
- SHA256 670dce48cc73983b906d7b86e5db724b9c0a275b04d284edead8586b3622d1ef
- MD5 489ca6b39dbb21fd30744b17fc0e8bf8
- SHA1 361ef93a467fe2e00943d32c9687dc8754845694
- SHA512 bd942d76e4c6fdf0eef203a2142e234152c78508976ae228e860f30631caa60b241cda44465d6d18975edc9c3f171ea21fecc148255c6f82cceda21fdedb3316
- TLSH T104E0EB031598E532E3EB1F3C5B620CD367EA34950C42741323C60C503F012488203A89
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.joblog.pkg.plist
- Size 260B
- SHA256 0113f071322db294803aa049df4dc7b74a3495c3d19ec65ae0bd2be6a46c88b7
- MD5 1dea84767b4704570324c53c8ae084c9
- SHA1 21d6f42224c190e830b3b244b4e958031df89234
- SHA512 06763a325e274ef12d32b7d5cc11b5903bbe117e7d87fab662e36136d37e61a390638d4637ce5df86077046cffae7150a7364d7507c9dc2a5c54e1be3b986796
- TLSH T19DD097030ADDC021FBEE0B3C6B236C12298D7984580322A3B3C90C604F82248581BF04
- MD5 SHA1 SHA512 TLSH
- Path /private/var/db/receipts/ricoh.userAuthentication.pkg.plist
- Size 286B
- SHA256 3265f77e062cdfb247073c0c65fb13e1373815720b3300bdb200e2188593fded
- MD5 276665cafe04c3011fc9259f887a46f3
- SHA1 4b8a99a340b67e11dffd5c5b75cc82030c707556
- SHA512 a1af18db4147eec83d4b2544c2abd7781ca386a5ebecd6c2a3f4a08125171eab8d035836984bcbca826c85dc63baaebb18b5800859dba63ae8000d641ddfa868
- TLSH T138D02B4345C8D421E7EA4B3DA7130D8A179A74541C93755373D90C546F421444607745
- MD5 SHA1 SHA512 TLSH
- Path /private/var/run/installd.commit.pid
- Size 3B
- SHA256 72933e3b31f0070af6478edc3becf96e1ee59917620e8c509cf0e6b360e29c02
- MD5 07563a3fe3bbe7e3ba84431ad9d055af
- SHA1 91afc4c2917059721285db729422445840ce77e8
- SHA512 f7d6f279091df1acee21a7ad0b46f986fd8629318ebc8acb115e40a979beb9a6f1c170a018d77108d2b47ed05a10ff91ef5f71b11b761e34e26287fc491582b2
- MD5 SHA1 SHA512
- Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsDirectory.db
- Size 47KB
- SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
- MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
- SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
- SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20
- SSDEEP 384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
- TLSH T19223BE475BA4DA72EA90357B903363BCDB69F667C346132F465CB0AB4C121802E6FD9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C//mds/mdsObject.db
- Size 4KB
- SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
- MD5 d3a1859e6ec593505cc882e6def48fc8
- SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
- SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818
- SSDEEP 24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
- TLSH T1B6919F479BA86A23DD90357690B3677CAF29E693D347031B428CB0968C122843E6FDDC
- MD5 SHA1 SHA512 SSDEEP TLSH